Privacy Policy
Your Data, Our Commitment

1 Data Controller Information

This Privacy Policy applies to the online gaming platform operated under the brand name cbjivip, accessible at cbjivip.net (the "Platform"). For the purposes of this Policy, cbjivip acts as the data controller — the entity that determines the purposes and means by which your personal data is processed.

By registering an account on the Platform, making a deposit, placing a bet, or otherwise using any service offered by cbjivip, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, both of which form part of the overall agreement between you and cbjivip. In the event of a conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall take precedence.

2 Information We Collect

cbjivip collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party service providers where necessary for payment processing and identity verification.

The table below summarises the categories of personal data we collect and the primary source of each category:

cbjivip does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided us with personal data, we will take immediate steps to delete that data and close the associated account.

We do not collect sensitive categories of personal data (such as racial or ethnic origin, religious beliefs, health data, or political opinions) unless you voluntarily provide such information in the context of a responsible gaming self-exclusion or support request, in which case it is used solely to deliver the requested service.

3 How We Use Your Information

cbjivip uses the personal data we collect for the following specific purposes. We process your data only where we have a valid legal basis for doing so (see Section 4 for details of our legal bases).

• Account management: Creating and maintaining your player account, verifying your identity and age, processing password resets, and managing account preferences.
• Payment processing: Facilitating deposits to your gaming wallet via bKash, Nagad, Rocket, Upay, and supported bank transfers; processing withdrawal requests to your verified payment method; detecting and preventing fraudulent transactions.
• Service delivery: Enabling you to access and play casino games, place sports bets, participate in tournaments and promotions, and claim bonuses in accordance with their stated terms.
• Customer support: Responding to your queries, complaints, and requests submitted via live chat, email, or any other support channel.
• Legal compliance: Meeting our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations; responding to lawful requests from law enforcement, courts, or regulatory authorities; maintaining records required by applicable law.
• Platform improvement: Analysing aggregated usage data to identify technical issues, optimise game loading performance, and improve navigation and user experience for all players in Bangladesh.
• Responsible gaming: Monitoring betting patterns to identify signs of problem gambling; contacting players who appear to be at risk; administering self-exclusion, deposit limits, and cool-off periods requested by players.
• Marketing communications: Where you have provided explicit consent, sending you personalised promotional offers, bonus notifications, and news about new games or events. You may withdraw marketing consent at any time by emailing [email protected].
• Security and fraud prevention: Detecting and investigating suspicious login attempts, unusual betting patterns, multi-accounting, and other prohibited activities described in our Terms & Conditions.

4 Legal Basis for Processing

cbjivip processes your personal data only where a valid legal basis exists. The principal legal bases we rely on are:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account creation, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable law — including KYC identity verification, AML transaction monitoring, and record-keeping obligations.
• Legitimate interests: Processing for our legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where cbjivip relies on legitimate interests as a legal basis, we have conducted an internal balancing assessment and determined that our interests do not override the fundamental privacy interests of our players. Where any such assessment is borderline, we default to seeking explicit consent.

5 Sharing & Disclosure

cbjivip does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment service providers: We share your financial data (wallet number, transaction amounts) with bKash, Nagad, Rocket, Upay, and our partner banks solely to process your deposits and withdrawals. These providers operate under their own privacy policies and data security standards.
• KYC and identity verification partners: We may use accredited third-party identity verification services to assist with document authentication during the KYC process. These providers process your documents only on our instruction and may not use them for any independent purpose.
• Game software providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive pseudonymised player session data (such as a session token and stake amounts) to render their games and detect game-level fraud. No directly identifiable data such as your name or NID is shared with game providers.
• Analytics and platform performance tools: Aggregated and anonymised technical and usage data may be shared with platform analytics tools to help us understand site performance. This data cannot be used to identify you individually.
• Law enforcement and regulatory bodies: We will disclose personal data to police, courts, financial intelligence units, or other authorities when required to do so by a lawful request, court order, or legal obligation. We will notify you of such a disclosure where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the cbjivip business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

6 Cookies & Tracking

The cbjivip Platform uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate core Platform functions and to understand how players interact with the site. We do not use cross-site advertising cookies or third-party behavioural targeting trackers.

The cookies we deploy fall into the following categories:

Strictly necessary cookies cannot be disabled without significantly impairing the Platform's core functionality, including the ability to log in and place bets. Functional and analytics cookies can be managed through your browser settings. Most modern browsers allow you to block or delete cookies; however, doing so may affect your experience on the Platform.

By continuing to use the cbjivip Platform after reading this Policy, you acknowledge our use of cookies as described above. No separate cookie consent banner is displayed, as the only non-essential cookies we use (analytics) are anonymised and do not constitute personal data processing requiring explicit consent under the applicable legal framework.

7 Data Retention

cbjivip retains your personal data for as long as your player account remains active and for such additional period as may be required by applicable legal, regulatory, or business obligations. The specific retention periods for each category of data are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following permanent account closure, to comply with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial regulations applicable to online payment processing.
• KYC verification documents: Retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Technical and usage logs: Retained for 12 months in detailed form; thereafter retained in anonymised, aggregated form for platform analytics purposes with no personal link.
• Marketing consent records: Retained for as long as you hold an account with us, and for 1 year following account closure, to demonstrate compliance in the event of a complaint.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for aggregate analytical purposes.

8 Your Privacy Rights

As a player registered on the cbjivip Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Privacy Team at [email protected] with the subject line "Privacy Request — [Your Username]" and a clear description of your request. We will acknowledge your request within 48 hours and provide a substantive response within 30 days.

• Right of access: You have the right to request a copy of the personal data we hold about you, including the categories of data, the purposes for which it is processed, and the third parties to whom it has been disclosed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor account details (email, phone number), you may update these directly through your account dashboard.
• Right to erasure: Subject to our legal retention obligations, you have the right to request the deletion of your personal data. Note that where legal obligations require us to retain certain data (e.g., AML records), we cannot fulfil an erasure request for that specific data until the mandatory retention period has expired.
• Right to restrict processing: You have the right to request that we temporarily restrict the processing of your data — for example, while a dispute about data accuracy is being resolved.
• Right to object: You have the right to object to the processing of your data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that it be transmitted to another data controller where technically feasible.

9 Data Security

cbjivip implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the cbjivip Platform is encrypted in transit using TLS 1.2 or higher. The site operates exclusively over HTTPS.
• At-rest encryption: Sensitive personal data (including KYC documents and financial records) is encrypted in our database storage using AES-256 encryption.
• Password hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm with a unique salt. Plain-text passwords are never stored or logged.
• Access controls: Access to personal data within cbjivip's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background screening and are bound by confidentiality obligations.
• Intrusion detection: Our infrastructure is monitored continuously for suspicious access attempts, unusual traffic patterns, and potential security breaches.
• Regular security audits: cbjivip conducts periodic security reviews of its Platform infrastructure, third-party integrations, and internal data handling processes.

While we apply industry-leading security measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, cbjivip will notify affected players without undue delay via their registered email address and will take all reasonable steps to contain and remediate the breach.

You are responsible for maintaining the security of your own account credentials. We recommend using a strong, unique password for your cbjivip account and enabling two-factor authentication (2FA) where available. Do not share your login details with any third party.

10 Third-Party Services

The cbjivip Platform integrates with a number of third-party services to deliver its full functionality — including game content providers, payment processors, and analytics tools. Each of these third parties operates under its own privacy policy and data protection framework. cbjivip is not responsible for the privacy practices of these third parties.

The key third-party service providers whose integrations may involve the processing of player data include:

• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe. These studios receive pseudonymised session data to render their game interfaces. Refer to each studio's published privacy documentation for full details.
• Payment processors — bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks. These providers process your financial transaction data under their own regulated privacy and security frameworks.
• Identity verification providers — Third-party KYC platforms used to assist with document authentication during the player verification process. Documents are processed on our behalf and under our instruction only.

cbjivip carefully vets all third-party providers before integration, requiring contractual commitments to data security and confidentiality. We do not permit any third-party provider to use your personal data for their own marketing or commercial purposes beyond the scope of the service they provide to cbjivip.

11 Changes to This Policy

cbjivip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes to this Policy, we will notify registered players by email to their registered address and/or by displaying a prominent notice on the Platform at least 7 days before the changes take effect.

The "Effective Date" shown at the top of this page will be updated each time the Policy is revised. We encourage you to review this page periodically to stay informed about how cbjivip protects your personal data. The version of the Policy in effect at the time of any processing activity is the version that governs that activity.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change, you have the right to close your account and request deletion of your personal data, subject to our legal retention obligations described in Section 7.

12 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cbjivip handles your personal data, our Data Privacy Team is available to assist you. Please use the contact details below:

• Email: [email protected] (subject line: "Privacy Request — [Your Username]")
• Live Chat: Available 24 hours a day, 7 days a week through your account dashboard
• Operating Hours: 24 hours / 7 days (Bangladesh Standard Time, UTC+6)

We aim to acknowledge all privacy-related communications within 48 hours and to provide a full written response within 30 calendar days. Complex requests involving large volumes of data or requiring legal review may take up to 60 days, in which case we will notify you of the extended timeline within the initial 30-day period.

If you are not satisfied with the response you receive from the cbjivip Data Privacy Team, or if you believe your personal data is being processed in a manner inconsistent with this Policy, you have the right to escalate your complaint in writing. Address formal escalations to [email protected] with the subject line "Formal Privacy Complaint — [Your Username]", including a full description of your concern and copies of any relevant prior correspondence. Our compliance team will conduct an independent review and provide a final written determination within 30 days of receipt.