cbb44 Privacy Policy — How We Protect Your Personal Data

1 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal data of cbb44 players is the cbb44 platform, operating at https://cbb44.io (hereinafter referred to as "cbb44", "we", "us", or "our").

As data controller, cbb44 determines the purposes for which and the means by which your personal data is processed. We are committed to processing personal data in a manner that is lawful, fair, transparent, accurate, and secure.

If you have any questions about how cbb44 processes your personal data, or if you wish to exercise any of your data rights, you may contact us at any time via live chat on the cbb44 platform or by email at [email protected] (plain text — not a clickable link).

2 Personal Data We Collect

cbb44 collects the following categories of personal data from players. The table below sets out each category, specific data points within that category, and the primary reason for collection:

cbb44 does not collect biometric data (facial recognition, fingerprint scans), health data, political opinions, or religious beliefs from players. If you believe cbb44 holds a category of data about you not listed above, please contact our support team immediately.

3 How We Collect Personal Data

cbb44 collects personal data through the following channels:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile, you voluntarily provide personal data to cbb44.
• Automated collection during platform use: When you browse or interact with the cbb44 platform, our servers and analytics systems automatically collect Technical Data and Usage Data as described in Section 2. This includes your IP address, device fingerprint, and session behaviour.
• Payment processors: When you deposit or withdraw via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment processor shares transaction confirmation data with cbb44 necessary to credit or debit your account balance.
• KYC verification providers: cbb44 uses third-party identity verification services to assist with document authentication. These providers share verification outcome data (pass/fail and confidence score) with cbb44 but do not retain your documents on our behalf.
• Cookies and similar technologies: cbb44 uses cookies, web beacons, and local storage to maintain your session, personalise your experience, and collect analytics data. See Section 8 for the full cookies policy.
• Fraud and security monitoring systems: cbb44's automated fraud detection tools passively analyse login patterns, IP geolocation data, and device fingerprints to identify suspicious activity that may indicate account takeover, multi-accounting, or money laundering.

4 Purposes and Legal Basis for Processing

cbb44 processes personal data only where a lawful basis exists for doing so. The following table sets out each processing purpose and the corresponding legal basis:

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. To withdraw consent for marketing communications, update your preferences in account settings or contact our support team.

5 Data Sharing and Third Parties

cbb44 does not sell or rent your personal data to any third party. We share personal data only in the following limited and necessary circumstances:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard): Minimum transaction data (amount, timestamp, wallet/card reference) is shared to facilitate deposits and withdrawals. Each processor operates under its own privacy policy and data protection obligations.
• KYC and identity verification providers: Document images and identity data are transmitted to our KYC provider for authentication. KYC providers are contractually bound to process this data solely for verification purposes and are prohibited from using it for any other purpose.
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and similar): When you launch a game, your player session token and wagering data are shared with the relevant game provider to facilitate gameplay and calculate outcomes. Game providers are certified RNG operators and are contractually bound to data confidentiality obligations.
• IT infrastructure and cloud hosting providers: cbb44's platform is hosted on third-party cloud infrastructure. These providers have access to server data as part of their hosting and maintenance obligations and are bound by strict data processing agreements.
• Fraud prevention and security services: Anonymised or pseudonymised Technical Data may be shared with specialist fraud detection services to identify patterns of account abuse or money laundering.
• Legal and regulatory authorities: cbb44 will disclose personal data to law enforcement agencies, courts, or government bodies where legally compelled to do so, or where we believe disclosure is necessary to protect the safety of players or the integrity of the platform.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the cbb44 business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified via email before any such transfer affects their data.

6 Data Retention

cbb44 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data (identity, contact, financial): Retained for the duration of your active account relationship with cbb44, plus a minimum of 5 years after account closure to meet anti-money laundering (AML) record-keeping obligations.
• KYC documents (ID scans, proof of address): Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in compliance with financial crime prevention obligations.
• Gaming activity logs (bet history, session data): Retained for 5 years from the date of each transaction to support dispute resolution and regulatory compliance.
• Support communications (live chat transcripts, emails): Retained for 2 years from the date of the interaction for quality assurance and evidence purposes.
• Marketing consent records: Retained for the duration of your account and 1 year following account closure as evidence of consent management.
• Technical and usage logs (IP addresses, session logs): Retained for 12 months on a rolling basis for security and fraud detection purposes, then automatically purged.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data (which cannot be re-linked to a person) may be retained indefinitely for aggregate analytics purposes.

7 Security Measures

cbb44 implements a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key technical and organisational security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or mobile device and the cbb44 platform is encrypted using TLS 1.2 or higher. This protects your login credentials, payment data, and personal information from interception in transit.
• Encrypted data storage: Sensitive fields in our database — including password hashes, financial data, and national ID numbers — are encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff who handle player data are subject to background checks, confidentiality agreements, and role-based access controls that limit their access to only the data relevant to their function.
• Two-factor authentication (2FA): cbb44 strongly encourages players to enable 2FA on their accounts. Internal staff accounts that access player data are required to use 2FA without exception.
• Regular security audits: cbb44's platform undergoes periodic penetration testing and vulnerability assessments carried out by qualified third-party security professionals. Critical vulnerabilities are remediated within 24 hours of identification.
• Incident response plan: cbb44 maintains a documented data breach response plan. In the event of a data breach that poses a material risk to player rights, affected players will be notified without undue delay and, where legally required, within 72 hours of cbb44 becoming aware of the breach.

Despite these measures, no internet-based system is completely immune to security risks. Players are encouraged to use strong, unique passwords for their cbb44 account, to enable 2FA, and to contact our support team immediately if they suspect unauthorised access to their account.

8 Cookies and Tracking Technologies

cbb44 uses cookies and similar technologies (web beacons, local storage, session tokens) to operate the platform, maintain your logged-in session, and understand how the platform is used. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and region preferences (Bangladesh / English), and enable secure payment flows. These cookies cannot be disabled without preventing core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the cbb44 platform — which pages are most visited, how long sessions last, and what errors are encountered. This data is used exclusively to improve the platform. No personally identifiable information is included in analytics cookies.
• Functional cookies: These cookies remember your preferences such as your preferred game category, responsible gaming settings (deposit limits, session reminders), and UI layout choices, so you do not need to reset them on every visit.
• Fraud prevention and security cookies: These cookies store a device fingerprint and session integrity token to detect anomalous login behaviour, prevent CSRF attacks, and identify bot activity.

cbb44 does not use third-party advertising or retargeting cookies. Your browsing behaviour on the cbb44 platform is not shared with advertising networks, social media platforms, or data brokers.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the cbb44 platform. Disabling performance or functional cookies will not affect core functionality but may degrade your user experience.

9 Your Data Rights

As a cbb44 player, you hold the following rights with respect to your personal data. All requests should be submitted to our support team via live chat or email at [email protected] and will be responded to within 5 business days at no cost to you:

To exercise any of the above rights, contact our support team via live chat on the cbb44 platform or at [email protected]. cbb44 will acknowledge your request within 2 business days and complete it within 5 business days. In complex cases, this period may be extended by a further 10 business days with written notification of the reason for the extension.

cbb44 may request proof of identity before processing a data rights request to ensure the request is made by the account holder and to protect against unauthorised data disclosure.

10 Minors and Age Policy

cbb44 operates a strict 21+ only policy across all services. The cbb44 platform is not intended for, marketed to, or accessible to individuals under the age of 21. cbb44 does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step in the KYC process for all players before withdrawal rights are activated. If cbb44 discovers or has reasonable grounds to believe that a player is under 21 years of age, the following actions will be taken immediately:

• The account will be suspended and all gameplay will be halted.
• All personal data associated with the account will be securely deleted in excess of any legal retention obligation, given that its original collection was unlawful.
• Any deposits made by the underage player will be returned to the originating payment method. Any winnings accrued will be forfeited.
• The matter may be reported to relevant child protection authorities depending on the circumstances and applicable law.

If you are a parent or guardian and believe a minor under your care has registered or used the cbb44 platform, please contact our support team immediately via live chat or at [email protected]. We will investigate and take action promptly.

11 International Data Transfers

cbb44 primarily stores and processes player data on servers located in secure data centres. Where personal data is transferred to or accessed by third-party service providers (such as KYC verification providers, cloud hosting providers, or game software providers) that operate outside Bangladesh, cbb44 ensures that appropriate safeguards are in place to protect your data.

These safeguards include contractual clauses that require the recipient to process personal data to at least the same standard of security and privacy as described in this policy, and to use the data only for the specific purpose for which it was transferred.

cbb44 does not transfer personal data to any jurisdiction that does not provide an adequate level of data protection for the purposes described in this policy. If you have concerns about the international handling of your data, please contact our support team at [email protected].

12 Changes to This Privacy Policy

cbb44 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address at least 14 days before the changes take effect, summarising what has changed and why.
• Display a prominent notice on the cbb44 platform for at least 14 days following the update.

Your continued use of the cbb44 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised policy, you must stop using the platform and may request account closure by contacting our support team.

The current version of this Privacy Policy is always accessible at https://cbb44.io/privacy-policy. Previous versions are available upon request by contacting our support team.

13 Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way cbb44 handles your personal data, please contact our Privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week on the cbb44 platform. Average response time is under 5 minutes for privacy enquiries.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Enquiry" or "Data Rights Request" in the subject line. Response within 2 business days during Bangladesh Standard Time hours (UTC+6).

All formal data rights requests and privacy complaints submitted via email should include your registered account username and a description of your request or concern. cbb44 will acknowledge receipt within 2 business days and aim to resolve all privacy matters within 10 business days.