cb22 Privacy Policy — How We Protect Your Data

cb22 is committed to protecting the privacy and personal data of every player and visitor who uses the cb22 platform. This Privacy Policy explains in plain language the types of personal information we collect, the purposes for which we use it, how we store and protect it, who we may share it with, and the rights you have over your own data.

We are aware that online gaming involves real financial transactions and that the personal and financial data you share with us is sensitive. We treat that data with the level of care it deserves. We do not sell your personal data. We do not share it with third parties for their own marketing purposes. We use it only for the purposes described in this policy.

This Privacy Policy should be read alongside the cb22 Terms & Conditions, which together form the complete agreement between you and cb22 governing your use of the platform. If you have any questions about this policy or about how your data is handled, you can contact us at any time at [email protected].

cb22 collects personal information in the following categories, depending on how you interact with the platform:

• Registration data: your full name, date of birth, registered mobile number, and any other information you provide when creating your cb22 account.
• Identity verification (KYC) data: copies of government-issued photo identification such as your National ID card or passport, collected when required to verify your identity before processing withdrawals.
• Financial data: transaction records including deposit amounts, withdrawal requests, payment method references (such as registered bKash or Nagad mobile numbers), and account balance history. We do not store full card numbers.
• Gameplay and activity data: records of games played, bets placed, game outcomes, session durations, and platform activity logs.
• Technical and device data: IP address, device type, operating system, browser type, and session data collected automatically when you access the platform.

You are not required to provide personal data beyond what is needed to create and verify your account and to process transactions. However, failure to provide required information may prevent you from accessing certain features, including the ability to deposit, play for real money, or withdraw funds.

cb22 uses the personal data we collect for the following specific purposes:

• Account creation and management: to register your player account, verify your identity, maintain accurate account records, and provide access to platform features.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and to maintain transaction records as required by applicable financial regulations.
• Fraud prevention and security: to detect and prevent fraudulent activity, money laundering, account compromise, and other security threats to the platform and to individual player accounts.
• Responsible gaming compliance: to monitor gameplay activity for signs of problem gambling, to enforce deposit limits and self-exclusion settings, and to fulfil our responsible gaming obligations to players aged 21 and above.
• Customer support: to respond to your queries, complaints and account requests, and to maintain a record of communications between you and the cb22 support team.
• Platform improvement: to analyse platform usage patterns, identify technical issues, and improve the design, performance and game selection of the cb22 platform for Bangladesh players.

We do not use your personal data for automated individual decision-making that produces significant legal effects on you without human review. Where automated processes are used (for example, in fraud screening), a human review is available on request.

cb22 processes your personal data on the following legal bases:

When you make a deposit or request a withdrawal on cb22, we collect and process the following financial data:

• Transaction reference numbers and amounts for all deposits and withdrawals processed via bKash, Nagad, Rocket, Upay, Visa or Mastercard.
• The registered mobile number associated with your bKash or Nagad wallet, used to route withdrawal payments. We do not retain full card numbers for Visa or Mastercard transactions.
• KYC documentation (National ID card, passport or equivalent) collected to verify your identity before processing your first withdrawal or at any point where identity verification is required.

All KYC documents are stored in encrypted form and access is restricted to authorised cb22 compliance personnel only. KYC documents are not shared with game providers or marketing partners. They are retained for the minimum period required by applicable financial compliance obligations and then securely deleted.

cb22 does not sell, rent or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: we share transaction data with our payment processing partners (including bKash, Nagad, Rocket, Upay, Visa and Mastercard processing networks) to the extent necessary to process your deposits and withdrawals.
• Game software providers: we share the minimum data necessary (such as player session tokens) with licensed game providers including Pragmatic Play, Evolution Gaming, Ezugi and Spribe to facilitate gameplay. These providers process data only as necessary to operate their games and are contractually prohibited from using it for any other purpose.
• Fraud prevention and compliance services: we may share data with third-party fraud screening and identity verification services where necessary to protect the platform and comply with anti-money-laundering obligations.
• Law enforcement and regulatory authorities: we may disclose personal data to law enforcement, regulatory bodies or courts where we are legally required to do so, or where disclosure is necessary to protect the safety and rights of cb22 players or staff.

All third parties with whom cb22 shares personal data are contractually required to process that data only for the specified purpose and to maintain security standards consistent with our own. cb22 does not transfer personal data to jurisdictions that do not provide adequate data protection without appropriate safeguards in place.

cb22 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and understand how players use the site. The following types of cookies are used:

• Essential cookies: required for the platform to function. These include session cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how the platform is used — for example, which pages are visited most often and how long sessions last. This data is used solely to improve the platform and does not identify individual players.
• Preference cookies: used to remember your language setting, display preferences and other optional customisations you have applied to your account.

You may control cookies through your browser settings. Disabling essential cookies will impair or prevent your use of the cb22 platform. Disabling analytics or preference cookies will not affect your ability to play but may affect your experience. cb22 does not use third-party advertising cookies or behavioural tracking cookies to serve targeted advertisements.

cb22 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply: account registration data is retained for the duration of your active account plus a minimum period of five years following account closure, to comply with financial record-keeping obligations. KYC documentation is retained for a minimum of five years from the date of collection or from the date of account closure, whichever is later. Transaction records are retained for a minimum of five years from the date of each transaction. Technical and gameplay logs are retained for a shorter period consistent with their operational purpose and then securely deleted.

When personal data is no longer required and the applicable retention period has expired, cb22 will securely delete or anonymise it. You may request early deletion of data not subject to mandatory retention obligations by contacting [email protected]. We will respond to deletion requests within a reasonable time and inform you of the outcome.

cb22 implements comprehensive technical and organisational security measures to protect your personal and financial data against unauthorised access, disclosure, alteration or destruction. Our security programme includes:

• 256-bit SSL encryption on all data transmitted between your device and the cb22 platform, ensuring that payment details, login credentials and personal data cannot be intercepted in transit.
• Encrypted storage for all sensitive personal data, KYC documents, and financial records held on cb22 servers.
• Role-based access controls ensuring that cb22 staff can only access personal data relevant to their specific operational role. KYC documents and financial records are accessible only to compliance and finance personnel.
• Regular security reviews and monitoring of platform infrastructure to identify and address vulnerabilities before they can be exploited.

Despite these measures, no internet-based system is entirely immune to security risks. If you suspect that your cb22 account has been compromised, you must notify us immediately at [email protected]. You should also take care to keep your own login credentials confidential and to use a strong, unique password for your cb22 account.

As a cb22 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your full name and registered mobile number so that we can verify your identity before responding:

• Right to access: request a copy of all personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of personal data that is no longer necessary for the purpose it was collected and is not subject to mandatory retention.
• Right to restrict processing: request that we limit how we use your data in certain circumstances, for example while a rectification request is being resolved.
• Right to object: object to processing based on legitimate interests where you believe your own interests, rights or freedoms override those interests.

We aim to respond to all data rights requests within 30 days. In complex cases we may extend this by a further 30 days and will inform you if this is necessary. There is no charge for making a data rights request.

If cb22 discovers or is informed that personal data has been collected from a player who is under the age of 21, we will immediately suspend that account, delete all associated personal data, and reverse any financial transactions where possible. If you are a parent or guardian and believe that your child has registered with cb22, please contact us immediately at [email protected] so that we can take appropriate action.

The cb22 platform may contain references to or integrations with third-party services, including game providers such as Pragmatic Play, Evolution Gaming and Spribe. While cb22 takes care to partner with reputable providers, we do not control the privacy practices of third-party services and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party service you interact with. cb22 is not responsible for the privacy practices or content of external services.

cb22 may update this Privacy Policy from time to time to reflect changes in how we handle personal data, changes in applicable law, or improvements to the platform. When we make changes, the revised policy will be published at cb22.ws/privacy-policy with an updated date at the top. Where changes are material, we will endeavour to notify affected players via their registered mobile number or through a notice displayed upon login.

Your continued use of the cb22 platform after a revised Privacy Policy has been published constitutes your acceptance of the revised policy. If you do not agree to a revised policy, you must stop using the platform and may close your account by contacting [email protected].

If you have any questions, concerns or requests relating to this Privacy Policy or to the way cb22 handles your personal data, our data protection team is available to assist you. We take all privacy enquiries seriously and will respond within a reasonable time.

Email: [email protected]

Our support team operates 24 hours a day, seven days a week, Bangladesh Standard Time (BST, UTC+6). We aim to respond to all privacy-related enquiries within 5 business days.