cxbaje Privacy Policy

Information We Collect

cxbaje collects personal information from players through a number of channels, including directly from you when you register an account, make deposits or withdrawals, contact our support team, or interact with the Platform in any way. We also collect certain technical information automatically when you visit our website. Below is a detailed breakdown of the categories of data we collect.

Information You Provide Directly

When you register an account on cxbaje, you are required to provide us with certain personal information. This includes your full legal name, date of birth, residential address, email address, and mobile phone number. When completing KYC (Know Your Customer) verification, you may also be asked to submit copies of government-issued identification documents, proof of address, and payment method verification documents.

If you contact our customer support team, we will also collect the content of your communications, including any attachments or supporting documentation you choose to share with us.

Information Collected Automatically

When you access the cxbaje Platform, we automatically collect certain technical and behavioural data. This includes your IP address, device type and operating system, browser type and version, pages visited and time spent on each page, referring URLs, game session data (including bet amounts, game types, outcomes, and timestamps), and transaction history. This data is used to optimise the Platform experience, detect fraudulent activity, and ensure Platform stability.

Payment Information

When you make a deposit or withdrawal, we collect transaction data including the payment method used (for example, bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, or Dutch-Bangla Bank), the transaction reference number, the amount, the date and time of the transaction, and confirmation of transaction status. cxbaje does not store full card numbers or mobile banking PINs — payment method authentication is handled directly by your payment provider through secure, encrypted channels.

How We Use Your Data

cxbaje uses the personal data we collect for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those described in this Privacy Policy, and we do not sell your personal data to third parties for their own marketing purposes. Below is a complete account of the purposes for which we process your personal information.

Account Management & Service Delivery

We use your personal data to create and manage your player account, verify your identity and age, process your deposits and withdrawal requests, provide you with access to games and betting markets, and deliver customer support services. This is the primary use of your data and is essential for your use of the cxbaje Platform.

Security, Fraud Prevention & AML Compliance

We process your personal and financial data to detect and prevent fraudulent activity, money laundering, match-fixing, multi-accounting, and other forms of abuse or illegal activity on the Platform. This processing is both a legal obligation and a core part of our commitment to maintaining a safe and fair gaming environment for all players in Bangladesh.

Responsible Gaming & Player Protection

cxbaje uses your gaming data — including deposit volumes, session frequency, win/loss patterns, and betting behaviour — to identify signs of problem gambling and to fulfil our responsible gaming obligations. Where our responsible gaming monitoring flags a concern, we may contact you with information about available support tools or, in serious cases, apply account restrictions in accordance with our Responsible Gaming Policy.

Personalisation & Platform Improvement

We use technical and behavioural data to personalise your experience on cxbaje, including presenting you with relevant game recommendations and promotional offers that match your documented preferences. We also use aggregated, anonymised data to analyse Platform performance, identify areas for improvement, and develop new features.

Marketing Communications

With your consent, we may send you promotional emails or notifications about bonuses, seasonal offers (such as Eid or BPL tournament promotions), new game releases, and other cxbaje news. You can withdraw your consent to marketing communications at any time by contacting [email protected] or by updating your communication preferences in your account settings dashboard.

Legal Basis for Processing

cxbaje processes your personal data on the basis of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering your account — including account creation, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and financial record-keeping duties.
• Legitimate Interests: Processing carried out in furtherance of cxbaje's legitimate business interests, where those interests are not overridden by your rights — including fraud detection, Platform security, responsible gaming monitoring, and Platform analytics.
• Consent: Processing carried out with your specific, informed consent — principally for marketing communications. You may withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

Data Sharing & Third Parties

cxbaje does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, we do share your data with specific categories of trusted third parties where necessary to deliver the services described in this Privacy Policy. All third parties with whom we share your data are contractually required to maintain appropriate data security standards and to use your data only for the specific purposes for which it was shared.

Categories of Third-Party Recipients

• Payment Processors: We share transaction data with payment service providers including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, City Bank, BRAC Bank, and Dutch-Bangla Bank to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable financial regulations.
• Game Studio Partners: When you play a game supplied by a third-party studio — such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi — certain session and game data is shared with that studio in order to deliver the game and to maintain the integrity of game outcomes. Game studios do not receive your full identity data.
• Identity Verification Providers: We may use specialist KYC and identity verification services to process and validate your verification documents. These providers are bound by strict data handling agreements and are used solely for identity and age verification purposes.
• Analytics & Platform Technology Providers: We may use trusted technology providers to assist with Platform analytics, server infrastructure, and security monitoring. These providers operate as data processors under our instruction and do not use your data for their own purposes.
• Legal & Regulatory Authorities: We may be required by applicable law to disclose your personal data to relevant legal, regulatory, or law enforcement authorities. We will comply with such requirements where legally obligated to do so, and will notify you of any such disclosure where permitted.

Cookies & Tracking Technologies

cxbaje uses cookies and similar tracking technologies on its website to enhance your experience, maintain your session, and gather analytical data about how the Platform is used. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot be used to access other information on your device.

Types of Cookies We Use

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function correctly. For all other cookie categories, you may adjust your preferences through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or security settings. Please note that disabling functional or analytical cookies may affect certain features of the cxbaje Platform and may limit personalisation capabilities.

Data Retention

cxbaje retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with our anti-money laundering and record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of 5 years from the date of each transaction, in compliance with applicable financial regulations.
• Gaming and Betting Records: Retained for a minimum of 3 years following the date of each recorded game session or bet placement.
• Support and Communications Data: Retained for 2 years from the date of last correspondence, unless a longer period is required in connection with an unresolved dispute or legal matter.
• Technical and Log Data: Retained for up to 12 months from the date of collection, subject to earlier deletion where no longer required for security or analytical purposes.
• Marketing Consent Records: Retained for the duration of your marketing consent plus 3 years thereafter, as evidence of the consent given.

At the end of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our internal data deletion procedures. Where data is anonymised rather than deleted, the anonymised records may be retained indefinitely for statistical or research purposes, as they can no longer be used to identify you.

Your Privacy Rights

cxbaje respects your rights in relation to your personal data. Subject to applicable law, you hold the following rights with respect to the personal information we hold about you. To exercise any of these rights, please contact our team at [email protected] with your account username and a clear description of your request. We aim to respond to all data rights requests within 30 days.

Right to Access

You have the right to request a copy of the personal data cxbaje holds about you, together with information about how that data is being processed. We will provide this information in a clear, structured format.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update many of your account details directly through your account settings. For changes to identity documents or other sensitive data, please contact our support team.

Right to Erasure

In certain circumstances, you have the right to request that cxbaje delete the personal data we hold about you. This right is subject to our legal obligations to retain certain data for compliance purposes — for example, we are required to retain transaction records and identity verification data for a minimum period following account closure. Where we are unable to delete data due to legal obligations, we will inform you of the reason.

Right to Restrict Processing

You have the right to request that we restrict our processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and we are considering your objection.

Right to Object

Where we process your data on the basis of legitimate interests, you have the right to object to that processing at any time. You also have an absolute right to object to processing of your data for direct marketing purposes at any time, and we will act on such objection immediately.

Right to Data Portability

Where we process your data on the basis of consent or contractual necessity, and where processing is carried out by automated means, you have the right to receive a structured, machine-readable copy of your personal data for the purposes of transferring it to another service provider.

Data Security

cxbaje invests significantly in the security of the personal data we hold. We have implemented a comprehensive set of technical and organisational security measures designed to protect your personal information from unauthorised access, accidental loss, disclosure, destruction, or alteration.

Technical Security Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the cxbaje Platform is protected by industry-standard 256-bit SSL encryption. You can verify this by checking for the padlock symbol in your browser's address bar when visiting cxbaje.com.
• Encrypted Data Storage: Sensitive personal data stored on our servers — including identity documents and financial information — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data held by cxbaje is restricted to authorised staff members who have a genuine operational need to access that data. All staff with data access are subject to confidentiality obligations and undergo regular data protection training.
• Fraud Detection Systems: cxbaje employs automated fraud detection and security monitoring systems that continuously analyse Platform activity for signs of unauthorised access, account takeover attempts, and other security threats.
• Regular Security Audits: Our Platform and security infrastructure are subject to regular internal and third-party security reviews to identify and address potential vulnerabilities.

What You Can Do to Stay Secure

While we take every reasonable step to protect your data on our side, account security is a shared responsibility. We strongly recommend that you use a unique, strong password for your cxbaje account that you do not use on any other website; that you never share your login credentials with any other person; and that you log out of your account when using a shared or public device. If you suspect that your account has been compromised, please contact us immediately at [email protected].

Minors & Age Restriction

cxbaje takes its obligations with respect to the protection of minors very seriously. As part of our registration and KYC processes, we take active steps to verify the age of all players before they are permitted to deposit funds or access real-money games. We use a combination of self-declaration at registration, automated age verification checks, and manual document review to enforce our 18+ age restriction.

If cxbaje becomes aware that personal data has been collected from a person under the age of 18 — whether through our own monitoring, a report from a third party, or a parental/guardian complaint — we will take the following steps immediately: the relevant account will be suspended pending investigation; all personal data associated with the account will be reviewed; any deposits will be returned to the payment source; all gameplay and winnings will be voided; and the personal data of the minor will be deleted from our systems as quickly as applicable legal obligations permit.

If you are a parent or guardian and you believe that a minor in your care has registered an account on cxbaje, please contact us immediately at [email protected]. We will prioritise your report and investigate without delay.

Policy Updates

cxbaje reserves the right to update or amend this Privacy Policy at any time. We will notify registered players of any material changes to this Privacy Policy by sending an email notification to the address registered on their account and by displaying a prominent notice on the cxbaje Platform for a minimum of 7 days prior to the changes taking effect.

The effective date shown at the top of this Privacy Policy will always reflect the date on which the most recent version came into force. We recommend that you review this page periodically to remain informed about how we collect, use, and protect your personal data. Your continued use of the cxbaje Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

Where an update to this Privacy Policy requires your fresh consent — for example, if we introduce a new category of data processing for which we rely on consent as the legal basis — we will seek that consent from you directly before the new processing begins.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to cxbaje's handling of your personal data, please contact our data protection team. We are committed to addressing all privacy-related enquiries promptly, professionally, and in plain English.

You may reach us at:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours during Bangladesh Standard Time (BST, UTC+6) business hours , and to provide a full response within 30 days.
• Data Rights Requests: Please include your account username and a copy of your identity document when submitting a formal data rights request, so that we can verify your identity before processing the request.