tvaje Privacy Policy

When you register for a tvaje account, use our platform, or contact our support team, we collect a range of personal information. The nature and scope of the information collected depends on how you interact with tvaje and which services you use. Below is a full account of the categories of personal data we collect and the circumstances in which collection occurs.

Registration and Account Data

When you create a tvaje account, we collect the following personal information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth to verify that you meet the 18+ age requirement.
• Residential address in Bangladesh, including division, district, and postal code.
• Email address used for account communications, promotional offers, and password recovery.
• Mobile telephone number, which is also used as a secondary authentication factor and for linking mobile financial service accounts (bKash, Nagad, Rocket, Upay).
• Username and hashed password — your password is never stored in plain text.

Identity Verification (KYC) Data

In compliance with our KYC (Know Your Customer) obligations, we collect and process copies of the following documents during the account verification process:

• National Identity Card (NID) issued by the Government of Bangladesh, or a valid passport or driving licence.
• Proof of residential address, such as a utility bill or bank statement dated within the last 90 days.
• Proof of ownership of the payment method (bKash, Nagad, Rocket, or Upay account) used for deposits, confirming the account is registered in your own name.

Financial Transaction Data

Every deposit, withdrawal, and bonus transaction carried out on the tvaje platform is recorded and retained. This includes transaction amounts in BDT, timestamps, the payment method used, transaction reference numbers provided by the mobile financial service provider, and the resulting account balance. This information is essential for financial reconciliation, dispute resolution, and compliance with anti-money-laundering obligations.

Gameplay and Betting Activity Data

tvaje automatically records your gaming and betting activity on the platform. This includes game sessions, bet amounts, game outcomes, sports betting market selections, winning and losing records, and session durations. This data is used to operate responsible gaming tools such as deposit limits and self-exclusion, to detect unusual betting patterns, and to personalise your experience on the platform.

Technical and Device Data

When you access tvaje, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone. This information is used for fraud detection, security monitoring, and to optimise the performance of the tvaje platform across different devices commonly used in Bangladesh.

Communications Data

If you contact tvaje support via email or live chat, we retain a record of the content of that communication, the date and time of contact, and the resolution provided. This allows us to maintain continuity of service and to improve the quality of our customer support operations.

tvaje processes personal data only for the specific, defined purposes set out below. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The legal basis for each processing activity is identified alongside it.

Marketing Communications

tvaje will only send you promotional emails, bonus offers, and seasonal campaign notifications (such as those related to the BPL cricket season, Eid, or Pohela Boishakh promotions) if you have explicitly opted in to receive marketing communications during registration or through your account settings. You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link included in every marketing email, or by contacting tvaje support directly at [email protected].

tvaje does not sell, rent, or trade your personal information to third parties. However, the operation of a secure and compliant online casino and sports betting platform requires us to share certain data with a limited set of trusted service providers and, in specific circumstances, with authorities. All third-party sharing is governed by strict contractual obligations that prohibit the third party from using tvaje player data for any purpose other than the specific service they provide to us.

Service Providers

tvaje shares personal data with the following categories of third-party service provider, all of whom process data on our behalf under binding data processing agreements:

• Payment processors: Mobile financial service providers including bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. The data shared is limited to what each provider requires to complete the transaction.
• Game technology providers: Studios such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming may receive a session token and anonymised player identifier to deliver live dealer and RNG game content. These providers do not receive your full name, address, or payment details.
• Identity verification services: Third-party KYC and document verification platforms used to assist in the verification of player identity documents. Document images are processed solely for identity verification and are not retained by these providers beyond the verification period.
• Cloud infrastructure and hosting providers: tvaje uses secure cloud infrastructure to host the platform. Hosting providers may process personal data as part of storage and processing operations but do not access or use that data independently.
• Analytics providers: Aggregated and anonymised usage data may be processed by analytics platforms to help us understand how players navigate the tvaje platform and where improvements can be made.

Legal Disclosure

tvaje may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required by applicable law, a valid court order, or a lawful request from a government body. In cases involving suspected money laundering, match-fixing, fraud, or other criminal activity, tvaje is legally obligated to report relevant information to the appropriate authorities without prior notice to the player concerned.

tvaje uses cookies and similar technologies — including local storage objects and session tokens — to operate the platform, maintain your login session, remember your preferences, and gather analytics data that helps us improve your experience. This section explains the types of cookies we use and how you can manage them.

Types of Cookies Used by tvaje

• Strictly Necessary Cookies: These cookies are essential for the tvaje platform to function correctly. They manage your login session, maintain your account security token, and ensure that the platform responds correctly to your actions. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember your preferences — such as your chosen language setting, preferred game category, and whether you have acknowledged platform notices — so that you do not need to reconfigure these settings on each visit.
• Analytics Cookies: tvaje uses anonymised analytics cookies to understand how players interact with different parts of the platform, which pages are visited most frequently, and where players encounter difficulty. This data is used in aggregate and does not identify individual players by name.
• Security Cookies: Short-lived security cookies are used to detect and prevent fraudulent activity, including account takeover attempts and cross-site request forgery (CSRF). These cookies are tied to your current session and expire when you log out or close your browser.

Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that blocking strictly necessary cookies will prevent you from logging in to your tvaje account and using the platform's core services. Guidance on managing cookies is available in the help documentation of your browser.

tvaje retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data processed by tvaje:

At the end of the applicable retention period, tvaje will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Where deletion is requested by a player before the end of the statutory retention period, tvaje will delete all data that is not subject to a legal retention obligation and restrict access to any data that must be retained for compliance purposes.

Storage Location

tvaje stores player data on secure, encrypted cloud servers. Physical access to the servers on which tvaje data is stored is restricted to authorised data centre personnel only, and logical access is controlled through role-based authentication. All data at rest is encrypted using AES-256. All data in transit is encrypted using TLS 1.2 or higher.

As a tvaje player and data subject, you hold a set of rights over your personal information. tvaje is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise.

tvaje will respond to all data rights requests within 30 days of receipt. In cases of complexity or high volume, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day window. Exercising your data rights is free of charge unless requests are manifestly unfounded or repetitive.

tvaje takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. The following security controls are in place across the tvaje platform and its supporting infrastructure.

Technical Controls

• SSL/TLS Encryption: All communication between your browser or mobile device and the tvaje platform is encrypted using TLS 1.2 or TLS 1.3. This prevents your data from being intercepted during transmission.
• AES-256 Encryption at Rest: Personal data and financial records stored in tvaje's databases are encrypted using AES-256, the same encryption standard used by major financial institutions globally.
• Two-Factor Authentication (2FA): tvaje supports and encourages the use of two-factor authentication on player accounts. 2FA adds a second verification step to the login process, significantly reducing the risk of unauthorised account access.
• Penetration Testing: tvaje's platform undergoes regular independent security assessments to identify and address vulnerabilities before they can be exploited.
• Intrusion Detection Systems: Automated systems monitor network traffic and account activity in real time to detect and respond to suspicious patterns indicative of fraud, account takeover, or data breach attempts.

Organisational Controls

• Access to personal data is restricted to tvaje employees and contractors who require it to perform their job functions. Access is granted on a least-privilege basis and reviewed periodically.
• All tvaje personnel with access to personal data receive regular training on data protection obligations and information security best practices.
• tvaje maintains an incident response plan that defines the steps to be taken in the event of a data security incident, including notification procedures for affected players.

Your Responsibilities

While tvaje takes comprehensive measures to protect your data on our side, account security is a shared responsibility. You play an important role in keeping your tvaje account secure by choosing a strong, unique password, enabling two-factor authentication, logging out of your account when using shared or public devices, and contacting tvaje support immediately if you suspect your account credentials have been compromised.

If you have any questions about this Privacy Policy, about how tvaje processes your personal data, or about how to exercise your data rights, please contact the tvaje Data Protection team using the details below. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

Contact Details

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: For privacy-related enquiries, please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to the correct team.
• Response Time: tvaje aims to respond to all privacy-related enquiries within 5 business days of receipt. Data rights requests will be acknowledged within 3 business days and fully resolved within 30 days.

Complaints

If you are dissatisfied with how tvaje has handled your personal data or responded to a data rights request, you have the right to lodge a complaint. tvaje encourages you to contact us directly in the first instance so that we have the opportunity to address your concerns. If you remain dissatisfied following our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.

Policy Updates

tvaje reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. The "Last Updated" date at the top of this page will be revised whenever material changes are made. Where changes are significant, tvaje will notify registered players by email to their registered address. Continued use of the tvaje platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.