cb22 Privacy Policy
At cb22, protecting your personal information is a responsibility we take seriously. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you hold as a player on our Bangladesh-facing platform. We are committed to transparency and to handling your data with care.
1 Introduction
Welcome to the cb22 Privacy Policy. cb22 ("we", "our", "us") operates the online casino and sports betting platform accessible at cb22.io, including all related pages, subdomains, mobile interfaces, and associated services (collectively, the "Platform"). This Privacy Policy applies to all individuals who access or use the Platform, regardless of whether they have registered a player account.
We understand that the personal information you share with us is sensitive, and we are committed to handling it with the highest standards of security and discretion. This document is designed to give you a clear, honest, and complete picture of our data practices so that you can make informed decisions about using cb22.
By registering an account, depositing funds, placing bets, or otherwise using the cb22 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, please discontinue use of the Platform immediately and contact us at [email protected] to request account closure.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.
2 Data We Collect
cb22 collects personal data in several categories depending on how you interact with the Platform. The table below summarises the main categories of data we may hold about you:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport details, selfie / photo ID for KYC verification | Mandatory for account registration & verification |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna) | Mandatory |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, Visa / Mastercard details (tokenised), transaction history, deposit and withdrawal amounts in ৳ BDT | Mandatory for deposits & withdrawals |
| Gaming Activity Data | Bet history, game session logs, wagering amounts, win/loss records, bonus usage, slot and live casino activity, cricket and sports betting market selections | Collected automatically during play |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone (Bangladesh Standard Time, UTC+6), session duration | Collected automatically |
| Behavioural Data | Pages visited, links clicked, games launched, search queries on the Platform, time spent per page or game | Collected via cookies and analytics |
| Communications Data | Support tickets, live chat transcripts, email correspondence, dispute submissions, feedback forms | Collected when you contact us |
| Marketing Preferences | Opt-in / opt-out choices for promotional emails, SMS notifications, and seasonal offers (e.g., Eid, BPL, Pohela Boishakh promotions) | Voluntary |
We do not intentionally collect special category data (such as health, religious beliefs, or political opinions) from players unless it is strictly necessary to fulfil a legal obligation, such as processing a responsible gaming self-exclusion request that requires understanding a player's vulnerability.
3 How We Collect Data
We collect personal data through the following means:
- Direct interactions: Information you actively provide when registering an account, completing identity verification (KYC), making deposits or withdrawals, contacting customer support, or filling in any form on the Platform.
- Automated technologies: Technical and behavioural data collected automatically through cookies, web beacons, pixel tags, server logs, and similar tracking technologies each time you access the Platform. See Section 6 for full details on cookies.
- Payment processors: Transactional confirmations and wallet references received from mobile financial services such as bKash, Nagad, and Rocket, and from card processors such as Visa and Mastercard, strictly for the purpose of processing and reconciling your deposits and withdrawals.
- Third-party game providers: Gaming session data from our licensed game studio partners, including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe, where session information is passed back to cb22 for account crediting and fair-play monitoring.
- Identity verification services: Results from third-party KYC and anti-fraud service providers used to verify the authenticity of identity documents and to screen against known fraud or money-laundering lists.
- Publicly available sources: In limited circumstances, cb22 may cross-reference publicly available information (such as court records or sanction lists) to comply with anti-money-laundering obligations.
4 Purposes & Legal Basis for Processing
cb22 processes your personal data only where we have a lawful basis to do so. The following table outlines our primary processing purposes and the corresponding lawful basis:
| Purpose | Lawful Basis |
|---|---|
| Creating and managing your player account | Performance of contract |
| Processing deposits and withdrawals in BDT | Performance of contract |
| Verifying your identity and age (21+ compliance) | Legal obligation / performance of contract |
| Preventing fraud, money laundering, and financial crime | Legal obligation / legitimate interest |
| Providing customer support and resolving disputes | Performance of contract / legitimate interest |
| Administering responsible gaming tools (deposit limits, self-exclusion) | Legal obligation / legitimate interest |
| Personalising your gaming experience and recommending relevant games | Legitimate interest / consent |
| Sending promotional communications about bonuses and offers | Consent (opt-in only) |
| Analysing Platform usage to improve performance and UX | Legitimate interest |
| Complying with applicable laws and responding to lawful requests | Legal obligation |
Where we rely on consent as the lawful basis for processing (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us at [email protected] or use the unsubscribe link in any marketing email.
5 Data Sharing & Third Parties
cb22 may share your personal data with the following categories of third-party recipients, each of whom is bound by confidentiality obligations and data processing agreements:
- Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard — for processing and reconciling your financial transactions. These providers receive only the data necessary to complete each transaction.
- Game content providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — for delivering live dealer and virtual game content. Session data is shared to facilitate game play and to credit or debit your account accurately.
- Identity verification (KYC) providers: Specialist third-party services that verify the authenticity of identity documents and screen for fraud or sanctions list matches.
- Analytics and technology partners: Providers of website analytics, cloud infrastructure, security monitoring, and customer support software. These parties process data solely on our behalf under strict data processing agreements.
- Legal and regulatory authorities: cb22 may disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required to do so by applicable law or in response to a valid legal process. We will notify you of any such disclosure to the extent permitted by law.
- Business successors: In the event of a merger, acquisition, or asset sale involving cb22, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that may result.
All third parties with whom cb22 shares personal data are required to implement appropriate technical and organisational security measures to protect that data. cb22 remains responsible for ensuring that any onward transfer of personal data is subject to adequate protection standards.
6 Cookies & Tracking Technologies
cb22 uses cookies and similar tracking technologies to operate the Platform effectively, to remember your preferences, to maintain session security, and to collect analytics data that helps us improve the user experience for our Bangladesh-based players.
The main types of cookies used on cb22 are as follows:
- Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting the core functionality of the Platform.
- Functional cookies: Used to remember your preferences such as language settings, display configurations, and previously selected payment methods, so that you do not have to re-enter them on each visit.
- Analytics cookies: Collect anonymised or pseudonymised data about how visitors use the Platform — including which pages are visited most frequently, where users navigate from, and how long sessions last. This data helps cb22 identify usability issues and optimise the Platform for players in Dhaka, Chittagong, and across Bangladesh.
- Marketing / targeting cookies: Used only where you have given explicit consent, to deliver promotional content relevant to your gaming interests and to measure the effectiveness of our marketing campaigns.
You can manage cookie preferences through your browser settings. Disabling certain categories of cookies (beyond strictly necessary cookies) may affect the functionality of the Platform. Most modern browsers allow you to refuse all cookies, to delete existing cookies, or to be notified when a new cookie is set. For detailed instructions, please consult your browser's help documentation.
7 Data Retention
cb22 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
- Account and identity data: Retained for the duration of your account, plus a minimum of five (5) years following permanent account closure to comply with anti-money-laundering and record-keeping requirements.
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping obligations.
- Gaming activity logs: Retained for a minimum of two (2) years for operational and dispute-resolution purposes, and up to five (5) years where required for regulatory compliance.
- Customer support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required due to an ongoing dispute or legal process.
- Marketing consent records: Retained for the period during which you have an active marketing consent on file, plus one (1) year following withdrawal of consent, for the purpose of demonstrating that consent was obtained and subsequently withdrawn.
- Technical and analytics data: Typically retained in aggregated or anonymised form after thirteen (13) months; individual-level technical data is deleted or anonymised after this period.
When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, cb22 will securely delete or irreversibly anonymise that data.
8 Data Security
cb22 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:
- SSL/TLS encryption: All communications between players and the cb22 server infrastructure are encrypted in transit using industry-standard TLS protocols.
- Data encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted when stored on our servers.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised cb22 personnel and contracted processors with a legitimate operational need can access player data.
- Multi-factor authentication: Administrative access to cb22 internal systems is protected by multi-factor authentication to prevent unauthorised internal access.
- Regular security assessments: cb22 conducts periodic security audits, vulnerability scans, and penetration tests to identify and remediate potential weaknesses in our systems.
- Incident response procedures: In the event of a personal data breach that poses a risk to your rights and freedoms, cb22 will notify affected players promptly and take immediate steps to contain and remediate the breach.
While cb22 takes every reasonable precaution to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are also responsible for maintaining the confidentiality of your own account credentials. If you suspect your account has been compromised, please contact us immediately at [email protected].
9 Your Rights
As a player on the cb22 Platform, you hold a number of rights in relation to your personal data. cb22 respects these rights and will respond to any valid request within a reasonable timeframe, typically within thirty (30) calendar days of receipt. Your rights include:
- Right of access: You may request a copy of the personal data that cb22 holds about you, along with information about how that data is processed and shared.
- Right to rectification: You may request the correction of any personal data that is inaccurate, incomplete, or out of date. For certain data fields (such as your registered email or mobile number), you may be able to update these directly from your account settings.
- Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe it has been unlawfully processed. Please note that this right is subject to legal retention obligations — we cannot delete data that we are required by law to keep.
- Right to restriction of processing: You may request that cb22 temporarily restricts the processing of your personal data while a dispute about its accuracy or our lawful basis for processing is being resolved.
- Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request a machine-readable copy of the personal data you have provided to cb22, for the purpose of transferring it to another service provider.
- Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interest, though cb22 may continue processing if it can demonstrate compelling grounds that override your interests.
- Rights related to automated decision-making: Where cb22 makes decisions about you based solely on automated processing (for example, automated account suspension triggered by fraud detection systems), you have the right to request human review of that decision.
To exercise any of the above rights, please send a written request from your registered email address to [email protected] with the subject line "Data Rights Request". cb22 may require you to verify your identity before processing the request to ensure that data is not disclosed to an unauthorised party. Exercising your data rights is free of charge; however, cb22 reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
10 Children's Privacy
cb22 takes the protection of minors extremely seriously. Our registration process includes age verification steps designed to prevent underage individuals from creating accounts. Where cb22 becomes aware — through its own detection systems, through a parental notification, or through any other means — that personal data has been collected from an individual who is under the age of 21, that account will be immediately suspended, all personal data associated with the underage individual will be deleted as soon as practicable, and any deposits will be refunded to the originating payment method.
If you are a parent or guardian and believe that your child has accessed the cb22 Platform or provided personal data without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action, including account removal and data deletion, within five (5) business days of a verified report.
We strongly encourage parents and guardians to use parental control software and to maintain open conversations with young people about the risks of online gambling. More information on responsible gaming and underage protection is available on our Responsible Gaming page.
11 Marketing Communications
cb22 will only send you promotional and marketing communications — including emails, SMS messages, and in-platform notifications — where you have given your explicit prior consent to receive such communications. We will never add you to marketing lists without your opt-in.
Marketing communications from cb22 may include information about:
- Welcome bonuses and reload deposit offers
- Seasonal promotions tied to events such as Eid, Pohela Boishakh, Victory Day, BPL, IPL, and T20 World Cup tournaments
- New game launches from providers including Pragmatic Play, Evolution Gaming, and Spribe
- Cashback and loyalty reward programmes
- Platform updates and new feature announcements
You may opt out of marketing communications at any time by clicking the "unsubscribe" link included in every marketing email, by replying "STOP" to any promotional SMS, or by sending an opt-out request to [email protected]. Opting out of marketing will not affect transactional communications related to your account, such as deposit confirmations, withdrawal notifications, or security alerts, which are essential to the operation of your account and cannot be disabled.
12 Changes to This Privacy Policy
cb22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the Platform's features and services. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify active players via their registered email address or via a prominent in-platform notification.
Your continued use of the cb22 Platform following any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using the Platform and may request account closure by contacting [email protected].
We recommend that you review this Privacy Policy periodically, particularly if you have not accessed the Platform for an extended period, to ensure that you remain informed of how your personal data is being handled. The most current version of this Privacy Policy will always be available at cb22.io/privacy-policy.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cb22 handles your personal data, please get in touch using the details below:
- Email: [email protected] (plain text — not a clickable link; please copy and paste into your email client)
- Subject line for data rights requests: "Data Rights Request"
- Subject line for privacy queries: "Privacy Policy Enquiry"
- Response time: We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a full response within thirty (30) calendar days.
- Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays.
For responsible gaming support, self-exclusion requests, or deposit limit settings, please visit our dedicated Responsible Gaming page where you will find detailed guidance and direct contact instructions for the cb22 player-protection team.
How cb22 Protects You
A plain-English overview of the key privacy commitments cb22 makes to every player on our Bangladesh platform.
SSL Encryption
Every data transmission between your device and cb22 is protected by SSL/TLS encryption. Your personal and financial information travels securely, making interception by third parties practically impossible.
No Data Selling
cb22 will never sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used solely to operate your account, process your transactions, and improve your experience on the Platform.
Your Rights Respected
You can request access to, correction of, or deletion of your personal data at any time. cb22 will respond to all valid data rights requests within thirty days — free of charge for standard requests.
Opt-Out Marketing
Promotional emails and SMS messages are sent only with your explicit consent. You can withdraw that consent at any time via a single unsubscribe click — no hoops, no delays, no questions asked.
Strict Access Controls
Access to player data within cb22 is restricted on a need-to-know basis. Internal staff and contracted processors must be authorised before they can view or handle any personal information relating to your account.
Clear Retention Limits
We keep your data only for as long as the law requires or as is necessary to run your account. Once those periods expire, data is securely deleted or irreversibly anonymised — we do not hold information indefinitely.
Explore cb22 with Confidence
Now that you understand how cb22 handles your personal data, you can enjoy cricket betting, live casino, slots, and more — knowing your information is safe, your rights are respected, and your experience is in your hands.