cbbaje Privacy Policy — How We Protect Your Data
At cbbaje, your personal information is handled with the highest standards of care and security. This Privacy Policy explains exactly what data we collect, why we collect it, how we use and protect it, and what rights you hold as a player based in Bangladesh. We believe in full transparency — no fine print, no ambiguity.
256-Bit SSL Encryption
All data transmitted between your device and cbbaje's servers is protected by industry-standard 256-bit SSL encryption. Your personal details, payment information, and login credentials cannot be intercepted in transit.
No Data Selling
cbbaje does not sell, rent, or trade your personal data to third-party marketers or advertising networks. Your information is used exclusively to operate your account and improve your experience on the platform.
Minimal Data Principle
We collect only the data that is strictly necessary to deliver our services safely and compliantly. We do not collect data beyond what is required for account management, KYC verification, payment processing, and responsible gaming obligations.
Secure Data Storage
Player data is stored on secure, access-controlled servers with role-based internal permissions. Only authorised cbbaje personnel who require access to fulfil their specific job functions can view personal player information.
Your Rights Are Respected
You have the right to access, correct, or request deletion of your personal data held by cbbaje. Submit a data request at any time by emailing our support team, and we will respond within 30 days in accordance with applicable data protection standards.
Transparent Cookie Use
cbbaje uses cookies strictly for session management, platform performance optimisation, and basic analytics. We do not use cross-site tracking cookies or behavioural advertising cookies. You can manage cookie preferences through your browser settings at any time.
Information We Collect
cbbaje collects personal data from players in several ways — directly when you register or interact with the platform, automatically through your use of the site, and in some cases from third-party verification partners during the KYC process. Below is a comprehensive breakdown of every category of data we may collect and the circumstances in which it is collected.
1.1 — Registration & Account Data
When you create a cbbaje account, we collect the following information which you provide directly:
- Full legal name — as it appears on your government-issued ID
- Date of birth — to verify you meet the minimum age requirement of 18 years
- Residential address — including division, district, and postal code within Bangladesh or your country of residence
- Email address — used for account communications, verification, and support correspondence
- Mobile phone number — a valid Bangladesh mobile number used for OTP verification and account security alerts
- Username and password — your chosen account credentials (passwords are stored in hashed form and are never accessible in plain text by cbbaje staff)
- Currency preference — Bangladeshi Taka (৳ BDT) as the default account currency
1.2 — Identity Verification (KYC) Data
Before processing your first withdrawal, cbbaje is required to verify your identity in accordance with anti-money laundering (AML) and responsible gaming principles. During the KYC process, we collect:
- Scanned or photographed copy of your National ID Card (NID), passport, or driving licence
- Proof of residential address (utility bill, bank statement, or official document dated within 3 months)
- Confirmation of ownership of the payment method used (e.g., screenshot of your bKash or Nagad account showing your registered name and number)
- A selfie photograph or live photo, where requested, to confirm the identity document belongs to the account holder
1.3 — Financial Transaction Data
When you make deposits or withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we collect and retain transaction records including:
- Payment method type and last four digits of card or mobile wallet number
- Transaction amounts and timestamps (Bangladesh Standard Time, UTC+6)
- Transaction reference numbers issued by the payment provider
- Deposit and withdrawal history for the lifetime of your account
1.4 — Gameplay & Betting Activity Data
To ensure fair play, resolve disputes, calculate bonus eligibility, and comply with responsible gaming obligations, cbbaje records detailed gameplay and betting data, including:
- All bets placed, games launched, and wagering activity across all products (casino games, slots, live dealer, cricket betting, crash games)
- Game session durations and login/logout timestamps
- Bonus claim history, wagering progress, and bonus expiry records
- Sports betting selections, odds accepted, and settlement outcomes
1.5 — Technical & Device Data
When you access cbbaje through a browser or mobile device, our servers automatically collect certain technical information required to deliver the service and maintain security:
- IP address and approximate geolocation (country and city level only)
- Browser type, version, and language settings
- Operating system and device type (desktop, mobile, tablet)
- Pages visited on the cbbaje platform and time spent on each page
- Referring URL (the page from which you navigated to cbbaje, if any)
- Session cookies and authentication tokens (see Section 4 — Cookies)
1.6 — Communications Data
If you contact cbbaje's support team by email or live chat, we retain records of those communications — including the content of your messages, the date and time of contact, and the resolution outcome — for quality assurance, training, and dispute resolution purposes. These records are retained for a minimum of 3 years from the date of the communication.
Data Categories at a Glance
Types of data cbbaje may hold about you:
How We Use Your Information
cbbaje processes your personal data only for legitimate, defined purposes. We do not use personal data for automated decision-making that produces legal or similarly significant effects on players without human review. The table below sets out each processing purpose, the legal basis on which cbbaje relies, and the data categories involved.
| Processing Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Identity, Contact, Device | Contractual necessity |
| KYC identity verification | Identity, KYC Documents, Financial | Legal obligation / Contractual |
| Payment processing | Financial, Identity | Contractual necessity |
| Game delivery & bet settlement | Gameplay, Device | Contractual necessity |
| Fraud prevention & AML monitoring | Financial, Identity, Gameplay, Device | Legal obligation / Legitimate interest |
| Responsible gaming monitoring | Gameplay, Financial, Identity | Legal obligation / Player protection |
| Customer support & dispute resolution | Identity, Communications, Financial | Contractual necessity / Legitimate interest |
| Platform analytics & improvement | Device, Cookies (anonymised) | Legitimate interest |
| Bonus & promotion eligibility | Gameplay, Financial, Identity | Contractual necessity |
| Marketing communications (opt-in only) | Contact, Gameplay (preferences) | Consent |
Marketing Communications
cbbaje may send you promotional emails, SMS notifications, or in-platform messages about new games, bonus offers, cricket betting markets, and platform updates — but only if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by emailing [email protected] with the subject line "Unsubscribe — Marketing". Withdrawal of marketing consent does not affect the delivery of transactional account communications (e.g., deposit confirmations, withdrawal notifications, security alerts), which are sent regardless of marketing preferences as they are required for the operation of your account.
We Never Use Your Data To:
- Sell or rent your information to marketers
- Share your details with unrelated third parties
- Build cross-site advertising profiles
- Make fully automated decisions affecting your rights
- Contact you for marketing without your prior consent
Data Sharing & Third Parties
cbbaje does not sell your personal data to third parties under any circumstances. However, to deliver our services effectively and comply with legal obligations, we share certain data with carefully selected third-party partners. All third parties who receive cbbaje player data are contractually bound to process that data only for the specified purpose and to maintain appropriate security standards.
Categories of Third-Party Recipients
- Payment Service Providers: bKash, Nagad, Rocket, Upay, and international card processors (Visa, Mastercard acquiring banks) receive the minimum data necessary to process your deposit or withdrawal — typically your account reference, transaction amount, and registered payment method identifier. cbbaje does not transmit your full identity documents to payment providers.
- KYC & Identity Verification Partners: cbbaje may use a third-party identity verification service to assist in validating the authenticity of documents submitted during the KYC process. These partners process your ID documents and selfie photographs solely for identity verification and are prohibited from retaining your data beyond the period necessary to complete that verification.
- Game Software Providers: When you launch a game powered by a third-party studio — such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe — an anonymised session token is transmitted to the game server to initiate your session. Game providers do not receive your full name, contact details, or payment information. They receive only the session token and stake/win data necessary to operate the game.
- Analytics Platforms: cbbaje uses internal analytics tools and may use anonymised, aggregated session data to understand platform usage patterns and improve the user experience. No personally identifiable information is included in analytics data sets shared with or processed by external analytics tools.
- Law Enforcement & Regulatory Authorities: cbbaje may be required by applicable law to disclose player data to law enforcement agencies, financial intelligence units, or other governmental authorities. Such disclosures are made only when legally mandated and, where permitted, we will notify affected players. cbbaje cooperates fully with investigations into match fixing, money laundering, fraud, and other criminal activity.
Third-Party Data Recipients
- bKash / Nagad / Rocket / Upay — Payment processing
- Visa / Mastercard processors — Card payment processing
- KYC verification partner — Identity validation only
- Game studios — Anonymised session tokens only
- Authorities — Only when legally required
Data Security & Retention
Security Measures
cbbaje employs a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in line with evolving security best practices and include:
- Transport Layer Security (TLS/SSL): All data in transit between your device and cbbaje's servers is encrypted using TLS 1.2 or higher with 256-bit key strength.
- Password Hashing: Account passwords are never stored in plain text. cbbaje uses industry-standard adaptive hashing algorithms (bcrypt) so that even in the event of a data breach, passwords cannot be reverse-engineered.
- Role-Based Access Control: Internal access to player data is restricted to personnel who require it to perform their specific function. Customer support agents, for example, can view the data necessary to resolve your query but cannot access full payment credentials or complete KYC document images.
- Two-Factor Authentication (2FA): cbbaje employees with access to production systems are required to use multi-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts via the account security settings.
- Intrusion Detection & Monitoring: cbbaje's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, or potential security incidents. Automated alerts escalate suspected incidents to our security team for immediate review.
- Regular Security Audits: cbbaje conducts periodic security assessments of its platform and data handling processes. Any vulnerabilities identified are remediated on a priority basis.
Data Retention Policy
cbbaje retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal obligations, and to resolve disputes or enforce our terms. The table below outlines our standard retention periods by data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML / legal compliance |
| KYC Documents | Duration of account + 5 years after closure | Regulatory & fraud prevention |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping requirements |
| Gameplay & Betting Records | 5 years from session date | Dispute resolution / responsible gaming |
| Support Communications | 3 years from last contact | Quality assurance / dispute resolution |
| Analytics & Device Data | 13 months from collection | Platform performance analysis |
| Marketing Consent Records | Duration of consent + 3 years | Consent audit trail |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business analysis purposes.
Security Certifications
cbbaje's data handling infrastructure maintains:
- 256-bit SSL / TLS 1.2+ encryption
- bcrypt password hashing
- Role-based internal access controls
- PCI-DSS compliant payment processing
- 24/7 infrastructure monitoring
Your Privacy Rights
As a player on the cbbaje platform, you hold meaningful rights over the personal data we hold about you. cbbaje is committed to honouring these rights promptly and without creating unnecessary barriers. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will acknowledge your request within 5 business days and provide a substantive response within 30 days.
Right of Access
You have the right to request a copy of all personal data that cbbaje holds about you. Upon a verified request, we will provide a structured summary of your account data, transaction history, gameplay records, KYC documents on file, and any other personal information we process. This is sometimes called a Subject Access Request (SAR).
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic contact details (email address, phone number), you can update these directly through your account settings. For identity data (full name, date of birth, address), corrections require supporting documentation and a formal rectification request submitted to our support team.
Right to Erasure
You may request the deletion of your personal data — sometimes called the "right to be forgotten" — in circumstances where the data is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis exists), or where the data has been unlawfully processed. Please note that erasure requests cannot be fulfilled where cbbaje is required by law to retain certain data (for example, financial transaction records subject to a 7-year retention requirement). In such cases, cbbaje will inform you of the specific legal obligation that prevents full erasure.
Right to Restriction of Processing
In certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing pending verification of legitimate grounds — you have the right to request that cbbaje restricts the processing of your personal data. This means we may continue to store your data but will not actively process it for the duration of the restriction.
Right to Data Portability
Where cbbaje processes your data on the basis of your consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that we transmit this data directly to another service provider where technically feasible.
Right to Object to Marketing
You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a marketing objection, cbbaje will cease all marketing communications to you within 5 business days. Transactional communications (account alerts, deposit confirmations, withdrawal notifications, security warnings) are not affected by a marketing objection and will continue to be sent as they are necessary to operate your account.
Right to Withdraw Consent
Where cbbaje processes your data based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, update your notification preferences in your account dashboard or email [email protected].
Your Six Core Rights
- Access — Get a copy of your data
- Rectification — Correct inaccurate data
- Erasure — Request data deletion
- Restriction — Limit how data is used
- Portability — Export your data
- Objection — Stop marketing use
Children & Minors
cbbaje is strictly an adults-only platform. Our services — including casino games, live dealer tables, slots, cricket betting, and all other products — are available exclusively to individuals who are 18 years of age or older. We take our responsibility to protect minors with absolute seriousness and have implemented multiple layers of safeguards to prevent underage access.
Age Verification at Registration
All players are required to confirm that they are aged 18 or above during the registration process. cbbaje enforces mandatory KYC verification — including submission of a government-issued photo ID showing date of birth — before any withdrawal can be processed. Accounts where date of birth cannot be verified as 18 or above are suspended and all funds held pending review.
If We Discover a Minor Has Registered
If cbbaje discovers or receives credible information indicating that an account is held by an individual under the age of 18, we will take the following immediate actions:
- Suspend the account and block access to all platform features immediately
- Void all bets placed and reverse all game results while the account was active
- Return the net deposited amount to the original payment method, after deducting any withdrawals already paid out
- Permanently close the account and flag the registered details to prevent re-registration
- Retain the minimum data necessary to enforce the permanent ban, in accordance with our legal obligations
Parental Controls
If you are a parent or guardian and you believe a minor in your care has accessed or registered on the cbbaje platform, please contact us immediately at [email protected] with the subject line "Underage Account — Urgent". We treat all such reports as a priority and will investigate and act within 24 hours of receipt. We also encourage parents and guardians to make use of third-party parental control software such as Net Nanny, Kaspersky Safe Kids, or similar tools to restrict access to gambling websites on shared or family devices.
For more information on responsible gaming practices and how to protect vulnerable individuals, please visit our dedicated Responsible Gaming page.
Zero Tolerance Policy
cbbaje operates a zero-tolerance policy toward underage gambling. Any account found to be held by a person under 18 will be closed immediately, all gameplay voided, and net deposits returned. There are no exceptions to this rule.
Suspect underage access? Email [email protected] immediately — subject: "Underage Account — Urgent".
Policy Updates & Contact
Updates to This Privacy Policy
cbbaje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players by email to their registered address at least 14 days before the changes take effect.
For minor, non-material updates (such as clarifications of existing practices, corrected formatting, or updated contact details), we will update the "Last Updated" date at the top of this policy without prior individual notice. We recommend that you review this Privacy Policy periodically to stay informed of how cbbaje protects your data.
Continued use of the cbbaje platform after any updated Privacy Policy has taken effect constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you should close your account before the effective date of the changes and request erasure of your personal data in accordance with your rights under Section 6 of this policy.
Version History
| Version | Effective Date | Key Changes |
|---|---|---|
| v1.0 | March 2024 | Initial Privacy Policy published |
| v1.1 | September 2024 | Added data portability section; updated payment partner list |
| v2.0 | January 2026 | Full policy rewrite; expanded cookie disclosures; updated retention schedule; added data breach notification commitment |
Contact Our Privacy Team
If you have any questions, concerns, or complaints about how cbbaje handles your personal data — or if you wish to exercise any of your privacy rights as described in Section 6 — please contact our privacy team using the details below. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
Email: [email protected]
Subject line: "Privacy Enquiry — [Your Username]"
Response time: Within 5 business days (BST, UTC+6)
Languages accepted: English
For formal complaints that have not been resolved satisfactorily through direct contact with our privacy team, you may escalate to our senior compliance officer by sending a follow-up email with the subject line "Privacy Escalation — [Your Username]" within 14 days of receiving our initial response. All escalations are reviewed by senior staff and a final decision issued within 14 business days.
cbbaje values player trust above all else. Our Privacy Policy reflects our genuine commitment to treating your personal data with care, transparency, and respect. Thank you for choosing cbbaje as your online casino and cricket betting platform in Bangladesh.
Related Policies
This Privacy Policy should be read alongside:
24/7 Support
Our English-language support team is available around the clock for any privacy questions or data requests. Email [email protected] and we will respond within 5 business days.
Your Data Is Safe — Now Enjoy the Games
Now that you know exactly how cbbaje protects your privacy, explore 1,400+ games, live cricket betting markets, and fast bKash & Nagad payouts available to players across Bangladesh.