Data Protection
cbajhi Privacy Policy — Your Data, Protected
At cbajhi, the security and privacy of your personal information is a fundamental operating principle, not an afterthought. This Privacy Policy explains precisely what data we collect, how we use it, who we may share it with, and the rights you hold over your own information as a cbajhi player.
cbajhi ("the Platform", "we", "us", "our") is committed to protecting the privacy of all individuals who interact with our website, casino games, sports betting services, and associated features. This Privacy Policy applies to all personal data collected from registered players, prospective players, and visitors to the cbajhi platform, including those accessing the platform from Bangladesh and other permitted jurisdictions.
This document is written in plain, accessible English so that every cbajhi player can understand exactly how their information is handled. Where legal or technical terminology is unavoidable, we have included plain-English explanations alongside. If anything in this policy is unclear, please contact our support team at [email protected] — the contact address should be treated as plain text only and is not a clickable link.
1. Information We Collect
cbajhi collects personal data through several distinct channels: directly from you when you register an account or complete verification; automatically as you interact with the platform; and, in limited circumstances, from trusted third-party sources as described below. We collect only the minimum data necessary to provide our services safely and in compliance with our legal obligations.
1.1 Registration and Account Data
When you create a cbajhi account, we collect the following information:
- Full legal name as it appears on official government-issued identification
- Date of birth (used for mandatory age verification — 18+ only)
- Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code
- Email address (must be personally owned and actively monitored)
- Mobile phone number (used for account security and payment method linkage)
- Username and encrypted password hash (we never store passwords in plain text)
1.2 Identity Verification (KYC) Data
In accordance with standard Know Your Customer (KYC) practices, we may request copies of the following documents to verify your identity before processing withdrawals or investigating disputes:
- National Identity Card (NID) — front and back
- Passport (photo page)
- Driving licence (where applicable)
- Proof of residential address (utility bill, bank statement, or government letter dated within 90 days)
- Proof of payment method ownership (screenshot or statement confirming the bKash, Nagad, Rocket, or card account is registered in your name)
KYC documents are processed securely, stored in encrypted form, and are never used for any purpose other than identity verification and fraud prevention.
1.3 Financial Transaction Data
When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we record transaction reference numbers, payment method type, transaction amounts in BDT, timestamps, and transaction status. We do not store full card numbers on our servers. Card data is handled exclusively by our PCI-DSS compliant payment processing partners.
1.4 Gameplay and Betting Activity Data
We automatically record all gameplay activity on cbajhi, including but not limited to: games played, bet amounts, wager outcomes, session durations, bonus utilisation, sports markets accessed, odds accepted, and in-play betting behaviour. This data is used for account management, dispute resolution, responsible gaming monitoring, and product improvement.
1.5 Technical and Device Data
- IP address (used for geolocation, fraud detection, and duplicate account identification)
- Device type, operating system, and browser version
- Screen resolution and language preferences
- Session timestamps and page interaction logs
- Referring URL (the page you visited immediately before cbajhi)
Data Minimisation Principle
cbajhi adheres to a strict data minimisation policy. We do not collect personal data beyond what is reasonably necessary for the purpose stated at the point of collection. If a data field is marked optional during registration, it remains optional and non-provision will not affect your access to core platform services.
2. How We Use Your Data
cbajhi processes personal data on the basis of contractual necessity (to provide the services you have agreed to use), legal obligation (to comply with applicable anti-money laundering and age verification requirements), and legitimate interest (to maintain platform security and improve our services). The table below summarises the primary purposes for which your data is used.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contractual necessity |
| Age and identity verification (KYC) | KYC documents, date of birth, address | Legal obligation |
| Processing deposits and withdrawals | Financial transaction data, payment method info | Contractual necessity |
| Fraud prevention and AML compliance | IP address, transaction data, device data | Legal obligation / legitimate interest |
| Responsible gaming monitoring | Gameplay data, session duration, betting patterns | Legitimate interest / legal obligation |
| Dispute resolution | Gameplay logs, transaction records, communications | Contractual necessity |
| Promotional offers and bonuses | Account data, gameplay history, contact details | Consent / legitimate interest |
| Platform security and technical operations | Device data, IP address, session logs | Legitimate interest |
| Customer support communications | Name, account details, support chat logs | Contractual necessity |
cbajhi does not use your personal data for automated profiling that produces significant legal effects without human review. Responsible gaming alerts generated by our automated systems are always subject to human oversight before any account-level action is taken.
3. Data Sharing & Disclosure
cbajhi does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
3.1 Payment Processing Partners
To facilitate deposits and withdrawals, cbajhi shares necessary transaction data with our payment processing partners, including mobile money operators (bKash, Nagad, Rocket, Upay) and card scheme processors (Visa, Mastercard). These partners are contractually obligated to handle your data securely and are prohibited from using it for any purpose other than completing the specific transaction.
3.2 Game Software Providers
cbajhi's casino games are powered by licensed third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. To deliver seamless gameplay, certain technical session identifiers are shared with these providers. No directly identifiable personal data (such as your full name or NID number) is passed to game providers during normal gameplay.
3.3 Identity Verification Services
cbajhi may use third-party KYC and identity verification service providers to process and authenticate identity documents. These providers operate under strict data processing agreements and are permitted to use your KYC data solely for the purpose of verifying your identity on cbajhi's behalf.
3.4 Legal and Regulatory Disclosure
cbajhi will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities if required to do so by a valid legal order, court directive, or applicable regulation. In such circumstances, cbajhi will disclose only the minimum data required to satisfy the legal obligation and, where permitted, will notify the affected account holder of the disclosure.
No Third-Party Advertising
cbajhi does not share your personal data with advertising networks, data brokers, or social media platforms for targeted advertising purposes. Your gameplay behaviour and betting history are never sold to or shared with external marketing parties under any circumstances.
4. Cookies & Tracking Technologies
cbajhi uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, to remember your preferences, and to collect anonymised analytics data that helps us improve the user experience. We do not use third-party advertising cookies or cross-site tracking technologies.
The cookies used on cbajhi fall into the following categories:
- Strictly Necessary Cookies: Essential for platform operation. These cookies maintain your authenticated session, enforce security controls, and ensure game integrity. They cannot be disabled without preventing access to cbajhi's core services.
- Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations. Disabling these cookies will not prevent platform access but may affect personalised features.
- Analytics Cookies: Collect anonymised, aggregated data about how players navigate cbajhi — which pages are visited most, where users encounter difficulties, and how long sessions typically last. This data is used solely to improve the platform and contains no personally identifiable information.
- Security Cookies: Used for fraud detection, bot prevention, and duplicate account identification. These are processed in conjunction with IP address and device fingerprint data as part of cbajhi's security infrastructure.
Most browsers allow you to control cookies through your browser settings, including blocking all cookies, deleting existing cookies, or receiving a notification before a cookie is stored. Please be aware that disabling strictly necessary cookies will prevent you from logging into your cbajhi account. For detailed instructions on managing cookies in your specific browser, please consult your browser's help documentation.
No Advertising Cookies
cbajhi does not install third-party advertising cookies, retargeting pixels, or social media tracking tags on any page of the platform. Your browsing activity on cbajhi is not shared with external advertising platforms.
5. Data Security Measures
cbajhi employs a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security posture is reviewed and updated regularly to reflect evolving threat landscapes and industry best practices.
Key technical and organisational security measures implemented by cbajhi include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and cbajhi's servers is encrypted using 256-bit SSL/TLS protocols. The padlock icon in your browser address bar confirms an active encrypted connection at all times when using cbajhi.
- Password Hashing: Account passwords are never stored in plain text. cbajhi uses industry-standard one-way cryptographic hashing algorithms to store password credentials, meaning that even cbajhi employees cannot read your password.
- Encrypted Data Storage: Sensitive personal data including KYC documents and financial records are stored in encrypted form within access-controlled infrastructure. Encryption keys are managed under strict separation of duties protocols.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. cbajhi staff are granted access only to the data categories required to perform their specific job functions. All access events are logged and auditable.
- Two-Factor Authentication: cbajhi supports two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA via your account security settings to add an additional layer of protection against unauthorised access.
- Intrusion Detection Systems: cbajhi operates continuous network monitoring and intrusion detection systems that alert our security team to anomalous access patterns in real time.
In the event of a personal data breach that poses a risk to affected individuals, cbajhi will notify impacted players without undue delay and will implement all necessary containment and remediation measures immediately upon discovery of the breach.
Your Role in Account Security
While cbajhi maintains robust technical security controls, you also play an important role in protecting your account. Never share your cbajhi password with anyone, use a unique password not reused on other services, and contact cbajhi support immediately at [email protected] if you suspect your account has been accessed without your authorisation.
6. Data Retention Policy
cbajhi retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below represent our standard practice; longer retention may apply in specific circumstances such as active legal proceedings or regulatory investigations.
| Data Category | Standard Retention Period | Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal / AML obligation |
| KYC identity documents | Duration of account + 5 years post-closure | Legal / AML obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligation |
| Gameplay and betting logs | 3 years from session date | Dispute resolution / legitimate interest |
| Customer support communications | 3 years from last interaction | Contractual necessity / quality assurance |
| Analytics and technical logs | 13 months (rolling) | Legitimate interest / security |
| Marketing preference records | Until consent is withdrawn + 1 year | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes as it can no longer be attributed to any individual.
7. Your Privacy Rights
As a cbajhi player, you hold the following rights with respect to your personal data. These rights are exercisable by contacting cbajhi's data team at [email protected] — please note this is plain text only and not a clickable link. We will acknowledge all privacy rights requests within 5 business days and aim to resolve them within 30 calendar days.
- Right of Access: You may request a copy of all personal data cbajhi holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly from your account settings panel at any time.
- Right to Erasure: Subject to our legal data retention obligations (see Section 6), you may request that cbajhi delete your personal data. This right may be limited where retention is required for legal, regulatory, or fraud prevention purposes.
- Right to Restrict Processing: In certain circumstances (e.g., while a data accuracy dispute is being resolved), you may request that cbajhi restricts its processing of your personal data to storage only.
- Right to Data Portability: You may request that cbajhi provide your personal data in a portable format so that it can be transferred to another service provider, where technically feasible.
- Right to Object: Where cbajhi processes your data on the basis of legitimate interest, you have the right to object to that processing. cbajhi will honour such objections unless a compelling legitimate ground overrides your interest.
- Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional email communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Identity Verification for Rights Requests
To protect your data from being accessed by unauthorised third parties, cbajhi will require you to verify your identity before processing any privacy rights request. This typically involves confirming your registered email address and answering a security question related to your account.
8. Contact the Data Controller
If you have any questions, concerns, or requests relating to this Privacy Policy or cbajhi's handling of your personal data, please contact our data protection team using the details below. All correspondence is treated as strictly confidential.
cbajhi operates a dedicated data privacy team responsible for overseeing compliance with this Privacy Policy and handling all data subject requests. Our target response time for privacy-related enquiries is within 2 business days for acknowledgement and within 30 calendar days for full resolution.
Data Privacy Contact
Email: [email protected] — plain text, not a clickable link.
Subject line: "Privacy Request — [Your Account Username]"
Response time: Acknowledgement within 2 business days. Resolution within 30 calendar days.
Language: English preferred. Bangladesh Standard Time (BST, UTC+6) business hours apply.
cbajhi reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file. The effective date at the top of this document reflects the date of the most recent revision. Continued use of cbajhi following notification of a policy update constitutes your acceptance of the revised Privacy Policy.
How cbajhi Protects Your Privacy
Six foundational commitments that underpin cbajhi's approach to data privacy and player trust.
End-to-End Encryption
All data in transit between your device and cbajhi's infrastructure is protected by 256-bit SSL/TLS encryption. Your financial and personal details are never transmitted in plain text under any circumstances.
KYC Handled with Care
Identity documents submitted during the KYC process are encrypted on receipt, stored on access-controlled servers, and used exclusively for identity verification. KYC data is never shared with advertising partners.
No Third-Party Ad Tracking
cbajhi does not install third-party advertising cookies or retargeting pixels. Your cbajhi activity is never shared with ad networks, data brokers, or social media platforms for commercial profiling purposes.
Data Minimisation
We collect only the data fields genuinely required to deliver the service you have requested. Optional fields are clearly labelled and non-completion does not affect your access to core cbajhi features.
Defined Retention Periods
cbajhi operates transparent, published data retention schedules. When the retention period for a data category expires, records are securely and permanently deleted or irreversibly anonymised.
Your Rights, Respected
Access, rectification, erasure, portability, and objection rights are all honoured by cbajhi. Submit a privacy rights request to [email protected] and receive acknowledgement within 2 business days.
Your Privacy is in Good Hands at cbajhi
Still have questions about how cbajhi handles your data? Visit our FAQ for quick answers, read our Terms & Conditions, or explore the platform knowing your information is protected at every step.
18+ only • SSL encrypted • Fair play certified • Please gamble responsibly