Privacy Policy

This Privacy Policy ("Policy") describes how CB555 ("CB555", "we", "us", "our") collects, uses, stores, shares and protects personal data relating to individuals ("Users", "you", "your") who access or use the CB555 online betting and live casino platform at cb555.cam and any associated mobile applications or services (collectively, the "Platform").

CB555 operates an English-language platform designed for Pakistani users and adults in other permitted jurisdictions. We take data protection seriously. This Policy is written in plain English so that you can understand clearly what happens with your information — without having to navigate dense legal language alone.

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, IP address, device identifiers and financial information.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means CB555, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of CB555 and under CB555's instructions.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process CB555 uses to confirm the identity, age and source of funds of registered Users.
• "Cookies" means small text files placed on your device by the Platform to enable session management, analytics and personalisation functions.
• "Legitimate Interest" means a lawful basis for processing where CB555 has a genuine business need that is not overridden by your privacy rights.

CB555 collects only the Personal Data necessary to provide the Platform's services, comply with legal obligations and protect the integrity of the Platform. The categories of data we collect are set out below.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data, except where strictly required for regulatory compliance (for example, where a KYC document incidentally contains such information).

CB555 collects Personal Data through the following means:

• Direct provision: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or filling in any form on the Platform.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, server logs, device fingerprinting and analytics tools.
• Third-party sources: Identity and fraud-risk data received from KYC verification providers, credit reference agencies, payment processors and publicly available sanctions lists, where applicable.
• Responsible gambling integrations: Where a User is registered with a self-exclusion scheme or responsible gambling programme, CB555 may receive relevant data from that scheme in order to honour exclusion requests.

Where data is collected from third-party sources, CB555 will ensure that such collection is lawful and that appropriate data-sharing agreements are in place with those third parties.

CB555 processes your Personal Data only where a valid lawful basis applies. The bases we rely on are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — for example, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations — for example, KYC identity verification, anti-money laundering (AML) checks, and responses to lawful requests from regulatory authorities.
• Legitimate interests: Processing necessary for CB555's legitimate business purposes where those interests are not overridden by your rights — for example, fraud prevention, Platform security, responsible gambling monitoring, and improving our services through analytics.
• Consent: Processing based on your freely given consent — for example, sending marketing communications or placing non-essential cookies on your device. You may withdraw consent at any time; withdrawal does not affect the lawfulness of prior processing.

CB555 uses your Personal Data for the following purposes:

• Creating and managing your account and verifying your identity and age.
• Processing deposits, withdrawals and bet settlements in PKR and other applicable currencies.
• Complying with anti-money laundering (AML), counter-terrorism financing (CTF) and KYC obligations.
• Detecting, investigating and preventing fraudulent activity, cheating, collusion and other prohibited conduct.
• Monitoring your gambling activity for responsible gambling purposes, including identifying patterns that may indicate problem gambling and applying limits or exclusions where appropriate.
• Providing customer support and resolving disputes or complaints.
• Sending service-related communications, including transaction confirmations, security alerts and policy updates.
• Sending marketing communications, offers and promotions where you have consented or where a legitimate interest applies.
• Improving Platform performance, user experience and product offerings through aggregate analytics.
• Enforcing our Terms & Conditions and protecting the rights and safety of CB555, its staff and other Users.

CB555 will not use your Personal Data for any purpose that is incompatible with the purposes stated in this Policy without first obtaining your consent or establishing a separate lawful basis.

CB555 does not sell, rent or trade your Personal Data to third-party marketers or advertisers. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• KYC and identity verification providers: Third-party services that verify identity documents, CNIC records, and proof-of-address submissions as part of our compliance obligations.
• Payment processors: Entities that facilitate deposits and withdrawals. References to familiar Pakistani payment methods — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are for contextual familiarity only and do not imply any endorsement of gambling by those providers.
• Game suppliers and content providers: Third-party providers whose casino games, live dealer tables or sports data feeds are integrated into the Platform. These providers may receive limited technical data necessary to deliver their services.
• Fraud detection and security services: Specialist providers that help CB555 identify suspicious activity, protect against account takeover and maintain Platform integrity.
• Regulatory and law enforcement authorities: Where CB555 is required by applicable law or a valid legal order to disclose data to a government body, regulator or law enforcement agency.
• Responsible gambling schemes: Where required by our licence obligations or User request, CB555 may share relevant data with registered self-exclusion or multi-operator exclusion schemes.
• Business restructuring: In the event of a merger, acquisition or sale of all or substantially all of CB555's assets, User data may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy.

All third-party processors engaged by CB555 are required to enter into data processing agreements that obligate them to handle your Personal Data in accordance with applicable data protection standards and solely on CB555's documented instructions.

CB555 operates internationally and some of the third-party processors we engage may be located in, or process data in, jurisdictions outside Pakistan. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, CB555 will implement appropriate safeguards to protect that data, which may include:

• Standard contractual clauses approved by a relevant data protection authority.
• Binding corporate rules where the recipient is part of the same corporate group.
• Transfer to jurisdictions that have been recognised as providing adequate data protection.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan. CB555 takes reasonable steps to ensure that any such transfers are conducted lawfully and that your data receives an appropriate level of protection.

CB555 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. Our general retention approach is as follows:

• Account data: Retained for the duration of your account and for a minimum period after account closure as required by the operator's licence jurisdiction and applicable AML regulations. In many jurisdictions this period is five years or more.
• Transaction and financial records: Retained for the minimum period required by applicable financial regulations, typically five to seven years from the date of the transaction.
• KYC documents: Retained in accordance with AML and regulatory requirements for the jurisdiction in which CB555 holds its operating licence.
• Communications and support records: Retained for as long as necessary to resolve any outstanding disputes and for a reasonable period thereafter for quality and audit purposes.
• Technical and usage data: Anonymised or aggregated where possible and retained for analytical purposes for up to two years.
• Marketing consent records: Retained until you withdraw consent and for a reasonable period thereafter as evidence of prior consent.

When Personal Data is no longer required and no legal retention obligation applies, CB555 will securely delete or anonymise the data in accordance with our internal data disposal procedures.

CB555 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device that helps us recognise you, maintain your session and understand how you use the Platform.

The types of cookies we use are:

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens and load-balancing cookies. Essential cookies cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect aggregate information about how Users interact with the Platform — pages visited, session duration, error rates — to help us improve the user experience. Analytics data is anonymised where possible.
• Functional cookies: Used to remember your preferences such as language, display settings and responsible gambling limit configurations.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of CB555's marketing activities. Marketing cookies are set only with your prior consent.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Disabling certain cookies may affect the availability or functionality of some Platform features. Please refer to your browser's help documentation for guidance on cookie management.

CB555 may send you promotional emails, SMS messages or in-platform notifications about bonuses, new features, sporting events — including Pakistan cricket fixtures, PSL and ICC tournaments — and other offers, subject to the following conditions:

• Where you have expressly opted in to marketing communications during registration or at a later point within your account settings.
• Where CB555 has a legitimate interest in contacting you about products or services directly related to your use of the Platform, and you have not opted out.

You have the right to opt out of marketing communications at any time by:

• Updating your communication preferences within your account settings.
• Clicking the unsubscribe link included in any marketing email.
• Contacting our support team directly and requesting removal from marketing lists.

Opting out of marketing communications does not affect service communications — you will continue to receive transaction confirmations, security alerts and other essential account-related messages regardless of your marketing preference.

CB555 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial records and identity document copies.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access Personal Data.
• Audit logging of access to sensitive data systems, with regular review.
• Regular penetration testing and security assessments by qualified third parties.
• Two-factor authentication (2FA) options available for User accounts to reduce the risk of unauthorised access.

Despite these measures, no transmission over the internet or electronic storage system is completely secure. CB555 cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, CB555 will notify affected Users in accordance with applicable notification obligations.

Depending on the data protection laws applicable in your jurisdiction, you may have some or all of the following rights in relation to your Personal Data held by CB555:

• Right of access: The right to request a copy of the Personal Data CB555 holds about you, together with information about how it is used.
• Right to rectification: The right to request correction of inaccurate or incomplete Personal Data without undue delay.
• Right to erasure ("right to be forgotten"): The right to request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right may be limited by legal retention obligations.
• Right to restrict processing: The right to request that CB555 restricts the processing of your data in certain circumstances, such as where you contest its accuracy or have objected to processing based on legitimate interest.
• Right to data portability: The right to receive Personal Data you have provided to CB555 in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to object: The right to object to processing based on legitimate interest or for direct marketing purposes. CB555 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact our support team using the details in Section 16. We will respond to valid requests within a reasonable timeframe in accordance with applicable law. We may need to verify your identity before processing a rights request.

The CB555 Platform is strictly intended for adults aged 18 or above — or the higher minimum age required by the operator's licence jurisdiction. CB555 does not knowingly collect or process Personal Data from any person under the minimum eligible age.

Age verification is a mandatory component of our KYC process. Where CB555 discovers or has reasonable grounds to believe that an account is held by a minor, the account will be immediately suspended, all Personal Data associated with that account will be handled in accordance with applicable child protection requirements, and any deposits will be returned to the source payment method after deducting any winnings derived from play.

If you believe a minor has registered an account on the CB555 Platform, please contact our support team immediately using the details in Section 16.

CB555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. The date of the most recent update is always displayed at the top of this page.

Where changes are material — meaning they significantly affect your rights or how we use your data — CB555 will provide reasonable prior notice to registered Users via email or an in-platform notification. For non-material updates, the revised Policy will be published on this page and will take effect immediately upon publication.

Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any amendment, you should cease using the Platform and contact support to close your account.

If you have any questions, concerns or requests relating to this Privacy Policy or to the Personal Data CB555 holds about you, please contact our support team. We aim to acknowledge all privacy-related enquiries promptly and to resolve them in a timely manner.

Email: [email protected]
Support Language: English (Urdu-language support may be available on request)
Response Time: As stated by the operator — we endeavour to respond to all privacy requests within 30 days or the applicable statutory timeframe, whichever is shorter.

When submitting a rights request, please include your registered email address, a description of your request, and any information that will help us locate your account and verify your identity efficiently.