tbd88 Privacy Policy — How We Collect, Use & Safeguard Your Data

1 Introduction

tbd88 is an international online betting and casino platform that serves players across Bangladesh, including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We operate a broad suite of gaming products including live casino games, sports betting (with a particular focus on cricket — BPL, T20 World Cup, IPL, ICC events, and Bangladesh Tigers international fixtures), slots from world-class studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe, as well as crash games and specialty titles.

In delivering these services, tbd88 necessarily processes personal data belonging to our registered players. We take this responsibility seriously. This Privacy Policy has been written to give you a clear, honest, and complete picture of our data practices. We use plain English throughout so that every player — regardless of technical background — can understand exactly how their personal information is handled.

This policy applies to all personal data collected through the tbd88 website at tbd88.io, any associated mobile application, and all communication channels including live chat and email support. It does not apply to any third-party websites or services that may be linked from or integrated into our platform; those third parties operate under their own privacy policies.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the licensed operator of the tbd88 platform, operating under an international offshore gaming licence. As data controller, tbd88 determines the purposes for which and the means by which your personal data is processed.

All data protection enquiries, subject access requests, and consent withdrawal requests should be directed to the tbd88 Data Protection contact at [email protected] with the subject line "Data Protection — [Your Username]". Our English-language support team handles all data-related requests and operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

3 Data We Collect

3.1 Data You Provide Directly

When you register a tbd88 account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotional offer, you provide us with personal data directly. This includes:

• Your full legal name, date of birth, and residential address (required for KYC and age-verification compliance).
• Your email address and Bangladeshi mobile phone number (required for account communication and OTP authentication).
• National Identity Card (NID) number, passport number, or driving licence details (required for identity verification).
• Payment method references including your bKash, Nagad, Rocket, or Upay registered mobile number; bank account details (where applicable); or USDT wallet address.
• Any documentation submitted as part of the KYC process, including scanned copies of identity documents and proof-of-address documents.
• The content of any communication you send to our support team via live chat or email.

3.2 Data Generated Automatically

When you access and use the tbd88 platform, certain technical and behavioural data is collected automatically by our systems. This includes:

• Your IP address and geolocation data derived from it (used for fraud prevention and compliance with any applicable geographic access restrictions).
• Device identifiers, browser type, browser version, operating system, and screen resolution.
• Session start and end timestamps, pages visited, games launched, features interacted with, and in-game event logs.
• Referral source data (how you arrived at the tbd88 platform — e.g., direct URL entry, referral link).
• Cookie and similar tracking technology data, as described in Section 6 of this policy.

3.3 Data Received from Third Parties

tbd88 may receive personal data about you from third-party service providers in the following circumstances:

• Identity verification and KYC providers may confirm or supplement the identity information you provide during registration.
• Payment processors (including mobile money operators such as bKash and Nagad, and banking partners) provide transaction reference data necessary to reconcile deposits and withdrawals.
• Fraud prevention and anti-money laundering screening services may provide risk scores or flags associated with your account based on their own databases.
• Where you access tbd88 via a partner referral link, the referring partner may share your basic contact data with us for the purpose of attributing the referral correctly.

4 How We Use Your Data

tbd88 uses the personal data we collect for the following specific purposes. For each purpose, we have identified the relevant legal basis in Section 5 of this policy.

1. Account Creation and Management: We use your registration data to create and maintain your tbd88 account, authenticate your identity at login, deliver account notifications and transaction confirmations, and manage account settings and preferences.
2. Age and Identity Verification (KYC): We use identity and documentation data to verify that you meet the minimum age requirement of 21 years, confirm your identity in line with KYC obligations under our gaming licence, and prevent the use of false or stolen identities on our platform.
3. Payment Processing: We use your payment method data to process deposits in Bangladeshi Taka (৳ BDT) via bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard, and USDT, and to process withdrawal requests to your nominated payment method.
4. Customer Support: We use your account data and communication history to provide English-language customer support via live chat and email, resolve complaints and disputes, and improve the quality of our support services.
5. Fraud Prevention and Security: We use technical data, transaction data, and identity data to detect and prevent fraudulent activity, money laundering, match-fixing, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
6. Responsible Gaming: We use your gaming behaviour and transaction data to monitor for signs of problem gambling, enforce responsible gaming limits you have set on your account, and identify players who may require proactive support or intervention.
7. Legal and Regulatory Compliance: We use your personal data to comply with applicable legal obligations under our international offshore gaming licence, including AML record-keeping, reporting obligations to regulatory authorities, and cooperation with law enforcement investigations.
8. Platform Improvement and Analytics: We use aggregated and anonymised usage data to analyse how players interact with the tbd88 platform, identify technical issues, and guide decisions about new features, game additions, and user experience improvements.
9. Marketing Communications (with consent): Where you have opted in to receive promotional communications, we use your contact data to send you information about tbd88 bonuses, promotions, new game launches, and seasonal offers (including those tied to Eid, Pohela Boishakh, and major cricket tournaments).

5 Legal Basis for Processing

tbd88 processes your personal data only where a valid legal basis exists for doing so. The applicable legal bases for each processing activity are as follows:

• Contractual Necessity: Processing required to fulfil our obligations to you under the tbd88 Terms & Conditions — including account management, payment processing, and customer support — is carried out on the basis that it is necessary to perform the contract between you and tbd88.
• Legal Obligation: Processing required for us to comply with applicable legal requirements — including KYC identity verification, AML record-keeping, regulatory reporting, and cooperation with law enforcement — is carried out on the basis that it is necessary for compliance with a legal obligation to which tbd88 is subject under its gaming licence.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of tbd88's legitimate interests in operating a safe, secure, and compliant gaming platform, provided those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications is carried out on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, language preferences, and browsing behaviour — in order to make subsequent visits easier and the site more useful to you. tbd88 uses both first-party cookies (set directly by tbd88) and limited third-party cookies (set by our service providers).

6.2 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the tbd88 platform to function correctly. They enable core features such as account authentication, session management, and secure login. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display preferences, and responsible gaming limits — to provide a more personalised experience across sessions.
• Analytics Cookies: tbd88 uses analytics cookies to collect aggregated data about how players interact with the platform. This data is used to identify popular features, detect technical errors, and improve overall platform performance. Analytics data is anonymised where possible.
• Security Cookies: These cookies support our fraud detection systems by helping tbd88 identify unusual patterns of behaviour that may indicate unauthorised account access or automated bot activity.

6.3 Managing Cookies

You may control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will prevent you from using core features of the tbd88 platform, including logging in and placing bets. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7 Third-Party Sharing

tbd88 does not sell, rent, or trade your personal data. We share personal data with third parties only to the extent strictly necessary and only with parties who are contractually obligated to handle your data securely and in accordance with applicable data protection standards. The categories of third parties with whom tbd88 may share your data are:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard, and USDT network processors receive the payment data necessary to process your deposits and withdrawals. Each provider handles your data under their own privacy policy and applicable financial regulations.
• Identity Verification (KYC) Providers: Third-party KYC and age-verification services receive the identity documents and personal details necessary to confirm your eligibility to hold a tbd88 account.
• Fraud Prevention and AML Services: Specialised fraud detection and anti-money laundering screening providers process transaction and technical data to identify suspicious activity in accordance with tbd88's AML obligations.
• IT Infrastructure and Cloud Service Providers: Hosting, database, and cloud infrastructure providers store and process platform data on behalf of tbd88 under strict data processing agreements.
• Customer Support Technology Providers: Live chat and support ticket platform providers may process communication data in order to deliver our English-language support service.
• Regulatory Authorities and Law Enforcement: tbd88 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, a valid legal order, or the terms of our gaming licence.

8 International Data Transfers

As an international online gaming platform operating under an offshore licence, tbd88's data infrastructure involves servers and service providers located in multiple jurisdictions. This means that your personal data may be transferred to and processed in countries outside Bangladesh.

Where such transfers occur, tbd88 takes steps to ensure that your data receives a level of protection equivalent to that which it would receive under internationally recognised data protection standards. These steps include:

• Entering into data processing agreements with all third-party processors that require them to apply appropriate technical and organisational security measures to protect your data.
• Where personal data is transferred to a service provider in a jurisdiction without an adequacy determination, relying on contractual safeguards (such as standard contractual clauses) to protect that data.
• Conducting due diligence on all third-party processors prior to engaging them to ensure they meet tbd88's security and privacy standards.

By using the tbd88 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to tbd88's servers and service providers in the jurisdictions in which they operate.

9 Data Retention

tbd88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal obligation to retain data for a longer period. The following retention periods apply:

• Account Data: Retained for the duration of your account's active status and for a minimum of 5 years following the date of account closure, to satisfy AML record-keeping requirements under our gaming licence.
• Transaction Data: Deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of each transaction.
• KYC and Identity Documents: Retained for the duration of the account and for 5 years after closure. In certain cases where tbd88 has been required to file a regulatory report in connection with a transaction, documents may be retained for a longer period as required by the relevant authority.
• Customer Support Communications: Live chat transcripts and support email threads are retained for 2 years from the date of the interaction, for quality assurance, dispute resolution, and training purposes.
• Marketing Consent Records: Records of marketing consent (including the date and method of opt-in) are retained for 2 years after the consent is withdrawn, to demonstrate compliance with consent obligations.
• Technical and Usage Data: Anonymised analytics data may be retained indefinitely. Non-anonymised technical logs (such as IP address logs) are retained for 12 months and then deleted or anonymised.

10 Your Data Rights

tbd88 respects your rights over your own personal data. Subject to applicable law and certain limited exceptions (such as where retaining data is required by law or necessary for an ongoing investigation), you hold the following rights in relation to the personal data tbd88 holds about you:

• Right of Access: You have the right to request a copy of the personal data tbd88 holds about you, along with information about how it is being used. This is known as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by tbd88 be corrected. You may update certain account details directly through your account settings; for other corrections, contact our support team.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You have the right to request that tbd88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is under consideration.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to tbd88 in a structured, commonly used, and machine-readable format, and to request that this data be transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where tbd88 is relying on legitimate interests as the legal basis for processing. tbd88 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of a legal claim.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact tbd88 support at [email protected] with the subject line "Data Rights Request — [Your Username]". Please include your registered username, registered mobile number, and a clear description of the right you wish to exercise. tbd88 will verify your identity before processing any data rights request to protect against unauthorised access to your account information.

11 Children & Minors

The tbd88 platform is strictly intended for adults aged 21 years and above. tbd88 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the tbd88 account registration process, and all accounts are subject to KYC identity verification to confirm the account holder's age and identity.

If tbd88 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a false declaration during registration or any other means — the relevant account will be suspended immediately, all funds will be handled in accordance with our Terms & Conditions and applicable law, and all personal data associated with that account will be deleted as soon as practicable, subject to any mandatory retention obligations.

Parents and guardians who believe a minor may have created a tbd88 account using false age information are encouraged to contact us immediately at [email protected]. tbd88 takes underage gambling extremely seriously and cooperates fully with any investigation into such matters.

12 Security Measures

tbd88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and tbd88's servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all platform interactions including login, deposits, withdrawals, and live chat.
• Encrypted Data Storage: Personal data stored in tbd88's databases is encrypted at rest. Encryption keys are managed using a dedicated key management system with strict access controls.
• Two-Factor Authentication (2FA): tbd88 supports two-factor authentication for player accounts, adding an additional layer of security beyond a username and password. Players in Bangladesh can use OTP authentication via their registered Bangladeshi mobile number.
• Access Controls: Access to personal data within tbd88's systems is restricted on a need-to-know basis. Staff members are granted access only to the data necessary to perform their specific job functions. All internal access is logged and audited.
• Regular Security Audits: tbd88's platform and data infrastructure are subject to regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: tbd88 maintains a documented data breach incident response plan. In the event of a confirmed data breach that poses a risk to your rights and freedoms, tbd88 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

While tbd88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also have a role to play in protecting your account: use a strong, unique password, do not share your login credentials with anyone, enable two-factor authentication, and contact tbd88 support immediately if you suspect unauthorised access to your account.

13 Policy Updates

tbd88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes in the services we offer. When we make changes to this policy, we will update the "Last Updated" date displayed in the badge at the top of this document and publish the revised policy at tbd88.io/privacy-policy.

Where a change to this Privacy Policy is material — meaning it significantly affects your rights or how your personal data is used — tbd88 will endeavour to provide you with advance notice of the change via a site-wide announcement or by email to your registered address at least 7 days before the revised policy takes effect. Your continued use of the tbd88 platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically so that you remain informed about how tbd88 handles your personal data. If you have any questions or concerns about a change to this policy, please contact our support team before continuing to use the platform.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way tbd88 handles your personal data, please get in touch with our dedicated support team. We are available around the clock, every day of the year, on Bangladesh Standard Time (BST, UTC+6).

• Live Chat: Available directly on the tbd88 platform at tbd88.io. Average first response time is under 2 minutes during peak hours.
• Email: [email protected] — for data rights requests, use the subject line "Data Rights Request — [Your Username]"; for general privacy enquiries, use "Privacy Enquiry — [Your Username]".

When contacting us about a data protection matter, please include your registered username and registered mobile number so that we can verify your identity and locate your account records. For your security, tbd88 support staff will never ask for your account password, full payment card details, or OTP code during any data rights interaction.

This Privacy Policy was last updated in January 2026. If any provision of this Privacy Policy is found to be unenforceable, the remaining provisions shall continue in full force and effect. This policy is written and published in English; in the event of any conflict between an English version and any translated version, the English version shall prevail.