cbajet Privacy
Policy & Data Rights

1. Information We Collect

cbajet collects personal data through several channels: directly from you when you register an account or complete KYC verification; automatically as you use the platform; and in limited circumstances from trusted third-party service providers such as payment processors. The categories of data we collect are set out below.

1.1 Registration and Identity Data

When you create a cbajet account, we collect the following information:

• Full legal name as it appears on your official government-issued identity document
• Date of birth — used to verify that you meet the 18+ age requirement
• Email address — used for account communications, security alerts, and optional marketing
• Mobile phone number — used for account verification, two-factor authentication, and bKash/Nagad payment linkage
• Residential address including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh)
• National ID card (NID) number or passport number — collected during KYC verification prior to withdrawal processing

1.2 Financial and Payment Data

To process deposits and withdrawals, cbajet collects:

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers linked to your profile
• Bank account details (account number, bank name, branch) where bank transfer is selected
• Visa or Mastercard partial card details (last four digits, expiry date) where card payment is used — full card numbers are never stored by cbajet and are processed directly by our PCI-DSS-compliant payment partners
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used

1.3 Usage and Technical Data

When you browse or use the cbajet platform, we automatically collect certain technical data:

This technical data is used to operate and improve the platform, detect suspicious activity, prevent fraud, and personalise your gaming experience. It does not, on its own, identify you by name.

1.4 Communications Data

If you contact cbajet via email or live chat, we retain records of that correspondence, including your name, contact details, and the content of your messages. This is used to resolve your query, train support staff, and maintain accurate account records.

2. How We Use Your Data

cbajet processes your personal data only for specific, defined purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The table below summarises the primary uses of your data and the legal basis for each processing activity:

Where our processing is based on legitimate interest, we have assessed that our interest in fraud prevention, platform security, and service improvement does not override your privacy rights, given the safeguards we apply and the limited nature of the data involved.

3. Data Sharing & Disclosure

cbajet does not sell or rent your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, we share necessary payment data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Visa/Mastercard acquiring banks. Each of these partners operates under its own privacy policy and is bound by contractual obligations to protect your data.

3.2 Game Content Providers

Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi provide game content to the cbajet platform. These providers receive a unique player session token and game-play data to operate their games within the cbajet environment. They do not receive your full name, NID, or payment details.

3.3 Legal and Regulatory Authorities

cbajet may be required to disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or legitimate legal process. This includes disclosures related to anti-money laundering (AML) investigations, fraud inquiries, or other legal compliance requirements. We will notify you of such disclosure where legally permitted to do so.

3.4 Service Providers and Technology Partners

We engage trusted third-party service providers to assist with platform operations, including cloud hosting infrastructure, customer support software, analytics tools, and email delivery services. These providers act as data processors on our behalf and are permitted to use your data only for the purposes specified in our data processing agreements with them. They are contractually prohibited from using your data for their own purposes.

3.5 Business Transfers

In the event that cbajet undergoes a merger, acquisition, or sale of business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via email and a prominent notice on the cbajet platform at least 30 days before your data becomes subject to a materially different privacy policy as a result of such a transfer.

4. Cookies & Tracking Technologies

The cbajet platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, and collect analytics data that helps us improve the service. By using the cbajet platform, you consent to our use of cookies as described in this section.

4.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that help detect and prevent fraud. These cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences such as preferred language, display settings, and recently played games to provide a more personalised experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how players interact with the cbajet platform — which pages are most visited, how long sessions last, and which games are most popular. This data is used solely to improve the platform.
• Marketing cookies: Used only where you have provided consent. These help us understand which promotional channels are most effective so we can direct relevant offers to interested players.

4.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling functional cookies may affect your experience on the cbajet platform, as certain preference-based features may no longer work correctly. Essential cookies cannot be disabled while you remain logged into your account.

Most modern browsers — including Chrome, Firefox, Edge, and Safari — allow you to view, manage, and delete stored cookies via the browser's privacy or security settings menu. Refer to your browser's help documentation for specific instructions.

5. Data Security Measures

cbajet implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to, the following:

• TLS/SSL encryption: All data transmitted between your browser or app and the cbajet platform is encrypted in transit using TLS 1.2 or higher.
• Data encryption at rest: Sensitive personal data including NID documents, payment account numbers, and password hashes is encrypted in the database using AES-256 encryption.
• Access controls: Personal data is accessible only to cbajet staff members who require it to perform their specific job functions. Role-based access controls and audit logging are enforced across all internal systems.
• Two-factor authentication (2FA): Available to all cbajet players and mandatory for internal staff accessing sensitive data systems. We strongly encourage all players to enable 2FA on their accounts.
• Penetration testing: The cbajet platform is subject to regular security assessments and penetration testing conducted by qualified security professionals to identify and address potential vulnerabilities.
• Incident response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, cbajet will notify affected players without undue delay and provide clear guidance on the steps you should take to protect yourself.

6. Data Retention Policy

cbajet retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our retention periods are as follows:

When the applicable retention period expires, cbajet will securely delete or anonymise your personal data so that it can no longer be associated with you. Anonymised, aggregated data (such as statistical usage patterns) may be retained indefinitely for platform analytics purposes, as it cannot be used to identify any individual.

7. Your Privacy Rights

As a cbajet player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our data protection team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a verified request.

7.1 Right of Access

You have the right to request a copy of all personal data that cbajet holds about you. We will provide this in a structured, commonly used, machine-readable format (such as a PDF or CSV export) at no charge for the first request in any 12-month period.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your email address or phone number) directly through your cbajet account settings. For corrections to identity data, please contact support.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. Please note that cbajet may be required to retain certain data beyond your erasure request where legal retention obligations apply — for example, financial transaction records required for tax compliance. In such cases, we will inform you of the specific data that must be retained and the reason.

7.4 Right to Restrict Processing

In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that cbajet restrict the processing of your personal data. During the restriction period, your data will be stored but not actively processed beyond storage.

7.5 Right to Withdraw Consent

Where cbajet processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, email [email protected] or use the unsubscribe link in any marketing email.

7.6 Right to Object

You have the right to object to processing of your personal data carried out on the basis of legitimate interest, including profiling for responsible gaming monitoring purposes. cbajet will consider your objection and will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

8. Contact & Data Controller

cbajet operates as the data controller for personal data collected through the cbajet.app platform. If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us using the details below.

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 2 business hours for urgent security matters; within 30 days for formal privacy rights requests
• Support availability: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Subject line for privacy requests: "Privacy Rights Request — [Your Registered Email]"

cbajet reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email at least 14 days before the changes take effect. The updated policy will be published on this page with a revised effective date. Your continued use of the cbajet platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.