cb555 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") is published by cb555 ("cb555", "we", "us", "our"), the operator of the online casino and sports betting platform available at cb555.one. It describes how cb555 collects, uses, stores, protects, and in certain circumstances discloses the personal information of individuals ("you", "your") who access or register on the cb555 platform.

This Policy applies to all personal data collected through the cb555 website at cb555.one, including during account registration, identity verification, deposit and withdrawal transactions, gaming activity, customer support interactions, and marketing communications.

This Policy should be read alongside the cb555 Terms and Conditions. In the event of any conflict between this Policy and the Terms and Conditions regarding data handling, this Policy shall prevail.

cb555 collects the following categories of personal data from members and prospective members:

We do not intentionally collect special category data (such as racial or ethnic origin, health data, religious beliefs, or political opinions) and request that members refrain from submitting such information through any platform channel.

cb555 collects personal data through the following mechanisms:

• Direct Submission: Data you provide when completing the account registration form, submitting KYC verification documents, initiating deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated Technical Collection: Data collected automatically when you access the cb555 platform, including IP address, device identifiers, browser characteristics, and session metadata. This collection occurs via server logs and, where applicable, cookies and similar tracking technologies as described in Section 7.
• Payment Processors: Transactional confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processing partners, confirming deposit and withdrawal status.
• Identity Verification Partners: Data received from third-party KYC and identity verification service providers used to confirm the authenticity of identity documents submitted during the verification process.
• Fraud Detection Systems: Data derived from automated fraud screening tools that analyse transaction patterns, login behaviour, and device fingerprints to identify potentially fraudulent account activity.

cb555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of Contract: Processing necessary to fulfil the Terms and Conditions agreement between you and cb555, including account creation, game provision, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements imposed by our licensing authority, and any applicable data retention obligations.
• Legitimate Interests: Processing conducted for cb555's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of marketing communications and promotional materials. You may withdraw consent for marketing communications at any time by contacting cb555 support via live chat.

cb555 uses the personal data we collect for the following purposes:

• Account Registration and Management: To create and maintain your cb555 member account, authenticate your login, manage your PKR balance, and process account-related requests.
• Identity Verification (KYC): To verify your identity and age (21+) in accordance with our licensing obligations and anti-money laundering requirements before processing withdrawal requests.
• Payment Processing: To process deposits received via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer, and to process withdrawal requests to your verified payment method.
• Game Provision and Sportsbook: To deliver the cb555 casino games, live dealer tables, and sports betting markets, and to record gaming activity for dispute resolution, RTP audit, and responsible gaming monitoring purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account abuse, bonus exploitation, money laundering, and other prohibited conduct as defined in the Terms and Conditions.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, to action member-initiated responsible gaming tool requests (deposit limits, self-exclusion), and to fulfil our duty of care obligations under our licensing framework.
• Customer Support: To respond to your support queries, resolve disputes, and maintain records of support interactions for quality assurance and compliance purposes.
• Marketing Communications: Where you have provided consent, to send promotional offers, bonus announcements, PSL betting promotions, and platform update notifications to your registered contact details. You may opt out at any time via live chat.
• Platform Improvement: To analyse aggregated and anonymised usage data in order to identify and resolve technical issues, improve the platform's user experience, and develop new features suited to Pakistani players.
• Regulatory Compliance: To fulfil reporting obligations to our licensing authority, respond to lawful requests from competent authorities, and maintain records required under applicable law.

cb555 does not sell, rent, or commercially trade your personal data to any third party. We share personal data with third parties only in the following limited circumstances:

• Payment Processors: We share transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners solely to the extent necessary to process your deposit and withdrawal requests. These partners are bound by their own privacy obligations and applicable financial regulations.
• KYC and Identity Verification Providers: We share identity document data with accredited third-party KYC verification service providers solely for the purpose of confirming your identity and age. These providers are contractually bound to handle your data securely and to use it only for verification purposes.
• Game Software Providers: Game outcome data and session metadata may be shared with licensed game providers for the purposes of RTP auditing, dispute resolution, and technical maintenance. Providers do not receive your name, contact details, or financial data.
• Fraud Prevention Services: Transaction and device data may be shared with third-party fraud detection service providers for the purposes of identifying and preventing fraudulent activity, money laundering, and account abuse.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to regulators, law enforcement agencies, courts, or other competent authorities where we are required to do so by applicable law, legal process, or regulatory obligation. Where legally permissible, we will notify you of such disclosures.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of cb555's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations being imposed on the transferee.

The cb555 platform uses cookies and similar browser-based tracking technologies to support platform functionality, maintain session security, and analyse aggregate usage patterns. The following categories of cookies may be set when you access cb555.one:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your account and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without causing the platform to malfunction.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming tool configurations, and display preferences. Disabling these cookies may result in a reduced platform experience.
• Analytics Cookies: Used to collect anonymised, aggregated data about how members use the platform — including which pages are visited most frequently, how long members spend in the game lobby, and what device types are most common among Pakistani players. This data is used solely to improve the platform and is not linked to individual identities.
• Session Security Cookies: Short-lived cookies that support the integrity and security of your active gaming session, expiring automatically when you close your browser or log out of your account.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from accessing the cb555 platform. Blocking functional or analytics cookies will not affect your ability to access the platform but may reduce your experience quality.

cb555 retains personal data for the following periods, after which data is securely deleted or permanently anonymised:

Where retention beyond these periods is required by a specific legal obligation (for example, where data forms part of an ongoing fraud investigation or legal proceeding), cb555 will retain the relevant data until that obligation is discharged, after which it will be deleted promptly.

Subject to applicable law and any legal obligations that may temporarily restrict the exercise of these rights, you hold the following rights over your personal data held by cb555:

To exercise any of the above rights, contact cb555 support via live chat at cb555.one. We will acknowledge your request within 5 business days and will provide a substantive response within 30 days of receipt. Complex requests may require additional time, in which case we will notify you of the extended timeline and the reason for it.

cb555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the cb555 platform is encrypted using 256-bit SSL/TLS protocols. The cb555 website operates exclusively over HTTPS.
• Data-at-Rest Encryption: Personal data and financial records stored on cb555 servers are encrypted at rest using AES-256 encryption. KYC documents and payment details receive additional access controls beyond the standard encryption layer.
• Access Controls: Access to personal data is restricted to cb555 personnel and authorised service providers who require it to perform their specific function. Role-based access controls ensure that no individual can access more data than their function requires.
• Penetration Testing: The cb555 platform undergoes regular independent penetration testing and vulnerability assessments conducted by accredited third-party security firms to identify and remediate security weaknesses before they can be exploited.
• Incident Response: cb555 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, cb555 will notify affected members and the relevant supervisory authority within the timeframes required by applicable law.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. You are responsible for maintaining the security of your own account credentials and for logging out of your cb555 account when using shared or public devices.

The cb555 platform is strictly intended for individuals aged 21 years and above. cb555 does not knowingly collect, process, or retain any personal data from persons under the age of 21.

Age verification is a mandatory step in the cb555 account registration process. Any account found to have been created by a person under 21, or to have been used by a person under 21 following registration, will be suspended immediately. Any balance held in such an account will be returned in full to the payment method from which funds were deposited, after deduction of any bonus credit.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has created a cb555 account, please contact cb555 support immediately via live chat so that the account can be closed and funds returned without delay.

cb555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. Where changes are material — meaning they significantly affect how we use your personal data or the rights available to you — we will notify registered members via the contact details held on their account, with reasonable notice before the changes take effect.

The version number and effective date at the top of this document reflect the most current revision. We encourage you to review this Policy periodically to stay informed of how cb555 is protecting your data.

Your continued use of the cb555 platform following notification of changes to this Policy constitutes your acknowledgement of the revised version. If you do not accept the revised Policy, you must stop using the platform and may request account closure via live chat.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how cb555 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the cb555 platform at cb555.one. This is the fastest route for data subject requests and privacy concerns.
• Email: [email protected] (plain text — this is not a clickable link). Please include "Privacy Request" in your subject line. Responses to email requests are typically provided within one business day.

For all data subject requests (access, rectification, deletion, restriction, portability, objection), cb555 will acknowledge receipt within 5 business days and will provide a substantive response within 30 days. Where your request is complex or where cb555 receives multiple requests from you, we may extend this period by a further 60 days, in which case you will be notified of the extension and the reason for it.