cb888 Privacy Policy

1 Introduction

cb888 ("we," "us," "our," "the Company") operates the online gaming platform accessible at cb888.im, offering casino games, sports betting, live dealer tables, and related entertainment services to players in Pakistan. We are committed to protecting the privacy and personal data of every individual who accesses, registers with, or uses our platform.

This Privacy Policy ("Policy") describes how cb888 collects, uses, stores, shares, and protects your personal data. It applies to all users of the cb888 website, mobile web application, and any associated services. By registering for or using cb888, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and cb888.

2 Data We Collect

cb888 collects personal data across several categories depending on how you interact with the platform. The table below outlines the categories of personal data we collect and specific examples of each:

cb888 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information, except where directly relevant to a responsible gaming intervention or where required by applicable law.

3 How We Collect Data

cb888 collects your personal data through the following means:

• Direct Registration: When you create a cb888 account, you voluntarily provide your name, date of birth, mobile number, email address, and city. This information forms the core of your player profile.
• KYC Verification: When prompted to verify your identity, you submit copies of your CNIC, proof of address, and proof of payment method ownership. These documents are processed by our verification team and authorised third-party identity verification providers.
• Payment Transactions: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or Visa/Mastercard, your payment provider shares transaction metadata with cb888 to confirm the transfer. cb888 does not store full card numbers on its own servers.
• Platform Usage: Our systems automatically log technical and usage data every time you access cb888. This includes your IP address, device fingerprint, pages visited, games launched, bets placed, and session length. This data is collected using server logs and first-party analytics tools.
• Cookies and Tracking Technologies: cb888 uses first-party cookies and similar technologies to maintain your login session, remember your preferences, and analyse platform performance. See Section 7 for full details on cookies.
• Support Communications: When you contact cb888 via live chat or email, we retain records of those communications for quality assurance, compliance, and dispute resolution purposes.

4 How We Use Your Data

cb888 uses your personal data for the following purposes:

• Account Management: To create, maintain, verify, and administer your cb888 player account, including processing deposits and withdrawals in PKR.
• Identity Verification (KYC): To confirm that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your payment methods belong to you — as required by our licensing obligations.
• Service Delivery: To provide you with access to casino games, sports betting markets, live dealer tables, bonus promotions, and all other cb888 services.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited activities outlined in our Terms and Conditions.
• Responsible Gaming Compliance: To monitor your betting patterns, enforce deposit limits you have set, process self-exclusion requests, and intervene where problematic gambling behaviour is detected — as part of our duty of care to all players.
• Legal and Regulatory Compliance: To meet our obligations under applicable gaming regulations, anti-money laundering laws, and any lawful requests from competent authorities.
• Customer Support: To respond to your queries, resolve complaints, and maintain records of communications for quality assurance purposes.
• Platform Improvement: To analyse aggregated usage data (anonymised where possible) to improve the cb888 platform, fix bugs, optimise game performance, and develop new features.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have consented to receive such communications. You may withdraw marketing consent at any time by contacting support.

5 Legal Basis for Processing

cb888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to fulfil the contract established when you register a cb888 account and accept our Terms and Conditions. Without this processing, we cannot provide our services to you.
• Legal Obligation: We are required by law and by the conditions of our operating licence to conduct KYC verification, maintain transaction records, report suspicious activity, and enforce responsible gaming measures. This processing is not optional.
• Legitimate Interests: We process technical and usage data on the basis of our legitimate interest in maintaining a secure, fair, and well-functioning platform. This includes fraud detection, security monitoring, and platform analytics. We ensure that this processing does not override your fundamental privacy rights.
• Consent: Where we rely on consent — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

cb888 does not sell your personal data. We share personal data only in the following circumstances, and only to the minimum extent necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and Visa/Mastercard processing partners receive transaction data necessary to process your deposits and withdrawals. These entities operate under their own privacy policies and are bound by financial regulation.
• Identity Verification Providers: Third-party KYC and AML (Anti-Money Laundering) service providers receive copies of identity documents you submit. These providers are contractually obligated to handle your data securely and use it only for verification purposes.
• Fraud Prevention Agencies: Where fraud, money laundering, or other prohibited activity is suspected, we may share relevant data with specialist fraud prevention agencies and financial intelligence units.
• Regulatory and Law Enforcement Authorities: cb888 will disclose personal data to competent authorities when legally required to do so, including in response to valid court orders, regulatory investigations, or anti-money laundering reporting obligations.
• Game Software Providers: Certain game providers may receive anonymised session data (such as game round outcomes and RTP metrics) for auditing and technical support purposes. No personally identifiable information is shared with game providers for this purpose.
• Business Transfers: In the event of a merger, acquisition, or sale of cb888's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.

7 Cookies & Tracking Technologies

cb888 uses cookies and similar technologies to make the platform work correctly, keep your session active, and understand how players use our services. We use only first-party cookies — we do not allow third-party advertising networks to place tracking cookies on cb888.

• Essential Cookies: Required for the platform to function. These include your session authentication cookie, CSRF protection tokens, and language preference settings. You cannot disable essential cookies without breaking core platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate cb888 — which pages are visited most, where players drop off, and how long sessions last. This data is used solely to improve the platform.
• Preference Cookies: Store your personalised settings such as your preferred game category, display language, and responsible gaming notification preferences so that you do not need to reset them on every visit.

You can manage cookie settings through your browser's privacy controls. Disabling non-essential cookies will not prevent you from using cb888, but may affect the personalisation features of the platform.

8 Data Security

cb888 implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, and disclosure. Our security measures include:

• TLS 1.3 encryption for all data transmitted between your device and cb888 servers.
• AES-256 encryption for sensitive data stored in our databases, including financial records and identity documents.
• Multi-factor authentication options for all player accounts and mandatory two-factor authentication for all cb888 staff accessing player data.
• Regular third-party security audits and penetration testing of the cb888 platform infrastructure.
• Role-based access controls ensuring that cb888 staff can only access the minimum personal data necessary to perform their specific job function.
• Incident response procedures that require notification to affected players and relevant authorities in the event of a data breach that poses a material risk to player rights and freedoms.

9 Data Retention

cb888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Active Account Data: Retained for the full duration your cb888 account remains open and active.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the date of the transaction, in line with standard anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the last transaction, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the communication.
• Responsible Gaming Records: Self-exclusion and deposit limit records are retained for a minimum of five (5) years to prevent circumvention of responsible gaming protections.
• Marketing Consent Records: Records of your consent to or withdrawal from marketing communications are retained for as long as necessary to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.

10 Your Rights

As a cb888 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request." We will respond within 30 days.

11 Children & Minors

cb888 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires you to confirm your date of birth, and our KYC verification process independently verifies age through government-issued identity documents such as the Pakistani CNIC.

If cb888 discovers or is notified that a registered account belongs to a person under 21 years of age, we will immediately suspend the account, void any winnings generated during the period of underage use, return deposited funds to the originating payment method where possible, and permanently delete all personal data associated with the underage account from our active systems in accordance with our retention schedule.

If you are a parent or guardian and believe that a minor in your care has registered on cb888 without your knowledge, please contact us immediately at [email protected] so that we can take swift action.

12 Changes to This Policy

cb888 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email and through a prominent notice on the cb888 platform at least seven (7) days before the revised Policy takes effect — except where immediate changes are required by law or regulatory instruction.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of cb888 following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you disagree with a change to this Policy, you may close your cb888 account before the amendment takes effect by contacting our support team. Closing your account does not affect the lawfulness of any data processing that took place prior to closure.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cb888 holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is routed correctly.
• Live Chat: Available 24 hours a day, 7 days a week via the cb888 platform. For data rights requests, email is preferred as it creates a written record.
• Response Time: cb888 aims to acknowledge all privacy-related requests within 48 hours and to fulfil them within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days and will notify you accordingly.