tdaje Privacy Policy

tdaje is Bangladesh's premier online casino and cricket betting platform, accessible at tdaje.io. We take the privacy and security of our players' personal data extremely seriously. This Privacy Policy sets out in clear, plain English how tdaje collects, uses, stores, shares, and protects information about you when you access our website, register an account, make deposits or withdrawals, play games, or interact with any part of the tdaje platform.

This policy also explains the rights you hold over your personal data and how you can exercise those rights by contacting the tdaje data protection team. We encourage you to read this document in full. If you have any questions after reading it, our 24/7 English-language support team is available to assist.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the tdaje platform.

For the purposes of this Privacy Policy, tdaje acts as the data controller in respect of personal data collected from players using the tdaje.io platform. As data controller, tdaje determines the purposes and means by which your personal data is processed.

All data-related enquiries, rights requests, and complaints should be directed to the tdaje support team using the contact details provided in Section 15 of this policy. We will acknowledge all formal data-related requests within five business days and aim to resolve them within 30 calendar days.

The personal data we collect from you falls into the following categories. We collect only information that is necessary, relevant, and proportionate to the purposes described in this policy.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data unless specifically required to comply with a legal obligation (for example, processing a self-exclusion request that involves health information provided voluntarily by the player).

tdaje collects personal data through several distinct channels, all of which are described below:

• Direct registration: When you create a tdaje account, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
• KYC verification submissions: When you complete the identity verification process, you upload copies of government-issued documents such as your National Identity Card (NID), passport, or driver's licence, along with proof of address.
• Payment transactions: When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a bank transfer, we receive transaction reference data and the mobile number or account number associated with the payment.
• Platform usage: Our systems automatically record technical and usage data — including your IP address, device information, session start and end times, games played, stakes placed, and bonus activity — as part of normal platform operation.
• Support interactions: When you contact our support team via live chat or email, the content of that communication is logged for quality assurance and dispute resolution purposes.
• Cookies and tracking technologies: As described in Section 08, we use cookies and similar technologies to collect technical data about your browsing behaviour on the tdaje platform.
• Third-party sources: In limited circumstances, we may receive data about you from third-party identity verification services, fraud-detection agencies, or payment processing partners, solely for the purpose of verifying your identity or detecting suspicious activity.

tdaje uses your personal data for a defined and limited set of purposes. We do not use your data for any purpose that is incompatible with the reasons it was originally collected. Our primary uses of your personal data are:

• Account creation and management: To register, maintain, and administer your tdaje player account, including processing your login credentials and maintaining your account balance and history.
• Identity and age verification: To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years for Bangladesh-market players.
• Payment processing: To process deposits made via bKash, Nagad, Rocket, Upay, and bank transfers, and to execute withdrawal requests back to your registered payment method.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming compliance: To monitor your gaming patterns and identify potential signs of problem gambling, and to process your requests for deposit limits, loss limits, session reminders, cool-off periods, or self-exclusion.
• Legal and regulatory compliance: To fulfil our anti-money-laundering (AML), Know Your Customer (KYC), and record-keeping obligations under applicable law.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through our 24/7 English-language support channels.
• Platform improvement: To analyse usage data in aggregate to improve the performance, content, and user experience of the tdaje platform.
• Marketing communications: To send you promotional emails or notifications about bonuses, promotions, and new games — but only if you have opted in to receive such communications. You may opt out at any time.

Each processing activity carried out by tdaje rests on one or more of the following legal bases:

• Contractual necessity: Processing your registration data, payment information, and account activity is necessary to perform the contract between you and tdaje (i.e., to provide the gaming services you have signed up for).
• Legal obligation: Processing required by applicable law — including KYC identity checks, AML transaction monitoring, and record retention — is carried out to comply with our legal obligations.
• Legitimate interests: Fraud detection, platform security, abuse prevention, and service analytics are carried out on the basis of tdaje's legitimate interest in protecting its platform and its players, provided that interest is not overridden by your privacy rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we rely on your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

tdaje does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality and data protection obligations:

• Payment service providers: We share necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank solely for the purpose of processing your deposits and withdrawals.
• Identity verification services: We may share your identity documents with third-party KYC verification providers to confirm your identity and age.
• Game providers: Some game-specific technical data (such as session tokens and stake amounts) is shared with our game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver their game content to you. These providers do not receive your full identity or payment details.
• Fraud prevention and security vendors: We may share limited technical data (such as IP addresses and device fingerprints) with fraud detection and cybersecurity service providers to protect the platform and its players.
• Legal and regulatory authorities: We may disclose your data to law enforcement agencies, regulators, courts, or other government bodies where we are legally required to do so, or where disclosure is necessary to protect our legal rights or prevent imminent harm.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of tdaje's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

tdaje uses cookies and similar technologies (such as local storage and session tokens) on the tdaje.io platform. These technologies help the platform function correctly, protect your session security, and allow us to understand how players interact with the site.

You may control non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the tdaje platform, including your ability to log in and maintain an active session. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce the quality of your personalised experience.

We retain your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status on the tdaje platform.
• Post-closure account data: Following voluntary or enforced account closure, identity and transaction records are retained for a minimum of five years to comply with AML and KYC record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven years from the date of each transaction, consistent with standard financial record-keeping requirements.
• Support and communications records: Retained for three years from the date of the last interaction, or longer if the record is relevant to an ongoing dispute or investigation.
• Self-exclusion records: Where you have requested permanent self-exclusion, we retain a record of that request indefinitely to ensure that the exclusion cannot be circumvented by a future re-registration attempt.
• Marketing consent records: Retained for the duration of your account and for a period following account closure sufficient to demonstrate compliance with consent requirements.

At the end of each applicable retention period, personal data is either securely deleted from our systems or anonymised so that it can no longer be attributed to any identifiable individual.

tdaje implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include:

• SSL/TLS encryption: All data in transit between your device and the tdaje platform is protected using Transport Layer Security (TLS) with strong cipher suites.
• Data encryption at rest: Sensitive personal data stored in our databases — including identity documents and payment details — is encrypted at rest.
• Access controls: Access to personal data within tdaje is restricted on a strict need-to-know basis. Employees and contractors who handle player data are subject to confidentiality obligations and receive regular data protection training.
• Two-factor authentication: Where available, we encourage players to enable two-factor authentication (2FA) on their accounts as an additional layer of protection against unauthorised access.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for unusual activity, and we maintain incident response procedures to address potential data breaches promptly.
• Regular security assessments: We conduct periodic reviews of our data security practices and update them in response to emerging threats and industry best practice.

As a tdaje player, you hold the following rights in respect of your personal data. You may exercise any of these rights at any time by contacting our support team using the details in Section 15:

• Right of access: You have the right to request a copy of the personal data tdaje holds about you, along with information about how it is being used.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to our legal retention obligations — for example, we are required to retain transaction records and identity verification data for defined periods even after account closure.
• Right to restrict processing: You may request that we limit the ways in which we use your data in certain circumstances, for example while a dispute or accuracy query is being investigated.
• Right to object: Where we process your data on the basis of legitimate interests, you have the right to object to that processing. We will then assess whether our legitimate interests are overridden by your rights and freedoms.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where we process your data on the basis of consent — including for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team with the subject line "Privacy Request" along with your registered account username. We will acknowledge your request within five business days and aim to resolve it within 30 calendar days.

The tdaje platform is strictly for adults. In the Bangladesh market, the minimum age to register and play on tdaje is 21 years. We are committed to preventing minors from accessing our services and take all reasonable steps to enforce this requirement.

We collect date of birth at registration and require documentary identity verification before processing any withdrawal. Any account found to be registered by or used by a person under the age of 21 will be immediately closed, all winnings will be voided, and all deposits will be returned via the original payment method.

tdaje does not knowingly collect or process personal data from individuals under the age of 21. If you believe that a person under 21 has registered an account on tdaje, please notify us immediately at support @tdaje.io and we will investigate and take appropriate action without delay.

In order to deliver its services, tdaje may transfer your personal data to service providers and infrastructure partners located outside Bangladesh. Such transfers may include the processing of data by game studio partners such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, whose servers may be located in various jurisdictions.

Whenever we transfer your personal data internationally, we take appropriate steps to ensure that it receives an equivalent level of protection to that which it would receive if processed within Bangladesh. These steps may include entering into data processing agreements with our service providers that incorporate standard contractual clauses or equivalent protective mechanisms.

By using the tdaje platform, you acknowledge and accept that your personal data may be transferred to and processed in countries outside Bangladesh, subject to the safeguards described above. If you have specific concerns about international data transfers, please contact our support team.

tdaje reserves the right to update or amend this Privacy Policy at any time. We will notify registered players of any material changes by posting a notice on the tdaje platform or by sending an email to the address registered on your account, no less than 14 days before the changes take effect.

The "Effective Date" and "Last Reviewed" dates shown at the top of this page will be updated each time a new version of the policy is published. We encourage you to review this page periodically to stay informed about how we are protecting your personal data.

Your continued use of the tdaje platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you should cease using the platform and contact our support team to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which tdaje handles your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

If you are not satisfied with our response to your privacy concern, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction. We take all complaints seriously and will work constructively with any regulatory authority investigating a complaint involving tdaje's data processing activities.

For general platform support, live chat is available 24/7 and is typically the fastest way to reach the tdaje team. For formal data-rights requests, email is preferred so that we can maintain a proper written record of your request and our response.