tabet Privacy Policy — How We Handle Your Personal Data

When you register an account on the tabet platform, we collect the personal information you voluntarily provide during the registration process. This includes your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and maintain your account, verify your identity, and process financial transactions on your behalf.

1.1 Account Registration Data

At the point of registration, tabet collects the following categories of personal data:

• Full legal name as it appears on your official identity document
• Date of birth (used to verify that you meet the minimum age of 18 years)
• Residential address, including city and district within Bangladesh
• Valid email address
• Mobile phone number (used for account verification and transaction notifications)
• Username and password (password is stored in hashed form only — never in plain text)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance process, tabet may request copies of official identity and address verification documents. Accepted documents include a National Identity Card (NID), valid passport, or driver's licence for identity verification, and a recent bank statement, utility bill, or mobile banking transaction record for address confirmation. KYC documents are stored securely and accessed only by authorised personnel within the tabet compliance function.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal through the tabet platform, we record the transaction details necessary to process and reconcile the payment. This includes the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in Bangladeshi Taka (৳ BDT), the date and time of the transaction, and relevant reference identifiers. tabet does not store full mobile banking PINs, bank account passwords, or card numbers on its own servers — these are handled exclusively by the respective payment providers.

1.4 Gameplay and Platform Usage Data

tabet automatically collects data relating to your use of the platform. This includes your betting history (game type, stake, outcome, and timestamp for each wager), your login history (date, time, and device type), session duration, pages visited within the tabet interface, and preferences such as favourite games or saved settings. This data is used to personalise your experience, detect unusual activity, and improve the platform.

1.5 Technical and Device Data

When you access tabet, our servers automatically log certain technical information about your device and connection. This includes your Internet Protocol (IP) address, browser type and version, device type (mobile, tablet, or desktop), operating system, and referring URL. This technical data is used to ensure platform security, diagnose technical issues, and improve performance for users connecting from Bangladesh and other supported locations.

1.6 Communications Data

If you contact the tabet customer support team via email, live chat, or any other channel, we retain records of that communication. This includes your query, our response, and any attachments or screenshots shared. These records are maintained to assist with follow-up queries and to improve the quality of our support service.

The table below summarises the primary purposes for which tabet processes your personal data, together with the legal basis we rely on for each processing activity:

3.1 Payment Processing Partners

When you make a deposit or request a withdrawal, tabet shares the minimum necessary transaction information with the relevant payment service provider — such as bKash, Nagad, Rocket, or Upay — to facilitate the transfer of funds. These providers operate under their own privacy policies and are independently responsible for the data they process in connection with payment transactions.

3.2 Game Technology Providers

Games available on the tabet platform are supplied by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable gameplay, certain technical identifiers (such as a session token or anonymised player ID) may be passed to these providers. tabet does not share your full personal details — such as your name, address, or NID number — with game studios.

3.3 Regulatory and Law Enforcement Disclosure

tabet may be required by law, court order, or regulatory direction to disclose personal data to relevant authorities. In such cases, tabet will comply with its legal obligations and, where permitted, will notify the affected player of the disclosure. tabet does not volunteer player data to law enforcement beyond what is required.

3.4 Fraud Prevention and Security Services

tabet works with specialist fraud detection and platform security service providers who may process certain technical and behavioural data on our behalf to identify and prevent fraudulent activity, bonus abuse, and account compromise. These providers act as data processors and are contractually bound to process data only on tabet's instructions and in accordance with applicable data protection standards.

3.5 No Sale of Personal Data

tabet does not, and will never, sell, rent, or trade your personal information to third-party marketers, data brokers, advertising networks, or any other commercial entity for purposes unrelated to the operation of the tabet platform.

A cookie is a small text file that is placed on your device when you visit a website. tabet uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period or until you delete them). The table below describes the categories of cookies tabet uses and their purpose.

The retention period for each category of personal data is determined by the nature of the data and the purpose for which it is held. The following principles guide our data retention practices:

• Active accounts: Personal data associated with an active tabet account is retained for the full duration of the account's existence, plus any applicable post-closure retention period required by law or regulation.
• Closed accounts: Following voluntary account closure or suspension, tabet retains account records (including identity documents, transaction history, and correspondence) for a minimum period required by applicable anti-money laundering and financial record-keeping obligations. This period is typically five (5) years from the date of account closure.
• KYC documents: Identity and address verification documents are retained for as long as required by applicable Know Your Customer regulations, and for a reasonable period thereafter to defend against any potential legal claims.
• Communications: Customer support correspondence is retained for a period of up to three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and device data: Log files and technical data are typically retained for up to twelve (12) months, after which they are anonymised or deleted, unless a specific investigation requires their preservation.

When personal data is no longer required and no legal obligation compels its retention, tabet will securely delete or anonymise the data in accordance with our internal data lifecycle management procedures.

The security of your personal information is a priority at tabet. We employ the following safeguards across our platform infrastructure and internal processes:

• SSL/TLS Encryption: All data transmitted between your device and the tabet platform is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols. The padlock icon visible in your browser confirms this encryption is active during your session.
• Password Hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm. tabet employees cannot view or retrieve your password in plain text — only you know your password.
• Access Controls: Access to systems containing personal data is restricted to authorised tabet personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked promptly when no longer required.
• Infrastructure Security: tabet's platform infrastructure is hosted in data centres with physical security controls, network intrusion detection, and regular vulnerability assessments.
• Two-Factor Authentication (2FA): tabet offers optional two-factor authentication for player accounts, adding an additional layer of protection beyond username and password.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to affected players, tabet will take immediate steps to contain the breach, assess its impact, and notify affected players as required by applicable obligations, without undue delay.

While tabet takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You also have an important role to play — keep your tabet login credentials confidential, do not share your password with others, and contact [email protected] immediately if you suspect your account has been compromised.

To exercise any of the rights described above, please submit a written request to the tabet data team at [email protected]. Please include your registered account username and a description of the right you wish to exercise. We may need to verify your identity before processing your request. tabet will acknowledge receipt of your request within 5 business days (Bangladesh Standard Time, UTC+6) and aim to resolve it within 30 days.

Please note that some rights are not absolute. In certain circumstances, tabet may be entitled or legally obligated to retain or continue processing certain data notwithstanding a request — for example, where data must be retained to comply with anti-money laundering regulations or to defend a legal claim. Where this applies, we will explain the reason clearly in our response to your request.

8.1 Contacting the tabet Data Team

For all privacy-related enquiries — including data access requests, rectification requests, deletion requests, consent withdrawals, and general questions about this policy — please contact the tabet data team in writing at [email protected]. Please mark your subject line with "Privacy Enquiry" to ensure your message is routed to the appropriate team. We operate on Bangladesh Standard Time (BST, UTC+6) and aim to acknowledge all privacy enquiries within 5 business days.

8.2 Updates to This Privacy Policy

tabet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, tabet will notify registered players via the email address associated with their account or via a prominent notice displayed upon login. The effective date at the top of this page will be updated to reflect the date on which the revised policy takes effect.

Your continued use of the tabet platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how tabet protects your personal information.

8.3 Relationship to Other tabet Policies

This Privacy Policy should be read alongside the tabet Terms & Conditions and the tabet Responsible Gaming policy, which together govern your relationship with the tabet platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter relating to personal data, this Privacy Policy shall take precedence.