cbajei Privacy Policy — How We Handle Your Data

1.1 Information You Provide Directly

When you register a cbajei account or interact with our platform, you may provide us with the following categories of personal data:

1.2 Information Collected Automatically

When you access and use the cbajei platform, certain data is collected automatically by our systems. This data helps us operate the platform securely, prevent fraud, and improve the user experience for players across Bangladesh:

• Device and Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and language settings
• Usage and Gameplay Data: Pages visited, games played, bet amounts, wager history, session durations, login timestamps, and navigation paths within the platform
• Location Data: Approximate geographic location derived from your IP address (used for fraud prevention and to verify that you are accessing the platform from Bangladesh or a permitted jurisdiction)
• Cookie and Tracking Data: Data collected via cookies, web beacons, and similar technologies as described further in Section 4 of this Policy

1.3 Information from Third Parties

cbajei may receive personal data about you from third-party service providers engaged to support platform operations. These include identity verification agencies that assist with KYC checks, payment processing partners (including bKash, Nagad, Rocket, and Upay) that confirm transaction details, fraud prevention and anti-money laundering screening services, and game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe whose games you access through the cbajei platform. Information received from these third parties is used solely for the purposes described in Section 2 of this Policy.

cbajei processes your personal data only for lawful, specified, and legitimate purposes. The table below sets out the primary purposes for which we use your data, together with the legal basis on which that processing rests.

2.1 Marketing Communications

cbajei will only send you marketing emails, SMS messages, or in-platform promotional notifications if you have given your explicit consent to receive such communications during registration or via your account settings. You may withdraw this consent at any time by updating your communication preferences in your account dashboard or by contacting the cbajei support team. Withdrawal of marketing consent does not affect your ability to use the platform or receive transactional notifications.

2.2 Automated Decision-Making

cbajei uses automated systems to assist with fraud detection, responsible gaming monitoring, and identity verification checks. In some cases, these automated processes may result in account restrictions being applied without prior human review — for example, where a transaction is flagged as high-risk by our fraud prevention systems. Where a significant decision affecting your account is made solely by automated means, you have the right to request human review of that decision by contacting our support team.

3.1 Service Providers

cbajei engages carefully selected third-party service providers to assist in the operation of the platform. These providers process your data strictly on our behalf, under written data processing agreements, and only to the extent necessary to perform the services for which they are engaged. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals in Bangladeshi Taka (৳ BDT)
• Identity verification providers: Third-party KYC agencies engaged to verify identity documents and screen against sanctions lists
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other studio partners whose game software is integrated into the cbajei platform
• Fraud prevention and AML screening services
• Cloud hosting and infrastructure providers responsible for secure data storage and platform availability
• Customer support platform providers that power our live chat system
• Analytics providers that help cbajei understand platform usage patterns on an aggregated, anonymised basis

3.2 Legal and Regulatory Disclosure

cbajei may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, court order, or regulatory instruction. We will notify you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that cbajei undergoes a merger, acquisition, restructuring, or sale of all or a substantial part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, prior to the transfer taking effect.

3.4 International Data Transfers

Some of the third-party service providers engaged by cbajei may be located outside Bangladesh. Where your personal data is transferred internationally, cbajei takes steps to ensure that appropriate safeguards are in place — including contractual data protection clauses — to protect your information to a standard equivalent to that applied within Bangladesh.

cbajei uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session secure, and to gather aggregated analytics that help us improve the experience for all Bangladesh players. This section explains what cookies we use and how you can manage them.

4.1 What Are Cookies?

A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the website to remember information about your visit — such as your login state and preferences — so that the platform can function correctly and efficiently across page loads and sessions.

4.2 Types of Cookies Used by cbajei

4.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, accept only essential cookies, or alert you when a cookie is being placed. Please note that disabling essential cookies will prevent you from logging into your cbajei account and using core platform features. Analytics and functional cookies can be disabled without affecting your ability to play games or make transactions, though some personalisation features may not work as expected.

4.4 Session and Persistent Cookies

cbajei uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period). Persistent cookies used by cbajei are set to expire within a maximum of 12 months from the date they are placed, after which they are automatically deleted.

5.1 Security Measures

cbajei implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the cbajei platform
• Encryption of sensitive data at rest, including password hashes and financial data
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits and vulnerability assessments of platform infrastructure
• Two-factor authentication (2FA) options available for all player accounts
• Automated monitoring systems for suspicious login activity and unusual transaction patterns

While cbajei takes its security obligations seriously and applies industry-standard protective measures, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, cbajei will notify affected players promptly in accordance with applicable legal requirements.

5.2 Data Retention

cbajei retains your personal data for as long as your account remains active and for such additional period as is necessary to comply with our legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction
• KYC and verification documents: Retained for a minimum of 5 years following the completion of each verification check
• Support communications: Retained for 3 years from the date of each interaction
• Analytics and usage data: Retained in anonymised or aggregated form for up to 24 months

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents re-identification.

As a player on the cbajei platform, you have the following rights with respect to your personal data:

6.1 Right of Access

You have the right to request a copy of the personal data that cbajei holds about you. Upon a valid request, cbajei will provide you with a summary of the data held, the purposes for which it is processed, the categories of recipients to whom it has been disclosed, and the applicable retention period.

6.2 Right to Rectification

If any personal data that cbajei holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields — such as your registered name — cbajei may require you to provide supporting documentation before making the correction, to ensure the accuracy and integrity of our records.

6.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that cbajei is subject to legal and regulatory data retention obligations (described in Section 5.2) that may prevent us from deleting certain categories of data even upon a valid erasure request. In such cases, cbajei will explain the specific obligation that prevents deletion.

6.4 Right to Restrict Processing

You have the right to request that cbajei restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while your objection to processing is being assessed. Where processing is restricted, cbajei will continue to store the data but will not process it further without your consent, except as required by law.

6.5 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, cbajei will cease all marketing communications to you immediately. You can also manage your marketing preferences directly within your account dashboard at any time.

6.6 Right to Data Portability

Where cbajei processes your personal data on the basis of your consent or for the performance of a contract, and that processing is carried out by automated means, you have the right to request a copy of your data in a structured, commonly used, machine-readable format. cbajei will provide such export within 30 days of a valid portability request.

The cbajei platform integrates with third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — whose game software runs within embedded iframes on the cbajei platform. These providers may collect certain technical data (such as device identifiers and session tokens) directly as part of delivering their game content. cbajei requires all integrated game providers to maintain data protection standards consistent with those described in this Privacy Policy, and all provider relationships are governed by data processing agreements.

7.1 Payment Partner Data Processing

When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or any other payment method supported by cbajei, your transaction data is processed by the relevant payment partner in accordance with that partner's own privacy policy and terms of service. cbajei is not responsible for the data practices of independent payment service providers, and we encourage you to review the privacy policies of any payment service you use.

7.2 No Third-Party Advertising Networks

cbajei does not use third-party advertising networks, social media tracking pixels, or retargeting technologies on the cbajei platform. We do not share your personal data with advertising technology companies, social media platforms, or data brokers for the purpose of targeted advertising either on or off the cbajei platform.

8.1 Updates to This Policy

cbajei reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their cbajei account or via a prominent in-platform notification, at least 7 days before the changes take effect. The effective date at the top of this Policy will be updated accordingly. Continued use of the cbajei platform following the effective date of any revision constitutes acceptance of the revised Privacy Policy.

8.2 Contact and Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cbajei handles your personal data, please reach out to the cbajei support team. Our 24/7 English-language support team is available via in-account live chat (Bangladesh Standard Time, UTC+6) or by written communication to the email address below. We aim to respond to all privacy-related queries within 5 business days, and to all formal rights requests within 30 calendar days.

Support email (plain text — not a clickable link): [email protected]

Support hours: 24 hours daily, 7 days a week (BST, UTC+6)

8.3 Governing Framework

This Privacy Policy is governed by and construed in accordance with the laws applicable to cbajei's operations. cbajei is committed to handling all personal data responsibly and in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. If you believe that cbajei has not addressed your privacy concern satisfactorily, you have the right to escalate your complaint to the relevant data protection authority or seek independent legal advice.

This Privacy Policy was last updated on 1 January 2026 and applies to all personal data processed by cbajei in connection with the operation of the cbajei.com platform.