Cb88 Privacy Policy – Indonesian User Data Protection

This Privacy Policy ("Policy") explains how cb88 ("we", "Platform") collects, processes, stores, and protects the personal data of users who access and use the services available on the cb88 official website and app.

By registering an account or continuing to use CB88 services after this policy takes effect, you confirm that you have read and understood this policy and consent to the processing of your data as described herein.

CB88 is committed to managing personal data in accordance with generally accepted data protection principles: transparency, purpose limitation, data minimization, accuracy, storage security, and accountability.

CB88 collects various types of personal data in order to provide a secure, functional, and personalized service. Below are the categories of data we collect along with their primary purposes:

CB88 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as users' race, religion, or political affiliation.

Personal data collected by CB88 is used for the following purposes, all in the interest of providing and improving platform services:

• Account creation and management: ensuring every registered account is tied to a valid and unique identity.
• KYC Verification: meeting customer due diligence standards before processing large-scale withdrawals.
• Transaction processing: validating and accurately processing deposits, withdrawals, and bonus payments.
• Platform security: detecting and preventing suspicious activity, fraud, or duplicate account usage.
• Customer support: managing and resolving user inquiries and complaints with the appropriate context.
• Service improvements: analyzing usage patterns in aggregate to improve platform performance and features.
• Important communications: sending account notifications, policy updates, or relevant security information.
• Legal compliance: maintaining records required to fulfill applicable regulatory reporting obligations.

CB88 processes your personal data on one or more of the following legal bases, depending on the context of the processing:

1. Contract performance: processing necessary to provide the services you requested when registering and using cb88.
2. Legitimate interest: processing for platform security, fraud prevention, and service improvements that do not infringe on users' fundamental rights.
3. Consent: for certain types of processing such as optional marketing communications, where we will first request your explicit consent.
4. Legal obligation: processing required by applicable regulations, including the retention of financial transaction records.

CB88 does not sell or trade users' personal data. However, under certain circumstances, data may need to be shared with selected third parties for limited operational purposes:

• Payment partners: payment service providers such as banking networks and digital wallet operators that process deposit and withdrawal transactions on your behalf. They receive only the data necessary to complete those transactions.
• Technology providers: cloud infrastructure vendors and technology service providers that help operate the cb88 platform. All such partners are bound by confidentiality agreements and are not permitted to use your data for their own purposes.
• Legal authority: where required by court order, regulatory directive, or applicable law, cb88 may share requested data with the relevant authorities.

CB88 applies multiple layers of technical and organizational security to protect users' personal data from unauthorized access, alteration, disclosure, or accidental destruction:

• 256-bit SSL/TLS encryption for all data communications between users and CB88 servers.
• At-rest encryption for sensitive data stored in the production database.
• Two-factor authentication (2FA) available for user accounts.
• Real-time server access monitoring with automated alert systems for anomalous activity.
• A role-based access control policy that restricts who can access what data within cb88's internal environment.
• Regular security audits by the internal team and periodic external reviews.
• Documented incident response procedures to handle potential data security breaches.

CB88 uses cookies and similar tracking technologies to enhance platform functionality and the user experience. Cookies are small text files stored on your device when you access the CB88 site.

Types of cookies used by cb88:

• Essential cookies: required for core platform functions such as maintaining an active login session. Cannot be disabled without affecting primary functionality.
• Functional cookies: storing user preferences such as language and display settings for a more personalized experience.
• Analytics cookies: collecting anonymized usage data to help cb88 understand how users interact with the platform and identify areas for improvement.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect your ability to fully use certain CB88 features.

CB88 retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law.

• Active account data: retained for as long as the account remains active and in use.
• Closed account data: after account closure, core data is retained for the minimum period required by financial regulations (generally a number of years) before being securely deleted.
• Financial transaction data: retained for longer periods in accordance with applicable financial reporting and audit obligations.
• Security log data: retained for a limited period for security incident investigation purposes if needed.

As a cb88 user, you have certain rights regarding your personal data stored in our systems. You may exercise these rights by contacting the cb88 support team via live chat:

• Right of access: You have the right to request confirmation of whether CB88 processes your personal data, and if so, to obtain a copy of that data.
• Right to correction: You have the right to request correction of inaccurate or incomplete data.
• Right to erasure: under certain conditions, you have the right to request deletion of your personal data, unless retention is still required by law.
• Right to restrict processing: under certain conditions, you may request that we restrict how your data is processed while a request or complaint is under review.
• Right to data portability: You have the right to receive the data you provided to CB88 in a structured, machine-readable format.
• Right to object: You have the right to object to data processing based on CB88's legitimate interests under certain conditions.

CB88 will respond to user rights requests within a reasonable timeframe. Requests requiring identity verification may take longer to process.

CB88 strictly prohibits use of the platform by individuals under 18 years of age. We do not knowingly collect personal data from users below that age.

Parents or guardians who suspect their child has registered an account at cb88 may contact our support team via live chat to report and resolve the situation.

CB88 may update this Privacy Policy from time to time to reflect changes in data management practices, new platform features, or evolving applicable regulations.

When material changes occur, cb88 will:

• Updating the "Last updated" date at the top of this page.
• Sending notifications to active users via the platform or their registered email.
• Providing a minimum of 7 days before changes take effect, giving users the opportunity to review them.

Continuing to use the cb88 platform after the effective date of any policy change constitutes your acceptance of the updated policy.

If you have questions, concerns, or wish to exercise your rights regarding personal data at cb88, please contact our support team via:

• Live Chat: available 24 hours a day, 7 days a week directly on the cb88 platform — this is the fastest way to get a response.
• Support email: [email protected] — for inquiries requiring more detailed handling or formal documentation.

This document was last updated in June 2026 and applies to all services available on the CB88 platform.