tgbat Privacy Policy — Your Data, Protected

tgbat collects personal data from you through a number of channels: directly when you register an account or contact our support team; automatically as you navigate and interact with the tgbat platform; and, in limited cases, from third-party service providers involved in payment processing or identity verification.

Registration and Account Data

When you create a tgbat account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Residential address in Bangladesh (city, district, and full postal address)
• Email address
• Bangladeshi mobile phone number
• Username chosen by you at registration
• Hashed (encrypted) password — tgbat never stores plaintext passwords

Identity Verification (KYC) Data

Before processing your first withdrawal, tgbat is required to verify your identity. During the KYC process, we collect:

• A copy of your government-issued photo ID (National Identity Card, Passport, or Driving Licence)
• A selfie or live photograph for facial comparison against your ID document, where required
• Proof of address documents where additional verification is required

Financial and Payment Data

When you make a deposit or withdrawal, we collect transaction-related data including:

• Your bKash, Nagad, Rocket, or Upay mobile wallet number (or bank account details for bank transfer)
• Transaction amounts and timestamps
• Transaction reference numbers provided by the payment provider

tgbat does not store full card numbers or mobile banking PINs. Payment credentials are processed securely via the relevant payment provider's infrastructure.

Usage and Technical Data

As you use the tgbat platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent, click patterns, and navigation paths
• Betting and gaming activity (markets accessed, stakes placed, game titles played, session duration)
• Login timestamps and session identifiers

Communication Data

When you contact tgbat support via email or any support channel, we retain a record of the communication — including your message content, the support agent's responses, and any attachments you provide — for the duration set out in Section 5 of this Privacy Policy.

tgbat does not sell, rent, or otherwise trade your personal data to any third party for their independent commercial use. Data is shared with third parties only in the specific circumstances described below, and always subject to contractual confidentiality obligations or legal requirements.

Payment Service Providers

To process your deposits and withdrawals, tgbat shares the minimum necessary payment and identity data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or a supported Bangladeshi bank. The data shared is limited to what is required for the payment provider to execute and confirm your transaction. Each payment provider operates under its own privacy policy and data handling obligations.

Game Technology Providers

Casino and betting games available on the tgbat platform are delivered by licensed game technology studios including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi. Your in-game activity data (stakes, results, session duration) may be shared with the relevant studio to enable game functionality, resolve disputes, and maintain game integrity. Game providers do not receive your full identity or payment data.

Identity Verification Partners

tgbat may use third-party identity verification service providers to assist with the KYC process. Where this is the case, the identity documents and photographs you submit during KYC are processed by the verification partner under strict confidentiality and data security obligations. Verification results are returned to tgbat; raw document images are not retained by tgbat beyond the period required for audit compliance.

Legal and Regulatory Disclosure

tgbat may disclose your personal data to competent law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or legal process. tgbat will notify you of such a disclosure where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of tgbat's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data is processed as a result, with a reasonable opportunity to close your account if you object.

tgbat applies defined retention periods to each category of personal data it holds. These periods are determined by the purpose for which the data was collected, contractual obligations, and applicable legal and regulatory requirements. When a retention period expires, data is either permanently deleted or irreversibly anonymised so that it can no longer be associated with any individual.

The table below summarises the principal data categories and their associated retention periods. Where a legal obligation requires data to be retained for a longer period than the standard operational period, the legal obligation takes precedence.

tgbat takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

Encryption in Transit and at Rest

All data transmitted between your device and the tgbat platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. Sensitive data stored on tgbat's servers — including passwords and payment identifiers — is encrypted at rest using industry-standard algorithms. Passwords are stored as salted hashes and are never accessible in plaintext to any tgbat staff member.

Access Controls

Access to personal data held by tgbat is restricted on a strict need-to-know basis. Internal systems operate on the principle of least privilege — staff members can access only the data necessary for their specific role. All internal data access is logged and subject to regular audit review. Administrative access to sensitive data systems requires multi-factor authentication.

Infrastructure Security

The tgbat platform is hosted on secure, professionally maintained server infrastructure with physical access controls, redundant systems, and regular security patching. Network security includes firewall protection, intrusion detection systems, and DDoS mitigation measures.

Security Monitoring

tgbat operates continuous security monitoring across its platform infrastructure. Anomalous activity — including unusual login patterns, bulk data access attempts, or potential breach indicators — triggers automated alerts and human review. tgbat conducts periodic security assessments to identify and remediate vulnerabilities.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tgbat will notify affected players without undue delay. Notification will be provided via the email address registered to your tgbat account and will describe the nature of the breach, the data affected, the likely consequences, and the steps tgbat is taking in response.

Your Role in Data Security

While tgbat maintains robust platform-side security measures, you also play an important role in protecting your account. You should choose a strong, unique password for your tgbat account, never share your login credentials with any third party, and contact [email protected] immediately if you suspect your account has been accessed without your authorisation.