Your privacy matters to cbaje2. This Privacy Policy explains in plain terms exactly what personal data we collect when you use our platform, why we collect it, how we protect it, who we share it with, and what rights you hold over your own information. We encourage every cbaje2 player to read this document carefully.
Six core principles guide every data decision we make. These are not aspirations — they are operational standards applied across every cbaje2 system and process.
All data transmitted between your device and cbaje2 servers is protected by 256-bit SSL/TLS encryption — the same standard used by Bangladesh's leading financial institutions including BRAC Bank and City Bank. Your login credentials, payment details, and personal information are never sent in plain text.
cbaje2 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data shared with payment partners such as bKash, Nagad, Rocket, and Upay is strictly limited to what is necessary to complete your transactions — nothing more.
Every cbaje2 account holder has the right to access, correct, export, and request deletion of their personal data. These rights are exercisable at any time by contacting cbaje2 support. We respond to all verified data requests within 30 days of receipt.
cbaje2 applies a data minimisation principle: we only collect personal data that is strictly necessary for account operation, payment processing, fraud prevention, and regulatory compliance. We do not collect data speculatively or for undefined future purposes.
Personal data is stored on secured, access-controlled servers. Internal access to player data is restricted to authorised cbaje2 personnel on a strict need-to-know basis. All internal access events are logged and audited to prevent unauthorised use.
In the unlikely event of a data security breach that poses a risk to your personal data, cbaje2 commits to notifying affected players promptly via the email address registered on their account, together with a clear description of what happened and the steps taken to address the situation.
Summary: cbaje2 collects only the personal data necessary to provide you with a safe, functional, and enjoyable gaming experience. We do not sell your data. We protect it with industry-standard encryption. You may exercise your data rights at any time by contacting [email protected]. This full document provides the legal detail behind each of those commitments.
cbaje2 ("cbaje2", "we", "us", "our") operates the online casino and sports betting platform accessible at cbaje2.app (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers on, or otherwise interacts with the cbaje2 Platform. This Privacy Policy sets out, in clear and transparent terms, what personal data we collect from you, the purposes for which we collect and process that data, the legal basis on which we rely, how long we retain it, who we share it with, and the rights you have in relation to your own personal data.
This Privacy Policy should be read alongside the cbaje2 Terms & Conditions, which govern your use of the Platform. By registering an account or otherwise using the cbaje2 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, you must not use the cbaje2 Platform.
cbaje2 primarily serves players located in Bangladesh. All references to applicable law in this Policy should be understood in that context. cbaje2 processes all account balances in Bangladeshi Taka (৳ BDT) and operates on Bangladesh Standard Time (BST, UTC+6).
For the purposes of this Privacy Policy, cbaje2 acts as the data controller in respect of personal data collected through the Platform. The data controller is responsible for determining the purposes and means of processing your personal data.
If you have any questions about how cbaje2 processes your personal data, or if you wish to exercise any of your data rights, you may contact the cbaje2 data team at:
All data rights requests and privacy inquiries will be acknowledged within 5 business days and resolved within 30 calendar days of the initial verified request, unless additional complexity requires an extension, in which case you will be informed.
cbaje2 collects personal data across several categories depending on your interaction with the Platform. The table below summarises the categories of personal data we may collect and the context in which each is typically collected.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, username, National ID number, passport number | Registration, KYC verification |
| Contact Data | Email address, Bangladeshi mobile phone number, city of residence | Registration, account updates |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet number, bank account details, Visa / Mastercard partial card number | Deposit and withdrawal requests |
| Verification Data | Government-issued ID image, proof of address document, selfie / liveness check image | KYC verification process |
| Transaction Data | Deposit amounts, withdrawal amounts, game wagers, bet stakes, game outcomes, balance history | Platform use — ongoing |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Automatic — platform access |
| Usage Data | Pages visited, games played, time spent per session, click patterns, search terms | Automatic — platform use |
| Communications Data | Live chat transcripts, support email content, feedback submissions | When you contact cbaje2 support |
| Responsible Gaming Data | Deposit limits set, loss limits set, self-exclusion requests, session reminders configured | When responsible gaming tools are used |
Data Minimisation: cbaje2 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming or self-exclusion request, in which case that disclosure is handled with the strictest confidentiality and used solely for the welfare purpose for which it was provided.
cbaje2 collects your personal data through the following channels and mechanisms:
You provide data directly to cbaje2 when you register an account, complete KYC verification, make a deposit or withdrawal request, contact cbaje2 support via live chat or email, participate in a promotion or tournament, or complete any form or survey on the Platform.
When you access and use the cbaje2 Platform, certain technical and usage data is collected automatically through server logs, session tracking, and first-party cookies. This includes your IP address, device characteristics, browser type, session start and end times, pages visited, and in-game activity. This data is collected to maintain platform security, detect fraud, optimise platform performance, and improve the user experience.
cbaje2 may receive data about you from third-party sources in limited circumstances, including:
All third-party data sources used by cbaje2 are required to handle data in a manner consistent with this Privacy Policy and applicable data protection standards.
cbaje2 processes your personal data for specific, documented purposes. The table below sets out each purpose, the categories of data used, and the legal basis on which cbaje2 relies for that processing.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Contractual necessity |
| Processing deposits and withdrawals | Identity, Financial, Transaction | Contractual necessity |
| Age and identity verification (KYC) | Identity, Verification | Legal obligation; contractual necessity |
| Fraud detection and prevention | Technical, Transaction, Financial | Legitimate interests |
| Customer support | Identity, Contact, Communications | Contractual necessity |
| Platform security and integrity | Technical, Usage | Legitimate interests |
| Responsible gaming compliance | Responsible Gaming, Transaction | Legal obligation; legitimate interests |
| Platform personalisation and improvement | Usage, Technical | Legitimate interests |
| Promotional communications (opt-in only) | Identity, Contact | Consent |
| Dispute resolution and record-keeping | Transaction, Communications, Identity | Legal obligation; legitimate interests |
Where cbaje2 relies on legitimate interests as the legal basis for processing, we have assessed that our legitimate interests are not overridden by your fundamental rights and freedoms. You have the right to object to processing carried out on legitimate interests grounds — see Section 9 for details of your rights.
cbaje2 will only send you promotional emails, SMS notifications, or in-platform messages about offers, bonuses, seasonal promotions (such as BPL cricket season, Eid, Pohela Boishakh, Victory Day), or new game releases where you have explicitly opted in to receive such communications at the time of registration or subsequently through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
cbaje2 does not sell your personal data to any third party. We share your data only in the specific, limited circumstances described below, and always on a need-to-know basis with appropriate contractual protections in place.
To process your deposits and withdrawals, cbaje2 shares the minimum necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers receive only the data required to authenticate and complete the transaction and are contractually prohibited from using that data for any other purpose.
For KYC compliance, cbaje2 uses third-party identity verification services to validate government-issued identification documents and proof of address submissions. These providers process the verification data on cbaje2's behalf and are bound by strict data processing agreements.
Games on cbaje2 are provided by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a limited player session identifier and game round data necessary for game delivery, integrity checking, and dispute resolution. They do not receive your full name, contact details, or financial data.
cbaje2 uses third-party fraud detection and cybersecurity services that may process technical data such as IP addresses and device fingerprints to identify suspicious activity. These services operate under data processing agreements consistent with this Privacy Policy.
cbaje2 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or other legal process. cbaje2 will notify you of any such disclosure where it is legally permitted to do so.
In the event that cbaje2's business or any part of it is acquired by, merged with, or transferred to another entity, your personal data may be transferred as part of that transaction. You will be notified of any such change in data controller in advance where practicable.
No International Transfers: cbaje2 does not routinely transfer your personal data outside of the region in which it is stored. Where any third-party service provider operates servers outside Bangladesh, cbaje2 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh.
cbaje2 uses first-party cookies and similar local storage technologies to operate and improve the Platform. cbaje2 does not use third-party advertising tracking cookies or cross-site behavioural profiling technologies.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Maintain your authenticated session, remember language settings, enable platform security features. These cookies are strictly necessary for the Platform to function and cannot be disabled. | Session or up to 30 days |
| Functional | Remember your preferences such as game lobby filters, last-played games, and responsible gaming reminder settings. These cookies improve your experience but are not essential. | Up to 90 days |
| Analytical | Collect anonymised aggregate data about how players use the Platform (page visit frequency, feature usage patterns) to help cbaje2 improve the user experience. No individual is identifiable from this data. | Up to 12 months |
You may manage non-essential cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in to and using the cbaje2 Platform. Clearing all cookies will log you out of your current session.
cbaje2 retains your personal data only for as long as is necessary for the purpose for which it was collected, subject to any legal or regulatory retention obligations that require a longer period.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal / regulatory compliance |
| KYC verification documents | 5 years post account closure | Anti-money laundering obligations |
| Financial transaction records | 7 years | Financial record-keeping requirements |
| Game round and betting history | 5 years | Dispute resolution; regulatory compliance |
| Support communications | 3 years | Dispute resolution; quality assurance |
| Technical / server log data | 12 months | Security monitoring; fraud detection |
| Marketing consent records | 3 years from last consent action | Proof of consent; regulatory compliance |
| Self-exclusion records | Permanent (for lifetime exclusions); 7 years for temporary exclusions | Responsible gaming compliance |
When a retention period expires and there is no overriding legal basis for continued retention, cbaje2 will securely delete or anonymise the relevant personal data so that it can no longer be attributed to an identified individual.
As a cbaje2 player, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting cbaje2 at [email protected] with sufficient information to verify your identity.
Request a copy of all personal data cbaje2 holds about you, along with information about how it is used and with whom it is shared. Responses provided within 30 days.
Request correction of any inaccurate or incomplete personal data cbaje2 holds about you. Contact support or update eligible fields directly in your account settings.
Request deletion of your personal data where cbaje2 no longer has a lawful basis for retaining it. Note: legal retention obligations (e.g., financial records) may prevent full erasure.
Request that cbaje2 restrict processing of your data while a correction or objection request is being assessed, or where you contest the accuracy of the data held.
Receive a copy of the personal data you provided to cbaje2 in a structured, commonly used, machine-readable format (e.g., CSV or JSON) for transfer to another service.
Object to processing carried out on the basis of cbaje2's legitimate interests, including any profiling for platform personalisation purposes. cbaje2 will cease that processing unless compelling grounds exist.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
If you believe cbaje2 has not handled your personal data lawfully, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
To exercise any of the above rights, contact cbaje2 at . Please include your registered username and a description of your request. cbaje2 may ask you to verify your identity before processing the request. All requests are handled within 30 calendar days. Complex requests may require an extension of up to a further 60 days, in which case you will be notified.
cbaje2 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. All registration flows include a date-of-birth declaration, and KYC verification is required before any withdrawal is processed, which provides a secondary mechanism for confirming age eligibility.
If cbaje2 becomes aware that personal data has been collected from an individual who is under 18 years of age, that account will be suspended immediately, all funds will be handled in accordance with cbaje2's underage gambling policy, and the personal data will be deleted as soon as practicable, subject to any legal obligations to retain records of the incident. Parents or guardians who believe a minor has registered on the cbaje2 Platform should contact [email protected] immediately.
18+ Only: Gambling is for adults aged 18 and above. If you are concerned about underage gambling in your household, we recommend using parental control tools available through your internet service provider or device operating system to restrict access to gambling platforms. cbaje2 supports responsible gaming and takes underage access seriously.
cbaje2 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:
While cbaje2 takes all reasonable steps to secure your personal data, no digital platform can guarantee absolute security. You are responsible for keeping your cbaje2 account credentials — including your username, password, and any 2FA codes — confidential and secure. cbaje2 will never ask for your password via email, live chat, or any channel other than the official login screen at cbaje2.app.
Safe Platform: cbaje2 is built on a secure, reliable infrastructure designed specifically for the Bangladeshi online gaming market. Our security practices are reviewed and updated regularly to keep pace with evolving threats. If you suspect your cbaje2 account has been compromised, contact [email protected] immediately and change your password without delay.
The cbaje2 Platform may contain references to third-party payment providers (bKash, Nagad, Rocket, Upay) and game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). While cbaje2 works only with reputable partners, this Privacy Policy governs only the data cbaje2 itself controls. Third-party services operate under their own privacy policies, and cbaje2 is not responsible for the data practices of any third-party provider.
cbaje2 recommends that you review the privacy policies of any third-party service you interact with in connection with your cbaje2 account, particularly your chosen payment method provider, to understand how your data is handled at their end of the transaction.
cbaje2 reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect updates in cbaje2's data processing practices, changes in applicable law, new platform features, or feedback from players and regulators. The "Last Updated" date at the top of this document will always reflect the most recent revision.
Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your data is used — cbaje2 will notify registered players via the email address on file at least 14 days before the changes take effect. Continued use of the cbaje2 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes.
We encourage you to review this Privacy Policy periodically to stay informed about how cbaje2 protects your personal data. The most current version of this document will always be accessible at cbaje2.app/privacy-policy.
For all privacy-related queries, data rights requests, or concerns about how cbaje2 handles your personal data, please contact us using the details below. Our team operates 24/7 on Bangladesh Standard Time (BST, UTC+6) and is committed to responding to all privacy enquiries promptly and professionally.
cbaje2 will never ask for your account password via any communication channel. All legitimate cbaje2 communications originate from the @cbaje2.app domain. If you receive a suspicious message claiming to be from cbaje2 that requests sensitive account information, do not respond — report it immediately to .
Now that you understand exactly how cbaje2 safeguards your data, dive into Bangladesh's most exciting online casino and sports betting platform. Safe, reliable, and built for Bangladeshi players.