Privacy Policy

01Introduction

This Privacy Policy ("Policy") describes how cbaij ("cbaij", "we", "us", "our") collects, uses, stores, discloses and protects personal information relating to individuals ("you", "your", "Player", "User") who access or use the cbaij online gaming platform, including all services accessible via cbaij.org and any related sub-domains or applications (collectively, the "Platform").

By registering an account, logging in, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use and disclosure of your personal data as described herein. If you do not agree to this Policy, you must not access or use the Platform.

02What Personal Data We Collect

cbaij collects the following categories of personal data from players and visitors to the Platform. Collection occurs at account registration, during ongoing use of the Platform, and through automated technical means.

03How We Collect Your Data

cbaij collects personal data through the following means. Understanding these methods helps you remain informed about the information we hold about you.

• Directly from you: when you complete account registration, submit KYC documents, make deposits or withdrawals, contact support, or respond to surveys or promotions.
• Automatically: through cookies, web beacons, server logs, and similar tracking technologies embedded in the Platform that record your browsing and gameplay behaviour.
• From payment processors: when you make a deposit or withdrawal, our payment partners (bKash, Nagad, Rocket, card networks) share transaction confirmation data with cbaij.
• From identity verification services: when you undergo KYC verification, our third-party identity verification partner may share the outcome and relevant data points with cbaij to confirm your eligibility.

04How We Use Your Personal Data

cbaij uses the personal data we collect for the following purposes. We process personal data only where we have a legitimate reason to do so, as described further in Section 05.

• Account management: to register your account, verify your identity, process KYC documentation, and maintain your player profile throughout your use of the Platform.
• Service delivery: to process deposits and withdrawals, credit bonuses, record betting activity, and ensure the proper functioning of all Platform services.
• Regulatory compliance and fraud prevention: to comply with anti-money laundering (AML) obligations, detect and prevent fraud, and respond to lawful requests from relevant authorities.
• Responsible gaming: to monitor gaming patterns that may indicate problem gambling behaviour, apply self-exclusion or deposit limit restrictions set by the player, and fulfil our duty of care obligations.
• Customer support: to respond to your queries, investigate complaints, resolve disputes, and communicate platform updates or changes relevant to your account.
• Platform improvement: to analyse aggregated usage data, identify technical issues, improve game offerings, and enhance overall user experience — always using anonymised or pseudonymised data where possible.

05Legal Basis for Processing Your Data

cbaij relies on the following legal bases to process your personal data. Where more than one basis applies to a given processing activity, the primary basis is listed first.

• Contractual necessity: processing required to fulfil our obligations under the Terms and Conditions you accepted when you registered, including account creation, payment processing, and service delivery.
• Legal obligation: processing necessary to comply with applicable laws, including AML regulations, age verification requirements, and obligations to respond to lawful authority requests.
• Legitimate interests: processing for fraud detection, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: for optional activities such as marketing communications and certain cookie usage. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

06Sharing Your Personal Data

cbaij does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances, and only to the extent necessary for each purpose.

• Payment processors: to process your deposits and withdrawals, we share necessary transaction data with our payment partners (bKash, Nagad, Rocket, Upay, card networks). These partners process data under their own privacy policies and applicable regulations.
• Identity verification providers: to conduct mandatory KYC checks, we share relevant identity documents and data with our appointed third-party verification partner. This processing is a legal requirement for operating a gaming platform.
• Game providers: some game data (session identifiers, bet amounts, game outcomes) is shared with our third-party game providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi) solely for the purpose of delivering the game service to you.
• Regulatory and law enforcement authorities: we will disclose personal data to regulators, law enforcement agencies, or other competent authorities when required to do so by applicable law or a valid legal order.

07Cookies and Tracking Technologies

cbaij uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyse usage patterns. The following categories of cookies are used on the Platform.

• Strictly necessary cookies: essential for the Platform to function. They enable you to log in, navigate between pages, and use core features. These cookies cannot be disabled without breaking the Platform.
• Functional cookies: used to remember your preferences (such as language selection) so you do not need to re-enter them on each visit.
• Analytics cookies: used to collect anonymised information about how visitors use the Platform, such as pages visited and time spent, helping us improve the user experience.
• Session security cookies: used to protect your account session, detect suspicious activity, and prevent cross-site request forgery (CSRF) attacks.

You may control non-essential cookie usage through your browser settings. Please note that disabling certain cookies may limit your ability to use some features of the Platform. cbaij does not currently respond to "Do Not Track" browser signals, as no uniform industry standard for this feature exists.

08Data Retention

cbaij retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply.

Active player account data is retained for the duration of your account plus a minimum of 5 years following account closure, to meet AML record-keeping obligations. Financial transaction records are retained for a minimum of 5 years from the date of each transaction. Communications data (support tickets, complaint records) is retained for 3 years. Anonymised analytics data may be retained indefinitely as it does not constitute personal data.

09Data Security

cbaij takes the security of your personal data seriously and has implemented appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our security measures include the following.

• SSL/TLS encryption on all data transmissions between your device and cbaij's servers, protecting information in transit from interception.
• Encryption at rest for sensitive personal data fields including payment method details, identity documents, and account credentials.
• Access controls ensuring that only authorised cbaij personnel can access personal data, and only to the extent required for their specific job function.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure to identify and remediate security risks proactively.

While cbaij applies industry-standard security measures, no system is completely immune to security threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, cbaij will notify affected players without undue delay and take prompt remedial action.

10Your Data Protection Rights

As a player on the cbaij Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact cbaij using the support email address displayed on this website. We will respond to all verified requests within a reasonable timeframe.

11Children and Minors

The cbaij Platform is strictly for adults aged 21 and above. cbaij does not knowingly collect or process personal data from persons under the age of 21. If you are a parent or guardian and believe that a minor has registered on the Platform or provided personal data to cbaij without your consent, please contact us immediately using the support email address on this website so we can take appropriate action, including account deletion and data erasure.

12Third-Party Links and Services

The Platform may contain references to or integrations with third-party services, including game providers, payment processors, and identity verification services. These third parties operate under their own privacy policies, which are independent of this Policy. cbaij is not responsible for the data practices of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with using the Platform.

13International Data Transfers

Some of the third-party service providers cbaij uses (including game providers and technical infrastructure partners) may be located outside Bangladesh. Where personal data is transferred internationally, cbaij takes steps to ensure that adequate data protection safeguards are in place, including contractual data protection obligations on the receiving party, consistent with applicable data protection law.

14Changes to This Privacy Policy

cbaij reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will provide notice to registered players via the Platform and update the "Last Updated" date at the top of this page. Continued use of the Platform following the posting of a revised Policy constitutes your acceptance of those changes.

If you disagree with any changes to this Policy, you must stop using the Platform and may request account closure by contacting the cbaij support team. We recommend bookmarking this page and checking it periodically, especially before making significant account decisions.

15Contact Us and Data Rights Requests

For any questions about this Privacy Policy, to exercise your data protection rights, or to report a privacy concern, please contact the cbaij support team using the email address displayed in the footer of this page. Please include your registered account details (mobile number or email) so we can verify your identity and handle your request efficiently. All privacy-related requests are treated with strict confidentiality.