Privacy Policy

1. Introduction

CB44 ("CB44", "we", "us", "our", "the Operator", "the Platform") operates the online casino and sports betting platform accessible at https://cb44.cam. In the course of providing our services to players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — we collect, process, and store certain categories of personal data relating to our registered users ("Players", "you", "your").

CB44 takes its data protection obligations seriously. This Privacy Policy sets out, in transparent and accessible language, the full scope of our data practices. It has been prepared in accordance with applicable data protection legislation and reflects the standards expected by the Malaysian Personal Data Protection Act 2010 (PDPA) and other relevant regulatory frameworks applicable to our operations.

By registering an Account with CB44, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection, use, and disclosure of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must discontinue use of the Platform and may request Account closure.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall use of the CB44 Platform, and our Responsible Gambling page, which describes how we use data to support player protection.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

"Account" — the registered user profile created by a Player on the CB44 Platform.
"Controller" — the entity that determines the purposes and means of processing Personal Data. CB44 acts as Controller in respect of Player data processed on the Platform.
"Cookie" — a small text file placed on your device by the CB44 Platform when you visit or interact with the website, used to maintain session state, analytics, and personalisation.
"KYC Data" — identity verification documents and information collected in the course of Know Your Customer (KYC) procedures, including but not limited to government-issued identification, proof of address, and selfie photographs.
"Personal Data" — any information that identifies or is reasonably capable of identifying a natural person, including name, contact details, financial information, and device identifiers.
"Processing" — any operation performed on Personal Data, including collection, storage, use, transfer, disclosure, and deletion.
"Processor" — a third party that processes Personal Data on behalf of CB44 under a written data processing agreement.
"Sensitive Data" — a subset of Personal Data requiring heightened protection, such as financial account details, payment credentials, and identity document data.

3. Data We Collect

CB44 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The following table summarises the primary data types we collect:

Data Category	Examples	When Collected
Registration Data	Full legal name, date of birth, email address, mobile number, chosen username	Account registration
Identity Verification (KYC) Data	Malaysian MyKad / IC number, Driver's Licence, International Passport, proof of address documents, selfie images	KYC verification process
Financial Data	Payment method details, e-wallet account names, bank account references, transaction amounts and history	Deposit / withdrawal processing
Gameplay Data	Game session records, wager amounts, win/loss history, bonus usage, sports bets placed	During active Platform use
Technical & Device Data	IP address, browser type and version, device model and OS, session timestamps, clickstream data	Automatically on Platform access
Communication Data	Live chat transcripts, support ticket content, email correspondence, feedback submissions	When you contact CB44
Marketing Preference Data	Opt-in/opt-out status for promotional communications, preferred contact channel	Registration or preference update

CB44 adheres to the principle of data minimisation — we collect only the data that is necessary for the specific purpose for which it is collected. We do not collect sensitive personal data beyond what is strictly required by our compliance obligations.

4. How We Collect Personal Data

CB44 collects Personal Data through the following channels:

4.1 Directly from You

When you complete the Account registration form;
When you submit documents as part of the KYC verification process;
When you initiate a deposit or withdrawal through any of our supported Malaysian payment channels, including Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, DuitNow, FPX, or cryptocurrency networks;
When you contact our Customer Support team via live chat or email;
When you respond to surveys, promotions, or other communications from CB44.

4.2 Automatically During Platform Use

Through cookies and similar tracking technologies when you visit or interact with the Platform;
Through server logs that record your IP address, access times, pages visited, and browser information;
Through your gameplay and wagering activity on the Platform.

4.3 From Third Parties

From identity verification service providers engaged by CB44 to assist with KYC compliance;
From fraud detection and anti-money laundering (AML) screening services;
From payment processors and financial institutions in connection with transaction processing;
From responsible gambling support organisations where a player has consented to information sharing in the context of self-exclusion or intervention programmes.

5. Legal Basis for Processing

CB44 processes your Personal Data only where a lawful basis for doing so exists. The primary legal bases on which we rely are as follows:

Contractual Necessity: Processing required to fulfil our obligations under the Account Terms and Conditions — including account creation, gameplay facilitation, payment processing, and withdrawal handling;
Legal Obligation: Processing required to comply with applicable law, including anti-money laundering regulations, tax reporting obligations, KYC requirements, and data retention mandates;
Legitimate Interests: Processing carried out in pursuit of CB44's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your fundamental rights;
Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional marketing communications and certain cookie categories. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Purposes of Data Processing

CB44 processes your Personal Data for the following specific purposes:

Account Administration: Creating, maintaining, and managing your registered Account on the Platform;
Identity Verification: Conducting KYC checks to confirm your identity, age, and eligibility to use the Platform in compliance with applicable regulations;
Payment Processing: Processing deposits and withdrawals via supported MYR payment methods and cryptocurrency channels, and maintaining transaction records;
Fraud & AML Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and other financial crimes on the Platform;
Responsible Gambling Monitoring: Monitoring gameplay patterns to identify potential indicators of problem gambling and implementing appropriate interventions, including deposit limits, session reminders, and self-exclusion;
Customer Support: Responding to your queries, resolving complaints, and providing technical assistance;
Platform Improvement: Analysing aggregate usage data to improve Platform functionality, game selection, and user experience;
Legal Compliance: Maintaining records required by applicable law and responding to lawful requests from regulatory and law enforcement authorities;
Marketing Communications: Where you have opted in, sending you information about promotions, bonuses, new game releases, and other CB44 news. You may opt out at any time.

CB44 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review. Responsible gambling monitoring flags are reviewed by trained support agents before any intervention action is taken.

7. Data Sharing & Disclosure

CB44 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients only where necessary and under appropriate safeguards:

Payment Service Providers: Including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network processors — for the purpose of executing financial transactions;
KYC & Identity Verification Providers: Third-party providers contracted to assist CB44 in conducting identity and document verification checks;
Fraud & AML Screening Services: Service providers engaged to screen accounts and transactions against sanctions lists and fraud databases;
IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity providers who process data on CB44's behalf under contractual data processing agreements;
Legal & Regulatory Authorities: Where CB44 is required or permitted by law to disclose information to a regulatory body, law enforcement agency, court, or other governmental authority;
Professional Advisers: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations where disclosure is necessary for legal, financial, or regulatory purposes.

Any third party to whom CB44 discloses Personal Data is required to handle such data in accordance with applicable data protection law and CB44's minimum data security standards.

8. Data Retention

CB44 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our standard retention periods are as follows:

Account and Registration Data: Retained for the duration of your Account relationship with CB44 and for a period of no less than five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements;
KYC Documents: Retained for a minimum of five (5) years from the date of verification or Account closure (whichever is later), as required by applicable AML regulations;
Financial Transaction Records: Retained for a minimum of seven (7) years for accounting and regulatory compliance purposes;
Gameplay Records: Retained for a minimum of five (5) years for dispute resolution, regulatory audit, and responsible gambling monitoring purposes;
Marketing Preferences: Retained until you withdraw consent or three (3) years of inactivity, whichever occurs first;
Technical and Device Logs: Typically retained for a rolling period of twelve (12) months for security monitoring purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with CB44's data disposal procedures.

9. Data Security

CB44 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

Transport Encryption: All data transmitted between your device and the CB44 Platform is encrypted using TLS 1.2 / TLS 1.3 (256-bit SSL). The padlock icon in your browser address bar confirms that your connection is secure;
Data-at-Rest Encryption: Personal Data stored in CB44's databases is encrypted at rest using industry-standard AES-256 encryption;
Access Controls: Access to systems holding Personal Data is restricted on a strict need-to-know basis, with multi-factor authentication required for all administrative access;
Regular Security Audits: CB44 engages independent cybersecurity specialists to conduct periodic penetration testing and vulnerability assessments of the Platform;
Staff Training: All CB44 personnel who handle Personal Data receive regular data protection training;
Incident Response: CB44 maintains a documented data breach response procedure. In the event of a confirmed data breach that affects your rights, we will notify affected Players and relevant regulatory authorities as required by applicable law.

You are responsible for maintaining the security of your Account credentials. Never share your password with anyone. CB44 will never ask for your full password via email or live chat. If you suspect your Account has been compromised, contact support immediately.

10. Cookies & Tracking Technologies

CB44 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver a functional, personalised, and secure experience.

10.1 Types of Cookies We Use

Strictly Necessary Cookies: Essential for the Platform to function — including session management, authentication state, and security tokens. These cannot be disabled without affecting Platform functionality;
Functional Cookies: Used to remember your preferences, such as language settings, display options, and notification preferences;
Analytical / Performance Cookies: Used to understand how Players interact with the Platform — including page visits, session duration, and error events — in aggregate and anonymised form to improve Platform performance;
Responsible Gambling Cookies: Used to maintain session timing data that supports session limit notifications and gameplay duration tracking as part of our responsible gambling commitments.

10.2 Cookie Management

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be opted out of while using the Platform.

11. International Data Transfers

In the course of operating the CB44 Platform and engaging third-party service providers, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Where such transfers occur, CB44 takes all reasonable steps to ensure that appropriate safeguards are in place to protect your data, including:

Engaging only processors that have implemented appropriate technical and organisational security measures;
Incorporating data transfer clauses in contracts with service providers that reflect applicable data protection standards;
Restricting data transfers to jurisdictions that provide an adequate level of data protection, or implementing appropriate contractual safeguards where adequacy is not presumed.

If you require further information about the specific safeguards applicable to any international transfer of your data, please contact us using the details in Section 16.

12. Your Data Rights

Subject to applicable law and CB44's compliance obligations, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact CB44 via the details in Section 16.

Right of Access

You have the right to request a copy of the Personal Data CB44 holds about you, along with information about how it is used and shared. We will respond to verified access requests within 30 calendar days.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. You may also update certain Account information directly through your Account settings.

Right to Erasure

You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. Note that CB44 is required to retain certain data for regulatory periods — erasure requests cannot override these obligations.

Right to Restriction of Processing

You may request that CB44 restrict the processing of your data in certain circumstances — for example, while a rectification request is under review, or where you contest the lawfulness of processing.

Right to Data Portability

Where technically feasible and where processing is based on consent or contract, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing carried out on the basis of CB44's legitimate interests, including any profiling activities. You may also object to direct marketing at any time by updating your communication preferences.

Right to Withdraw Consent

Where CB44 processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact CB44's support team via live chat or email as described in Section 16. We will verify your identity before processing any data rights request and will respond within 30 calendar days of receiving a complete request. Complex requests may require up to 60 days with advance notification.

13. Minors & Age Verification

CB44 is strictly prohibited from knowingly collecting Personal Data from individuals under the age of 21 years. The Platform is not intended for, and does not market to, minors.

All Players are required to confirm that they are aged 21 or above at the time of registration. CB44 enforces age verification through its KYC programme — requiring submission of a valid government-issued identification document confirming date of birth prior to the activation of withdrawal privileges.

Where CB44 discovers or reasonably suspects that an Account is being operated by a person under 21 years of age, the Account will be immediately suspended, all Personal Data will be handled in accordance with applicable law, and any funds in the Account will be dealt with in compliance with regulatory guidance on underage gambling.

21+ Strictly Enforced. If you are aware of an individual under the age of 21 accessing the CB44 Platform, please contact our support team immediately via live chat.

14. Third-Party Services & Links

The CB44 Platform integrates with a number of third-party services in the course of its operations, including payment processors, game providers, analytics tools, and customer support platforms. While CB44 exercises due diligence in selecting third-party partners and enters into data processing agreements with each, CB44 does not accept responsibility for the privacy practices of independent third-party services.

Each third-party service provider is governed by its own privacy policy and data protection practices. CB44 encourages Players to review the privacy policies of any third-party services they interact with in connection with their use of the Platform.

CB44 does not permit third-party game providers to use Player data for any purpose other than delivering the requested game content within the CB44 environment. Game provider access to Personal Data is strictly limited to technical session data necessary for gameplay functionality.

15. Policy Amendments

CB44 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, we will notify registered Players by email and/or by posting a prominent notice on the Platform no less than fourteen (14) calendar days before the updated policy takes effect.

The date of the most recent revision is indicated at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed of how we protect your data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

Where required by applicable law, CB44 will seek your explicit consent prior to any material change in the purposes for which your Personal Data is processed.

16. Contact & Data Enquiries

For all privacy-related enquiries, requests to exercise your data rights, or concerns about CB44's data handling practices, please contact us through the following channels:

Live Chat Support (24/7): Available directly within the Platform. Click the live chat icon while logged in to your Account for immediate assistance from our trained support team.

Email: [email protected] — for written data rights requests and formal privacy complaints. Please include your registered Account username and a clear description of your request. Responses within 4 business hours for standard queries.

Data Rights Requests: To exercise your rights under Section 12 (access, rectification, erasure, portability, objection), please submit your request via email with subject line "Data Rights Request" and include a copy of your identity document for verification purposes.

CB44 serves players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, and Shah Alam. Our privacy and compliance team is committed to responding to all data enquiries promptly and transparently. We will acknowledge receipt of your enquiry within one (1) business day and provide a substantive response within thirty (30) calendar days.