Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is published by CB999 ("CB999", "we", "us" or "our") and governs the collection, use, storage, sharing and protection of personal data obtained through your use of the CB999 platform at https://cb999.cam (the "Platform").

CB999 operates as an English-language online gaming and sports betting reference platform targeting users in Pakistan. Our Platform covers cricket betting, live casino, slots, esports and related gaming categories for informational and entertainment purposes. We are not a licensed casino, bookmaker or gambling operator, and we do not process bets, accept deposits or hold player funds.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. Together, these documents form the complete framework governing your relationship with CB999.

02 Definitions

In this Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, IP address, device identifiers and browsing behaviour.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Subject" means the individual whose Personal Data is being processed — in this context, you as a User of the Platform.
• "Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, CB999 is the Controller in respect of data collected through the Platform.
• "Processor" means an entity that processes Personal Data on behalf of the Controller, under documented instruction.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the Processing of Personal Data for a stated purpose.
• "Cookie" means a small text file placed on your device by a website to store information about your session and preferences.
• "Third Party" means any entity other than you and CB999, including third-party Operators, analytics providers and technology service partners.

03 Categories of Personal Data We Collect

CB999 may collect and process the following categories of Personal Data, depending on how you interact with the Platform:

3.1 Information You Provide Directly

• Contact information, such as your name and email address, when you submit an enquiry to our support team;
• Feedback or correspondence content when you communicate with CB999 by email or via on-platform contact methods;
• Any information you voluntarily include in messages sent to [email protected].

3.2 Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type (mobile, desktop, tablet), screen resolution and time zone;
• Usage data: pages visited, time spent on each page, navigation paths, links clicked, search queries entered and referring URLs;
• Session data: session duration, session start and end timestamps, and page scroll depth;
• Cookie data: preferences, session tokens and analytics identifiers stored via cookies and similar tracking technologies (see Section 8).

3.3 Information We Do Not Collect

04 How We Collect Personal Data

CB999 collects Personal Data through the following means:

1. Direct submission: When you contact our support team via email or on-platform enquiry forms;
2. Automated collection: Via server logs, cookies, pixel tags and analytics tools that record your interaction with the Platform;
3. Third-party sources: Where applicable, from analytics service providers that aggregate anonymised or pseudonymised platform usage data;
4. Inferred data: Derived information, such as your approximate location inferred from your IP address, or your likely device type inferred from your browser's User-Agent string.

CB999 does not purchase Personal Data lists from third parties, does not acquire data from social media platforms without your explicit consent, and does not use deceptive or covert methods to collect data beyond those described in this Policy.

05 Legal Basis for Processing

CB999 processes Personal Data on one or more of the following legal bases:

Legal Basis	Application
Legitimate Interests	Platform security, fraud prevention, improving platform performance, analytics to understand how users in Pakistan and other regions interact with our content.
Consent	Non-essential cookies, marketing communications (where applicable) and any processing activity for which we have requested and obtained your explicit consent.
Contractual Necessity	Processing necessary to respond to your direct enquiries and provide support services you have requested from CB999.
Legal Obligation	Processing required to comply with applicable law, court orders, regulatory obligations or requests from competent authorities.

Where CB999 relies on legitimate interests as a legal basis, we have conducted a balancing assessment to ensure that our interests do not override your fundamental rights and freedoms.

06 How We Use Your Personal Data

CB999 uses the Personal Data collected for the following specific purposes:

• Platform operation and delivery: To ensure the Platform functions correctly, pages load efficiently and content is served appropriately to your device — whether you are accessing CB999 from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere;
• Customer support: To receive, process and respond to your enquiries, complaints or feedback submitted to our support team;
• Analytics and improvement: To understand how users navigate the Platform, which content is most valuable and where the user experience can be enhanced;
• Security and fraud prevention: To detect and prevent unauthorised access, abusive behaviour, scraping, spam or fraudulent activity on or directed at the Platform;
• Compliance: To comply with applicable legal obligations, respond to lawful authority requests and maintain records required by law;
• Content personalisation: To deliver Platform content and layout most relevant to your inferred device, location and browsing preferences, within the limits described in this Policy.

07 Data Sharing & Disclosure

CB999 does not sell, rent, licence or share your Personal Data for commercial purposes. We may share Personal Data with the following categories of recipients, solely for the purposes described:

7.1 Service Providers (Processors)

We engage trusted third-party service providers — such as hosting providers, analytics platforms and email delivery services — who process data on our behalf under written data processing agreements. These providers are contractually prohibited from using your data for any purpose beyond the service they provide to CB999.

7.2 Legal and Regulatory Authorities

CB999 may disclose Personal Data to courts, regulators, law enforcement agencies or other competent authorities where required to do so by applicable law, court order or regulatory obligation. We will notify you of such disclosure where permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of CB999's assets, Personal Data may be transferred to the acquiring entity as part of the transaction. We will take reasonable steps to ensure that appropriate privacy protections continue to apply following any such transfer.

7.4 Payment Providers — Important Clarification

08 Cookies & Tracking Technologies

CB999 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be used:

Cookie Type	Purpose	Essential?
Strictly Necessary	Enable core Platform functionality, session management and security features.	Yes — cannot be disabled
Analytics	Collect aggregated, anonymised data about Platform usage to help us understand user behaviour and improve content.	No — requires consent
Preference	Remember your settings and preferences (e.g., language, display settings) between visits.	No — requires consent
Marketing / Advertising	Where applicable, track visits to deliver relevant content. CB999 does not currently operate a paid advertising network but may use limited analytics pixels.	No — requires consent

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. Most modern browsers allow you to view, block and delete cookies from within the browser's privacy or settings menu. Please note that blocking all cookies — including strictly necessary ones — may prevent certain Platform features from working correctly.

09 Data Retention

CB999 retains Personal Data only for as long as necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by applicable law. The following general retention principles apply:

• Support correspondence: Retained for up to 24 months from the date of the last communication, after which it is securely deleted unless a legal obligation requires longer retention;
• Analytics data: Aggregated and anonymised usage data may be retained for up to 36 months for platform improvement purposes;
• Server logs: Technical server logs containing IP addresses are typically retained for up to 90 days for security and fraud prevention purposes;
• Cookie data: Session cookies are deleted when you close your browser. Persistent cookies expire at the end of their defined duration, which varies by cookie type (typically between 30 days and 24 months).

Upon expiry of the applicable retention period, Personal Data is either securely deleted, permanently anonymised or, where required by law, archived with access restrictions applied.

10 International Data Transfers

As an online platform accessible globally, CB999 may process or store your Personal Data in countries outside Pakistan. This may include jurisdictions in which our hosting providers, analytics services or other technology partners operate.

Where Personal Data is transferred internationally, CB999 takes steps to ensure appropriate safeguards are in place, including:

• Contractual clauses requiring recipients to protect data to a standard at least equivalent to this Policy;
• Use of service providers operating in jurisdictions with adequate data protection frameworks as recognised by applicable international standards;
• Technical and organisational measures appropriate to the data sensitivity and transfer risk.

11 Your Rights as a Data Subject

Subject to applicable law, you hold the following rights in relation to your Personal Data held by CB999:

1. Right of Access: You may request a copy of the Personal Data CB999 holds about you, along with information about how it is used and shared;
2. Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected or completed without undue delay;
3. Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object and we have no overriding legitimate grounds;
4. Right to Restriction of Processing: You may request that we restrict Processing of your data in certain circumstances, for example while a rectification request is being resolved;
5. Right to Data Portability: Where Processing is based on consent or contract and carried out by automated means, you may request your Personal Data in a structured, commonly used and machine-readable format;
6. Right to Object: You may object to Processing based on our legitimate interests. We will cease such Processing unless we can demonstrate compelling legitimate grounds that override your interests;
7. Right to Withdraw Consent: Where Processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of Processing carried out before withdrawal.

To exercise any of the above rights, please contact CB999 using the details in Section 17 below. We will respond to all verifiable requests within a reasonable period — typically 30 days — and will not charge a fee for standard requests. We may ask you to verify your identity before processing a request.

12 Children's Privacy

The CB999 Platform is strictly intended for adults. We do not knowingly collect, process or store Personal Data from individuals under 18 years of age — or under the higher minimum age required by the applicable Operator or license jurisdiction.

13 Pakistan-Specific Privacy Context

CB999 serves Pakistani users and acknowledges the specific context applicable to data privacy in Pakistan. The following points are relevant to users accessing the Platform from Pakistan:

• Pakistan's data protection legislative framework is developing. As of January 2026, the Personal Data Protection Act (PDPA) bill has been proposed at the federal level but its final form and implementation status should be independently verified by users;
• CB999 does not share your Personal Data with any Pakistani government authority, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any Pakistani financial institution, except where required by a lawful authority request under applicable law;
• Payment provider names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — receive no Personal Data from CB999. They are listed as familiar payment context only;
• Users in Pakistan should be aware that online gambling is subject to significant restrictions under the Prevention of Gambling Act, 1977. CB999 does not claim that using this Platform or any referenced Operator is lawful in Pakistan. This is not legal advice.

14 Security Measures

CB999 implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers;
• Access controls limiting data access to authorised personnel with a documented need for access;
• Server security including firewalls, intrusion detection systems and regular security patching;
• Data minimisation ensuring that only data necessary for stated purposes is collected and stored;
• Incident response procedures for detecting, reporting and responding to data breaches in a timely manner.

Notwithstanding the above, no data transmission over the internet or electronic storage system is entirely secure. CB999 cannot guarantee absolute security. You should take steps to protect your own data — including using strong, unique passwords for your email accounts and not sharing login credentials with third parties.

15 Third-Party Platforms & External Links

The CB999 Platform may contextually reference third-party Operators, game categories or payment services. CB999 does not link to external websites for commercial or affiliate purposes, and this Policy does not govern data practices of any third-party website, platform or service.

If you navigate from the CB999 Platform to any third-party Operator's website, that Operator's own privacy policy governs their data collection and processing practices. CB999 has no control over and accepts no responsibility for the privacy practices of any third-party entity. You are strongly advised to read the privacy policy of any Operator before registering an account or providing personal information.

16 Amendments to This Policy

CB999 reserves the right to update, modify or replace this Privacy Policy at any time to reflect changes in applicable law, our data practices or our Platform features. All amendments take effect upon publication on the Platform, indicated by the revised "Last Updated" date at the top of this page.

We will take reasonable steps to notify users of material changes — for example, by displaying a prominent notice on the Platform homepage for a period following the update. However, your continued use of the Platform after any amendment is published constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how CB999 protects your information.

17 Contact Us

For any questions, concerns or requests regarding this Privacy Policy or CB999's data practices, please contact our support team using the details below. Our team responds in English, with Urdu language assistance available on request.

Please note: CB999 can only address queries relating to Personal Data collected through the CB999 Platform itself. For data held by a third-party Operator, you must contact that Operator directly through their official support and privacy channels.