cb888 Privacy Policy

cb888 operates Bangladesh's trusted online casino and sports betting platform at cb888.bio. As part of delivering our services to players across Bangladesh — including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — cb888 collects and processes personal data about registered players and website visitors.

This Privacy Policy sets out in clear, plain English the categories of personal data we collect, the purposes for which we process it, the parties with whom we may share it, the security measures we apply to protect it, and the rights you hold in respect of your own data. This policy applies to all data processing activities conducted by cb888 in connection with the cb888.bio platform, including account registration, gameplay, deposits and withdrawals, customer support interactions, and marketing communications.

This Privacy Policy should be read alongside the cb888 Terms & Conditions and Responsible Gaming Policy, which together form the complete set of rules governing your use of the cb888 platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions in matters relating to data, this Privacy Policy shall prevail.

All timestamps referenced in this policy and in your account activity records are recorded in Bangladesh Standard Time (BST, UTC+6).

cb888 collects the following categories of personal data from players and website visitors. We collect only data that is necessary and proportionate to the purposes described in Section 4 of this policy.

A. Registration & Identity Data

• Full legal name as it appears on your national identity document or passport
• Date of birth (for age verification — players must be 21 years or older)
• Mobile phone number registered in Bangladesh
• Email address (if provided)
• Username and encrypted account password
• Division or city of residence within Bangladesh

B. Identity Verification (KYC) Documents

• Scanned copy or photograph of National ID card (NID), passport, or driving licence
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name)
• Source-of-funds documentation where required for high-value withdrawal requests

C. Financial & Transaction Data

• Deposit and withdrawal amounts denominated in BDT (Bangladeshi Taka ৳)
• Payment method details (bKash account number, Nagad account number, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard card last four digits)
• Transaction timestamps (BST), reference numbers, and status records
• Account balance history

D. Gaming & Betting Activity Data

• Game session records, including games played, stakes, outcomes, and RTP data
• Sports betting records, including markets wagered, odds accepted, bet outcomes, and settlement records
• Bonus claims, wagering progress records, and promotion participation history

E. Technical & Device Data

• IP address at the time of registration, login, and each session
• Device type, operating system version, and browser type
• Session duration and pages visited on cb888.bio
• Geolocation data derived from IP address (country and city level)

F. Communications Data

• Records of live chat conversations with cb888 support agents
• Email correspondence sent to and received from [email protected]
• Records of any complaints, dispute submissions, or responsible gaming requests

cb888 collects personal data through the following primary channels:

• Direct submission: Data you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automatic collection: Technical data collected automatically when you access cb888.bio, including IP address, device identifiers, session data, and cookies. See Section 7 for full details on cookies and tracking technologies.
• Third-party payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard when you initiate a deposit or withdrawal. cb888 receives only the minimum transaction data necessary to reconcile your account — we do not receive or store full payment card numbers.
• Identity verification providers: Where cb888 uses a third-party KYC verification service to validate the authenticity of identity documents, that provider may return a verification status (confirmed / unconfirmed) along with the extracted data fields necessary for KYC compliance.
• Game providers: Aggregated game outcome and RTP data received from licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi as part of normal game session reporting. This data is tied to your cb888 player ID and recorded in your account history.

cb888 processes your personal data for the following specific purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent or being required to do so by applicable law.

cb888 does not use automated decision-making or profiling to make decisions that produce legal or similarly significant effects on players, except where explicitly required for fraud detection or legal compliance purposes. In such cases, you have the right to request human review of the decision.

cb888 processes your personal data on the following legal bases:

• Contractual necessity: The majority of processing activities described in Section 4 are necessary for the performance of the contract between you and cb888 (governed by the Terms & Conditions) — including account administration, payment processing, game delivery, and customer support. Without this processing, cb888 cannot provide its services to you.
• Legal obligation: Certain processing activities are required by law, including KYC identity verification, anti-money-laundering record-keeping, age verification, and the retention of transaction records for a statutory minimum period. cb888 must conduct this processing regardless of your preferences.
• Legitimate interests: cb888 processes certain technical and security data on the basis of legitimate interests — specifically, the prevention of fraud, the detection of prohibited software (bots), platform security monitoring, and the improvement of the platform through anonymised analytics. These interests are balanced against your privacy rights and do not override them.
• Consent: Where cb888 processes your data for optional purposes — primarily marketing communications via email or SMS — we rely on your freely given, specific consent. You may withdraw this consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing message received.

cb888 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the purpose in question:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive the minimum transaction data required to process your deposits and withdrawals in BDT. Each payment processor operates under its own privacy policy and security standards.
• KYC and identity verification providers: Where a third-party provider is used to verify the authenticity of your identity documents, that provider receives the document data necessary to perform the verification. All KYC providers used by cb888 are bound by contractual data protection obligations.
• Game studios and software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed providers receive your player ID and session data as part of normal game operation. These studios are independently audited and certified and operate under strict data protection and confidentiality obligations.
• Legal and regulatory authorities: cb888 may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required by applicable law, court order, or regulatory directive. cb888 will notify you of such disclosures where legally permitted to do so.
• Professional advisors: cb888's legal, audit, and financial advisors may have access to personal data on a strictly need-to-know basis in connection with the provision of professional services. All such advisors are bound by professional confidentiality obligations.
• Business transfers: In the event that cb888 undergoes a restructuring, acquisition, or transfer of business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via the registered email address on file, and the acquiring entity will be bound by the obligations of this Privacy Policy.

In all cases where cb888 shares data with third parties, we require those parties to implement appropriate technical and organisational security measures to protect your data and to use it only for the specific purpose for which it was shared.

cb888 uses cookies — small text files stored on your device by your browser — and similar tracking technologies to operate and improve the cb888.bio platform. The following cookie categories are used:

• Essential cookies: These cookies are strictly necessary for the platform to function. They maintain your logged-in session, remember your language and currency preferences, and enable core features such as the cashier and game launcher. Essential cookies cannot be disabled without disrupting the service.
• Analytics cookies: cb888 uses anonymised, aggregated analytics cookies to understand how players interact with the platform — including which pages are visited most frequently, how long sessions last, and which game categories are most popular. This data is processed in aggregate form and cannot be used to identify individual players. You may opt out of analytics cookies through your browser settings.
• Security cookies: Short-lived security cookies are used to prevent cross-site request forgery (CSRF), detect unusual login patterns, and protect against session hijacking attacks. These are essential for account security and cannot be disabled.
• Preference cookies: These cookies remember your platform preferences, such as display settings, notification preferences, and deposit limit configurations, so that you do not need to re-enter them on each visit.

cb888 does not deploy third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookie technology that shares your browsing behaviour with external advertising networks.

You can control and delete cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in to your cb888 account and using the platform. For information on managing cookies in your specific browser, please refer to your browser's official help documentation.

cb888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guideline:

• Active account data: Retained for the full duration of your account relationship with cb888 and for a period of 5 years after account closure, to comply with anti-money-laundering record-keeping requirements.
• Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of 5 years from the date of the transaction in accordance with financial record-keeping obligations.
• KYC documents: Identity verification documents are retained for a minimum of 5 years from the date of verification or account closure, whichever is later, as required by anti-money-laundering legislation.
• Customer support communications: Records of live chat conversations and email correspondence are retained for 3 years from the date of the interaction to support dispute resolution and quality assurance.
• Technical and session data: IP address logs, device data, and session records are retained for 12 months for security monitoring purposes, after which they are anonymised or deleted.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the full duration of your account and for 3 years after account closure, as evidence of consent compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be linked to an identifiable individual. Where you request deletion of your data under Section 10 of this policy and no legal retention obligation applies, deletion will be completed within 30 days of your confirmed request.

cb888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport encryption: All data transmitted between your device and cb888.bio is encrypted using TLS 1.3 and 256-bit SSL certificates. Any attempt to intercept data in transit will encounter industry-standard cryptographic protection.
• Data-at-rest encryption: Sensitive personal data stored in cb888's databases — including KYC documents, account credentials, and payment details — is encrypted at rest using AES-256 encryption.
• Password security: Account passwords are stored in hashed and salted form using a modern, computationally expensive hashing algorithm. cb888 staff cannot read your password in plain text and will never ask you for it.
• Access controls: Access to systems that hold personal data is restricted to authorised cb888 personnel on a strict need-to-know basis. All internal access is logged and subject to periodic review. External access requires multi-factor authentication.
• Penetration testing and vulnerability management: cb888's platform and infrastructure are subject to regular security assessments conducted by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: cb888 maintains a documented security incident response procedure. In the event of a confirmed data breach, cb888 will take immediate containment action, conduct a root cause analysis, and notify affected players within 72 hours as described in the Feature Highlights section above.

While cb888 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. You also play an important role in account security — please ensure your password is strong, unique, and not shared with anyone. Contact [email protected] immediately if you suspect your account has been compromised.

As a cb888 player, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". cb888 will respond within 14 business days of receiving a valid request.

• Right of access: You have the right to request a copy of all personal data cb888 holds about you, along with information about how it is being processed, the purposes of processing, and the categories of third parties with whom it has been shared.
• Right to rectification: If any personal data cb888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as contact information) directly through your account settings, or by contacting support.
• Right to erasure: You have the right to request the deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) the data has been processed unlawfully. Note that this right is subject to legal retention obligations — cb888 cannot delete transaction records or KYC data within the mandatory 5-year retention window.
• Right to restrict processing: You have the right to request that cb888 temporarily suspend the processing of your data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to processing is being assessed.
• Right to data port ability: You have the right to receive the personal data you have provided to cb888 in a structured, commonly used, machine-readable format (such as JSON or CSV), and to request that this data be transmitted to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where cb888 relies on legitimate interests as the legal basis for processing. cb888 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where cb888 processes your data based on consent (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

cb888 will not charge a fee for handling data rights requests submitted in good faith. However, cb888 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive, or to refuse such requests entirely.

cb888 will verify your identity before processing any data rights request to ensure that personal data is not disclosed to or acted upon by unauthorised parties. You may be asked to confirm details matching your registered account before your request is fulfilled.

cb888 is strictly an adult platform. Players must be 21 years of age or older to register an account or use any service offered on cb888.bio. cb888 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

During the registration process, all players are required to confirm that they are aged 21 or above. Where cb888 has reasonable grounds to suspect that an account has been registered by a person under the age of 21, that account will be immediately suspended pending KYC age verification. If age verification confirms the account holder is under 21, the account will be permanently closed, all funds will be returned to the original payment method, and all personal data associated with that account will be deleted as soon as legally permissible.

If you become aware that a minor has registered an account on cb888.bio, or that a child in your care has accessed the platform, please notify cb888 immediately at [email protected] with the subject line "Minor Account Report". cb888 will take immediate action to investigate and close the account.

Parents and guardians are encouraged to use parental control and internet filtering software to prevent minors from accessing online gambling platforms. cb888 supports responsible gambling initiatives and takes its obligations regarding the protection of minors with the utmost seriousness.

cb888 may, with your prior explicit consent, send you marketing communications about new games, promotional offers, bonus events, seasonal campaigns (such as Eid, Pohela Boishakh, or IPL and BPL cricket season promotions), and platform updates. Marketing communications may be delivered via email to your registered email address or via SMS to your registered Bangladeshi mobile number.

You will only receive marketing communications if you have actively opted in during registration or through your account settings. cb888 does not send unsolicited marketing messages.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email sent by cb888;
• Updating your notification preferences in your cb888 account settings; or
• Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications will not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, or account security alerts — which are sent regardless of marketing preferences as they are necessary for the operation of your account.

The cb888 platform integrates with third-party services — including payment processors, game studios, and analytics tools — as described in this policy. While cb888 takes reasonable steps to ensure that all third-party service providers maintain appropriate data protection standards, cb888 is not responsible for the privacy practices of third-party organisations operating their own independent platforms.

cb888 does not control and is not responsible for the content, privacy policies, or data practices of any external website that may be linked to or from cb888.bio. Any links to external sites are provided for informational convenience only; their inclusion does not constitute an endorsement by cb888 of the linked site or its content.

Game studios whose products are accessible through cb888 — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — operate under their own privacy and data handling obligations. Where these providers process personal data as part of game session delivery, they do so under contractual data processing agreements with cb888 that require compliance with appropriate data protection standards.

Payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard are independent data controllers for the payment transaction data they process. Players are encouraged to review the privacy policies of their payment providers directly. cb888 receives only the minimum data necessary to reconcile your account.

cb888 reserves the right to amend, update, or replace this Privacy Policy at any time. Changes may be made to reflect updates to applicable law or regulatory guidance, changes to cb888's data processing activities, the introduction of new platform features, or improvements to the clarity and comprehensiveness of the policy text.

When a material change is made to this Privacy Policy — meaning a change that affects the nature, scope, or purpose of personal data processing in a way that may be significant to players — cb888 will notify registered players via the email address on file at least 7 days before the revised policy takes effect. The notification will clearly summarise the nature of the change and provide a link to the full updated policy.

For non-material changes — such as corrections to typographical errors, clarifications of existing language, or formatting adjustments — cb888 will update the "Last Updated" date at the top of this policy and the revised version will take effect immediately upon publication.

Your continued use of the cb888 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must cease using the cb888 platform and contact [email protected] to request account closure.

All previous versions of this Privacy Policy are archived and available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cb888 holds about you, please contact the cb888 data support team using the details below. All communications must be submitted in English.

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, directly within the cb888 platform
• Response Time: 2–5 minutes average via live chat; within 24 hours via email
• Operating Hours: 24/7, 365 days a year, Bangladesh Standard Time (BST, UTC+6)

To exercise any of your data rights described in Section 10, please email [email protected] with the subject line "Data Rights Request" and include your registered username and a brief description of your request. cb888 will acknowledge your request within 2 business days and provide a full response within 14 business days.

For responsible gaming support, self-exclusion requests, or deposit limit adjustments, please visit the Responsible Gaming page or contact support with the subject line "Responsible Gaming Request" to ensure your message is handled promptly by our dedicated player welfare team.