Privacy Policy
for takbit Players

1 Introduction

takbit ("we", "us", "our", "the Platform") operates the online gaming website available at takbit.app, which is designed to serve the Bangladesh market in the English language. We are committed to safeguarding the privacy of every individual ("you", "the Player", "the User") who visits, registers on, or otherwise interacts with the takbit platform.

This Privacy Policy sets out in full detail the types of personal data that takbit collects, the methods by which that data is collected, the purposes for which it is processed, the conditions under which it may be shared with third parties, and the rights that you hold as a data subject. It also explains how you can exercise those rights and how to contact takbit with any privacy-related query or concern.

This policy applies to all users of the takbit platform, including registered account holders, visitors who browse the site without registering, and individuals who contact takbit's support team via any communication channel. It covers all personal data processed by takbit in connection with the platform's operation, regardless of the device or network used to access it.

Where this policy refers to "personal data", it means any information that identifies or could be used to identify a specific living individual, directly or in combination with other data. This includes, but is not limited to, names, contact details, device identifiers, payment information, and behavioural data collected during gameplay sessions.

2 Data We Collect

takbit collects personal data across the following categories, depending on how you interact with the platform:

takbit does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data — except where a Player voluntarily discloses health-related information in the context of a responsible gaming or self-exclusion request, in which case that information is handled with heightened confidentiality and used solely to deliver the requested support.

3 How We Collect Data

takbit collects personal data through the following channels and mechanisms:

• Direct submission: When you complete the registration form, submit a deposit or withdrawal request, fill in account verification documents, or contact our support team, you provide personal data directly to takbit.
• Automated technical collection: When you visit or use the takbit platform, our servers automatically record technical and usage data such as your IP address, device identifiers, session duration, and navigation behaviour. This occurs regardless of whether you are logged in to an account.
• Cookies and similar tracking technologies: takbit uses first-party cookies and session storage to maintain your login state, remember your preferences, and analyse how the platform is used. See Section 8 for a full description of our cookie practices.
• Payment processors: When you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or City Bank, the relevant payment processor may share confirmation data (such as transaction reference numbers and masked account identifiers) with takbit to reconcile your account balance.
• Identity verification partners: takbit may use third-party identity verification services to validate the documents you submit during the KYC process. These partners provide takbit with a verification result; they do not store your documents on takbit's behalf beyond what is necessary for the verification workflow.
• Third-party game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share gameplay event data (bets placed, outcomes, session start/end times) with takbit's platform for the purpose of crediting winnings, settling bets, and detecting irregular play patterns.

4 How We Use Your Data

takbit processes your personal data for the following clearly defined purposes:

• Account creation and management: To register your account, verify your identity and age (18+ only), maintain your account profile, and provide you with access to the full functionality of the takbit platform.
• Transaction processing: To credit deposits to your account balance, process withdrawal requests to your nominated payment method, and maintain an accurate record of all financial activity on your account.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions. This includes automated monitoring of unusual betting patterns and login behaviour.
• Legal and regulatory compliance: To satisfy any applicable legal obligations, including identity verification, anti-money-laundering checks, record-keeping requirements, and responding to lawful requests from competent authorities.
• Customer support: To respond to your queries, resolve disputes, process complaints, and communicate important account-related information such as security alerts, withdrawal confirmations, and policy updates.
• Responsible gaming: To honour your responsible gaming preferences (deposit limits, cool-off periods, self-exclusion), to monitor for indicators of problem gambling, and to proactively reach out where our systems flag a potential concern — in accordance with our duty of care.
• Platform improvement: To analyse aggregated, anonymised usage data in order to identify technical issues, improve the user interface, optimise game availability, and enhance the overall takbit experience for Bangladesh players.
• Marketing communications: To send you information about promotions, bonuses, and seasonal offers (such as BPL or Eid specials) where you have consented to receive such communications. You may withdraw this consent at any time by contacting [email protected].

5 Legal Basis for Processing

Every processing activity that takbit undertakes in relation to your personal data is grounded in one or more of the following lawful bases:

• Contractual necessity: Processing that is required to enter into or perform the agreement between you and takbit — including account registration, identity verification, deposit/withdrawal processing, and bet settlement — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal obligation: Where takbit is required by applicable law to collect, process, or retain personal data — for example, to comply with anti-money-laundering obligations or to respond to a lawful demand from a competent authority — we process your data on the basis of legal obligation.
• Legitimate interests: Certain processing activities — including fraud detection, platform security monitoring, and aggregated analytics for service improvement — are carried out on the basis of takbit's legitimate business interests, provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where takbit processes your data for optional purposes — primarily direct marketing communications — we do so only on the basis of your freely given, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

takbit does not sell, rent, or commercially transfer your personal data to third parties. Data is shared only in the limited circumstances described below, and always subject to appropriate confidentiality and security obligations on the receiving party.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank receive the minimum financial data necessary to process your deposit and withdrawal transactions. These partners operate under their own privacy and security frameworks, which are independent of takbit.
• Identity verification providers: Third-party KYC partners receive copies of identity documents you submit during account verification. Once verification is complete, these partners are contractually required to delete or anonymise the documents.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and gameplay data strictly required to deliver game functionality, settle outcomes, and detect technical irregularities.
• IT infrastructure and hosting providers: takbit uses cloud hosting and content delivery infrastructure to operate the platform. These providers process technical data on takbit's behalf and are bound by data processing agreements that restrict their use of any personal data they may encounter.
• Legal and regulatory disclosures: takbit may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, or where disclosure is necessary to protect the rights, property, or safety of takbit, its players, or the public. takbit will, where legally permitted, notify the relevant Player of any such disclosure.
• Business transfers: In the unlikely event of a merger, acquisition, or sale of all or part of takbit's business, player data may be transferred to the acquiring entity as part of the transaction. Affected players will be notified prior to any such transfer and given the opportunity to request account closure and data deletion.

7 Data Retention

takbit retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

When the applicable retention period expires, takbit will securely delete or permanently anonymise the relevant data so that it can no longer be associated with any identifiable individual. Where anonymised data is retained for analytical purposes after the retention period, it does not constitute personal data.

8 Cookies & Tracking Technologies

takbit uses cookies and similar client-side storage technologies to operate the platform efficiently, maintain your session, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, preserve your account settings across pages, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional cookies: These cookies remember your stated preferences — such as your preferred language setting, interface layout choices, and recently played games — so that you do not need to reconfigure them on every visit.
• Analytical cookies: takbit uses first-party analytics to understand how players navigate the platform, which games attract the most engagement, and where technical errors occur. This data is processed in aggregated form and is not used to build individual profiles for advertising purposes.
• Session storage: In addition to cookies, takbit uses browser session storage to hold temporary data — such as your active game state — that is automatically cleared when your browser tab is closed.

You can manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your takbit account or using core platform features. takbit does not use third-party advertising cookies or cross-site tracking pixels.

9 Data Security

takbit implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and takbit's servers, ensuring that your credentials, payment details, and personal information cannot be intercepted by third parties on the network.
• Encryption at rest for all sensitive data fields stored in takbit's databases, including identity documents, payment method identifiers, and account credentials.
• Access controls based on the principle of least privilege — only those members of the takbit team whose roles require access to specific categories of personal data are granted that access, and all access events are logged and auditable.
• Multi-factor authentication required for all administrative access to takbit's back-end systems and data infrastructure.
• Regular security assessments including vulnerability scanning and penetration testing, conducted to identify and remediate any weaknesses in the platform's security posture before they can be exploited.
• Incident response procedures that ensure any confirmed or suspected data breach is investigated promptly, contained, and — where the breach presents a risk to affected individuals — disclosed to the relevant parties without undue delay.

While takbit maintains robust security practices, no internet-connected system can guarantee absolute security. You play an important role in keeping your account secure: choose a strong, unique password for your takbit account, do not share your login credentials with anyone, and notify [email protected] immediately if you suspect that your account has been accessed without your authorisation.

10 Your Rights

As an individual whose personal data is processed by takbit, you hold the following rights in relation to that data. takbit will respond to all valid requests within a reasonable period, typically within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data that takbit holds about you, along with information about how that data is used and the legal basis for its processing.
• Right to rectification: If any personal data that takbit holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details, you can update information directly within your account settings.
• Right to erasure: You have the right to request that takbit delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing and takbit has no overriding legitimate grounds to continue. This right is subject to takbit's legal obligations to retain certain data (see Section 7).
• Right to restrict processing: You have the right to request that takbit restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on takbit's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where takbit processes your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact takbit at [email protected] with the subject line "Data Rights Request". Please include your registered mobile number or email address to help us identify your account. takbit may request additional identity verification before processing a rights request to ensure that personal data is not disclosed to an unauthorised party.

11 Children's Privacy

If takbit discovers or has reason to believe that an account has been registered by or on behalf of a person under 18, or that personal data belonging to a minor has been submitted to the platform in any context, takbit will:

• Immediately suspend the relevant account pending investigation.
• Delete all personal data associated with the minor as soon as it is identified, except where retention is required for legal purposes such as reporting the matter to relevant authorities.
• Permanently close the account and forfeit any balance in accordance with the Terms & Conditions.

If you are a parent or guardian and you believe that a minor in your care has submitted personal data to takbit or created an account on the platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and act on all such reports as a matter of priority.

12 Third-Party Links

The takbit platform does not include outbound links to third-party websites for commercial or referral purposes. However, in the event that any third-party content, tool, or embedded service is accessible from the platform, please note that takbit has no control over the privacy practices or data-handling procedures of those third parties.

This Privacy Policy applies solely to data collected and processed by takbit in connection with the operation of the takbit.app platform. It does not extend to any website, application, or service operated by a third party, even if that third party is a payment partner, game provider, or identity verification service referenced within this policy. We encourage you to review the privacy policies of any third-party services you use independently of takbit.

13 Policy Amendments

takbit reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made to this policy, takbit will notify registered Players via the contact details associated with their account and will update the "Last Updated" date displayed at the top of this page.

Continued use of the takbit platform following the notification of any material change to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not accept a material amendment, you may request the closure of your account and the deletion of your personal data (subject to retention obligations) by contacting [email protected] before the effective date of the change.

Minor amendments — such as typographical corrections, clarifications that do not alter the substance of the policy, or updates to the list of payment processors or game providers — may be made without individual Player notification, though the "Last Updated" date will always reflect the most recent revision.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that takbit holds about you, please contact our support team using the details below. All privacy-related enquiries are treated with strict confidentiality and are handled by a dedicated member of the takbit compliance team.