takaba Privacy Policy

takaba collects personal data from you in several ways: directly when you register and use our platform, automatically through your interactions with our website, and occasionally from third-party sources where permitted. The following table summarises the categories of personal data we collect and the primary source of each category.

Data We Do Not Collect: takaba does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or data concerning health or sexual orientation, except where explicitly required by law or where you voluntarily provide such information in the context of responsible gaming (for example, self-disclosing a gambling addiction when requesting self-exclusion).

Minors: The takaba platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data from a minor has been collected, we will delete it promptly and close the associated account.

takaba uses the personal data we collect for specific, documented purposes. We do not use your data for any purpose incompatible with the purposes described in this Privacy Policy. The primary purposes for which we process your personal data are as follows:

Account Management and Service Delivery: We use your Identity Data and Contact Data to create and manage your takaba account, authenticate your identity at login, communicate important account-related information (such as deposit confirmations, withdrawal updates, and security alerts), and ensure the accurate and timely delivery of all platform services.

Transaction Processing: We use your Financial Data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to maintain an accurate record of your account balance; to apply bonus credits and deductions; and to produce transaction histories available within your account dashboard. All financial records are denominated in Bangladeshi Taka (৳).

Identity Verification (KYC): We are required to verify the identity of players before processing withdrawals and in connection with our anti-money-laundering and fraud prevention obligations. Verification Documents and Identity Data are used for this purpose. We may use third-party identity verification services to assist with this process, in which case your data is shared with those services as described in Section 5.

Responsible Gaming: Account Activity Data is used to monitor your betting behaviour and identify potential indicators of problem gambling. Where such indicators are detected, our team may proactively apply responsible gaming interventions, including cooling-off periods and account reviews, in accordance with our Responsible Gaming Policy.

Platform Security and Fraud Prevention: Technical Data and Account Activity Data are used to detect and investigate suspicious account activity, prevent fraud and money laundering, identify and block duplicate accounts, and protect the integrity of our platform and of all players using it.

Customer Support: Communications Data is used to respond to your queries, process complaints, and improve the quality of our customer support service. Live chat transcripts and email correspondence may be retained for quality assurance and training purposes.

Marketing and Promotions: Where you have opted in to receive marketing communications, we use your Contact Data and Account Activity Data to send you personalised promotional offers, bonus alerts, and updates on takaba events such as BPL season promotions, Eid special offers, and Pohela Boishakh bonuses. You may opt out of marketing communications at any time.

Platform Improvement and Analytics: Anonymised and aggregated Technical Data and Account Activity Data are used for internal analytics, product development, and to improve the overall performance and user experience of the takaba platform.

For each purpose for which takaba processes personal data, we rely on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and takaba — i.e., to provide you with access to the betting and gaming platform, process your deposits and withdrawals, and deliver the services you have registered for. This basis applies to account management, transaction processing, and the core delivery of platform services.
• Legal Obligation: Processing is necessary for takaba to comply with its legal obligations, including anti-money-laundering (AML) requirements, identity verification obligations, fraud prevention requirements, and record-keeping duties. This basis applies to KYC verification, transaction monitoring, and the retention of financial records.
• Legitimate Interests: Processing is necessary for the purposes of our legitimate interests, provided those interests are not overridden by your rights and interests. Legitimate interests relied upon by takaba include platform security, fraud detection, responsible gaming monitoring, and internal analytics for service improvement.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we rely on your consent. Consent is always freely given, specific, informed, and unambiguous. You may withdraw your consent at any time without detriment to your account.

Where takaba relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to ensure that our interests do not outweigh your fundamental privacy rights. You have the right to object to processing carried out on the basis of legitimate interests — see Section 7 for details of how to exercise this right.

The takaba website uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device when you visit a website. It allows the website to recognise your device on subsequent visits and remember certain preferences or session data.

Types of Cookies We Use:

Managing Cookies: You may control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and be alerted when new cookies are placed. Note that disabling strictly necessary cookies will prevent you from logging into your takaba account and using core platform features. Detailed guidance on managing cookies is available through your browser's help documentation.

Third-Party Tracking: Certain analytics and performance cookies on the takaba platform are provided by reputable third-party analytics services. These services process data on our behalf under data processing agreements that restrict their use of your data to the purposes specified by takaba. They are not permitted to use cookie data for their own independent marketing or advertising purposes.

takaba does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle it in accordance with applicable privacy standards.

Payment Processors: When you make a deposit or withdrawal, we share the minimum necessary financial and identity data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard — to facilitate the transaction. These providers process data in accordance with their own privacy policies and are independently regulated financial service providers.

Identity Verification Providers: To fulfil our KYC obligations, we may share Identity Data and Verification Documents with third-party identity verification services. These providers are engaged under data processing agreements that strictly limit their use of your data to the purposes of identity verification on behalf of takaba.

Game Studio Providers: When you play games provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — certain technical and gameplay session data is shared with those studios to deliver the game experience and to support fair play monitoring. Game studio providers are not permitted to use this data for any purpose other than game delivery and integrity monitoring.

Fraud Prevention and AML Services: We may share Account Activity Data and Financial Data with fraud prevention and anti-money-laundering screening services. These services help us identify and block suspicious transactions and maintain the integrity of the platform for all players.

Legal and Regulatory Disclosure: We may disclose personal data to law enforcement authorities, regulatory bodies, or courts when we are legally required to do so, when disclosure is necessary to protect the rights and safety of takaba or its players, or when compelled by a valid legal order.

Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of takaba's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer via the email address on file and will be given the opportunity to exercise your privacy rights in connection with the transfer.

takaba retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the primary categories of personal data we hold:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised data may be retained for statistical and analytical purposes without limitation, as it no longer constitutes personal data.

Where you request deletion of your personal data before the end of a retention period, we will honour your request to the extent permitted by our legal obligations. In cases where retention is required by law — for example, for AML compliance — we will retain only the minimum data necessary to satisfy that obligation and will delete all other data promptly.

As a player on the takaba platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via 24/7 live chat or email at [email protected]. We will respond to all valid requests within 30 days of receipt.

Right of Access (Data Subject Access Request): You have the right to request a copy of all personal data that takaba holds about you. This includes the categories of data held, the purposes for which it is processed, the recipients with whom it has been shared, and the retention periods that apply. We will provide this information free of charge in a structured, commonly used format.

Right to Rectification: You have the right to request correction of any personal data we hold about you that is inaccurate or incomplete. You may update many of your account details directly through your account dashboard. For data that cannot be self-updated — such as KYC-verified identity information — please contact our support team.

Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. This right is subject to our legal retention obligations as set out in Section 6.

Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a dispute about the accuracy of your data or assess an objection you have raised.

Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, machine-readable format and to request that we transmit it directly to another controller where technically feasible.

Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to the use of your personal data for direct marketing purposes, including profiling for marketing. Upon receipt of a valid objection to marketing, we will cease processing your data for that purpose immediately.

Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

takaba implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following measures:

• Encryption in Transit: All data transmitted between your device and the takaba platform is encrypted using TLS 1.2 or higher (256-bit SSL encryption). This applies to all pages of the website, including the login page, account dashboard, deposit and withdrawal flows, and live chat.
• Encryption at Rest: Sensitive personal data — including identity documents, financial records, and password hashes — is stored in encrypted form on our servers. Passwords are hashed using a strong one-way cryptographic function and are never stored in plaintext.
• Access Controls: Access to personal data within takaba is governed by a strict role-based access control (RBAC) system. Only authorised personnel with a legitimate business need may access personal data, and all access is logged and subject to periodic review.
• Network Security: Our platform infrastructure is protected by firewalls, intrusion detection systems (IDS), and DDoS mitigation services. Regular vulnerability assessments and penetration tests are conducted by qualified security professionals.
• Incident Response: takaba maintains a documented data breach response plan. In the event of a security incident that is likely to result in a risk to your rights, we will notify affected players promptly and take immediate remedial action.
• Staff Training: All takaba staff who handle personal data receive regular training on data protection principles, security best practices, and the obligations set out in this Privacy Policy.

While we take all reasonable precautions to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect unauthorised access to your account, please notify us immediately via live chat so that we can take prompt protective action.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data takaba holds about you, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

Primary Contact — Customer Support: Our 24/7 live chat support team is your fastest route to privacy assistance. You can access live chat directly from your account dashboard at any time. For written enquiries, you may reach us by email at [email protected]. Please include "Privacy Request" in the subject line along with your registered username so that our team can locate your account records without delay.

Data Subject Access Requests: To submit a formal Data Subject Access Request — requesting a copy of all personal data takaba holds about you — please email [email protected] with the subject line "DSAR — [Your Username]". We will acknowledge your request within 5 business days and provide a full response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

Complaints: If you are not satisfied with how takaba has handled your personal data, or if you believe we have not adequately addressed a privacy rights request, you have the right to raise a formal complaint. Please contact us in the first instance so that we have the opportunity to resolve the matter directly. Submit your complaint to [email protected] with the subject line "Privacy Complaint". We will investigate all complaints thoroughly and respond with our findings and any remedial steps within 30 calendar days.

Policy Updates: takaba reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The effective date at the top of this page will be updated whenever a material change is made. Where changes are significant, we will notify registered players via email to the address on file. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

The most recent version of this Privacy Policy is always available at takaba.club/privacy-policy. Continued use of the takaba platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated terms.