cbajee ("cbajee", "we", "us", or "our") operates the online casino and sports betting platform at cbajee.vu. We understand that when you create an account and engage with our platform, you trust us with your personal information. This Privacy Policy sets out — in full and transparent detail — how cbajee collects, processes, stores, and protects that information, and how we comply with our obligations to you as a data subject.
This Privacy Policy applies to all users of the cbajee platform, including registered players, visitors who browse our website without registering, and individuals who contact our support team. By using the cbajee platform in any capacity, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.
This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy. In the event of any conflict between this Privacy Policy and another cbajee policy document, this Privacy Policy shall prevail in respect of data protection matters.
Plain-Language Summary: cbajee collects only the data we genuinely need to operate a safe, fair, and legally compliant platform for Bangladesh players. We do not sell your data to advertisers. We do not share your data with unaffiliated third parties without your consent, except where required by law or necessary to process your transactions.
cbajee collects personal data across several categories. The specific data collected depends on how you interact with our platform:
| Category |
Examples of Data Collected |
When Collected |
| Identity Data |
Full legal name, date of birth, gender, National ID number, passport number |
Registration and KYC verification |
| Contact Data |
Email address, mobile phone number, residential address, division/district |
Registration and account updates |
| Financial Data |
bKash / Nagad / Rocket wallet number, bank account details, transaction history, deposit and withdrawal records |
Payment processing |
| Technical Data |
IP address, browser type and version, device type, operating system, screen resolution, time zone (BST UTC+6) |
Automatically on platform access |
| Usage Data |
Pages visited, games played, bet history, session duration
, sports betting selections, bonus usage, login timestamps |
Automatically during platform use |
| Communications Data |
Support chat transcripts, email correspondence, complaint records, feedback submissions |
When you contact cbajee support |
| Verification Data |
Copies of government-issued ID, utility bills, selfie photographs submitted for KYC purposes |
Identity verification process |
| Responsible Gaming Data |
Self-exclusion requests, deposit limit settings, session time limits, reality check preferences |
When responsible gaming tools are activated |
cbajee does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data, except where a player voluntarily discloses such information in the course of a support interaction. Any such data disclosed voluntarily is treated with the highest level of confidentiality and is not used for any profiling or marketing purpose.
cbajee collects personal data through the following channels:
- Direct interactions: Data you provide when you register a cbajee account, complete identity verification, make a deposit or withdrawal, contact our support team, or submit a complaint or feedback.
- Automated technologies: When you access the cbajee platform, our servers automatically record technical data including your IP address, device identifiers, browser details, and interaction logs. This data is collected via server logs, cookies, pixel tags, and similar tracking technologies described in Section 7.
- Payment processors: When you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, or a bank card, our payment processing partners transmit transactional confirmation data to cbajee to reconcile your account balance. cbajee does not store raw card data — full payment instrument credentials are handled exclusively by our PCI-DSS compliant payment partners.
- Third-party game studios: Certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may transmit game session data to cbajee for the purpose of settling bets, calculating winnings, and maintaining game integrity records.
- Identity verification partners: Where cbajee uses a third-party KYC (Know Your Customer) service to verify submitted identity documents, that service transmits a verification result and associated data to cbajee. The raw document images may be retained by the KYC partner in accordance with their own data retention policies, subject to data processing agreements with cbajee.
cbajee processes your personal data for the following purposes:
- Account registration and management: To create, maintain, and secure your cbajee account, including verifying your identity, managing your login credentials, and communicating essential account notifications.
- Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; to reconcile transaction records; and to detect and prevent payment fraud.
- Game and betting operations: To deliver casino games and sports betting markets, settle wagers, calculate and credit winnings, and maintain a tamper-proof record of all game rounds and betting activity.
- Identity verification and KYC compliance: To verify that you are who you claim to be, that you are aged 18 or above, and that your account is not being used for financial crime, in accordance with our anti-money laundering (AML) obligations.
- Responsible gaming: To implement the responsible gaming tools you activate (deposit limits, session limits, self-exclusion), to monitor for signs of problem gambling behaviour, and to intervene proactively where cbajee's responsible gaming policies require it.
- Customer support: To respond to your enquiries, complaints, and feedback; to maintain records of support interactions for quality assurance and dispute resolution purposes.
- Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and any other conduct that violates cbajee's Terms & Conditions or applicable law.
- Marketing and promotional communications: Where you have provided explicit consent, to send you information about cbajee promotions, bonuses, seasonal offers (including BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh promotions), and platform updates. You may withdraw consent for marketing communications at any time by contacting [email protected].
- Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the cbajee platform, optimising game offerings, and enhancing the overall user experience for Bangladesh players.
- Legal and regulatory compliance: To comply with applicable laws, regulations, court orders, and lawful requests from competent authorities.
Marketing Opt-Out: cbajee will only send you promotional communications if you have explicitly consented to receive them. If at any point you wish to stop receiving marketing messages, contact our support team at
[email protected] and we will process your opt-out request within 5 business days. Opting out of marketing does not affect essential account communications such as transaction confirmations, security alerts, or policy updates.
cbajee processes your personal data on the following legal grounds, depending on the specific purpose of the processing activity:
- Contractual necessity: Processing required to perform the contract between you and cbajee — including account management, payment processing, game delivery, and withdrawal processing — is carried out on the basis of contractual necessity. Without this processing, cbajee cannot provide its services to you.
- Legal obligation: Processing required to comply with our legal and regulatory obligations — including KYC verification, AML monitoring, and record-keeping obligations — is carried out on the basis of legal compliance. cbajee cannot waive or limit this processing at a player's request.
- Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, support quality assurance, and aggregated analytics is carried out on the basis of cbajee's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for marketing communications and non-essential cookies is carried out solely on the basis of your explicit, freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
cbajee does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial or marketing purposes. We share your data only in the following defined and controlled circumstances:
- Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum data necessary to process your payment transactions. All payment partners are contractually bound to use your data only for transaction processing and not for any other purpose.
- Game content providers: Certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and wager data necessary to operate their games within the cbajee platform. These studios are bound by data processing agreements and their own regulatory obligations as certified operators.
- Identity verification partners: Our KYC service providers receive the identity documents and personal data you submit during the verification process. These partners are engaged exclusively for verification purposes and are contractually prohibited from using your data for any other purpose.
- IT and infrastructure providers: Cloud hosting, server management, and cybersecurity service providers who operate the technical infrastructure supporting cbajee's platform may have access to data as part of their service delivery. All such providers operate under data processing agreements that restrict their use of your data to the specific services they provide to cbajee.
- Legal and regulatory disclosure: cbajee may disclose your personal data to competent governmental or regulatory authorities, law enforcement agencies, or courts where we are legally required or compelled to do so by applicable law, court order, or regulatory instruction. Where legally permitted, cbajee will notify you of such a disclosure.
- Business transfers: In the event of a merger, acquisition, asset sale, or restructuring involving cbajee, your personal data may be transferred to the acquiring or successor entity as part of that transaction. cbajee will provide advance notice of any such transfer where reasonably practicable, and the successor entity will be bound by the terms of this Privacy Policy in respect of your data.
No Cross-Border Data Sales: cbajee never sells personal data across borders or to data brokers. Any international data transfers — for example, to game studios based outside Bangladesh — are governed by data processing agreements that impose data protection standards equivalent to those described in this Privacy Policy.
cbajee uses cookies and similar tracking technologies to operate the platform, improve user experience, and gather aggregated analytics. A cookie is a small text file placed on your device when you visit the cbajee website. The following categories of cookies are used:
- Strictly necessary cookies: These cookies are essential to the operation of the cbajee platform. They enable core functions such as user authentication (keeping you logged in), session management, and security features including CSRF protection. The cbajee platform cannot function without these cookies. They cannot be disabled.
- Functional cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming configurations — to deliver a more personalised experience on the cbajee platform. Disabling these cookies may affect the functionality of certain features.
- Performance and analytics cookies: These cookies collect aggregated, anonymised data about how users interact with the cbajee platform — including which pages are visited most frequently, where users encounter errors, and how sessions typically flow. This data is used exclusively to improve cbajee's platform and services. No individual player is identifiable from this aggregated data.
- Marketing cookies: Where you have consented, these cookies may be used to deliver cbajee promotional content that is relevant to your interests and usage patterns. These cookies are not set without your explicit consent.
You may manage your cookie preferences through your browser settings at any time. Most browsers allow you to refuse new cookies, accept cookies selectively, or delete existing cookies. Note that disabling strictly necessary cookies will impair your ability to use the cbajee platform. Detailed instructions for managing cookies are available in the help documentation of your specific browser.
cbajee retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our legal and regulatory obligations. The following retention periods apply as a general guide:
| Data Category |
Retention Period |
Reason |
| Account and identity data |
5 years after account closure |
AML regulatory compliance and dispute resolution |
| Financial and transaction data |
7 years from transaction date |
Financial record-keeping obligations |
| KYC verification documents |
5 years after account closure |
AML and identity verification obligations |
| Game and betting history |
5 years from the date of each game round |
Dispute resolution and fair play auditing |
| Support communications |
3 years from last interaction |
Quality assurance and dispute resolution |
| Responsible gaming records |
5 years from activation of tool |
Player protection and regulatory compliance |
| Technical and usage logs |
12 months |
Security monitoring and platform performance |
| Marketing consent records |
3 years from consent or withdrawal |
Evidence of consent management |
Upon expiry of the applicable retention period, cbajee will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices. Where data has been anonymised, cbajee may retain it indefinitely for aggregated analytics purposes, as anonymised data no longer constitutes personal data.
Self-excluded players: where a player has requested permanent self-exclusion, cbajee will retain the minimum data necessary to enforce that exclusion (name, date of birth, email address) for the duration of the exclusion, even if it extends beyond standard retention periods. This is a player protection measure to prevent re-registration by self-excluded individuals.
cbajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes, but is not limited to:
- 256-Bit SSL/TLS encryption: All data transmitted between your device and the cbajee platform is encrypted using 256-bit SSL/TLS protocol. This is the same level of encryption used by international financial institutions. The presence of a valid SSL certificate can be confirmed by the padlock icon in your browser's address bar when visiting cbajee.vu.
- Encrypted data storage: Sensitive personal data stored on cbajee's servers — including identity information and financial data — is encrypted at rest using AES-256 encryption. Plain-text storage of passwords is strictly prohibited; all passwords are hashed using a one-way cryptographic function.
- Access controls: Access to personal data within cbajee's internal systems is restricted to authorised personnel who require it to fulfil their specific job function. Access is governed by role-based permissions, enforced by multi-factor authentication (MFA), and subject to regular access review audits.
- Network security: cbajee's platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation services. Vulnerability scanning and penetration testing are conducted on a regular basis.
- Secure payment handling: cbajee does not store raw payment credentials. All card and mobile wallet transactions are processed by PCI-DSS Level 1 compliant payment service providers. cbajee's servers never directly handle or store full card numbers or mobile wallet PINs.
- Incident response: cbajee maintains a documented data breach response plan. In the event of a security incident that results in a breach of your personal data, cbajee will assess the risk, contain the incident, and notify affected users in a timely manner, consistent with applicable data breach notification obligations.
Your Role in Security: While cbajee takes extensive measures to protect your data, you also play an important role in account security. Use a strong, unique password for your cbajee account. Do not share your login credentials with anyone. If you believe your account has been compromised, contact
[email protected] immediately. cbajee staff will never ask you for your password.
As a cbajee user, you hold a number of rights in relation to your personal data. cbajee is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include:
- Right of access: You have the right to request a copy of the personal data cbajee holds about you, along with information about how that data is being used. Requests will be fulfilled within 30 days of receipt.
- Right to rectification: If the personal data cbajee holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update some data directly through your cbajee account settings; for other corrections, contact [email protected].
- Right to erasure ("right to be forgotten"): You may request that cbajee delete your personal data. This right is subject to exceptions — for example, cbajee cannot delete data that it is legally required to retain for AML or financial record-keeping purposes, or data retained to enforce a permanent self-exclusion. Where deletion is not possible, cbajee will explain the applicable exemption.
- Right to restrict processing: You may request that cbajee restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending cbajee's review of that objection.
- Right to data portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
- Right to object: You have the right to object to processing carried out on the basis of cbajee's legitimate interests, including profiling for direct marketing purposes. Upon receipt of a valid objection, cbajee will cease the relevant processing unless cbajee can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please submit your request in writing to [email protected], clearly identifying the right you wish to exercise and providing sufficient information to verify your identity. cbajee will acknowledge receipt of all rights requests within 5 business days and will respond substantively within 30 calendar days, or 60 days where the request is complex or involves multiple rights.
No Fees for Rights Requests: cbajee does not charge any fee for processing a rights request unless the request is manifestly unfounded, excessive, or repetitive. Where cbajee determines that a fee is appropriate in exceptional circumstances, we will notify you of the applicable fee before proceeding.
The cbajee platform is strictly intended for adults aged 18 years and above. cbajee does not knowingly collect, process, or retain personal data relating to individuals under the age of 18. All players are required to confirm their age during the registration process, and cbajee conducts age verification checks as part of its KYC process to enforce this restriction.
If cbajee becomes aware, or has reasonable grounds to suspect, that a user is under the age of 18, the relevant account will be suspended immediately pending investigation. If the user is confirmed to be under 18, the account will be permanently closed, all deposits will be refunded to the source payment method, and any winnings will be voided. The personal data of the confirmed minor will be deleted to the extent permitted by cbajee's legal obligations.
If you believe that a minor may have registered a cbajee account or may be using your account without your knowledge, please contact our support team immediately at [email protected]. cbajee takes reports of underage access with the utmost seriousness and will act promptly on any such report.
18+ Only: cbajee is designed exclusively for adults aged 18 and above. If you are under 18, you must not use the cbajee platform or submit any personal data to us. Parents and guardians who are concerned about minors accessing online gambling services are encouraged to use parental control software to restrict access to gambling websites.
The cbajee platform may contain references to third-party game studios, payment providers, and other services. Where the cbajee platform embeds content from or links to third-party services — such as live casino streams from Evolution Gaming or Ezugi studios — those third-party services operate under their own privacy policies and data processing practices. cbajee is not responsible for the data practices of third-party providers beyond the scope of data processing agreements that cbajee has in place with those providers.
cbajee recommends that you review the privacy policies of any third-party services you interact with. Your interactions with third-party services embedded within or linked from the cbajee platform are governed by the terms and privacy policies of those services, not by this Privacy Policy.
cbajee reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where a material change is made to this Privacy Policy, cbajee will notify registered players via the email address associated with their account and will display a prominent notice on the cbajee platform for a minimum of 14 days before the updated policy takes effect.
The effective date shown at the top of this document indicates when the current version of the Privacy Policy came into force. Your continued use of the cbajee platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any amendment, you should cease using the cbajee platform and contact [email protected] to arrange account closure and the processing of any outstanding balance.
The most current version of this Privacy Policy is always available at cbajee.vu/privacy-policy. cbajee encourages all users to review this Policy periodically, even in the absence of a formal notification, to remain informed about how your data is being handled.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way cbajee handles your personal data, please contact our data protection team using the details below. All privacy-related enquiries are treated with strict confidentiality and are handled by trained personnel.
- Email: [email protected]
- WhatsApp: +880 1700 000000
- Live Chat: Available on the cbajee platform, 24 hours a day, 7 days a week
- Response Time: cbajee acknowledges all privacy enquiries within 5 business days and responds substantively within 30 calendar days
- Coverage: Serving players across all divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh
When contacting cbajee regarding a data rights request, please include your registered cbajee username and a clear description of your request. cbajee may require you to verify your identity before processing your request, to ensure that personal data is not disclosed to an unauthorised individual.