Privacy Policy
How tass71 Protects Your Data

tass71 collects personal information from players in three primary ways: information you provide directly during registration and account use, information generated automatically through your use of our platform, and information received from third-party payment providers and identity verification services. This section describes each category in detail.

Information you provide directly:

• Registration data: Full legal name, date of birth, Bangladesh mobile number, email address, and a self-selected username and password when you create a tass71 account.
• KYC identity documents: A copy of your Bangladesh National Identity Card (NID) or passport, together with a selfie photograph, submitted during the Know Your Customer (KYC) verification process required for withdrawals above ৳5,000.
• Payment information: Mobile financial service account details (bKash, Nagad, Rocket, Upay numbers), bank account details for bank transfer processing, and USDT wallet addresses for cryptocurrency transactions. tass71 does not store full card numbers — Visa and Mastercard transactions are processed via tokenised payment gateways.
• Support communications: Any messages, complaints, or enquiries you send to tass71 via email ([email protected]) or live chat, including the content of those communications and any attachments you provide.
• Responsible gaming submissions: Self-exclusion requests, deposit limit preferences, cooling-off requests, and any self-assessment questionnaire responses submitted through tass71's responsible gaming tools.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers collected each time you access tass71.
• Session and usage data: Pages visited, games played, time spent on each game or page, betting history, deposit and withdrawal timestamps, and in-play session duration data.
• Geolocation data: Approximate location derived from your IP address. tass71 does not collect precise GPS coordinates unless explicitly permitted by your device settings.
• Cookie and tracking data: Data collected via session cookies, persistent cookies, and similar technologies as described in Section 4 of this Privacy Policy.

Information received from third parties:

• Payment processors: Transaction confirmation data, payment status, and fraud-score indicators shared by bKash, Nagad, Rocket, Upay, Visa, Mastercard, and blockchain network confirmation services.
• Identity verification partners: Document authenticity scores and identity match confidence levels from third-party KYC verification service providers used by tass71 to comply with anti-money laundering obligations.
• Fraud prevention services: Risk signals and flagged account indicators from industry-standard fraud prevention partners used to protect tass71 players and the platform from fraudulent activity.

tass71 uses the personal information collected from players for the following purposes. Each purpose is based on one of three lawful grounds: contractual necessity (to fulfil our obligations to you as a tass71 player), legitimate interests (to operate and protect the tass71 platform), or legal obligation (to comply with applicable Bangladesh law and financial regulations).

tass71 will not use your personal data for any purpose that is materially different from those listed above without providing prior notice and, where required by law, obtaining your consent. If you have opted in to receive marketing communications from tass71, you may withdraw that consent at any time by updating your account settings or by contacting [email protected].

tass71 does not sell, rent, or trade your personal information to any third party for commercial gain. We share player data only in the limited circumstances described below, and only with recipients who are bound by appropriate confidentiality and data protection obligations.

Categories of third parties with whom tass71 may share your data:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard, and USDT network processors receive the minimum transaction data required to authorise and settle payments. These providers operate under their own privacy policies and are responsible for the security of data within their systems.
• KYC and identity verification partners: Third-party identity verification service providers receive copies of KYC documents (NID, passport, selfie) solely for the purpose of verifying their authenticity and confirming the player's identity. Verification partners are contractually prohibited from using this data for any other purpose.
• Game technology providers: Casino game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers and game-play data required to operate their games within the tass71 platform. These providers do not receive personally identifiable registration information.
• Fraud prevention and security services: Specialised fraud detection platforms may receive device fingerprint data, IP address information, and behavioural pattern data to identify and prevent fraudulent account activity on tass71.
• Legal and regulatory authorities: tass71 may disclose player personal data to law enforcement agencies, financial intelligence units, or courts of competent jurisdiction in Bangladesh or internationally, where required to do so by applicable law, court order, or regulatory directive. tass71 will, where legally permissible, notify the affected player prior to making such a disclosure.
• Professional advisers: Legal counsel, accountants, and auditors engaged by tass71 may have access to player data on a strictly need-to-know basis, subject to professional confidentiality obligations.

International data transfers: Some of tass71's technology and game provider partners operate infrastructure located outside Bangladesh. Where personal data is transferred internationally in connection with these partnerships, tass71 ensures that appropriate contractual safeguards are in place to maintain a standard of data protection equivalent to that described in this Privacy Policy.

tass71 uses cookies and similar tracking technologies on its website and mobile platform to ensure that the service functions correctly, to remember your preferences, and to understand how players interact with different areas of the platform. This section explains the types of cookies tass71 uses and how you can manage your cookie preferences.

Types of cookies used by tass71:

tass71 does not deploy third-party advertising cookies or tracking pixels from social media networks. We do not participate in cross-site behavioural advertising programmes. The analytics tools used by tass71 operate in anonymised mode, meaning that data collected for performance analysis cannot be tied back to your personal identity.

Managing cookies: You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies or fraud prevention cookies will impair your ability to log in to tass71 and may prevent certain platform features from functioning correctly. Instructions for managing cookies are available in the help documentation for your browser (Chrome, Firefox, Safari, Edge, or Opera).

tass71 implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. The following technical and organisational security measures are in place across the tass71 platform:

• Transport Layer Security (TLS): All data in transit between your device and tass71 servers is encrypted using TLS 1.2 or higher. The tass71 website operates exclusively over HTTPS.
• Data encryption at rest: Sensitive personal data fields — including KYC document images, NID numbers, payment account details, and password hashes — are encrypted at rest using AES-256 encryption within tass71's database infrastructure.
• Access controls: Access to tass71's player database is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular audit review.
• Password security: Player passwords are never stored in plain text. tass71 uses industry-standard one-way hashing algorithms with unique per-account salts to store password credentials.
• Two-factor authentication (2FA): tass71 offers optional 2FA for player accounts via SMS OTP to the registered Bangladesh mobile number. Players are strongly encouraged to enable 2FA to protect their accounts.
• Penetration testing: tass71's platform undergoes periodic security assessments by independent third-party security professionals to identify and remediate vulnerabilities.
• Incident response: tass71 maintains a documented security incident response plan. In the event of a data breach that affects player personal information, tass71 will notify affected players and, where required, relevant authorities within the timeframes prescribed by applicable law.

Server location: tass71's primary data infrastructure is hosted on servers located in secured data centres. Player data associated with Bangladesh accounts is processed and stored in accordance with applicable Bangladesh data protection principles. Some data may be processed by game technology partners operating international infrastructure, subject to the data transfer safeguards described in Section 3.

As a tass71 player and data subject, you hold the following rights in respect of your personal information held by tass71. To exercise any of these rights, please contact the tass71 data protection team at [email protected] with the subject line "Data Rights Request" and include your registered email address and full name for identity verification purposes.

• Right of access: You have the right to request a complete copy of all personal data that tass71 holds about you, including registration data, KYC information, transaction history, and betting records. tass71 will respond to verified access requests within 30 days at no charge.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by tass71. For name or date of birth corrections, tass71 may require supporting documentary evidence before making the change.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis for processing exists. This right is subject to legal retention obligations — tass71 is required by Bangladesh financial regulations and anti-money laundering law to retain certain transaction records and KYC documents for a minimum of 5 years after account closure, and erasure of these records cannot be accommodated during that period.
• Right to restriction of processing: You may request that tass71 restricts its processing of your personal data in certain circumstances — for example, while the accuracy of disputed data is being verified, or while an erasure request is being assessed.
• Right to data portability: You have the right to receive a copy of personal data you have provided to tass71 in a structured, commonly used, machine-readable format (such as CSV or JSON), where technically feasible.
• Right to object: You have the right to object to tass71's processing of your personal data where that processing is based on legitimate interests. If you object, tass71 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where tass71 processes your data on the basis of your consent (for example, sending marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

tass71 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Bangladesh law and regulation. The following retention periods apply to the main categories of personal data held by tass71:

Upon expiry of the applicable retention period, tass71 will securely delete or anonymise the relevant personal data in accordance with its internal data disposal procedures. Anonymised data — which cannot be linked to any individual player — may be retained indefinitely for statistical and analytical purposes.

Players who close their tass71 account should be aware that certain categories of data, particularly KYC documents and transaction records, cannot be deleted immediately upon account closure due to the mandatory retention obligations described above. tass71 will, however, restrict processing of this retained data to compliance purposes only and will not use it for any commercial or marketing activity following account closure.

tass71 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services offered on the tass71 platform. When a material change is made to this Privacy Policy, tass71 will notify registered players via email to their registered email address and/or via a prominent notice on the tass71 platform at least 14 days before the change takes effect.

The "Effective Date" displayed at the top of this Privacy Policy indicates when the current version came into force. Your continued use of the tass71 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a material change to this Privacy Policy, you should close your tass71 account and cease using the platform before the change takes effect.

Minor updates — such as corrections of typographical errors, clarifications that do not alter the substance of tass71's data practices, or updates to contact details — may be made without individual player notification. The updated policy will be published on tass71.com with a revised effective date.

How to contact tass71 about this Privacy Policy:

• Data Protection enquiries: Email [email protected] with the subject line "Privacy Policy Enquiry".
• Data rights requests (access, rectification, erasure, portability): Email [email protected] with the subject line "Data Rights Request" and include your registered email address and full name.
• Marketing opt-out: Update your preferences in your tass71 account settings, or email [email protected] with the subject line "Marketing Opt-Out".
• General platform support: Visit the tass71 FAQ page for answers to common questions, or contact [email protected] for assistance with your account.

This Privacy Policy was last reviewed and approved on 1 January 2026 and supersedes all prior versions of the tass71 Privacy Policy. Players in Bangladesh who have questions about data protection rights under applicable local law are encouraged to seek independent legal advice.