cb77 Privacy Policy — How We Protect Your Personal Data

1 Introduction

1.1 cb77 ("we", "us", "our") operates the online betting and gaming platform accessible at cb77.xyz. We are committed to handling the personal data of every player in Bangladesh with the highest degree of care, transparency, and security.

1.2 This Privacy Policy sets out in plain, formal English the categories of personal data we collect from players and visitors, the purposes for which that data is processed, the conditions under which it may be shared with third parties, the security measures we apply to protect it, and the rights available to you as a data subject.

1.3 This Privacy Policy applies to all personal data collected through cb77.xyz, including data collected during account registration, deposit and withdrawal transactions, customer support interactions, and routine browsing of the Platform. It applies to all registered players, prospective players, and visitors who access cb77.xyz regardless of whether they have created an account.

1.4 This Privacy Policy should be read alongside the cb77 Terms & Conditions available at /terms-conditions and the Responsible Gaming Policy available at /responsible-gaming. Together, these documents constitute the complete framework governing your use of the cb77 platform.

2 Data We Collect

2.1 cb77 collects personal data in the following categories. The specific data points collected depend on your level of interaction with the Platform:

2.1 Registration and Identity Data

When you create a cb77 account, we collect your full legal name, date of birth, residential address (city and district in Bangladesh), email address, and a contact phone number. This information is required to create and maintain your account and to perform age and identity verification.

2.2 KYC Verification Documents

To comply with our Know Your Customer obligations and to prevent underage gambling and financial fraud, we may collect copies of government-issued identity documents including your National Identity Card (NID), passport, or driving licence, along with supporting documents such as utility bills or bank statements confirming your residential address.

2.3 Financial and Transaction Data

We collect records of all deposits and withdrawals made through your cb77 account, including transaction amounts (in BDT / ৳), dates, times, and the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank). We do not store full payment card numbers or mobile banking PINs.

2.4 Betting and Gaming Activity Data

We maintain records of all bets placed, games played, outcomes, stakes, and winnings associated with your cb77 account. This data is used for account management, dispute resolution, bonus eligibility assessment, and responsible gaming monitoring.

2.5 Technical and Device Data

When you access cb77.xyz, our servers automatically record your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session duration. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

2.6 Communications Data

If you contact the cb77 support team by email, we retain records of that correspondence including your email address, the content of your messages, and any attachments. This data is used to resolve your query and to improve our support service quality.

3 How We Use Your Data

3.1 cb77 processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your cb77 player account, including updating your profile information, processing password reset requests, and managing account status changes.
• Identity and Age Verification: To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years before processing your first withdrawal or crediting any promotional bonus.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, to reconcile transaction records, and to investigate and resolve any payment disputes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats affecting the Platform or its players.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling, to apply and enforce responsible gaming restrictions requested by players, and to identify and act on cases where intervention may be warranted.
• Customer Support: To respond to your queries, complaints, and requests submitted to the cb77 support team via email at [email protected].
• Legal and Regulatory Compliance: To fulfil cb77's obligations under applicable law, including financial record-keeping requirements and obligations to cooperate with lawful authority requests.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and content of cb77.xyz and to optimise the player experience.
• Promotional Communications: Where you have explicitly opted in, to send you information about cb77 promotions, bonuses, and seasonal offers relevant to Bangladesh players. You may withdraw consent to marketing communications at any time by emailing [email protected].

3.2 cb77 does not use automated profiling or algorithmic decision-making to make decisions that produce significant legal effects on individual players without human review being available.

4 Legal Basis for Processing

4.1 cb77 processes your personal data on the following legal bases:

• Contractual Necessity: Processing your identity data, financial data, and gaming activity data is necessary to perform the contract between you and cb77 as set out in the Terms & Conditions. Without this processing, we cannot provide you with a functional player account.
• Legal Obligation: Processing your KYC documents and transaction records is required to comply with applicable anti-money-laundering regulations and financial record-keeping obligations. This processing is non-optional and cannot be declined.
• Legitimate Interests: Processing your technical and device data for fraud detection, security monitoring, and Platform analytics is based on cb77's legitimate interests in operating a secure and reliable platform, provided those interests are not outweighed by your privacy rights.
• Consent: Processing your data for direct marketing communications is based solely on your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing and Disclosure

5.1 cb77 does not sell personal data to any third party. Data is shared only in the following limited circumstances:

5.1 Payment Service Providers

To process your deposits and withdrawals, cb77 shares the minimum necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or City Bank). These providers act as independent data controllers in respect of the data they receive and process their own privacy policies govern their use of that data.

5.2 KYC and Identity Verification Partners

cb77 may engage third-party identity verification service providers to assist in the KYC process. These providers receive only the document data necessary to perform the verification check and are contractually prohibited from using that data for any other purpose.

5.3 Game Technology Providers

Third-party game studios whose products are available on cb77 — including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Habanero, and Spribe — may receive session-level data (such as player ID, bet amount, and game outcome) for the purpose of game operation, dispute resolution, and RTP auditing. These providers do not receive your full personal profile.

5.4 Legal and Regulatory Disclosure

cb77 may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by applicable law, by lawful court order, or where disclosure is necessary to prevent or detect serious criminal activity including fraud and money laundering. In such cases, cb77 will disclose only the minimum data required to satisfy the lawful request.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of cb77's assets, personal data held by cb77 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

5.2 All third parties with whom cb77 shares personal data are required to maintain confidentiality, to implement appropriate technical and organisational security measures, and to process the shared data only for the purposes for which it was disclosed.

6 Cookies and Tracking Technologies

6.1 cb77.xyz uses cookies and similar tracking technologies to operate the Platform, to remember your session preferences, to detect fraud, and to collect anonymised analytics data. The categories of cookies used on cb77.xyz are as follows:

• Essential Cookies: Required for the Platform to function. These include session management cookies that keep you logged in during an active browsing session and security cookies that help detect fraudulent login attempts. These cookies cannot be disabled without preventing the Platform from operating correctly.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. These improve your experience but are not strictly essential.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate cb77.xyz, which pages are most visited, and where players encounter difficulties. This data helps us improve the Platform.
• Security and Fraud Detection Cookies: Used to identify unusual login patterns, to flag potentially automated access attempts, and to support our broader fraud prevention measures.

6.2 You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the cb77.xyz Platform. Essential cookies cannot be disabled while you are actively using the Platform.

6.3 cb77 does not use third-party advertising cookies and does not allow advertising networks to place tracking cookies on cb77.xyz for the purpose of serving targeted advertisements to players.

7 Data Security

7.1 cb77 implements a range of technical and organisational security measures to protect the personal data of Bangladesh players against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and cb77.xyz servers.
• Encryption at rest for sensitive personal data fields including passwords (stored as salted cryptographic hashes), KYC document files, and financial records.
• Access controls limiting the ability to view personal data to cb77 staff members who have a specific, documented need to access it in the course of their duties.
• Regular internal security reviews and vulnerability assessments of the cb77.xyz Platform and its underlying infrastructure.
• Incident response procedures designed to detect, contain, and report data security incidents within the timeframes required by applicable law.

7.2 While cb77 takes all reasonable steps to protect your personal data, no data transmission over the internet is 100% secure. cb77 cannot guarantee the absolute security of data transmitted to or from cb77.xyz and accepts no liability for interception or unauthorised access that occurs despite our security measures being in place and functioning correctly.

7.3 You are responsible for maintaining the security of your own cb77 account credentials. If you believe your account has been accessed without your authorisation, you must notify us immediately at [email protected].

8 Data Retention

8.1 cb77 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five years following account closure, to satisfy financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five years following account closure or the completion of the last transaction, in line with applicable anti-money-laundering obligations.
• Transaction Records: Retained for a minimum of five years following the transaction date, in line with financial record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of three years following account closure for dispute resolution and responsible gaming audit purposes.
• Support Communications: Retained for a minimum of two years following the resolution of the relevant query or complaint.
• Technical and Device Logs: Retained for a maximum of 12 months and then automatically deleted or anonymised unless retained as evidence of a specific security incident under investigation.

8.2 When personal data is no longer required and no legal retention obligation applies, cb77 will securely delete or irreversibly anonymise that data so that it can no longer be associated with an identifiable individual.

9 Your Rights

9.1 As a cb77 player, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] from the email address associated with your cb77 account.

• Right of Access: You have the right to request a copy of the personal data cb77 holds about you, along with information about how it is being used. We will respond to access requests within 30 calendar days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure: You may request that cb77 delete personal data we hold about you where it is no longer necessary for the original collection purpose, where you have withdrawn consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to our legal retention obligations — data that must be retained by law cannot be deleted on request.
• Right to Restriction: You may request that cb77 temporarily suspend the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on cb77's legitimate interests. Upon receiving an objection, cb77 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contractual necessity, you may request that cb77 provide your personal data in a structured, machine-readable format for transfer to another service provider.

9.2 cb77 will not charge a fee for responding to data rights requests submitted in good faith. If a request is manifestly unfounded or excessive, cb77 reserves the right to charge a reasonable administrative fee or to decline the request, with a written explanation provided within 30 days.

10 Children and Minors

10.1 cb77 is an adult-only platform. The Services are strictly intended for persons aged 21 years and above. cb77 does not knowingly collect personal data from any person under the age of 21.

10.2 If cb77 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all personal data associated with that account will be securely deleted as soon as legally permissible, and any funds deposited will be returned to the originating payment source after investigation.

10.3 If you are a parent or guardian and believe that a minor in your care has created a cb77 account, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

11 Third-Party Links

11.1 cb77.xyz does not include links to third-party websites. However, if you access cb77.xyz via a third-party link from another website, please be aware that the privacy practices of that referring website are entirely separate from those of cb77 and are governed by that website's own privacy policy. cb77 has no control over and accepts no responsibility for the data practices of third-party websites.

11.2 Game content embedded on cb77.xyz and provided by third-party studios (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Habanero, and Spribe) operates within the cb77.xyz domain environment and is subject to the data-sharing provisions set out in Section 5.3. Players interacting with embedded game content should be aware that session-level data is transmitted to the relevant game provider as part of normal game operation.

12 Changes to This Privacy Policy

12.1 cb77 reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will notify registered players via the email address associated with their account and will post a prominent notice on the cb77.xyz homepage for a minimum of 14 days following the update.

12.2 The effective date at the top of this page will be updated to reflect the date on which the revised policy enters into force. Your continued use of the cb77 Platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.

12.3 Where a change to this Privacy Policy would materially affect the way in which we process your data in a manner that requires your consent, we will seek that consent explicitly before the new processing begins. If you decline to provide consent for the new processing, your existing account and data will continue to be governed by the version of the Privacy Policy in force at the time of your most recent explicit consent.

13 Contact Us

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cb77 holds about you, please contact us using the details below. All correspondence must be submitted in English.

• Data Enquiries Email: [email protected]
• Platform: cb77.xyz
• Response Time: Within 30 calendar days for formal data rights requests; within 48 hours for general privacy enquiries
• Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

13.2 When submitting a data rights request, please include your full name, your registered cb77 email address, and a clear description of the right you wish to exercise. This information is necessary to verify your identity and to locate the correct account records before actioning your request.