cbage Privacy Policy

1. Data We Collect

When you interact with the cbage platform — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing — we collect certain categories of personal data. The categories and specific data points we collect depend on the nature of your interaction with us. The full list is set out in the table below.

1.1 Data You Provide Directly

The majority of personal data we hold is provided directly by you. This includes the information you enter during account registration, the documents you submit for identity verification, the payment details you provide when making a deposit, and any messages you send to our support team. You are not legally obligated to provide this data, but without it, we cannot create or maintain your account, process transactions, or provide our services.

1.2 Data Collected Automatically

When you access the cbage platform, certain technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies. This data helps us maintain platform security, detect fraudulent activity, diagnose technical issues, and understand how our services are used so that we can improve them. See Section 4 for full details on our use of cookies and tracking technologies.

1.3 Data From Third Parties

In limited circumstances, cbage may receive personal data about you from third parties. This includes fraud prevention agencies and identity verification providers that we engage as part of the KYC process, payment processors that relay transaction confirmation data, and analytics providers that aggregate anonymised platform usage statistics. Any data received from third parties is handled in accordance with this Privacy Policy.

2. How We Use Your Data

cbage uses your personal data for specific, documented purposes only. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The table below sets out each processing purpose, the data categories involved, and the legal basis on which we rely.

2.1 Responsible Gaming Use of Data

cbage is obligated and committed to using certain usage and financial data to monitor player behaviour for signs of problem gambling. This includes tracking deposit frequency, session duration, loss patterns, and the use of responsible gaming tools. Where our monitoring identifies a player who may be at risk, cbage may proactively reach out to offer support resources, suggest account controls, or in serious cases, impose temporary account restrictions. This processing is carried out in the player's genuine interest and is a non-negotiable component of our responsible gaming obligations.

2.2 Marketing Communications

With your explicit consent, cbage may send you promotional communications about new games, seasonal offers (such as Eid bonuses or BPL season promotions), and platform updates. You may withdraw consent at any time by clicking the unsubscribe link in any marketing email, by updating your notification preferences in your account settings, or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

2.3 Automated Decision-Making

cbage uses automated systems to flag accounts for fraud review, to apply responsible gaming interventions, and to customise in-platform promotions. Where automated processing produces a decision that significantly affects you (for example, a temporary account restriction), you have the right to request human review of that decision by contacting our support team. We will review such requests within a reasonable timeframe and provide a written outcome.

3. Data Sharing & Disclosure

cbage does not sell your personal data. We share your data only in the limited circumstances described in this section, and only with parties that are bound by appropriate data protection obligations.

3.1 Service Providers

We engage third-party service providers to support the operation of the cbage platform. These providers act as data processors under our instruction and are contractually prohibited from using your data for their own purposes. Current categories of service provider include:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, for the purpose of processing deposits and withdrawals.
• Identity verification providers — third-party KYC platforms used to verify government-issued identification documents submitted during account verification.
• Fraud prevention agencies — specialist services that help cbage detect and prevent fraudulent account activity, money laundering, and bonus abuse.
• Cloud infrastructure providers — hosting and database services that store platform data in secure, encrypted data centres.
• Customer support tooling — helpdesk software used to manage and record support interactions between cbage and its players.
• Analytics providers — platforms that process anonymised usage data to help us understand platform performance and improve the user experience.

3.2 Game Providers

Certain technical data (such as session identifiers and game outcome records) is shared with third-party certified game studios — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Spribe, and Microgaming — to the extent necessary to deliver their games and resolve any disputes about game outcomes. These studios operate under separate privacy policies governed by their own regulatory frameworks.

3.3 Legal and Regulatory Disclosure

cbage may disclose your personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, by a valid legal order, or where we reasonably believe disclosure is necessary to prevent financial crime, protect the safety of our players, or defend a legal claim. We will notify you of such a disclosure where we are legally permitted to do so.

4. Cookies & Tracking Technologies

cbage uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate the platform effectively, maintain session security, and gather analytical insights. This section explains what cookies we use and why.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and record certain interactions. Cookies set by cbage directly are called "first-party cookies". Cookies set by our service providers (such as analytics or fraud-detection tools) are called "third-party cookies".

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can manage and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies on exit, or receive a notification before a cookie is placed. Please note that disabling certain cookies may impair your experience on the cbage platform — for example, you may be required to log in on every visit if session cookies are blocked. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

5. Data Retention

cbage retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods below represent our standard schedules. In some cases, data may be retained for longer periods where required by a legal hold, ongoing investigation, or unresolved dispute.

5.1 Account Deletion Requests

If you request deletion of your cbage account, we will deactivate your account and remove or anonymise personal data that we are not required to retain by law. Data that must be retained for legal compliance purposes (such as KYC documents and financial transaction records) will be held for the applicable statutory period in a restricted-access archive and will not be used for any other purpose. We will confirm the outcome of your deletion request within 30 days of receipt.

6. Your Privacy Rights

As a cbage player, you have a number of rights in relation to your personal data. cbage is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request" and a description of the specific right you wish to exercise.

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible. We will respond to access requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For straightforward corrections (such as a misspelled name or an outdated email address), you may be able to update your details directly in your account profile. For corrections to identity or KYC data, please contact [email protected] with supporting documentation.

6.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. This right is not absolute; where cbage is required to retain data by law (see Section 5), erasure of that specific data will not be possible until the statutory retention period has expired.

6.4 Right to Restrict Processing

In certain circumstances (for example, while the accuracy of your data is being contested, or while a legitimate interests objection is being assessed), you may request that we restrict our processing of your data. During a restriction period, we will store your data but not actively process it for any purpose other than those you have specifically agreed to or those required by law.

6.5 Right to Object

Where we rely on legitimate interests as our legal basis for processing your data, you have the right to object to that processing. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to your data being used for direct marketing purposes, and we will always honour that objection without requiring justification.

6.6 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another service provider. We will provide this data within 30 days of a valid portability request.

7. Data Security

cbage implements a multi-layered security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online system can guarantee absolute security, our security measures represent current industry best practice for online gaming platforms.

7.1 Technical Safeguards

• All data in transit between your device and cbage servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Passwords are stored using a one-way cryptographic hashing algorithm with salting. cbage staff cannot view your password in plain text.
• Financial data is tokenised — full payment account numbers are not stored on cbage servers after the initial transaction is authorised.
• Access to production systems containing personal data is restricted to authorised personnel using multi-factor authentication.
• Platform infrastructure is monitored continuously for anomalous activity, with automated alerting and incident response protocols in place.
• Regular penetration testing and vulnerability assessments are conducted by independent security specialists.

7.2 Organisational Safeguards

• All cbage staff with access to personal data are subject to confidentiality obligations and receive data protection training.
• Access to personal data is granted on a strict need-to-know basis and is reviewed periodically.
• Data processing agreements are in place with all third-party service providers that handle personal data on our behalf.
• cbage maintains a formal data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, we will notify affected players without undue delay.

7.3 Your Role in Security

Data security is a shared responsibility. You can protect your cbage account by choosing a strong, unique password that you do not reuse on other platforms, by never sharing your login credentials with any third party, by enabling any available two-factor authentication features, and by logging out of your account when using a shared or public device. If you suspect that your account has been compromised, contact [email protected] immediately.

8. Policy Updates & Contact

cbage reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, to comply with new legal requirements, or to respond to changes in the operating environment. The "Effective Date" displayed at the top of this page and in the hero section above will be updated whenever a material change is made.

8.1 How We Notify You of Changes

Where a change to this Privacy Policy is material — meaning it significantly affects the way we process your personal data or the rights available to you — cbage will notify registered players via the email address associated with their account at least 14 days before the change takes effect. For minor changes (such as clarifications of existing practice or corrections of typographical errors), we may update the policy without individual notification, though the updated version will always be accessible on this page.

8.2 Continued Use Constitutes Acceptance

Your continued use of the cbage platform following any update to this Privacy Policy constitutes your acceptance of the revised version. If you do not accept the revised terms, you should stop using the platform and contact [email protected] to request account closure. We will process your request in accordance with the data retention obligations described in Section 5.

8.3 Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about the way cbage handles your personal data, please contact our data protection team using the details below. We aim to respond to all privacy-related enquiries within 5 working days.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: Within 5 working days (Bangladesh Standard Time, UTC+6)
• Support availability: 24 hours a day, 7 days a week including public holidays