cb888 Privacy Policy

1 Introduction

cb888 ("cb888", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the cb888 platform. This Privacy Policy describes, in plain and accessible language, exactly what personal data cb888 collects from Pakistani players and other users of the platform, why that data is collected, how it is used, who it may be shared with, and for how long it is retained.

We encourage you to read this Privacy Policy in full before using the cb888 platform. This document should be read alongside cb888's Terms & Conditions, which are available at cb888.today/terms-conditions.

Privacy and data security are not afterthoughts at cb888 — they are built into the platform's design and operations from the ground up. Pakistani players entrust cb888 with sensitive personal and financial information, and we take that trust seriously.

2 Data Controller

For the purposes of this Privacy Policy, cb888 acts as the data controller in respect of personal data collected directly from players through the cb888 platform. As data controller, cb888 determines the purposes and means by which personal data is processed.

Where cb888 engages third-party service providers to process personal data on its behalf (for example, KYC verification providers, payment processors, and analytics services), those providers act as data processors under cb888's instructions and are bound by data processing agreements that restrict their use of player data to the purposes defined by cb888.

For all data-related enquiries, requests, or complaints, players may contact cb888's data team through the support contact provided in Section 16 of this Privacy Policy.

3 Personal Data We Collect

cb888 collects personal data in the following categories:

3.1 Identity & Registration Data

• Full legal name as it appears on your Pakistani national identity document (CNIC, NICOP, or passport)
• Date of birth (to verify that you are at least 21 years of age)
• Gender (where provided)
• cb888 account username and password (stored in hashed, non-reversible form)
• Registered Pakistani mobile number
• Registered email address
• City and province of residence within Pakistan

3.2 KYC & Verification Documents

• Scanned or photographed copy of your CNIC, NICOP, or passport
• Proof of payment method ownership (e.g., screenshot of your JazzCash or EasyPaisa account registration)
• Any additional identity documents requested during enhanced due diligence procedures

3.3 Financial & Transaction Data

• Deposit amounts, dates, and payment method references
• Withdrawal amounts, dates, and destination account references
• Transaction history in PKR
• Bonus and promotional credit transaction records

3.4 Gameplay & Betting Data

• Game session data including games played, bet amounts, outcomes, and session duration
• Sports betting history including markets wagered on, stake amounts, and results
• Responsible gaming tool settings and activity (deposit limits, session limits, self-exclusion requests)

3.5 Technical & Device Data

• IP address at time of login and during platform sessions
• Device type, operating system, and browser type
• Mobile network operator (Jazz, Telenor, Zong, Ufone, or Warid)
• Geolocation data derived from IP address (city/region level — not GPS-level precision)
• Platform interaction logs (pages visited, features used, error reports)

3.6 Communications Data

• Contents of live chat conversations with cb888 customer support
• Support ticket history and email correspondence with cb888
• Feedback, survey responses, and voluntary communications submitted to cb888

4 How We Collect Your Data

cb888 collects personal data through the following means:

• Directly from you: When you register a cb888 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotion.
• Automatically from your device: Through cookies, session tracking, and server log files when you access and use the cb888 platform — see Section 8 for details on cookies.
• From third-party KYC providers: When our identity verification partners confirm or supplement identity information during the KYC verification process.
• From payment processors: Transaction confirmation data is received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment providers when you initiate deposits or withdrawals.
• From fraud prevention services: Where cb888 uses third-party fraud detection tools, those tools may provide risk signals derived from device fingerprinting, IP reputation data, and behavioural analytics.

5 How We Use Your Personal Data

cb888 uses the personal data described in Section 3 for the following purposes:

6 Legal Bases for Processing

cb888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account registration, KYC verification, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money-laundering (AML) regulations, identity verification obligations, and data retention requirements mandated by law.
• Legitimate interests: Processing necessary for cb888's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — provided those interests are not overridden by your privacy rights.
• Consent: Processing for purposes such as optional marketing communications, where cb888 has obtained your prior, freely-given, specific, informed, and unambiguous consent. You may withdraw consent at any time by contacting cb888 support.

7 Data Sharing & Third Parties

cb888 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes of delivering the cb888 service:

7.1 Service Providers

cb888 engages third-party service providers who process personal data on our behalf under strict data processing agreements. These include KYC and identity verification providers, payment processing partners (including JazzCash and EasyPaisa integrations), cloud hosting and infrastructure providers, customer support platform providers, and fraud and risk management providers. All such providers are contractually restricted from using player data for any purpose beyond the specific service they provide to cb888.

7.2 Game Software Providers

To deliver casino games and certain sports betting markets, cb888 integrates with third-party game studios and data providers. Limited technical data (such as session tokens and game round identifiers) may be passed to these providers to facilitate gameplay. These providers do not receive personally identifiable information beyond what is necessary to authenticate game sessions.

7.3 Legal & Regulatory Authorities

cb888 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory requirement. cb888 will, where legally permitted, notify affected players of such disclosures.

7.4 Business Transfers

In the event that cb888's business or assets are transferred to a third party (through a merger, acquisition, or asset sale), player personal data may be transferred as part of that transaction. Affected players will be notified in advance where practicable, and the acquirer will be required to honour the commitments made in this Privacy Policy or provide players with an opportunity to opt out of the transfer.

8 Cookies & Tracking Technologies

The cb888 platform uses cookies and similar tracking technologies to deliver core platform functionality, maintain your login session, and improve your experience. The following categories of cookies are used on cb888:

8.1 Strictly Necessary Cookies

These cookies are essential for the cb888 platform to function. They maintain your login session, remember your account preferences, protect against cross-site request forgery attacks, and ensure that game sessions are correctly attributed to your account. These cookies cannot be disabled without preventing core platform functionality from working.

8.2 Performance & Analytics Cookies

cb888 uses aggregated, anonymised analytics data to understand how players navigate and use the platform — which pages are visited most frequently, where players encounter errors, and how game lobby performance compares across device types. This data is used solely to improve the cb888 platform experience. It is not linked to individual player identities in our analytics systems.

8.3 Functional Cookies

These cookies remember preferences you have set on cb888 — such as language preferences, game filter settings, and responsible gaming limit acknowledgements — so that you do not have to reset them on each visit.

8.4 Managing Cookies

You may manage non-essential cookies through your browser settings. Please note that disabling performance or functional cookies may affect your cb888 platform experience, and disabling strictly necessary cookies will prevent you from logging in and using the platform altogether.

9 Data Retention

cb888 retains personal data for the following periods:

• Active account data: Retained for the full duration of your cb888 account and for a minimum of 5 years following account closure, to meet anti-money-laundering (AML) record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years following account closure or the last transaction, whichever is later.
• Customer support communications: Retained for 2 years from the date of the last interaction, to facilitate resolution of any subsequent disputes.
• Technical and device data: Typically retained for 12 months from collection, unless retained longer as part of a fraud or security investigation.
• Marketing communication preferences: Retained until you withdraw consent or close your account.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Data Security

cb888 implements a range of technical and organisational measures to protect player personal data against unauthorised access, disclosure, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and cb888 servers;
• Encryption at rest for all stored personal data, particularly identity documents, financial data, and login credentials;
• Passwords stored using one-way cryptographic hashing — cb888 staff cannot access your password in plaintext;
• Role-based access controls ensuring that cb888 staff can only access the player data necessary for their specific function;
• Regular security assessments and penetration testing of the cb888 platform infrastructure;
• Two-factor authentication (2FA) available for player accounts to provide additional login security;
• 24/7 monitoring of platform infrastructure for anomalous activity indicative of breach attempts.

While cb888 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. In the event of a security incident affecting your data, cb888 will notify you promptly via your registered email address and will take immediate steps to contain and resolve the incident.

11 Your Rights Over Your Personal Data

As a cb888 player, you have the following rights in respect of your personal data held by cb888:

• Right of access: You may request a copy of the personal data cb888 holds about you. cb888 will provide this within 30 days of a verified request.
• Right to rectification: If any of your personal data held by cb888 is inaccurate or incomplete, you may request that it be corrected. Certain data (such as your registered name or date of birth) may require re-submission of KYC documentation to amend.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected — you may request that cb888 delete your personal data. This right is subject to legal retention obligations that may require cb888 to retain certain data regardless of your request.
• Right to restrict processing: You may request that cb888 restrict the processing of your personal data in specific circumstances, such as where you contest its accuracy or have objected to its processing.
• Right to object: You may object to the processing of your personal data where cb888 is processing it on the basis of legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where cb888 processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact cb888 support with your request. cb888 will verify your identity before processing any data rights request and will respond within 30 days. Where requests are complex or numerous, this period may be extended by a further 30 days with prior notice to you.

12 Children's Privacy

The cb888 platform is strictly intended for adults aged 21 and above. cb888 does not knowingly collect, process, or store personal data from individuals under 21 years of age. Age verification is a mandatory step in the cb888 account registration process, and KYC documentation confirming age is required before withdrawals are processed.

If cb888 becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, any deposited funds will be returned to the payment source used (less any amounts wagered), and all associated personal data will be deleted from cb888 systems promptly. If you have reason to believe that a person under 21 has created a cb888 account, please contact cb888 support immediately.

13 International Data Transfers

The cb888 platform serves players primarily located in Pakistan. Certain third-party service providers engaged by cb888 — such as cloud hosting infrastructure providers and certain analytics platforms — may process data on servers located outside Pakistan. Where such international data transfers occur, cb888 ensures that appropriate safeguards are in place to protect the personal data of Pakistani players, including contractual data processing agreements with the relevant service providers that impose data protection obligations consistent with applicable standards.

cb888 does not transfer player personal data to third parties located outside the service provider relationships described in Section 7 of this Privacy Policy without your prior consent, except where required by applicable law.

14 Third-Party Links

The cb888 platform may from time to time contain links to third-party websites or services (for example, within informational content). This Privacy Policy applies solely to the cb888 platform and does not govern the data practices of any third-party website or service that may be linked to from cb888. cb888 is not responsible for the privacy practices of any third-party sites and recommends that you review the privacy policies of any third-party site you visit.

15 Updates to This Privacy Policy

cb888 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the cb888 platform. Where changes are material — meaning they significantly affect how we process your personal data or your rights in respect of that data — cb888 will provide notice to registered players via their registered email address at least 14 days before the changes take effect.

The date at the top of this Privacy Policy reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Continued use of the cb888 platform following publication of any revised Privacy Policy constitutes your acknowledgement of the revised policy.

The current version of this Privacy Policy is always available at cb888.today/privacy-policy.

16 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by cb888, please contact our support team via the live chat function on the cb888 platform, which is available 24 hours a day, 7 days a week. You may also submit a written enquiry via the support email address listed in the footer of this page.

For formal data rights requests — including access, rectification, erasure, or objection requests — please mark your communication clearly as a "Data Rights Request" and include your registered cb888 username and a description of your specific request. cb888 will acknowledge receipt within 2 business days and will respond in full within 30 days of identity verification.