cbaji Privacy Policy – How We Protect Your Data

01 Introduction

cbaji ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy explains how cbaji collects, uses, stores, and shares your personal information when you access cbaji.one, use the cbaji mobile app, or interact with any of our services.

This policy applies to all registered players, visitors to the cbaji website, and anyone who contacts cbaji support. It should be read alongside our Terms and Conditions and our Responsible Gaming policy.

We take your privacy seriously. If you ever feel that cbaji is not handling your data correctly, you have the right to raise a concern with us directly or with the relevant data protection authority in your jurisdiction.

02 Data We Collect

cbaji collects different categories of personal data depending on how you interact with the platform. The main categories are:

We do not collect any special category data (such as health information, religious beliefs, or political opinions) unless you voluntarily provide it in a support communication, in which case it is used solely to resolve your query.

03 How We Collect Your Data

cbaji collects your personal data through the following channels:

• Direct interactions — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your profile settings.
• Automated technologies — when you visit cbaji.one or use the cbaji app, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies.
• Third-party sources — we may receive data from payment processors (such as bKash and Nagad) to verify transactions, and from identity verification services to confirm your identity during KYC.
• Fraud prevention partners — we may receive data from fraud detection services that help us identify suspicious account activity and protect the integrity of the platform.

04 Why We Use Your Data

cbaji uses your personal data for the following purposes:

• To create and manage your cbaji account.
• To verify your identity and age as required by our Terms and applicable regulations.
• To process deposits, withdrawals, and other financial transactions.
• To detect and prevent fraud, money laundering, and other illegal activity.
• To provide customer support and respond to your queries.
• To personalise your experience on the cbaji platform, including game recommendations.
• To send you account-related notifications such as transaction confirmations and security alerts.
• To send you promotional communications about cbaji offers and bonuses, where you have opted in.
• To monitor gaming behaviour and apply responsible gaming tools where necessary.
• To comply with legal and regulatory obligations.
• To improve the cbaji platform through analysis of usage patterns and player feedback.

cbaji will never use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

05 Legal Basis for Processing

cbaji processes your personal data on the following legal grounds:

• Contract performance — processing your data is necessary to provide the cbaji service you have signed up for, including account management and payment processing.
• Legal obligation — cbaji is required by law to collect and retain certain data, including identity verification records and transaction histories, for anti-money laundering and regulatory compliance purposes.
• Legitimate interests — cbaji has a legitimate interest in detecting fraud, securing the platform, and improving our services. We only rely on this basis where our interests are not overridden by your privacy rights.
• Consent — for marketing communications and non-essential cookies, we rely on your explicit consent. You can withdraw this consent at any time.

06 Who We Share Your Data With

cbaji does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary:

• Payment processors — to process your deposits and withdrawals via bKash, Nagad, and other approved payment methods.
• Identity verification providers — to verify your identity and age during the KYC process.
• Fraud prevention services — to detect and prevent fraudulent activity on the platform.
• IT and hosting providers — who provide the infrastructure that powers the cbaji platform. These providers are contractually bound to handle your data securely and only as instructed by cbaji.
• Regulatory and law enforcement authorities — where cbaji is legally required to disclose data, for example in response to a court order or regulatory investigation.
• Responsible gaming organisations — where a player has requested self-exclusion or where cbaji is required to share data with a national self-exclusion scheme.

07 How Long We Keep Your Data

cbaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and reporting requirements.

• Account data is retained for the duration of your account and for a minimum of five years after account closure, as required for anti-money laundering compliance.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• Identity verification documents are retained for five years after account closure.
• Support communications are retained for two years from the date of the interaction.
• Marketing consent records are retained until you withdraw consent, plus one year thereafter.

When your data is no longer required, cbaji will securely delete or anonymise it. Anonymised data may be retained indefinitely for analytical and statistical purposes, as it can no longer be linked back to you.

08 How We Protect Your Data

cbaji takes the security of your personal data seriously. We have implemented a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration:

• All data in transit is encrypted using TLS (Transport Layer Security) protocols.
• Sensitive data at rest, including payment details and identity documents, is encrypted using AES-256 encryption.
• Access to personal data within cbaji is restricted on a need-to-know basis. Staff who handle personal data are trained in data protection best practices.
• cbaji's systems are regularly tested for vulnerabilities through security audits and penetration testing.
• We maintain an incident response plan to handle data breaches promptly and notify affected players where required by law.

09 Cookies & Tracking Technologies

cbaji uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use our services. The types of cookies we use include:

• Essential cookies — required for the platform to function. These cannot be disabled as they are necessary for login sessions, security, and core functionality.
• Analytics cookies — help us understand how players navigate the platform so we can improve the user experience. These are only set with your consent.
• Preference cookies — remember your settings and preferences, such as language and display options.
• Marketing cookies — used to deliver relevant promotional content. These are only set with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of the cbaji platform.

10 Your Rights

You have the following rights in relation to your personal data held by cbaji. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11 Marketing Preferences

cbaji may send you promotional emails, SMS messages, or in-app notifications about bonuses, new games, and special offers — but only if you have opted in to receive them. You can update your marketing preferences at any time through your account settings or by clicking the unsubscribe link in any marketing email.

Opting out of marketing communications will not affect your ability to use cbaji or receive important account-related notifications such as transaction confirmations, security alerts, or policy updates.

12 Minors

cbaji is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a minor has registered an account, we will immediately close the account and delete all associated personal data.

If you believe a minor has registered on cbaji, please contact us immediately at [email protected].

13 Changes to This Policy

cbaji may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and notify registered players via email or an in-platform notification.

We encourage you to review this policy periodically. Continued use of cbaji after changes have been published means you accept the updated policy. If you disagree with any changes, you should stop using cbaji and contact support to close your account.

14 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how cbaji handles your personal information, please get in touch with our team.

Email: [email protected]

We aim to respond to all privacy-related enquiries within 30 days. For general questions, visit our FAQ page. For information about responsible gaming tools, visit our Responsible Gaming page.