SSL Encryption

Every byte of data transmitted between your device and cb236 is protected by bank-grade 256-bit SSL encryption, keeping your personal and financial information private at all times.

No Data Selling

cb236 never sells, rents, or trades your personal data to third-party marketing organisations. Your information is used solely to operate and improve our platform services.

Your Rights Matter

You retain the right to access, correct, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 days.

Transparent Cookie Use

We use cookies to improve site performance and personalise your experience. Our cookie policy is fully transparent — you can manage cookie preferences through your browser settings.

Secure Data Storage

All personal data is stored on secured servers with restricted access controls, regular vulnerability assessments, and industry-standard data governance practices.

No Minors' Data

cb236 enforces a strict 21+ age restriction. We do not knowingly collect personal data from individuals under 21 years of age. Accounts of underage users will be closed immediately.

1Introduction

This Privacy Policy ("Policy") describes how cb236 ("we", "us", "our"), the operator of the online gaming platform accessible at https://cb236.cam, collects, uses, stores, shares, and protects the personal data of players and website visitors ("you", "your") in connection with your use of the cb236 platform and associated services.

cb236 is committed to responsible data handling and to maintaining the trust of the Indonesian players who rely on our platform. We process personal data lawfully, fairly, and transparently, and we take appropriate technical and organisational measures to safeguard it against unauthorised access, loss, or misuse.

By registering an account on cb236 or by continuing to use our platform, you acknowledge that you have read, understood, and accepted the practices described in this Policy. This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy.

This Policy applies to all players accessing cb236 from Indonesia and any other jurisdiction. Indonesian residents are afforded all rights described in Section 10 of this document. cb236 processes your data in accordance with applicable international data protection standards.

2Definitions

For the purposes of this Policy, the following terms carry the meanings assigned below:

Term Meaning
"Personal Data" Any information that identifies or can reasonably be used to identify a living natural person, directly or indirectly.
"Processing" Any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
"Data Controller" cb236, which determines the purposes and means of processing personal data collected through the platform.
"Data Processor" A third party that processes personal data on behalf of cb236 under a contractual obligation and data processing agreement.
"Consent" A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
"Platform" The cb236 website, mobile site, and any related services or applications operated by cb236.
"Player" / "User" Any individual who has registered or is using the cb236 platform.

3Data We Collect

cb236 collects the following categories of personal data in connection with your use of the platform:

3.1 Identity Data

  • Full legal name (as stated on your Indonesian KTP)
  • Date of birth
  • Gender
  • Nationality
  • Government-issued identity document number (KTP number)

3.2 Contact Data

  • Email address
  • Indonesian mobile phone number
  • Residential address (city, province)

3.3 Financial Data

  • Bank account details (account name and number for BCA, BRI, BNI, Mandiri, CIMB Niaga, and other accepted banks)
  • E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja registered phone numbers)
  • Deposit and withdrawal transaction history
  • Account balance and bonus credit history

3.4 Technical Data

  • IP address and approximate geographic location derived from it
  • Device type, operating system, and browser information
  • Session timestamps and duration
  • Cookie identifiers and similar tracking technologies

3.5 Gameplay Data

  • Betting history across all product verticals (sports betting, live casino, togel (Indonesia's traditional numbers lottery), and other games)
  • Game preferences and session frequency
  • Responsible gaming tool usage (e.g., deposit limits applied, self-exclusion periods)

3.6 Communications Data

  • Records of correspondence with our customer support team
  • Live chat transcripts and email exchange logs
  • Feedback and survey responses you voluntarily submit

cb236 collects only the minimum data necessary to provide our services, comply with legal obligations, and maintain platform integrity. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or biometric data beyond what is required for identity verification purposes.

4How We Collect Data

cb236 collects personal data through the following channels:

4.1 Directly from You

The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. You are under no obligation to provide this data, but without it we may be unable to provide some or all of our services.

4.2 Automatically via Technology

When you access the cb236 platform, we automatically collect certain technical data through cookies, web beacons, server logs, and similar technologies. This includes your IP address, browser type, pages visited, time spent on each page, and referring URLs. This data helps us maintain platform security, improve performance, and understand how players navigate our services.

4.3 From Third-Party Service Providers

We may receive data about you from third parties in limited circumstances, including:

  • Payment processors: Transaction confirmation data from banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.) to reconcile deposits and withdrawals.
  • Identity verification services: Document authenticity checks performed by our KYC compliance partners.
  • Fraud detection providers: Risk signals used to protect player accounts and platform integrity.
  • Analytics providers: Aggregated and anonymised usage data to help us understand platform performance trends.

5Purpose & Legal Basis for Processing

cb236 processes your personal data only where a lawful basis exists. The table below sets out the primary purposes for which we process data and the corresponding legal basis:

Purpose Data Categories Used Legal Basis
Account registration and management Identity, Contact Contract performance
Identity verification (KYC) Identity, Financial Legal obligation; Contract performance
Processing deposits and withdrawals Financial, Identity Contract performance
Providing gaming services Gameplay, Technical Contract performance
Fraud prevention and security Technical, Financial, Identity Legitimate interest; Legal obligation
Customer support Communications, Identity Contract performance; Legitimate interest
Responsible gaming monitoring Gameplay, Financial Legal obligation; Legitimate interest
Platform analytics and improvement Technical (anonymised) Legitimate interest
Promotional communications (opt-in) Contact, Gameplay Consent
Compliance with legal and regulatory obligations All categories as required Legal obligation

5.1 Promotional Communications

Where you have opted in to receive promotional materials — including information about bonuses, seasonal offers tied to Indonesian cultural events such as Idul Fitri or Ramadhan promotions, and new game announcements — we will contact you via email or SMS. You may withdraw this consent at any time by contacting our support team or using the unsubscribe link included in every promotional message. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6Data Sharing

cb236 does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process data on our behalf under binding contractual obligations that require them to maintain confidentiality and comply with applicable data protection standards. These include:

  • Payment processing partners (banks and e-wallet providers) to facilitate transactions
  • KYC and identity verification platforms
  • Fraud detection and cybersecurity providers
  • Cloud hosting and infrastructure providers
  • Customer support software providers
  • Game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) — these receive anonymised session data only, not directly identifiable personal information

6.2 Legal and Regulatory Disclosure

cb236 may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or binding regulatory directive. We will notify you of such disclosures wherever legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving cb236, personal data held by us may be transferred to the acquiring entity as part of that transaction. We will notify affected players before any such transfer occurs and ensure that equivalent data protection standards are maintained.

cb236 will never share your personal data with third-party advertisers, data brokers, or marketing networks. Any entity receiving your data as a processor is bound by contractual obligations that prohibit secondary use of that data for their own commercial purposes.

7Data Retention

cb236 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide:

Data Category Retention Period
Account and identity data Duration of account plus 5 years after closure
Financial transaction records 7 years from the date of each transaction
KYC documentation 5 years from account closure or last transaction
Gameplay history Duration of account plus 3 years after closure
Customer support communications 3 years from the date of last correspondence
Technical / server log data 12 months on a rolling basis
Marketing preferences and consent records Duration of consent or until withdrawn, plus 2 years

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8Data Security

cb236 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our security framework includes:

  • 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
  • Encrypted data storage for all personally identifiable information at rest
  • Role-based access controls ensuring that only authorised personnel with a legitimate business need can access player data
  • Multi-factor authentication (MFA) for all internal system access by cb236 staff
  • Regular penetration testing and vulnerability assessments conducted by independent security specialists
  • Intrusion detection and prevention systems monitoring for anomalous activity in real time
  • Incident response procedures to detect, report, and remediate data breaches within required timeframes

In the event of a data breach that poses a risk to your rights and freedoms, cb236 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of such an incident.

While we maintain robust security practices, no internet transmission or electronic storage system is completely immune to risk. We encourage you to use a strong, unique password for your cb236 account and to enable any additional security options available in your account settings.

9Cookies & Tracking Technologies

cb236 uses cookies and similar tracking technologies to operate the platform effectively, improve your experience, and gather analytical insights. The following cookie categories are in use:

Cookie Type Purpose Duration
Strictly Necessary Enable core platform functionality — session management, login state, security tokens. Cannot be disabled. Session
Functional Remember your preferences such as language settings, last-visited game lobby, and display options. Up to 12 months
Analytical Collect anonymised data on how players navigate the platform to help us identify and fix usability issues. Up to 24 months
Performance Monitor platform load times, error rates, and server response metrics to maintain service quality. Up to 12 months

9.1 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that disabling strictly necessary cookies will impair your ability to use the cb236 platform. Disabling functional or analytical cookies will not prevent you from accessing core services but may reduce the quality of your experience.

For detailed guidance on managing cookies in your specific browser, please consult your browser's help documentation. cb236 does not currently respond to "Do Not Track" signals, as there is no universally accepted standard for their interpretation.

10Your Data Rights

cb236 respects your rights over your personal data. You may exercise the following rights at any time by submitting a written request to our support team at [email protected]:

10.1 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is processed, the categories of data involved, and with whom it has been shared.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay.

10.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. This right is subject to our legal and regulatory data retention obligations — certain data categories must be retained for prescribed periods regardless of erasure requests.

10.4 Right to Restriction of Processing

You may request that we restrict processing of your personal data in specified circumstances, such as while a dispute about accuracy is being resolved or pending assessment of an objection you have raised.

10.5 Right to Data Portability

Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.

10.6 Right to Object

You have the right to object to processing of your personal data carried out on the basis of our legitimate interests, including profiling for marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose immediately.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for promotional communications, contact us at [email protected] or use the unsubscribe option in any marketing email we send.

cb236 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for the delay. We do not charge a fee for exercising your data rights unless requests are manifestly unfounded or excessive.

11Minors

cb236 enforces a strict 21+ age restriction across all services. We do not knowingly collect, process, or store personal data from individuals under 21 years of age. All registration attempts are subject to age verification checks during the KYC process.

If cb236 becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through misrepresentation at registration or any other means — we will take immediate steps to close the associated account, delete the data, and return any real-money balance where legally appropriate.

Parents or guardians who believe that a minor in their care may have registered an account with cb236 are encouraged to contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

21+ Only. Underage gambling is illegal and harmful. If you are under 21, you must not attempt to register or use the cb236 platform under any circumstances.

12International Data Transfers

cb236 operates internationally and some of our service providers and infrastructure partners may be located in jurisdictions outside Indonesia. Where personal data is transferred to countries that do not provide the same level of data protection as Indonesia, we implement appropriate safeguards to ensure that your data remains protected to a standard equivalent to that described in this Policy.

Such safeguards may include contractual data processing agreements incorporating internationally recognised standard contractual clauses, ensuring that recipient parties are bound to maintain confidentiality and apply adequate security measures.

By using the cb236 platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside Indonesia, subject to the safeguards described above.

13Policy Amendments

cb236 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Send a notification to your registered email address at least 7 calendar days before the revised policy takes effect
  • Display a prominent notice on the platform during the notice period

Your continued use of the cb236 platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the changes, you may close your account in accordance with the provisions of our Terms & Conditions before the revised policy comes into effect.

We encourage you to review this page periodically to stay informed about how cb236 handles your personal data.

14Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cb236 handles your personal data, please reach out to our dedicated data privacy team using the contact details below:

  • Email: [email protected] (plain text — not a clickable link)
  • Subject Line: Please clearly indicate "Privacy Request" or "Data Rights Request" in your subject line to ensure your query is routed to the appropriate team
  • Support Hours: 24 hours a day, 7 days a week
  • Response Time: Within 30 calendar days for formal data rights requests; within 24 hours for general privacy enquiries
  • Language: Indonesian-speaking agents are available at all times to assist players who prefer to communicate in Bahasa Indonesia

For general account support, bonus queries, or technical assistance, please contact our standard customer support team via live chat on the platform or at [email protected].

For your security, cb236 may need to verify your identity before processing any data rights request. This is to ensure that personal data is not disclosed to, or acted upon at the request of, any unauthorised individual.

Questions About Your Privacy?

Our support team is available around the clock to address any data privacy concerns. You can also explore our FAQ for quick answers, or review our full Terms & Conditions for a complete picture of your rights and obligations.