cbagi Privacy Policy – How We Handle Your Data

This Privacy Policy ("Policy") describes how cbagi ("we", "us", "our") collects, stores, uses, discloses and protects personal data submitted by users ("you", "Player") of the cbagi website and all related services, including sports betting, live casino, slots, crash games, card games and promotional programmes. This Policy applies to all Players regardless of the device or browser used to access cbagi.

By registering an account on cbagi or continuing to use the Platform after this Policy has been published or updated, you confirm that you have read and understood this Policy and that you consent to the data practices described herein. If you do not consent to this Policy, please do not use cbagi.

What Data We Collect

cbagi collects six categories of personal data, each serving a specific, documented purpose:

cbagi collects your personal data through three primary channels:

Direct Submission

When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a promotion, you provide data directly to cbagi. This is the primary source of identity, contact and financial data.

Automated Collection

When you use the Platform, cbagi automatically collects technical and activity data including your device specifications, IP address, session duration, pages visited, games played, and bet history. This data is collected via server logs, session tracking, and first-party cookies.

Third-Party Sources

cbagi may receive data about you from payment service providers (bKash, Nagad, Rocket, Upay, partner banks) for transaction verification purposes, from identity verification partners for KYC compliance, and from fraud detection services. Data received from third parties is used only for the specific purpose for which it was obtained and is not combined with your activity data for marketing profiling.

cbagi uses your personal data only for the following documented purposes:

• Account creation and management: to register your account, authenticate your identity at login, and maintain your account settings and preferences.
• Payment processing: to process deposits from and withdrawals to your registered bKash, Nagad, Rocket, Upay or bank account, and to reconcile transaction records.
• Identity and age verification: to verify that you are at least 21 years of age and to comply with our Know Your Customer (KYC) obligations.
• Platform security and fraud prevention: to detect and prevent unauthorised access, bonus abuse, multi-accounting, money laundering and other prohibited activities.
• Regulatory compliance: to satisfy anti-money laundering (AML) obligations, respond to lawful requests from competent authorities, and maintain statutory record-keeping requirements.
• Responsible gaming: to monitor account activity for signs of problem gambling, to enforce player-set deposit and session limits, and to apply self-exclusion requests.
• Customer support: to respond to queries, resolve disputes, investigate complaints, and maintain records of support interactions.

cbagi processes your personal data under the following legal bases:

• Contractual necessity: processing required to create and maintain your account, process transactions, and deliver the services you have signed up for. Without this processing, cbagi cannot provide its services to you.
• Legal obligation: processing required to comply with AML legislation, KYC regulations, fraud prevention requirements, and lawful requests from regulatory authorities or law enforcement.
• Legitimate interests: processing carried out to protect the security and integrity of the Platform, prevent fraud and abuse, and maintain responsible gaming controls — provided these interests do not override your fundamental privacy rights.
• Consent: for any processing activity not covered by the above bases — such as optional marketing communications — cbagi will seek your explicit consent in advance. You may withdraw consent at any time by contacting support.

cbagi does not sell your personal data. We share data only with the categories of third parties described below, and only to the extent necessary for each specific purpose:

Payment Service Providers

We share transaction-relevant data with bKash, Nagad, Rocket, Upay and partner banks to process your deposits and withdrawals. These providers receive only the minimum data required to execute the specific transaction and are bound by their own regulatory obligations regarding data protection.

Game Software Providers

Live casino and slot games are hosted on infrastructure operated by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, PG Soft and Spribe. These providers may process technical data (session ID, bet amounts, game outcomes) as part of game delivery. They do not receive your identity, contact or financial data.

Regulatory and Law Enforcement Authorities

cbagi will disclose personal data to competent regulatory authorities or law enforcement agencies where required by law, court order, or where we have a good-faith belief that disclosure is necessary to comply with a legal obligation, protect the rights or safety of any person, or investigate, prevent or take action regarding suspected illegal activities.

cbagi uses first-party cookies and similar session-tracking technologies to operate the Platform. We do not use third-party advertising cookies or cross-site tracking pixels. The cookies we use fall into the following categories:

• Essential cookies: required for the Platform to function, including session authentication tokens, account login state, and deposit/withdrawal session identifiers. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: used to remember your preferences such as language settings and display options, and to maintain continuity across browsing sessions.
• Analytics cookies: used to understand aggregate Platform usage patterns — for example, which game categories are most popular or which pages have high exit rates. Data collected via analytics cookies is aggregated and anonymised; individual Players are not identified.

You may manage cookie settings through your mobile browser's built-in privacy controls. Disabling essential cookies will prevent you from logging into cbagi. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect your experience.

cbagi retains personal data only for as long as necessary for the purpose for which it was collected, subject to mandatory minimum retention periods required by applicable law. Our retention schedule is as follows:

• Active account data: retained for the full duration of your account's existence plus a minimum period of 5 years following account closure, to satisfy AML and fraud investigation obligations.
• Transaction records: retained for a minimum of 7 years following each transaction date, in accordance with financial record-keeping requirements.
• Support and communications records: retained for 3 years following the date of the last communication, or longer if the communication is related to an open dispute or legal proceeding.

When the applicable retention period has expired and there is no ongoing legal or regulatory requirement to retain the data, cbagi will securely delete or irreversibly anonymise the relevant records.

cbagi implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform, encrypted storage of sensitive account credentials, access controls limiting which cbagi personnel can view personal data, and automated monitoring systems that flag unusual account activity in real time.

cbagi stores all personal data on servers with restricted physical and network access. Payment credential data (such as your bKash or Nagad wallet number) is stored in tokenised form — cbagi does not store the raw credentials directly; instead, a secure token is used for transaction routing. cbagi does not store full bank account numbers or card numbers on its own servers.

Subject to applicable law and cbagi's legitimate interests in fraud prevention and regulatory compliance, you have the following rights over your personal data:

• 👁️
  Right of Access

  You may request a copy of all personal data cbagi holds about you. We will respond to access requests within 30 days of receipt.
• ✏️
  Right of Rectification

  You may request correction of any inaccurate or incomplete personal data we hold about you. Identity data corrections require supporting documentation.
• 🗑️
  Right of Erasure

  You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to mandatory retention periods required by law. Erasure requests cannot override statutory AML or fraud investigation retention requirements.
• ⏸️
  Right to Restrict Processing

  You may request that cbagi temporarily restrict processing of your data while you contest its accuracy or while a legitimate interests objection is being assessed.
• 📦
  Right to Data Portability

  Where processing is based on consent or contractual necessity, you may request that cbagi provide your data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• 🚫
  Right to Object

  You may object to processing of your personal data where cbagi relies on legitimate interests as the legal basis. cbagi will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

To exercise any of the above rights, contact cbagi support through the Platform's live support channel or via the email address published in the footer of this page. Please include your registered mobile number and specify which right you are exercising. cbagi will acknowledge your request within 72 hours and respond substantively within 30 calendar days.

cbagi is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process requires applicants to confirm they are aged 21 or above, and our KYC verification process is designed to identify and reject underage applicants. If cbagi discovers that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account.

If you are a parent or guardian and you believe that your child (under 21) has registered an account on cbagi, please contact our support team immediately through the Platform. We will take prompt action to verify the complaint, close the account, and delete all associated personal data without delay.

The cbagi Platform integrates with third-party game providers and payment processors as described in this Policy. These third parties operate their own platforms and are governed by their own privacy policies, which cbagi does not control. cbagi is not responsible for the data practices of third-party game studios or payment providers. When you interact directly with a third-party service (for example, completing a bKash payment in the bKash interface), that interaction is governed by the third party's own privacy policy. cbagi recommends that you review the privacy policies of any third-party services you use in connection with your cbagi account.

cbagi may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform services. When we make material changes — meaning changes that substantially affect your rights or the way we handle your data — we will display a notice on the Platform upon your next login before the changes take effect, giving you the opportunity to review the updated Policy before continuing to use cbagi.

Your continued use of cbagi following the publication of any revised Privacy Policy constitutes your acceptance of the updated Policy. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We recommend checking this page periodically to stay informed of any changes.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to report a suspected data breach, or have a complaint about how cbagi has handled your personal data, please contact cbagi's support team through the live support channel available inside the Platform. Support is available 24 hours a day, 7 days a week.

You may also contact us by email. Our contact email is published in the footer of every page of this site. When submitting a data rights request by email, please include your registered mobile number, your full name as it appears on your cbagi account, and a clear description of your request. cbagi commits to acknowledging all data-related enquiries within 72 hours.