This policy explains what personal information cb77 collects from players in Bangladesh, why we need it, and what choices you have. Reading it takes about five minutes.
Who Operates cb77
cb77 (accessible at cb77.mobi) is an online gaming platform serving players in Bangladesh. When this policy says "cb77", "we", or "us", it means the company that owns and operates this platform. We act as the data controller for all personal information collected through this website and the cb77 mobile app.
If you have questions about this policy, reach out via the 24/7 Live Chat on the platform. We do not publish an email address publicly.
Data We Collect
We only collect information that serves a clear purpose — running your account, processing payments, and meeting our compliance obligations. The table below lists the main categories.
| Category | Examples | When collected |
|---|---|---|
| Account details | Username, password (hashed), date of birth, country | Registration |
| Contact information | Mobile number linked to your bKash or Nagad account | Registration / deposit |
| Identity documents | National ID Card (NID), Passport, or Driving Licence scan | KYC verification before first withdrawal |
| Financial data | Mobile banking number, transaction IDs, deposit/withdrawal amounts in BDT | Every transaction |
| Gameplay data | Game sessions, bets placed, winnings, bonus use | Ongoing while you play |
| Device & technical data | IP address, device model, OS version, browser type | Every login |
| Communication records | Live chat transcripts, support tickets | When you contact support |
We do not collect sensitive data such as racial origin, religious beliefs, or health information. We do not knowingly collect data from anyone under 18 years of age.
How We Use Your Data
Your data is used in four main ways:
- Running your account: Creating and maintaining your cb77 profile, processing deposits via bKash/Nagad/Rocket/Upay, paying out withdrawals (typically within 23 minutes), and crediting bonuses.
- Keeping the platform safe: Detecting fraud, verifying that you are not a duplicate or under-age account, and enforcing our responsible gaming controls.
- Meeting legal obligations: Completing KYC checks before your first withdrawal, retaining financial records as required, and responding to lawful requests from authorities.
- Improving your experience: Identifying which games you play most so we can surface relevant titles; measuring site performance; and sending you account notifications (not marketing messages) via Live Chat or on-platform alerts.
We do not sell your personal data to third parties, and we do not use it for automated decision-making that produces legal effects without human review.
Legal Basis for Processing
Every processing activity at cb77 rests on at least one of the following grounds:
- Contract performance: Processing needed to register your account and execute deposits, withdrawals, and bets.
- Legal obligation: KYC verification, anti-money-laundering checks, and financial record-keeping.
- Legitimate interest: Fraud prevention, platform security, and service improvement — where these interests do not override your rights.
- Consent: Where we rely on consent (for example, optional marketing messages), you can withdraw it at any time through Account Settings.
When We Share Your Data
cb77 shares personal data only when necessary. The parties that may receive your data are:
- Payment processors: bKash, Nagad, Rocket, and Upay receive your mobile number and transaction amount to process deposits and withdrawals. They operate under their own privacy frameworks and regulatory obligations.
- Game providers: Ezugi, Habanero, JILI, KA Gaming, Red Tiger, Pragmatic Play, and Spribe receive a session token and anonymous player ID. They do not receive your name, NID, or mobile number.
- Verification services: A third-party KYC provider processes your identity document image to confirm authenticity. Documents are not stored on their servers after the check completes.
- Regulators and law enforcement: We disclose data when required by a valid legal order. We do not disclose data speculatively or in advance of a legal requirement.
All third-party processors are contractually bound to handle your data only for the specified purpose and to apply security standards equivalent to our own.
How Long We Keep It
We keep different types of data for different periods, based on legal requirements and operational needs:
| Data type | Retention period | Reason |
|---|---|---|
| Account & identity records | 5 years after account closure | AML and KYC compliance |
| Financial transaction logs | 5 years from transaction date | Financial regulations |
| Gameplay session data | 2 years | Dispute resolution, responsible gaming |
| Live chat transcripts | 1 year | Service quality and dispute evidence |
| Device & IP logs | 90 days | Security and fraud detection |
When a retention period ends, data is deleted or anonymised so it can no longer be linked to you as an individual.
Your Rights
You have the following rights over your personal data held by cb77. Submit any request through 24/7 Live Chat; we aim to respond within 30 days.
Note: Some rights are subject to legal obligations. For example, we cannot delete transaction records that we are required to keep under anti-money-laundering rules, even if you request it.
Cookies and Tracking
cb77 uses cookies and similar technologies on this website. They fall into three categories:
- Essential cookies: Keep you logged in, remember your session preferences, and prevent cross-site request forgery. These cannot be disabled without breaking core features.
- Performance cookies: Measure page load times and error rates so our engineering team can fix problems. Data is aggregated and not tied to your identity.
- Analytics cookies: Track which pages and game categories you visit most. You can opt out of these through Account Settings or your browser's cookie controls.
We do not use third-party advertising cookies or sell cookie-derived data to ad networks.
Identity Verification (KYC)
Bangladesh regulations and our responsible gaming obligations require us to verify your identity before we process your first withdrawal. You will need to submit one of the following documents: a National ID Card (NID), a Passport, or a Driving Licence.
How the KYC process works
Upload a clear photograph or scan of your chosen document through Account Settings. Our team reviews submissions within 24 hours. Once approved, your withdrawal limit becomes active and your first cash-out typically arrives within 6 hours. Documents are stored on encrypted servers and accessed only by trained compliance staff.
What happens if verification fails
If a document is unclear, expired, or does not match your account details, we will notify you via Live Chat and explain what to resubmit. Accounts that cannot be verified within 60 days of a withdrawal request may be suspended pending review.
Security Measures
cb77 applies the following technical and organisational controls to protect your data:
- TLS 1.3 encryption on all connections between your device and our servers.
- Passwords stored as salted hashes — our staff cannot read your password.
- Identity documents encrypted at rest using AES-256.
- Access to personal data restricted to staff with a documented business need.
- Regular penetration testing and vulnerability scanning.
- Automatic session expiry after 30 minutes of inactivity.
No system is completely immune to attack. If a breach occurs that is likely to affect your rights, we will notify you through the platform within 72 hours of becoming aware.
Policy Updates
We review this privacy policy at least once a year and whenever a significant change to our services or applicable law requires it. The "Last updated" date at the top of this page reflects the most recent revision.
If a change materially affects how we use your data, we will post a notice on your account dashboard at least 14 days before the change takes effect. Continuing to use cb77 after that date means you have accepted the updated terms. If you disagree with a change, you may close your account before it takes effect by contacting 24/7 Live Chat.
Contact Us
For any question about this policy, to exercise your rights, or to raise a data protection concern, contact us through the 24/7 Live Chat available on every page of cb77.mobi. Please include "Privacy" in your opening message so our team can route it to the right person.
We do not publish a postal address or email for privacy requests because doing so would create an unmonitored channel. Live Chat is monitored around the clock and provides a faster, more reliable response.