cb998 Privacy Policy — How We Protect Your Personal Data

1 Introduction

cb998 is committed to protecting the privacy and personal data of every individual who visits, registers on, or uses the cb998 platform. This Privacy Policy has been drafted in accordance with recognised data protection principles and applies to all personal data processed by cb998 in connection with the operation of the platform for players across Bangladesh, including cities such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, and Rangpur.

This Privacy Policy applies to all Services provided by cb998, including the sportsbook, live casino, slots, fishing games, payment processing, customer support communications, and any promotional activity. It applies whether you access the platform via a desktop browser, a mobile browser, or any application provided by cb998.

Where this policy refers to "personal data", it means any information that can be used to identify you directly or indirectly as an individual. This includes your name, date of birth, contact details, financial information, and technical identifiers such as IP addresses and device identifiers associated with your use of the cb998 platform.

2 Personal Data We Collect

cb998 collects personal data in two broad categories: data you provide directly, and data we collect automatically when you use the platform.

Data you provide directly:

• Registration data: Your full legal name, date of birth, gender, residential address, email address, and mobile phone number submitted when creating your cb998 account.
• Identity verification (KYC) data: Copies of government-issued identification documents (National ID card, passport, or driving licence), proof of address documents (utility bills, bank statements), and proof of payment method ownership (registered mobile money account details for bKash, Nagad, Rocket, or Upay).
• Financial data: Your registered payment method details, transaction amounts, deposit and withdrawal history, and wallet balance records. cb998 does not store full card numbers for Visa or Mastercard transactions — these are handled directly by our PCI-DSS compliant payment processor partners.
• Support communications: Records of any live chat conversations, email correspondence, or other communications you have with the cb998 customer support team, including details you voluntarily provide during those interactions.
• Responsible gaming data: Details of any deposit limits, loss limits, session time limits, cooling-off periods, or self-exclusion requests you submit through the platform's responsible gaming tools.
• Marketing preferences: Your opt-in or opt-out choices with respect to receiving promotional communications from cb998 via email or SMS.

Data collected automatically:

• Technical data: Your IP address, browser type and version, operating system, device model, screen resolution, and language settings.
• Usage data: Pages visited on the cb998 platform, time and duration of visits, games played, bets placed, odds viewed, and navigation paths through the platform.
• Session data: Login timestamps, session duration, and logout events associated with your account.
• Cookies and tracking data: Information collected via cookies, web beacons, and similar tracking technologies as described in Section 7 of this policy.

3 How We Collect Your Data

cb998 collects personal data through the following channels and mechanisms:

• Account registration form: Data submitted when you create a new cb998 account, including all mandatory and optional registration fields.
• KYC verification submissions: Documents and information submitted in response to identity verification requests issued by the cb998 compliance team.
• Deposit and withdrawal requests: Financial data captured during the initiation of payment transactions through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or other accepted payment channels.
• Platform activity: Data generated automatically as a result of your use of the cb998 sportsbook, casino, and other services, including bet placement, game round participation, and account settings changes.
• Customer support interactions: Data provided voluntarily during live chat, email, or any other support channel communication.
• Cookies and similar technologies: Automated data collection by technical tracking tools operating within the cb998 platform as described in Section 7.
• Third-party identity verification providers: In certain cases, cb998 may receive verification results or risk-scoring data from third-party KYC and anti-fraud service providers who process identity documents on our behalf.

4 Legal Basis for Processing

cb998 processes personal data only where a lawful basis for doing so exists. The legal bases on which cb998 relies are as follows:

Processing Purpose	Legal Basis
Creating and managing your player account	Performance of a contract with you
Processing deposits and withdrawals	Performance of a contract with you
Identity verification (KYC) and age verification	Legal obligation; legitimate interests (fraud prevention)
Fraud detection and prevention	Legitimate interests of cb998 and protection of other players
Anti-money laundering (AML) compliance	Legal obligation
Responsible gaming monitoring and interventions	Legal obligation; legitimate interests (player protection)
Customer support communications	Performance of a contract; legitimate interests
Sending promotional communications	Consent (opt-in required)
Platform analytics and service improvement	Legitimate interests of cb998
Maintaining financial transaction records	Legal obligation (financial record-keeping)

5 How We Use Your Personal Data

cb998 uses the personal data we collect for the following specific purposes:

• To create, maintain, verify, and administer your cb998 player account.
• To process your deposits and withdrawal requests through your selected payment method, including bKash, Nagad, Rocket, Upay, and banking partners operating in Bangladesh.
• To verify your identity and age as required by our KYC process, to confirm that you meet the 21+ age requirement, and to confirm that you are eligible to use the cb998 platform.
• To detect, investigate, and prevent fraud, account takeover, money laundering, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• To apply and manage the responsible gaming tools you have configured on your account, including deposit limits, loss limits, cooling-off periods, and self-exclusion.
• To send you transactional communications relating to your account, including deposit confirmations, withdrawal status updates, security alerts, and important policy change notifications.
• To send you promotional communications, including information about bonuses, new game launches, and seasonal offers relevant to the Bangladesh market — but only where you have provided your explicit consent to receive such communications.
• To analyse aggregated, anonymised usage patterns on the cb998 platform for the purpose of improving the quality, performance, and range of services offered to players.
• To fulfil our legal and regulatory obligations, including the maintenance of financial records, cooperation with lawful requests from competent authorities, and implementation of anti-money laundering controls.

6 How We Share Your Data

cb998 does not sell, rent, or trade personal data to third parties. Data is shared with third parties only in the following specific and limited circumstances:

• Payment processors: Your payment method details and transaction data are shared with the relevant mobile money operator (bKash, Nagad, Rocket, Upay) or banking partner strictly for the purpose of processing your deposit or withdrawal request. These processors are contractually bound to handle your data securely and exclusively for payment processing purposes.
• KYC and identity verification partners: Identity documents and verification data may be transmitted to our third-party KYC service providers who conduct document authentication and identity checks on our behalf. These partners are prohibited from using your data for any purpose other than identity verification for cb998.
• Fraud prevention and risk management providers: Technical data including IP addresses, device fingerprints, and behavioural patterns may be shared with fraud detection service providers who help cb998 identify and prevent prohibited activity on the platform.
• Game providers: When you play games supplied by third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, limited technical session data is exchanged with those providers in order to facilitate the game session. These providers operate under their own privacy and data protection policies.
• Legal authorities: cb998 may disclose personal data to law enforcement agencies, courts, or other competent public authorities in Bangladesh or other applicable jurisdictions where we are required to do so by a lawful order, legal obligation, or where disclosure is necessary to protect the rights, property, or safety of cb998, our players, or the public.
• Corporate transactions: In the event of a merger, acquisition, asset sale, or reorganisation involving cb998, player personal data may be transferred as part of that transaction. Affected players will be notified prior to any such transfer taking effect.

7 Cookies & Tracking Technologies

cb998 uses cookies and similar tracking technologies on the platform to ensure the correct functioning of the site, to improve player experience, and to gather anonymised analytics data. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the cb998 platform to function. They maintain your login session, remember your account preferences during a session, and ensure that the security features of the platform operate correctly. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: These cookies remember choices you make on the platform, such as your preferred language setting, display preferences, and responsible gaming tool configurations, so that you do not need to re-enter these preferences on each visit.
• Analytics cookies: cb998 uses anonymised analytics tools to understand how players navigate the platform, which sections are most frequently visited, and where technical performance issues may arise. Analytics data is aggregated and does not identify individual players.
• Fraud-prevention cookies: These cookies assist our fraud detection systems in identifying unusual or suspicious access patterns, including attempts at account takeover or coordinated bonus abuse. They form part of our legitimate interest in protecting the platform and its players.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the cb998 platform, including logging in and accessing your account wallet. cb998 does not use third-party advertising cookies or behavioural profiling cookies for the purpose of targeting external advertising networks.

8 Data Security

cb998 implements a multi-layered approach to protecting personal data against unauthorised access, accidental loss, alteration, or disclosure. The security measures in place include:

• Encryption in transit: All data transmitted between your browser or device and cb998 servers is protected by 256-bit SSL/TLS encryption. The cb998 platform enforces HTTPS on all connections; unencrypted HTTP connections are automatically redirected.
• Encryption at rest: Sensitive personal data fields stored in the cb998 database — including identity document references and payment method identifiers — are encrypted at the storage layer using industry-standard encryption algorithms.
• Password security: Account passwords are stored exclusively in hashed and salted form using a cryptographically strong hashing algorithm. cb998 staff cannot access or retrieve your password in plaintext under any circumstances.
• Access controls: Access to personal data held by cb998 is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific operational role, and all access is logged and subject to audit.
• Two-factor authentication: cb998 supports and encourages the use of two-factor authentication (2FA) on player accounts as an additional layer of security against unauthorised access.
• Penetration testing and security reviews: cb998 commissions periodic security assessments of the platform to identify and remediate potential vulnerabilities before they can be exploited.

Despite our comprehensive security measures, no internet transmission or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that affects your personal data, cb998 will notify affected players without undue delay and will take all appropriate steps to contain the breach and mitigate potential harm.

9 Data Retention

cb998 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Data Category	Retention Period
Account registration data	Duration of account plus 5 years following closure
KYC identity verification documents	Duration of account plus 5 years following closure
Financial transaction records	Minimum 5 years following the transaction date
Customer support communication records	3 years from the date of the last interaction
Responsible gaming configuration records	Duration of account plus 5 years following closure
Marketing consent records	Until consent is withdrawn, plus 2 years thereafter
Technical logs and access records	12 months on a rolling basis
Anonymised analytics data	Indefinite (no personal identifiers retained)

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where deletion is not technically feasible within a specific system (for example, in backup archives), cb998 will isolate the data and prevent it from being used for any active processing purpose until it can be securely deleted at the next available opportunity.

10 Your Rights Over Your Personal Data

As a player whose personal data is processed by cb998, you hold the following rights in relation to that data. To exercise any of these rights, please contact cb998 customer support via live chat or by emailing support@cb998.io:

• Right of access: You have the right to request a copy of the personal data cb998 holds about you. We will provide this information in a structured, commonly used format within a reasonable timeframe following receipt of a verified request.
• Right to rectification: If any personal data cb998 holds about you is inaccurate or incomplete, you have the right to request that we correct it. Some data corrections (such as changes to your registered name) may require supporting documentation.
• Right to erasure: You may request that cb998 delete your personal data. This right is subject to our legal retention obligations — for example, financial records that we are legally required to retain for a minimum period cannot be erased on request until the mandatory retention period has elapsed.
• Right to restrict processing: You may request that cb998 temporarily restrict the processing of your personal data in certain circumstances, for example while a rectification request is being reviewed.
• Right to data portability: You have the right to receive the personal data you have provided to cb998 in a structured, machine-readable format, and to request that we transmit it directly to another service provider where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing based on our legitimate interests, including profiling for fraud prevention purposes. cb998 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

cb998 will respond to all data rights requests within 30 days of receipt of a verified request. In complex cases or where a large volume of requests is received simultaneously, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

11 Third-Party Links & Services

The cb998 platform integrates third-party services including live casino games supplied by providers such as Evolution Gaming, Pragmatic Play Live, and Ezugi, as well as slot titles from NetEnt, Microgaming, and Spribe. When you interact with these games, limited session data is exchanged with the relevant game provider's systems in order to facilitate the game experience. These providers operate under their own privacy policies, which we encourage you to review independently.

cb998 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external service whose infrastructure interfaces with the cb998 platform. This Privacy Policy applies exclusively to the personal data processed directly by cb998 in connection with the operation of the platform. Where you follow any link from the cb998 platform to an external website (if applicable), that site's own privacy policy will govern the use of your data on that site.

12 Children's Privacy & Age Verification

The cb998 platform is strictly for adults aged 21 and above. cb998 does not knowingly collect personal data from any individual below the age of 21. Age verification is a mandatory step in the cb998 account registration and KYC process.

If cb998 discovers or is notified that personal data has been collected from an individual who has not yet reached the age of 21, we will immediately suspend the relevant account, delete the associated personal data to the extent permitted by our legal obligations, and retain a record of the incident for compliance purposes. If you have reason to believe that a minor has registered on the cb998 platform, please contact our support team immediately via live chat so that we can take prompt action.

13 Changes to This Privacy Policy

cb998 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When material changes are made, cb998 will notify registered players via the email address associated with their account and will display a prominent notice on the platform for a period of not less than 14 days prior to the updated policy taking effect.

The effective date displayed at the top of this document indicates the version currently in force. Your continued use of the cb998 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any changes to this policy, you should cease using the platform and contact support to request account closure prior to the effective date of the updated policy.

The most current version of this Privacy Policy is always available at cb998.io/privacy-policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data cb998 holds about you, please contact our support team. We aim to respond to all privacy-related enquiries within five business days.

Support is available 24 hours a day, seven days a week via the live chat feature on the cb998 platform. For written enquiries, you may contact us by email at the address below. Note that this email address is provided as plain text and is not a clickable link — please copy it manually into your email client:

Data Privacy Contact:  support@cb998.io  —  Please include "Privacy Request" in your subject line along with your registered account username so we can locate your records promptly.

cb998 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy concern, you may escalate the matter in accordance with applicable dispute resolution procedures described in our Terms & Conditions.