Privacy Policy — takabuzz

takabuzz collects personal data through several channels: directly from you when you register and use the Platform, automatically through your interactions with our systems, and in limited cases from third-party service providers who assist in identity verification and payment processing. The categories of data we collect are described below.

1.1 Registration & Account Data

When you create a takabuzz account, we collect the following information:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — to confirm you meet the 18+ age requirement.
• Bangladeshi mobile number — used as your primary account identifier and for two-factor authentication where enabled.
• Email address — used for account notifications and, where consented, promotional communications.
• Residential address — collected at the time of identity verification, including district, division, and postal code within Bangladesh.
• Preferred currency — Bangladeshi Taka (৳ BDT) by default for all accounts.

1.2 Identity Verification (KYC) Documents

Before your first withdrawal is processed, you are required to complete a Know Your Customer (KYC) verification. The following document types are accepted:

• Bangladesh National Identity Card (NID) — front and back image
• Valid Bangladeshi passport — photograph data page
• Bangladesh driving licence
• Utility bill or bank statement dated within the last three months (for address verification)
• Mobile banking account screenshot confirming your bKash, Nagad, Rocket, or Upay number matches the one registered on the Platform

These documents are stored in an encrypted, access-controlled document vault and are accessible only to authorised compliance personnel. They are never shared with third parties except where required by applicable law or by a payment processor for fraud prevention purposes.

1.3 Financial & Transaction Data

We record all deposit and withdrawal transactions associated with your account, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), transaction timestamps, amounts in BDT, and transaction reference numbers. We do not store full mobile banking PINs, bank account passwords, or card CVV numbers. Payment credential data is handled directly by the respective payment provider under their own security protocols.

1.4 Gameplay & Betting Activity Data

Our systems automatically record your gameplay history, including game titles accessed, wagers placed, outcomes, session durations, and sports betting selections across cricket, football, kabaddi, and other available markets. This data is used to manage your account balance, resolve disputes, generate responsible gaming insights, and improve the Platform's game offerings.

1.5 Technical & Device Data

When you access takabuzz, our servers automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and session duration. This data is used for security monitoring, fraud detection, and to optimise Platform performance across devices commonly used in Bangladesh.

1.6 Communications Data

If you contact the takabuzz support team via email or live chat, we retain records of those communications — including your queries, our responses, and any attachments submitted — for a minimum of 36 months. These records are used for quality assurance, dispute resolution, and staff training purposes.

takabuzz processes your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your data are set out below.

Marketing Communications: takabuzz will only send you personalised promotional emails, SMS messages, or in-platform notifications relating to bonuses, seasonal promotions (such as BPL cricket offers, Eid reload bonuses, or Pohela Boishakh specials), and new game releases if you have explicitly opted in to receive such communications. You may withdraw this consent at any time through your account settings or by writing to support@takabuzz.

Automated Decision-Making: Some of our fraud detection and responsible gaming monitoring systems use automated processing to flag unusual account activity. Where an automated decision may materially affect your account (for example, triggering a temporary account restriction), you have the right to request human review of that decision by contacting the support team.

takabuzz does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared with external parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Processors

To facilitate deposits and withdrawals in BDT, takabuzz works with mobile banking providers and bank transfer services including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the transaction data necessary to process your payment. Each provider operates under its own privacy policy and security standards, which govern how they handle data passed to them during a transaction.

3.2 Game Content Providers

Live casino games and slot titles on takabuzz are delivered through third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers necessary to deliver game content and record round outcomes. They do not receive your name, NID, or payment details. All studio partners are contractually bound to process any data they receive solely for the purpose of delivering game services.

3.3 Identity Verification Services

Where automated identity verification tools are used to cross-reference submitted KYC documents, takabuzz may share limited personal data (name, date of birth, document number) with an accredited identity verification service provider. Any such provider is contractually prohibited from retaining or using this data beyond the immediate verification purpose.

3.4 Legal & Regulatory Disclosure

takabuzz may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction — including in connection with anti-money laundering (AML) investigations. In such cases, disclosure is limited to the specific data requested and is documented in our internal compliance records.

takabuzz uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate core Platform functions, improve user experience, and monitor Platform security. This section explains the types of cookies used and your choices regarding them.

Most modern browsers allow you to control cookie behaviour through their settings panel — including blocking all non-essential cookies, deleting stored cookies, or receiving a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly, and you may not be able to log in or access your account if these cookies are blocked.

takabuzz does not use third-party advertising networks or social media tracking pixels. Analytical data collected via cookies is aggregated and anonymised before being reviewed by the Platform's operations team.

takabuzz applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, and unlawful disclosure. The key measures in place are described below.

• SSL/TLS Encryption in Transit: All data transferred between your browser or mobile device and the takabuzz Platform is encrypted using SSL/TLS protocols. This applies to account login sessions, deposit flows, and all support communications conducted through the Platform.
• Encryption at Rest: Sensitive personal data — including KYC documents, identity records, and financial transaction logs — is encrypted at rest using AES-256 standard encryption within our database infrastructure.
• Access Controls: Internal access to personal data is governed by a strict role-based access control (RBAC) policy. Only personnel whose job function requires access to specific data categories are granted the relevant permissions. All access events are logged and subject to periodic audit.
• Intrusion Detection: Our infrastructure is monitored 24/7 with automated intrusion detection systems (IDS) that flag anomalous access patterns, unusual query volumes, and potential brute-force attempts in real time.
• Password Security: Account passwords are stored in hashed form using a modern, computationally expensive hashing algorithm. Plaintext passwords are never stored or recoverable by Platform staff.
• Incident Response: In the unlikely event of a data breach that poses a risk to your personal data, takabuzz will notify affected players within a reasonable timeframe and take all appropriate remediation steps without delay.

As a player on the takabuzz Platform, you have a number of rights in relation to the personal data we hold about you. These rights may be exercised free of charge by submitting a written request to the support team at support@takabuzz. takabuzz will respond to all valid privacy rights requests within 30 calendar days of receipt.

• Right of Access: You may request a copy of the personal data that takabuzz holds about you, including your registration details, KYC records, transaction history, and gameplay data. We will provide this in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (such as updating a contact number), this can be done directly through your account settings. For identity document corrections, please contact the support team.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data — for example, where your account has been permanently closed and the mandatory retention period has expired, or where data was collected on the basis of consent that you have since withdrawn. Note that some data must be retained for legal and compliance reasons (see Section 7 below) even following a deletion request.
• Right to Restrict Processing: You may request that we limit the way we use your data while a correction or objection request is being resolved. During a restriction period, we will continue to store your data but will not actively process it beyond storage.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests — for example, profiling for responsible gaming monitoring or fraud detection. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawal of marketing consent does not affect your ability to access the Platform or your account.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service, where technically feasible.

To exercise any of the above rights, please send a written request to support@takabuzz with the subject line "Privacy Rights Request", your registered mobile number, and a description of the right you wish to exercise. We may ask you to confirm your identity before processing the request to protect your account from unauthorised access.

takabuzz retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to each category of data are summarised below.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where anonymisation is applied, the resulting aggregated data may be retained indefinitely for statistical and analytical purposes.

Where you submit a Right to Erasure request, takabuzz will delete or anonymise your data as requested, subject to any mandatory retention obligations outlined in the table above. In such cases, we will notify you of any data that must be retained and the specific legal reason for its continued retention.

takabuzz reserves the right to update or revise this Privacy Policy at any time to reflect changes in platform operations, applicable law, or data processing practices. The effective date displayed at the top of this page will be updated whenever a material change is made.

Where changes are significant — for example, a new category of data being collected, or a new third-party data processor being engaged — takabuzz will notify registered players via email to their registered address or through a prominent notice within the Platform, giving a minimum of 14 days' notice before the revised policy takes effect. Continued use of the Platform after the revised policy's effective date constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically. The current version is always accessible from the footer of every page on takabuzz.

Privacy Enquiries & Complaints: If you have any questions, concerns, or complaints regarding this Privacy Policy or the way takabuzz handles your personal data, please contact the Privacy team in writing at support@takabuzz with the subject line "Privacy Enquiry". We aim to acknowledge all enquiries within 3 business days and to provide a substantive response within 30 calendar days.