Cbaja Privacy Policy — Your Data Is Our Responsibility

1. Introduction

Cbaja (https://cbaja.pro) is a trusted online gaming platform serving players in Bangladesh and South Asia. We offer entertainment services including slots, Live Casino, and Sports Betting. This Privacy Policy ("Policy") explains how cbaja collects, uses, stores, and protects your personal information.

By creating an account or using the cbaja platform, you agree to this Privacy Policy. We believe transparency is the foundation of trust — which is why we've written our data policy in plain language so you can easily understand it.

2. What Information We Collect

Under cbaja's Privacy Policy, we only collect information that is necessary to provide our services. A detailed breakdown of the data collected is provided below:

Cbaja automatically collects certain technical data when you use the platform. This may include session logs, location data (up to city level), device model, and operating system information.

3. How Information Is Used

Cbaja uses your information only for the purposes listed below. No data is used outside the scope of this Privacy Policy:

• Account management: To handle registration, login, KYC verification, and account security.
• Payment Processing: To process deposits and withdrawals securely.
• Support Services: To provide you with prompt and effective resolution of your complaints or queries.
• Responsible Gaming: To analyse your gaming behaviour and identify potential issues at an early stage.
• Fraud Prevention: To detect unusual transactions and identify the use of multiple accounts.
• Legal obligations: To meet AML (Anti-Money Laundering) and other regulatory compliance requirements.
• Platform Improvement: Aggregate usage data is analyzed to improve the quality of cbaja's services.
• Promotional Communications: To send you offers and bonus information, with your consent.

4. Who Information Is Shared With

Under cbaja's Privacy Policy, we may share data in limited circumstances and under strict conditions:

• Payment Provider: Only the data necessary to complete transactions is shared with payment gateways such as Mobile Banking, Nagad, and Rocket.
• Game providers: Third-party game companies receive only the data strictly necessary to operate their games — never a full personal profile.
• Regulatory Authority: Data may be disclosed to government or regulatory authorities under applicable legal obligations.
• Security Partners: Anonymized data may be shared with fraud detection and cybersecurity agencies.

5. Cookies Policy

Cbaja uses cookies on its website. Cookies are small text files stored in your browser that help improve your experience.

• Essential cookies: These cookies are essential for maintaining login sessions and ensuring security. Disabling them will prevent cbaja from functioning properly.
• Performance Cookies: Used to analyze site load speeds and identify pages with issues.
• Functional Cookies: Helps remember your preferred language, game settings, and more.
• Analytics Cookies: cbaja collects anonymous usage statistics to help improve the platform.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may limit certain features.

6. Security Measures

To protect your data under cbaja's Privacy Policy, we use industry-leading security technologies:

• 256-bit SSL/TLS Encryption: All data transfers occur through encrypted channels.
• Two-Factor Authentication (2FA): The option to add an extra layer of security to your account.
• Firewall Protection: An advanced firewall system prevents unauthorised access.
• Regular Security Audits: Regular audits are conducted by independent third-party cybersecurity experts.
• Data Masking: Sensitive information such as payment numbers is masked when stored.
• Access controls: Only authorized cbaja staff may access specific data.

7. Your Data Rights

Under cbaja's Privacy Policy, you have the following rights regarding your personal information:

To exercise any of these rights, email [email protected]. cbaja will respond to your request within 30 business days.

8. Minor Protection

Cbaja's services are intended for individuals aged 18 and above. Our Privacy Policy takes a strict stance on the collection of data from minors.

• Cbaja does not knowingly collect personal information from minors.
• If we become aware that a minor has registered on our platform, we will immediately close that account and delete all associated data.
• Cbaja uses age verification systems to prevent minors from accessing the platform at the point of registration.

9. Data Retention Period

Under cbaja's Privacy Policy, we do not retain your data longer than necessary:

• Active Account: All relevant data is retained for as long as the account remains active.
• Closed Accounts: Due to legal obligations, financial and transaction records are retained for up to 5 years after account closure.
• KYC documents: Retained for up to 7 years in accordance with regulatory requirements.
• Support Records: Retained for up to 2 years following the resolution of a complaint.
• Marketing Data: You will be removed from the marketing list immediately upon unsubscribing.
• Log Files: Technical logs are typically retained for up to 90 days.

10. Changes to Privacy Policy

Cbaja reserves the right to amend or update this Privacy Policy as needed. If significant changes are made, we will notify you through the following methods:

• Notifications will be sent to the email address or mobile number provided at registration.
• You will be notified via banners or pop-ups on the cbaja website.
• The effective date of the updated policy will be shown at the top of the page under "Last Updated".

Continued use of cbaja after any changes take effect will be considered your automatic acceptance of the updated policy. We recommend reviewing the Privacy Policy regularly.

11. Contact Us

For any questions, concerns, or requests to exercise your data rights regarding this Privacy Policy, please contact us:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Timeframe: 24 hours for general inquiries; 30 business days for data rights requests.