cabje Privacy Policy

Section 1

Introduction and Scope

This Privacy Policy ("Policy") is published by cabje ("we", "us", "our") and applies to all personal data collected, processed, stored, or otherwise used in connection with your use of the cabje online gaming platform at cabje.org and any related services (collectively, the "Platform"). This Policy forms part of the cabje Terms & Conditions and should be read together with them.

By registering a cabje account, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you are a resident of Bangladesh, this Policy has been specifically designed to address your data rights under applicable Bangladeshi data protection practice.

Section 2

Information We Collect

cabje collects the following categories of personal data in connection with your registration, use of the Platform, and any interactions with our support team. We collect only the data that is reasonably necessary for the purposes set out in this Policy:

cabje does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gaming assessment and provided voluntarily by the player in that specific context.

Section 3

How We Use Your Information

cabje uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected:

• Account creation, management, and authentication — including OTP-based two-factor verification, password reset, and account recovery processes.
• KYC identity verification and ongoing AML compliance — to confirm your identity before processing withdrawals, and to meet our obligations under applicable anti-money laundering requirements.
• Payment processing — to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer methods, and to maintain accurate financial records of all account transactions.
• Platform improvement — to analyse aggregated usage patterns, identify technical issues, improve game selection and promotional offerings, and develop new features that better serve Bangladesh players.
• Responsible gaming monitoring — to identify early indicators of problem gambling behaviour (such as rapid deposit escalation, extended session durations, or self-reported distress) and to administer the self-exclusion, deposit limit, and loss limit tools available to all cabje players.
• Customer support — to respond to account enquiries, complaints, disputes, and support requests submitted by you to [email protected], and to maintain records of communications for quality assurance and dispute resolution purposes.

cabje does not use your personal data to build automated decision-making profiles that produce legal or similarly significant effects on you without human review. Any account-level decisions (such as account suspension or bonus forfeiture) that are triggered by automated detection are reviewed by a member of the cabje compliance or support team before action is taken.

Section 4

Legal Basis for Processing Your Data

cabje processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is used:

• Consent: Where you have expressly agreed to the processing, such as consenting to receive marketing communications, setting up optional responsible gaming alerts, or submitting KYC documents.
• Contractual Necessity: Where processing is necessary to perform our contract with you — for example, creating and maintaining your account, processing deposits and withdrawals, settling bets, and distributing bonus funds.
• Legal Obligation: Where processing is required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, record-keeping requirements, and responding to lawful requests from competent authorities.
• Legitimate Interests: Where processing is necessary for cabje's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms — for example, fraud prevention, security monitoring, Platform performance analytics, and responsible gaming behavioural monitoring.

Section 5

KYC and AML Data Handling

As an online gaming platform serving Bangladesh players, cabje operates KYC (Know Your Customer) and AML (Anti-Money Laundering) programmes that require the collection, verification, and retention of identity documentation. These programmes are a mandatory part of responsible platform operation and are not discretionary. The data collected as part of KYC includes scanned or photographed copies of your NID, passport, or birth certificate, together with a live selfie for liveness verification.

KYC documents are stored in encrypted form on cabje's secure servers. Access to KYC data is strictly limited to cabje compliance staff and authorised verification service providers who process documents on our behalf under binding data processing agreements. KYC documents are never shared with third parties for marketing, profiling, or any purpose unrelated to identity verification and AML compliance.

Section 6

Data Sharing and Disclosure

cabje does not sell your personal data. We share personal data only in the following limited and specific circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, and partner bank systems receive only the transaction data required to process your deposit or withdrawal (mobile number, amount, and reference). They do not receive your full identity profile or KYC documents.
• Game Providers: Licensed game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe receive a pseudonymous player identifier and session token to facilitate game delivery. They do not receive your real name, NID, mobile number, or financial details.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory or law enforcement authority, cabje will disclose personal data to the extent legally mandated. cabje will notify you of any such disclosure where permitted to do so by law.
• KYC Verification Partners: cabje may use trusted third-party identity verification service providers to assist with KYC document processing. These providers act as data processors under binding agreements and are prohibited from using your data for any purpose other than verification on our behalf.

All third parties with whom cabje shares personal data are contractually required to maintain appropriate security standards, process data only for the stated purpose, and comply with applicable data protection obligations. cabje does not transfer personal data to jurisdictions with materially lower data protection standards without implementing appropriate safeguards.

Section 7

Cookies and Tracking Technologies

cabje uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you access the Platform. The following categories of cookies are used on cabje:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies (keeping you logged in during a session), CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without preventing your use of the Platform.
• Functional Cookies: Used to remember your preferences such as language settings and responsible gaming tool configurations. Disabling these cookies means your preferences will not be saved between sessions and will need to be re-entered each time you log in.
• Analytics Cookies: Used in aggregated, anonymised form to understand how players use the Platform, which pages are most frequently visited, and where technical errors occur. Analytics data is not used to identify individual players and is retained for no longer than 26 months.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from using core Platform features including login and gameplay. cabje does not use third-party advertising cookies or retargeting pixels.

Section 8

Data Retention

cabje retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any longer retention period required by law. The following retention periods apply:

• Active account data (identity, contact, financial, and usage data) is retained for the lifetime of your active cabje account plus a minimum of 5 years following account closure, to meet AML and KYC record-keeping obligations.
• Support communications and complaint records are retained for a minimum of 3 years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical and analytics data (logs, session data, IP address records) is retained for a maximum of 13 months from the date of collection, after which it is either deleted or irreversibly anonymised.

When a retention period expires, personal data is securely deleted or irreversibly anonymised using industry-standard methods. cabje conducts periodic data audits to ensure that data is not retained beyond its required retention period.

Section 9

Your Data Rights

As a cabje player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your account mobile number and a description of your request:

• Right of Access: You may request a copy of all personal data cabje holds about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
• Right to Rectification: If any personal data cabje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity data corrections require re-verification via KYC.
• Right to Erasure: You may request deletion of your personal data when it is no longer necessary for the purpose for which it was collected, or when you withdraw consent. This right is subject to legal retention obligations — KYC and financial records must be retained as described in Section 8.
• Right to Restriction: You may request that cabje restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified following a rectification request.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a copy of your personal data in a machine-readable format (such as JSON or CSV) suitable for transfer to another service.
• Right to Object: You may object to the processing of your personal data where it is based on legitimate interests. cabje will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Section 10

Data Security

cabje implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage of personal and financial data at rest, strict access controls limiting data access to authorised personnel on a need-to-know basis, regular security audits and vulnerability assessments, and two-factor authentication (2FA) for all cabje staff accounts with access to player data.

Despite these measures, no internet-based platform can guarantee absolute security against all possible threats. If you suspect that your cabje account has been accessed without authorisation, you must contact [email protected] immediately so that cabje can investigate and, where appropriate, freeze your account to prevent further unauthorised activity.

Section 11

Marketing Communications

With your consent, cabje may send you promotional communications about bonuses, new games, seasonal offers (such as Eid promotions or BPL cricket betting specials), and Platform updates via SMS to your registered Bangladesh mobile number. Marketing communications are sent only to players who have opted in during registration or subsequently via Account Settings.

You may withdraw your consent to receive marketing communications at any time without affecting the lawfulness of processing carried out before the withdrawal. To opt out, contact [email protected] with the subject line "Marketing Opt-Out" and your registered mobile number. Opt-out requests are processed within 5 business days. Please note that even after opting out of marketing, cabje may still send you essential service communications related to your account, such as withdrawal confirmations, KYC requests, and security alerts.

Section 12

Third-Party Services and External Links

The cabje Platform integrates with third-party game providers, payment processors, and KYC verification services as described in this Policy. Each of these third parties operates under its own privacy policy and data processing terms. cabje is not responsible for the privacy practices of third-party game providers or payment processors, and recommends that you review their respective privacy policies if you have concerns about how they handle personal data in their own systems.

The cabje Platform does not contain links to third-party websites other than those necessary for game delivery and payment processing. cabje is not responsible for the content or privacy practices of any external site. You access any external service at your own risk.

Section 13

Children's Privacy and the 21+ Requirement

The cabje Platform is strictly intended for adults aged 21 years and above. cabje does not knowingly collect personal data from individuals under the age of 21. As part of the KYC process, all players are required to provide proof of age before their account is fully activated and before any withdrawal is processed. If cabje discovers that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated balances will be forfeited, and all personal data collected from that individual will be deleted as soon as practicable following the closure of the account, subject only to any mandatory legal retention obligations.

Section 14

Changes to This Privacy Policy

cabje reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where changes are material — meaning they affect your rights or the way we use your personal data in a significant way — we will provide advance notice by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification to your registered mobile number.

Your continued use of the cabje Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using the Platform and contact [email protected] to close your account.

Section 15

Contact Us About This Policy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cabje handles your personal data, please contact our support team in writing. All data-related requests and privacy enquiries are handled by the cabje compliance team:

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days. For urgent matters such as suspected data breaches or unauthorised account access, please mark your message "URGENT" and we will prioritise your request. cabje is committed to handling all data rights requests with respect, transparency, and in accordance with applicable data protection obligations.