cbaji Privacy Policy — Your Data, Your Rights

1. Introduction

This Privacy Policy describes how cbaji collects, uses, stores, and protects the personal information of players who register and use the cbaji platform at cbaji.today. By creating an account or using any part of cbaji, you agree to the practices described in this policy.

cbaji is committed to handling your personal data responsibly. We understand that players in Bangladesh trust us with sensitive information — including payment account details and identity documents — and we take that responsibility seriously. This policy is written in plain English so you know exactly where you stand.

2. Data We Collect

cbaji collects only the personal data that is necessary to provide you with a safe, functional, and compliant gaming experience. We do not collect data for its own sake. Below is a breakdown of the categories of data we collect and why each category is needed.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless you voluntarily provide it in the context of a responsible gaming request.

3. How We Collect It

cbaji collects your personal data through several channels. Understanding how data reaches us helps you make informed decisions about what you share.

• Registration form: When you create your cbaji account, you provide your name, mobile number, email address, and date of birth directly to us.
• Identity verification: If we request KYC documents, you upload them through a secure form within your cbaji account dashboard.
• Payment transactions: When you deposit or withdraw via bKash, Nagad, or Rocket, transaction reference data is passed to cbaji by the payment provider to confirm the transaction.
• Automatic technical collection: cbaji's servers automatically log IP addresses, device identifiers, browser types, and session activity whenever you access the platform. This happens in the background and is standard practice for all online platforms.
• Cookies and similar technologies: cbaji uses cookies to maintain your login session and remember your preferences. See Section 6 for full details.
• Support communications: If you contact cbaji support by email or live chat, the content of those communications is stored as part of your account record.

4. How We Use Your Data

cbaji uses your personal data for specific, legitimate purposes. We do not use your data for anything beyond what is described here without obtaining your explicit consent first.

• Account management: Your identity and contact data is used to create and maintain your cbaji account, verify your identity, and communicate important account information to you.
• Payment processing: Transaction data and payment account references are used to process your deposits and withdrawals accurately and securely.
• Security and fraud prevention: Technical data including IP addresses and device identifiers is used to detect suspicious login attempts, identify duplicate accounts, and prevent fraudulent activity on the platform.
• Legal and regulatory compliance: cbaji is required to maintain certain records for anti-money-laundering compliance. Transaction records and identity data may be retained for this purpose even after your account is closed.
• Responsible gaming: Usage data such as session duration and betting patterns is monitored to identify players who may be showing signs of problem gambling. This data is used to trigger responsible gaming interventions where appropriate.
• Platform improvement: Aggregated, anonymised usage data helps cbaji understand how players use the platform and where improvements can be made. This data cannot be traced back to individual players.
• Customer support: Support communication records are used to resolve disputes, answer queries, and improve the quality of cbaji's support service.

5. Data Sharing

cbaji does not sell your personal data. We share data only in the limited circumstances described below, and only with parties who are contractually required to handle it securely and in accordance with this privacy policy.

• Payment providers (bKash, Nagad, Rocket): We share the minimum transaction data necessary to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle data on their end.
• Identity verification services: If you are required to complete KYC verification, your identity documents may be processed by a third-party verification service. This service is bound by strict data processing agreements with cbaji.
• Legal authorities: cbaji may be required to disclose personal data to law enforcement or regulatory authorities if required by law or in response to a valid legal order. We will notify you of such disclosures where we are legally permitted to do so.
• Anti-fraud networks: In cases of suspected fraud, cbaji may share limited data with industry anti-fraud networks to prevent the same fraudulent actor from targeting other platforms. Only data directly relevant to the fraud investigation is shared.

cbaji does not share your data with social media platforms, advertising networks, data brokers, or any other commercial third parties for marketing purposes.

6. Cookies

cbaji uses cookies — small text files stored on your device — to make the platform work properly and to improve your experience. Here is a breakdown of the types of cookies cbaji uses:

• Essential cookies: These are required for cbaji to function. They maintain your login session, remember your language preference, and keep your account secure. You cannot opt out of essential cookies without losing access to the platform.
• Analytics cookies: cbaji uses anonymised analytics to understand how players navigate the platform. This data is aggregated and cannot identify individual users. You can opt out of analytics cookies from your browser settings.
• Security cookies: These cookies help cbaji detect and prevent fraudulent activity, including bot traffic and account takeover attempts. They are essential for platform security.

cbaji does not use advertising cookies or tracking pixels that follow you across other websites. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use cbaji normally.

7. Data Retention

cbaji retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods vary by data type based on legal requirements and operational necessity.

• Account and identity data: Retained for the duration of your account and for five years after account closure, in line with standard anti-money-laundering record-keeping requirements.
• Transaction records: Retained for five years after the date of each transaction. This is a legal requirement for financial record-keeping.
• Support communications: Retained for two years after the last communication, or for the duration of any open dispute.
• Technical and usage data: Retained for 12 months on a rolling basis. Older data is automatically deleted or anonymised.
• Marketing preferences: Retained until you opt out or request deletion, whichever comes first.

When data reaches the end of its retention period, cbaji deletes it securely or anonymises it so it can no longer be linked to you as an individual.

8. Your Rights

As a cbaji player, you have the following rights regarding your personal data. To exercise any of these rights, contact cbaji support at [email protected]. We will respond within 30 days.

• Right of access: You can request a copy of all personal data cbaji holds about you. We will provide this in a readable format within 30 days of your request.
• Right to correction: If any of your personal data held by cbaji is inaccurate or out of date, you can ask us to correct it. You can update basic details like your email address directly from your account settings.
• Right to deletion: You can ask cbaji to delete your personal data. We will do so within 30 days, subject to any legal retention obligations that require us to keep certain records.
• Right to restrict processing: You can ask cbaji to stop using your data for certain purposes — for example, opting out of marketing emails — without requesting full deletion.
• Right to data portability: You can request your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.
• Right to object: You can object to cbaji processing your data for purposes beyond what is strictly necessary to operate your account. We will review all objections and respond within 30 days.

9. Security Measures

cbaji implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, or misuse.

• Encryption in transit: All data transmitted between your device and cbaji's servers is encrypted using TLS 1.3. This protects your data from interception on public or unsecured networks.
• Encryption at rest: Personal data stored in cbaji's databases is encrypted using AES-256. Payment reference data is stored in tokenised form.
• Access controls: cbaji staff access to personal data is restricted on a need-to-know basis. All staff with data access undergo security training and are bound by confidentiality agreements.
• Two-factor authentication: cbaji offers 2FA to all account holders and requires it for high-value withdrawal requests. We strongly recommend enabling 2FA on your account.
• Penetration testing: cbaji's platform undergoes regular security audits and penetration testing by independent security professionals to identify and address vulnerabilities before they can be exploited.
• Incident response: cbaji maintains a documented incident response plan. In the event of a security incident, our team is trained to contain, investigate, and remediate the issue as quickly as possible.

10. Minors

cbaji is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register on cbaji or attempt to use the platform in any way.

If cbaji discovers that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe your child has registered on cbaji, contact support at [email protected] immediately and we will take action without delay.

11. Policy Changes

cbaji may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and notify registered users by email or in-platform notification.

We encourage you to review this policy periodically. Continued use of cbaji after a policy update constitutes your acceptance of the revised terms. If you disagree with any change, you may request account closure before the change takes effect.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact the cbaji privacy team directly. We are available 24 hours a day, 7 days a week.

• Email: [email protected]
• Response time: Privacy requests are acknowledged within 24 hours and resolved within 30 days
• Data deletion requests: Processed within 30 days of receipt
• Data access requests: Fulfilled within 30 days of identity verification

When contacting us about a privacy matter, please include your registered email address or mobile number so we can locate your account and respond accurately. Do not include sensitive information such as passwords or payment PINs in your message.