cb222 Privacy Policy — How We Handle Your Data

cb222 takes its responsibility for the privacy and security of player data seriously. We collect only the data that is necessary to operate the platform, verify player identities, process payments, provide customer support, and comply with applicable legal and regulatory requirements. We do not sell your personal data to third parties, and we do not use your data for any purpose beyond those described in this Privacy Policy.

This Privacy Policy should be read alongside cb222's Terms & Conditions, which govern the overall use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions in relation to data protection matters, this Privacy Policy prevails.

1. What Data We Collect

cb222 collects personal data in two ways: data you provide directly when registering and using the platform, and data collected automatically through your use of the platform.

Data You Provide Directly

Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator. This data helps cb222 optimise the platform for the device types and network conditions most common among Bangladesh players.
• Usage data: pages visited, time spent on each page, game sessions played, bets placed, features used, and navigation paths within the platform. This data is used to improve platform usability and to detect unusual or potentially fraudulent activity.
• Cookie and session data: session identifiers, authentication tokens, and browser cookies that enable secure login, remember preferences, and support the responsible gaming tools (e.g. session time tracking). See Section 9 of this policy for full cookie details.

2. How We Use Your Data

cb222 uses personal data collected from players for the following specific purposes. We do not use your data for any purpose not listed here without obtaining your separate consent.

• Account management: to create, maintain, and secure your cb222 account; to verify your identity; to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, or Mastercard; and to process bonus claims and promotions.
• KYC and fraud prevention: to verify your age (21+), to confirm that you are not a previously excluded player, to detect and prevent duplicate accounts, and to identify and investigate suspected fraudulent, money laundering, or other prohibited activity.
• Platform operation and improvement: to operate the platform reliably across mobile and desktop environments; to monitor performance, uptime, and load times particularly on Bangladeshi mobile networks; and to use aggregated, anonymised usage data to improve game offerings and platform features.
• Customer support: to respond to your enquiries, complaints, and support requests submitted via email to [email protected]; to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: to monitor gaming patterns and detect indicators of problem gambling; to enforce deposit limits, session limits, and self-exclusion periods set by the player; and to proactively contact players where account behaviour suggests gambling may be becoming a problem.
• Legal and regulatory compliance: to meet applicable record-keeping requirements; to respond to lawful requests from competent authorities; and to enforce cb222's Terms & Conditions where a breach has occurred or is suspected.

3. Legal Basis for Processing

cb222 processes personal data on the following legal bases. Where more than one basis applies to a specific processing activity, both are relied upon.

• Contractual necessity: processing your identity, contact, financial, and account data is necessary to perform the contract between you and cb222 — that is, to provide the betting and gaming services you have signed up for.
• Legal obligation: processing for KYC verification, fraud prevention, anti-money laundering checks, and record-keeping in response to lawful authority requests is required by applicable legal and regulatory obligations.
• Legitimate interests: processing device data, usage data, and session data to improve platform performance, detect fraud, prevent problem gambling, and maintain platform security is carried out on the basis of cb222's legitimate business interests, provided those interests are not overridden by your rights.
• Consent: where cb222 wishes to use your data for a purpose not covered by the above bases — for example, to send you personalised promotional communications — we will obtain your explicit consent before doing so. You may withdraw that consent at any time by contacting [email protected].

4. KYC and Identity Verification Data

cb222 operates a Know Your Customer (KYC) process for all accounts. KYC verification is mandatory before processing a player's first withdrawal and may be required at any point during the account's life where cb222 has a reasonable basis to verify identity.

KYC documents collected may include: a government-issued photo identification document (National ID card, passport, or driving licence), proof of address (utility bill or bank statement), and proof of payment method (a screenshot showing the registered mobile number for bKash or Nagad accounts). These documents are stored securely and used exclusively for identity verification purposes. They are not used for marketing, shared with unauthorised third parties, or retained longer than legally required.

5. Payment Data

When you make a deposit or request a withdrawal on cb222, payment data is collected and processed. For bKash, Nagad, Rocket, and Upay transactions, cb222 records the registered mobile wallet number and the transaction reference number to reconcile payments and investigate any payment disputes. For Visa and Mastercard transactions, cb222 records the masked card number (last four digits only), card type, and transaction reference. cb222 does not store full card numbers or CVV codes.

Payment data is used exclusively to process your deposits and withdrawals, to investigate payment disputes, and to comply with applicable financial record-keeping requirements. Payment data associated with your account will be retained for the period specified in Section 11 of this policy. Where cb222 is required by law to report suspicious transactions to competent authorities, payment data may be included in such reports.

6. Cookies and Tracking Technologies

cb222 uses cookies and similar session-tracking technologies to operate the platform securely and efficiently. The following types of cookies are used on cb222.

• Strictly necessary cookies: these are essential to the operation of the platform. They include session authentication cookies that keep you logged in, security tokens that prevent cross-site request forgery, and cookies that enforce responsible gaming session time limits. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: these cookies remember your account preferences, such as your preferred language setting, last-used payment method, and display preferences. Disabling these cookies means you will need to re-enter your preferences each time you visit the platform.
• Analytics cookies: cb222 uses anonymised, aggregated analytics data to understand how players navigate the platform, which games attract the most sessions, and where technical issues occur. This data is processed in aggregate and is not linked to individual player identities.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your cb222 account. cb222 does not use advertising cookies or behavioural tracking cookies that profile you across other websites.

7. Sharing Your Data with Third Parties

cb222 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances.

• Payment processors: cb222 shares the minimum necessary transaction data with payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to execute deposit and withdrawal transactions on your behalf. These partners process data under their own privacy policies and security standards.
• Game providers: certain technical identifiers (such as your anonymised session token) are passed to game providers (including Pragmatic Play, Evolution Gaming, and others) to load game sessions. These providers do not receive your full name, contact details, or financial data.
• Legal and regulatory authorities: cb222 will disclose personal data to competent law enforcement or regulatory authorities where required to do so by applicable law, valid court order, or regulatory direction. cb222 will, where legally permitted, notify the affected player before making such a disclosure.
• Fraud prevention and security services: where cb222 uses third-party fraud detection or platform security tools, anonymised or pseudonymised data may be processed by those tools. No directly identifiable personal data (such as your full name or National ID number) is shared with these services.

8. Data Retention

cb222 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply.

• Active account data: all personal data associated with an active cb222 account is retained for the duration of the account's active status plus a minimum of 5 years following account closure, in order to meet financial record-keeping and anti-money laundering obligations.
• KYC documents: identity verification documents are retained for a minimum of 5 years following the date of verification or, where a suspicious activity report has been filed in relation to the account, for as long as required by the relevant authority.
• Support records: records of customer support interactions are retained for 3 years from the date of the interaction, or longer where the interaction relates to an unresolved dispute, compliance matter, or account suspension or termination.

9. How We Protect Your Data

cb222 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL encryption on all data transmitted between your device and the cb222 platform; encrypted storage of sensitive data at rest; role-based access controls that restrict employee access to personal data on a need-to-know basis; regular security assessments of the platform infrastructure; and secure, access-controlled document storage for KYC files.

While cb222 takes robust steps to protect your data, no internet-based platform can guarantee absolute security. You also play a role in protecting your account: use a strong, unique password for your cb222 account, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect your account has been compromised.

10. Your Data Rights

As a user of the cb222 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact cb222 at [email protected]. We will respond to all verified requests within 30 days.

• 👁️
  Right of Access You have the right to request a copy of the personal data cb222 holds about you, including what data is held, how it is used, and who it has been shared with.
• ✏️
  Right to Rectification You have the right to request that cb222 correct any inaccurate or incomplete personal data held about you. Where data has been shared with third parties, cb222 will inform them of the correction where possible.
• 🗑️
  Right to Erasure You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the processing basis), or where you object to processing. This right is subject to cb222's legal obligations to retain certain data as described in Section 8.
• ⏸️
  Right to Restrict Processing You have the right to request that cb222 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a decision on that objection is pending.
• 📤
  Right to Data Portability Where your data is processed by automated means on the basis of consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

To exercise any of your data rights, submit a written request by email to [email protected]

11. Minors and Age Restriction

cb222 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. If cb222 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be terminated without notice. Parents and guardians who believe that a minor may have registered on cb222 are urged to contact [email protected] immediately so the matter can be investigated and resolved without delay.

12. Third-Party Links and Services

The cb222 platform may reference or display the names of third-party payment providers and game studios as part of the platform's normal operation. cb222 is not responsible for the privacy practices or data security measures of any third-party service. Each third-party provider processes data under its own privacy policy. Players are encouraged to review the privacy policies of any third-party payment provider they use in conjunction with cb222, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.

13. Changes to This Privacy Policy

cb222 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where cb222 begins using personal data for a new purpose, changes its data retention periods, or begins sharing data with a new category of third party — cb222 will provide at least 7 days' notice via the platform notification system or by email to the registered account address before the changes take effect.

The current version of this Privacy Policy is always the version published at cb222.bio/privacy-policy. Continued use of the cb222 platform after any amendment takes effect constitutes acceptance of the revised Privacy Policy. If you do not accept an amendment, you may close your account and request deletion of your data as described in Section 10.

Contact cb222 About Your Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the personal data cb222 holds about you, please contact our support team by email at [email protected]

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days. For complex requests involving large volumes of data or third-party coordination, we may extend the response period by up to a further 30 days, in which case we will notify you of the extension within the initial 30-day period.

Our Privacy Commitments at a Glance

A summary of how cb222 treats your data. Read the full sections above for complete details.