Cbaji Privacy Policy — Your information is completely safe with us

When you register and use Cbaji, certain information is collected from you. This data falls into two main categories — what you provide directly, and what is collected automatically.

Information You Provide Directly:

• Identity Information: Full name, date of birth, national ID or passport number (for KYC verification).
• Contact Information: Mobile number, email address, and current residential address.
• Financial Information: Mobile banking numbers (bKash, Nagad, Rocket) and transaction history.
• Account Information: Username, password (stored in encrypted form), security question answers.

Automatically Collected Information:

• Device Information: IP address, browser type and version, operating system, and device ID.
• Usage Information: Pages visited, time spent, and betting markets accessed.
• Location Information: Approximate location (IP-based) — GPS or precise location data is not collected.
• Cookies & Tracking: For session management and improving user experience.

Cbaji uses the data it collects only for specific, legitimate purposes. The reason for each type of data use is clearly outlined below:

Cbaji's website and app use various types of cookies. Cookies are small text files stored in your browser that help improve the functionality of the website.

• Essential Cookies: Required to maintain login sessions and ensure site security. Disabling these will affect core site functionality.
• Functional Cookies: Used to remember your preferred language, layout, and settings.
• Analytics Cookies: Collects site usage statistics — to understand which pages are visited most and where issues may arise.
• Security cookies: Helps detect fraud and cyber attacks.

You can manage cookies through your browser settings. However, disabling essential cookies may cause some Cbaji features to stop working properly.

Cbaji never sells your data. However, it may be shared in the following limited circumstances:

• Payment Processors: Only the information required to complete a transaction is shared with payment platforms such as bKash, Nagad, and Rocket.
• KYC Verification Services: Authorized third-party identity verification providers — only the necessary data is shared, not everything.
• Legal Authorities: Where required by a court order or a lawful demand from a regulatory authority, we are obliged to provide the relevant data.
• Fraud prevention: Information about suspicious activity may be shared with industry-standard fraud detection networks.
• Business Transfer: In the event of a change in ownership, the new management will be bound by the same Privacy Policy.

Cbaji follows industry-leading standards to protect your information. Below is a detailed overview of our security measures:

• 256-Bit AES Encryption: All stored personal data is kept in encrypted form.
• TLS 1.3 Protocol: The latest secure protocols are used for all data transmission.
• Regular Penetration Testing: External security experts are engaged to identify vulnerabilities.
• Server access control: Server access is restricted to authorized personnel only.
• 24/7 Security Monitoring: Automated systems monitor for unusual activity around the clock.

As a Cbaji member, you have important rights over your personal data. These rights are recognised under international data protection law, including GDPR.

Cbaji does not retain data longer than necessary. Retention periods vary depending on the type of information:

• Account Information: For as long as the account remains active, and for the minimum period required by law after closure.
• Transaction Records: Minimum 5 years, as required by financial regulations.
• KYC Documents: 5 years after account closure (as required under anti-money laundering regulations).
• Customer Support Chat: 1 year after the issue is resolved.
• Analytics data: 26 months from the date of collection.
• Failed Login Attempts: 3 months for security purposes.

Once the retention period expires, your data is securely deleted or anonymised so you can no longer be identified.

Cbaji's services are intended exclusively for adults (18+). cbaji does not knowingly collect data from anyone under the age of 18.

Age is verified at registration and further checks are carried out where there is any suspicion. If a minor's data is found in cbaji's database, it will be deleted immediately upon request from a parent or legal guardian.

Cbaji may update this Privacy Policy from time to time. Changes are typically driven by:

• Changes to data usage resulting from the introduction of new technology or services.
• The need to comply with new laws or regulatory guidelines.
• Improvements based on member feedback and suggestions.

You will be notified in advance by email or SMS of any significant changes — typically 30 days before they take effect. The "Last Updated" date at the top of this page shows when the most recent changes were made.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please reach out to our dedicated Privacy Team: