cbaji8 Privacy Policy

cbaji8 is committed to maintaining the highest standards of data protection for all players, particularly those based in Bangladesh. We recognise that your personal information is sensitive and we treat it with the care and respect it deserves. This Policy applies to all data collected through the cbaji8 website, support communications, payment processing interactions, and any other point of contact between you and the cbaji8 platform.

We may update this Policy from time to time to reflect changes in applicable law, our data practices, or the services we provide. The most current version will always be available at cbaji8.bio/privacy-policy. Where changes are material, we will notify registered players by email at least seven (7) days before the updated Policy takes effect. Continued use of cbaji8 services after that date constitutes your acceptance of the revised terms.

cbaji8 processes your personal data on one or more of the following lawful bases:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, settle bets, and provide the services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and other regulatory duties.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving the quality of cbaji8 services, provided such interests are not overridden by your own rights.
• Consent: Where you have provided explicit consent for a specific processing activity, such as receiving promotional communications from cbaji8.

cbaji8 uses your personal data specifically for the following purposes:

• Creating, verifying, and maintaining your cbaji8 player account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladesh bank transfers.
• Verifying your age and identity to ensure compliance with the 21+ age restriction.
• Detecting and preventing fraud, account takeovers, money laundering, and other prohibited activities.
• Monitoring betting patterns for responsible gaming purposes and intervening where a player may be at risk.
• Resolving disputes, responding to complaints, and providing customer support in English.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.
• Sending promotional communications about cbaji8 bonuses, tournaments, and seasonal offers — only where you have opted in to receive such communications.
• Conducting statistical analysis to improve game performance, site functionality, and the overall player experience.

cbaji8 does not sell, rent, or trade your personal data. We may share your data with the following categories of trusted third parties, strictly for the purposes listed:

2.1 Payment Service Providers

To process deposits and withdrawals, cbaji8 shares relevant payment data with our authorised payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other banking partners. These providers receive only the data necessary to complete the transaction and are bound by their own data protection obligations.

2.2 Game Content Providers

cbaji8 integrates games from third-party studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive anonymised session data necessary for game delivery and fair-play certification. They do not receive your full personal profile.

2.3 Identity Verification Services

To fulfil our KYC obligations, cbaji8 may share identity documents with authorised third-party verification services. These services process your data solely for identity verification and are contractually prohibited from using it for any other purpose.

2.4 Legal and Regulatory Authorities

cbaji8 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of cbaji8, its players, or the public.

2.5 Service Providers and Technology Partners

cbaji8 engages carefully vetted technology partners for services including cloud hosting, platform analytics, and customer support tooling. These partners process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.

In all cases of data sharing, cbaji8 applies appropriate contractual safeguards and shares only the minimum data required for the stated purpose.

cbaji8 uses cookies and similar tracking technologies to operate the platform effectively and to provide a smooth, personalised experience for Bangladesh players. Cookies are small text files placed on your device when you visit cbaji8.bio.

3.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in and cookies that remember your language and currency preferences. These cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: Used to understand how players interact with the cbaji8 platform — which pages are visited most frequently, where errors occur, and how navigation flows can be improved. Data collected is aggregated and anonymised.
• Functional Cookies: Allow cbaji8 to remember your preferences such as preferred payment method, notification settings, and display options so you do not need to reset them on each visit.

cbaji8 does not use advertising cookies, retargeting pixels, or third-party social media tracking cookies. You can manage or delete cookies at any time through your browser settings; however, please note that disabling strictly necessary cookies may impair your ability to use the cbaji8 platform.

cbaji8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using current industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal data, including passwords (stored as salted hashes) and financial information, is encrypted in our database infrastructure.
• Access Controls: Access to personal data is restricted to cbaji8 personnel who require it to perform their job functions. All staff with data access are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their cbaji8 account to provide an additional layer of security beyond the password.
• Regular Security Audits: cbaji8 conducts periodic security assessments and vulnerability testing of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights, cbaji8 will notify affected players by email within 72 hours of becoming aware of the breach and will take immediate steps to contain and remediate the incident.

While cbaji8 takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying cbaji8 immediately if you suspect unauthorised access to your account.

cbaji8 retains your personal data for as long as your account remains active and for a further period as required by our legal and compliance obligations. The following retention periods apply as a general guide:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure to meet AML and KYC record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Retained for two (2) years from the date of the last interaction.
• Marketing Preferences: Retained until you withdraw consent or for one (1) year following the last interaction with a marketing communication, whichever comes first.
• Session and Log Data: Retained for up to ninety (90) days for security and fraud monitoring purposes, after which it is deleted or fully anonymised.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with you.

As a cbaji8 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account username and a description of your request. We will acknowledge your request within 48 hours and aim to fulfil it within thirty (30) days.

• Right of Access: You may request a copy of all personal data cbaji8 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your cbaji8 account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction: You may request that cbaji8 restricts processing of your data in certain circumstances, for example while the accuracy of data is contested.
• Right to Data Portability: You may request that cbaji8 provides your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to processing of your data based on our legitimate interests, including for direct marketing purposes. Where such an objection is made, cbaji8 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

cbaji8 will not charge a fee for exercising these rights in ordinary circumstances. However, where requests are manifestly unfounded or excessive, cbaji8 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

The cbaji8 platform is strictly for adults aged 21 and above. cbaji8 does not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected data from an underage individual, we will immediately suspend the associated account, delete all related personal data, and reverse any transactions where legally possible.

If you are a parent or guardian and believe that your child has registered an account with cbaji8, please contact our support team immediately at [email protected] so we can take prompt remedial action.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way cbaji8 handles your personal data, please contact our dedicated Privacy team in the first instance:

• Email: [email protected]
• Language: English
• Response Time: Within 48 hours
• Hours: 24 hours a day, 7 days a week, 365 days a year

cbaji8 is committed to resolving all privacy-related concerns promptly and fairly. If you remain dissatisfied following our response, you may seek further recourse through independent data protection authorities or dispute resolution bodies applicable in your jurisdiction.

For matters related to responsible gaming and self-exclusion, please visit our dedicated Responsible Gaming page. For general platform questions, our FAQ page covers a wide range of common topics in English.