cbet Privacy Policy
At cbet, the privacy and security of your personal information is a foundational commitment. This Privacy Policy explains what data we collect from players in Bangladesh, how we use it, who we may share it with, and what rights you hold over your own information.
How cbet Protects Your Personal Data
These six principles underpin every data-handling decision at cbet. The full policy below expands on each in formal legal detail.
Minimal Data Collection
cbet collects only the personal data that is strictly necessary to operate your account, verify your identity, process payments, and comply with legal obligations. We do not collect data speculatively or beyond the stated purposes in this policy.
SSL Encryption
All data transmitted between your browser and cbet.today is protected by industry-standard SSL/TLS encryption. Sensitive data including payment details and identity documents is encrypted both in transit and at rest on our secure servers.
No Unauthorized Data Sales
cbet does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used exclusively for the purposes described in this Privacy Policy and is never monetized without your explicit consent.
KYC & AML Compliance
Identity verification data collected during the KYC process is handled strictly in accordance with anti-money laundering obligations. KYC documents are reviewed by our compliance team and stored securely for the duration required by applicable law.
Your Consent Controls
You have clear, meaningful choices over how cbet uses your data for marketing and analytics. You may withdraw consent for non-essential data processing at any time by contacting [email protected]. Withdrawing consent does not affect the lawfulness of prior processing.
Full Transparency
This Privacy Policy is written in plain English so that every player in Bangladesh can clearly understand how their information is handled. We update this policy whenever our practices change and notify registered players by email of material updates.
1. Information We Collect
When you register for or use a cbet account, we collect personal information from you in several ways. The categories of data we collect, and the contexts in which they are gathered, are described below in full.
1.1 Account Registration Data
When you create a cbet account, you voluntarily provide us with the following information:
- Full legal name as it appears on your National ID Card or passport.
- Date of birth, used to verify that you are 18 years of age or older.
- Bangladeshi mobile number, used for SMS one-time password (OTP) verification and two-factor authentication (2FA).
- Email address, used for account communications, promotional messages (where consented), and account recovery.
- Password, stored in hashed, salted form. cbet never stores passwords in plaintext and never requests your full password via email or support channels.
- Preferred payment method (e.g., bKash, Nagad, Rocket, Upay), including the mobile wallet number registered in your name.
1.2 KYC Identity Verification Data
To comply with our anti-money laundering (AML) obligations and to protect the integrity of the platform, cbet requires all players to complete KYC verification before their first withdrawal. KYC data includes:
- Government-issued photo ID: A clear copy of your National Identity Card (NID) or valid passport.
- Proof of address: A recent utility bill, bank statement, or official government correspondence showing your name and address in Bangladesh, dated within the past 90 days.
- Payment method confirmation: Evidence that the bKash, Nagad, Rocket, or other wallet used for deposits is registered in your own name.
- Source of funds documentation: Requested on a risk-based basis for accounts making large or high-frequency deposits.
KYC documents are reviewed exclusively by cbet's internal compliance team. They are not shared with third parties except as required by law or as described in Section 3 of this policy.
1.3 Transaction & Activity Data
cbet records all financial and gameplay activity associated with your account, including:
- Deposit and withdrawal amounts, timestamps, and payment method references.
- Bets placed, game sessions, wagering history, and outcomes.
- Bonus claims, wagering requirement progress, and promotional participation.
- Account login times, IP addresses used, and device fingerprint information.
Transaction and activity records are retained for a minimum of five (5) years in accordance with our AML compliance obligations.
1.4 Technical & Device Data
When you access cbet.today, our servers and analytics systems automatically collect certain technical information, including:
- IP address and approximate geolocation (country and city level).
- Browser type and version, operating system, and device type.
- Referring URL (the page you visited before arriving at cbet.today).
- Pages visited, time spent on each page, and click interaction data (via cookies and analytics tools — see Section 4).
Technical data is collected automatically and is used to maintain platform security, detect fraudulent access, and improve site performance.
1.5 Support Communication Data
When you contact cbet support by email at [email protected], we record the content of your communications along with your account identifier and contact details. These records are retained to facilitate follow-up support, audit our service quality, and resolve disputes.
2. How We Use Your Data
cbet processes your personal data for the following clearly defined purposes. For each purpose, we identify the lawful basis on which we rely.
| Purpose | Lawful Basis |
|---|---|
| Account registration and authentication | Performance of contract (necessary to provide the service you signed up for). |
| Processing deposits and withdrawals | Performance of contract; legal obligation (AML reporting). |
| KYC identity and age verification | Legal obligation; legitimate interest (fraud prevention, underage gambling prevention). |
| Delivering game and betting services | Performance of contract. |
| Customer support communications | Performance of contract; legitimate interest (service improvement). |
| Fraud detection and platform security | Legitimate interest; legal obligation. |
| Responsible gaming monitoring and self-exclusion management | Legal obligation; vital interest (player welfare). |
| Promotional emails and bonus communications | Consent (you may withdraw at any time). |
| Analytics and platform improvement | Legitimate interest (improving services; data anonymised where possible). |
| Legal and regulatory compliance reporting | Legal obligation. |
2.1 Marketing Communications
cbet may send you promotional emails or SMS messages about bonuses, seasonal promotions (such as BPL season offers, Eid specials, and Pohela Boishakh campaigns), new game launches, and platform updates — but only where you have given explicit consent at registration or subsequently. You may withdraw consent for marketing communications at any time by contacting [email protected] or by using the unsubscribe link included in every promotional email.
2.2 Automated Decision-Making
cbet uses automated systems for fraud detection, duplicate account identification, and responsible gaming monitoring. These systems may flag accounts for review based on patterns in transaction data, device fingerprints, and gameplay behaviour. Where an automated process results in a decision that materially affects your account (such as a temporary hold on withdrawals), you have the right to request human review of that decision by contacting [email protected].
3. Data Sharing & Disclosure
cbet does not sell, rent, or trade your personal data to third-party commercial entities. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.
3.1 Payment Service Providers
To process your deposits and withdrawals, cbet shares the necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard). The data shared is limited to what is technically required to execute the transaction (e.g., your registered mobile wallet number and transaction amount). Each payment provider operates under its own privacy policy and is independently responsible for the data it holds.
3.2 Game Technology Providers
Live casino and slot game content on cbet is powered by third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. When you participate in a live table or slot session, your player identifier and session data may be transmitted to the relevant game studio to facilitate gameplay. Game studios are contractually prohibited from using this data for any purpose other than delivering the game session.
3.3 Identity Verification Partners
cbet may use third-party KYC and identity verification technology providers to assist with the processing of identity documents submitted during the KYC process. Any such provider is bound by strict data processing agreements and is prohibited from retaining or independently using your identity data.
3.4 Legal and Regulatory Disclosure
cbet will disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so, or where disclosure is necessary to:
- Comply with a valid legal obligation or court order.
- Report suspicious transactions under applicable anti-money laundering law.
- Investigate or prevent fraud, identity theft, or criminal conduct affecting the platform.
- Protect the rights, property, or safety of cbet, its staff, or its players.
Where legally permitted to do so, cbet will notify the affected player before disclosing their data to a third party in response to a legal request.
3.5 Business Transfers
In the event that cbet undergoes a merger, acquisition, or sale of all or part of its business assets, player data held by cbet may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer by email, and the acquiring entity will be bound to honour the terms of this Privacy Policy in relation to pre-transfer data.
4. Cookies & Tracking Technologies
cbet.today uses cookies and similar tracking technologies to deliver a functional, personalised, and secure platform experience. This section explains what cookies we use, why we use them, and how you can manage your preferences.
4.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your login session, language preferences, and browsing behaviour within the site. Cookies do not contain executable code and cannot access other files on your device.
4.2 Types of Cookies Used by cbet
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your shopping cart, enable core platform functions. Cannot be disabled without breaking the service. | Session / up to 24 hours |
| Functional | Remember your preferences (e.g., last visited game category, notification settings) to personalise your experience. | Up to 90 days |
| Analytics | Collect aggregated, anonymised data about how players use cbet.today (pages visited, time on site, error rates) to help us improve the platform. | Up to 12 months |
| Security | Detect fraudulent logins, identify suspicious activity patterns, and support our bot-detection and CSRF protection mechanisms. | Session / up to 7 days |
4.3 Managing Cookie Preferences
You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete cookies after each session. Please note that disabling strictly necessary cookies will prevent you from logging in and using core cbet features. Instructions for managing cookies in common browsers are available in your browser's help documentation.
4.4 Do Not Track
Some browsers support a "Do Not Track" (DNT) signal. cbet's analytics systems currently do not alter their behaviour in response to a DNT signal, as there is no universally accepted standard for interpreting these signals. We are committed to reviewing this position as industry standards evolve.
5. Data Retention
cbet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below summarises our standard data retention periods.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML compliance; dispute resolution |
| KYC identity documents | Duration of account + 5 years after closure | Legal obligation under AML regulations |
| Transaction records | Minimum 5 years from date of transaction | AML reporting; financial audit trail |
| Gameplay and betting history | Duration of account + 2 years after closure | Dispute resolution; responsible gaming monitoring |
| Support communications | 3 years from date of communication | Service quality audit; dispute records |
| Technical / device / IP logs | 12 months from collection | Security monitoring; fraud detection |
| Marketing consent records | Until consent is withdrawn + 3 years | Evidence of valid consent; regulatory compliance |
When data reaches the end of its retention period, cbet securely deletes or anonymises it. Anonymised, aggregated data (which cannot be linked back to an individual player) may be retained indefinitely for statistical and product development purposes.
6. Data Security
cbet takes the security of your personal data seriously. We maintain a layered set of technical and organisational measures designed to protect your information against unauthorised access, alteration, disclosure, or destruction.
6.1 Technical Security Measures
- SSL/TLS encryption: All data in transit between your browser and cbet.today is encrypted using Transport Layer Security (TLS). cbet.today enforces HTTPS at all times; unencrypted HTTP connections are automatically redirected.
- Data-at-rest encryption: Sensitive data stored on cbet's servers — including KYC documents, payment details, and hashed passwords — is encrypted using AES-256 or equivalent industry-standard encryption.
- Password hashing: Player passwords are stored using a strong one-way cryptographic hash function with unique per-account salting. cbet never stores or transmits passwords in plaintext.
- Two-factor authentication (2FA): cbet provides SMS OTP-based 2FA for all player accounts. Players are strongly encouraged to enable 2FA to add an additional layer of protection to their login.
- Access controls: Access to player data within cbet's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and audited.
- Intrusion detection: cbet operates automated systems to detect and alert on unusual access patterns, attempted brute-force login attacks, and other indicators of unauthorised system access.
6.2 Organisational Security Measures
- All cbet staff with access to player data are subject to confidentiality obligations and receive regular data security training.
- Third-party service providers who process player data on cbet's behalf are required to maintain equivalent data security standards and are bound by written data processing agreements.
- cbet conducts periodic internal reviews of its data handling and security practices.
6.3 Data Breach Response
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cbet will notify affected players by email without undue delay, and no later than 72 hours after becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps cbet has taken or proposes to take to address the breach.
7. Your Privacy Rights
As a registered cbet player, you have a number of rights over your personal data. cbet is committed to respecting and facilitating these rights in a timely and transparent manner. All rights-related requests should be submitted to [email protected]. cbet will respond within 30 days of receiving a valid request.
Right of Access
You have the right to request a copy of all personal data that cbet holds about you, along with information about how it is being used.
Right to Rectification
If any personal data cbet holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any mandatory retention obligations.
Right to Restriction
You may request that cbet restricts the processing of your data in certain circumstances, for example while the accuracy of data is being contested.
Right to Portability
You have the right to receive a copy of your personal data in a structured, machine-readable format and to have that data transmitted to another data controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest grounds.
Right to Withdraw Consent
Where cbet processes your data on the basis of consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior lawful processing.
Right re: Automated Decisions
Where a significant decision about your account is made solely by automated means, you have the right to request human review of that decision.
To exercise any of the above rights, email [email protected] from the email address registered to your cbet account with the subject line "Privacy Rights Request — [Your Right]". cbet may request additional identity verification before processing a rights request to ensure your data is not disclosed to an unauthorised party.
8. Contact & Policy Updates
8.1 Contacting cbet About Privacy
If you have any questions, concerns, or requests regarding this Privacy Policy or the way cbet handles your personal data, please contact the cbet data team directly:
- Email: [email protected] (plain text — not a clickable link)
- Support Hours: 24 hours a day, 7 days a week
- Response Time: Within 30 days for formal privacy rights requests; typically within 24 hours for general privacy enquiries
- Timezone: Bangladesh Standard Time (BST, UTC+6)
- Language: English
8.2 Changes to This Privacy Policy
cbet reserves the right to update this Privacy Policy at any time to reflect changes in our data handling practices, new legal requirements, or updates to the services we offer. When we make material changes to this policy, we will:
- Update the "Last Updated" date at the top of this page.
- Send a notification email to all registered players with a summary of the key changes.
- Where required by applicable law, obtain fresh consent for any new processing activities that require it.
Your continued use of cbet.today after a revised Privacy Policy has been published and notified to you constitutes your acknowledgement of the updated terms. If you do not agree with the revised policy, you should stop using cbet and request account closure by contacting [email protected].
8.3 Governing Law
This Privacy Policy is governed by and construed in accordance with applicable data protection law. cbet is committed to operating as a safe and reliable platform for players in Bangladesh, and this policy reflects our ongoing commitment to responsible, transparent, and lawful data handling practices.
Ready to Play at cbet?
Now that you know how cbet protects your privacy, explore our full range of games and betting markets — from BPL cricket and live casino tables to the latest slot titles from top studios.
Have questions about your data? Visit our FAQ page or contact [email protected] | 18+ only | Play Responsibly