cb999 Privacy Policy

This Privacy Policy ("Policy") describes how cb999 ("cb999", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of players and visitors who access the cb999 platform at https://cb999.lat ("Platform"). It applies to all personal data processed in connection with your registration, use of gaming and betting services, customer support interactions, and any other activity conducted through the Platform.

By registering a cb999 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy should be read alongside the cb999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

cb999 is the data controller responsible for the personal data collected through the Platform. As data controller, cb999 determines the purposes and means by which your personal data is processed.

For all data protection enquiries, rights requests, or complaints, you may contact the cb999 data protection contact using the details set out in Section 16 of this Policy. cb999 aims to respond to all data-related enquiries within 10 business days of receipt.

cb999 collects the following categories of personal data from players and platform visitors:

cb999 does not collect special category data (such as health or biometric data) unless specifically required for responsible gaming purposes and with your explicit consent.

cb999 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support via live chat or email, or filling in any Platform forms.
• Automated technologies: As you use the Platform, cb999 automatically collects technical and usage data via cookies, server logs, and similar tracking technologies as described in Section 9.
• Third-party sources: cb999 may receive identity and fraud-screening data from KYC verification partners and payment processors (such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank) in the course of processing your transactions or verifying your identity.

cb999 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to fulfil the contract between you and cb999 — including operating your account, processing transactions in PKR, and delivering gaming services.
• Legal obligation: Processing is required to comply with cb999's obligations under its international gaming licence, anti-money laundering regulations, and other applicable laws — including KYC verification and transaction record-keeping.
• Legitimate interests: Processing is necessary for cb999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improvement of services — where these interests are not overridden by your rights.
• Consent: Where required, cb999 will seek your explicit consent before processing your data — for example, for direct marketing communications. You may withdraw consent at any time as described in Section 13.

cb999 uses your personal data for the following purposes:

• Creating, maintaining, and managing your cb999 account.
• Verifying your identity and age (you must be 21 or older) through our KYC process.
• Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• Detecting and preventing fraud, money laundering, and other prohibited activities.
• Monitoring gameplay patterns to identify responsible gaming concerns and activating protective measures where appropriate.
• Providing customer support in Urdu and English via live chat and email.
• Sending transactional communications such as account confirmations, deposit receipts, and withdrawal notifications.
• Sending promotional communications about cb999 offers, new games, and events — only where you have consented to receive such communications.
• Complying with regulatory, licensing, and legal obligations.
• Improving the Platform through analysis of usage patterns and player feedback.

cb999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction and identity data necessary to process your PKR deposits and withdrawals.
• KYC and identity verification providers: Third-party KYC partners receive your identity documentation to perform age and identity verification checks on behalf of cb999.
• IT and infrastructure providers: Cloud hosting and database providers who store and process Platform data on our behalf under strict data processing agreements.
• Gaming software providers: Game studios whose RNG-certified titles are featured on the Platform may receive anonymised session data necessary for game operation and fairness auditing.
• Regulatory and legal authorities: cb999 will disclose personal data to licensing authorities, law enforcement, or courts where required to do so by applicable law or valid legal process.

All third-party service providers engaged by cb999 are required to handle personal data in accordance with data processing agreements that impose confidentiality, security, and use-limitation obligations consistent with this Policy.

cb999 operates under an international gaming licence, and some of its service providers and infrastructure may be located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan. Where such transfers occur, cb999 ensures that appropriate safeguards are in place to protect your data, including contractual protections with data recipients that require them to handle your data to the same standard as described in this Policy.

By using the cb999 Platform, you consent to the transfer of your personal data to and processing in jurisdictions outside Pakistan where necessary for the delivery of cb999 services, subject to the safeguards described above.

The cb999 Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and collect analytics data. The following types of cookies are used:

• Essential cookies: Necessary for the Platform to function — including maintaining your login session and remembering your preferences. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to understand how players navigate and use the Platform, allowing cb999 to make improvements. Data collected via analytics cookies is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair your ability to use core cb999 features including login, deposits, and gameplay. cb999 does not use third-party advertising cookies or share cookie data with advertising networks.

cb999 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the cb999 Platform.
• Encryption at rest for sensitive personal and financial data stored on cb999 servers.
• Role-based access controls that limit employee access to personal data strictly to those who require it to perform their job functions.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Incident response procedures to detect, contain, and notify affected players of any data breach that poses a material risk to their rights.

While cb999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your cb999 login credentials confidential and for notifying cb999 support immediately if you suspect any unauthorised access to your account.

cb999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention obligations. In practice, this means:

• Active accounts: Personal data is retained for the lifetime of your cb999 account.
• Closed accounts: Following account closure, cb999 retains identity, KYC, and transaction records for a minimum of five years in accordance with anti-money laundering and licensing requirements.
• Transaction records: PKR deposit, withdrawal, and betting records are retained for a minimum of five years and potentially longer where required by applicable regulations.
• Marketing data: Retained only while you have an active marketing consent on file. Removed within 30 days of consent withdrawal.
• Support communications: Live chat transcripts and email correspondence are retained for up to two years for quality assurance and dispute resolution purposes.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you.

The cb999 Platform is strictly intended for adults aged 21 years and over. cb999 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the cb999 KYC process and is enforced before any withdrawal is processed.

If you believe that a person under 21 has registered on the cb999 Platform, please contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

cb999 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, PSL betting markets, and other cb999 offers where you have given explicit consent to receive such communications. Consent is collected during the account registration process and can be updated at any time through your cb999 account settings.

To opt out of all marketing communications from cb999, you may:

• Update your communication preferences in the Notifications section of your cb999 account dashboard.
• Click the unsubscribe link included in any cb999 marketing email.
• Contact the cb999 support team via live chat or email and request that your marketing preferences be updated.

Please allow up to 5 business days for opt-out requests to take full effect across all communication channels. Note that withdrawing marketing consent does not affect your receipt of transactional communications (such as deposit confirmations and withdrawal notifications), which are necessary for the operation of your account.

To exercise any of the data rights described in this Policy — including access, rectification, erasure, restriction, portability, or withdrawal of consent — please contact cb999 using the details in Section 16. To help us process your request efficiently, please include:

• Your full name and cb999 account username.
• A clear description of the right you wish to exercise and the specific data it relates to.
• Sufficient information to verify your identity, as cb999 cannot process rights requests from unverified individuals.

cb999 will acknowledge receipt of your request within 3 business days and will provide a substantive response within 10 business days. In complex cases, this period may be extended by up to a further 10 business days, in which case you will be notified of the extension and the reason for it.

cb999 will not charge a fee for processing rights requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply or the request may be declined with explanation.

cb999 reserves the right to update or amend this Privacy Policy at any time. Where a change is material — that is, where it significantly affects how cb999 collects or uses your personal data — cb999 will provide at least 14 days' advance notice via email to your registered address or via a prominent notice on the Platform before the change takes effect.

Minor amendments — such as corrections of typographical errors, clarifications that do not affect the substance of the Policy, or updates to contact details — may be made without prior notice. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision.

Continued use of the cb999 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you should close your account before the effective date of the changes.

For all privacy-related enquiries, data rights requests, or concerns about how cb999 handles your personal data, please contact the cb999 data protection contact through the following channels:

• Email: [email protected] — please include "Privacy Enquiry" in the subject line for fastest routing to the relevant team.
• Live Chat: Available 24 hours a day, 7 days a week in Urdu and English. Average response time 3–5 minutes. For urgent data concerns, live chat is the fastest route to a first response.

If you are not satisfied with cb999's response to a privacy concern, you may escalate the matter to the relevant supervisory authority under cb999's international gaming licence jurisdiction. Details of the escalation route will be provided in cb999's written response to your formal complaint.