CB888 is committed to protecting the privacy and personal data of every user who accesses our platform — including players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. This Privacy Policy explains precisely what data we collect, how we use it, with whom we share it, and what rights you hold as a data subject.
This Privacy Policy ("Policy") is issued by CB888 ("CB888", "we", "us", "our"), the operator of the online gaming information and entertainment platform at https://cb888.cam ("Platform", "Site", "Website"). This Policy applies to all users ("you", "your", "User") who access, browse or register on the Platform, regardless of their location or device.
CB888 is an English-language online gaming information and entertainment platform targeting Pakistani users. We provide educational content about online casino games, sports betting, responsible gambling and payment methods. As part of delivering these services, CB888 processes certain personal data about users. This Policy governs how we collect, use, store, protect and disclose that data.
CB888 takes the privacy of its users seriously. We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles — including those reflected in internationally recognised frameworks such as the EU General Data Protection Regulation ("GDPR"), which inform our approach to data governance even where not directly applicable.
By using the CB888 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, CNIC number, email address, IP address, device identifiers or location data. |
| "Processing" | Any operation performed on Personal Data — including collection, recording, storage, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. CB888 acts as Data Controller for data collected via the Platform. |
| "Data Processor" | A third-party entity that processes Personal Data on behalf of CB888 under a contractual data processing agreement. |
| "Cookies" | Small text files placed on a user's device by a website to store session information, preferences and anonymised analytical data. |
| "KYC" | Know Your Customer — the identity verification process used to confirm a user's identity, age and eligibility in accordance with anti-money laundering (AML) and fraud prevention obligations. |
| "Special Category Data" | Particularly sensitive personal data including health information, financial vulnerability indicators, and data relating to problem gambling — processed only where strictly necessary and with enhanced safeguards. |
CB888 is the Data Controller for personal data collected through the Platform. As Data Controller, CB888 determines the purposes for which personal data is collected and the means by which it is processed. CB888 is responsible for ensuring that all processing activities comply with applicable data protection obligations.
For all privacy-related enquiries, requests to exercise data subject rights, or notifications of suspected data breaches, please contact our designated privacy point of contact using the details provided in Clause 16 of this Policy.
CB888 does not appoint a formal Data Protection Officer where not legally required to do so, but we maintain a dedicated privacy contact responsible for overseeing compliance with this Policy and responding to data subject requests within applicable timeframes.
CB888 collects personal data across the following categories, depending on how you interact with the Platform:
When you create an account on the Platform, we collect: full legal name, username, email address, date of birth (for age verification), country of residence, and optionally a phone number. This data is necessary to create and maintain your account.
Where KYC verification is required, we may collect copies of your Pakistani CNIC (Computerised National Identity Card), passport, driver's licence or other government-issued identity documents. We may also collect proof-of-address documents (such as utility bills or bank statements from providers like HBL, UBL, Meezan Bank or Bank Alfalah — for address confirmation only) and selfie or liveness verification images. KYC data is processed exclusively for identity and age verification, AML compliance and fraud prevention purposes.
We may collect records of deposits, withdrawals and payment method references associated with your account. This may include partial payment method identifiers (e.g., last four digits of a card, or registration name on a mobile wallet like Easypaisa or JazzCash). We do not store full card numbers or complete bank account credentials on CB888's systems.
Automatically collected when you access the Platform: IP address, browser type and version, operating system, device type and identifiers, screen resolution, referring URL, session duration and page interaction data.
Pages visited, content viewed, search queries made within the Platform, game category interactions, click patterns and session timestamps. This data is used to improve Platform functionality and personalise content.
Records of support tickets, emails, chat logs and other correspondence you send to CB888 via the Platform or to [email protected].
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Name, CNIC, passport, date of birth | Account creation, KYC, age verification |
| Contact Data | Email address, phone number | Account management, support communication |
| Technical Data | IP address, browser, device ID | Security, fraud prevention, analytics |
| Usage Data | Pages visited, clicks, session data | Platform improvement, personalisation |
| Financial References | Partial payment identifiers | Transaction records, AML compliance |
| Communications Data | Support emails, chat logs | Customer service, dispute resolution |
CB888 collects personal data through the following channels:
KYC Document Security: Never submit identity documents (CNIC, passport) through any channel other than the Platform's official, HTTPS-secured verification portal. CB888 will never request sensitive identity documents via WhatsApp, email, Telegram or any other unencrypted channel. If you receive such a request claiming to be from CB888, treat it as fraudulent and report it immediately.
CB888 processes personal data for the following specific, documented purposes:
CB888 will not process your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent, unless required to do so by applicable law.
CB888 processes personal data on the following legal bases, in accordance with the principles reflected in internationally recognised data protection frameworks:
CB888 does not sell, rent or commercially exploit your personal data to third parties. We may share your data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:
Trusted third-party service providers who process data on CB888's behalf under formal data processing agreements — including KYC and identity verification providers, cloud hosting and infrastructure services, analytics providers, fraud detection services, and customer support platform operators. These processors are contractually bound to process data only on CB888's instructions and in accordance with applicable data protection obligations.
CB888 may disclose personal data to competent courts, regulatory bodies, law enforcement agencies or other government authorities where required to do so by applicable law, court order or lawful regulatory request. Where legally permitted to do so, CB888 will notify affected users of such disclosures.
In the event of a merger, acquisition, corporate restructuring or sale of CB888's business or assets, personal data held by CB888 may be transferred to the successor entity, subject to equivalent data protection obligations. Affected users will be notified of any such transfer in advance where practically possible.
References to Pakistani payment services — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — on this Platform are for informational and local-context purposes only. CB888 does not share user data with these providers, and does not represent that any of these providers support, endorse or are affiliated with CB888 or with gambling activity.
CB888 will never sell your personal data to advertisers, data brokers or any commercial third party for marketing purposes. Your data is processed only to deliver our services and meet our legal obligations.
CB888's Platform serves users across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and beyond. Where CB888 engages service providers or infrastructure located outside Pakistan, personal data may be transferred internationally.
Where personal data is transferred to countries that may not provide an equivalent level of data protection to that available in Pakistan or the user's home jurisdiction, CB888 will implement appropriate safeguards to protect that data — including contractual protections (standard contractual clauses or equivalent), technical security measures, and restrictions on the processing purposes available to recipient entities.
By using the Platform, you acknowledge that your personal data may be transferred to, stored and processed in countries other than Pakistan. CB888 takes reasonable steps to ensure that such transfers occur only to entities that provide adequate data protection safeguards.
CB888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Our general retention approach is as follows:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + up to 5 years after closure | Contractual and legal compliance |
| KYC / identity documents | Up to 5–7 years post-verification | AML and regulatory obligations |
| Transaction records | Up to 7 years | Financial record-keeping obligations |
| Technical / log data | Up to 13 months (rolling) | Security monitoring and fraud detection |
| Support communications | Up to 3 years from last interaction | Customer service and dispute resolution |
| Cookie / analytics data | As per cookie consent settings (typically 12 months) | Platform improvement |
Upon expiry of the applicable retention period, CB888 will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices.
CB888 uses cookies and similar tracking technologies to operate the Platform, improve user experience and gather anonymised analytical data. The following categories of cookies are used:
You can manage your cookie preferences through your browser settings or through any cookie consent tool provided on the Platform. Note that disabling certain cookies may affect Platform functionality. For detailed information about specific cookies deployed on the Platform, please contact us using the details in Clause 16.
Subject to applicable data protection law and CB888's legal obligations, you hold the following rights in respect of your personal data processed by CB888. To exercise any of these rights, contact us using the details provided in Clause 16.
You have the right to request a copy of all personal data CB888 holds about you. We will respond to verified access requests within 30 days, free of charge for the first request.
You may request correction of inaccurate or incomplete personal data. Where data has been shared with third-party processors, we will notify them of the correction where feasible.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to CB888's legal retention obligations.
You may request that CB888 restricts processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified or a complaint is being investigated.
Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.
You may object to processing based on CB888's legitimate interests, including profiling for direct marketing purposes. CB888 will cease such processing unless it can demonstrate compelling legitimate grounds.
To exercise any of the above rights, contact CB888 at [email protected] with subject line "Data Subject Rights Request". We may need to verify your identity before processing your request. CB888 aims to respond to all valid requests within 30 calendar days. In complex cases this may be extended to 60 days with prior notification.
The CB888 Platform is strictly restricted to adults aged 18 years or older — or the higher minimum age required by the operator/license jurisdiction for any gambling activity. The Platform is not intended for, and does not knowingly collect personal data from, persons under the age of 18.
If CB888 becomes aware that personal data has been collected from a minor without verifiable parental or guardian consent, we will take immediate steps to delete that data from our systems and close the associated account. Parents or guardians who believe their child has accessed the Platform and provided personal data should contact CB888 immediately at the details provided in Clause 16.
Age Verification: CB888 reserves the right to request age verification at any time. Accounts that cannot be age-verified to CB888's satisfaction will be suspended pending verification. This applies to all users regardless of their city of residence in Pakistan.
CB888 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:
Despite these measures, no internet transmission or electronic storage is entirely secure. CB888 cannot guarantee absolute security of personal data but commits to maintaining security measures that meet industry standards and to notifying affected users promptly in the event of a material data breach.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, CB888 will notify affected users without undue delay, with details of the nature of the breach, the data involved, likely consequences and measures taken or proposed to address it.
CB888 reserves the right to update, modify or replace any part of this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, Platform functionality or operational requirements. The "Last Updated" date at the top of this Policy will be revised on each update.
For material changes that significantly affect how we process your personal data or your rights as a data subject, CB888 will provide advance notice via a Platform banner notification, in-app message or email to registered account holders (where technically feasible). For non-material updates — such as clarifications of existing provisions or corrections of typographical errors — publication on the Platform constitutes sufficient notice.
Your continued use of the Platform following publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease use of the Platform and may request deletion of your personal data in accordance with Clause 12.
For all privacy-related enquiries, data subject rights requests, complaints or notifications of suspected data security incidents, please contact the CB888 privacy team using the details below. Our email address is provided as plain text only and is not a clickable link:
CB888 Privacy Contact
📧 Email: [email protected]
📌 Subject Line: "Privacy Enquiry" or "Data Subject Rights Request"
🕐 Response Time: We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 calendar days.
🌐 Platform: https://cb888.cam
📍 Serving users across Pakistan — Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and beyond.
When contacting us about a data subject rights request, please include your full name, registered email address, a description of your request and any relevant account identifiers. Do not include your account password or financial credentials in any correspondence. CB888 will verify your identity before processing any data subject rights request to prevent unauthorised data disclosures.
Six pillars that define CB888's approach to data privacy for Pakistani users.
Every interaction between your device and CB888 is protected by industry-standard TLS encryption. Your login credentials, identity documents and personal data travel over fully encrypted connections at all times.
CB888 does not sell, rent or commercially exploit personal data to third-party advertisers, data brokers or marketing firms. Your information is processed solely to deliver our services and meet legal obligations — nothing more.
We retain personal data only for as long as legally required or operationally necessary. Our retention schedule is published clearly in this Policy. When data is no longer needed, it is securely deleted or anonymised.
CB888 recognises your rights to access, rectify, delete, port and restrict your personal data. All data subject rights requests are handled within 30 calendar days by our dedicated privacy contact team.
Identity documents — including Pakistani CNICs and passports — are processed exclusively through the Platform's HTTPS-secured verification portal. CB888 will never request sensitive documents via WhatsApp, email or any unsecured channel.
Any third-party service provider that processes data on CB888's behalf is bound by a formal data processing agreement. Sub-processors must meet the same data protection standards that CB888 applies to its own processing activities.
If you have any questions about how CB888 handles your data, want to exercise a data subject right, or need to report a security concern — our team is ready to assist. You can also explore our other key policies below.
18+ Adults only — local laws may restrict gambling. CB888 is an information platform only.