cb777 Privacy Policy — How We Protect Your Data

cb777 ("the Company", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who registers, visits, or otherwise interacts with the cb777 Platform accessible at cb777.today and its associated mobile applications and services (collectively, the "Platform").

This Privacy Policy ("Policy") describes how cb777 collects, processes, stores, shares, and protects personal data in connection with your use of the Platform. This Policy applies to all registered players, prospective players, and visitors to the cb777 Platform, including Pakistani players accessing the service from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, and all other locations across Pakistan.

This Policy is incorporated by reference into the cb777 Terms & Conditions. By registering an account with cb777 or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of applicable data protection legislation, cb777 is the Data Controller responsible for your personal data processed in connection with the Platform. As Data Controller, cb777 determines the purposes for which and the manner in which your personal data is processed.

cb777 operates under an internationally recognised gaming licence. Our data processing activities are conducted in compliance with the data protection requirements imposed by that licence, as well as with applicable international data protection standards. If you have any questions regarding data controllership or wish to exercise your rights, please refer to Section 15 of this Policy for contact details.

cb777 collects the following categories of personal data, depending on how you interact with the Platform:

cb777 collects your personal data through the following primary channels:

• Direct Collection: Information you provide when completing the cb777 registration form, submitting KYC documentation, using the cashier to deposit or withdraw funds, contacting customer support, or completing responsible gaming questionnaires.
• Automated Collection: Technical data collected automatically when you visit or use the cb777 Platform, including via cookies, web server logs, and session tracking technologies. See Section 9 for full details on cookies.
• Third-Party Sources: Data received from KYC verification providers, payment processors (such as JazzCash, EasyPaisa, and banking partners), fraud prevention agencies, and credit reference agencies where required for regulatory compliance.
• Public Sources: Publicly available information used for enhanced KYC or fraud detection purposes, in compliance with our licensing obligations.

cb777 processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which cb777 processes personal data and the corresponding legal basis:

• Contract Performance: Processing your registration, managing your account, facilitating deposits and withdrawals, and settling bets — all necessary to perform the contract between you and cb777.
• Legal Obligation: KYC identity verification, age verification (21+ enforcement), anti-money laundering checks, and responsible gaming compliance — required under our international gaming licence.
• Legitimate Interests: Fraud detection and prevention, platform security monitoring, improving Platform features and user experience, and internal analytics — pursued where cb777's interests do not override your fundamental rights.
• Consent: Sending marketing communications (email newsletters, SMS promotions, bonus offers) — where you have provided explicit consent. You may withdraw this consent at any time.

cb777 does not process your personal data for any purpose that is incompatible with the purposes described above without first obtaining your explicit consent.

cb777 does not sell your personal data. We share your data only in the following strictly defined circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and card processing networks receive the minimum data necessary to process your transactions securely in PKR.
• KYC & Identity Verification Providers: Third-party KYC providers receive identity documents (including CNIC data) for the purpose of verifying your eligibility to hold a cb777 account.
• Game Content Providers: Licensed game studios and live dealer providers receive session and game data necessary to deliver their services through the cb777 Platform.
• Fraud Prevention Agencies: Data may be shared with fraud prevention agencies and industry databases where required to protect cb777 and its players from fraudulent activity.
• Regulatory Authorities: cb777 will disclose personal data to law enforcement agencies, gaming regulators, financial intelligence units, or other competent authorities where legally required to do so.
• Group Companies: Where cb777 operates as part of a corporate group, limited data may be shared within that group for consolidated compliance, risk management, and operational purposes.

All third parties with whom cb777 shares personal data are contractually required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

As an internationally licensed gaming operator, cb777 may transfer your personal data to servers or third-party processors located outside Pakistan. Where such transfers occur, cb777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy.

Safeguards for international transfers may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules for intra-group transfers, and transfer to jurisdictions recognised as providing adequate data protection standards.

By using the cb777 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan as described in this section, subject always to the protections outlined herein.

cb777 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by our regulatory and legal obligations. The following retention guidelines apply:

• Account Data (active accounts): Retained for the lifetime of your active cb777 account plus a minimum of five (5) years following account closure, as required under anti-money laundering and gaming licence regulations.
• KYC Documentation: Retained for a minimum of five (5) years following the end of your relationship with cb777, in accordance with our licensing obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, in accordance with financial record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of three (3) years following the logged activity.
• Customer Support Records: Retained for two (2) years following closure of each support interaction, unless the matter forms part of an ongoing dispute or investigation.
• Marketing Consent Records: Retained for the duration of your marketing consent plus three (3) years following its withdrawal.

Upon expiry of applicable retention periods, personal data is securely and irreversibly deleted or anonymised in accordance with cb777's data destruction standards.

cb777 uses cookies and similar tracking technologies on the Platform to enable core functionality, enhance user experience, and gather analytics data that helps us improve our services for Pakistani players.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your cb777 account and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as your preferred language, currency display (PKR), and game lobby layout. Disabling these may reduce Platform functionality.
• Analytics Cookies: Collect anonymised data about how players navigate and use the cb777 Platform, helping us identify areas for improvement. cb777 uses analytics cookies only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content relating to cb777 services. These are used only where you have explicitly consented to receive marketing communications.

9.2 Managing Cookies

You may manage your cookie preferences via your browser settings or through the cb777 cookie consent banner presented upon your first visit to the Platform. Note that disabling strictly necessary cookies will prevent you from accessing your cb777 account. Most modern browsers (Chrome, Firefox, Safari, Samsung Browser) allow you to view and delete cookies stored on your device.

With your consent, cb777 may send you marketing communications about our services, promotions, bonus offers, PSL cricket betting specials, new game launches, and other Platform updates. These communications may be delivered via email or SMS to your registered contact details.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any cb777 marketing email;
• Updating your communication preferences in your cb777 account settings;
• Contacting the cb777 support team directly and requesting removal from marketing lists.

Please note that withdrawal of marketing consent does not affect the receipt of service-related communications, such as account statements, withdrawal confirmations, security alerts, and important notices relating to your cb777 account — these are sent on the basis of contract performance and legitimate interest and cannot be opted out of while your account remains active.

The cb777 Platform is strictly intended for individuals aged 21 years and above. cb777 does not knowingly collect, process, or retain personal data of persons under the age of 21. Registration on the cb777 Platform by a minor is a material breach of the cb777 Terms & Conditions.

Where cb777 has reasonable grounds to suspect that a player may be under 21 years of age, the account will be immediately suspended pending CNIC-based age verification. If age verification confirms the player is under 21, all funds will be returned to the depositing payment method (net of any withdrawals already made), all gaming records will be voided, and the account will be permanently closed. cb777 reserves the right to report suspected underage gambling to relevant authorities.

cb777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the cb777 Platform is encrypted using 256-bit SSL/TLS encryption. Sensitive data at rest (including CNIC scans and financial records) is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within the cb777 organisation is strictly role-based. Only authorised personnel who require access to fulfil defined job functions are granted access to player data.
• Two-Factor Authentication (2FA): cb777 provides 2FA for all player accounts and requires 2FA for all staff accessing systems that hold personal data.
• Penetration Testing: cb777's systems undergo regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• Incident Response: cb777 maintains a documented data breach incident response plan. In the event of a breach, affected players will be notified promptly and appropriate regulatory notifications will be made.
• Staff Training: All cb777 staff who handle personal data receive mandatory data protection training on an annual basis.

Whilst cb777 takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for notifying cb777 immediately if you suspect any unauthorised access to your account.

To exercise any of the data rights described in this Policy (access, rectification, erasure, restriction, portability, objection, or automated decision review), please contact the cb777 Data Protection team using the contact details provided in Section 15.

cb777 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case cb777 will notify you of the extension and the reason for it within the initial 30-day window.

To verify your identity before processing a data rights request, cb777 may ask you to provide confirmation of your registered email address, CNIC number, or other identifying information. This step is necessary to ensure we do not disclose or alter personal data in response to fraudulent requests.

There is no charge for exercising your data rights under this Policy. However, where requests are manifestly unfounded or excessive (particularly if repetitive), cb777 reserves the right to charge a reasonable administrative fee or to refuse to act on the request, with reasons provided.

If you are dissatisfied with cb777's response to a data rights request, you have the right to lodge a complaint with the competent supervisory authority in the jurisdiction governing cb777's data processing activities.

cb777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our licensing requirements, data processing practices, or Platform services. The effective date at the top of this Policy will be updated whenever a material change is made.

Where any amendment to this Policy materially affects how we process your personal data or your rights, cb777 will provide at least 14 days' advance notice via email to your registered address or via a prominent notice on the Platform. Your continued use of the cb777 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cb777, please contact us using the following details. The cb777 support team is available 24 hours a day, seven days a week.

Data Protection Enquiries Email:
[email protected]

Subject Line for Data Rights Requests:
DATA RIGHTS REQUEST — [Your Registered Email Address]

Live Chat Support:
Available within the cb777 Platform following login. Visit cb777 Login to access your account and connect with the support team directly.

For additional legal and policy documents, please review our Terms & Conditions and our Responsible Gaming Policy, both of which form part of your overall agreement with cb777.