Privacy Policy — How cbd99 Collects, Uses, and Protects Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how cbd99 ("we", "us", "our", "the Platform") collects, processes, stores, shares, and protects personal data relating to individuals ("you", "User", "Member") who access or use the website located at https://cbd99.io and all services, games, betting markets, promotions, and support functions available through that website (collectively, the "Services").

By registering an account with cbd99, accessing the website, or using any of the Services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the cbd99 Terms & Conditions and the Responsible Gaming Policy.

2. Data Controller

For the purposes of applicable data protection law, cbd99 acts as the data controller in respect of personal data collected through the Services. As data controller, cbd99 determines the purposes for which and the means by which your personal data is processed.

All data protection enquiries, access requests, and complaints should be directed to the cbd99 support team via live chat (accessible from your account dashboard) or via email at the address provided in Section 13 of this Policy.

3. Data We Collect

cbd99 collects a range of personal data categories in order to provide, operate, and improve our Services. The categories we collect are described below.

3.1 Identity and Contact Data

• Full legal name as it appears on a government-issued identification document;
• Date of birth (used exclusively for age verification — you must be 21 or older);
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere in Bangladesh);
• Email address and mobile phone number;
• Copies of government-issued identification documents submitted during KYC verification (e.g., National Identity Card, passport).

3.2 Account and Login Data

• Username and hashed password;
• Account creation date, last login timestamp, and session duration;
• Device identifiers and IP address associated with each login event.

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts denominated in Bangladeshi Taka (BDT, ৳);
• Payment method identifiers (e.g., bKash wallet number, Nagad account reference, Rocket number, masked card number for Visa or Mastercard);
• Transaction timestamps, reference numbers, and processing status;
• Account balance history required for regulatory compliance and dispute resolution.

3.4 Gameplay and Betting Data

• Game sessions, bet amounts, wager outcomes, and game history across all cbd99 products including casino games, slots, cricket betting, and other sports markets;
• Bonus and promotion participation records, including wagering requirement progress;
• Responsible gaming settings such as deposit limits, loss limits, and session time limits you have configured.

3.5 Technical and Usage Data

• Browser type, version, and operating system;
• Device type (desktop, mobile, tablet) and screen resolution;
• Pages visited, time spent on each page, and navigation path through the cbd99 website;
• Referral source (how you arrived at the cbd99 website);
• Cookie identifiers and session tokens (see Section 9 for full cookie details).

3.6 Communications Data

• Records of live chat sessions with the cbd99 support team, including timestamps and chat transcripts;
• Email correspondence between you and cbd99;
• Feedback, complaints, and dispute records.

4. How We Collect Data

cbd99 collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile;
• Automated collection: Technical and usage data collected automatically as you interact with the cbd99 website via cookies, log files, and analytics tools (see Section 9);
• Third-party sources: Identity verification data returned by KYC service providers; payment confirmation data returned by bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing systems; fraud-prevention signals from anti-fraud partners.

5. Purpose and Legal Basis for Processing

cbd99 processes your personal data only where there is a lawful basis for doing so. The table below summarises the primary purposes for which we use your data and the corresponding legal basis in each case.

6. Data Sharing and Disclosure

cbd99 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for each purpose.

6.1 Payment Service Providers

To process your deposits and withdrawals, cbd99 shares necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, and card-processing partners for Visa and Mastercard transactions. These providers process your data solely to facilitate the relevant transaction and are bound by their own privacy and data-security obligations.

6.2 Identity Verification Partners

cbd99 works with specialist KYC and identity verification providers to confirm your identity and age in compliance with our legal obligations. These partners receive only the data required to perform the verification and are contractually prohibited from using it for any other purpose.

6.3 Game Software Providers

Some game data (such as bet amounts and session identifiers) is transmitted to third-party game studios and providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to render gameplay. These providers operate under strict data processing agreements and do not receive your identity or payment details.

6.4 Fraud Prevention and AML Partners

cbd99 may share technical and transaction data with fraud-detection and anti-money-laundering service providers to protect the platform and its members. This processing is based on our legitimate interests in maintaining a safe and compliant environment.

6.5 Legal and Regulatory Disclosure

cbd99 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, cbd99 will disclose only the minimum data necessary to satisfy the legal requirement.

6.6 Corporate Transactions

In the event of a merger, acquisition, asset sale, or restructuring involving cbd99 or its affiliated entities, member data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account, and the successor entity will be required to honour the commitments set out in this Policy.

7. Data Retention

cbd99 retains personal data for only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your membership and for a minimum of five years following account closure, in accordance with anti-money-laundering regulations;
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction;
• KYC and identity documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later;
• Support and communications records: Retained for two years from the date of the relevant interaction, or longer if related to an unresolved dispute;
• Technical and usage data (analytics): Retained in anonymised or aggregated form indefinitely; identifiable technical data is deleted after 24 months;
• Marketing consent records: Retained until you withdraw consent and for one additional year thereafter as evidence of the consent record.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with any individual member.

8. Security Measures

cbd99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser and the cbd99 servers is encrypted using TLS 1.2 or higher;
• Password hashing: Member passwords are stored using strong cryptographic hashing algorithms — plain-text passwords are never stored on cbd99 servers;
• Access controls: Access to personal data within cbd99 is limited to authorised personnel who require it to perform their specific job functions;
• Two-factor authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts via the account dashboard;
• Intrusion detection and monitoring: The cbd99 infrastructure is monitored continuously for suspicious activity, unusual login patterns, and potential security incidents;
• Regular security reviews: cbd99 conducts periodic internal security assessments to identify and remediate vulnerabilities.

9. Cookies and Tracking Technologies

cbd99 uses cookies and similar tracking technologies to operate the website, remember your preferences, analyse usage patterns, and deliver a personalised experience. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the cbd99 website to function correctly. They enable core features such as session management, user authentication, and security checks. Without these cookies, core services cannot be delivered. These cookies cannot be disabled.

9.2 Performance and Analytics Cookies

These cookies collect information about how members use the cbd99 website — such as which pages are visited most frequently and how long sessions last. The data is aggregated and anonymised. cbd99 uses this information to improve platform performance and the member experience.

9.3 Functionality Cookies

These cookies allow the cbd99 website to remember choices you have made (such as your preferred language or display settings) to provide a more personalised experience during your visit and on return visits.

9.4 Targeting and Marketing Cookies

With your consent, cbd99 may use targeting cookies to measure the effectiveness of promotions and to deliver relevant offers to you. These cookies do not collect sensitive personal information and are only set where you have provided prior consent.

You may manage your cookie preferences at any time via your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the cbd99 website and may prevent you from accessing certain features, including your account.

10. Your Data Rights

As a cbd99 member, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the cbd99 support team via live chat or email. cbd99 will respond to all data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of the personal data cbd99 holds about you, along with information about how it is processed;
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations;
• Right to Restriction: You may request that cbd99 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed;
• Right to Data Portability: You may request that certain personal data be provided to you in a structured, machine-readable format;
• Right to Object: You may object at any time to the processing of your personal data based on legitimate interests, including profiling for marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Please note that certain rights are subject to exemptions. For example, cbd99 may not be able to delete account or transaction data that it is legally required to retain under AML or financial reporting obligations. In such cases, cbd99 will explain the reason for any limitation at the time of responding to your request.

11. Minors and Age Restriction

The cbd99 Services are strictly for adults aged 21 years and above. cbd99 does not knowingly collect personal data from individuals under the age of 21. If cbd99 discovers or has reason to believe that an account has been registered by a person under 21, the account will be closed immediately, all pending transactions will be cancelled, and any personal data associated with the account will be deleted or anonymised as required by law.

If you believe that a minor has registered an account on cbd99 or has provided personal data to cbd99 without parental or guardian authorisation, please notify the support team immediately via live chat or email so that appropriate action can be taken.

12. Changes to This Privacy Policy

cbd99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, the "Last Updated" date at the top of this page will be revised, and where practicable, registered members will be notified via email or an in-platform notification.

Your continued use of the cbd99 Services following the posting of any revised Policy constitutes your acceptance of those changes. It is your responsibility to review this Policy periodically. If you do not agree to any amended version of this Policy, you should cease using the Services and may request account closure in accordance with the Terms & Conditions.

13. Contact Us

If you have any questions, concerns, or complaints relating to this Privacy Policy, or if you wish to exercise any of your data rights, please contact the cbd99 data protection team using the details below. All enquiries are handled in English by our dedicated support team, available 24 hours a day, seven days a week.

• Live Chat: Available 24/7 via your account dashboard after logging in to cbd99 — this is the fastest way to reach us;
• Email (plain text — not a link): [email protected]
• Response Time: cbd99 aims to acknowledge all written enquiries within 48 hours and to provide a full response within 30 calendar days;
• Support Hours: All times are displayed in Bangladesh Standard Time (BST, UTC+6).