cb9996 Privacy Policy

1.1 Registration Data

When you create a cb9996 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Mobile phone number (used as your primary account identifier)
• Email address
• Residential address (city, district, and division within Bangladesh)
• Preferred currency (Bangladeshi Taka, BDT)
• Username and password (password stored in hashed form only — never in plain text)

1.2 Identity Verification Data

As part of our know-your-customer (KYC) obligations, we may request documentary evidence of your identity before processing withdrawals or when required by our compliance framework. Documents we may request include:

• National ID card (NID)
• Passport
• Driving licence
• Proof of residential address (utility bill, bank statement dated within 3 months)
• Source-of-funds documentation where applicable

These documents are processed securely and retained only for the period required by applicable law and our internal compliance policies.

1.3 Financial and Transaction Data

We collect transaction records associated with your account, including deposit amounts, withdrawal requests, payment method references (e.g., your registered bKash or Nagad number), and transaction timestamps. We do not store full payment card numbers. Card data, where used, is tokenised by the payment processor and is not retained on cb9996 servers.

1.4 Technical and Usage Data

When you access the Platform, we automatically collect certain technical information including your IP address, device type and model, operating system version, browser type and version, session duration, pages and games visited, and referring URL. This data is used to maintain Platform security, detect fraudulent activity, and improve the user experience.

1.5 Communications Data

If you contact our customer support team — via live chat, email, or any other channel — we retain a record of the communication, including its content, timestamps, and any attachments or screenshots shared. This record is used to resolve disputes, improve support quality, and maintain an audit trail of player interactions.

2.1 Account Management and Service Delivery

Your registration data is used to create and maintain your cb9996 account, verify your identity and age, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other linked payment methods, and deliver the gaming and betting services you have requested. Without this data, we cannot operate your account.

2.2 Security and Fraud Prevention

We analyse technical and behavioural data to detect and prevent fraudulent activity, money laundering, account sharing, bonus abuse, and other conduct that violates our Terms and Conditions. This analysis is carried out both through automated systems and manual review by our compliance team. IP addresses and device fingerprints are used as part of this process.

2.3 Responsible Gaming Obligations

cb9996 monitors gameplay patterns and deposit behaviour to identify indicators of problem gambling. Where such indicators are detected, we may proactively contact the player, apply account restrictions, or prompt the player to review their responsible gaming settings. This monitoring is carried out in the interest of player welfare and is a core part of our duty-of-care obligations.

2.4 Legal and Regulatory Compliance

We process and retain certain personal data to meet our obligations under anti-money laundering (AML) regulations, to respond to lawful requests from government authorities or law enforcement agencies, and to defend cb9996 against legal claims. Data retained for compliance purposes may be held for a minimum of 5 years from the date of account closure, as required by applicable law.

2.5 Marketing Communications

With your consent, cb9996 may send promotional communications regarding bonuses, new game launches, seasonal offers (such as Eid or Pohela Boishakh promotions), and cricket betting markets. You may withdraw consent to marketing communications at any time by contacting our support team or by using the unsubscribe link in any email we send. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to that withdrawal.

2.6 Platform Improvement and Analytics

Aggregated, anonymised usage data may be used internally to analyse Platform performance, identify popular games and betting markets, and improve the overall player experience. This analytical data does not identify individual players and is not shared externally.

3.1 Payment Processors

To process deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers act as data processors on our behalf and are contractually required to handle your data securely and only for the purpose of completing your payment instruction.

3.2 Identity Verification Providers

Where required, we share identity documents with third-party KYC and age-verification providers to confirm that you meet our 21+ eligibility requirement. These providers operate under strict data processing agreements and are not permitted to use your data for any purpose other than completing the verification check commissioned by cb9996.

3.3 Fraud Prevention and Security Partners

We may share technical identifiers — such as IP addresses, device fingerprints, and behavioural signals — with specialist fraud-prevention and cyber-security partners to protect the integrity of the Platform and safeguard all players. Information shared in this context is used exclusively to assess and mitigate security risk.

3.4 Legal and Regulatory Authorities

cb9996 will disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where required to do so by applicable law, court order, or lawful request. In such circumstances, we will disclose only the minimum data required to satisfy the legal obligation and will notify the affected player where permitted to do so by law.

3.5 Business Transfers

In the event that cb9996 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, player data may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, cb9996 will take reasonable steps to ensure that the receiving entity is bound by privacy obligations at least as protective as those set out in this Policy, and registered players will be notified in advance where practicable.

4.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They maintain your login session, remember your language and currency preferences, and enable security features such as fraud detection. Essential cookies cannot be disabled without rendering the Platform non-functional.

4.2 Analytics Cookies

We use analytics cookies to understand how players navigate the Platform — which games are most popular, how long sessions typically last, and which features are used most frequently. This data is collected in aggregate and anonymised form. It is used solely to improve Platform performance and the overall player experience.

4.3 Managing Cookies

You can control cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or receive a notification before a cookie is stored. Please note that disabling certain cookies may affect the functionality of the Platform. Detailed instructions for managing cookies are available in your browser's help documentation.

5.1 Retention Periods

cb9996 retains personal data for as long as your account remains active and for a minimum period of 5 years following account closure, in order to meet our anti-money laundering and compliance obligations. Transaction records and identity verification documents are subject to this minimum retention period regardless of the reason for account closure. Communications data (e.g., support chat transcripts) is retained for 3 years from the date of the interaction.

5.2 Requesting Deletion

Upon the expiry of mandatory retention periods, you may request the permanent deletion of your personal data by contacting our support team at [email protected]. We will process deletion requests within 30 calendar days of receipt, subject to verification of your identity and confirmation that no active legal hold applies to your data. We will confirm in writing when deletion has been completed.

Right of Access

You have the right to request a copy of all personal data cb9996 holds about you. We will provide this in a commonly used electronic format (e.g., PDF or CSV) within 30 days of a verified request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may also update certain information directly within your account settings.

Right to Restriction of Processing

In certain circumstances — for example, while you contest the accuracy of data we hold — you have the right to request that we restrict our processing of your personal data. Restricted data will be stored but not actively processed until the restriction is lifted.

Right to Object to Marketing

You have an unconditional right to object to your personal data being used for direct marketing purposes at any time. Upon receipt of an objection, cb9996 will cease all marketing communications to you immediately and permanently, unless you subsequently provide fresh consent.

Technical Safeguards

• 256-bit SSL/TLS encryption on all Platform pages and API endpoints.
• Passwords stored using industry-standard one-way hashing algorithms — never in plain text.
• Payment card data tokenised by the payment processor and not stored on cb9996 servers.
• Regular automated vulnerability scans and periodic penetration testing.
• Rate limiting and anomaly detection on login and payment endpoints to prevent brute-force attacks.

Organisational Safeguards

• Access to personal data is restricted to authorised personnel who require it to perform their job duties.
• All staff with access to personal data undergo privacy and security training.
• Internal data access is logged and audited on a regular basis.
• Data breach response procedures are in place; affected players will be notified promptly in the event of a breach that poses a material risk to their rights or interests.