At cabaji, protecting the personal data of every player in Bangladesh is a core operational commitment, not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and safeguard it, and what rights you hold as a data subject.
All data transmitted between your device and the cabaji platform is protected by industry-standard TLS/SSL encryption. This ensures that your cabaji login credentials, payment details, and personal information cannot be intercepted in transit.
Personal data collected during cabaji account registration and KYC verification is stored on access-controlled servers with layered authentication. Only authorised cabaji personnel with a verified operational need may access identifiable player records.
cabaji does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing networks. Your information is used exclusively to operate your Account, process payments, and comply with internal compliance obligations.
You have the right to access, correct, and request deletion of your personal data held by cabaji at any time, subject to retention obligations. Requests can be submitted via live chat after cabaji login or by email to the support team.
cabaji uses only essential and analytics cookies necessary for platform operation. We do not deploy third-party advertising cookies or tracking pixels that follow you across other websites. Our cookie use is limited to session management, fraud prevention, and aggregate traffic analysis.
cabaji retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable internal compliance standards. Account data is typically retained for a defined period following Account closure, after which it is securely deleted or anonymised.
This Privacy Policy applies to all players who access the cabaji platform at cabaji.app, whether by desktop browser or mobile device, from any location in Bangladesh. By completing the cabaji registration process, completing cabaji login, or otherwise using the platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.
cabaji ("we", "us", or "our") operates the online casino and sports betting platform accessible at cabaji.app (the "Platform"). As a platform serving players across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — we understand that our players place significant trust in us when they share personal information to create an Account, deposit funds, and participate in gambling activities.
This Privacy Policy describes the categories of personal data we collect from players, the purposes for which that data is processed, the legal basis for each processing activity, the third parties with whom data may be shared, the retention periods applied, and the rights available to you as an individual data subject. It should be read in conjunction with the Terms & Conditions and the Responsible Gaming Policy.
cabaji is committed to maintaining the accuracy, confidentiality, and security of your personal information. We process personal data using SSL-encrypted channels and apply access controls that restrict exposure of player data to only those operational personnel who require it to perform their duties. We do not sell or lease personal data to third-party marketers, and we do not engage in automated profiling for the purpose of making legally significant decisions about individuals without human oversight.
cabaji collects the following categories of personal data in connection with the operation of the Platform:
Minimum Necessary: cabaji applies a data minimisation principle. We collect only the personal data that is genuinely necessary for the specific purpose at hand. We do not collect national tax identification numbers, social media account credentials, biometric data, or health information unless directly and unavoidably relevant to a specific compliance obligation.
cabaji collects personal data through the following channels:
cabaji processes personal data on the following legal bases, depending on the specific processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and identity verification (KYC) | Performance of contract; compliance with internal AML/KYC standards |
| Processing deposits and withdrawals via bKash, Nagad, and banking partners | Performance of contract |
| Delivering live chat and email customer support | Performance of contract; legitimate operational interest |
| Responsible gaming monitoring and limit enforcement | Legitimate interest in player welfare; compliance with responsible gaming policy |
| Anti-money laundering (AML) transaction monitoring | Compliance with internal AML framework; legitimate security interest |
| Sending account-related security alerts and transactional notifications | Performance of contract; legitimate interest |
| Sending promotional communications (bonuses, offers, event promotions) | Consent (you may opt out at any time via Account settings or by contacting support) |
| First-party analytics for Platform improvement | Legitimate interest in improving service quality |
| Fraud detection and prevention | Legitimate interest in platform security; protection of other players |
The personal data collected by cabaji is used exclusively for the following purposes:
cabaji does not sell, rent, or trade personal data to third parties. We share personal data only in the following limited and controlled circumstances:
When you launch a game supplied by a third-party provider (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, or Spribe), the minimum session data required to authenticate your game session — typically an anonymised session token rather than directly identifiable personal information — is passed to the provider's servers. These providers are contractually prohibited from using this data for any purpose beyond delivering the game session.
To process deposit and withdrawal transactions, cabaji shares the payment reference details necessary to execute the transaction with the relevant Payment Method provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or Islami Bank). This is a standard and unavoidable component of the payment processing workflow. These providers operate under their own privacy policies and are independently responsible for data they hold as part of their own records.
Where cabaji engages a third-party identity verification service to assist in authenticating KYC documents submitted by players, copies of identity documents and the verification result are processed by that partner under a data processing agreement that restricts use to the verification purpose only.
cabaji may disclose personal data to relevant authorities or regulatory bodies where required to do so by a valid legal obligation, court order, or as part of a bona fide anti-money laundering investigation. In all such cases, cabaji will disclose only the minimum data required to satisfy the specific legal request.
In the event that cabaji undergoes a business restructuring, merger, or acquisition, personal data held on registered players may be transferred to the successor entity as part of the business assets. Players will be notified of any such transfer via a prominent Platform notice and will retain the right to request Account closure if they do not consent to the transfer of their data to the new operator.
No Cross-Border Marketing Transfers: cabaji does not transfer personal data to international data brokers, cross-border advertising networks, or affiliate marketing platforms. Any promotional affiliate tracking used by cabaji is limited to first-party attribution cookies that track which promotional link directed a player to the Platform, without sharing identifiable player data with the referring affiliate.
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store limited information about your preferences and session state. cabaji uses cookies solely for the operational and analytical purposes described below.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session Cookies | Maintain your authenticated cabaji login state across page navigation during a single browser session. Deleted automatically when you close your browser. | Session only |
| Security Cookies | Support CSRF (cross-site request forgery) protection, rate-limiting, and fraud detection mechanisms that protect your Account from unauthorised access. | Session / up to 30 days |
| Preference Cookies | Store your Platform display preferences (e.g., sports category view, language confirmation) to avoid repeating setup steps on subsequent visits. | Up to 12 months |
| Analytics Cookies | First-party aggregated traffic analytics used to understand page visit patterns, feature usage, and technical errors. Data is anonymised before analysis and is not linked to your Account identity. | Up to 24 months |
cabaji does not deploy third-party advertising cookies, cross-site tracking pixels, social media retargeting tags, or any tracking technology designed to follow your browsing activity on websites other than cabaji.app. We do not integrate Facebook Pixel, Google Ads remarketing tags, or any equivalent cross-platform advertising technology.
You may configure your browser to block or delete cookies at any time. Note that disabling session or security cookies will prevent you from completing cabaji login and accessing Account features. Disabling preference or analytics cookies will have no impact on your ability to use the Platform but may result in a less personalised experience.
cabaji retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity and KYC documents | 5 years from Account closure | AML compliance; fraud investigation capability |
| Financial transaction records | 5 years from transaction date | Financial record-keeping; dispute resolution |
| Account profile data | 2 years from Account closure | Dispute resolution; responsible gaming monitoring |
| Support communications | 3 years from last interaction | Complaint handling; service quality review |
| Gameplay and betting records | 3 years from last activity | Dispute resolution; responsible gaming pattern analysis |
| Technical / IP logs | 12 months | Fraud detection; security incident investigation |
| Analytics data (anonymised) | 24 months (anonymised only) | Platform improvement; traffic trend analysis |
Where a legal obligation, regulatory inquiry, or active dispute requires data to be preserved beyond these standard periods, cabaji will retain the relevant data until that obligation or proceeding is fully resolved, at which point standard deletion procedures will apply.
As a registered cabaji player in Bangladesh, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the cabaji support team via live chat after completing cabaji login, or by email at support cabaji.app.
cabaji will acknowledge all data rights requests within 5 business days (Bangladesh Standard Time, UTC+6) and aim to complete the request within 30 calendar days. For complex or high-volume requests, this period may be extended by a further 30 days with prior notice to you. Identity verification may be required before a request is fulfilled to prevent unauthorised access to your data.
cabaji implements a multi-layered technical and organisational security framework to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures in place include:
While cabaji takes robust technical precautions, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your data secure by maintaining the confidentiality of your cabaji login password, using a strong and unique password, and alerting the support team immediately if you suspect unauthorised Account access.
cabaji operates a strict 18+ age restriction. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 18. Age verification is a mandatory step in the cabaji KYC process, and Accounts found to belong to individuals under 18 are closed immediately, with the matter potentially referred to relevant authorities.
If a parent or guardian becomes aware that a minor has created a cabaji Account or submitted personal data to the Platform without authorisation, they should contact the cabaji support team immediately via live chat or email. All data associated with a confirmed minor's Account will be deleted promptly following verification of the report.
18+ Strictly Enforced: cabaji does not accept registrations from individuals under 18 years of age. All players must be at least 18 years old to access any part of the Platform, including free-play or demo game modes where available.
The cabaji Platform may contain informational references to third-party services including Payment Method providers (bKash, Nagad, Rocket, Upay), game providers, or sports data sources. These references do not constitute active hyperlinks to external websites from the Platform's core navigation, and cabaji does not embed third-party advertising or affiliate links within the Platform interface.
Where any external service is referenced, please be aware that cabaji has no control over the privacy practices, data collection methods, or security standards of those third-party organisations. Players who independently visit third-party payment provider websites or game developer sites do so under those organisations' own privacy policies, for which cabaji bears no responsibility.
cabaji reserves the right to update this Privacy Policy at any time to reflect changes in operational practices, legal requirements, or Platform features. When material changes are made, registered players will be notified via a prominent notice displayed on the Platform upon next cabaji login, and where email addresses are verified, by direct email notification.
The updated Privacy Policy will display the revised "Last Updated" date at the top of the document. Continued use of the Platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept any amendment, you may request Account closure in accordance with the Terms & Conditions.
We encourage all registered players to review this Privacy Policy periodically, particularly following any Platform-wide notification of an update, to remain informed about how cabaji manages your personal data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way cabaji handles your personal data, please contact the support team through one of the following channels:
cabaji treats all privacy complaints seriously. Upon receipt of a complaint, a designated member of the support team will acknowledge it within 2 business days and provide a substantive response within 15 calendar days. Where a complaint cannot be resolved within 15 days due to complexity, cabaji will provide an interim update explaining the delay and the expected resolution timeline.
Our Commitment: cabaji is committed to resolving all privacy-related concerns fairly and transparently. If after engaging with the support team you remain unsatisfied with the outcome, you retain the right to seek independent redress through any applicable dispute resolution mechanism available in your jurisdiction. cabaji will cooperate fully with any such process and provide all documentation reasonably requested.
Your data is protected. Now enjoy cricket betting, live casino games, slots, and more — all secured with SSL encryption and processed via bKash and Nagad. 18+ only. Please gamble responsibly.