Privacy Policy — co1baji Data Protection Commitment

1. Information We Collect

co1baji collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and — in limited circumstances — from trusted third-party verification partners. The categories of data we collect are described below.

1.1 Registration & Account Data

When you create an account on co1baji, we collect the information you provide in the registration form, which includes:

• Full legal name
• Date of birth (used for age verification — you must be 18 or older)
• Mobile phone number (used for account verification and communication)
• Email address
• Residential address (city, district, division — Bangladesh)
• Preferred currency (Bangladeshi Taka, BDT)
• Username and password (password is stored in hashed, non-reversible form)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request and store copies of identity documents. These may include:

• National Identity Card (NID) — front and back
• Passport (biographical data page)
• Driving licence
• Proof of address (utility bill or bank statement dated within 90 days)
• Selfie photograph for liveness verification

KYC documents are stored securely and accessed only by authorised personnel for the purpose of identity verification and regulatory compliance. They are not shared with third parties except where required by law or by our payment processing partners as part of their own compliance obligations.

1.3 Financial & Transaction Data

co1baji records all financial transactions conducted through the platform. This includes deposit amounts, withdrawal requests, payment method identifiers (such as the last four digits of a bKash or Nagad number), transaction timestamps, and account balance history. We do not store full payment account credentials — only the reference data needed to match transactions to your account.

1.4 Behavioural & Usage Data

We automatically collect certain technical and behavioural data when you use co1baji, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, session duration, and click paths
• Games played, bet history, wagering patterns, and session frequency
• Login timestamps and account activity logs

This data is used for platform security, responsible gaming monitoring, fraud prevention, and improving the user experience. It is not used to build advertising profiles for sale to third parties.

1.5 Communications Data

When you contact our support team via live chat or email, we retain a record of the conversation including the content of your messages, timestamps, and any attachments you provide. This enables us to resolve queries accurately and maintain service quality.

2. How We Use Your Data

co1baji uses your personal data only for the purposes for which it was collected, or for closely related purposes that you would reasonably expect. The table below summarises our primary data uses and the legal basis for each.

2.1 Marketing Communications

co1baji may send you promotional messages about bonuses, new games, and seasonal offers (such as BPL or IPL cricket promotions) via SMS or email — but only where you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your marketing consent at any time by contacting our support team. Withdrawal of marketing consent does not affect the processing of data for other purposes listed above.

2.2 Automated Decision-Making

co1baji uses automated systems to detect fraudulent activity, identify potential responsible gaming risk signals, and enforce bonus eligibility rules. Where an automated decision results in account restriction, you have the right to request a manual review by a member of our team. Contact support via live chat to initiate this process.

3. Cookies & Tracking Technologies

co1baji uses cookies and similar technologies to operate the platform effectively and provide a personalised experience. A cookie is a small text file placed on your device by the site you visit. Cookies do not contain viruses and cannot execute code.

3.1 Types of Cookies We Use

3.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set up notifications when cookies are placed. Note that disabling strictly necessary cookies will prevent certain core platform features — such as staying logged in between pages — from functioning correctly.

4. Data Sharing & Third Parties

co1baji does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Payment Processing Partners

To process deposits and withdrawals, co1baji works with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the transaction reference data necessary to complete the payment. They are contractually bound to handle your data in accordance with applicable data protection standards and may not use it for any other purpose.

4.2 Game Software Providers

Casino and live dealer games on co1baji are powered by third-party software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to load game sessions. They do not receive your full name, contact details, or payment information.

4.3 Identity Verification Services

co1baji may use a third-party KYC verification service to validate identity documents and check against sanctions or PEP (politically exposed person) lists as required by applicable anti-money laundering obligations. Any such provider is contractually restricted to using your data solely for the verification purpose for which it was shared.

4.4 Legal and Regulatory Disclosure

co1baji may disclose your personal data to law enforcement agencies, government authorities, or regulatory bodies where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of users, or fulfil a legal obligation. We will notify you of any such disclosure where we are legally permitted to do so.

5. Data Retention & Security

5.1 How Long We Keep Your Data

co1baji retains your personal data for as long as your account is active and for a defined period afterwards, as required by applicable legal obligations. The general retention schedule is as follows:

• Account and registration data: Retained for the duration of the account plus 5 years after account closure, to meet anti-money laundering record-keeping requirements.
• KYC documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for 5 years from the date of the transaction.
• Customer support communications: Retained for 2 years from the date of the last interaction.
• Analytics data: Retained in anonymised form for up to 3 years.
• Marketing consent records: Retained until consent is withdrawn plus 1 year, to evidence compliance.

When the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

5.2 Security Measures

co1baji implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• SSL/TLS encryption for all data in transit between your browser and our servers
• Encryption at rest for all sensitive data stored in our databases
• Strict role-based access controls — only personnel who need access to personal data to perform their job function are granted it
• Multi-factor authentication for all internal staff accounts with access to production systems
• Regular penetration testing and vulnerability assessments by independent security specialists
• Intrusion detection and anomaly monitoring on all production infrastructure
• Incident response procedures with defined escalation paths and user notification timelines

6. Your Privacy Rights

As a user of co1baji, you have a number of rights with respect to your personal data. These rights are described below. To exercise any of these rights, contact our support team via live chat or by email. We will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

6.1 Right of Access

You have the right to request a copy of the personal data co1baji holds about you. This is sometimes called a Subject Access Request (SAR). We will provide the data in a structured, commonly used, machine-readable format where technically feasible.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly through your account settings page. For changes to identity-verified fields (name, date of birth), you will need to contact support and may be required to provide supporting documentation.

6.3 Right to Erasure

You may request that co1baji delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for processing. Note that we may be legally required to retain certain data (such as transaction records and KYC documents) for a defined period even after a deletion request, in which case we will explain this to you clearly.

6.4 Right to Restrict Processing

You have the right to request that co1baji restricts the processing of your personal data while a dispute about its accuracy or the lawfulness of processing is being resolved. During a restriction period, we will continue to store your data but will not process it further except with your consent or for legal claims.

6.5 Right to Data Portability

Where processing is based on your consent or on a contractual relationship, and processing is carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another data controller where technically feasible.

6.6 Right to Object to Marketing

You have the absolute right to object to your personal data being used for direct marketing purposes at any time. Once you object, we will cease using your data for marketing without requiring any justification from you. To opt out of marketing, contact our support team or update your communication preferences in your account settings.

7. Minors & Age Verification

If you are a parent or guardian and believe that a minor under your care has registered an account on co1baji, please contact our support team immediately via live chat. We take reports of underage access very seriously and will act promptly to investigate and close any such account.

To prevent minors from accessing gambling content, co1baji recommends that parents and guardians use parental control software on shared devices. Free tools are available from a range of providers that allow you to block access to gambling websites at the network or device level.

8. Contact & Policy Updates

8.1 Contacting Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the way co1baji handles your personal data, you can reach us through the following channels:

• Live Chat: Available 24/7 directly on the co1baji platform — the fastest way to reach us.
• Email: support@co1baji — typical response time is 2–12 hours. Please write "Privacy Request" in the subject line.

When contacting us about a data privacy matter, please provide your registered username and a clear description of your query. This will help us locate your account and respond accurately. We may ask for identity verification before actioning any request that involves disclosing or modifying personal data.

8.2 Changes to This Privacy Policy

co1baji reviews this Privacy Policy periodically and will update it to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this policy, we will notify registered users via a platform notification or email to the address on file at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Your continued use of co1baji after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should stop using the platform and request account closure via our support team.