CBTF Privacy Policy – How We Protect Your Data

1 About This Policy

This Privacy Policy applies to all users of the CBTF platform, including registered account holders, visitors browsing without an account, and anyone who downloads or uses the CBTF mobile app. It covers data collected through the website at cbtf.app, the mobile app available via the Download page, and any communications between you and CBTF support.

CBTF takes privacy seriously — not just because it is important from a user trust perspective, but because players in Pakistan deserve to know clearly how their information is being handled. This policy is written to be straightforward and readable, not buried in legal jargon. The goal is for every player to genuinely understand what data CBTF holds and why.

This policy should be read alongside the Terms and Conditions, which governs your overall use of the CBTF platform. Where the Terms and Conditions and Privacy Policy overlap in scope, both documents apply.

2 Information We Collect

CBTF collects personal information in several ways — directly from you when you register or interact with the platform, automatically through your use of the site and app, and from payment processors when you make deposits or withdrawals. Here is a clear breakdown:

CBTF does not collect sensitive categories of personal data such as biometric data, health information, or political views. Identity verification documents (such as CNIC copies) are handled with additional care and are only requested when necessary for account security or withdrawal verification purposes.

3 How We Use Your Data

CBTF uses the personal data it collects for specific, legitimate purposes only. We do not use your data for anything outside the scope described below:

• Account Management: To create, maintain, and secure your CBTF account, including authentication and login activity monitoring.
• Transaction Processing: To process deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer, and other supported payment methods.
• Customer Support: To respond to queries, complaints, and account-related requests submitted to CBTF support.
• Security & Fraud Prevention: To detect and investigate suspicious activity, protect against fraud, and enforce platform rules as described in the Terms and Conditions.
• Platform Improvement: To understand how the platform is used and make improvements to the website, app, game lobby, and overall user experience.
• Responsible Gaming: To monitor play patterns and identify accounts that may benefit from responsible gaming interventions such as deposit limits or self-exclusion prompts.
• Communications: To send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts. Where you have opted in, promotional communications about bonuses and offers may also be sent.

4 Payment Data

All deposits and withdrawals on CBTF are processed in PKR. When you make a payment using JazzCash, Easypaisa, Raast, a bank transfer, or a debit/credit card, the transaction is handled through the respective payment provider's secure infrastructure.

CBTF records transaction metadata — such as the payment method used, transaction amount, timestamp, and transaction reference — for account management and security purposes. CBTF does not store full card numbers, mobile wallet PINs, or bank account passwords on its own servers. These sensitive payment credentials remain with your payment provider.

• JazzCash and Easypaisa transactions are processed via their respective APIs under their own security and privacy standards.
• Raast transfers are processed through the payment network with transaction references retained by CBTF for reconciliation.
• Bank transfer deposits are verified against your account before being credited.
• Card payments are processed via secure payment gateways. Card data is tokenised and not stored in plaintext by CBTF.

5 Cookies & Tracking

CBTF uses cookies and similar technologies to keep the platform functioning correctly and to understand how it is being used. Cookies are small text files stored on your device by your browser when you visit the platform.

The types of cookies used on CBTF are:

• Essential Cookies: Required for the platform to function. These keep you logged in during your session, remember your language preference, and ensure the site loads correctly. Without these, the platform cannot work properly.
• Analytics Cookies: Used to understand how players navigate the platform — which pages are visited most, where users spend time, and where they may encounter issues. This data is used in aggregate to improve the platform. It is not used to identify you personally.
• Security Cookies: Help detect fraudulent activity, protect against automated attacks, and ensure account security during your session.

CBTF does not use third-party advertising cookies. You will not be tracked across other websites for the purpose of targeted advertising. Your browser settings allow you to manage or block cookies; however, blocking essential cookies may prevent the platform from working correctly and could affect your ability to log in or access games.

6 Third-Party Sharing

CBTF does not sell your personal data to third parties. However, operating the platform requires working with certain service providers who may process some of your data as part of delivering their service. These parties are:

• Payment Processors: JazzCash, Easypaisa, Raast, card payment gateways, and banking partners receive transaction data necessary to process your deposits and withdrawals in PKR.
• Game Providers: Third-party game studios that supply slot games and live casino content to the CBTF platform may receive a session token and basic game interaction data. They do not receive your full identity or payment information.
• Platform Analytics: Aggregated usage data may be processed by analytics tools to help CBTF understand platform performance. This data does not personally identify individual users.
• Identity Verification Services: Where identity verification is required, a specialised verification provider may process copies of identity documents provided by you. These providers operate under strict confidentiality obligations.

All third-party service providers who process data on CBTF's behalf are required to handle that data securely, use it only for the purpose for which it was shared, and not retain it beyond what is necessary. CBTF does not permit service providers to use player data for their own marketing purposes.

7 Data Storage & Security

Personal data collected by CBTF is stored on secure servers with access controls, encryption at rest, and encryption in transit (TLS/SSL). CBTF applies the following security practices to protect your data:

• All data transmitted between your device and CBTF servers is encrypted using TLS, including login credentials, payment instructions, and personal information.
• Stored data is encrypted at rest. Account passwords are hashed using industry-standard algorithms and are not recoverable even by CBTF staff.
• Access to systems containing personal data is restricted to authorised CBTF personnel who require access to perform their role. Access rights are reviewed regularly.
• CBTF monitors its systems for unusual access patterns and potential security incidents. In the event of a data breach that affects player data, CBTF will take immediate steps to contain the breach and notify affected users as soon as reasonably practicable.

While CBTF applies strong security measures, no online platform can guarantee absolute security. You also have a role to play in protecting your account — use a strong, unique password and do not share your login details with anyone. If you suspect your account has been compromised, contact support immediately and change your password.

8 Data Retention

CBTF retains personal data for as long as it is needed for the purpose it was collected, or as required to meet legal, security, and audit obligations. The general retention approach is as follows:

• Active Accounts: Data is retained for the lifetime of your account and for a reasonable period after account closure.
• Transaction Records: Financial transaction records in PKR are retained for a minimum period to satisfy standard financial record-keeping requirements.
• Identity Verification Documents: Retained for the verification period and a reasonable time thereafter, then securely deleted.
• Support Communications: Records of support interactions are retained to assist with follow-up queries and dispute resolution.
• Inactive Accounts: Where an account has been inactive for an extended period and has a zero balance, CBTF may delete or anonymise the account data after providing advance notice.

When data is no longer required, CBTF securely deletes or anonymises it so that it can no longer be linked back to you personally.

9 Your Rights

As a CBTF player, you have rights over the personal data that CBTF holds about you. These include:

• Right to Access: You can request a copy of the personal data CBTF holds about you. CBTF will respond within a reasonable timeframe.
• Right to Correction: If any personal data held is inaccurate or out of date, you can request that it be corrected. You can update basic contact details directly within your account settings.
• Right to Deletion: In certain circumstances, you can request deletion of your personal data. This right has limitations — CBTF may need to retain certain data for security or legal compliance purposes even after account closure.
• Right to Withdraw Marketing Consent: If you have opted in to receive promotional communications from CBTF, you can withdraw this consent at any time. This does not affect transactional communications (such as deposit confirmations or security alerts).
• Right to Restrict Processing: In specific situations, you can request that CBTF limit how it uses your data while a query or complaint is being resolved.

To exercise any of these rights, contact CBTF support. You will be asked to verify your identity before CBTF processes your request, to ensure the request is coming from the account holder. CBTF will acknowledge your request promptly and respond fully within a reasonable period.

10 Children & Minors

CBTF is strictly an adults-only platform. The minimum age to register and use CBTF is 18 years. CBTF does not knowingly collect personal data from anyone under the age of 18.

If you are a parent or guardian and believe a minor has registered an account on CBTF, please contact support immediately with the relevant account details so the matter can be investigated and resolved promptly. Personal data collected from an underage account will be deleted as part of the account closure process.

11 Policy Updates

CBTF may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in the services we use, or changes in applicable privacy standards. When the policy is updated, the revised version will be published on this page with an updated "last updated" date.

For significant changes that materially affect how your data is used, CBTF will notify registered players via the contact details on their account in advance of the change taking effect. For minor updates, the revised policy will be published without a separate notification.

It is your responsibility to review this policy periodically. Continued use of the CBTF platform after a policy update is published constitutes acceptance of the updated policy. If you disagree with any update, you should discontinue use of the platform and request account closure if applicable.

12 Contact Us

If you have questions about this Privacy Policy, want to understand more about how CBTF handles your data, or wish to exercise any of your data rights, contact the CBTF support team through the platform. Support is available around the clock and handles privacy queries with the same priority as account and payment queries.

When raising a privacy-related query, please include your registered account details and a clear description of your request. CBTF will acknowledge your contact promptly and work to resolve your query as quickly as possible.