Privacy Policy

When you register and use the cdaji platform, we collect a range of personal information necessary to provide you with a safe, compliant, and personalised betting and gaming experience. The categories of information we collect are described below.

Registration & Identity Data

When you open a cdaji account, you voluntarily provide us with the following information: your full legal name, date of birth, gender, residential address (including city — whether Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere in Bangladesh), email address, and mobile phone number. This information is required to create and maintain your account and to verify your identity in accordance with our KYC obligations.

Financial & Transaction Data

When you make a deposit or request a withdrawal, cdaji records the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), the transaction amount in Bangladeshi Taka (BDT), the date and time of the transaction, and relevant payment reference identifiers. We do not store full card numbers — payment card data is handled by PCI-DSS compliant payment processors and is never held in its entirety on cdaji servers.

Gameplay & Betting Activity

cdaji automatically records your gameplay history, including the games played, bet amounts, win/loss outcomes, session durations, and bonus usage. This data is used to personalise your experience, calculate VIP tier eligibility, and meet our responsible gaming obligations.

Device & Technical Data

When you access cdaji via a web browser or mobile device, we automatically collect certain technical information: your IP address, browser type and version, operating system, device model, screen resolution, time zone setting (we display times in Bangladesh Standard Time, BST UTC+6), and referring URL. This data is used for security monitoring, fraud detection, and platform optimisation.

Communications Data

When you contact our support team via live chat or email, we retain a record of that communication — including your message content, timestamps, and any attachments — for the purposes of resolving your query, improving our service quality, and maintaining an accurate record of our support interactions.

Data Category	Examples	Collection Method
Identity	Full name, date of birth, NID/passport number, address	Provided by player at registration / KYC
Contact	Email address, mobile number	Provided by player at registration
Financial	Payment method, transaction amount (৳), reference IDs	Recorded automatically at transaction
Gameplay	Bet history, session length, game outcomes, bonus usage	Recorded automatically during platform use
Technical	IP address, browser type, device model, OS	Collected automatically via server logs
Communications	Live chat transcripts, email correspondence	Recorded when you contact support

cdaji processes your personal data only for legitimate, clearly defined purposes. We do not use your information for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which cdaji uses your personal data are as follows:

Account Management & Service Delivery

We use your registration and identity data to create and manage your cdaji account, authenticate your login sessions, process deposits and withdrawals, and credit bonuses and VIP rewards to your account. Without this processing, cdaji cannot provide you with its core betting and gaming services.

Identity Verification & Fraud Prevention

cdaji uses your identity, financial, and technical data to verify your age (18+ requirement), confirm your identity during KYC reviews, detect suspicious transaction patterns, prevent money laundering, and identify fraudulent or abusive account activity. This processing is essential to maintain the integrity and security of the cdaji platform for all players.

Responsible Gaming Oversight

We analyse your gameplay and session data to monitor for indicators of problem gambling behaviour — such as extended uninterrupted sessions, rapidly escalating bet sizes, or patterns consistent with chasing losses. Where such indicators are identified, cdaji's responsible gaming team may reach out proactively. This processing is conducted in the interest of player welfare and is a core commitment of the cdaji platform.

Customer Support

Your communications data and account history are used by our support team to resolve your queries efficiently, investigate complaints, and improve the quality of our assistance. Support communications are conducted in English and are available 24/7.

Marketing & Promotions

With your consent, cdaji may use your contact details and gameplay preferences to send you personalised promotional communications — including bonus offers, seasonal promotions tied to BPL season, Eid, Pohela Boishakh, and cdaji VIP programme updates. You may withdraw your marketing consent at any time by contacting support at [email protected] or via the communication preferences section of your account dashboard. Withdrawal of marketing consent does not affect your ability to continue using the cdaji platform.

Platform Improvement & Analytics

Aggregated, anonymised technical and gameplay data is used to analyse platform performance, identify usability issues, optimise game loading times, and improve the overall cdaji user experience. Where data is fully anonymised such that no individual player can be identified, it falls outside the scope of personal data processing.

cdaji does not sell, rent, or trade your personal information to any third party for commercial gain. We share your data only in the limited, specific circumstances described below, and only to the extent necessary for each purpose.

Payment Service Providers

To process your deposits and withdrawals, cdaji shares the minimum necessary financial data with our payment processing partners — including the operators of bKash, Nagad, Rocket, and Upay integrations, as well as Visa and Mastercard network processors. These partners receive only the transaction data required to execute the payment; they do not receive your full cdaji account history or gameplay data.

Game Content Providers

Games on the cdaji platform are provided under licence from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your account session token and, in the case of live casino games, may process your in-game actions on their own servers. Their handling of such data is governed by their own privacy policies and data processing agreements with cdaji.

Identity Verification & KYC Partners

To fulfil our age verification and KYC obligations, cdaji may share identity documents you submit (NID card, passport, driver's licence, address proof) with trusted third-party identity verification service providers. These providers are contractually bound to process your data solely for the purpose of verification and in strict compliance with applicable data protection standards.

Legal & Regulatory Disclosure

cdaji may be required to disclose your personal data to relevant authorities, law enforcement agencies, or regulatory bodies where required by applicable law — including in connection with anti-money-laundering investigations, court orders, or official requests. In such circumstances cdaji will disclose only the data specifically required and will do so in strict accordance with legal process. Where permitted by law, cdaji will notify you of such a disclosure.

Business Transfers

In the event that cdaji undergoes a merger, acquisition, or sale of all or a substantial part of its assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances cdaji will take reasonable steps to ensure that your privacy rights continue to be respected under the successor's privacy policy, and we will notify you of any material change to the processing of your data.

The cdaji website uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players interact with the site at an aggregate level. This section explains the types of cookies we use and how you can manage your preferences.

What Are Cookies?

Cookies are small text files placed on your device by a web server when you visit a website. They are widely used to make websites work efficiently and to provide information to site operators. Cookies do not give cdaji access to your device beyond the specific information they are designed to store.

Cookie Type	Purpose	Retention
Strictly Necessary	Session authentication, security tokens, login state, CSRF protection	Session (deleted on browser close)
Functional	Remembering language preference (English), game layout preferences, odds display format	Up to 12 months
Analytics	Aggregate page view counts, feature usage statistics, error logging — all anonymised	Up to 24 months (anonymised)

Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential for the cdaji platform to function. You may control functional and analytics cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or alert you when a new cookie is set. Please note that disabling functional cookies may affect certain platform features — for example, your session may not be remembered between visits.

Instructions for managing cookies in popular browsers are available through each browser's own help documentation (Chrome, Firefox, Safari, Edge, Opera). These are external resources and cdaji does not link to them directly in this policy.

cdaji retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any overriding legal, regulatory, or compliance obligation that requires us to retain data for a longer defined period.

Data Category	Retention Period	Reason
Account & Identity Data	Duration of account + 5 years post-closure	AML compliance, legal disputes, regulatory audit
Transaction Records	7 years from transaction date	Financial record-keeping obligations
KYC Documents	5 years post account closure	Regulatory compliance and fraud prevention
Gameplay History	3 years from last active session	Responsible gaming review, dispute resolution
Support Communications	3 years from interaction date	Service quality, complaint handling
Marketing Preferences	Until consent withdrawn + 1 year	Evidence of consent and opt-out compliance
Analytics Data (anonymised)	Up to 24 months	Platform improvement (no personal identifiers)

At the conclusion of the applicable retention period, cdaji will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Anonymised data from which no individual can be identified may be retained indefinitely for aggregate statistical purposes.

As a cdaji player, you hold a number of rights in relation to your personal data. cdaji is committed to honouring these rights promptly and transparently. The following rights are available to you:

Right of Access (Subject Access Request)

You have the right to request a copy of all personal data that cdaji holds about you. Upon receipt of a valid Subject Access Request, cdaji will provide you with a structured summary of your data within a reasonable timeframe. To submit a Subject Access Request, contact the cdaji support team via live chat or email [email protected] with the subject line "Subject Access Request".

Right to Rectification

If any personal data cdaji holds about you is inaccurate, incomplete, or out of date, you have the right to request that we correct it. You may update certain account details directly within your cdaji account dashboard, or request corrections via the support team for data that cannot be self-edited.

Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that cdaji cannot erase data that it is legally required to retain — for example, transaction records subject to financial record-keeping obligations. Where full erasure is not possible, cdaji will anonymise the remaining data.

Right to Restrict Processing

You have the right to request that cdaji restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or while an objection to processing on legitimate interests grounds is being considered.

Right to Object

You have the right to object to cdaji's processing of your personal data where that processing is based on legitimate interests. You also have the right to object at any time to the use of your data for direct marketing purposes. Marketing opt-outs take effect immediately upon receipt by our team.

Right to Data Portability

Where cdaji processes your data on the basis of your consent or in performance of a contract, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another data controller where technically feasible.

cdaji takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Encryption

All data transmitted between your browser or mobile device and the cdaji platform is protected using 256-bit SSL (Secure Sockets Layer) encryption. Data stored on cdaji servers is encrypted at rest using industry-standard encryption protocols. Payment card data is handled exclusively by PCI-DSS certified payment processors and is never stored in unencrypted form on cdaji infrastructure.

Access Controls

Access to personal data within cdaji's internal systems is restricted on a strict need-to-know basis. Team members are granted access only to the data categories required to perform their specific role — for example, the responsible gaming team can access gameplay history but does not have access to payment card reference data beyond what is necessary for their function. All internal access events are logged and audited regularly.

Fraud & Intrusion Detection

cdaji operates real-time fraud detection and intrusion monitoring systems that analyse account activity and network traffic for anomalous patterns. Where a potential security incident is identified, our security team is alerted immediately and investigative action is taken to contain and resolve the issue as rapidly as possible.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, cdaji will take immediate steps to contain the breach, assess the scope and severity of the incident, and — where required — notify affected players and relevant authorities within the timeframe required by applicable law. Notifications will be sent to your registered email address and will include a clear description of the nature of the breach, the data categories affected, and the steps cdaji is taking in response.

Employee Training

All cdaji staff members with access to personal data undergo mandatory data protection and security awareness training. Our internal policies and procedures are reviewed and updated regularly to reflect evolving best practices and applicable legal requirements. Compliance with our data protection standards is a condition of employment at cdaji.

cdaji reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered address and will display a prominent notice on the cdaji platform for a reasonable period following the update.

Minor or administrative changes (such as corrections to spelling or formatting, or updates to our contact details) may be made without specific notification to players. The "Effective" date displayed at the top of this policy will always reflect the date of the most recent revision.

Your continued use of the cdaji platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes made to this Privacy Policy, you should cease using the cdaji platform and close your account in accordance with the procedure described in our Terms & Conditions. We encourage you to review this page periodically so that you remain informed about how cdaji protects your personal information.

The current effective version of this Privacy Policy is always available at https://cdaji.net/privacy-policy. For all privacy-related inquiries, contact the cdaji support team via live chat or send a written query to [email protected] (plain text — not a clickable link). We are available around the clock, 24 hours a day, 7 days a week, including Bangladeshi public holidays.