Cbet Privacy Policy

Information collected from players

Registration required identifying details: full legal name, date of birth, residential address, email address, telephone number and chosen currency. Verification of identity and source of funds added scanned government-issued documents, proof of address and, where deposits reached review thresholds, banking or employment documentation.

Financial records covered deposits, withdrawals, payment instrument identifiers in truncated form, transaction timestamps and the outcome of any anti-fraud checks. Gameplay records covered wagers placed, titles opened, session start and end times, bonus participation and limit settings.

Technical information was captured automatically whenever the site loaded: IP address, approximate geolocation derived from it, browser fingerprint, device type, operating system, referring page and interaction timestamps. Correspondence with the support team — live chat transcripts, emails and attached files — was retained alongside the account record.

Purposes and lawful grounds

Contract performance justified the core of the processing: opening and maintaining accounts, crediting deposits, settling wagers, paying withdrawals and answering support enquiries. Without this information the service could not be delivered at all.

Legal obligation covered age verification, anti-money-laundering and counter-terrorist-financing screening, sanctions and politically-exposed-person checks, record retention and reporting duties owed to the Curaçao Gaming Control Board under licence 365/JAZ.

Legitimate interests supported fraud detection, bonus-abuse and multi-accounting analysis, platform security, service monitoring and aggregate statistical reporting. Direct marketing by email or SMS relied on consent, was requested separately at registration and could be revoked at any time without affecting the account itself.

Disclosure to third parties

Personal information was shared with payment processors and acquiring banks to move funds, with identity-verification providers to confirm documents, with game studios supplying content on the platform, and with hosting, email and analytics vendors engaged under written processing agreements limiting them to instructed purposes.

Disclosure also occurred where required by law or licence: to the Curaçao Gaming Control Board, to financial intelligence units acting on suspicious activity reports, and to courts or law enforcement responding to valid orders. Such disclosures were not always able to be notified to the individual in advance.

Player data was never sold, rented or traded to advertising brokers or list vendors. Cross-border transfers, including to processors located outside Canada and the European Economic Area, were carried out under contractual safeguards appropriate to the destination.

Security, retention and cookies

Transport-layer encryption protected data in transit; stored credentials were hashed and salted, and access to production systems was restricted by role with authentication logging. No safeguard is absolute, and players were expected to use a unique password and protect their own devices and email accounts.

Anti-money-laundering rules required identity, transaction and correspondence records to be kept for a minimum period after the account relationship ended — commonly five years, extended where an investigation or dispute remained open. Marketing preferences and suppression lists were kept for as long as needed to honour an opt-out.

Cookies and similar technologies maintained login sessions, remembered language and currency choices, measured page performance and, where consented to, supported affiliate attribution. Session cookies expired on closing the browser; persistent cookies could be refused or cleared through browser settings, with reduced site functionality as a result.

Player rights and how they were exercised

Registered players could request a copy of the information held about them, ask for inaccurate details to be corrected, withdraw marketing consent, object to specific processing, and request erasure of records not subject to a statutory retention period. Requests were answered within thirty days and required identity confirmation before any data was released.

Canadian residents retained rights under the Personal Information Protection and Electronic Documents Act and equivalent provincial statutes in Quebec, Alberta and British Columbia, including the right to complain to the Office of the Privacy Commissioner of Canada if a response was unsatisfactory.

Following the January 2025 bankruptcy of AK Global N.V. and the closure of cbet.gg on 30 March 2026, live data-subject request channels are no longer staffed. Records remaining in existence fall under the control of the appointed insolvency administrators and the Curaçao Gaming Control Board, and enquiries should be directed to those bodies.

Where to find help

• Insolvency administrators appointed over AK Global N.V. — the correct route for data access, correction or erasure requests since the operator ceased trading
• Curaçao Gaming Control Board, supervisory authority for licence 365/JAZ, for regulatory complaints about the handling of player records
• Office of the Privacy Commissioner of Canada — 1-800-282-1376 — for residents seeking recourse under Canadian privacy law