Privacy Policy — cb786

1. Introduction

This Privacy Policy (hereinafter referred to as the "Policy") describes how cb786 (hereinafter referred to as "the Platform", "we", "us" or "our") collects, processes, stores, shares and protects the personal data of individuals who access or use the website at https://cb786.cam (hereinafter referred to as the "Website").

cb786 operates as an English-language online gaming information platform. Our primary audience comprises users in Pakistan who seek educational content about sports betting, live casino games, responsible gambling practices, payment methods and related topics. This Policy applies to all users of the Website, regardless of whether they have created a registered account.

cb786 is committed to processing personal data in accordance with internationally recognized data protection principles, including those enshrined in the General Data Protection Regulation (GDPR) where applicable by reference as a benchmark standard. This Policy does not constitute legal advice, and users in Pakistan should be aware that domestic data protection legislation — including any applicable provisions under Pakistani law — may also apply to their use of the Platform.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person ("Data Subject"). An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
• "Processing" — any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, cb786 is the Data Controller.
• "Data Processor" — a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Data Controller.
• "Consent" — freely given, specific, informed and unambiguous indication of a Data Subject's agreement to the processing of their personal data for one or more specified purposes.
• "Cookies" — small text files placed on a user's device by a website for purposes including session management, preference storage and usage analytics.
• "KYC" — Know Your Customer; the identity verification process used to confirm a user's identity, age and residential details in compliance with anti-money laundering and fraud-prevention requirements.

3. Data Controller Information

cb786 acts as the Data Controller in respect of personal data collected through the Website. As Data Controller, we are responsible for determining the purposes for which and the means by which personal data is processed.

For all privacy-related enquiries, data subject rights requests and complaints, users may contact us using the details set out in Section 17 (Contact Us) of this Policy. Contact details are provided as plain text only and do not constitute clickable links.

4. Categories of Personal Data We Collect

cb786 may collect the following categories of personal data from users of the Website:

4.1 Registration and Account Data

• Full legal name;
• Date of birth (for age verification purposes);
• Country and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar);
• Email address;
• Username and encrypted password;
• Contact number, where provided.

4.2 Identity Verification (KYC) Data

• Government-issued photo identification — such as a Pakistani CNIC (Computerised National Identity Card) or international passport;
• Proof of residential address — such as a recent utility bill or bank statement;
• Liveness or selfie verification images, where required by the verification process;
• Payment method verification documentation, where applicable.

4.3 Financial and Transaction Data

• Deposit and withdrawal records, including amounts in PKR or other applicable currencies;
• Payment method references — such as Easypaisa wallet identifiers, JazzCash references, Raast IDs, bank account details (partially masked), or cryptocurrency wallet addresses (BTC / USDT) — collected solely for transaction processing and fraud prevention purposes;
• Bonus and promotional activity records.

4.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system and browser version;
• Pages visited, session duration, click-path and navigation behaviour;
• Referring website or search query, where applicable;
• Cookies and similar tracking technology data (see Section 11).

4.5 Communication Data

• Support ticket contents, live chat transcripts and email correspondence with our support team;
• Feedback, complaint and enquiry records.

5. How We Collect Personal Data

cb786 collects personal data through the following channels:

• Direct provision: Data you provide voluntarily when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team;
• Automated collection: Technical and usage data collected automatically through cookies, server logs and analytics tools when you access and navigate the Website;
• Third-party sources: Identity verification agencies or payment processors that provide data as part of the KYC or fraud-prevention process, where applicable and permissible under applicable law;
• Public sources: Publicly available information used for fraud detection, sanctions screening or identity verification cross-referencing.

6. Lawful Basis for Processing

cb786 processes personal data only where a valid lawful basis exists. The applicable lawful basis depends on the specific processing activity:

7. How We Use Your Personal Data

cb786 uses the personal data it collects for the following specific purposes:

• To create, maintain and manage your registered Account on the Platform;
• To verify your identity and age in accordance with applicable KYC requirements;
• To process deposit and withdrawal transactions and maintain accurate financial records;
• To detect, investigate and prevent fraudulent activity, money laundering and unauthorized account access;
• To administer bonus and promotional offers and verify eligibility;
• To respond to your support enquiries, complaints and feedback;
• To send you transactional communications relating to your Account — such as deposit confirmations, withdrawal updates and security alerts;
• To send promotional and marketing communications where you have provided explicit consent — you may withdraw this consent at any time;
• To analyze aggregated, anonymized usage patterns to improve the Platform's performance, content and user experience;
• To comply with legal obligations imposed by applicable regulatory or law-enforcement authorities;
• To enforce our Terms & Conditions and other applicable Platform policies.

8. Data Sharing and Disclosure

cb786 does not sell, rent or trade your personal data to third parties for their own commercial purposes. We may, however, share personal data with the following categories of recipients, strictly on a need-to-know basis:

• Identity verification providers: Third-party KYC and age-verification services engaged to confirm your identity and eligibility in accordance with regulatory requirements;
• Payment processors: Financial service providers and payment infrastructure operators engaged to process deposits and withdrawals — including relevant operators of payment rails familiar to Pakistani users such as bank-transfer networks and mobile money services;
• IT and platform service providers: Cloud hosting, database management, security and analytics service providers operating on our behalf under data-processing agreements;
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, courts or governmental authorities where disclosure is required by applicable law, court order or legal process;
• Professional advisors: Legal counsel, auditors or compliance advisors engaged to advise cb786 in connection with legal proceedings, audits or regulatory enquiries;
• Business successors: In the event of a merger, acquisition, restructuring or sale of assets, user data may be transferred as part of that transaction, subject to equivalent privacy protections continuing to apply.

Where we share data with third-party data processors, we require them to process personal data only on our documented instructions and to maintain appropriate technical and organizational security measures.

9. International Data Transfers

cb786 operates a platform that may involve the storage and processing of personal data on servers or through service providers located outside Pakistan. Where personal data is transferred to countries that may not provide equivalent data protection standards to those applicable in the European Economic Area or other regions with recognized adequacy frameworks, we implement appropriate safeguards to protect your data.

These safeguards may include:

• Standard contractual clauses approved by recognized data protection authorities;
• Binding corporate rules where applicable;
• Adequacy decisions by relevant supervisory authorities;
• Explicit consent from the Data Subject where no other adequate safeguard applies and the transfer is necessary.

10. Data Retention

cb786 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable legal and regulatory obligations. The following general retention principles apply:

• Account data: Retained for the duration of your active Account and for a minimum period following Account closure as required by applicable AML and fraud-prevention regulations — typically five (5) years, or as otherwise required by the operator's governing jurisdiction;
• KYC documentation: Retained for a minimum of five (5) years from the date of verification completion, or longer if required by applicable law;
• Transaction records: Retained for a minimum of five (5) years from the date of the relevant transaction;
• Support communications: Retained for up to three (3) years from the date of the last communication, or longer if the communication relates to an active dispute or regulatory matter;
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter for evidential purposes;
• Technical / log data: Retained for up to twelve (12) months from the date of collection, unless retention for a longer period is required for security or legal reasons.

When personal data is no longer required and no legal retention obligation applies, it is securely deleted or permanently anonymized so that it can no longer be associated with any identified or identifiable individual.

11. Cookies and Tracking Technologies

cb786 uses cookies and similar technologies — including pixel tags, web beacons and local storage — to operate the Website and improve your experience. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings or any cookie consent interface presented by the Platform. Please be aware that disabling strictly necessary cookies may impair core Website functionality, including your ability to log in and manage your Account.

12. Security Measures

cb786 implements appropriate technical and organizational security measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including passwords and identity documents;
• Role-based access controls limiting access to personal data to authorized personnel only;
• Regular security assessments and vulnerability scanning of platform infrastructure;
• Incident response procedures for identifying, containing and notifying affected parties of data breaches where required by applicable law.

13. Your Rights as a Data Subject

Subject to applicable law and the conditions set out in this Policy, you have the following rights in relation to your personal data held by cb786. Requests to exercise any of these rights should be submitted in writing to the contact details provided in Section 17 of this Policy.

We will respond to all valid data subject requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, subject to notification. Where we are unable to comply with a request — for example, due to a conflicting legal obligation — we will explain the reason in writing.

14. Children's Privacy

cb786 is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from individuals under the minimum age threshold.

If cb786 becomes aware that personal data has been collected from a user who does not meet the minimum age requirement, we will take immediate steps to delete that data and close the associated Account. If you believe that a person under the minimum age has created an Account on the Platform, please notify us immediately at the contact details in Section 17.

15. Third-Party Services and Links

cb786's Website may reference or describe third-party services, including payment providers, gaming operators and sports organizations. Any mention of Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah, PCB, PSL, ICC or any other third-party entity on this Platform is for informational context only and does not constitute a partnership, endorsement or data-sharing arrangement.

cb786 does not include outbound links to third-party websites within its standard navigation. Where such references occur, cb786 is not responsible for the privacy practices or data-handling policies of those third-party entities. Users should review the privacy policies of any third-party service they independently choose to access.

16. Amendments to This Policy

cb786 reserves the right to amend, update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, platform functionality or business operations. Where amendments are material, we will endeavor to provide reasonable prior notice to registered users — such as an on-platform notification or an email to the address held on your Account.

The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Website following publication of an updated Policy constitutes your acceptance of those changes. We recommend that you review this Policy periodically to stay informed of any updates.

17. Contact Us

For all privacy-related enquiries, data subject rights requests, complaints or concerns about cb786's data practices, please contact us using the details below. All contact details are provided as plain text only — they are not clickable links.

Please include "Privacy Request" in the subject line of your communication and provide sufficient information for us to identify your Account and understand the nature of your request. We aim to respond to all privacy-related enquiries within thirty (30) calendar days of receipt.

If you are unsatisfied with our response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. In Pakistan, you may wish to seek independent legal advice regarding applicable regulatory channels for data protection complaints.