cb666 Privacy Policy

cb666 is an online casino and sports betting platform operating at cb666.buzz (the "Platform"), serving players across Pakistan. cb666 is operated by a licensed gaming entity (the "Operator") holding an international gaming licence. In the context of this Privacy Policy, the terms "cb666", "we", "us", and "our" refer to the Operator responsible for determining the purposes and means of processing personal data collected through the Platform.

This Privacy Policy applies to all personal data collected from users who visit, register on, or interact with the cb666 Platform, including through any mobile-optimised interface associated with cb666.buzz. It supplements the cb666 Terms and Conditions and forms part of the overall contractual framework governing your relationship with us.

If you have any questions about data privacy or wish to exercise any of the rights described in this Policy, please contact our data protection team via the contact details provided in Section 16.

cb666 collects and processes the following categories of personal data from users of the Platform:

cb666 does not collect or process special categories of sensitive personal data (such as health data, biometric data for identification purposes beyond CNIC selfie matching, racial or ethnic origin, religious beliefs, or political opinions) except where strictly required by applicable KYC or responsible gaming regulations and only to the minimum extent necessary.

cb666 collects personal data through the following methods:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to surveys or promotions.
• Automated technologies: When you access the Platform, our servers automatically record Technical Data and Usage Data through server logs, session management cookies, and analytics tools operating within our own infrastructure. cb666 does not use third-party advertising trackers.
• Third-party sources: Where necessary to complete KYC verification, cb666 may receive confirmation data from identity verification service providers regarding the authenticity of documents submitted. We may also receive transaction confirmation data from payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in the course of processing your deposits and withdrawals.
• Responsible gaming tools: If you engage with our responsible gaming features — such as setting deposit limits, requesting a cooling-off period, or submitting a self-exclusion request — we record the details of those interactions as part of your account record to ensure compliance with your chosen restrictions.

cb666 uses the personal data we collect for the following purposes:

• Account creation and management: To register your cb666 account, maintain it throughout its lifecycle, and provide you with access to all platform features.
• Identity and age verification: To verify that you are at least 21 years of age and that your identity matches the CNIC details provided, in compliance with our licensing obligations.
• Payment processing: To process your deposits and withdrawals in Pakistani Rupees through your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or bank transfer) and to maintain accurate financial records.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, and other forms of abuse of the Platform.
• Regulatory compliance: To fulfil our obligations under our international gaming licence, including record-keeping, responsible gaming monitoring, and responding to lawful requests from regulatory or law enforcement authorities.
• Customer support: To respond to your queries, complaints, and support requests, and to maintain records of those interactions for quality assurance purposes.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the performance and design of the cb666 Platform.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling and to administer self-exclusion, deposit limit, and cooling-off requests submitted by users.
• Marketing communications: To send promotional emails or SMS notifications about bonuses, new games, and platform updates — but only where you have consented to receive such communications. See Section 13 for full details.

cb666 processes your personal data on the following legal bases:

• Performance of a contract: Processing your registration data, KYC documents, financial data, and transaction data is necessary to fulfil the contractual obligations set out in the cb666 Terms and Conditions — without this processing, we cannot operate your account or provide the services you have requested.
• Legal obligation: We are required under our international gaming licence to carry out KYC verification, maintain transaction records, monitor for responsible gaming indicators, and cooperate with regulatory investigations. This processing is mandatory and cannot be opted out of.
• Legitimate interests: We process Technical Data, Usage Data, and fraud-detection data on the basis of our legitimate interest in maintaining a secure, fair, and functional gaming platform, provided that such interests are not overridden by your data protection rights. We carry out a balancing assessment when relying on this basis.
• Consent: We rely on your consent exclusively for the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

cb666 does not sell, rent, or trade your personal data. We share your data only in the following specific circumstances, and only to the minimum extent necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers we work with receive the financial data necessary to execute your deposit and withdrawal transactions. These providers operate under their own privacy policies and applicable financial regulation.
• KYC and identity verification providers: Third-party identity verification services that assist us in processing and authenticating the CNIC and selfie documents you submit during KYC. These providers are contractually bound to use your data solely for the purpose of verification on our behalf.
• Regulatory and law enforcement authorities: Where required by law, court order, or our gaming licence conditions, cb666 may disclose personal data to the relevant licensing authority, financial intelligence units, or law enforcement agencies. cb666 will notify you of such disclosures where legally permitted to do so.
• Platform infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who support the operation of the cb666 Platform. These providers access only the data necessary for their specific technical function and are bound by confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of the Operator's business or assets, your personal data may be transferred to the successor entity. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

In all cases where cb666 shares data with third parties, we require those parties to maintain appropriate data security standards and to use your data only for the purposes for which it was disclosed.

cb666 is operated under an international gaming licence, and the infrastructure supporting the Platform may involve data processing in jurisdictions outside Pakistan. Where your personal data is transferred outside Pakistan, cb666 ensures that adequate safeguards are in place to protect your data, which may include:

• Contractual clauses in our agreements with data processors and subprocessors requiring them to maintain data protection standards consistent with our obligations under this Policy.
• Transfers to jurisdictions where the applicable regulatory framework provides an adequate level of data protection as assessed by our licensing authority.

You may request information about the specific safeguards in place for any cross-border transfer of your data by contacting our support team using the details in Section 16.

cb666 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law or our gaming licence conditions.

• Active account data: Retained throughout the period your cb666 account remains active.
• KYC documents and identity data: Retained for a minimum of five years following account closure, as required by anti-money laundering obligations under our gaming licence.
• Transaction records: Retained for a minimum of five years following the date of the transaction.
• Support communications: Retained for three years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Self-exclusion records: Retained for the duration of the self-exclusion period and for five years thereafter, to prevent re-registration in breach of the exclusion.
• Marketing consent records: Retained for the duration of your consent and for two years following withdrawal, to evidence compliance with consent requirements.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual user.

Subject to applicable law and certain limitations imposed by our legal and regulatory obligations, you have the following rights in respect of your personal data held by cb666:

• Right of access: You may request a copy of the personal data cb666 holds about you and information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Please note that data subject to mandatory retention periods under our gaming licence cannot be deleted before those periods expire.
• Right to restrict processing: You may request that we restrict the use of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests where you believe your individual circumstances override those interests.

To exercise any of these rights, please contact the cb666 support team using the details in Section 16. We will respond to all verifiable requests within 30 days. We may need to verify your identity before processing a request to protect against unauthorised access to another person's data.

cb666 uses cookies and similar technologies on the Platform for the following purposes:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account state during gameplay, and enable security features such as CSRF protection. These cookies cannot be disabled without preventing you from using the Platform.
• Performance cookies: These cookies collect anonymised data about how users interact with the Platform — which pages are visited most frequently, where errors occur, and how page load times can be improved. This data is aggregated and does not identify individual users.
• Preference cookies: These cookies remember your language preferences and other customisation settings so that the Platform behaves as you expect on subsequent visits.

cb666 does not use advertising cookies, retargeting pixels, social media tracking cookies, or any third-party cookie that tracks your behaviour across websites other than cb666.buzz.

You may manage or block cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling performance and preference cookies will not affect your ability to place bets or access games.

cb666 implements a layered approach to data security designed to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• TLS 1.2 or higher encryption for all data transmitted between your device and the cb666 Platform.
• Encryption at rest for sensitive data categories including CNIC images, financial records, and password hashes.
• Role-based access controls ensuring that only authorised cb666 personnel whose job functions require access to specific data categories can access those records.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) available to users to further secure their accounts.
• Automated monitoring for unusual login behaviour, concurrent session anomalies, and other indicators of account compromise.

While cb666 takes all reasonable technical and organisational measures to protect your data, no internet transmission or electronic storage method is 100% secure. In the event of a data breach that poses a risk to users, cb666 will notify affected users and the relevant regulatory authority within the timeframe required by our operating licence conditions.

You also play a role in keeping your data secure. Please ensure you use a strong, unique password for your cb666 account, enable 2FA where available, and never share your login credentials with any other person.

The cb666 Platform is strictly intended for adults aged 21 years and above. cb666 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

Age verification is a mandatory step in the cb666 registration and KYC process. Any account where age verification indicates that the account holder is under 21 will be immediately suspended and all associated data will be handled in accordance with our legal obligations, which may include reporting to the relevant regulatory authority.

If you are a parent or guardian and believe that a minor has accessed the cb666 Platform or provided their personal data to us, please contact us immediately using the support details in Section 16. We will investigate and, where confirmed, promptly delete any personal data associated with the minor's access and close any account that was opened.

cb666 sends promotional and marketing communications — including email newsletters, SMS notifications about bonuses, and in-platform promotional messages — only to users who have provided explicit consent to receive such communications. Consent is requested during the registration process and can be managed at any time through your cb666 account settings.

You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in your cb666 account dashboard.
• Clicking the "unsubscribe" link at the bottom of any cb666 marketing email.
• Contacting the cb666 support team via live chat or email and requesting removal from our marketing list.

Please allow up to 5 business days for your opt-out request to be fully processed across all our communication channels. Transactional communications — such as deposit confirmations, withdrawal status updates, account security alerts, and KYC request notifications — are not marketing communications and will continue to be sent regardless of your marketing consent status, as they are necessary for the operation of your account.

cb666 does not share your contact details with third-party marketers and does not send marketing communications on behalf of any third-party brand.

The cb666 Platform does not include links to third-party websites in its main navigation or content areas. However, in the event that any informational content on the Platform references an external source, please be aware that cb666 has no control over the privacy practices or content of external websites.

This Privacy Policy applies solely to data collected through the cb666 Platform at cb666.buzz. If you access any external website from a reference on the Platform, we recommend that you review that website's own privacy policy before providing any personal information.

cb666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal and regulatory obligations. The "Last Updated" date at the top of this page will always reflect when the most recent revision was published.

Where an update to this Privacy Policy involves a material change to how we collect or use your personal data, or introduces a new category of data processing, cb666 will notify registered users by email at least seven days before the change takes effect. Continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.

For non-material changes — such as clarifications of existing provisions, corrections of typographical errors, or updates to contact details — the revised Policy will be published on the Platform without advance notice.

We encourage all cb666 users to review this Privacy Policy periodically. It is available at any time at cb666.buzz/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cb666 holds about you, please reach out to our support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, from within your cb666 account dashboard after logging in.
• Languages: Our support team can assist you in both English and Urdu.

cb666 aims to acknowledge all privacy-related correspondence within 48 hours and to provide a substantive response within 30 calendar days. For data subject rights requests, we may ask you to verify your identity before we can action your request — this is a security measure to protect your data and ensure we only disclose or modify information at the direction of the account holder.

If you are not satisfied with cb666's response to a privacy concern, you have the right to escalate the matter to the data protection supervisory authority applicable under our gaming licence jurisdiction, or to seek resolution through the dispute procedures set out in our Terms and Conditions.