CB888 Privacy Policy – How We Protect Your Data in Pakistan

01Data Controller

The data controller responsible for the personal information collected through the CB888 platform is the company that owns and operates cb888.click. CB888's registered operational contact for data-related matters is reachable at support@cb888.click.

As data controller, CB888 determines the purposes and means by which your personal data is processed. Where CB888 engages third-party service providers to process data on its behalf — for example, payment processors or identity verification services — those providers act as data processors under CB888's instructions and are contractually bound to handle your data only for the purposes specified by CB888 and in accordance with appropriate data protection standards.

02What Data CB888 Collects

CB888 collects personal data in the following categories. We collect only the information we actually need — no more.

CB888 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information as part of normal platform operation. If such data is ever shared with CB888 inadvertently — for example, in an identity document — it is not recorded or processed beyond what is necessary for the identity verification purpose.

03How CB888 Uses Your Data

CB888 uses the personal data it collects for the following specific purposes. Each purpose is matched to a legal basis — described in the next section — that justifies the processing.

• Account creation and management: Your identity, contact, and login data is used to create and maintain your CB888 account, authenticate your logins, and communicate account-related information to you.
• Identity verification: CB888 uses identity documents and personal details to verify that you are who you say you are, that you meet the minimum age requirement of 18, and that you are not subject to any exclusion or restriction that prevents you from using the platform.
• Payment processing: Financial data is used to process deposits and withdrawals via your chosen PKR payment method and to match transactions to the correct account.
• Fraud prevention and security: Technical data including IP addresses, device identifiers, and login patterns is analysed to detect and prevent fraudulent account activity, multi-accounting, bonus abuse, and unauthorised access attempts.
• Regulatory compliance: CB888 is required by its licensing obligations to maintain records of player identity, transaction history, and responsible gaming interventions. This data is retained for the minimum period required by applicable regulations.
• Customer support: Communications data from live chat and email interactions is used to resolve your queries, track complaint progress, and improve the quality of CB888's support service.
• Platform improvement: Aggregated, anonymised technical and usage data is used to improve the CB888 platform — identifying slow-loading pages, improving mobile performance, and understanding which game categories are most popular.
• Responsible gaming monitoring: Responsible gaming data, combined with transaction and session patterns, is used to identify players who may be showing signs of problem gambling and to prompt appropriate support interventions.
• Marketing communications: CB888 may send you promotional emails or in-platform messages about bonuses and new games if you have opted in to marketing communications during registration. You may opt out at any time.

04Legal Basis for Processing

CB888 processes personal data under one or more of the following legal bases for each processing activity.

• Contractual necessity: Processing required to fulfil the contract between CB888 and you as a registered player — account creation, identity verification, payment processing, and game access.
• Legal obligation: Processing required to comply with CB888's regulatory and licensing obligations — anti-money laundering checks, age verification records, transaction reporting, and responsible gaming documentation.
• Legitimate interests: Processing carried out to pursue CB888's legitimate business interests in a way that does not override your rights — fraud prevention, platform security, abuse detection, and platform improvement through anonymised analytics.
• Consent: Processing for which CB888 has obtained your explicit consent — marketing communications. You may withdraw consent for marketing at any time without affecting the validity of any other processing.

05Who CB888 Shares Your Data With

CB888 does not sell your personal data to any third party. Data is shared only with the following categories of trusted service providers, and only to the extent necessary for them to perform their specific function on CB888's behalf.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing partners, and Visa/Mastercard acquiring banks receive the minimum payment data required to process your transactions. These providers have their own privacy policies governing their use of data.
• Identity verification services: CB888 uses third-party identity verification providers to authenticate CNIC documents and confirm player age. These providers receive only the identity data needed for the verification process and are contractually prohibited from using it for any other purpose.
• Game software providers: CB888's game providers — including live dealer studio operators and RNG game developers — may receive a session identifier and anonymised player data to facilitate game delivery. They do not receive your personal identity or financial data.
• Cloud hosting and infrastructure providers: CB888's platform runs on professional cloud infrastructure. Hosting providers have access to server-level data but are contractually bound by strict data processing agreements.
• Regulatory and law enforcement authorities: CB888 will disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where required to do so by law or by its licensing obligations — for example, in the context of anti-money laundering reporting.

06How Long CB888 Keeps Your Data

CB888 retains personal data only for as long as is necessary for the purposes for which it was collected, and in any event no longer than required by applicable law and regulatory obligations.

• Account data and identity documents: Retained for the lifetime of your active CB888 account and for a minimum of five years after account closure, to satisfy anti-money laundering and gaming regulatory record-keeping requirements.
• Transaction records: All deposit, withdrawal, wager, and bonus records are retained for a minimum of five years from the date of the transaction.
• Support communications: Live chat transcripts and email correspondence are retained for two years from the date of the interaction, after which they are deleted or anonymised.
• Technical and session data: IP logs and session records are retained for twelve months for fraud detection and security monitoring purposes, then deleted.
• Responsible gaming records: Self-exclusion, deposit limit, and cool-off records are retained for a minimum of five years to support any future responsible gaming interventions and for regulatory audit purposes.

When the retention period for a data category expires, CB888 securely deletes or permanently anonymises the data so that it can no longer be associated with your identity.

07How CB888 Protects Your Data

CB888 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data exchanged between your device and the CB888 platform is encrypted using TLS 1.2 or higher. This applies to web sessions, API calls, and payment transactions.
• Encryption at rest: Personal data stored in CB888's databases is encrypted at rest. Financial data including payment method details is stored in tokenised form — CB888's systems do not hold full payment credentials.
• Access controls: CB888 employees access player data on a strict need-to-know basis. Role-based access controls limit which staff members can view which categories of data. All internal access to player data is logged for audit purposes.
• Infrastructure security: CB888's platform runs on professionally managed cloud infrastructure with automated security monitoring, intrusion detection, and regular penetration testing.
• Staff training: CB888 staff with access to player data receive data protection and information security training as part of their onboarding and on an ongoing basis.

No digital platform can guarantee absolute security against all threats. In the unlikely event of a data breach that affects your personal data in a material way, CB888 will notify you and the relevant regulatory authority within the timeframes required by applicable law.

08Cookies and Tracking Technologies

CB888 uses cookies and similar tracking technologies on cb888.click and in the CB888 mobile application. Cookies are small text files stored on your device that allow the platform to function correctly and to understand how it is being used.

• Essential cookies: Required for the CB888 platform to function. These include session authentication cookies that keep you logged in during a gaming session, security tokens, and cookies that remember your language and regional preferences. These cannot be disabled without breaking platform functionality.
• Functional cookies: Store your preferences — such as game display settings, lobby layout choices, and responsible gaming tool configurations — so you do not have to re-enter them each session.
• Analytics cookies: CB888 uses anonymised, aggregated analytics to understand how players navigate the platform — which pages load slowly, where users exit the registration flow, which game categories generate most engagement. This data does not identify individual players.
• Fraud prevention cookies: Technical identifiers stored by CB888's fraud detection systems to identify multi-accounting, automated bot activity, and suspicious session patterns.

CB888 does not use advertising cookies or third-party tracking pixels from social media or advertising networks. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from accessing the CB888 platform.

09Your Privacy Rights

As a CB888 player, you have the following rights in relation to your personal data. CB888 will respond to all data rights requests within 30 days of receipt. In complex cases we may extend this by a further 30 days, in which case we will notify you of the extension and the reason for it.

10Children and Minors

CB888 is strictly an adult platform. No person under the age of 18 is permitted to register a CB888 account or access any part of the platform that involves real-money gaming. CB888 does not knowingly collect personal data from anyone under 18.

Age verification is performed during the registration process and again before any withdrawal is processed. If CB888 discovers that a minor has registered an account, the account will be closed immediately, any deposits will be returned to the deposit source, and any winnings will be forfeited. All personal data associated with the minor's account will be securely deleted beyond the minimum records required for regulatory reporting of the age verification failure.

If you are a parent or guardian and you believe your child may have registered a CB888 account, please contact support@cb888.click immediately. CB888 will act on this information as a priority.

11Changes to This Privacy Policy

CB888 reviews this Privacy Policy regularly and will update it when the platform's data practices change, when new services are introduced, or when applicable laws and regulations require amendments. The date of the most recent update is shown at the top of this page.

When significant changes are made to this policy — changes that materially affect how CB888 uses your personal data or your rights in relation to it — CB888 will notify registered players via the email address on their account and through an in-platform notification. Minor clarifications and formatting updates will not be separately notified but will be reflected in the updated date at the top of this page.

Continued use of the CB888 platform after an updated Privacy Policy has come into effect constitutes your acceptance of the revised policy. If you disagree with any changes, you may close your CB888 account by contacting support — your data will be retained only for the regulatory minimum period and then deleted or permanently anonymised.

12Contact CB888 About Privacy

Any question, request, or complaint relating to CB888's handling of your personal data should be directed to:

• Email: support@cb888.click — marked "Privacy Request" in the subject line for fastest routing
• Live Chat: Available 24/7 on cb888.click — ask to be connected to the data protection team for formal requests

CB888 acknowledges all privacy-related requests within 48 hours and aims to provide a full response within 30 days. For Subject Access Requests or erasure requests, you will be asked to provide proof of identity before the request is processed — this is to protect your data from being disclosed or deleted based on an impersonated request.