cb77 Privacy Policy

1 Who We Are

cb77 is an internationally licensed online gaming operator providing casino games, live dealer tables, sports and cricket betting, Teen Patti, PP Live content, and slot titles through the platform accessible at https://cb77.live. cb77 is the data controller responsible for the personal data collected through the platform.

For all privacy-related queries, data subject requests, or concerns, you may contact the cb77 Data Protection team using the contact details provided in Section 14 of this Policy. cb77's support team operates on Pakistan Standard Time (PKT / UTC+5) and handles all communications in English.

2 Personal Data We Collect

cb77 collects personal data through several channels, including account registration, gameplay activity, financial transactions, customer support interactions, and your use of the cb77 website. The categories of data we may collect include:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify the minimum age requirement of 21 years).
• Gender (where voluntarily provided).
• Nationality and country of residence.
• Government-issued ID number (CNIC, passport, or equivalent).
• Copies of identity documents submitted for KYC verification.

2.2 Contact & Communication Data

• Email address used for account registration and communications.
• Mobile phone number (used for account verification and two-factor authentication where applicable).
• Residential or mailing address (for proof-of-address verification).
• Records of all correspondence between you and cb77 support, including chat transcripts and emails.

2.3 Financial & Transaction Data

• Details of your registered payment methods, including JazzCash account numbers, EasyPaisa wallet IDs, HBL, UBL, or Meezan Bank account references, and masked card numbers for Visa or Mastercard.
• Transaction history including deposits, withdrawals, bonus credits, and wager records.
• Source of funds documentation where required for anti-money laundering compliance.

2.4 Technical & Usage Data

• IP address and geolocation data derived from it.
• Device type, operating system, browser type and version.
• Login timestamps, session durations, and page navigation data.
• Game activity logs including games played, bet amounts, and outcomes.
• Referral source (how you arrived at the cb77 platform).

3 How We Use Your Personal Data

cb77 uses the personal data we collect for the following specific purposes:

cb77 will not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by applicable law or regulatory authority.

4 Legal Basis for Processing

cb77 processes your personal data on the following legal bases, consistent with internationally recognised data protection standards:

• Contractual necessity: Processing required to provide you with the cb77 platform services as per our Terms & Conditions, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and regulatory reporting obligations under our international gaming license.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and the improvement of cb77's products and services, where such interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given clear, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

cb77 does not sell your personal data. We may share your data with the following categories of recipients only where necessary and proportionate:

5.1 Service Providers

cb77 engages trusted third-party service providers who process personal data on our behalf under binding data processing agreements. These include KYC and identity verification providers, payment processors (including those facilitating JazzCash, EasyPaisa, and bank transfers), cloud hosting providers, and fraud detection services. All such providers are contractually required to maintain the confidentiality and security of your data and may not use it for their own purposes.

5.2 Regulatory & Law Enforcement Authorities

cb77 may disclose personal data to regulators, licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made strictly on a need-to-know basis.

5.3 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of cb77's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the applicable privacy terms in advance.

6 International Data Transfers

As an internationally licensed gaming operator, cb77 may process and store personal data on servers located outside Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as Pakistan, cb77 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by internationally recognised data protection authorities.
• Data processing agreements with all third-party recipients that impose equivalent data protection obligations.
• Technical and organisational security measures appropriate to the risk associated with the transfer.

By using the cb77 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan. cb77 will always ensure that such transfers are conducted in accordance with applicable data protection standards.

7 Cookies & Tracking Technologies

cb77 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that help us deliver a consistent, secure, and functional experience. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the operation of the cb77 platform, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings and login state across sessions.
• Analytics Cookies: Used to collect anonymised data about how players interact with the cb77 platform, helping us identify areas for improvement. No personally identifiable data is collected through analytics cookies.
• Marketing Cookies: Used only where you have provided explicit consent, to deliver relevant promotional content related to cb77. You may withdraw consent at any time through your browser settings.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the cb77 platform.

8 Data Retention

cb77 retains personal data only for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by our international gaming license obligations and applicable law. Our standard retention periods are as follows:

• Account data: Retained for the duration of your active account relationship with cb77, plus a minimum of five (5) years following account closure, to comply with AML and regulatory obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following the end of the business relationship or the date of the last transaction, whichever is later.
• Support communications: Retained for three (3) years from the date of the last interaction, unless longer retention is required for dispute resolution or legal proceedings.
• Technical and usage data: Retained in anonymised or aggregated form for platform analytics purposes for up to two (2) years.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following its withdrawal, as evidence of consent management.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with cb77's data disposal procedures.

9 Your Data Protection Rights

Subject to applicable law and our legal obligations as a licensed gaming operator, you have the following rights in respect of your personal data held by cb77: