cebaje Privacy Policy

1. Who We Are

cebaje ("we", "us", "our") operates the online casino and sports betting platform available at cebaje.org. cebaje is an international entertainment platform serving players in Bangladesh and across Asia. For the purposes of this Privacy Policy, cebaje is the data controller responsible for the personal data collected through the platform.

If you have any questions about this Privacy Policy or wish to exercise your rights under it, you may contact us at any time using the details provided in Section 12 of this policy.

2. Data We Collect

cebaje collects personal data in the following categories. We collect only what is necessary for the specific purpose identified:

cebaje does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers. If you voluntarily provide such information during a support interaction, it will be used only to resolve your specific query and will not be retained beyond the resolution of that query.

3. How We Collect Your Data

cebaje collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical and usage data collected automatically when you interact with the cebaje platform, using cookies, server logs, and similar technologies.
• Third-party verification: Where you have consented, cebaje may receive identity verification data from trusted third-party KYC service providers to confirm your age and identity without requiring additional manual document submission.
• Payment providers: Transaction confirmation data (not full payment credentials) received from mobile payment operators such as bKash and Nagad to reconcile your deposit and withdrawal records.

cebaje does not purchase personal data lists from data brokers or third-party marketing firms, and does not collect data from social media platforms without your explicit consent.

4. How We Use Your Data

cebaje uses your personal data for the following purposes, each grounded in a lawful basis:

• Account management: To create, maintain, and administer your cebaje account, including processing your login credentials securely.
• Identity and age verification: To confirm that you are at least 21 years of age and that the information you have provided is accurate, in compliance with our responsible gaming obligations.
• Processing transactions: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records of your account activity.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats. Technical data such as IP addresses and device fingerprints are used for this purpose.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling, apply any self-exclusion or deposit limits you have requested, and comply with our responsible gaming policy.
• Customer support: To respond to your queries, resolve complaints, and maintain records of support interactions for quality assurance purposes.
• Legal compliance: To fulfil obligations imposed by applicable law, including record-keeping requirements and responses to lawful requests from competent authorities.
• Service improvement: To analyse anonymised, aggregated usage patterns to improve the cebaje platform, game selection, and user experience for all Bangladeshi players.
• Direct marketing (where consented): To send you promotional offers, bonus notifications, and news about new games or features at cebaje, where you have opted in to receive such communications.

cebaje will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate lawful basis.

5. Cookies & Tracking Technologies

cebaje uses cookies and similar tracking technologies to deliver a functional and personalised experience on the platform. Cookies are small text files stored on your device when you visit cebaje.org. The types of cookies we use include:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies that keep you logged in during your visit. You cannot opt out of these without losing core platform functionality.
• Performance cookies: Collect anonymised data about how players use the platform — such as which pages are most visited — to help us improve load times and navigation.
• Functional cookies: Remember your preferences (such as language settings and notification preferences) to personalise your cebaje experience across sessions.
• Security cookies: Help detect and prevent fraudulent account access and protect against cross-site request forgery (CSRF) attacks.

cebaje does not use third-party advertising cookies or tracking pixels that allow external ad networks to build a profile of your browsing behaviour across unrelated websites. You may manage your cookie preferences through your browser settings at any time, though disabling strictly necessary cookies may impair your ability to use certain features of the platform.

6. Sharing Your Data

cebaje does not sell your personal data. We share it only in the following limited and controlled circumstances:

• Payment processors: We share the minimum necessary transaction data with mobile payment operators (bKash, Nagad, Rocket, Upay) and international card networks (Visa, Mastercard) solely to process your deposits and withdrawals.
• Identity verification providers: Where you have consented, your identity documents may be shared with trusted third-party KYC verification services operating under strict confidentiality obligations.
• Game providers: When you play a game powered by a third-party studio (such as Pragmatic Play, Evolution Gaming, or Spribe), limited technical data (such as a pseudonymous player identifier and session token) is shared with that provider to deliver the game. Game providers are contractually prohibited from using this data for their own marketing purposes.
• Legal and regulatory authorities: cebaje will disclose personal data to competent authorities where required to do so by applicable law, court order, or legitimate regulatory request. We will notify you of any such disclosure where permitted by law.
• Business continuity: In the event of a merger, acquisition, or restructuring of the cebaje business, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy.

All third parties with whom cebaje shares personal data are required to maintain appropriate technical and organisational security measures and to process the data only for the specific purpose for which it was shared.

7. Data Security

cebaje takes the security of your personal data seriously and implements a layered approach to data protection:

• Transport security: All data transmitted between your device and cebaje's servers is protected by 256-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar when visiting cebaje.org.
• Access controls: Access to personal data within cebaje is restricted on a strict need-to-know basis. Employees and contractors who handle personal data are bound by confidentiality obligations and receive regular data protection training.
• Password security: Account passwords are stored using industry-standard one-way hashing algorithms. cebaje staff cannot view your password and will never ask you to share it.
• Intrusion detection: cebaje operates continuous monitoring systems to detect and respond to unauthorised access attempts, suspicious login patterns, and other security incidents.
• Secure infrastructure: cebaje's platform is hosted on enterprise-grade server infrastructure with physical and logical security controls, regular security audits, and automated vulnerability scanning.

While cebaje takes all reasonable precautions, no internet-based platform can guarantee absolute security. You can help protect your account by using a strong, unique password for cebaje, enabling any available two-factor authentication, and never sharing your login credentials with anyone.

In the unlikely event of a data breach that poses a risk to your rights, cebaje will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

8. Data Retention

cebaje retains your personal data for as long as your account remains active and for a further period after account closure, as outlined below:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years after account closure, to satisfy our compliance and record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping practices.
• Support and communications data: Retained for 2 years from the date of the last interaction, or longer if the communication is relevant to an ongoing dispute or legal matter.
• Technical and usage data (logs): Retained for up to 12 months for security and fraud prevention purposes, after which it is anonymised or deleted.
• Marketing preferences: Retained until you withdraw your consent to receive marketing communications or request deletion.

When a retention period expires, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for statistical analysis and platform improvement.

9. Your Rights

As a cebaje player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data cebaje holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: You may request that cebaje delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal obligations to retain it.
• Right to restrict processing: You may request that cebaje temporarily restrict the processing of your data while a correction request or objection is under review.
• Right to data portability: You may request that cebaje provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where cebaje processes your data on the basis of consent (such as direct marketing), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
• Right to object: You may object to cebaje processing your personal data for direct marketing purposes at any time. To opt out of marketing emails, use the unsubscribe link in any marketing communication or contact support directly.

cebaje will respond to all verified data rights requests within 14 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 14 days with notification to you.

10. International Data Transfers

cebaje operates as an international platform and some of the third parties with whom we share data (such as game providers and KYC verification services) may process data in countries outside Bangladesh. When personal data is transferred internationally, cebaje ensures that appropriate safeguards are in place, including contractual data protection clauses that require the recipient to maintain the same standard of protection as described in this policy.

cebaje does not transfer personal data to countries or organisations that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

11. Children & Minors

cebaje's platform is strictly for adults aged 21 years and above. cebaje does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered a cebaje account, please contact us immediately at [email protected] with the subject line "Underage Account Report".

12. Changes to This Policy

cebaje reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, we will notify registered players via the contact details held on their account at least 7 days before the changes take effect.

The "Last updated" date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this policy periodically. Continued use of the cebaje platform following notification of changes constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cebaje handles your personal data, please reach out to our support team:

• Email: [email protected]
• Subject line for data requests: "Data Rights Request"
• Subject line for underage reports: "Underage Account Report"
• Response time: Within 14 calendar days for data rights requests; within 24 hours for general privacy queries
• Operating hours: Bangladesh Standard Time (BST, UTC+6)

cebaje is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you may refer your complaint to a relevant data protection authority in your jurisdiction.