tatka Privacy Policy

tatka collects personal information in several distinct ways: information you provide to us directly during registration and account management; information generated automatically as you use the platform; and information obtained from trusted third-party sources where permitted by applicable law. The following table summarises the principal categories of personal data we collect and the primary source of each:

Identity verification documents: As part of tatka's Know Your Customer (KYC) obligations, we may collect copies of government-issued photo identification (National ID card, passport, or driving licence), proof of address documents (utility bills, bank statements), and in some cases a selfie photograph for biometric identity matching. These documents are processed solely for the purpose of verifying your identity and age, complying with anti-money laundering requirements, and preventing fraudulent account activity.

Sensitive data: tatka does not intentionally collect special categories of sensitive personal data (such as health information, religious beliefs, political opinions, or biometric data used for identification beyond KYC). In the event that you voluntarily disclose sensitive information to our support team — for example, in the context of a responsible gaming self-exclusion request citing a health condition — that information is handled with the highest level of confidentiality and is not used for any purpose other than the immediate support request.

Data about minors: The tatka platform is strictly for persons aged 18 years and above. We do not knowingly collect or process personal data relating to individuals under the age of 18. If we become aware that personal data belonging to a minor has been collected, we will immediately delete that data and close the associated account. Parents or guardians who believe a minor has registered an account should contact [email protected] without delay.

tatka processes personal data only where a lawful basis for that processing exists. The primary lawful bases on which we rely are: performance of the contract between tatka and the player; compliance with legal obligations (including anti-money laundering regulations and age verification requirements); our legitimate business interests (where those interests are not overridden by your rights); and, where required, your explicit consent.

The following sets out the specific purposes for which we use your personal data:

• Account creation and management: To create, maintain, and administer your tatka account, including processing deposits and withdrawals, recording bet placements and game results, and managing your bonus balance and wagering history.
• Identity and age verification: To verify that you are who you claim to be and that you are at least 18 years of age, in compliance with responsible gaming obligations and as a contractual prerequisite to the provision of real-money gambling services.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard; to process withdrawal requests to your verified payment method; and to maintain records of all financial transactions for accounting and regulatory purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, account takeover attempts, and other prohibited conduct as defined in tatka's Terms & Conditions. This includes automated analysis of account activity patterns and device fingerprinting.
• Customer support: To respond to your support queries via live chat, email, and our ticketing system, and to maintain a record of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: To monitor your gambling behaviour for indicators of problem gambling; to enforce self-exclusion requests and cooling-off periods you have set; and to comply with our responsible gaming obligations by providing intervention where appropriate.
• Marketing communications: Where you have provided consent or where we have a legitimate interest, to send you promotional offers, bonus notifications, tournament alerts, and seasonal promotions relevant to your gaming preferences. You may withdraw consent for marketing communications at any time via your account settings or by contacting support.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the tatka platform, optimising game recommendations, and enhancing the overall user experience for players across Bangladesh.
• Legal compliance: To comply with applicable laws and regulations, respond to lawful requests from competent authorities, and enforce tatka's contractual rights and obligations.

tatka does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, other than fraud-detection and responsible gaming monitoring systems where automated intervention is required to protect your interests or the integrity of the platform. Where such automated processing occurs, you have the right to request human review of any decision that adversely affects you.

tatka does not sell your personal data to third parties. We share personal data with external parties only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose. All third parties with whom we share data are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the scope of their engagement with tatka.

• Payment processors: We share financial transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card-processing networks (Visa, Mastercard) for the purpose of processing deposits and withdrawals. Each provider operates under its own privacy policy and is independently responsible for the security of data within its systems.
• Identity verification providers: We share identity documents and personal data with third-party KYC verification service providers who process this information on our behalf to confirm the identity and age of players. These providers are bound by strict data processing agreements.
• Game software providers: Certain game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited technical data (such as player session tokens and game round identifiers) that is necessary to deliver their game content within the tatka platform. These providers do not receive your full personal profile and operate under separate contractual data handling obligations.
• Fraud detection and analytics: We work with specialist fraud detection and cybersecurity partners who process technical and behavioural data on our behalf to identify and prevent fraudulent activity on the platform.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where we are required to do so by applicable law, by court order, or by regulatory instruction. We will notify you of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or a material part of tatka's business assets, personal data held by tatka may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected players and ensure that equivalent privacy protections remain in place.

The tatka platform uses cookies and similar tracking technologies (including local storage objects, session storage, and pixel tags) to ensure the correct functioning of the website, to remember your preferences, to maintain your login session, and to gather analytics data that helps us understand how the platform is being used. The following table describes the categories of cookies we use:

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is set. Please be aware that disabling strictly necessary cookies will impair the core functionality of the tatka platform — including the ability to maintain a logged-in session and process transactions — and we therefore strongly recommend that strictly necessary cookies remain enabled during active platform use.

tatka does not use cross-site tracking cookies that follow your browsing activity across third-party websites unrelated to the tatka platform. Any analytics or performance tracking we perform is scoped to the tatka.net domain and its subdomains only.

tatka retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations — whichever period is longer. The following retention schedule applies as a general guide:

• Account data (identity, contact, KYC documents): Retained for the duration of the active account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction in compliance with financial record-keeping regulations applicable to online payment operations in Bangladesh.
• Betting and gaming history: Retained for the duration of the active account plus 3 years following account closure for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for 2 years from the date of the last interaction in the relevant support thread, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Marketing preference and consent records: Retained for the duration of the account plus 2 years following account closure as evidence of the lawful basis for any marketing communications sent during the account's active period.
• Technical and analytics data: Retained in aggregated, anonymised form indefinitely for platform performance and trend analysis. Raw logs containing identifiable technical data (IP addresses, session IDs) are retained for up to 12 months and then either anonymised or deleted.

Where personal data is no longer required and no legal hold applies, tatka will securely delete or irreversibly anonymise the data in accordance with industry-standard data destruction practices. Data stored in backup systems is subject to the same retention schedule and will be purged from backups within the next scheduled backup rotation cycle following the expiry of the applicable retention period.

tatka implements a comprehensive set of technical and organisational security controls to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme is reviewed and updated on a regular basis to account for evolving threats and industry best practices.

Key security measures currently in place include:

• Transport Layer Security (TLS): All data in transit between player devices and the tatka platform is encrypted using TLS 1.2 or higher, with 256-bit AES encryption. Our SSL certificate is validated and renewed on a continuous basis.
• Data encryption at rest: Sensitive personal data stored on tatka's servers — including identity documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
• Access control: Access to systems containing personal data is restricted on a strict need-to-know basis using role-based access control (RBAC). Multi-factor authentication (MFA) is enforced for all staff with access to production systems.
• Intrusion detection and prevention: tatka operates continuous network monitoring, intrusion detection systems (IDS), and web application firewall (WAF) protection to detect and respond to unauthorised access attempts in real time.
• Security audits and penetration testing: tatka's infrastructure undergoes periodic third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach or security incident that affects your personal data, tatka will notify affected players without undue delay and will take all reasonable steps to contain the incident, assess its impact, and prevent recurrence.

tatka respects your rights over your personal data. As a player, you are entitled to exercise the following rights in connection with the personal data tatka holds about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data tatka holds about you, together with a description of how that data is being used, the categories of recipients with whom it has been shared, and the retention period applied to it.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update basic contact details directly from your account profile page without submitting a formal request.
• Right to erasure: In certain circumstances, you have the right to request that tatka delete your personal data. This right is subject to overriding legal obligations — for example, tatka cannot delete financial transaction records that must be retained under anti-money laundering regulations. Where deletion is not possible for legal reasons, we will inform you of the specific reason and confirm the earliest date on which deletion can be carried out.
• Right to restrict processing: You have the right to request that tatka temporarily restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for the purpose of transferring it to another service provider.
• Right to object to marketing: You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, tatka will immediately cease all marketing communications to you and will record your objection in our suppression list.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

We will not charge a fee for processing a genuine privacy rights request, and we will not discriminate against you in the provision of tatka services for exercising any of the above rights. However, where a request is manifestly unfounded or excessively repetitive, tatka reserves the right to charge a reasonable administrative fee or to decline the request, with written explanation.

tatka reserves the right to revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made to this policy, we will post the updated version on this page with a revised effective date and, where the changes are significant, we will notify registered players by email or via an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your information. The current version of this Privacy Policy supersedes all prior versions. Your continued use of the tatka platform following the posting of a revised policy constitutes your acceptance of the changes. If you do not agree with any changes made to this policy, you should stop using the platform and request account closure.

Contacting tatka about Privacy: If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which tatka handles your personal data, you may reach our Data Protection team through the following channels:

• Email (preferred): [email protected] — use the subject line "Privacy Enquiry"
• Live Chat: Available 24/7 via the tatka platform — average response time under 2 minutes
• WhatsApp: +880 1800 000 000 — available during Bangladesh Standard Time (BST, UTC+6) business hours

tatka is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or seek legal redress through the courts of competent jurisdiction.