CB999 Privacy Policy – How We Protect Your Data in Pakistan

1. Introduction

This Privacy Policy ("Policy") describes how CB999 ("we", "us", "the Platform") collects, uses, stores, and protects the personal information of players registered on the CB999 website at cb999.world. It applies to all Pakistani players and visitors who access the CB999 platform, regardless of whether they hold an active account.

At CB999, we take data privacy seriously. We understand that Pakistani players share sensitive personal and financial information when registering and transacting on the platform, and we recognise the responsibility that comes with that. This Policy is written in plain language so you can understand exactly what happens with your data — no legal jargon designed to confuse.

By registering a CB999 account or using our services, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should not register or use CB999 services. You can withdraw consent at any time by requesting account closure, though this will affect your ability to use the platform.

This Policy should be read alongside our Terms and Conditions, which govern your overall use of the CB999 platform, and our Responsible Gaming policy, which covers how we use your activity data to identify and address problematic gambling patterns.

2. Personal Data We Collect

CB999 collects only the personal data genuinely necessary to operate your account, verify your identity, process your transactions, and keep the platform secure. The categories of data we collect are set out below.

Account Registration Data

• Full legal name
• Date of birth (to verify you are 18 or older)
• Pakistani mobile number
• Email address
• Account username and password (passwords are stored in hashed form — never in plain text)
• City or province of residence

Identity Verification Data

• National Identity Card (CNIC) number and a copy of the card
• Selfie photograph for face-match verification
• Proof of payment method ownership (e.g. screenshot of wallet showing your registered name)

Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, and payment method references
• Transaction IDs from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card providers
• Running wallet balance history within your CB999 account

Gaming Activity Data

• Bets placed, game sessions, stake amounts, and outcomes
• Sports betting selections, markets, and odds accepted
• Casino game history, session durations, and Ludo room participation records
• Bonus activations, wagering progress, and promotion usage

Technical & Device Data

• IP address at time of login and transaction
• Browser type and version
• Device type (mobile, tablet, desktop) and operating system
• Session timestamps and duration
• Referring URL (the page you visited before arriving at CB999, if applicable)

Communications Data

• Content of support conversations via live chat, email, and WhatsApp
• Feedback, complaints, and formal dispute correspondence

3. How We Collect Your Data

CB999 collects your personal data through the following channels:

• Directly from you: When you complete the CB999 registration form, update your account profile, submit verification documents, make a deposit or withdrawal request, or contact our support team.
• Automatically through your use of CB999: When you browse the CB999 website, log in, place bets, or play games, our systems automatically record technical data including your IP address, device type, session duration, and page interactions. This is standard practice for all online platforms and is necessary for security and performance.
• From payment processors: When you make a deposit or withdrawal, our payment partners (Easypaisa, JazzCash, NayaPay, SadaPay, bank processors, card networks) share transaction confirmation data with CB999 to match payments to your account. CB999 does not receive your full wallet credentials or bank login details through this process.
• Through cookies and similar technologies: As described in Section 7 below, CB999 uses cookies to maintain session state, prevent fraud, and understand how players navigate the platform.

4. Why We Use Your Data

CB999 processes your personal data for specific, legitimate purposes. The table below maps each type of data to its purpose and the legal basis for processing.

CB999 will not use your data for any purpose not listed above without notifying you and, where required, seeking your consent first.

5. Sharing Your Data

CB999 does not sell your personal data. We do not share your information with third-party advertising networks or data brokers. The only situations in which CB999 shares your personal data with external parties are listed below.

• Payment processors: We share the minimum transaction data necessary with Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners to process your deposits and withdrawals. These partners are contractually bound to protect your data and may only use it for payment processing purposes.
• Game providers: Where CB999 hosts games from third-party studio providers (for example, live dealer games or specific slot titles), anonymised session data may be passed to those providers for technical purposes. No personally identifiable information is shared with game studios without your consent.
• Identity verification services: CNIC and document verification may be processed through a third-party KYC (Know Your Customer) service. These services are bound by strict data processing agreements and use your documents only for verification purposes.
• Legal and regulatory authorities: CB999 will share personal data with law enforcement, regulatory bodies, or other government authorities if required to do so by applicable law, court order, or where we believe disclosure is necessary to protect the safety of our players or the general public.
• Business transfers: In the unlikely event that CB999 undergoes a merger, acquisition, or asset sale, player data may form part of the transferred assets. Players will be notified prior to any such transfer and given the option to request account deletion before it takes effect.

6. Payment Data & PKR Transactions

Because CB999 processes financial transactions in Pakistani Rupees involving mobile wallets and bank accounts, we want to be particularly clear about how payment data is handled.

When you make a deposit through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, you interact with the payment provider's own interface or gateway. CB999 receives a transaction confirmation containing a reference number, the amount in PKR, the timestamp, and a masked identifier for your payment account (for example, the last four digits of your mobile number or card). CB999 does not receive your wallet PIN, mobile banking password, or full card number.

Deposit and withdrawal history is stored in your CB999 account for a minimum of five years as required for financial record-keeping and anti-money laundering compliance. This history is visible to you at all times in your account dashboard.

If CB999 identifies unusual transaction patterns — for example, multiple large deposits followed immediately by withdrawal requests without corresponding gaming activity — we may conduct an enhanced due diligence review. This is a standard financial crime prevention measure. You may be asked to provide source-of-funds documentation. CB999 handles this process discreetly and professionally.

7. Cookies & Tracking Technologies

CB999 uses cookies — small text files stored on your device — to keep the platform functional, secure, and useful. Below is a breakdown of the cookies CB999 uses and why.

You can manage non-essential cookies through your browser settings at any time. Disabling analytics or preference cookies will not affect your ability to use CB999 core features, though some personalisation may be reduced. Disabling essential or security cookies will prevent you from logging in and using the platform normally.

CB999 does not use cookies to serve third-party advertising on other websites based on your CB999 activity.

8. How We Protect Your Data

CB999 maintains a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption on all connections between your browser and CB999 servers.
• Hashed and salted password storage — your CB999 password is never stored in a form that anyone, including CB999 staff, can read.
• Two-factor authentication (2FA) available for all accounts, strongly recommended for players with higher account balances.
• Role-based access controls within CB999 — staff members can only access player data relevant to their specific role. Customer support staff cannot see full payment card numbers or CNIC data, for example.
• Intrusion detection systems that monitor for unusual login patterns, bulk data access, and other anomalous behaviour.
• Regular security audits of CB999 infrastructure and data handling procedures.
• Data minimisation — we do not store data longer than necessary and delete or anonymise records when they are no longer needed for their original purpose.

Despite these measures, no internet-based system can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, CB999 will notify affected players promptly and take immediate remedial action.

9. Data Retention

CB999 retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, or for as long as required by applicable legal and regulatory obligations.

• Active account data (registration, gaming history, communications) is retained for the lifetime of your active account.
• Financial transaction records are retained for a minimum of five years from the date of each transaction, as required by standard financial record-keeping regulations applicable to online payment platforms.
• Identity verification documents (CNIC copies, selfies) are retained for five years following account closure or the completion of the last transaction, in line with anti-money laundering obligations.
• Support communications are retained for two years to enable reference in the event of disputes or repeated enquiries.
• Technical logs (IP addresses, session data) are retained for 90 days and then deleted or anonymised.

When you request account deletion, CB999 will delete or anonymise all personal data that is not subject to a mandatory retention obligation within 30 days of your request. Any data retained under legal obligation will be held securely and not used for any commercial purpose.

10. Your Data Rights

As a CB999 player, you have the following rights over your personal data. To exercise any of these rights, contact us at support@cb999.world with the subject line "Data Rights Request – [your username]".

All data rights requests are handled within 72 hours of receipt for straightforward cases. Complex requests or those requiring legal review may take up to 30 days. We will confirm receipt of your request within 24 hours in all cases.

11. Minors & Child Protection

CB999 services are strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. Age verification is a mandatory step in the CB999 account registration process.

If CB999 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately, the account will be closed, and any deposits made by the underage individual will be returned minus any winnings derived.

Parents and guardians are encouraged to use device-level parental controls and monitoring tools to prevent minors from accessing online gaming platforms including CB999. If you believe a minor in your household has accessed CB999, contact us immediately at support@cb999.world and we will take prompt action.

12. Changes to This Policy

CB999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. The date of the most recent revision is displayed at the top of this page.

When we make material changes to how we collect, use, or share your personal data, we will notify you by email and through an in-platform notification at least 7 days before the change takes effect. For minor or clarificatory updates that do not affect your rights or our core practices, we may update the Policy without separate notification.

If you continue to use CB999 after a revised Policy has come into effect, you are considered to have accepted the updated terms. If you do not accept the revised Policy, you may request account closure before the effective date by contacting support@cb999.world. We will process the closure and return any withdrawable balance within standard processing times.

13. Contact & Data Queries

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how CB999 has handled your personal information, please reach out to us through any of the following channels:

• Email: support@cb999.world — use subject line "Privacy Query – [your username]" for data-related requests.
• Live chat: Available 24/7 on the CB999 website. For complex data requests, email is recommended so there is a written record.
• WhatsApp: Available for general account and privacy questions during platform hours.

CB999 will acknowledge all privacy-related contacts within 24 hours. Data rights requests (access, erasure, portability) will receive a full response within 72 hours for standard requests. We take every privacy concern seriously and will never dismiss a legitimate data query without a full review.

If you are not satisfied with how CB999 has handled a privacy concern after raising it with our team, you may escalate the matter in accordance with the dispute resolution process outlined in our Terms and Conditions.