Privacy Policy – How cbaazi Protects Your Personal Data

This Policy applies to all personal data collected through the cbaazi website, mobile browser interface, customer support communications, payment processing interactions, and any other touchpoint between you and cbaazi. It does not apply to third-party websites or services that may be linked from the platform — those third parties operate under their own privacy policies, and cbaazi accepts no responsibility for their data practices.

cbaazi is committed to handling your personal data responsibly, transparently, and securely. We use SSL encryption across all sessions, apply strict internal data access controls, and never sell your personal information to third-party marketers. This Policy is written in plain English so that every cbaazi player — wherever they are in Bangladesh — can understand clearly how their information is being used.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together constitute the full agreement governing your use of cbaazi.

1 Data Controller

cbaazi is the data controller responsible for your personal data collected through the cbaazi platform. As data controller, cbaazi determines the purposes and means by which your personal data is processed. If you have any questions, concerns, or requests relating to how cbaazi handles your personal data, you may contact our data protection team at the following address:

The email address above is provided as plain text only and is not a clickable link. Please use the cbaazi platform's secure account interface for all account management actions; use the email address above exclusively for privacy and data-related enquiries.

2 Personal Data We Collect

cbaazi collects personal data from you in several ways — directly when you register and use the platform, automatically when you browse the site, and from third parties such as payment providers where necessary to process your transactions and verify your identity. The categories of personal data we collect include the following:

cbaazi does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by someone under 21, we will close the account immediately and delete the associated personal data, except where retention is required by applicable law.

3 How We Use Your Personal Data

cbaazi processes your personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with the reasons it was originally collected. The primary purposes for which we process your personal data are as follows:

• Account registration and management: To create and maintain your cbaazi account, verify your identity, and enable you to access all platform features including deposits, withdrawals, casino games, and sports betting markets.
• Payment processing: To process your deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions associated with your account.
• Identity verification and age verification: To confirm that you meet the 21+ age requirement and to verify that you are who you say you are, in compliance with our anti-money laundering and know-your-customer obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats that may affect you or other cbaazi players.
• Responsible gaming compliance: To monitor your gaming activity for indicators of problem gambling, to apply deposit limits or cooling-off periods where requested, and to honour self-exclusion requests promptly.
• Customer support: To respond to your queries, resolve disputes, and provide technical assistance when you contact the cbaazi support team.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the cbaazi platform, optimise game performance, and enhance the overall player experience.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and news about cbaazi products and events — but only where you have given explicit consent, and always with a clear option to unsubscribe.
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and exercise or defend legal claims.

4 Legal Basis for Processing

cbaazi processes your personal data on the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing is necessary to perform the contract between you and cbaazi — specifically, to operate your account, process your transactions, and deliver the gaming services you have signed up for.
• Legal obligation: Processing is necessary to comply with applicable legal obligations, including identity verification, anti-money laundering checks, and responsible gaming requirements.
• Legitimate interests: Processing is necessary for cbaazi's legitimate business interests, including fraud detection, platform security, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where cbaazi relies on your consent to process your data (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Sharing Your Personal Data

cbaazi does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with carefully selected third-party service providers and in specific circumstances as described below:

• Payment processors: Your financial data is shared with payment providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) only to the extent necessary to process your deposit and withdrawal transactions. These providers are bound by their own regulatory frameworks and data security standards.
• Identity verification providers: We may share identity documents and related data with third-party verification services to complete know-your-customer checks. These providers process your data strictly on our instructions and for no other purpose.
• Game software providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session and game-result data necessary to deliver their games on the cbaazi platform. They do not receive your identity, financial, or contact data.
• IT and security service providers: Third-party providers who support cbaazi's infrastructure, hosting, cybersecurity, and fraud detection systems may process technical data on our behalf under strict contractual data processing agreements.
• Regulatory authorities and law enforcement: cbaazi may be required to disclose your personal data to government authorities, regulators, or law enforcement agencies where required by applicable law, court order, or where we believe disclosure is necessary to prevent fraud or protect the safety of our players.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of cbaazi's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy implications before your data is transferred.

All third-party service providers who process personal data on behalf of cbaazi are required to maintain appropriate technical and organisational security measures and to process your data only in accordance with our documented instructions.

6 Cookies and Tracking Technologies

cbaazi uses cookies and similar tracking technologies to operate the platform effectively and to understand how players use our services. Cookies are small text files stored on your device when you visit the cbaazi website. We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, remember your language preferences, and keep your account secure during your visit. These cookies cannot be disabled.
• Performance and analytics cookies: These help us understand how players navigate the cbaazi platform — which pages are most visited, how long sessions last, and where technical errors occur. Data collected by these cookies is aggregated and anonymised.
• Functionality cookies: These remember your preferences across visits, such as your preferred game categories or display settings, to improve your experience on cbaazi.
• Marketing cookies (with consent): Where you have consented, these cookies help us deliver relevant promotional content. You may withdraw this consent at any time by adjusting your browser settings or contacting support.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the cbaazi platform, including your ability to stay logged in during a session.

7 Data Retention

cbaazi retains your personal data for as long as your account is active and for a reasonable period thereafter, in accordance with our legal and regulatory obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction.
• Gaming activity data: Retained for a minimum of three years from the date of the activity, or longer where required for dispute resolution or regulatory investigation purposes.
• Support communications: Retained for two years from the date of the last communication in a given support thread, unless the thread relates to an open dispute or legal matter.
• Marketing consent records: Retained for three years from the date consent was last updated, to demonstrate compliance with applicable marketing regulations.

When personal data is no longer required for any purpose, it is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where anonymisation is not technically feasible, cbaazi applies additional security measures to the data pending its deletion.

8 Data Security

cbaazi takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the cbaazi platform.
• Secure, encrypted storage of all personal data at rest using industry-standard encryption protocols.
• Strict role-based access controls ensuring that only authorised personnel can access personal data relevant to their specific job function.
• Regular internal security audits and vulnerability assessments of our systems and infrastructure.
• Two-factor authentication options for all cbaazi player accounts to add an additional layer of login security.
• Incident response procedures to detect, contain, and report any data breach promptly and in accordance with applicable requirements.

While cbaazi takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for using a strong, unique password for your cbaazi account. If you believe your account security has been compromised, contact [email protected] immediately.

9 Your Rights as a Data Subject

As a cbaazi player, you hold several rights with respect to your personal data. You may exercise any of these rights at any time by contacting [email protected]. cbaazi will respond to all verified data rights requests within a reasonable timeframe, normally within 30 days of receipt.

• Right of access: You may request a copy of all personal data that cbaazi holds about you, together with information about how that data is being used.
• Right to rectification: If you believe that any personal data cbaazi holds about you is inaccurate or incomplete, you may request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that cbaazi delete your personal data. We will comply with this request where we are not required to retain the data by law or for legitimate operational reasons such as anti-money laundering compliance.
• Right to restriction of processing: You may ask cbaazi to restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request that cbaazi provide your personal data in a structured, commonly used, machine-readable format, or transfer it directly to another controller where technically feasible.
• Right to object: You may object to the processing of your personal data where cbaazi relies on legitimate interests as its legal basis, or where your data is used for direct marketing purposes. We will stop processing your data for direct marketing immediately upon receipt of an objection.
• Right to withdraw consent: Where cbaazi processes your personal data based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

cbaazi will never charge a fee for handling a routine data rights request. In cases where requests are manifestly unfounded or excessive, cbaazi reserves the right to decline the request or charge a reasonable administrative fee, with written explanation provided.

10 International Data Transfers

cbaazi primarily processes and stores your personal data within secure data centre infrastructure. In some cases, your personal data may be processed by third-party service providers whose systems are located outside Bangladesh. Where such transfers take place, cbaazi takes steps to ensure that your personal data receives a level of protection equivalent to the standards applied within Bangladesh, including by executing appropriate data transfer agreements with the relevant service providers.

cbaazi will never transfer your personal data to a jurisdiction known for inadequate data protection standards without first implementing appropriate safeguards.

11 Children's Privacy

The cbaazi platform is strictly intended for adults aged 21 and above. cbaazi does not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are a parent or guardian and you believe that a minor has registered a cbaazi account or submitted personal data to our platform, please contact us immediately at [email protected]. We will investigate the matter promptly and, where confirmed, close the account and delete all associated personal data without delay.

12 Changes to This Privacy Policy

cbaazi reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, cbaazi will notify registered players by posting a notice on the platform and, where appropriate, by sending an email notification to the address on file for your account. The revised Policy will carry an updated effective date at the top of the document.

Your continued use of the cbaazi platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how cbaazi protects your data.

13 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how cbaazi handles your personal data, please get in touch with our team:

cbaazi is committed to resolving all privacy complaints fairly and promptly. If you are not satisfied with our response to your complaint, you may wish to seek further guidance through applicable data protection or consumer rights channels available in Bangladesh.