cbaja's Privacy Policy
Your personal information is completely safe with us. This policy explains in detail how cbaja collects, uses, and protects your data.
1. Introduction & Scope
cbaja is a secure online gaming platform operating for players in Bangladesh. This Privacy Policy ("Policy") explains how cbaja collects, processes, stores, and protects the personal information of its users. This Policy applies to cbaja's website, applications, and all related services.
By registering an account or using our services on this platform, you are considered to have agreed to the terms of this Policy. If you do not agree with any term of this Policy, please refrain from using our services.
2. What Information We Collect
cbaja collects information in two main ways — directly from you and automatically through your use of our services. Detailed categories are provided below:
2.1 Information You Provide Directly
- Identity Information: Your full name, date of birth, National ID (NID) or passport number.
- Contact Information: Email address, mobile number, and postal address.
- Financial Information: bKash, Nagad, Rocket, or bank account numbers (used solely to process transactions).
- Security Information: Your account password (stored in encrypted form) and security questions.
- Communication Records: Your conversations with the support team, and details of complaints and requests.
2.2 Information Collected Automatically
- Device Information: IP address, browser type and version, operating system, and device identifiers.
- Usage Information: Which pages were visited on the platform, how long you stayed, and which games were played.
- Cookies & Tracking: Cookies are used for session management and service improvement (see Section 7 for details).
- Transaction Logs: Automatic records of deposit and withdrawal amounts, dates, and methods.
3. Purpose of Using Your Information
cbaja uses your information only for the following lawful purposes. We never sell your information or share it with unauthorised third parties.
| Purpose | Description | Legal Basis |
|---|---|---|
| Account Management | Registration, verification, and account maintenance | Contractual obligation |
| Financial Transactions | Processing deposits and withdrawals | Contractual obligation |
| Identity Verification (KYC) | Fraud prevention and age verification | Legal requirement |
| Customer Support | Handling complaints and requests | Legitimate interest |
| Security | Prevention of fraud and unauthorised access | Legitimate interest |
| Service Improvement | Analysing and improving the platform experience | Legitimate interest |
| Marketing Communications | Information about bonuses and promotions (opt-in) | Consent |
4. Disclosure & Third Parties
cbaja may share your personal information with third parties only in the following circumstances:
4.1 Service Providers
We work with certain trusted third parties to operate our services. These include:
- Payment processing providers — to facilitate bKash, Nagad, Rocket, and bank transfer services.
- Identity verification services — to complete the KYC process.
- Gaming software providers — to ensure a secure gameplay experience.
- IT and cloud services — for data storage and platform operations.
All such third parties are bound by strict confidentiality agreements with us and may use your information only for the specified purpose.
4.2 Disclosure for Legal Reasons
cbaja may be required to disclose your information in the following circumstances:
- To comply with a legal order from a competent authority or a court directive.
- To meet obligations related to anti-money laundering and the prevention of terrorist financing.
- At the request of relevant authorities for fraud investigations or cybercrime prevention.
- To protect the legal rights of cbaja or third parties.
5. Data Protection & Security
cbaja has adopted industry-standard technical and organisational measures to protect your information. Our security infrastructure protects your data in the following ways:
Encryption
All your information is transmitted using SSL/TLS encryption technology. Stored sensitive data is protected with AES-256 encryption. Passwords are never stored in plain text.
Access Control
Only authorised staff have access to specific information. All internal access is logged and regularly audited. A two-factor authentication (2FA) system is in use.
Data Storage
Your information is stored on secure servers. Regular backups are taken and disaster recovery systems are in place. Physical security of server facilities is also ensured.
Regular Testing
Our systems undergo regular security testing. Penetration testing is carried out to identify vulnerabilities. An automated monitoring system is in place to detect suspicious activity immediately.
6. Data Retention Period
cbaja retains your information only for as long as it is necessary or legally required. The retention periods for different types of information are set out below:
- Account Information: For the duration your account is active and for the period required by applicable law after it is closed.
- Financial Transaction Records: For the period required by financial regulations and anti-money laundering laws.
- KYC Documents: For the period required under the relevant regulatory rules.
- Support Conversations: For a reasonable period for the purposes of dispute resolution and quality assurance.
- Marketing Consent Records: Until you withdraw your consent.
- Technical Logs: For the period necessary for security analysis and troubleshooting.
At the end of the specified period, information is securely deleted or anonymised. Where information must be retained due to legal obligations, it is stored separately and used only for that specific purpose.
7. Cookie Policy
cbaja uses cookies and similar tracking technologies to improve service quality and personalise your experience.
7.1 Types of Cookies
- Essential Cookies: These cookies are required for the basic functionality of the platform. They keep you logged in and keep security features active. These cookies cannot be disabled.
- Functionality Cookies: Help remember your preferences and settings, such as language preference and display settings.
- Analytical Cookies: Collect anonymous information about how the platform is used, which helps us improve our services.
7.2 Cookie Controls
You can block or delete non-essential cookies by changing your browser settings. Please note that disabling certain cookies may cause some features of the platform to not work properly. You can contact cbaja's support team for assistance with cookie management.
8. Your Rights & Options
As a user of the cbaja platform, you have the following rights regarding your personal information:
Right of Access
You may request to know what information cbaja holds about you. We will provide a full summary within a reasonable time.
Right to Rectification
If there is any inaccuracy in your personal information, you may request that it be corrected. Maintaining accurate information is our commitment.
Right to Erasure
In certain circumstances you may request that your information be deleted. However, some information may need to be retained due to legal obligations.
Right to Restrict Processing
In certain circumstances you may request that the processing of your information be restricted.
Right to Object
You may object to the use of your information processed on the basis of legitimate interest or for direct marketing purposes.
Right to Portability
You may request to receive your personal information in a structured, machine-readable format.
9. Protection of Minors
cbaja is a responsible gaming platform. Our services are intended only for those aged 21 or above. We do not knowingly collect or store any information from minors.
- Age verification is mandatory during the registration process.
- In cases of doubt, age is confirmed through KYC documents.
- If a minor's account is discovered, it is immediately closed and any collected information is destroyed.
- If a parent or guardian believes their child is using our platform, please contact [email protected] immediately.
10. Changes & Updates to the Policy
cbaja periodically reviews this Privacy Policy and updates it as needed. Reasons for changes may include legal changes, technological improvements, or an expansion in the scope of services.
Change Notifications:
- Minor Changes: The updated policy will be published on the website.
- Significant Changes: A direct notification will be sent to your registered email before the changes take effect.
- Fundamental Changes: Your active confirmation may be required to consent to the new terms.
Continued use of the platform after an update means you are considered to have agreed to the revised policy. If you object to any change in the policy, please notify us at [email protected].
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact cbaja's privacy team. We are always ready to help.
Send any privacy-related requests, or applications to access or delete your information, to this email address.
Use our live chat for instant support. Support is available in both Bengali and English.
Play safely at cbaja
Your information is secure, your transactions are fast — enjoy safe online gaming with cbaja.