tvaje Privacy Policy

1 Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for your personal information is tvaje, the operator of the online casino and sports betting platform accessible at https://tvaje.org. tvaje is an internationally operated platform serving English-speaking players in Bangladesh.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our dedicated privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within five business days of receiving a written request
• Language of correspondence: English
• Operating hours for support: 24 hours a day, seven days a week (Bangladesh Standard Time, UTC+6)

This Privacy Policy applies to all personal data collected through your use of the tvaje website, mobile-optimised browser interface, account registration process, payment transactions, customer support interactions, and promotional communications. It should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the overall framework governing your relationship with tvaje.

2 Information We Collect

tvaje collects personal data through several channels depending on how you interact with the platform. We collect only the information that is necessary to provide you with a safe, compliant, and enjoyable betting and casino experience. The categories of data we collect are set out below.

Registration & Identity Data

When you create a tvaje account, we collect the following information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification purposes — players must be 18 or older 18+);
• Email address;
• Mobile phone number;
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code;
• Username and encrypted password hash (we never store passwords in plain text).

Identity Verification (KYC) Data

As part of our Know Your Customer process, we may request and retain copies of the following documents:

• Bangladesh National Identity Card (NID) or passport;
• Driving licence with photograph;
• Utility bill or bank statement dated within 90 days, confirming your residential address;
• Selfie photograph taken at the time of verification request, used solely to confirm the document belongs to you.

Financial & Transaction Data

When you make a deposit or withdrawal, we collect and retain:

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard);
• Mobile wallet number or masked card number (last four digits only for cards);
• Transaction reference numbers issued by the payment processor;
• Deposit and withdrawal amounts in Bangladeshi Taka (BDT ৳);
• Date, time, and status of each transaction.

Betting & Gaming Activity Data

To manage your account, resolve disputes, and ensure fair play, tvaje records:

• All bets placed, including market, stake, odds, and outcome;
• Casino game sessions — game title, provider, bet amounts, session duration, and results;
• Bonus activations, wagering progress, and bonus expiry events;
• Responsible gaming tool activations (deposit limits, session reminders, self-exclusion requests).

Technical & Device Data

Automatically collected when you visit or interact with the tvaje platform:

• IP address (used for geolocation and fraud detection);
• Browser type and version;
• Device type (desktop, mobile, tablet) and operating system;
• Pages visited, time on page, and navigation path within tvaje;
• Session duration and login timestamps.

3 How We Use Your Data

tvaje processes your personal data for specific, legitimate purposes. We do not process data in ways that are incompatible with those purposes. The table below summarises the primary uses of each data category and the legal basis under which that processing is conducted.

Marketing Communications

tvaje sends promotional emails and account notifications about bonuses, seasonal offers (such as BPL promotions, Eid specials, and Pohela Boishakh cashback events), and platform updates only to players who have opted in to marketing communications at registration or through their account settings. You may withdraw consent and unsubscribe from marketing emails at any time by updating your communication preferences in your account dashboard or by emailing [email protected]. Unsubscribing from marketing emails does not affect transactional notifications, which are necessary for account operation.

4 Data Sharing & Third Parties

tvaje does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We share data only where it is strictly necessary to deliver the services you have requested, to comply with legal obligations, or to protect the security and integrity of the platform.

Categories of Third Parties We May Share Data With

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners (Visa/Mastercard network operators) receive the minimum data required to process your transactions — typically your account reference, transaction amount in BDT ৳, and payment method identifier. These processors operate under their own privacy and security frameworks.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers to deliver their game software to your browser. They do not receive your full name, payment details, or contact information.
• Identity verification services: Third-party KYC providers may receive copies of your identity documents solely for the purpose of verifying your age and identity on tvaje's behalf. These providers are contractually bound to process the data only for this specific purpose.
• Fraud detection and security partners: Anonymised technical and behavioural data may be shared with fraud-detection services to identify suspicious patterns and protect all players on the platform.
• Legal and regulatory authorities: tvaje will disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.
• Professional advisors: Lawyers, accountants, and auditors who are subject to professional confidentiality obligations may access relevant data in the course of providing services to tvaje.

International Data Transfers

Some of the third parties listed above operate outside Bangladesh. Where personal data is transferred internationally, tvaje ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements with adequate security standards, and restrictions on onward transfers — to protect your data to a standard comparable to that described in this policy.

5 Cookies & Tracking Technologies

tvaje uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the platform effectively and to understand how players interact with the site. This section explains the types of cookies we use, their purpose, and how you can manage your cookie preferences.

Types of Cookies Used by tvaje

Managing Your Cookie Preferences

Essential and security cookies cannot be disabled, as they are necessary for the platform to function correctly and to protect your account. Functional and analytics cookies may be disabled through your browser settings. Please note that disabling functional cookies may affect your experience — for example, your display preferences may not be saved between sessions.

Most modern browsers allow you to review and delete cookies stored by individual websites. Consult your browser's help documentation for specific instructions. On mobile devices, cookie management is available through your browser's settings menu.

6 Data Retention Periods

tvaje retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

When data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with your identity. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

7 Your Rights as a Player

As a player whose personal data is processed by tvaje, you hold the following rights with respect to that data. To exercise any of these rights, submit a written request to [email protected]. We will respond within five business days and will ask you to verify your identity before processing any request.

• Right of access: You may request a copy of all personal data tvaje holds about you. We will provide this in a readable format within five business days of identity verification.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to overriding legal retention obligations — see Section 6 above.
• Right to restrict processing: In certain circumstances (e.g., where you contest the accuracy of your data or object to its processing), you may request that we restrict how we use your data while the matter is reviewed.
• Right to data portability: Where technically feasible, you may request that we transfer a structured, machine-readable copy of your personal data to you or to another nominated service provider.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, subject to tvaje demonstrating compelling grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Complaints

If you believe that tvaje has not handled your personal data in accordance with this Privacy Policy, you have the right to raise a formal complaint. Please contact [email protected] in the first instance and allow us five business days to investigate and respond. We take all privacy complaints seriously and will work to resolve them fairly and promptly.

8 Data Security Measures

tvaje maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include both technical controls and organisational policies.

Technical Safeguards

• 256-bit SSL/TLS encryption: All data transmitted between your browser and tvaje's servers is encrypted using industry-standard TLS 1.2 or higher. The padlock icon in your browser confirms an active encrypted connection.
• Encrypted data storage: Personal data stored in tvaje's databases is encrypted at rest. Encryption keys are managed separately from the data they protect.
• Password security: Passwords are stored only as salted cryptographic hashes. tvaje staff cannot view your password in any form — this is why password resets require a new password rather than recovery of the original.
• Payment data isolation: Full payment card numbers are never stored on tvaje's servers. Card data is handled exclusively by PCI-DSS compliant third-party processors.
• Two-factor authentication: Players are encouraged to enable 2FA on their accounts for an additional layer of login security.
• Intrusion detection: tvaje's systems are monitored continuously for unusual access patterns, login anomalies, and potential data breach indicators.

Organisational Safeguards

• Access to personal data is restricted to tvaje staff and contractors who require it to perform their specific role. Access is granted on a least-privilege basis.
• All personnel with access to personal data are subject to confidentiality obligations and receive regular privacy and security training.
• Third-party data processors are vetted before engagement and are required to sign data processing agreements committing them to security standards consistent with this policy.
• tvaje conducts periodic internal reviews of its data handling practices and security controls.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tvaje will notify affected players without undue delay, providing details of the nature of the breach, the data categories affected, the likely consequences, and the measures we have taken to address it. We will also take all reasonable steps to contain the breach and prevent recurrence.

9 Updates to This Policy

tvaje reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account at least seven days before the changes take effect, where reasonably practicable. The revised policy will also be published on this page with an updated "Last updated" date.

Minor amendments — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — may be made without prior notice. Such changes do not alter your substantive rights under this policy.

Your continued use of the tvaje platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you must stop using the platform and may request account closure by contacting [email protected].

We encourage you to review this page periodically to stay informed about how tvaje handles your personal data. The "Last updated" date at the top of this page indicates when the most recent revision was made.

For all privacy-related enquiries, including requests to exercise your data rights, please contact our support team at [email protected]. We are committed to handling every query with professionalism, transparency, and care — because at tvaje, your trust is the foundation of everything we do.