Privacy Policy — c baji Data Commitment

1. Information We Collect

c baji collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in limited circumstances from trusted third-party sources for verification purposes. The following table summarises the categories of data we collect and the primary reason for collection.

1.1 Data Provided by You

When you register an account on c baji, you voluntarily provide identity and contact information. When you make a deposit or request a withdrawal, you provide financial data. When you contact our support team via live chat or email at [email protected], the content of that communication is recorded for quality assurance and dispute resolution purposes.

1.2 Data Collected Automatically

When you access the c baji platform, our servers automatically record certain technical data including your IP address, the type of device and browser you are using, and the pages you visit. This data is collected for security monitoring, fraud prevention, and to help us understand how players interact with the platform so that we can improve it over time.

1.3 Data from Third Parties

In certain circumstances, c baji may receive information about you from trusted third-party sources, including identity verification providers who assist with KYC checks, payment processors who confirm transaction status, and fraud prevention agencies. Data received from third parties is handled with the same level of care and under the same policies as data collected directly from you.

2. How We Use Your Data

c baji processes your personal data only where we have a lawful basis to do so. The primary bases on which we rely are: performance of a contract (providing you with the services you have signed up for), compliance with a legal obligation (including AML and KYC requirements), legitimate interest (including fraud prevention and platform security), and in some cases, your explicit consent.

2.1 Account Management & Service Delivery

We use your identity and contact data to create and manage your account, verify your identity, authenticate your login sessions, process your deposits and withdrawals, credit bonuses to your account, and send you transactional communications such as deposit confirmations, withdrawal receipts, and security alerts. These uses are necessary for the performance of your contract with c baji.

2.2 Fraud Prevention & AML Compliance

c baji is committed to preventing financial crime. We use your financial data, technical data, and usage data to monitor for suspicious patterns that may indicate fraud, money laundering, or unauthorised account access. Where suspicious activity is detected, we may freeze your account pending investigation and, where legally required, report relevant information to the appropriate authorities in Bangladesh.

2.3 Responsible Gaming

We actively monitor usage data — including bet frequency, session duration, deposit patterns, and self-exclusion history — to identify players who may be experiencing gambling-related harm. This monitoring is conducted in the interests of player welfare and may result in our support team proactively reaching out to affected players. You can review all responsible gaming tools available to you by visiting the Responsible Gaming page.

2.4 Marketing Communications

With your explicit consent at the time of registration (or subsequently via your account settings), c baji may send you promotional communications about new games, upcoming tournaments, seasonal bonus offers, and special promotions relevant to the Bangladesh market — including BPL cricket season offers, Eid promotions, and Pohela Boishakh events. You may withdraw your consent and opt out of marketing communications at any time by contacting support or updating your account preferences. Opting out of marketing does not affect transactional communications required for service delivery.

2.5 Platform Improvement & Analytics

Aggregated and anonymised usage data is analysed to understand how players navigate the platform, which games are most popular, where technical issues may arise, and how the user experience can be improved. This analysis does not identify individual players and is used solely for internal product development purposes.

3. Cookies & Tracking Technologies

c baji uses cookies and similar technologies — including local storage and session tokens — to ensure the platform functions correctly, to keep your session secure, and to gather anonymised analytics data that helps us improve the service.

3.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to operate. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of essential cookies without losing core platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players interact with the platform — such as which pages are visited most frequently and where players encounter errors. This data is used internally to improve the product.
• Preference Cookies: Remember your settings and preferences, such as your preferred language (English) and notification preferences, so that you do not need to re-enter them on each visit.
• Security Cookies: Help us detect and prevent fraud, bot activity, and unauthorised access attempts by fingerprinting session behaviour without identifying you personally.

3.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling non-essential cookies will not significantly affect your ability to use c baji, but disabling essential cookies may prevent you from logging in or completing transactions. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's official help documentation.

4. Data Sharing & Third Parties

c baji does not sell, rent, or otherwise trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle your information securely and in accordance with applicable data protection standards.

4.1 Payment Processors

To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnered Bangladeshi banks, we share the minimum necessary financial data with the relevant payment processor. These processors operate under their own terms and privacy policies, to which you should refer for full details of how they handle your data.

4.2 Identity Verification Providers

To fulfil our KYC obligations, c baji works with specialist identity verification service providers who help us confirm that the documents and personal details you submit during account registration are genuine. These providers process your data strictly for verification purposes and are prohibited from using it for any other reason.

4.3 Game Providers

When you play games supplied by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — certain session data (such as your player ID and bet activity) is shared with the relevant provider to enable the game to function and to allow the provider to certify game fairness. Game providers do not receive your full personal profile, financial data, or contact details.

4.4 Legal & Regulatory Disclosure

c baji may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law — for example, in response to a court order, a lawful request from a government authority, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.

4.5 Business Transfers

In the event that c baji undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will endeavour to notify affected players of any such transfer and ensure that the receiving entity is bound by equivalent data protection obligations.

5. Data Retention & Storage

c baji retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide.

5.1 Storage Location

Your personal data is stored on secure servers. c baji employs physical, technical, and administrative safeguards to protect data storage infrastructure. Access to stored personal data is restricted to authorised personnel only, on a strict need-to-know basis.

5.2 Secure Deletion

When your personal data reaches the end of its applicable retention period, it is either securely and permanently deleted from our systems or anonymised in a manner that makes re-identification impossible. Anonymised data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

6. Your Rights & Data Controls

c baji respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, please contact our support team via live chat or in writing to [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

6.1 Right of Access

You have the right to request a copy of all personal data that c baji holds about you. We will provide this information in a structured, commonly used, machine-readable format (such as CSV or PDF) at no charge, subject to verification of your identity.

6.2 Right to Rectification

If any personal data held by c baji is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly through your account settings. For changes to identity data (name, date of birth, NID number), please contact support with appropriate supporting documentation.

6.3 Right to Erasure

You may request that c baji delete your personal data. Please note that this right is not absolute — we may be required to retain certain data for legal, regulatory, or fraud-prevention purposes as outlined in the retention schedule above. Where erasure is not possible in full, we will inform you of which data must be retained and the legal basis for its retention.

6.4 Right to Restrict Processing

In certain circumstances, you may request that c baji restrict the processing of your personal data — for example, while a data accuracy dispute is being resolved. During a restriction period, we will store your data but will not process it for any other purpose without your consent, unless required by law.

6.5 Right to Object to Marketing

You have an unconditional right to object to the use of your personal data for direct marketing purposes. Simply contact support or update your marketing preferences in your account settings and we will stop sending promotional communications immediately. Opting out of marketing does not affect essential transactional communications.

7. Security Measures

The security of your personal data is a top priority for c baji. We implement a multi-layered security architecture designed to protect your information against unauthorised access, loss, theft, alteration, or disclosure.

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit TLS 1.3, the current industry standard. The padlock icon in your browser address bar confirms an active encrypted connection.
• AES-256 Encryption at Rest: Sensitive stored data — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): c baji offers optional 2FA for account login, adding an additional layer of security beyond your password.
• Intrusion Detection Systems: Our infrastructure is monitored 24/7 by automated intrusion detection systems that flag and respond to anomalous access patterns in real time.
• Regular Security Audits: We commission periodic independent security assessments of our platform to identify and remediate vulnerabilities before they can be exploited.

7.2 Organisational Safeguards

Access to personal data within c baji is governed by a strict role-based access control (RBAC) policy. Only personnel who require access to personal data in order to perform their specific job function are granted access, and all access is logged and audited. All staff who handle personal data receive regular training on data protection obligations and security best practices.

7.3 Data Breach Response

In the event of a data security breach that is likely to result in a risk to the rights and freedoms of affected players, c baji will take immediate steps to contain the breach, assess its scope and severity, and notify affected players without undue delay. Players will be informed of the nature of the breach, the data affected, the likely consequences, and the steps c baji has taken or proposes to take in response.

8. Policy Updates & Contact

8.1 Updates to This Policy

c baji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our platform. The revised policy will be published at https://c-baji.im/privacy-policy with the updated "Last updated" date clearly indicated at the top of the page. For material changes that significantly affect how we handle your personal data, we will notify registered players via email or a prominent platform notice at least 14 days before the changes take effect.

8.2 Children's Privacy

c baji is strictly an adults-only platform for players aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on c baji, please contact us immediately.

8.3 Links to Third-Party Sites

The c baji platform may contain references to payment providers, game studios, or other third-party services. This Privacy Policy applies only to data processed by c baji directly. c baji accepts no responsibility for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services you use in connection with your c baji account.

8.4 Contact Our Data Protection Team

If you have any questions, concerns, or complaints about this Privacy Policy or about how c baji handles your personal data, please contact our data protection team:

• Email: [email protected] (subject line: "Privacy Query")
• Live Chat: Available 24/7 on the c baji platform with an average first-response time of 2–5 minutes
• Response Commitment: All privacy-related enquiries are acknowledged within 2 business days and resolved within 30 calendar days