1. Who We Are
This Privacy Policy is published by CB666 ("CB666", "we", "us", "our"), the operator of the online sports betting and casino gaming platform available at cb666-bangla.com. CB666 is a platform built specifically for Pakistani users and operates entirely in Pakistani Rupees (PKR).
When we refer to "you" or "your" in this Privacy Policy, we mean any individual who visits the CB666 website, registers a CB666 account, places a bet, plays a casino game, or otherwise interacts with any CB666 service. This Privacy Policy applies to all CB666 members and visitors, regardless of which city or province in Pakistan you are based in.
CB666 is the data controller for your personal information. This means CB666 decides what personal data is collected, how it is used, and how long it is retained. If you have any question about how CB666 handles your data, please contact us directly at the details provided in Section 14.
By registering on CB666 or continuing to use our platform after this policy was updated, you acknowledge that you have read and understood how CB666 processes your personal data as described in this document.
2. Personal Data We Collect
CB666 collects only the personal information that is genuinely necessary to operate your account, process PKR payments, and meet our responsible gaming obligations. We do not collect data out of habit or for vague "future use". Here is a clear breakdown of the categories of data we collect from Pakistani CB666 members:
| Data Category |
Specific Data Points |
Required / Optional |
| Identity | Full name, date of birth, CNIC / NICOP / passport number | Required |
| Contact | Email address, Pakistani mobile number | Required |
| Account | CB666 username, password (hashed), account preferences | Required |
| Financial | Easypaisa / JazzCash / NayaPay / SadaPay account numbers, bank account details (IBFT), card details (tokenised, not stored in full) | Required for payments |
| Transactional | PKR deposit amounts, withdrawal records, bet history, casino game history, bonus activity | Automatic |
| Technical | IP address, device type, browser, operating system, session timestamps | Automatic |
| Communications | Support chat logs, email correspondence with CB666 | Automatic |
| Responsible Gaming | Deposit limits set, cool-off periods, self-exclusion requests | Where applicable |
CB666 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health information, or biometric data unless specifically required by legal or regulatory obligations and explicitly consented to by you.
3. How CB666 Collects Your Data
CB666 collects your personal data through three primary channels:
Information You Provide Directly
When you register a CB666 account, you provide your name, date of birth, email, and Pakistani mobile number. When you complete identity verification, you provide a copy of your CNIC or other ID document. When you contact CB666 support, the content of that communication is collected. When you set responsible gaming tools like deposit limits, that preference data is recorded.
Information Collected Automatically
When you visit or use CB666, our systems automatically collect technical information including your IP address, device identifier, browser type and version, the pages you visit within CB666, timestamps of your sessions, and the bets or games you access. This technical data is collected for security, fraud prevention, and platform performance purposes.
Information from Payment Processors
When you make a PKR deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, CB666 receives a transaction confirmation from the payment processor. This confirmation includes the transaction reference, amount, and status. CB666 does not receive your full mobile wallet PIN or card CVV number — these are processed directly by the payment provider and never transmitted to CB666.
CB666 does not purchase personal data lists from third parties or use data brokers to build profiles of Pakistani users. The data we hold about you is data you have provided or that was generated through your direct interaction with CB666.
4. Why CB666 Uses Your Personal Data
CB666 uses your personal data only for purposes that are directly connected to operating a legitimate, safe, and fair online gaming platform for Pakistani members. The specific purposes and the legal basis for each are as follows:
- Account management: To create, maintain, and administer your CB666 account, verify your identity, and keep your profile up to date. This is necessary for the performance of your contract with CB666.
- Payment processing: To process PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card, and to process PKR withdrawals back to your registered payment method. This is necessary for contract performance.
- Bet and game settlement: To record, settle, and pay out bets and casino game results accurately. This is necessary for contract performance.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account registration, and other prohibited conduct. This is a legitimate interest of CB666 and a legal obligation.
- Identity verification (KYC): To verify that you are who you say you are and that you meet the CB666 eligibility requirements (18 years of age, Pakistan resident). This is a legal and regulatory obligation.
- Responsible gaming: To monitor betting patterns, apply responsible gaming tools you have set, and fulfil CB666's duty of care obligations. This is a legal obligation and a legitimate interest.
- Customer support: To respond to your queries, resolve disputes, and communicate important account information. This is necessary for contract performance.
- Platform improvement: To analyse aggregated, anonymised usage data to improve the CB666 platform, fix bugs, and develop new features. This is a legitimate interest of CB666.
- Marketing communications: To send you promotional offers about CB666, only where you have given your explicit consent to receive them. See Section 12 for your marketing preferences.
CB666 will never use your personal data for purposes incompatible with those listed above without obtaining your explicit consent first.
5. Payment Data & PKR Transactions
Because all CB666 transactions are conducted in Pakistani Rupees (PKR) and involve local payment infrastructure, we want to be especially clear about how payment data is handled:
- Easypaisa & JazzCash: CB666 receives a transaction confirmation including the registered mobile number, transaction reference, and PKR amount. Your Easypaisa or JazzCash PIN is never transmitted to CB666 — it remains between you and your mobile wallet provider.
- NayaPay & SadaPay: The same principles apply. CB666 receives confirmation of a completed transaction but does not access your digital wallet credentials or stored card data within those apps.
- IBFT Bank Transfer: CB666 may receive your bank account number and the bank's transaction reference. This is used solely to match incoming deposits to your CB666 account.
- Visa / Mastercard: CB666 uses a PCI-DSS compliant payment gateway. Your full card number and CVV are handled by the payment gateway and are never stored on CB666's own servers. CB666 retains only a tokenised reference to your card for future transaction matching.
All PKR transaction records are retained by CB666 for a minimum of five years in line with standard financial record-keeping obligations. These records are used for dispute resolution, anti-money laundering compliance, and tax reporting purposes.
CB666 does not share your PKR payment data with any party other than the payment processors necessary to complete the transaction and any regulatory or law enforcement authority that makes a lawful request for such information.
6. Who CB666 Shares Your Data With
CB666 does not sell your personal data. Full stop. We share your data only with the following categories of third parties, and only to the extent strictly necessary:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing banks, and Visa/Mastercard gateway providers — solely to process your PKR deposits and withdrawals.
- Identity verification providers: Third-party KYC service providers who assist CB666 in verifying CNIC and other identity document authenticity. These providers are contractually bound to use your data only for verification purposes.
- Game software providers: Providers of casino game software (for Aviator, Roulette, Baccarat, etc.) may receive your CB666 player identifier and game activity data to deliver the game. They do not receive your full name, CNIC, or payment details.
- IT and hosting providers: Cloud infrastructure and hosting partners who store CB666 data on secured servers. These providers are bound by strict data processing agreements.
- Legal and regulatory authorities: CB666 will disclose personal data to Pakistani law enforcement, regulators, or courts where required by a lawful order or legal obligation. CB666 cannot refuse such requests where they are made with proper legal authority.
- Fraud prevention networks: CB666 may share limited account and transaction data with industry fraud prevention services to identify and block fraudulent activity that affects multiple platforms.
All third parties with whom CB666 shares your data are required to handle it in accordance with applicable data protection principles. CB666 does not share data with advertising networks, social media platforms, or data brokers for commercial or marketing purposes.
7. Cookies & Tracking Technologies
CB666 uses cookies and similar technologies on its website. A cookie is a small text file stored on your device when you visit a website. CB666 uses the following types of cookies:
- Essential cookies: Required for the CB666 platform to function. These include your session cookie that keeps you logged in, your betting preferences, and your PKR wallet state. Without these cookies, CB666 cannot operate. These cookies cannot be disabled.
- Security cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other security threats on your CB666 account.
- Analytics cookies: Used to understand how Pakistani members use CB666 — which pages are visited most, where users encounter problems, and how the platform can be improved. Analytics data is aggregated and anonymised. These cookies can be declined.
- Preference cookies: Store your CB666 display preferences such as language settings. These cookies can be cleared but doing so will reset your preferences on each visit.
CB666 does not use third-party advertising cookies or tracking pixels from social media platforms. You can manage cookies through your browser settings. Note that disabling essential cookies will prevent you from logging into or using CB666.
CB666 does not use cross-site tracking to follow you around the internet after you leave our platform. Our cookies operate only within the CB666 domain.
8. How Long CB666 Retains Your Data
CB666 retains your personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following standard retention periods:
- Active account data: Retained for the full duration of your CB666 membership, plus an additional period after account closure as described below.
- Financial and transaction records: Retained for a minimum of five years after the last transaction, in line with standard anti-money laundering record-keeping requirements.
- Identity verification documents: Retained for five years following account closure, or longer where required by law.
- Support communications: Retained for two years from the date of the last communication, to assist with any future queries or disputes.
- Technical logs (IP addresses, session data): Retained for six months for security and fraud investigation purposes.
- Self-excluded members: Identity information for self-excluded CB666 members is retained indefinitely to prevent re-registration. This is a responsible gaming obligation.
When your data is no longer required and retention obligations have expired, CB666 deletes or anonymises it securely. Anonymised data — where no individual can be identified — may be retained indefinitely for statistical analysis and platform improvement.
9. Security Measures at CB666
CB666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
- Encryption in transit: All data transmitted between your device and CB666's servers is encrypted using 256-bit SSL/TLS technology. The padlock icon in your browser confirms this is active.
- Encryption at rest: Sensitive personal data and payment information stored on CB666's servers is encrypted at rest.
- Password security: CB666 stores your password using a one-way cryptographic hash. Even CB666 staff cannot read your password — only you know it.
- Access controls: Access to systems holding personal data is restricted to CB666 staff who have a genuine operational need. Access is logged and audited regularly.
- Two-factor authentication (2FA): CB666 supports 2FA for member logins, adding a second layer of verification beyond just your password.
- PCI-DSS compliance: CB666's payment infrastructure meets PCI-DSS standards for card data handling.
- Penetration testing: CB666 commissions regular security testing of its platform to identify and remediate vulnerabilities before they can be exploited.
Despite these measures, no internet-based platform can guarantee absolute security. If you believe your CB666 account has been compromised or you have identified a potential security vulnerability, please contact CB666 support immediately at support@cb666-bangla.com.
10. Your Privacy Rights as a CB666 Member
As a CB666 member based in Pakistan, you have the following rights in relation to your personal data. You can exercise any of these rights at any time by contacting CB666 support:
Right to Access
Request a copy of all personal data CB666 holds about you. We will provide this within 30 days in a readable format.
Right to Correct
Request correction of any inaccurate personal data CB666 holds. You can update most information directly in your CB666 account settings.
Right to Delete
Request deletion of your personal data when it is no longer necessary for CB666's purposes and no legal retention obligation applies.
Right to Restrict Processing
Request that CB666 limits how it processes your data in certain circumstances, such as while a dispute is under review.
Right to Portability
Request your CB666 data in a structured, machine-readable format (e.g., CSV) so you can transfer it to another service.
Right to Object
Object to CB666 processing your data for marketing purposes or for purposes based on legitimate interests, where your situation warrants it.
To exercise any of these rights, email CB666 at support@cb666-bangla.com with the subject line "Privacy Rights Request". CB666 will acknowledge your request within 48 hours and respond within 30 days. We may need to verify your identity before processing certain requests.
11. Minors — Under-18 Protection
CB666 is strictly an over-18 platform. We do not knowingly collect personal data from any individual under the age of 18. The CB666 registration process includes a date-of-birth verification step specifically designed to identify and reject underage applicants.
If CB666 discovers that personal data has been collected from someone under 18, we will immediately:
- Suspend the associated account.
- Delete or anonymise all personal data collected from that individual as quickly as possible.
- Return any PKR funds to the payment source where it is possible to do so.
If you are a parent or guardian and believe your child has accessed CB666, please contact us immediately at support@cb666-bangla.com. We will investigate and act promptly. We also strongly encourage parents to use device-level parental controls to prevent minors from accessing online gaming platforms.
12. Marketing Communications
CB666 only sends marketing communications — promotional offers, deposit bonuses, game announcements — to members who have explicitly opted in to receive them during registration or subsequently through their CB666 account settings.
CB666 marketing communications are sent via:
- Email to your registered CB666 email address.
- SMS to your registered Pakistani mobile number (where opted in).
- In-platform notifications within your CB666 account.
You can unsubscribe from CB666 marketing communications at any time by:
- Clicking the unsubscribe link in any CB666 marketing email.
- Updating your communication preferences in your CB666 account settings.
- Contacting CB666 support directly.
Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, bet settlements, or account security alerts — you will always receive these regardless of your marketing preference.
CB666 does not share your contact details with third-party marketers. Any CB666 promotional communication comes directly from CB666 — if you receive a message claiming to be from CB666 through an unofficial channel, treat it with caution and report it to our support team.
13. Changes to This Privacy Policy
CB666 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. The "Last updated" date at the top of this page will always show when the current version came into effect.
When CB666 makes material changes to this Privacy Policy — changes that significantly affect how we collect or use your personal data — we will:
- Send a notification email to your registered CB666 address at least 7 days before the change takes effect.
- Display a prominent in-platform notice when you next log in to CB666 during the notice period.
For minor changes (such as clarifications that do not alter the substance of our data practices, or corrections of typographical errors), we may update the policy without advance notice.
We encourage you to review this Privacy Policy periodically. Your continued use of CB666 following the effective date of any update constitutes your acceptance of the revised policy.
