ct999p Privacy Policy

1. Introduction

ct999p ("we", "us", "our", "the Platform") is committed to protecting the personal data of all registered players and visitors. This Privacy Policy describes how ct999p collects, uses, stores, discloses, and protects personal information provided by users ("you", "User", "Player") in connection with the ct999p online gaming platform, including its sportsbook, live casino, slot games, and fishing arcade titles.

This policy applies to all personal data processed by ct999p regardless of how it is collected — whether through the ct999p website, mobile platform, customer support interactions, or payment processing channels. This policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

ct999p serves players primarily based in Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, and other cities. We are mindful of the trust our players place in us when they share their personal information and we take that responsibility seriously.

---

2. Data We Collect

2.1 Registration Data

When you create a ct999p account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address, email address, mobile phone number, and chosen username. This information is required to open and maintain your account and to comply with our Know Your Customer (KYC) and age verification obligations.

2.2 Identity Verification Data

To comply with applicable anti-money laundering (AML) regulations and our responsible gaming obligations, ct999p may request documentary proof of identity and address. This may include a scanned copy or photograph of a valid Pakistani CNIC, passport, or other government-issued photo identification, as well as a recent utility bill or bank statement as proof of residential address.

2.3 Financial & Payment Data

ct999p collects information relating to your deposits and withdrawals, including payment method details, transaction amounts, and transaction timestamps. Payment methods used on the ct999p Platform include JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and IBFT. Full card or bank account numbers are never stored on ct999p servers; payment processing is handled by PCI-DSS compliant payment partners.

2.4 Gaming & Activity Data

ct999p maintains detailed records of your gaming activity on the Platform, including bet history, game session data, win and loss records, bonus usage, and wagering activity. This data is used to operate the Platform, settle bets accurately, detect fraud, and fulfil our responsible gaming monitoring obligations.

2.5 Technical & Device Data

When you access the ct999p Platform, we automatically collect certain technical information including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data is collected to ensure platform security, optimise user experience, and detect potentially fraudulent or unauthorised access attempts.

2.6 Communications Data

When you contact ct999p via live chat, email, or any other support channel, we retain records of those communications, including the content of messages and the date and time they were sent. This data is used to resolve queries, train support staff, and maintain an audit trail of customer interactions.

---

3. How We Use Your Data

ct999p uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Account creation and management	Registration data, identity verification data
Processing deposits and withdrawals	Financial & payment data, registration data
KYC / AML compliance	Identity verification data, financial data, gaming activity data
Fraud prevention and platform security	Technical & device data, gaming activity data, financial data
Responsible gaming monitoring	Gaming activity data, registration data, communications data
Customer support	Communications data, registration data, gaming activity data
Marketing communications (with consent)	Registration data, gaming activity data
Platform analytics and improvement	Technical & device data, gaming activity data (anonymised)
Legal and regulatory obligations	All categories where required by law

ct999p will not use your personal data for any purpose not listed above without first notifying you and, where required, obtaining your explicit consent.

---

4. Legal Basis for Processing

ct999p processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering your ct999p account, including account management, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and regulatory reporting obligations.
• Legitimate interests: Processing carried out for ct999p's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, including marketing communications. You may withdraw consent at any time by contacting our support team or updating your account preferences.

---

5. Sharing Your Data

5.1 Service Providers

ct999p shares personal data with trusted third-party service providers who assist us in operating the Platform. These include payment processors (who handle PKR transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and IBFT), identity verification partners, game content studios, cloud infrastructure providers, and customer support software vendors. All service providers are contractually bound to process personal data only on ct999p's instructions and to maintain appropriate security standards.

5.2 Regulatory and Law Enforcement Authorities

ct999p may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally obligated to do so. Such disclosures are made strictly in accordance with applicable legal requirements and are limited to the minimum data necessary to satisfy the legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ct999p's business assets, personal data held by ct999p may be transferred to the successor entity as part of that transaction. Users will be notified of any such transfer and the privacy terms applicable to their data following the transaction.

5.4 No Sale of Data

ct999p does not sell, rent, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or marketing companies. This is a firm and unconditional commitment.

---

6. Cookies & Tracking Technologies

6.1 What We Use

The ct999p Platform uses cookies and similar tracking technologies including web beacons and local storage to operate essential platform functions, remember your session preferences, and gather anonymised analytics on how users interact with the site. Cookies are small text files stored on your device by your browser.

6.2 Types of Cookies

• Essential cookies: Required for the Platform to function. These cannot be disabled without breaking core functionality such as login sessions and game loading.
• Analytics cookies: Used to understand how users navigate the Platform, which pages are most visited, and where technical errors occur. Data collected is aggregated and anonymised.
• Preference cookies: Store your Platform settings such as language preference and display options between sessions.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and suspicious account behaviour.

6.3 Managing Cookies

You can control or disable non-essential cookies through your browser settings. Note that disabling essential cookies will impair your ability to use the ct999p Platform. For full cookie management options, refer to the help documentation of your browser.

---

7. Data Retention

ct999p retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in line with AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial regulations.
• Gaming activity data: Retained for the duration of your account and for up to three (3) years following account closure.
• Customer support communications: Retained for up to two (2) years from the date of the last communication in a thread.
• Technical and device data: Retained in aggregated or anonymised form for analytical purposes for up to one (1) year.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

---

8. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by ct999p. To exercise any of these rights, please contact our support team at [email protected].

• Right of access: You may request a copy of all personal data ct999p holds about you. We will respond within 30 days of receiving a valid request.
• Right to rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Many details can also be updated directly through your account settings.
• Right to erasure: You may request that ct999p delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the legal basis), or where you object to processing and there is no overriding legitimate interest. Note that certain data must be retained by law and cannot be deleted on request.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that ct999p provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes. ct999p will cease such processing unless compelling legitimate grounds exist that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to restrict processing: In certain circumstances, you may request that ct999p restrict the processing of your personal data, for example while a rectification request is being assessed.

ct999p will not charge a fee for processing data rights requests in ordinary circumstances. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, and we will notify you accordingly.

---

9. Data Security

ct999p implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ct999p Platform.
• AES-256 encryption for personal and financial data stored on ct999p servers.
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular penetration testing and security audits of ct999p's infrastructure.
• PCI-DSS compliant payment processing partners handling all card and banking transactions.
• Incident response procedures to identify, contain, and report any data breaches within required timeframes.

While ct999p takes all reasonable steps to protect your data, no method of internet transmission or electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ct999p will notify affected users in accordance with applicable legal requirements.

---

10. Children's Privacy

The ct999p Platform is strictly for individuals aged 21 years and above. ct999p does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, we will take immediate steps to delete that data and close the associated account. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms.

---

11. International Data Transfers

ct999p's infrastructure and service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, ct999p ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions deemed to provide adequate data protection under applicable frameworks.

---

12. Changes to This Policy

ct999p reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via the email address associated with their ct999p account, or via a prominent notice on the Platform, prior to the changes taking effect. The "Last Updated" date at the top of this policy will be revised upon each amendment. Your continued use of the Platform following notification of changes constitutes acceptance of the updated policy.

---

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ct999p, please contact our Data Privacy team. We aim to respond to all privacy-related enquiries within 30 days of receipt.

You may reach us by email at: [email protected]

Please include your registered account username and a clear description of your request or concern in your message so that we can assist you as efficiently as possible.