Every data decision at cb77 is guided by six foundational privacy principles. These principles shape how we collect, handle, and protect the personal information of every Pakistani user on our platform.
cb77 is clear and open about what personal data we collect, why we collect it, how we use it, and with whom we share it. Pakistani users are never left guessing about how their information is handled on our platform.
Personal data collected by cb77 is used only for the specific purposes described in this Policy. We do not use your CNIC details, mobile number, or gaming history for purposes beyond those stated without your explicit consent.
cb77 collects only the personal data that is genuinely necessary for the operation of your account and the delivery of our gaming services. We do not collect personal information for the sake of it. If we do not need it, we do not ask for it.
cb77 implements technical and organisational security measures — including SSL encryption, two-factor authentication, access controls, and regular security audits — to protect your personal data from unauthorised access, loss, or misuse at all times.
cb77 recognises your rights over your own personal data — including the right to access, correct, delete, and restrict processing of your information. All data rights requests from Pakistani users are handled promptly and with full cooperation from our team.
cb77 does not keep your personal data indefinitely. Retention periods are defined by legal obligations and operational necessity. When data is no longer required, it is securely deleted or anonymised in accordance with our internal data retention schedule.
The data controller responsible for the personal information of cb77 users is cb77, the operator of the online gaming platform accessible at cb77.today. As data controller, cb77 determines the purposes and means of processing personal data collected through the platform, and is responsible for ensuring that such processing complies with applicable data protection laws and standards.
All data protection enquiries, rights requests, and privacy-related complaints should be directed to the cb77 data protection team via the contact details provided in Section 15 of this Policy. cb77 will respond to all formal privacy enquiries within 30 calendar days of receipt.
cb77 collects personal data from users in several ways — directly from you when you register, interact with the platform, or contact support; automatically through the platform's technical systems; and from third parties such as payment processors and identity verification services where required for KYC compliance.
2.1 Registration Data. When you create a cb77 account, we collect:
2.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations and verify the age of Pakistani users, cb77 may collect:
2.3 Financial Data. To process deposits and withdrawals through Pakistani payment channels, cb77 processes:
2.4 Gaming Activity Data. As part of platform operation, cb77 automatically records:
2.5 Technical Data. cb77 automatically collects technical information when you access the platform:
2.6 Support and Communication Data. When you contact the cb77 support team, we retain:
cb77 processes personal data only where a valid lawful basis exists. The following table summarises the primary lawful bases applicable to the main categories of processing carried out on the cb77 platform:
| Processing Activity | Lawful Basis |
|---|---|
| Account registration and management | Performance of contract |
| Processing PKR deposits and withdrawals | Performance of contract |
| Age verification (21+ requirement) | Legal obligation / Legitimate interests |
| KYC / AML identity verification | Legal obligation |
| Responsible gaming monitoring | Legitimate interests / Legal obligation |
| Platform security and fraud prevention | Legitimate interests |
| Customer support and complaint handling | Performance of contract / Legitimate interests |
| Marketing communications (where opted in) | Consent |
| Platform analytics and service improvement | Legitimate interests |
| Regulatory reporting | Legal obligation |
cb77 uses the personal data collected from Pakistani users for the following specific purposes:
5.1 cb77 does not sell your personal data to third parties. We do not share your information with advertisers, data brokers, or any party for their independent commercial use. Data sharing is limited to the categories of recipients described below, and only where necessary and proportionate.
5.2 Payment Processors. To facilitate PKR deposits and withdrawals, cb77 shares relevant financial data with payment service providers including JazzCash, EasyPaisa, and partner banking institutions. These providers process your payment data under their own privacy policies and are bound by contractual data protection obligations with cb77.
5.3 Identity Verification Providers. cb77 uses third-party KYC service providers to verify the identity and age of account holders. These providers receive CNIC data and other identity documents submitted during the verification process and are contractually bound to use that data solely for verification purposes.
5.4 Regulatory and Law Enforcement Authorities. cb77 will disclose personal data to regulatory bodies, licensing authorities, and law enforcement agencies when required to do so by law, court order, or lawful demand — including in connection with AML reporting obligations and fraud investigations.
5.5 Game Software Providers. Some games available on cb77 are provided by third-party software studios. These providers may receive limited technical data (such as session identifiers and game event logs) necessary to operate the game and verify outcomes. They do not receive your personal identification data unless specifically required for the service.
As an international online gaming platform, cb77 may process and store personal data in countries outside Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as applicable in Pakistan, cb77 implements appropriate safeguards to ensure that your personal information remains protected to the standard described in this Policy.
Safeguards employed by cb77 for international transfers include: standard contractual clauses incorporated into agreements with data processors; binding data processing agreements that impose equivalent protection obligations on recipients; and, where applicable, transfers to jurisdictions that maintain adequate data protection frameworks as recognised under international standards.
If you have questions about the specific mechanisms used to protect your data during international transfers, you may submit a request through the contact details provided in Section 15.
cb77 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised. The following general retention periods apply:
cb77 implements a comprehensive set of technical and organisational security measures to protect the personal data of Pakistani users against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cb77 will notify affected users and the relevant regulatory authority in accordance with applicable breach notification obligations.
cb77 uses cookies and similar tracking technologies to operate and improve the platform, deliver a personalised experience to Pakistani users, and maintain session security. The following categories of cookies are used on cb77:
The cb77 platform is strictly intended for users aged 21 years and above. cb77 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the cb77 account registration and KYC process.
Where cb77 discovers, through KYC review, user report, or its own monitoring, that a user under the age of 21 has created a cb77 account, the account will be immediately suspended. Any personal data associated with an underage account will be securely deleted as soon as the review process is complete, subject to any legal retention obligations that may apply. Funds deposited by underage users will be handled in accordance with regulatory requirements applicable to the matter.
As a cb77 user and the subject of personal data processing, you hold a number of rights in relation to the data we hold about you. cb77 is committed to honouring these rights promptly and without undue delay. You may exercise any of the following rights by contacting the cb77 data protection team through the details in Section 15:
You may request a copy of all personal data cb77 holds about you, along with information about how it is being processed.
You may request correction of any inaccurate or incomplete personal data held in your cb77 account at any time.
You may request deletion of your personal data where it is no longer necessary, subject to legal retention obligations that may prevent full deletion.
You may request that cb77 restricts the processing of your data in certain circumstances — for example, where you contest the accuracy of the data held.
Where processing is based on your consent or a contract, you may request a copy of your data in a structured, machine-readable format.
You may object to processing based on legitimate interests — including direct marketing communications — at any time and without giving a reason.
cb77 will respond to all privacy rights requests within thirty (30) calendar days of receipt. In complex cases, this may be extended by a further 30 days, and you will be notified of any such extension. Requests are free of charge unless they are manifestly unfounded or repetitive.
With your explicit consent — given at registration or through a subsequent opt-in — cb77 may send you promotional communications relating to new games, PSL betting offers, bonus promotions, loyalty programme rewards, and other cb77 platform news relevant to Pakistani users. These communications may be delivered via email or SMS to your registered Pakistani mobile number.
12.1 Opt-Out. You may withdraw your consent to receive marketing communications at any time and without penalty. To opt out, you may: update your communication preferences within your cb77 account settings; reply "STOP" to any SMS marketing message received from cb77; or contact the cb77 support team directly.
12.2 Service Communications. Withdrawal of marketing consent does not affect cb77's ability to send transactional and service-related communications — such as deposit confirmations, withdrawal notifications, account security alerts, and important policy updates. These communications are necessary for the operation of your account and cannot be opted out of while your cb77 account remains active.
12.3 Responsible Gaming Notifications. cb77 may send you responsible gaming reminders and messages regardless of your marketing preferences, where our monitoring systems indicate that such communication is in your interest. These are not marketing messages and are sent pursuant to cb77's responsible gaming obligations.
The cb77 platform may contain references or links to third-party services, payment providers, or game software studios. This Privacy Policy applies solely to the cb77 platform and the personal data processed directly by cb77. cb77 is not responsible for the privacy practices of third-party websites or services, and users should review the privacy policies of those services independently.
Third-party payment processors — such as JazzCash and EasyPaisa — operate under their own privacy policies and data protection regimes. By using these payment methods to deposit to or withdraw from your cb77 PKR wallet, you are also subject to the terms and privacy policies of those providers. cb77 strongly recommends reviewing the privacy policy of your chosen Pakistani payment provider.
cb77 may update this Privacy Policy from time to time to reflect changes in our data processing activities, legal obligations, or platform features. When material changes are made to this Policy, cb77 will notify registered users via the platform interface, by email to the registered address, or by SMS to the registered Pakistani mobile number, at least seven (7) days before the changes take effect.
The date at the top of this Policy ("Effective Date") reflects the date of the most recent revision. Your continued use of the cb77 platform following the effective date of any updated Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed of how cb77 protects your personal data.
For all privacy-related enquiries, data rights requests, or complaints regarding the handling of your personal data by cb77, please contact us through the following channels:
cb77 will acknowledge receipt of all privacy enquiries within 5 business days and provide a substantive response within 30 calendar days. For complex matters — such as subject access requests involving large volumes of data — we may extend the response period by a further 30 days, and you will be informed of this extension in advance.
If you are not satisfied with cb77's response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to cb77's operations.