ct999f Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") sets out the basis on which ct999f ("ct999f", "we", "us", "our") processes personal data collected from users of the ct999f online casino and sports betting platform accessible at ct999f.app (the "Platform"). This Policy applies to all visitors, registered account holders, and any other individuals whose personal data ct999f processes in connection with the Platform.

ct999f is committed to handling personal data responsibly and in accordance with applicable data protection law. Pakistani users are advised that Pakistan's Prevention of Electronic Crimes Act (PECA) and applicable data protection frameworks may impose additional local obligations. ct999f is committed to upholding the privacy rights of all players, including those based in Pakistan.

By registering for a ct999f account or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of this Policy, ct999f is the data controller responsible for personal data collected through the Platform. ct999f operates under an international online gaming licence. For data protection enquiries, you may contact ct999f via the support team through live chat at ct999f.app or by email at the address listed in the footer of this page.

3. Personal Data We Collect

3.1 Registration Data. When you register a ct999f account, we collect your full name, date of birth, email address, Pakistani mobile phone number (used for account authentication and two-factor verification), and a chosen username. This data is required to create and maintain your account.

3.2 Identity Verification (KYC) Data. To comply with our anti-money laundering and Know Your Customer obligations, ct999f collects copies of government-issued identity documents (CNIC, passport, or national driving licence), proof of address where required, and confirmation of the payment method used. This data is processed solely for the purpose of identity verification and fraud prevention.

3.3 Financial Data. ct999f collects details of deposit and withdrawal transactions including payment method identifiers (JazzCash wallet numbers, Easypaisa wallet numbers, bank account details, card numbers masked in accordance with PCI DSS standards), transaction amounts in PKR, timestamps, and transaction reference numbers. Full unmasked payment card numbers are not stored by ct999f.

3.4 Gameplay and Activity Data. We collect records of your betting and gaming activity on the Platform, including bets placed, games played, stakes, wins, losses, session durations, and responsible gaming tool settings. This data is used for account management, regulatory reporting, responsible gaming monitoring, and fraud prevention.

3.5 Technical and Device Data. ct999f automatically collects IP address, device type, operating system, browser type and version, screen resolution, and approximate geographic location derived from IP address. This data is used for security monitoring, fraud detection, and platform optimisation.

3.6 Communications Data. We retain records of your communications with the ct999f support team, including live chat transcripts and email correspondence, for quality assurance and dispute resolution purposes.

4. How We Collect Your Data

ct999f collects personal data through the following channels:

• Directly from you — during registration, KYC submission, deposit/withdrawal requests, support interactions, and when you update your account profile
• Automatically — through cookies, server logs, and analytics tools when you access and use the Platform
• From third-party verification providers — where identity verification is supported by licensed third-party KYC service providers
• From payment processors — transaction confirmation and status data from JazzCash, Easypaisa, bank payment gateways, and card networks

5. Purposes and Legal Bases for Processing

ct999f processes personal data for the following purposes and on the following legal bases:

• Account management and service delivery (Legal basis: performance of contract) — to create and maintain your ct999f account, process deposits and withdrawals, provide access to betting and gaming products, and manage your wallet balance
• Identity verification and KYC compliance (Legal basis: legal obligation) — to comply with anti-money laundering, counter-terrorist financing, and licensing requirements
• Fraud prevention and platform security (Legal basis: legitimate interest) — to detect, investigate, and prevent fraudulent activity, unauthorised account access, and prohibited conduct as defined in the ct999f Terms and Conditions
• Responsible gaming monitoring (Legal basis: legal obligation and legitimate interest) — to monitor player activity for indicators of problem gambling behaviour and to administer responsible gaming tools including self-exclusion
• Customer support (Legal basis: performance of contract) — to respond to enquiries, resolve disputes, and provide assistance
• Platform analytics and improvement (Legal basis: legitimate interest) — to understand how the Platform is used and to improve its functionality, performance, and user experience
• Marketing communications (Legal basis: consent) — to send promotional offers and updates to players who have opted in to marketing communications. Consent may be withdrawn at any time
• Legal and regulatory compliance (Legal basis: legal obligation) — to comply with applicable law, respond to lawful requests from regulatory authorities, and maintain records as required by ct999f's gaming licence

6. Sharing of Personal Data

6.1 Payment Processors. ct999f shares necessary transaction data with licensed payment service providers (including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard network processors, and USDT blockchain processors) solely for the purpose of processing deposits and withdrawals.

6.2 KYC and Identity Verification Providers. Where third-party KYC services are used, ct999f shares identity documents and personal data with those providers solely for the purpose of identity verification. All such providers are bound by data processing agreements requiring them to maintain confidentiality and data security.

6.3 Regulatory Authorities. ct999f may be required to share account and transaction data with its licensing authority, law enforcement agencies, and financial intelligence units where legally compelled to do so. ct999f will not disclose personal data to authorities beyond what is required by applicable law.

6.4 No Sale of Personal Data. ct999f does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. Data sharing is limited to the categories described above.

7. International Data Transfers

ct999f's platform infrastructure and data storage may involve transfers of personal data to servers or service providers located outside Pakistan. Where such transfers occur, ct999f ensures that appropriate data transfer safeguards are in place, including contractual data processing agreements with receiving parties requiring data protection standards equivalent to those applied by ct999f. By using the Platform, you acknowledge that your data may be transferred internationally in accordance with this Policy.

8. Data Security

ct999f applies industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS encryption for all data in transit between your device and the ct999f Platform
• Encrypted storage for sensitive personal data and KYC documents
• Role-based access controls limiting internal data access to authorised personnel only
• Regular security audits and penetration testing
• Multi-factor authentication requirements for internal systems accessing player data

No data security system is completely impenetrable. In the event of a data breach that poses a risk to your rights and freedoms, ct999f will notify affected users and relevant authorities in accordance with applicable law.

9. Data Retention

ct999f retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: minimum 5 years following account closure, as required by anti-money laundering regulations
• Transaction records: minimum 5 years following the date of the transaction
• Support communications: 2 years following resolution of the relevant enquiry or dispute
• Analytics data: retained in anonymised or aggregated form only; individually identifiable analytics data is deleted after 12 months

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with ct999f's data destruction procedures.

10. Cookies and Tracking Technologies

ct999f uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that maintain your logged-in state. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings and responsible gaming tool configurations. These can be disabled but will affect platform functionality.
• Analytics Cookies: Used to collect anonymous, aggregated information about how the Platform is used. No personally identifiable information is included in analytics data shared with analytics providers. These can be disabled via your browser settings.

ct999f does not use advertising tracking cookies, cross-site tracking pixels, or any cookie-based technology designed to build advertising profiles of individual users.

11. Your Data Subject Rights

Subject to applicable law and regulatory retention obligations, you have the following rights in relation to your personal data held by ct999f:

• Right of Access: You may request a copy of the personal data ct999f holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For KYC-related data, corrections require resubmission of updated documentation.
• Right to Erasure: You may request deletion of your personal data where ct999f no longer has a legal basis for retaining it. This right is subject to mandatory minimum retention periods under AML regulations.
• Right to Data Portability: You may request a machine-readable export of the personal data you provided to ct999f.
• Right to Restriction: You may request that ct999f restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Object: You may object to processing of your personal data based on legitimate interest, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the ct999f support team via live chat at ct999f.app. ct999f will respond to valid requests within 30 days.

12. Children and Minors

The ct999f Platform is strictly for adults aged 18 and above. ct999f does not knowingly collect personal data from individuals under the age of 18. If ct999f becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be closed. Parents or guardians who believe a minor may have registered on ct999f should contact the support team immediately via live chat.

13. Marketing Communications

ct999f may send promotional offers, bonus announcements, and platform updates to players who have expressly opted in to marketing communications during registration or through Account Settings. Marketing messages are sent via email and/or SMS to the contact details registered on your account. You may unsubscribe from marketing communications at any time by: (i) clicking the unsubscribe link in any marketing email; (ii) replying STOP to any marketing SMS; or (iii) updating your communication preferences in Account Settings. Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.

14. Changes to This Privacy Policy

ct999f reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email or an in-platform notification prior to the effective date of the change. The "Last updated" date at the top of this Policy will be revised accordingly. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.

15. Contact and Complaints

For questions about this Privacy Policy or to exercise your data subject rights, contact ct999f via 24/7 live chat at ct999f.app or by email at the address listed in the footer. ct999f aims to resolve all data privacy enquiries within 30 days of receipt.

If you believe ct999f has not handled your personal data in accordance with this Policy or applicable law, you have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction applicable to ct999f's gaming licence.