cbje Privacy Policy

1. Information We Collect

cbje collects personal data only to the extent necessary to provide you with a safe, functional, and compliant online betting and casino experience. We do not collect personal information speculatively or beyond what is required for the purposes described in this Privacy Policy. The categories of information we collect are set out below.

1.1 Registration Data

When you create a cbje account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 18 years or older)
• Email address
• Mobile phone number
• Residential address (city, district, and postal code — Bangladesh)
• Preferred username and encrypted password

This information forms the core of your cbje account record and is required to complete registration. Without this data, we cannot create or maintain an account for you.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request copies of the following documents:

• Bangladesh National Identity Card (NID) or passport
• Proof of address (utility bill, bank statement, or government correspondence dated within 90 days)
• Proof of ownership of the payment method used (e.g., screenshot showing your name on the bKash or Nagad account)
• Selfie photograph holding your ID document, if enhanced verification is required

KYC documents are stored securely and accessed only by authorised cbje compliance staff. They are used solely to verify your identity and are not shared with third parties except as required by anti-money laundering obligations.

1.3 Financial Transaction Data

We record all financial transactions associated with your cbje account, including:

• Deposit amounts, dates, and payment method references (e.g., bKash transaction IDs, bank reference numbers)
• Withdrawal requests, amounts, destination account details, and processing status
• Bonus credits, wagering activity, and promotional redemptions
• Account balance history

cbje does not store full card numbers. Card payments processed via Visa and Mastercard are handled by PCI-DSS compliant payment processors who transmit only tokenised references to cbje.

1.4 Gameplay and Betting Data

We maintain detailed records of your betting and gaming activity on the cbje platform, including game sessions played, bet amounts, outcomes, sports markets wagered on, and any use of responsible gaming tools such as deposit limits or self-exclusion requests. This data is used to manage your account, resolve disputes, detect problem gambling patterns, and fulfil regulatory obligations.

1.5 Technical and Device Data

When you access cbje.app, our servers automatically collect certain technical information:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Date and time of access, pages visited, session duration
• Referring URL (if you arrived from another website)

Technical data is used primarily for security monitoring, fraud prevention, platform performance optimisation, and compliance checks (e.g., verifying that your access originates from Bangladesh).

1.6 Communications Data

If you contact cbje support via live chat, email, or any other communication channel, we retain a record of that correspondence, including the content of messages, timestamps, and any attachments. This data is used to resolve your enquiry and to train and monitor our support team for quality assurance purposes.

2. How We Use Your Data

cbje processes your personal data for clearly defined purposes. We do not use your data for purposes that are incompatible with those for which it was originally collected. The table below summarises our primary processing activities and the lawful basis for each.

2.1 Marketing Communications

cbje will only send you promotional emails or SMS messages if you have actively opted in to marketing communications during registration or via your account settings. You may withdraw your consent to marketing communications at any time by updating your account preferences or by contacting [email protected]. Withdrawing marketing consent does not affect your ability to use the cbje platform or receive service-critical notifications (such as deposit confirmations and withdrawal status updates).

2.2 Automated Decision-Making

cbje uses automated systems to assist with fraud detection, responsible gaming monitoring, and bonus abuse prevention. These systems may flag your account for review based on patterns in your activity data. Where an automated process results in a consequential decision — such as account suspension — you have the right to request human review of that decision by contacting our support team.

3. Cookies & Tracking Technologies

cbje.app uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by our web server when you visit the site. Cookies do not contain executable code and cannot carry viruses or malware.

3.1 Types of Cookies We Use

3.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to block all cookies, accept only first-party cookies, or clear existing cookies on demand. Please note that disabling strictly necessary cookies will prevent you from logging in to your cbje account and using core platform features. Disabling functional cookies may cause your preferences to reset between sessions.

4. Data Sharing & Third Parties

cbje does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only with parties who are contractually required to handle your data in accordance with standards equivalent to this Privacy Policy.

4.1 Payment Processors

To process your deposits and withdrawals, cbje shares the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card scheme operators (Visa, Mastercard). These partners receive only the transaction data required to execute the specific payment instruction and are not granted access to your broader cbje account data.

4.2 Game Providers

Some games available on the cbje platform are provided by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by a third-party studio, your gameplay session data (bet amounts, game results, session duration) is processed jointly by cbje and the game provider for the purpose of delivering the game, resolving disputes, and calculating payouts. Game providers do not receive your full registration details or payment account information.

4.3 Legal and Regulatory Authorities

cbje may be required by law or by a lawful authority to disclose personal data, including to:

• Law enforcement agencies investigating fraud, money laundering, or criminal activity
• Financial intelligence units (FIUs) as part of anti-money laundering reporting obligations
• Courts or tribunals in connection with legal proceedings
• Any regulatory or supervisory authority with jurisdiction over cbje's operations

Where legally permitted, cbje will notify you of any such disclosure. Where notification is legally prohibited (for example, where disclosure is part of a tipping-off restriction), cbje will comply with the legal prohibition.

4.4 Service Providers

cbje works with a small number of trusted service providers to operate the platform — for example, cloud hosting providers, email delivery services, and KYC verification technology providers. These providers act as data processors on cbje's behalf and are permitted to use your data only as instructed by cbje. They are contractually prohibited from using your data for their own purposes.

5. Data Security Measures

cbje takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, loss, destruction, or alteration.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data in transit between your browser and cbje servers is encrypted using TLS 1.2 or higher.
• Encrypted Data Storage: Sensitive fields in our database — including passwords (hashed with bcrypt), KYC document references, and payment tokens — are encrypted at rest.
• Access Controls: cbje staff access to personal data is governed by role-based access controls. Only staff members with a legitimate operational need are granted access to any given category of player data.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity. Automated intrusion detection systems alert our security team to suspicious patterns in real time.
• Penetration Testing: cbje engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the cbje.app platform.

5.2 Organisational Safeguards

• All cbje staff with access to personal data receive data protection training as part of their onboarding.
• Data access and processing activities are logged and subject to regular internal audit.
• cbje maintains a documented incident response procedure. In the event of a data breach affecting player data, cbje will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

5.3 Your Role in Security

While cbje implements strong security controls on its end, account security also depends on your own practices. You should use a strong, unique password for your cbje account, never share your login credentials, and contact support immediately if you suspect unauthorised access. cbje will never request your password through any channel.

6. Data Retention

cbje retains your personal data for only as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The table below provides an overview of our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for aggregate analytical purposes.

7. Your Privacy Rights

As a cbje player, you have a number of rights in relation to the personal data we hold about you. cbje is committed to facilitating the exercise of these rights promptly and without unnecessary barriers.

7.1 Right of Access

You have the right to request a copy of the personal data cbje holds about you. This is commonly referred to as a Subject Access Request (SAR). We will respond to verified SARs within 30 days of receipt. The response will include the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.

7.2 Right to Rectification

If any personal data cbje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account data (email address, phone number, residential address), you may update this directly within your account settings. For corrections to identity documents or date of birth, contact our support team with supporting documentation.

7.3 Right to Erasure

You may request that cbje delete the personal data it holds about you. This right is not absolute — cbje is required to retain certain categories of data for legal and regulatory reasons (see Section 6 above). Where erasure is not possible in full, cbje will inform you of the specific legal basis for retention and will delete all data that is not subject to a mandatory retention obligation.

7.4 Right to Restrict Processing

In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you have the right to request that cbje restrict the processing of your personal data. During a restriction, cbje may continue to store the data but will not use it for any other purpose.

7.5 Right to Data Portability

Where cbje processes your data on the basis of your consent or for the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format. This right covers data you have actively provided to cbje, such as your registration details and account preferences.

7.6 Right to Object

You have the right to object to cbje processing your personal data for direct marketing purposes at any time, with no requirement to provide justification. You also have the right to object to processing carried out on the basis of cbje's legitimate interests, though in that case cbje may continue processing if it can demonstrate compelling legitimate grounds that override your interests.

7.7 How to Exercise Your Rights

To exercise any of the rights described above, contact the cbje privacy team by writing to [email protected] with the subject line "Privacy Rights Request". Please include your registered email address and a description of the right you wish to exercise. We may request verification of your identity before processing your request. cbje will respond to all valid requests within 30 days. Where a request is complex or we receive a high volume of requests simultaneously, we may extend this period by a further 30 days, in which case we will notify you of the extension.

8. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how cbje handles your personal data, please contact us using the details below.

8.1 Privacy Contact

All privacy-related enquiries should be directed to the cbje privacy team:

• Email: [email protected]
• Subject Line: "Privacy Enquiry" or "Privacy Rights Request"
• Response Time: Within 30 days of receipt of a verified request
• Live Chat: Available 24/7 via cbje.app for general privacy questions
• Support Hours: Peak hours 10:00am – 11:00pm BST (UTC+6)

8.2 Complaints

If you are not satisfied with cbje's response to a privacy concern or believe that cbje is processing your personal data in a manner inconsistent with this Privacy Policy, you are entitled to raise a formal complaint. cbje takes all privacy complaints seriously and will conduct a thorough internal review of any complaint received.

To file a formal complaint, email [email protected] with the subject line "Formal Privacy Complaint", providing a detailed description of your concern and any relevant supporting information. cbje will acknowledge your complaint within 5 business days and provide a full written response within 30 days.

8.3 Policy Updates

cbje reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify active account holders by email and display a prominent notice on cbje.app. The "Effective Date" at the top of this page will be updated to reflect the date of the most recent revision. Continued use of the cbje platform after a policy update constitutes acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how cbje protects your data.