Privacy Policy
— How tatavip Handles
Your Personal Data

tatavip collects personal data from you in the course of providing our casino and sports betting services. The types of information we collect, and the means by which we collect it, are described in full below. We collect only the data that is necessary for the purposes set out in this Privacy Policy.

Information You Provide Directly

When you register a tatavip account or interact with our support team, you voluntarily provide us with certain personal information. This includes:

• Registration data: Your full legal name, date of birth, mobile number, email address, and city of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal).
• Identity verification documents: Copies of your national identity card (NID), passport, driving licence, or other government-issued identification submitted during the KYC process.
• Address verification: Utility bills, bank statements, bKash account statements, or Nagad account statements submitted as proof of address.
• Financial data: Your bKash mobile number, Nagad mobile number, Rocket account number, bank account details, or card details provided when making deposits or withdrawing funds. tatavip does not store full card numbers — card payment data is handled exclusively by our PCI-DSS compliant payment processor partners.
• Communications data: Messages, emails, and chat transcripts from your interactions with our 24/7 customer support team.
• Responsible gaming preferences: Self-exclusion requests, deposit limits, session time limits, and any other responsible gaming settings you configure in your tatavip account.

Information Collected Automatically

When you access the tatavip platform, certain technical and behavioural data is collected automatically by our systems. This includes:

• Device and connection data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and mobile network operator.
• Usage data: Pages visited on tatavip, games opened, betting markets viewed, session start and end times (recorded in Bangladesh Standard Time, UTC+6), clickstream data, and feature interactions.
• Transaction logs: A complete record of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance changes associated with your tatavip account.
• Geolocation data: Approximate geolocation derived from your IP address. tatavip does not access your device's GPS-level precise location data.

tatavip uses the personal data we collect for the following specific purposes. Each purpose is supported by a lawful basis for processing, as described below.

Marketing Communications

If you have opted in to receive marketing communications from tatavip, we may use your email address and mobile number to send you information about promotions, bonuses, new game launches, cricket betting specials, and other offers relevant to Bangladesh players. You may withdraw your marketing consent at any time without affecting your ability to use the tatavip platform.

Automated Decision-Making

tatavip uses automated processes to detect patterns consistent with fraudulent activity, bonus abuse, and problem gambling behaviour. Where automated analysis flags an account for review, a member of the tatavip team will conduct a manual assessment before any account action is taken. tatavip does not make solely automated decisions that produce significant legal effects on players without human review.

tatavip does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Service Providers and Technology Partners

To operate the tatavip platform, we engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing partners who process your deposit and withdrawal transactions.
• Game providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, Microgaming, and other studio partners whose games are available on tatavip. These providers receive pseudonymised session data necessary to deliver their games.
• Identity verification services: Third-party KYC verification platforms that assist tatavip in verifying player identity documents.
• Cloud infrastructure and hosting providers: Secure cloud services that host the tatavip platform, databases, and transaction logs.
• Analytics providers: Platforms that help tatavip understand platform usage patterns and improve the player experience. Only aggregated or pseudonymised data is shared with analytics providers.

Legal and Regulatory Disclosure

tatavip may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction when required to do so by applicable law, court order, or regulatory direction. tatavip will notify you of any such disclosure where it is legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of tatavip's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

tatavip uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and improve the overall player experience. The following table describes the categories of cookies we use.

Managing Cookies

You may control non-essential cookies through your tatavip account settings. You may also configure your browser to block or delete cookies; however, disabling essential or security cookies will prevent you from accessing your tatavip account. tatavip does not use third-party advertising or tracking pixels from social media networks.

tatavip implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security controls include:

• TLS 1.3 encryption in transit: All data transmitted between your browser or mobile device and tatavip's servers is encrypted using Transport Layer Security version 1.3.
• AES-256 encryption at rest: Sensitive personal data stored in tatavip's databases — including identity documents and payment method details — is encrypted using AES-256 at the storage layer.
• Password hashing: Player passwords are never stored in plain text. tatavip uses a modern adaptive hashing algorithm (bcrypt) to store password credentials securely.
• Access controls: Access to player personal data within tatavip's internal systems is restricted on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Security monitoring: tatavip operates continuous security monitoring to detect and respond to suspicious activity, intrusion attempts, and data anomalies in real time.
• Regular security assessments: tatavip engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of our platform.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, tatavip will notify affected players without undue delay and take immediate steps to contain and remediate the incident. tatavip maintains a documented incident response plan specifically for data security events.

tatavip retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:

When the applicable retention period expires, tatavip will securely delete or anonymise your personal data so that it can no longer be associated with you. If you request deletion of your account, tatavip will process that request within 90 days, subject to the retention obligations described above where legal hold requirements apply.

As a tatavip player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or at [email protected]. tatavip will respond to all rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data tatavip holds about you, including your account registration data, KYC records, transaction history, and betting records. This is provided free of charge in a structured, machine-readable format.
• Right to rectification: If any personal data tatavip holds about you is inaccurate or incomplete, you have the right to request that we correct it. For example, if your registered name or mobile number needs updating, contact support with the correct details and valid supporting documentation.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that certain data must be retained for the periods specified in Section 6 to comply with legal obligations.
• Right to restrict processing: You may request that tatavip restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being investigated.
• Right to data portability: You have the right to receive your personal data in a commonly used, machine-readable format and to have that data transmitted to another service provider where technically feasible.
• Right to object: You have the right to object to tatavip processing your personal data based on legitimate interests, including for direct marketing purposes. An objection to marketing will be actioned immediately; objections to other legitimate-interest processing will be considered on a case-by-case basis.
• Right to withdraw consent: Where tatavip processes your data based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way tatavip handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the tatavip platform — including on Eid, Pohela Boishakh, Victory Day (16 December), and Independence Day (26 March).
• Email (plain text — not a link): [email protected]
• WhatsApp (plain text — not a link): +880 1700 000000

Policy Updates

tatavip reviews and updates this Privacy Policy periodically to reflect changes in our data practices, technology, and applicable legal requirements. When we make material changes to this policy, we will publish the updated version at tatavip.net/privacy-policy with a revised effective date. For changes that significantly affect your rights or how we use your data, we will make reasonable efforts to notify you directly via the contact details registered to your tatavip account.

Your continued use of the tatavip platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any changes to this policy, you may close your tatavip account in accordance with the procedure described in the Terms & Conditions.

Governing Language

This Privacy Policy is published in English. In the event of any inconsistency between this English-language version and any translated version, the English text shall prevail in all respects.