Privacy Policy — How cbr250 Handles Your Personal Data

cbr250 ("cbr250", "we", "us", "our") is an online casino and sports betting platform operating at cbr250.vip and targeting the Bangladesh market. We are committed to protecting the privacy and personal data of every individual who accesses or uses the cbr250 Platform — including visitors who browse without registering and registered Players who engage in Real-Money Gaming.

This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we process that data, the conditions under which we may share it with third parties, the security measures we apply to protect it, and the rights available to you as a data subject. This Policy should be read in conjunction with the cbr250 Terms & Conditions, which govern your use of the Platform as a whole.

By registering an Account on the cbr250 Platform, depositing funds, or otherwise submitting personal data to us, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an Account or submit personal data to cbr250.

For the purposes of this Privacy Policy, cbr250 acts as the data controller in respect of personal data collected from Players and visitors to the cbr250 Platform. As data controller, cbr250 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and in a transparent manner.

All data protection queries, access requests, and erasure requests should be directed to the cbr250 support team at the contact details provided in Section 14 of this Policy. cbr250 aims to acknowledge all data-related requests within 72 hours of receipt and to respond substantively within 30 days.

cbr250 collects personal data through several distinct channels and at various points throughout the Account lifecycle. The categories of data we collect are described in detail below.

3.1 Registration Data

When you create a cbr250 Account, we collect the following information that you provide directly:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (to verify that you are 18 years of age or older).
• Residential address in Bangladesh (district, city, and postal address).
• A valid email address for Account correspondence.
• A mobile phone number registered in Bangladesh to which Account notifications may be sent and to which your payment method (bKash, Nagad, Rocket, or Upay) is linked.
• Your chosen username and an encrypted hash of your selected password — cbr250 does not store plaintext passwords.

3.2 Identity Verification (KYC) Data

When you request a withdrawal or when cbr250 requires enhanced due diligence, you may be asked to submit the following documentation:

• A copy of a government-issued photo ID (e.g., National Identity Card, passport, or birth registration certificate).
• Proof of residential address (e.g., a utility bill, bank statement, or official correspondence dated within the last three months).
• A selfie or live photo to verify that the identity document belongs to you.

All KYC documents submitted to cbr250 are stored securely and used solely for identity and age verification purposes. They are not shared with third parties except as required by applicable anti-money laundering obligations.

3.3 Transaction Data

We collect records of all financial transactions carried out through your cbr250 Account, including:

• Deposit amounts, timestamps, and the mobile wallet number used to make the deposit.
• Withdrawal requests, amounts, processing timestamps, and destination wallet numbers.
• Bonus credits, wagering activity records, and cashback transactions.
• Running wallet balance snapshots at the time of each transaction.

3.4 Gaming Activity Data

cbr250 logs all game sessions and betting activity conducted through your Account, including the games played, bet amounts, game outcomes, session start and end times (in Bangladesh Standard Time, UTC+6), and the device type used during each session. This data is used for game integrity monitoring, dispute resolution, and responsible gaming analysis.

3.5 Technical & Device Data

When you access the cbr250 Platform, our servers automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it.
• Browser type, version, and operating system.
• Device type (mobile, tablet, or desktop) and screen resolution.
• Referral URL (the page from which you navigated to cbr250.vip).
• Pages visited on the cbr250 Platform and time spent on each page.
• Session identifiers and authentication tokens (stored as cookies — see Section 7).

3.6 Communications Data

When you contact the cbr250 support team by email at [email protected], we retain a record of the correspondence, including your email address, the content of your messages, and any attachments or screenshots you provide. These records are used for support case resolution, quality assurance, and the prevention of fraudulent support requests.

cbr250 processes personal data only for the specific purposes described below. We do not process personal data in a manner that is incompatible with the purpose for which it was originally collected.

• Account Creation and Management: To establish and maintain your cbr250 Account, authenticate your login sessions, and communicate Account-related information to you.
• Age and Identity Verification: To verify that you are 18 years of age or older before permitting Real-Money Gaming activity, and to confirm your identity in accordance with our Know Your Customer obligations.
• Payment Processing: To process deposits from and withdrawals to your registered mobile wallet (bKash, Nagad, Rocket, Upay) and to maintain accurate transaction records for your Account.
• Game Integrity and Security: To monitor game sessions and betting patterns for evidence of prohibited conduct, collusion, bot usage, or exploitation of Platform vulnerabilities, as described in the cbr250 Terms & Conditions.
• Responsible Gaming: To analyse your gaming activity data in order to identify indicators of problem gambling behaviour and, where appropriate, to prompt the use of responsible gaming tools such as deposit limits or self-exclusion.
• Anti-Money Laundering Compliance: To monitor deposit and withdrawal patterns in accordance with applicable anti-money laundering principles and to report suspicious activity where required by law.
• Customer Support: To respond to your support queries, resolve disputes, and maintain records of our communications with you.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve Platform performance, and enhance the user experience for Bangladesh players.
• Legal and Regulatory Obligations: To comply with any applicable legal obligation, court order, or lawful request from a competent authority requiring the disclosure of personal data held by cbr250.

cbr250 processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to perform our obligations under the cbr250 Terms & Conditions Agreement with you — including Account creation, payment processing, game provision, and customer support — is carried out on the basis that it is required to fulfil the contract between cbr250 and you as a registered Player.
• Legal Obligation: Processing carried out to comply with applicable legal obligations — including age verification, anti-money laundering monitoring, and the retention of financial transaction records — is based on cbr250's legal duty to comply with those obligations.
• Legitimate Interests: Processing carried out for game integrity monitoring, fraud prevention, Platform security, and aggregated analytics is based on cbr250's legitimate interest in operating a secure and fair Platform, provided that such processing does not override your fundamental rights and freedoms.
• Consent: Processing carried out for optional marketing communications (if you have opted in) and the setting of non-essential cookies is based on your explicit, freely given, informed, and specific consent. You may withdraw consent for such processing at any time without affecting the lawfulness of prior processing.

cbr250 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared with third parties only in the limited circumstances described below.

6.1 Payment Providers

When you make a deposit or request a withdrawal, cbr250 shares the minimum personal data necessary with your selected mobile financial services provider (bKash, Nagad, Rocket, or Upay) to process the transaction. The data shared is limited to your registered mobile wallet number, the transaction amount in BDT, and a transaction reference identifier. These providers operate under their own privacy policies and are independently responsible for the personal data they process.

6.2 Game Providers

Game content on the cbr250 Platform is delivered by third-party game providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi. When you launch a game from these providers, a session token and anonymised player identifier may be passed to the provider's game server to initialise the game session. Your full name, email address, and payment details are not passed to game providers.

6.3 Legal and Regulatory Disclosure

cbr250 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where it is required to do so by applicable law, court order, or other legally binding obligation. In such cases, cbr250 will disclose only the minimum amount of personal data necessary to comply with the legal obligation and will, where legally permissible, notify the affected Player of the disclosure.

6.4 Business Transfers

In the event that cbr250 undergoes a corporate restructuring, merger, acquisition, or sale of all or substantially all of its assets, Player personal data may be transferred to the acquiring entity as part of that transaction. cbr250 will take reasonable steps to ensure that any such transfer is subject to appropriate data protection safeguards and will provide reasonable notice to Players prior to their data being transferred to or governed by a materially different privacy policy.

cbr250 uses cookies and similar tracking technologies on the cbr250 Platform to maintain session state, remember your preferences, and collect anonymised analytics data about Platform usage. The following categories of cookies are used:

Essential cookies are necessary for the cbr250 Platform to function and cannot be disabled without affecting your ability to use the Platform. Non-essential analytics cookies are set only where you have provided consent. You may manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the cbr250 Platform, including your ability to maintain a logged-in session.

cbr250 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any applicable legal obligation requiring retention for a longer period. The specific retention periods applicable to each category of personal data are set out in the table in Section 3 of this Policy.

Upon the expiry of the applicable retention period, cbr250 will securely delete or anonymise the personal data in question so that it can no longer be attributed to an identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised data may be retained indefinitely for aggregated analytics purposes without constituting personal data.

If you request erasure of your personal data under Section 10 of this Policy before the end of the applicable retention period, cbr250 will evaluate your request and, where there is no overriding legal obligation to retain the data, will carry out erasure within 30 days of confirming the request.

cbr250 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and the cbr250 Platform is encrypted using Transport Layer Security (TLS). The presence of HTTPS in your browser's address bar confirms that your session is encrypted.
• Password Hashing: Passwords are never stored in plaintext. cbr250 applies a strong, one-way cryptographic hashing algorithm with a unique per-user salt to all Account passwords before storage.
• Access Controls: Access to personal data within cbr250's internal systems is restricted on a strict need-to-know basis. Personnel who handle Player personal data are subject to confidentiality obligations.
• Database Security: Player data is stored in secure, access-controlled database environments. KYC documents are stored separately from Account credentials and gaming records.
• Session Management: cbr250 enforces session timeout on inactive logins and invalidates authentication tokens upon logout to reduce the risk of session hijacking.
• Monitoring & Incident Response: cbr250 monitors its Platform infrastructure for anomalous access patterns and maintains an incident response procedure for data security events. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cbr250 will notify affected Players without undue delay.

As a data subject whose personal data is processed by cbr250, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact cbr250 at [email protected] with the subject line "Privacy Request — [Right Name]".

• Right of Access: You have the right to request a copy of the personal data that cbr250 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to Rectification: You have the right to request that cbr250 correct any inaccurate or incomplete personal data held about you without undue delay. For certain data (such as your registered name or date of birth), cbr250 may request supporting documentation before carrying out the correction.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to cbr250's legal obligation to retain certain categories of data (particularly transaction records and KYC documentation) for the periods specified in Section 3.
• Right to Restriction of Processing: You have the right to request that cbr250 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being evaluated.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to cbr250 in a structured, commonly used, machine-readable format (such as CSV), and to transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of cbr250's legitimate interests. cbr250 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., optional marketing communications or non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

cbr250 will respond to all data subject rights requests within 30 days of receipt. In cases of complexity or high volume, cbr250 may extend this period by a further 60 days, in which case it will notify you of the extension and the reasons for it within the initial 30-day window.

The cbr250 Platform is strictly intended for use by adults aged 18 years and above. cbr250 does not knowingly collect, solicit, or process personal data from individuals under the age of 18. If cbr250 becomes aware that it has inadvertently collected personal data from a minor, it will take immediate steps to delete that data and to close the associated Account in accordance with its Terms & Conditions.

If you have reason to believe that a minor has registered an Account on the cbr250 Platform or has submitted personal data to cbr250, please contact [email protected] immediately with the subject line "Underage Account Report" so that the matter can be investigated and resolved without delay.

The cbr250 Platform may contain links to or embedded content from third-party services, including game provider platforms operated by Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi, and mobile financial service portals operated by bKash, Nagad, Rocket, and Upay. This Privacy Policy does not extend to, and cbr250 is not responsible for, the privacy practices of any third-party service or website that you access via the cbr250 Platform.

We encourage you to review the privacy policies of any third-party service you use in connection with your cbr250 Account, particularly your chosen mobile payment provider, before submitting personal data to those services. cbr250 has no control over the data collection, processing, or retention practices of third-party providers.

cbr250 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal obligations, or Platform features. When material changes are made to this Policy, cbr250 will notify registered Players by posting a prominent notice on the cbr250 Platform and, where appropriate, by sending an email to the address registered to each affected Account.

The updated Privacy Policy will take effect on the date stated at the top of the document. Your continued use of the cbr250 Platform after that date constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request Account closure in accordance with the cbr250 Terms & Conditions.

The current version of this Privacy Policy is dated January 2026. Previous versions of this Policy are available upon written request to [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which cbr250 processes your personal data, please contact the cbr250 data protection team using the details below:

• Privacy Enquiries Email: [email protected] — please include "Privacy Request" in the subject line.
• Support Hours: 24 hours per day, 7 days per week, Bangladesh Standard Time (UTC+6).
• Response Commitment: cbr250 will acknowledge all privacy-related queries within 72 hours and provide a substantive response within 30 days of receipt.

For responsible gaming queries — including requests to set deposit limits, activate a cooling-off period, or initiate self-exclusion — please visit the Responsible Gaming page or contact support with "Responsible Gaming" in the subject line of your email.