Privacy Policy at cba234

When you register and use the cba234 platform, we collect personal information that is necessary to create and maintain your account, process your transactions, verify your identity, and comply with applicable regulations. The categories of personal data we collect are described below.

Registration and Identity Data — When you open an account with cba234, we collect your full legal name, date of birth, gender, residential address (including city, district, and postcode), nationality, email address, and mobile phone number. This information is used to create your unique player profile and to verify that you meet the minimum age requirement of 18 years.

Identity Verification Documents — As part of our Know Your Customer (KYC) process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, together with proof of address such as a utility bill or bank statement. These documents are stored securely and used solely for verification purposes.

Financial and Transaction Data — We record all deposit and withdrawal transactions on your account, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank), transaction amounts in Bangladeshi Taka (BDT), transaction timestamps, and transaction reference numbers. We do not store full payment card numbers or mobile banking PINs.

Technical and Device Data — When you access cba234 via a web browser or mobile device, we automatically collect your IP address, browser type and version, operating system, device identifiers, screen resolution, session timestamps, and referring URL. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

Gameplay and Behavioural Data — We log your game activity on the platform, including which games you play, bet amounts, session durations, win and loss records, and bonus usage. This information is used to personalise your experience, identify responsible gaming concerns, and fulfil regulatory reporting requirements.

Communications Data — If you contact our support team via email, live chat, or any other channel, we retain records of that correspondence, including the content of your messages, timestamps, and the resolution provided. This allows us to maintain service quality and a consistent support history.

cba234 processes your personal data for several distinct purposes, each grounded in a lawful basis. We do not use your information for undisclosed secondary purposes, and we do not engage in profiling for automated decision-making that produces significant legal or similarly significant effects without human review.

Account Management and Service Delivery — Your registration data is used to create and maintain your cba234 account, authenticate your identity when you log in, process your deposits and withdrawals, and deliver the gaming and betting services you have requested. This is the primary contractual purpose for which your data is collected.

Identity Verification and Regulatory Compliance — cba234 is obligated to verify the identity of all players and to maintain records in accordance with anti-money laundering (AML) standards. Your identity documents and transaction records are retained and processed to satisfy these legal obligations. We may share relevant data with financial intelligence authorities where required by law.

Fraud Prevention and Platform Security — Technical and behavioural data is analysed to detect and prevent unauthorised account access, bonus abuse, money laundering, collusion, and other forms of fraudulent activity. Our security systems monitor unusual patterns and flag accounts for review where anomalies are detected.

Responsible Gaming Monitoring — Gameplay and session data is used to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, cba234 may proactively reach out to the player with responsible gaming resources and, where appropriate, apply temporary restrictions in accordance with our Responsible Gaming Policy.

Customer Support — Communications data is used to respond to your enquiries, resolve disputes, and maintain a consistent support history. Support interactions may be reviewed internally for quality assurance purposes.

Platform Improvement and Analytics — Aggregated and anonymised usage data is analysed to understand how players interact with the platform, which features are most popular, and where the user experience can be improved. This analysis does not involve identifying individual players.

Marketing Communications — Where you have given your explicit consent to receive marketing communications from cba234, we may send you information about promotions, new games, and seasonal offers via email or SMS. You may withdraw your consent and opt out of marketing communications at any time through the notification preferences section of your account dashboard or by contacting our support team.

cba234 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session and preferences, and to gather anonymised analytics about how the platform is used. This section explains the types of cookies we use and how you can manage them.

A cookie is a small text file placed on your device by a website you visit. Cookies are widely used to make websites work efficiently and to provide information to site operators. They do not give us access to your device or any information beyond what is stored in the cookie itself.

cba234 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements. We do not participate in cross-site tracking networks.

To manage or delete cookies, access your browser's privacy or settings menu. Most browsers allow you to block all cookies, block third-party cookies only, or clear existing cookies. Instructions vary by browser; consult your browser's help documentation for specific guidance. Please be aware that blocking strictly necessary or security cookies may prevent you from logging in to your cba234 account.

cba234 does not sell your personal data to any third party. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment Service Providers — To process your deposits and withdrawals, cba234 shares transaction data with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the data necessary to process the specific transaction and are not permitted to use it for any other purpose.

Game Content Providers — The games available on cba234 are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, technical session data (such as your anonymised player ID and bet amounts) is transmitted to the game provider's systems to run the game. These providers operate under contractual data processing agreements with cba234 and are not permitted to use this data to identify you as an individual.

Identity Verification Partners — cba234 may use third-party KYC verification services to assist with the validation of identity documents submitted by players. These partners process your identity data strictly for verification purposes under binding data processing agreements.

Legal and Regulatory Authorities — cba234 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory bodies where we are legally required to do so, where we have reasonable grounds to believe that disclosure is necessary to prevent a crime, or where we receive a lawful order or request from a competent authority.

Fraud Prevention Services — We may share technical and behavioural data with specialist fraud prevention and anti-money laundering service providers to assist in detecting and preventing financial crime on the platform. Any such provider operates under a data processing agreement and is prohibited from using the data for any purpose other than fraud prevention.

Business Transfers — In the event of a merger, acquisition, restructuring, or sale of all or part of cba234's business, your personal data may be transferred to the successor entity as part of that transaction. We will notify affected players of any such transfer and ensure that the successor entity is bound by privacy obligations no less protective than those set out in this Policy.

cba234 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Encryption in Transit — All communications between your browser or mobile device and cba234's servers are encrypted using Transport Layer Security (TLS), ensuring that your data cannot be read or tampered with as it travels across the network.

Encryption at Rest — Sensitive personal data stored on cba234's servers — including identity verification documents and financial records — is encrypted at rest using industry-standard encryption algorithms. This protects your data in the event of unauthorised physical or logical access to our storage systems.

Access Controls — Access to player data within cba234's internal systems is governed by a role-based access control policy. Only personnel who have a legitimate operational need to access specific categories of data are authorised to do so. All internal access is logged and subject to periodic audit.

Password Security — cba234 stores account passwords in hashed form using a strong cryptographic hashing algorithm. We never store passwords in plain text and our staff cannot retrieve your password — only reset it through an authenticated process.

Fraud and Intrusion Monitoring — Our security team continuously monitors the platform for signs of unauthorised access, unusual login activity, and other indicators of compromise. Automated systems flag anomalous behaviour for human review, and incident response procedures are in place to contain and remediate any confirmed security breach promptly.

Data Breach Notification — In the unlikely event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, cba234 will notify the affected individuals without undue delay, providing details of what data was affected, what steps have been taken to address the breach, and what actions you should take to protect yourself.

cba234 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

The following general retention periods apply to the main categories of personal data held by cba234:

• Account and identity data — Retained for the duration of your account's active life, plus a minimum of five (5) years following permanent account closure. This retention period is driven by anti-money laundering regulations which require financial institutions to maintain records of customer identity and transactions for an extended period.
• Financial and transaction records — Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Identity verification documents — Retained for the duration of account activity plus five (5) years post-closure. Copies are securely deleted once the retention period expires.
• Gameplay and session logs — Retained for up to three (3) years from the date of each session, after which they are either deleted or fully anonymised.
• Support communications — Retained for up to three (3) years from the date of the last interaction, to allow for dispute resolution and quality monitoring.
• Marketing consent records — Retained for as long as you hold an active account and for up to two (2) years following account closure or withdrawal of consent, to demonstrate compliance with consent obligations.
• Technical and device data (logs) — Typically retained for up to ninety (90) days for security monitoring purposes, after which they are deleted or anonymised.

Where cba234 is involved in legal proceedings, regulatory investigations, or a dispute with a player, relevant data may be retained beyond the standard periods described above until the matter is fully resolved.

Requests for early deletion of personal data are addressed in the Your Privacy Rights section below. Note that certain categories of data cannot be deleted early due to mandatory legal retention requirements, and cba234 will explain the applicable basis where a deletion request cannot be fulfilled in full.

As a cba234 player, you have meaningful rights over your personal data. cba234 is committed to honouring these rights promptly and transparently. The rights described below apply to the personal data we hold about you in connection with your cba234 account.

Right of Access — You have the right to request a copy of the personal data that cba234 holds about you. Upon a verified request, we will provide you with a summary of your data, the purposes for which it is processed, and information about any third parties with whom it has been shared.

Right to Rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain information directly through your account dashboard; for changes to identity records, please contact our support team.

Right to Erasure — You may request that cba234 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there are no overriding legitimate grounds. Note that we may be unable to fulfil an erasure request in full where we have a legal obligation to retain certain records.

Right to Restriction of Processing — You may request that cba234 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing and a decision on that objection is pending.

Right to Object — Where cba234 processes your data on the basis of legitimate interests (e.g., fraud prevention analytics), you have the right to object to that processing. We will then assess whether our legitimate interests override your objection. You have an absolute right to object to the use of your data for direct marketing purposes.

Right to Data Portability — Where processing is based on your consent or on a contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another service provider where technically feasible.

Right to Withdraw Consent — Where cba234 processes your data based on your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights described above, please contact the cba234 support team. Contact email: [email protected] (displayed as plain text — not a clickable link). We will ask you to verify your identity before acting on a data rights request, to ensure that we do not disclose or delete data in response to fraudulent requests.

cba234 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform and services. The date at the top of this page will always reflect when the Policy was most recently revised.

Notification of Material Changes — Where we make a material change to this Privacy Policy — meaning a change that significantly affects how we collect, use, or share your personal data — we will notify all registered cba234 players by email at least fourteen (14) days before the change takes effect. A prominent notice will also be displayed on the platform during that period. Your continued use of cba234 after a revised Policy takes effect constitutes your acceptance of the updated terms.

Minor and Administrative Updates — Changes that are minor in nature, such as typographical corrections, clarifications of existing practices, or updates to contact information, may be made without advance notice. The updated Policy will simply be published on this page with a revised effective date.

Archived Versions — Previous versions of the cba234 Privacy Policy are retained internally and can be requested by contacting our support team. This allows players to compare the current Policy against earlier versions if required.

Children and Minors — cba234's services are strictly intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has registered an account or provided personal data to cba234, please notify our support team immediately. Upon verification, we will take prompt steps to close the account and delete the associated personal data.

Links to Third-Party Sites — The cba234 platform may occasionally contain references to game providers or payment partners. This Privacy Policy applies solely to data processed by cba234 in connection with your use of the cba234 platform. We are not responsible for the privacy practices of any third-party websites or services, and we encourage you to review the privacy policies of any third-party service you interact with independently of cba234.

Contact Our Privacy Team — If you have any questions, concerns, or requests regarding this Privacy Policy or the way cba234 handles your personal data, please reach out to our dedicated support team. We are committed to addressing all privacy-related enquiries thoroughly and in a timely manner.