tbk33 Privacy
Policy

1. Information We Collect

When you visit, register on, or interact with the tbk33 platform, we collect a range of personal and technical data. The information we gather falls into the following categories, depending on how you engage with our services.

1.1 Information You Provide Directly

When you create a tbk33 account, complete the KYC verification process, contact our support team, or participate in a promotion, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality as shown on your government-issued identification document (e.g., Bangladesh National Identity Card, passport, or driving licence).
• Contact Data: Email address, mobile phone number, and residential address including city, district, and postcode.
• Financial Data: Payment method details including your bKash, Nagad, Rocket, or Upay mobile wallet number, or bank account details, as applicable. We do not store full card numbers — these are processed by our payment partners.
• Account Credentials: Your chosen username and an encrypted hash of your password. We never store your password in plain text.
• Verification Documents: Copies or images of identity documents and proof-of-address documents submitted as part of the KYC verification process.
• Communications: Records of correspondence with tbk33 support, including emails, live chat transcripts, and any feedback or complaints you submit.

1.2 Data Collected Automatically

When you access the tbk33 platform, certain technical data is collected automatically by our servers and analytics systems, including:

• Device and Browser Data: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited, time spent on each page, navigation paths, game sessions played, bets placed (game type, market, stake, outcome), and features accessed.
• Session Data: Login timestamps, session duration, logout method (manual or automatic timeout), and geographic location inferred from IP address.
• Performance Data: Page load times, error reports, and crash logs used to diagnose and fix technical issues on the platform.

1.3 Data from Third Parties

In certain circumstances, tbk33 may receive personal data about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction status, reference numbers, and wallet ownership details.
• Identity verification service providers used to cross-check the authenticity of KYC documents you submit.
• Fraud prevention and anti-money laundering screening services that flag accounts or transactions associated with known risks.
• Publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and adverse media registries, where required for compliance purposes.

2. How We Use Your Data

tbk33 uses your personal data for clearly defined purposes, all of which are necessary either for the performance of our contract with you, compliance with our legal obligations, or our legitimate interests in operating a safe and reliable platform. We do not use your data for any purpose that is incompatible with the purposes set out below.

Purpose	Data Used	Basis
Create and manage your tbk33 player account	Identity data, contact data, account credentials	Contract performance
Process deposits and withdrawals	Financial data, identity data	Contract performance
Verify your identity and age (KYC)	Identity data, verification documents	Legal obligation
Detect and prevent fraud, money laundering, and account abuse	All categories, device/usage data	Legal obligation / legitimate interest
Provide customer support	Identity data, contact data, communications	Contract performance
Send promotional communications (where consented)	Contact data, usage data	Consent
Improve platform performance and user experience	Usage data, performance data	Legitimate interest
Enforce responsible gaming measures	Identity data, usage data, financial data	Legal obligation / legitimate interest

2.1 Marketing Communications

If you have opted in to receive marketing communications during registration or at any subsequent point, tbk33 may send you emails or SMS messages about new promotions, seasonal offers (such as BPL season specials or Eid bonuses), game releases, and other platform news. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

2.2 Automated Decision-Making

tbk33 uses automated systems to assist with fraud detection, responsible gaming monitoring, and account risk scoring. These automated processes may result in account flags or temporary restrictions being applied without prior human review in the first instance. Where an automated decision has a significant impact on your account, you have the right to request a human review of that decision by contacting our support team.

3. Legal Basis for Processing

tbk33 processes your personal data only where there is a valid legal basis for doing so. The legal bases we rely on are as follows:

• Contract Performance: Processing that is necessary to create and manage your tbk33 account, process your deposits and withdrawals, settle your bets, and deliver the services you have signed up for. Without this processing, we cannot provide you with access to the tbk33 platform.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and data retention mandates imposed by financial regulators and law enforcement authorities.
• Legitimate Interests: Processing that is necessary for tbk33's legitimate business interests, including fraud prevention, platform security, network and information security, improving our services, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: Where tbk33 relies on your consent as a legal basis — for example, for sending marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4. Data Sharing & Third Parties

tbk33 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. However, in the course of providing our services, we may share your personal data with carefully selected third-party organisations acting as data processors or in specific legally required circumstances.

4.1 Service Providers and Data Processors

tbk33 works with a number of third-party service providers who process personal data on our behalf, subject to strict contractual obligations requiring them to process that data only on our instructions and to maintain appropriate security measures. These providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banking institutions receive the financial data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and document verification services that assist in confirming the authenticity of the identity documents you submit.
• Fraud Prevention Services: Providers that screen transactions and account activity against fraud databases, sanctions lists, and PEP registries.
• Game Technology Providers: Certified providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical session data necessary to operate their games on the tbk33 platform.
• Cloud Infrastructure and Hosting Providers: Secure cloud service providers that host the tbk33 platform infrastructure, subject to industry-standard security certifications.
• Analytics Providers: Services that help tbk33 understand platform usage patterns and performance, operating on anonymised or pseudonymised data where possible.

4.2 Legal Disclosures

tbk33 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of tbk33, our players, or others. In such cases, tbk33 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected player of the disclosure.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of tbk33's business assets, personal data held by tbk33 may be transferred to the acquiring entity as part of that transaction. In such circumstances, tbk33 will ensure that the acquiring entity is bound by privacy obligations that are at least as protective as those set out in this Privacy Policy, and will notify affected players of any material change in how their data is processed.

5. Cookies & Tracking Technologies

The tbk33 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by a website server. Cookies cannot execute programs or deliver viruses to your device; they are used solely for the purposes described below.

5.1 Types of Cookies Used by tbk33

Cookie Type	Purpose	Duration
Strictly Necessary	Enable core platform functions: session authentication, login state, security tokens, and fraud prevention. Cannot be disabled.	Session / up to 24 hours
Functional	Remember your preferences such as language, display settings, and recently played games to provide a consistent experience across visits.	Up to 30 days
Analytics	Collect anonymised data on page views, navigation paths, and feature usage to help tbk33 improve the platform. No personally identifiable information is stored in analytics cookies.	Up to 12 months
Responsible Gaming	Track session duration and betting frequency to support responsible gaming monitoring and alert systems.	Session

5.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair core platform functionality, including the ability to log in to your account. Instructions for managing cookies in the most common browsers are available through each browser's help documentation. tbk33 does not use cross-site tracking cookies or deploy third-party advertising cookies on its platform.

6. Data Retention

tbk33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide, subject to variation based on specific legal or regulatory requirements:

• Account Data (active accounts): Retained for the duration of your account's existence on the tbk33 platform, and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five years from the date of verification or from account closure, whichever is later, as required by applicable financial regulations.
• Transaction Records: Retained for a minimum of five years from the date of each transaction, including deposit and withdrawal records, bet history, and bonus usage records.
• Support Communications: Retained for three years from the date of the last interaction, unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved and any applicable limitation period has expired.
• Marketing Consent Records: Retained for three years from the date of consent withdrawal, to demonstrate compliance with applicable consent obligations.
• Technical and Usage Logs: Retained for up to 12 months from collection, after which they are anonymised or deleted.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with tbk33's data destruction procedures. Anonymised data — data from which all identifying information has been permanently removed — may be retained indefinitely for statistical and platform improvement purposes.

7. Your Privacy Rights

As a player or visitor of the tbk33 platform, you have a number of rights with respect to your personal data. tbk33 is committed to honouring these rights and will respond to all valid requests within a reasonable timeframe, and no later than 30 calendar days from receipt of a verifiable request.

• Right of Access: You have the right to request a copy of the personal data tbk33 holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update many account details directly through your tbk33 account settings panel.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that this right is not absolute; where tbk33 is required to retain data by law (e.g., AML record-keeping obligations), we cannot erase it prior to the expiry of the mandatory retention period.
• Right to Restriction of Processing: You may request that tbk33 restrict its processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing while tbk33 assesses your objection.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that tbk33 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where tbk33 relies on legitimate interests as its legal basis, including profiling for responsible gaming purposes. tbk33 will consider your objection and cease processing unless it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the rights listed above, please contact the tbk33 data team at [email protected], clearly stating your full name, registered email address, and the specific right you wish to exercise. tbk33 will verify your identity before processing any data rights request to ensure that personal data is not disclosed to or modified by an unauthorised party.

8. Data Security Measures

tbk33 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, the measures we employ represent current industry best practice for online gaming platforms.

8.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser or device and the tbk33 platform is encrypted using SSL/TLS protocols, protecting it from interception during transit.
• Password Hashing: User passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm, ensuring that even in the event of a data breach, passwords cannot be recovered from stored data.
• Access Controls: Access to tbk33's internal systems and databases is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and undergo regular security training.
• Intrusion Detection: tbk33 operates continuous monitoring and intrusion detection systems to identify and respond to suspicious activity on its servers and network infrastructure.
• Regular Security Testing: The tbk33 platform undergoes periodic penetration testing and security audits conducted by qualified third-party security professionals.

8.2 Reporting a Security Concern

If you believe your tbk33 account has been compromised, or if you discover a potential security vulnerability on the tbk33 platform, please notify us immediately by contacting [email protected]. Do not attempt to exploit any vulnerability you discover. tbk33 will investigate all credible security reports promptly and take appropriate remedial action.

8.3 Policy Updates

tbk33 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal obligations, or platform features. Where material changes are made, tbk33 will notify registered players by email and post a prominent notice on the platform. The effective date at the top of this document indicates when the most recent version came into force. Continued use of the tbk33 platform following notification of a policy update constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the way tbk33 handles your personal data, please contact our support team directly at [email protected]. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 14 calendar days.