CB999 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy describes how CB999 ("CB999", "we", "us", "our") collects, uses, stores, and protects personal information relating to users ("you", "player", "account holder") of the CB999 platform at cb999.site.

CB999 is the data controller responsible for the personal information of its registered players. We are committed to handling your data with care, and to being transparent about what we collect and why. This policy is written in plain English specifically so that Pakistani players can understand it without needing a legal background.

By registering for CB999 or using the CB999 platform in any way, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your data as described. If you have questions at any point, contact the CB999 privacy team at support@cb999.site.

2. Data We Collect

CB999 collects the following categories of personal data from players:

CB999 does not collect sensitive categories of personal data such as health information, religious beliefs, or political opinions. We do not collect biometric data.

3. How We Collect Your Data

Directly From You

The majority of the data CB999 holds about you comes directly from you — at registration, during the identity verification process, when you make deposits or withdrawals, and when you contact CB999 support. You provide this information voluntarily as part of using the platform.

Automatically Through Platform Use

CB999 automatically collects technical and usage data when you access the platform. This includes your device's IP address, the browser you're using, the pages you visit within CB999, and how long you spend on different sections of the platform. This data is collected via server logs and cookies (see Section 10 for full cookie details).

From Payment Providers

When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card, CB999 receives confirmation data from the payment provider — transaction reference numbers, confirmation status, and the mobile number or account identifier associated with the transaction. CB999 does not receive your full wallet PIN, bank password, or card CVV.

From Identity Verification Services

For withdrawal verification, CB999 may use third-party identity verification services that cross-reference the information you provide against national identity databases. This is a standard anti-fraud practice and is conducted securely with your data handled under strict confidentiality agreements.

4. How We Use Your Data

CB999 uses the personal data we collect for the following purposes:

• Account management: creating and maintaining your CB999 account, processing your registration, and managing your profile information
• Payment processing: handling deposits and withdrawals in PKR via your chosen payment method
• Identity verification: confirming your identity and age before processing withdrawals and for ongoing compliance
• Security: detecting and preventing fraud, unauthorised account access, and prohibited activities described in the CB999 Terms and Conditions
• Responsible gaming: monitoring account activity to identify patterns that may indicate problem gambling and applying responsible gaming tools where appropriate
• Customer support: responding to your queries, resolving disputes, and providing assistance
• Legal and regulatory compliance: meeting obligations under applicable anti-money laundering, know-your-customer, and other legal requirements
• Platform improvement: analysing aggregated usage data to improve the CB999 platform experience — features, performance, and content
• Marketing communications: sending promotional offers and news about CB999 — only to players who have opted in, and always with a clear unsubscribe option

5. Legal Basis for Processing

CB999 processes your personal data under the following legal bases:

Contract Performance

Processing your identity data, contact data, financial data, and account activity data is necessary to deliver the CB999 service you signed up for — including managing your account, processing your bets, and paying out your winnings in PKR. Without this processing, CB999 cannot fulfil its obligations to you.

Legal Obligation

CB999 is required by applicable laws to conduct identity verification, maintain transaction records, apply responsible gaming measures, and cooperate with authorities in cases involving financial crime. This processing is obligatory regardless of your consent.

Legitimate Interests

CB999 processes technical and usage data under legitimate interests — specifically the interests of maintaining platform security, preventing fraud, and improving the platform experience for all players. This processing is proportionate and does not override your privacy rights.

Consent

Marketing communications are sent only on the basis of your explicit consent. You can withdraw this consent at any time without affecting your ability to use CB999.

6. Data Sharing

CB999 does not sell your personal data. We share data only in the following limited and necessary circumstances:

Payment Processors

To process PKR deposits and withdrawals, CB999 shares relevant transaction data with payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, and card payment networks. These processors receive only the data necessary for the specific transaction and are bound by their own privacy and security obligations.

Identity Verification Partners

For verification of player identity and age, CB999 may share your name, CNIC number, and date of birth with trusted identity verification service providers. These providers operate under strict confidentiality agreements and are permitted to use your data only for the verification request made by CB999.

Technology and Infrastructure Providers

CB999 uses third-party providers for platform hosting, security monitoring, and customer support systems. These providers may process personal data as part of their service to CB999 but do so strictly as data processors under CB999's instructions and in accordance with confidentiality agreements.

Legal and Regulatory Authorities

CB999 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by law or where such disclosure is necessary to prevent financial crime, fraud, or harm. CB999 will notify the relevant player of such disclosure where it is legally permissible to do so.

7. Payment Data & PKR Transactions

Given that CB999 operates entirely in Pakistani Rupees (PKR), payment data is a significant part of the information we process. Here is specifically how CB999 handles it:

Easypaisa and JazzCash

When you use Easypaisa or JazzCash for a deposit or withdrawal on CB999, the transaction is processed directly through the official APIs of those payment providers. CB999 receives a transaction reference number and confirmation status. Your Easypaisa or JazzCash PIN is never shared with or visible to CB999 at any stage of the transaction.

Bank IBFT Transfers

For bank transfers, CB999 receives your bank transaction reference to confirm receipt. CB999 does not retain your full bank account number beyond what is necessary for the withdrawal payment. Banking data is stored in encrypted form and purged from active systems after the retention period described in Section 8.

Visa / Mastercard

Card payments are processed through a PCI-DSS compliant payment gateway. CB999 does not store your full card number or CVV. Only a truncated card reference (last four digits and card type) is retained for transaction matching and dispute resolution purposes.

All financial transaction records are retained in accordance with CB999's legal obligations and the retention schedule in Section 8.

8. Data Retention

CB999 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. The following retention periods apply:

• Account registration data: retained for the lifetime of the account plus 5 years after account closure, to meet anti-money laundering record-keeping obligations
• Financial transaction records: retained for 7 years from the date of each transaction in line with standard financial record-keeping requirements
• Betting and gaming activity records: retained for 5 years from the date of each session or bet
• Identity verification documents: retained for 5 years following account closure or verification, and then securely deleted
• Customer support communications: retained for 3 years from the date of the last interaction
• Technical and log data: retained for 12 months and then purged from active systems on a rolling basis
• Marketing consent records: retained until consent is withdrawn, plus 1 year to confirm the record of withdrawal

At the end of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (data from which all identifying information has been removed) may be retained indefinitely for aggregated analytical purposes.

9. Data Security

CB999 applies technical and organisational security measures appropriate to the sensitivity of the data we hold. The primary security measures in place include:

• SSL/TLS encryption: all data transmitted between your browser and CB999 servers is encrypted using 256-bit SSL/TLS. This applies to login, payment pages, account pages, and all platform sections.
• Encrypted storage: sensitive personal data including identity documents and financial records is stored in encrypted form. Encryption keys are managed separately from the encrypted data.
• Access controls: access to personal data within CB999 systems is restricted to employees and contractors who require it for their specific role. Access is logged and regularly reviewed.
• Fraud monitoring: CB999 uses automated and manual monitoring systems to detect unusual account activity that may indicate fraud, unauthorised access, or abuse.
• Third-party security requirements: all third-party providers with access to CB999 player data are required to maintain security standards equivalent to or exceeding CB999's own.

10. Cookies & Tracking Technologies

CB999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use different areas of the site. The main categories of cookies used are:

Essential Cookies

These are necessary for the CB999 platform to function. They keep you logged in during a session, maintain your account state, and enable core security features. Essential cookies cannot be disabled without breaking platform functionality.

Functional Cookies

These remember your preferences — such as preferred language, preferred deposit method, and display settings — so you don't have to set them again each visit. Disabling these cookies means CB999 won't remember your preferences between sessions.

Analytics Cookies

These collect anonymised data about how players navigate the CB999 platform — which pages are visited most, where players spend time, and where they encounter friction. This data helps CB999 improve the platform. Analytics cookies do not identify you individually.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers — Chrome, Safari, Firefox — allow you to view, delete, and block cookies by category. Note that disabling all cookies will prevent CB999 from working correctly and will log you out of any active session.

11. Your Data Rights

As a CB999 player, you have the following rights regarding the personal data CB999 holds about you:

• Right of access: you can request a copy of all personal data CB999 holds about you. CB999 will provide this within 48 hours of a verified request.
• Right to rectification: if any personal data CB999 holds about you is inaccurate or incomplete, you can request that it be corrected. Contact CB999 support with the details to be changed.
• Right to erasure: in certain circumstances you may request that CB999 delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected for, or where you withdraw consent and there is no other legal basis for processing. Note that CB999 is legally required to retain certain financial and identity records and cannot delete these on request.
• Right to restrict processing: you may request that CB999 restrict how it uses your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: you may request a copy of your personal data in a structured, machine-readable format for transfer to another service.
• Right to object to marketing: you can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting support@cb999.site.

To exercise any of these rights, contact the CB999 privacy team at support@cb999.site with "Privacy Request" in the subject line. CB999 will acknowledge all privacy requests within 24 hours and respond in full within 48 hours where possible.

12. Children's Privacy

CB999 is an 18+ platform. CB999 does not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered for a CB999 account or provided personal data to CB999, please contact support@cb999.site immediately.

Upon being notified that a minor's data has been collected, CB999 will immediately suspend the relevant account, refund any deposits made, forfeit any winnings, and delete the minor's personal data from CB999 systems. Age verification conducted at the withdrawal stage is specifically designed to catch cases where age has been misrepresented at registration.

13. Changes to This Privacy Policy

CB999 may update this Privacy Policy from time to time to reflect changes in how we process data, changes in the services we provide, or changes in applicable legal requirements. When we make significant changes, we will notify registered players via email and display a prominent notice on the CB999 platform for at least 30 days after the change takes effect.

The "Last Updated" date at the top of this page shows when the current version was published. We recommend checking this page periodically if you want to stay current with CB999's privacy practices. Continued use of CB999 after a policy update constitutes acceptance of the updated terms.

14. Contact Us About Privacy

If you have any questions, concerns, or requests related to this Privacy Policy or the way CB999 handles your personal data, please contact the CB999 privacy team:

• Email: support@cb999.site — use "Privacy Request" as the subject line for any formal data request
• Live Chat: available 24/7 through the CB999 platform — the team can handle general privacy questions in real time
• Response time: CB999 acknowledges all privacy-related enquiries within 24 hours and aims to resolve them within 48 hours

CB999 takes all privacy concerns seriously and will investigate every report thoroughly. If you are not satisfied with CB999's response to a privacy concern, you may have the right to raise a complaint with a relevant data protection authority in your jurisdiction.