Your Privacy Matters at cb9998

cb9998 collects personal information from players in order to operate the platform, verify identities, process payments, prevent fraud, and comply with applicable legal obligations. The categories of personal data collected by cb9998 are described below.

Registration data — When you create a cb9998 account, we collect your full legal name, date of birth, email address, and mobile phone number. This information is required to create your account and to perform age and identity verification in accordance with our Know Your Customer (KYC) obligations.

Identity verification documents — As part of the KYC process, cb9998 may request copies of government-issued identification documents, such as your National Identity Card (NID), passport, or driving licence, as well as proof of address documentation such as a utility bill or bank statement. These documents are used solely for the purpose of verifying your identity and confirming your eligibility to use the platform.

Payment data — When you make a deposit or request a withdrawal, cb9998 collects the information necessary to process the transaction. For mobile financial service payments (bKash, Nagad, Rocket, Upay), this includes your registered mobile number and transaction reference. For bank transfers and card payments, this includes account numbers, card numbers (stored in tokenised form only), and billing information. cb9998 does not store full card numbers on its servers.

Gameplay and activity data — cb9998 automatically records information about your activity on the platform, including games played, bets placed, wager amounts, session durations, login timestamps, and betting history. This data is used for account management, fraud detection, responsible gaming monitoring, and service improvement.

Technical and device data — cb9998 automatically collects certain technical information when you access the platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data helps us optimise the platform experience and identify suspicious or unauthorised access attempts.

Communications data — If you contact cb9998 through live chat, email, or any other support channel, we retain records of those communications, including the content of messages, timestamps, and any supporting information you provide. This allows us to handle your queries effectively and maintain a complete service history.

The types of personal data collected by cb9998 can be summarised as follows:

cb9998 uses the personal data it collects only for legitimate, defined purposes. We do not use your data for any purpose not described in this Privacy Policy without first obtaining your consent or as otherwise required by applicable law. The primary purposes for which cb9998 processes personal data are set out below.

• Account creation and management: To register your account, authenticate your identity at login, maintain your account settings and preferences, and communicate important account-related information to you.
• Age and identity verification: To confirm that you meet the minimum age requirement of 18 years and to verify that the information you have provided during registration is accurate and complete, in accordance with our KYC obligations.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, and other supported payment methods. Payment data is shared with payment processors only to the extent necessary to complete the relevant transaction.
• Fraud prevention and platform security: To detect and prevent fraudulent activity, money laundering, account sharing, bot usage, and other forms of abuse. Technical and activity data are monitored continuously by our security systems for this purpose.
• Responsible gaming: To monitor your gameplay patterns and identify potential signs of problem gambling, in order to enable timely interventions such as offering cooling-off periods, deposit limits, or self-exclusion options where appropriate.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, respond to lawful requests from competent authorities, and maintain records as required by applicable law.
• Marketing communications: Where you have given your explicit consent, to send you promotional offers, bonus notifications, and news about cb9998 products and features. You may withdraw your consent to receive marketing communications at any time by updating your preferences in account settings or by contacting support.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and features of cb9998 for all players.

cb9998 processes personal data on the following legal bases: (a) performance of the contract between you and cb9998; (b) compliance with a legal obligation; (c) your explicit consent (for marketing communications and non-essential cookies); and (d) legitimate interests pursued by cb9998, where those interests are not overridden by your rights and interests.

cb9998 does not sell your personal data to third parties. We may share your personal data with selected third parties only in the circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: cb9998 shares financial data with payment processors (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard) in order to process deposits and withdrawals. These providers are contractually bound to use your data solely for transaction processing purposes and are prohibited from using it for any other purpose.
• Identity verification providers: cb9998 may use third-party KYC and identity verification services to assist in verifying the information you provide during the account registration and document submission process. Such providers operate under strict data processing agreements with cb9998.
• Game software providers: Certain games on cb9998 are developed and operated by third-party software studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited gameplay data (such as session IDs and bet amounts) for the purpose of operating the game software and auditing game outcomes for fairness. No personally identifying information is shared beyond what is technically required to run the game.
• Legal and regulatory authorities: cb9998 may disclose personal data to competent governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by law, court order, or other binding legal process. We will, where legally permitted, notify affected players before making such a disclosure.
• Fraud prevention agencies: Where cb9998 suspects fraud, money laundering, or other serious misconduct, we may share relevant data with fraud prevention agencies or other operators to protect the integrity of the platform and the wider industry.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of assets involving cb9998, personal data held by cb9998 may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of any such transfer that materially affects how their data is handled.

cb9998 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow cb9998 to recognise your browser across sessions, remember your account preferences, and collect aggregate analytics data.

cb9998 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the basic operation of cb9998. They enable core functions such as user authentication, session management, and security features. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional cookies: These cookies remember your preferences (such as language settings, preferred currency display between BDT and INR, and notification settings) to personalise your experience on the platform.
• Analytics cookies: cb9998 uses analytics tools to collect aggregated, anonymised data about how players interact with the platform — including pages visited, features used, and session lengths. This data is used to understand user behaviour and improve platform performance. Analytics cookies require your consent and may be disabled via your account cookie preferences.
• Marketing cookies: Where you have consented, cb9998 may use marketing cookies to track your engagement with promotional content and to measure the effectiveness of our marketing campaigns. These cookies do not profile you for the purpose of serving third-party advertising.

You can manage your cookie preferences at any time through the cookie settings panel available in the platform's account settings section. Withdrawing consent for non-essential cookies will not affect the functionality of core platform features. Please note that certain browsers also provide built-in controls for managing and deleting cookies.

In addition to cookies, cb9998 may use web beacons (also known as pixel tags) and similar technologies in HTML emails and on platform pages to track whether communications have been opened and to measure the effectiveness of on-site content. These technologies collect only anonymised engagement metrics and are not used to identify individuals.

cb9998 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to each category of data are determined by the nature of the data and the purpose for which it is held.

• Active account data: Personal data associated with an active cb9998 account is retained for the duration of the account's active status plus a minimum period of five (5) years following account closure. This retention period is required to satisfy anti-money laundering record-keeping obligations.
• Transaction records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC documentation: Identity verification documents are retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support communications: Records of customer support interactions are retained for three (3) years from the date of the interaction, or longer if the interaction relates to an unresolved dispute or ongoing investigation.
• Marketing data: If you have consented to receive marketing communications from cb9998, your marketing preferences and contact details are retained until you withdraw your consent or request erasure of your data.
• Analytics data: Anonymised and aggregated analytics data may be retained indefinitely as it cannot be used to identify individual players.

Player data is stored on secure servers. cb9998 takes all reasonable technical and organisational measures to ensure that personal data is protected against accidental loss, unauthorised access, disclosure, alteration, or destruction throughout its retention period. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction.

Protecting your personal data is a core operational priority at cb9998. We implement a layered approach to data security that combines technical controls, organisational procedures, and staff training to safeguard the information we hold.

Technical safeguards employed by cb9998 include:

• SSL/TLS encryption: All data transmitted between your browser or app and cb9998's servers is encrypted using industry-standard SSL/TLS protocols, protecting it from interception during transmission.
• Password hashing: Account passwords are never stored in plain text. cb9998 uses strong cryptographic hashing algorithms to store password data, meaning that even internal staff cannot view your password.
• Tokenisation of payment data: Card and mobile financial service payment details are tokenised — replaced with non-sensitive reference tokens — so that sensitive financial data is not held in a form that could be exploited in the event of a data breach.
• Access controls: Access to personal data within cb9998's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific duties.
• Intrusion detection and monitoring: cb9998's infrastructure is monitored continuously for signs of unauthorised access, unusual activity, and known attack vectors. Security incidents trigger automated alerts and escalation procedures.
• Regular security assessments: cb9998 conducts periodic security audits and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a material risk to affected players, cb9998 will notify affected individuals as promptly as practicable and will take all reasonable steps to contain and remediate the breach.

You also have a role to play in keeping your account secure. You must choose a strong, unique password for your cb9998 account and must not share your login credentials with any third party. If you suspect that your account has been compromised, please contact cb9998 support immediately.

As a player on cb9998, you have a number of rights in relation to the personal data we hold about you. cb9998 is committed to honouring these rights promptly and transparently. Requests to exercise any of the rights described below should be directed to our support team at [email protected].

• Right of access: You have the right to request a copy of the personal data that cb9998 holds about you. We will respond to verified access requests within 30 days of receipt. The first copy of your data is provided free of charge; subsequent requests may attract a reasonable administrative fee.
• Right to rectification: If any personal data that cb9998 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can be made directly through your account settings; material corrections (such as a legal name change) require supporting documentation.
• Right to erasure: In certain circumstances, you have the right to request that cb9998 delete your personal data. This right is subject to limitations where retention is required by law (for example, AML record-keeping obligations) or where the data is necessary for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: You may request that cb9998 restrict the processing of your personal data in specific circumstances, for example while a rectification request is under review or while you contest the lawfulness of our processing.
• Right to data portability: Where cb9998 processes your personal data on the basis of your consent or the performance of a contract, you have the right to receive that data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to withdraw consent: Where cb9998 processes your personal data on the basis of your consent (for example, for marketing communications or non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though such objections will be balanced against cb9998's legitimate operational needs.

cb9998 will not discriminate against you for exercising any of your privacy rights. We will not restrict your access to the platform, offer you a lesser standard of service, or apply punitive terms to your account as a result of a rights request, except where that restriction is a direct and unavoidable consequence of the right exercised (for example, account closure following an erasure request).

cb9998 is the data controller responsible for the personal data collected and processed through the platform. If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about how your personal data is being handled, please contact us using the details below.

Privacy enquiries and rights requests:
Email: [email protected]
Subject line: "Privacy Request — [Your Account Username]"

Please include your registered username and a clear description of your request. cb9998 will acknowledge receipt of your request within 3 business days and will aim to fulfil it within 30 calendar days. In cases where a request is complex or involves a large volume of data, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

cb9998 takes all privacy complaints seriously. If you are not satisfied with our response to a privacy complaint or rights request, you may escalate the matter through the dispute resolution procedure described in the Terms and Conditions. We are committed to working with you in good faith to resolve any concerns about how your personal data is handled.

This Privacy Policy was last reviewed and updated on 1 January 2026. cb9998 reserves the right to update this policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Material changes will be communicated to registered players via the platform or by email. The most current version of the Privacy Policy is always available at cb9998.org/privacy-policy.