cb9 Privacy Policy

1. Information We Collect

cb9 collects personal data from players in order to operate its online casino and sports betting platform, fulfil legal obligations, prevent fraud, and deliver a personalised gaming experience. The categories of personal data we collect are described below.

Registration Data

When you create a cb9 account, we collect the following information directly from you:

• Full legal name as it appears on your government-issued ID.
• Date of birth (for age verification purposes — players must be 18 or older).
• Residential address, including city, district, and postcode.
• Email address and mobile phone number.
• Username and encrypted password (passwords are hashed and never stored in plain text).

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, we may collect and retain copies of:

• National Identity Card (NID), passport, or driving licence.
• Proof of residential address (utility bill, bank statement, or official correspondence).
• Proof of payment method ownership (such as a screenshot showing the registered name and number of your bKash, Nagad, or Rocket wallet).
• Source-of-funds documentation for high-value transactions, as required by our Anti-Money Laundering (AML) programme.

Financial Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, or other supported payment channels, we collect records of those transactions including amounts, dates, and the masked identifier of the payment method (e.g., the last four digits of a card or the registered phone number of a mobile wallet). We do not store full card numbers or mobile banking PINs.

Usage and Behavioural Data

As you use the cb9 platform, we automatically collect technical and behavioural data including:

• IP address, device type, operating system, and browser version.
• Pages visited, time spent on each page, and navigation path through the platform.
• Games played, bet amounts, wager history, and session duration.
• Login timestamps, session tokens, and device fingerprint data used to detect suspicious access.

Communications Data

If you contact the cb9 support team via email, live chat, or any other channel, we retain records of that correspondence including the content of your messages, the date and time of each exchange, and any attachments you submit. This data is used to resolve your query, improve our support service, and maintain an audit trail of account interactions.

2. How We Use Your Data

cb9 processes personal data only where there is a lawful basis for doing so. The primary bases we rely on are: performance of a contract with you (operating your account), compliance with a legal obligation, our legitimate interests in fraud prevention and platform security, and, in limited cases, your explicit consent.

You may withdraw your consent for marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting the cb9 support team at [email protected]. Withdrawing consent for marketing does not affect the lawfulness of any processing conducted prior to withdrawal.

3. Data Sharing & Disclosure

cb9 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

Service Providers

cb9 works with carefully selected third-party service providers who process personal data on our behalf under strict contractual obligations that prohibit them from using your data for their own purposes. These providers include payment processors (for BDT transactions via bKash, Nagad, Rocket, and bank transfer), identity verification providers, cloud hosting and infrastructure providers, and fraud detection services. All service providers are required to implement appropriate technical and organisational security measures.

Game Providers

Some gameplay data (such as session identifiers and bet history) may be shared with our licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe for the purpose of delivering and auditing game results. These providers operate under their own data protection frameworks and are prohibited from using this data for any purpose other than game delivery and integrity auditing.

Legal and Regulatory Disclosure

cb9 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies when required to do so by applicable law, court order, or regulatory directive. This includes disclosures made under anti-money laundering (AML) obligations where cb9 is required to file suspicious activity reports. cb9 will notify affected players of any such disclosure where legally permitted to do so.

Business Transfers

In the event that cb9 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. cb9 will take reasonable steps to ensure that any successor entity is bound by privacy obligations no less protective than those set out in this Privacy Policy, and will notify registered players of any such transfer in advance where possible.

4. Cookies & Tracking Technologies

cb9 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant promotional content. Below is a summary of the cookie categories in use on cb9.

Managing Your Cookie Preferences

You can manage non-essential cookie categories through the cookie preference centre accessible from the footer of the cb9 platform. Additionally, most modern web browsers allow you to block or delete cookies through their privacy or security settings. Please be aware that disabling strictly necessary cookies will prevent you from logging in or using core platform functions.

Session cookies are automatically deleted when you close your browser. Persistent cookies (used for functional and analytics purposes) expire after a defined period, typically between 30 days and 12 months, depending on the specific cookie. Marketing cookies remain active for the duration of any active promotional campaign unless you withdraw consent earlier.

5. Data Security & Storage

cb9 takes the security of your personal data seriously and implements a multi-layered security framework designed to protect against unauthorised access, disclosure, alteration, and destruction.

Technical Safeguards

• Transport Security: All data transmitted between your device and cb9 servers is encrypted using TLS 1.2 or higher. The platform enforces HTTPS exclusively — unencrypted HTTP connections are not permitted.
• Data Encryption at Rest: Sensitive personal data (including KYC documents, payment identifiers, and account credentials) is encrypted at rest using AES-256 encryption on access-controlled cloud infrastructure.
• Password Security: Account passwords are never stored in plain text. cb9 uses industry-standard salted hashing algorithms to store password credentials securely.
• Multi-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their cb9 accounts. New device logins trigger OTP (one-time password) verification as a standard security measure.
• Intrusion Detection: cb9 operates continuous automated monitoring for anomalous login activity, unusual transaction patterns, and other indicators of account compromise.

Organisational Safeguards

Access to personal data within cb9 is restricted on a strict need-to-know basis. Employees with access to player data are subject to confidentiality obligations and receive regular training on data protection best practices. Access rights are reviewed periodically and revoked promptly upon termination of employment or change of role.

International Data Transfers

Some of cb9's service providers (such as cloud infrastructure and game technology partners) may process personal data outside Bangladesh. Where such transfers occur, cb9 ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to apply data protection standards equivalent to those described in this Privacy Policy.

6. Your Privacy Rights

As a cb9 player based in Bangladesh, you have the following rights in relation to your personal data. To exercise any of these rights, contact the cb9 privacy team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing any request and will respond within 24 hours of receipt.

7. Data Retention Policy

cb9 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce agreements. The following retention schedule applies to the main categories of personal data held by cb9:

Upon expiry of the applicable retention period, personal data is either securely deleted from cb9's systems or, where deletion is not technically feasible, it is anonymised so that it can no longer be associated with an identified or identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

If you close your cb9 account voluntarily, your active account data will be deactivated immediately. However, as described in the table above, certain categories of data must be retained for defined periods following account closure in order to comply with cb9's legal obligations. During the post-closure retention period, your data is stored securely and is accessible only to authorised personnel for compliance and legal purposes.

8. Contact & Privacy Complaints

Contacting cb9 About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to report a privacy concern, please contact the cb9 privacy team using the details below. Please include "Privacy Request" or "Privacy Complaint" in your subject line so that your message is directed to the appropriate team without delay.

Raising a Privacy Complaint

If you believe that cb9 has handled your personal data in a manner that is inconsistent with this Privacy Policy or applicable data protection principles, you have the right to raise a formal privacy complaint. cb9 takes all privacy complaints seriously and commits to conducting a thorough and impartial investigation of every complaint received.

To raise a formal complaint, send a written description of your concern to [email protected] with the subject line "Privacy Complaint". Please include your full name, the email address associated with your cb9 account, a clear description of the privacy concern, and any relevant dates or reference numbers. cb9 will acknowledge your complaint within 24 hours and provide a substantive response within 14 calendar days. If your complaint is complex or requires extended investigation, cb9 will notify you of the extended timeline and the reasons for it.

Changes to This Privacy Policy

cb9 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, cb9 will notify registered players via the email address associated with their account and will update the effective date at the top of this document. Your continued use of the cb9 platform following such notification constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how cb9 protects your data.