Last Updated: July 2026

Tabaji Privacy Policy — How your information is collected and kept secure

Your privacy matters deeply to us at Tabaji. This policy clearly sets out what data we collect, why we collect it, how it is kept secure, and what rights you have.

SSL Encrypted Not Shared with Third Parties Fully in Bengali

1. Introduction

Tabaji (https://tabaji.xyz) is an online betting and gaming platform based in Bangladesh. When you use the Tabaji website or app, certain information naturally reaches us. This privacy policy fully explains — in plain English — how that information is collected, used, and kept secure.

Tabaji believes privacy is a fundamental right. Rather than hiding terms in complex legal language or fine print, we want to be straightforward and transparent about exactly what we do — and do not do — with your data. This policy covers Tabaji's Terms & Conditionsas a supplement to.

Quick Summary: Your personal data is never sold, never shared with third parties for advertising, and is protected using the highest level of encryption.

2. What Information Is Collected

Tabaji only collects information that is necessary to provide its services. Collecting data beyond what is needed goes against our policy.

Registration & Identity Information
  • Mobile number (for account creation and communication)
  • Date of birth (for 18+ age verification)
  • Full name (at the time of KYC verification)
  • National ID or passport number (required for withdrawal verification)
Financial Information
  • Payment method (bKash / Nagad / Rocket number)
  • Transaction History (deposit and withdrawal records)
  • Betting History & Game Activity
Technical Information
  • Device Type & Operating System
  • Browser & App Version
  • IP address (for security and fraud prevention purposes)
  • Session Duration & Usage Patterns
  • Cookies & Local Storage Data
Data Type When Is It Collected Mandatory?
Mobile Number At Registration Yes
Date of Birth At Registration Yes
NID/Passport During KYC Verification For Withdrawals
Payment Number At the time of first deposit Yes
IP Address At every login Automatic
3. Why We Collect This Information

Tabaji clearly defines the purpose behind every piece of data collected. No data is gathered for vague or general reasons.

  • Account Management: For creating your account, verifying logins, and managing sessions.
  • Payment Processing: Payment information is used to process deposits and withdrawals accurately.
  • Identity Verification: To verify users are 18+ and to prevent fraud.
  • Customer Support: Your previous support history is used to resolve your issues faster.
  • Platform Improvement: Anonymous usage data is analyzed to understand which features are most used and where issues arise.
  • Security Monitoring: To detect suspicious logins or transactions.
  • Legal Obligations: To comply with applicable laws and regulations.

Not for Advertising: Tabaji never shares your data with advertisers or marketing companies. We do not use your personal data to target you with ads.

4. How Your Data Is Stored and Protected

Tabaji's data protection measures meet international standards. Rather than relying on a single layer, multiple layers of security work together to keep your information safe.

  • All data transmissions are secured with 256-bit SSL/TLS encryption.
  • Sensitive data stored on our servers (such as passwords) is secured using a hashing algorithm — making it unreadable to anyone.
  • Payment information is stored in a separately encrypted environment in compliance with PCI DSS standards.
  • 24/7 security monitoring and firewall protection are active at the data center.
  • Among Tabaji's internal staff, only designated personnel have permission to access user data.
  • Regular security audits and penetration tests are conducted.

Two-Factor Authentication (2FA): Enabling two-factor authentication on your Tabaji account significantly increases its security. Even if your password is compromised, no one can access your account without the mobile OTP.

5. Who Your Data Is Shared With and When

Tabaji shares your data externally only in very limited circumstances and strictly for defined purposes. The complete list is provided below.

Payment Providers

Only the minimum necessary information is shared with payment gateways such as bKash, Nagad, and Rocket to process transactions. This data is used solely to complete the payment — nothing more.

Legal Authorities

In response to a court order or a lawful request from a government authority, we may be required to share information to meet our legal obligations. In such cases, we always aim to provide only the minimum information necessary.

Technology Service Providers

Companies that support Tabaji's technical infrastructure — such as server hosting and cybersecurity providers — operate under strict confidentiality agreements. They are not permitted to use your data for their own purposes.

What We Will Never Do: Your data will never be sold or shared with advertisers, data brokers, or marketing firms. This is a core principle at Tabaji — with no exceptions.

6. Cookies & Tracking

Tabaji's website and app use cookies — small files stored on your device that help the platform remember your preferences.

Cookie Types and Their Purpose
  • Essential Cookies: Maintaining your login session and saving your language preference — the site cannot function properly without these.
  • Functional Cookies: It remembers your last preferred game or betting section — no need to adjust your settings every time.
  • Analytics Cookies: Analyzes usage patterns anonymously to help us improve the platform.
  • Security Cookies: Used to detect fraud and unauthorized access.

You can delete cookies or block new ones at any time through your browser settings. However, disabling essential cookies may prevent login and certain site features from working properly.

7. Your Rights

You have clear rights over your data at Tabaji. To exercise any of these rights, reach out to us at support@tabaji.xyz.

1
Right to Access Your Data

If you would like to see what information Tabaji holds about you, submit a request. You will typically receive a response within 7 business days.

2
Right to Correct Your Information

If any of your information is incorrect, you can request a correction. You can also update certain details yourself from your profile.

3
Right to Erasure

After closing your account, you may request that your data be deleted. Due to legal obligations, certain information may need to be retained for a specified period.

4
Data Portability

You can download your betting history and transaction records in a portable format (CSV or PDF).

5
Right to Object to Processing

If you object to your information being used for a specific purpose, let us know. We will take your objection into consideration.

6
Opt Out of Marketing

If you do not wish to receive promotional SMS or emails, you can turn this off from your account settings or by contacting support.

8. How Long Is Your Data Retained

Tabaji does not retain your data indefinitely. A defined retention period is set for each type of information.

  • Account Information: Retained for the duration your account is active and for up to 5 years after closure for legal compliance purposes.
  • Financial Transaction Records: As required by Bangladesh's financial regulations, data must be retained for a minimum of 5 years.
  • Communication History: Support chat and email records are retained for up to 2 years.
  • Technical Logs: For security purposes, server logs are typically deleted after 90 days.
  • Cookies & Session Data: Session cookies are deleted when your session ends or you close the browser. Persistent cookies expire automatically after a maximum of 1 year.

Once the retention period ends, data is securely deleted or anonymized. No personal information is retained beyond the approved timeframe.

9. Protection of Minors

Tabaji strictly prohibits use by anyone under the age of 18. Collecting or processing data from minors is completely against our policy.

  • Date of birth is verified at registration — users under 18 are not permitted to register.
  • If there is any doubt about an account, Tabaji may request proof of age at any time.
  • If an underage account is identified, it will be closed immediately and no balance will be refunded.
  • If someone in your family has concerns, contact us at support@tabaji.xyz — we'll act promptly.
10. Changes to the Privacy Policy

Tabaji may update this Privacy Policy when necessary. If changes are made, the new date will be shown at the top of this page, and you will be notified via your registered mobile number or through the app.

  • For significant changes, at least 7 days' notice is given before the changes take effect.
  • Continuing to use Tabaji after any changes means you accept the updated Privacy Policy.
  • Dates of all previous versions are kept on record and are available upon request.

For any questions or concerns about our Privacy Policy, feel free to contact us directly: support@tabaji.xyz

Layers of Data Protection on Tabaji

Not One, But Multiple Layers of Protection Working Together

256-Bit SSL Encryption

All data exchanged between your device and Tabaji's servers is protected with military-grade encryption. No one can intercept your information in transit.

Mobile OTP Verification

An OTP is sent to your mobile during login, withdrawals, and major account changes. Even if someone knows your password, accessing your account without the OTP is extremely difficult.

Password Hashing

Your password is never stored directly — it is kept as a bcrypt hash. No Tabaji employee can view your password.

Firewall & DDoS Protection

Tabaji's servers are protected by enterprise-grade firewalls and DDoS protection. Every unauthorized access attempt is automatically blocked.

PCI DSS-Standard Payment Security

Payment data is stored in a separate, secured environment with no connection to the general database. Card or mobile numbers are not directly visible.

Unusual Activity Detection

Our AI-powered system analyzes every login and transaction. If anything unusual is detected, you are notified immediately and your account is temporarily secured.

Key Features of Tabaji's Privacy Policy

The Most Important Points in Plain Language

No Sale of Data

Tabaji never sells your data to any third party. Advertisers, data companies, and marketing agencies — none of them have access to your information.

Fully Published in Bengali

This Privacy Policy is written entirely in Bangla — you can understand everything without knowing English. Nothing is hidden behind complicated legal language.

Your Data, Your Control

You always have the right to view, correct, delete, or download your data. Submit a request to support at any time.

Highest Encryption Standards

All data in transit is protected with 256-bit SSL, passwords are secured with bcrypt hashing, and payments meet PCI DSS standards — three independent layers of security working together.

Defined Retention Period

Tabaji does not store your data indefinitely. Each type of information has a defined retention period — once it expires, the data is securely deleted.

Marketing Opt-Out

You can opt out of promotional messages at any time. Sending unsolicited messages to your inbox goes against our policy.

SSL Encrypted
PCI DSS Standard
Data Is Not Sold
Policy in Bengali
Your Rights Are Protected
24/7 Support

Frequently Asked Questions

Common Questions About Security & Payments

It's a completely valid question, and it deserves a straight answer. Tabaji has put multiple layers of protection in place to safeguard your data and money. First, all data transmission uses 256-bit SSL encryption — the same standard used by banking websites. Second, your password is never stored in plain text; it's kept in hashed form that nobody can read. Third, payment data is held in a separate PCI DSS-compliant environment. On the financial side, Tabaji has not blocked a single legitimate withdrawal or lost any user funds over the past five years. That said, there are steps you should take as well: use a strong password, keep 2FA enabled, and never share your login details with anyone. If you notice any suspicious activity, contact us immediately at support@tabaji.xyz.

Withdrawing from Tabaji is straightforward. Log in to your account, go to the Wallet or Cashier section, and select the "Withdraw" option. Enter your bKash, Nagad, or Rocket number, specify the amount, and confirm with an OTP. Funds typically arrive within 5–15 minutes for bKash and Nagad, and 15–30 minutes for Rocket. During late-night hours or peak times it may take a little longer — but all withdrawals are completed within 24 hours at most. Please note that withdrawals are always sent to the same number used for the original deposit. For large withdrawal amounts, KYC verification must be completed — make sure you have submitted a photo of your NID or passport in advance.

Welcome to a Secure Platform

Your data is protected, your money is secure — play with complete peace of mind at Tabaji. Register today or download the app.

For users aged 18+ · Please gamble responsibly

বাংলা