talabet Privacy Policy

Data Controller & Scope

This Privacy Policy applies to all personal data processed by talabet in connection with the talabet platform, accessible at talabet.club (the "Platform"). For the purposes of this Policy, talabet acts as the data controller — meaning we determine the purposes and means by which your personal data is collected and processed.

This Policy applies to all users of the Platform, including registered account holders, visitors who browse the Platform without registering, and individuals who contact our support team. It covers personal data collected through the website, any related applications, email correspondence, and any other channel through which you interact with talabet.

By accessing or using the talabet Platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions about how your data is handled, you may contact our data support team at [email protected] at any time.

Personal Data We Collect

talabet collects personal data in a number of ways — directly from you when you register or interact with the Platform, automatically as you browse, and from trusted third parties such as payment processors and identity verification providers. Below is an overview of the categories of data we collect.

Registration & Account Data

When you create a talabet account, we collect: your full legal name, date of birth, gender, email address, Bangladesh mobile number, and a password (stored in hashed form — never in plain text). We may also collect a username of your choosing and your preferred language for communications.

Identity Verification (KYC) Data

To comply with our anti-money-laundering (AML) obligations and to verify that you meet the 18+ age requirement, we may request identity documents including your National Identity Card (NID), passport, or driving licence, as well as a selfie photograph for liveness verification. We may also request proof of your registered payment method (e.g., a screenshot of your bKash or Nagad account in your name).

Financial & Transaction Data

When you make a deposit or withdrawal, talabet records the transaction amount (in BDT), the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), the timestamp, and a transaction reference identifier. We do not store full card numbers on our servers — card payments are tokenised by our payment processor.

Gameplay & Betting Data

We record your betting history, game session logs, wager amounts, game outcomes, and balance changes. This data is used for account statement generation, dispute resolution, responsible gaming monitoring, and regulatory reporting.

Device & Technical Data

When you visit the Platform, we automatically collect your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, and session duration. This information helps us maintain platform security, detect fraud, and optimise the user experience for Bangladesh players accessing the site from Dhaka, Chittagong, Sylhet, Khulna, and other locations.

Communications Data

If you contact talabet's support team via email or WhatsApp, we retain a record of that correspondence, including any attachments, for the purpose of resolving your query and maintaining a support history.

How We Use Your Data

talabet uses your personal data only for clearly defined purposes. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we use your data are as follows:

• Account Management: To create, maintain, and administer your talabet account, process your login requests, and deliver account statements and notifications.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels, and to maintain accurate financial records for your account.
• Identity & Age Verification: To confirm that you are at least 18 years of age and that your identity matches the account holder, in compliance with responsible gaming and AML obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, multi-accounting, bonus abuse, and other forms of platform misuse.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and proactively reach out to players who may need support.
• Customer Support: To respond to your queries, resolve disputes, and maintain a support history that enables our team to assist you effectively.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the overall quality and performance of the talabet platform for Bangladesh players.
• Marketing Communications: With your consent, to send you promotional offers, bonus notifications, and news about upcoming tournaments such as BPL and IPL betting events. You may withdraw this consent at any time.
• Legal & Regulatory Compliance: To fulfil any legal obligations applicable to talabet's operations, including record-keeping requirements and responding to lawful requests from competent authorities.

Legal Basis for Processing

talabet processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and talabet — i.e., to provide you with the services described in our Terms & Conditions. This includes account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and data retention mandates.
• Legitimate Interests: Processing carried out in the legitimate interests of talabet — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing for which you have given explicit, freely withdrawn consent — primarily marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Where talabet relies on legitimate interests as the legal basis, we have conducted an assessment to ensure that our interests do not unduly override your rights and freedoms as a data subject. You may request a summary of that assessment by contacting [email protected].

Data Sharing & Third Parties

talabet does not sell, rent, or trade your personal data. However, we do share data with carefully selected third parties where necessary to deliver our services or to comply with legal obligations. All third-party data processors engaged by talabet are bound by contractual data protection obligations consistent with this Policy.

Payment Processors

To process your deposits and withdrawals, talabet shares transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and card processors operating on behalf of Visa and Mastercard. Each provider processes data only as necessary to complete the transaction and is subject to its own regulatory obligations under Bangladesh Bank guidelines.

Identity Verification Providers

KYC documentation may be processed by third-party identity verification platforms to cross-reference submitted documents against available databases. These providers act strictly as data processors on talabet's instructions and do not retain or independently use your identity documents beyond the verification task.

Game Software Providers

When you play games hosted by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited session data (such as a session token and wager amounts) is passed to the provider's system to facilitate the game round. These providers do not receive your full profile data and are bound by their own data protection frameworks.

Law Enforcement & Regulatory Bodies

talabet will disclose personal data to law enforcement agencies, courts, or other competent authorities when required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of talabet, its players, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of talabet's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that arise as a result.

Cookies & Tracking Technologies

talabet uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies cannot execute code or access files on your device beyond their own stored data.

Types of Cookies We Use

Strictly necessary cookies are required for the Platform to function and cannot be disabled. Functional and analytics cookies may be managed through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling functional cookies may affect the quality of your experience on talabet, such as requiring you to re-enter preferences on each visit.

Data Retention Periods

talabet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention periods and any applicable legal requirements that mandate longer or shorter retention:

Once a retention period has elapsed, talabet securely deletes or irreversibly anonymises the relevant data in accordance with industry-standard data destruction procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate statistical and analytical purposes.

Data Security Measures

talabet implements a layered security framework to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures include both technical controls and organisational policies.

• Transport Encryption: All data in transit between your device and talabet's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock indicator in your browser confirms that your connection to talabet.club is encrypted.
• At-Rest Encryption: Sensitive data fields — including identity documents and payment tokens — are encrypted at rest within talabet's database infrastructure using AES-256 encryption.
• Password Security: User passwords are never stored in plain text. They are processed using a cryptographic hashing algorithm with per-user salting, ensuring that even a database breach would not expose your actual password.
• Two-Factor Authentication (2FA): talabet supports 2FA for player accounts. When 2FA is enabled, each login from an unrecognised device requires a one-time code sent to your registered Bangladesh mobile number.
• Access Controls: Access to personal data within talabet's internal systems is governed by strict role-based access controls. Staff members access only the data necessary for their specific role, and all access is logged and audited.
• Vulnerability Management: talabet conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, talabet will notify affected users without undue delay and take immediate steps to contain and remediate the breach.

While talabet takes all reasonable measures to protect your data, no platform can guarantee absolute security. We therefore encourage all players to use a strong, unique password for their talabet account, to enable 2FA, and to contact support immediately if they suspect unauthorised access.

Your Privacy Rights

As a talabet player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact talabet's support team at [email protected]. We will respond to your request within 30 days.

• Right of Access: You have the right to request a copy of the personal data that talabet holds about you. This includes account data, transaction history, and KYC records. We will provide this in a structured, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update basic account information (such as email address or mobile number) directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that talabet delete your personal data. Please note that this right is subject to exceptions — for example, we are legally required to retain financial records and KYC data for a minimum period regardless of erasure requests.
• Right to Restriction of Processing: You may request that talabet restrict the processing of your data in specific circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.
• Right to Object: You may object to the processing of your personal data where talabet relies on legitimate interests as its legal basis. You also have an unconditional right to object to your data being used for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

International Data Transfers

talabet's primary services are directed at players in Bangladesh. However, some of our third-party service providers — including game software providers and cloud infrastructure partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, talabet takes appropriate steps to ensure that your data receives an equivalent level of protection to that afforded under this Privacy Policy.

Safeguards for international transfers may include: contractual clauses that require the data recipient to process personal data in accordance with standards consistent with this Policy; use of service providers operating data centres within recognised adequacy jurisdictions; and, where applicable, explicit consent obtained from you prior to transfer.

If you would like further information about the specific safeguards applied to an international transfer of your data, please contact us at [email protected].

Children & Minors

The talabet Platform is strictly for adults aged 18 and above. talabet does not knowingly collect or process personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

talabet employs age verification checks during the registration process and reserves the right to request documentary proof of age at any point during a player's account lifetime. Any account found to belong to a person under 18 will be suspended immediately and all funds returned via the original payment method where possible.

Updates to This Policy

talabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players via email to the address on their account and display a prominent notice on the Platform for a minimum of 14 days following the change.

The "Effective" date displayed at the top of this Policy indicates when the current version came into force. We encourage you to review this page periodically to stay informed about how talabet protects your personal information. Your continued use of the Platform after a revised Policy has been published constitutes your acceptance of the updated terms.

If any update to this Policy materially reduces your rights or expands the scope of data we collect, talabet will seek your fresh consent where required by applicable law before the updated processing begins.