cbagee Privacy Policy

01 Data Controller Information

For the purposes of this Privacy Policy, cbagee acts as the data controller responsible for the personal data collected from players who access and use the cbagee online casino and sports betting platform at cbagee.com. As data controller, cbagee determines the purposes for which and the means by which personal data is processed.

All questions, requests, or complaints relating to the processing of your personal data should be addressed to the cbagee Data Privacy team using the contact details provided in Section 11 of this policy. We are committed to responding to all privacy-related enquiries within 30 calendar days of receipt.

02 Personal Data We Collect

cbagee collects personal data from you in three primary ways: data you provide directly when registering or using the platform, data generated automatically through your use of the platform, and data obtained from trusted third-party sources for identity verification purposes. The categories of personal data we collect are detailed below.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, gender, and copies of government-issued identity documents (National Identity Card, passport, or birth certificate) submitted during account verification.
• Contact data: Email address, mobile phone number, and residential address (city and district level, Bangladesh).
• Account credentials: Username and encrypted password. We never store passwords in plain text.
• Payment data: Mobile money account numbers (bKash, Nagad, Rocket, Upay), bank account details for bank transfer requests, and partial card numbers for Visa/Mastercard deposits. Full card numbers and payment PINs are handled exclusively by our payment processing partners and are not stored on cbagee servers.
• Support communications: The content of any messages, emails, or chat transcripts exchanged with the cbagee support team.
• Responsible gaming data: Any deposit limits, session limits, cooling-off periods, or self-exclusion requests you submit through the platform.

2.2 Data Collected Automatically

• Usage data: Pages visited, games played, bets placed, session duration, clicks, and navigation paths within the cbagee platform.
• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Transaction logs: Records of all deposits, withdrawals, bonus credits, wager placements, and game outcomes associated with your account.
• Geolocation data: Approximate location derived from your IP address, used to verify geographic eligibility and to detect anomalous access patterns that may indicate account compromise.
• Cookie and tracking data: Session identifiers, preference cookies, and analytical tracking data as described further in Section 5.

2.3 Data from Third-Party Sources

• Identity verification providers: Confirmation of identity document authenticity and age verification results from specialist third-party KYC (Know Your Customer) service providers.
• Fraud and risk data: Risk scores, device fingerprinting data, and fraud signals from third-party fraud prevention services used to protect both players and the platform from fraudulent activity.
• Payment provider data: Transaction status confirmations and basic account verification results from bKash, Nagad, Rocket, Upay, and banking partners.

03 How We Use Your Data

cbagee processes your personal data only where a lawful basis exists for doing so. The primary lawful bases we rely on are: performance of a contract (operating your account), compliance with legal obligations (KYC, anti-money laundering), legitimate interests (fraud prevention, platform security, service improvement), and your consent (marketing communications). Below is a detailed breakdown of the purposes for which we use your data:

• Account creation and management: To register your account, verify your identity, manage your account settings, and communicate essential account-related information.
• Payment processing: To process deposits, confirm receipt of funds, and execute withdrawal requests to your verified payment method.
• Identity and age verification: To comply with our legal obligations to verify that all players are aged 18 or above and to prevent the use of false identities on the platform.
• Anti-money laundering (AML) compliance: To monitor account activity for patterns consistent with money laundering, terrorist financing, or other financial crime, and to report suspicious activity where legally required.
• Fraud prevention and platform security: To detect, investigate, and prevent unauthorised account access, payment fraud, multi-accounting, bonus abuse, and other platform integrity violations.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account, payment, and gaming matters.
• Responsible gaming: To administer and enforce deposit limits, session limits, cooling-off periods, and self-exclusion requests you have set, and to identify player behaviour patterns that may indicate problem gambling.
• Platform personalisation: To tailor game recommendations, promotional offers, and platform content to your demonstrated preferences and activity history, where you have not opted out of personalisation.
• Marketing communications: To send promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and special events — only where you have given consent or where we have a legitimate interest in notifying you of directly relevant updates. You may opt out at any time.
• Analytics and platform improvement: To analyse aggregated usage data in order to improve platform performance, user experience, game selection, and customer support quality.
• Legal compliance and dispute resolution: To retain records as required by applicable law and to respond to legal claims, regulatory enquiries, or court orders.

04 Data Sharing & Third Parties

cbagee does not sell, rent, or trade your personal information to any third party for commercial purposes. We may share your personal data with the following categories of trusted third parties, strictly as required to operate the platform and meet our legal obligations:

4.1 Service Providers and Data Processors

We work with carefully selected third-party service providers who process personal data on our behalf under strict contractual obligations that prohibit them from using the data for any purpose other than the service they are contracted to provide. These include:

• Identity verification (KYC) providers: To verify the authenticity of identity documents and confirm player age.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing partners — to execute deposit and withdrawal transactions.
• Fraud prevention services: Third-party risk and fraud analytics platforms used to detect suspicious account activity and prevent financial crime.
• Game providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive anonymised session data necessary to deliver their games within the cbagee platform.
• Cloud hosting and infrastructure providers: Secure data centres and cloud infrastructure providers used to host cbagee's platform and databases.
• Customer support platforms: Live chat and helpdesk software providers used to manage and respond to customer support tickets.
• Email and SMS communication services: Third-party messaging platforms used to deliver transactional and marketing communications.

4.2 Legal and Regulatory Disclosures

cbagee may disclose your personal data to competent government authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of cbagee, its players, or the public. Such disclosures will always be made in accordance with applicable law and will be limited to the minimum data necessary.

4.3 Business Transfers

In the event that cbagee undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, cbagee will notify affected players in advance of any transfer and will ensure the acquiring entity is bound by privacy obligations no less protective than those set out in this policy.

05 Cookies & Tracking Technologies

cbagee uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant content. Cookies are small text files stored on your device by your browser when you visit the cbagee website.

5.1 Categories of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the cbagee platform to function. They enable core features such as user authentication, session management, security protections (CSRF tokens), and load balancing. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming configuration — so you do not need to re-enter them on each visit.
• Analytical cookies: These cookies allow cbagee to understand how players use the platform — which pages are visited most frequently, how long players spend on different sections, and where errors occur. This data is used in aggregated, anonymised form to improve platform performance and user experience. cbagee uses privacy-respecting analytics tools for this purpose.
• Marketing and tracking cookies: Where you have given consent, cbagee may use cookies to track the effectiveness of promotional campaigns and to deliver personalised promotional content within the platform. These cookies are not used to track you across third-party websites.

5.2 Managing Your Cookie Preferences

You can manage or withdraw your consent to non-essential cookies at any time through the cookie preference centre accessible from the platform settings. You may also control cookies directly through your browser settings — most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use core cbagee platform features, including login and payment processing.

06 Data Retention Periods

cbagee retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of 5 years following account closure, to meet anti-money laundering and financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification, in accordance with KYC and AML regulatory requirements.
• Transaction records: All deposit, withdrawal, and wagering records are retained for a minimum of 5 years from the date of the transaction.
• Customer support records: Support tickets, chat transcripts, and email correspondence are retained for 3 years from the date of the last interaction, unless the matter relates to a dispute or legal claim, in which case records are retained until the matter is fully resolved.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the life of your account plus 3 years, to demonstrate compliance with applicable communications regulations.
• Analytical and usage data: Anonymised or aggregated analytical data may be retained indefinitely, as it no longer identifies any individual player.

When personal data is no longer required for any lawful purpose, cbagee will securely delete or anonymise it using industry-standard data destruction methods. Where deletion is not immediately technically feasible (for example, in encrypted backup archives), the data will be isolated and protected from further active processing until it can be securely deleted.

07 Data Security Measures

cbagee takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect against unauthorised access, disclosure, alteration, or destruction of player data. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and cbagee servers is encrypted using TLS 1.2 or higher, ensuring that data in transit cannot be intercepted or read by third parties.
• Encrypted data storage: Sensitive personal data fields — including identity document data, password hashes, and payment account references — are encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data within cbagee's internal systems is restricted on a strict need-to-know basis. All staff with data access undergo background screening and receive regular data protection training.
• Two-factor authentication (2FA): cbagee offers and encourages the use of two-factor authentication for all player accounts to provide an additional layer of protection against unauthorised login attempts.
• Fraud monitoring: Automated systems continuously monitor account activity for anomalous patterns that may indicate an account compromise, fraud attempt, or policy violation. Suspicious activity triggers an immediate review process.
• Penetration testing: cbagee's platform undergoes regular security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities.
• Incident response: cbagee maintains a documented data breach response procedure. In the event of a data breach that poses a risk to player rights and freedoms, affected players will be notified promptly with clear information about the nature of the breach and recommended protective actions.

08 Your Privacy Rights

As a cbagee player, you hold a number of rights with respect to the personal data we hold about you. These rights are outlined in the table below. To exercise any of these rights, please contact the cbagee Data Privacy team using the details in Section 11. We will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension.

09 Children's Privacy

The cbagee platform is strictly for adults aged 18 and above. cbagee does not knowingly collect personal data from any person under 18 years of age. If we become aware that personal data has been collected from a minor, the associated account will be immediately suspended, the data will be securely deleted, and any deposited funds will be returned to the source payment method following an investigation.

Parents and guardians who believe a minor may have registered a cbagee account using false age information are urged to contact us immediately at [email protected]. cbagee takes the protection of minors extremely seriously and will act promptly on all such reports. We also encourage parents and guardians to use parental control software to restrict minors' access to gambling websites.

10 Changes to This Policy

cbagee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or regulatory requirements. When material changes are made, cbagee will notify registered players via email to their registered address and/or via a prominent in-platform notification at least 14 days before the changes take effect.

The updated Privacy Policy will be published on this page with a revised effective date at the top of the document. We encourage all players to review this policy periodically to stay informed about how their personal data is being handled. If you continue to use the cbagee platform after the revised policy takes effect, you are deemed to have accepted the updated terms.

If any amendment materially reduces your privacy rights or expands the ways in which cbagee uses your personal data in a manner you do not agree with, you have the right to close your account before the changes take effect. Contact support at [email protected] to initiate account closure and arrange the return of any verified account balance.

11 Privacy Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cbagee, please contact our Data Privacy team using the details below. All privacy-related correspondence should be submitted in English for efficient processing:

• Email: [email protected] — please include "Privacy Request" in the subject line
• Live Chat: Available 24/7 directly within the cbagee platform — reference "data privacy" when initiating the chat
• WhatsApp: Available during Bangladesh Standard Time (BST, UTC+6) business hours
• Response Time: We aim to acknowledge all privacy requests within 5 business days and to fully respond within 30 calendar days