CT999 Privacy Policy – How We Protect Your Data in Pakistan

1Introduction

This Privacy Policy explains how CT999 — the online sports betting and casino platform accessible at ct999.online — collects, uses, stores and protects the personal information of its Members and website visitors. It applies to all interactions with the CT999 platform, whether through the main website, mobile-optimised pages or any associated service.

CT999 is committed to handling personal data responsibly and transparently. As a platform serving Pakistan's online betting community, we understand that Members trust us with sensitive financial and personal information. That trust is something CT999 takes very seriously, and this policy sets out clearly how we honour it.

By registering an account on CT999 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions about any section, you are welcome to contact our support team at support@ct999.online before proceeding.

2Personal Data CT999 Collects

CT999 collects the following categories of personal data from Members. We collect only what is genuinely necessary for the purposes described in Section 3 — nothing more.

3How CT999 Uses Your Personal Data

CT999 uses Member data only for the following clearly defined purposes:

• Account Management: To create, maintain and secure your CT999 account, verify your identity and process login requests.
• Payment Processing: To handle PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and bank card channels. Financial data is passed to payment processors solely to complete each transaction.
• Compliance and Verification: To verify your age (18+), confirm your identity through KYC processes and comply with anti-money laundering (AML) obligations that apply to licensed gaming operators.
• Service Delivery: To operate the CT999 sportsbook, casino, crash games and all platform features that you use as a Member.
• Responsible Gaming: To monitor account activity for signs of problem gambling behaviour and to administer deposit limits, loss limits and self-exclusion requests made by Members.
• Customer Support: To respond to queries, resolve disputes and process responsible gaming tool requests submitted to CT999's support team.
• Security and Fraud Prevention: To detect and prevent unauthorised account access, fraudulent transactions, bonus abuse and other prohibited activities listed in the CT999 Terms and Conditions.
• Platform Improvement: Aggregated, anonymised usage data is used internally to understand how Members use CT999 and to improve the user experience. This data cannot be traced back to individual Members.
• Marketing (with consent): To send promotional communications about CT999 offers, bonuses and new features — only to Members who have not opted out of marketing communications.

4Legal Basis for Processing

CT999 processes personal data on the following legal grounds depending on the purpose involved:

• Contractual Necessity: Processing required to create and maintain your CT999 account, process your PKR bets and handle deposits and withdrawals falls under the performance of the contract between you and CT999.
• Legal Obligation: Identity verification, age checks and transaction record-keeping are required by applicable laws and licensing conditions. CT999 is obligated to process this data regardless of consent.
• Legitimate Interests: Security monitoring, fraud detection, platform improvement through anonymised analytics and customer support operations are conducted under CT999's legitimate business interests, provided those interests do not override your rights.
• Consent: Marketing communications and the use of non-essential cookies are based on your consent. You can withdraw consent at any time without affecting your access to CT999's core services.

5Data Sharing — Who Sees Your Information

CT999 does not sell your personal data to third parties. The following limited sharing takes place only where strictly necessary:

• Payment Processors: When you make a deposit or withdrawal, CT999 shares the minimum necessary transaction data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT) or your card issuer. Each processor operates under its own privacy policy and security standards.
• Identity Verification Services: CT999 uses certified third-party KYC services to verify CNIC and passport details submitted during account verification. These providers operate under strict data processing agreements with CT999.
• IT and Infrastructure Providers: CT999's hosting and infrastructure partners process server-side data as part of platform operations. These partners are contractually bound to process data only as instructed by CT999 and to maintain security standards equivalent to CT999's own.
• Regulatory and Legal Authorities: CT999 will disclose data to law enforcement, regulators or courts where required by applicable law, court order or legitimate regulatory request. We will notify affected Members of such disclosures where permitted to do so.

6How CT999 Keeps Your Data Secure

CT999 applies multiple layers of technical and organisational security to protect Member data. These measures are reviewed and updated regularly to address evolving threats:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and CT999's servers — including login credentials, payment data and personal information — is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Password Storage: CT999 never stores passwords in plain text. Passwords are hashed using industry-standard cryptographic functions. Even CT999 staff cannot read a Member's password.
• Multi-Factor Authentication: Account logins are protected by multi-factor authentication options that add a verification step beyond your password.
• Access Controls: Access to Member data within CT999's internal systems is restricted on a need-to-know basis. Staff who do not require access to specific data categories are not granted it.
• Intrusion Detection and Monitoring: CT999's infrastructure is monitored continuously for unusual access patterns, potential breaches and suspicious activity.
• Data Breach Response: In the event of a confirmed data breach affecting Member personal information, CT999 will notify affected Members and relevant authorities within the timeframes required by applicable law.

7How Long CT999 Retains Your Data

CT999 retains personal data for as long as it is necessary for the purposes it was collected and as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your CT999 membership plus a minimum of 5 years after account closure, as required by AML compliance obligations applicable to gaming operators.
• Transaction Records: All PKR deposit, withdrawal and bet records are retained for a minimum of 5 years from the date of the transaction for regulatory compliance.
• Identity Verification Documents: CNIC and passport copies submitted for KYC verification are retained for 5 years after account closure.
• Support Communications: Records of live chat and email correspondence with CT999's support team are retained for 3 years from the date of the last message in each conversation.
• Marketing Preferences: Records of your marketing opt-in and opt-out decisions are retained indefinitely to ensure CT999 honours your preferences even after account closure.
• Technical and Usage Data (anonymised): Anonymised analytics data that cannot be linked to individual Members may be retained indefinitely for platform improvement purposes.

After the applicable retention period expires, CT999 securely deletes or anonymises personal data. Secure deletion means the data is rendered permanently unrecoverable, not simply removed from the active database.

8Cookies & Similar Technologies

CT999 uses cookies and similar local storage technologies to make the platform work properly and to understand how Members interact with it. Here is a clear breakdown of the cookie types used on CT999:

You can manage browser cookies in your device's browser settings. Note that disabling strictly necessary cookies will prevent CT999 from functioning correctly. Functional and performance cookies can be disabled without affecting core betting functionality.

9Your Data Rights as a CT999 Member

As a CT999 Member, you have the following rights regarding the personal data we hold about you. All requests are handled free of charge and within 30 days of receipt:

11Marketing Communications

CT999 may send Members promotional emails and SMS messages about bonuses, new game launches, seasonal promotions and platform updates. These communications are sent only to Members who have not opted out of marketing at the time of sending.

• Every marketing communication from CT999 includes a clearly visible unsubscribe link or instruction.
• Members can update their marketing preferences at any time from the Notifications section of the CT999 account settings page.
• Opting out of marketing communications does not affect your access to CT999's core services. You will continue to receive transactional messages — such as deposit confirmations, withdrawal notifications and important account security alerts — regardless of your marketing preference.
• CT999 does not share email addresses or mobile numbers with third-party marketers for their own promotional use.

12Changes to This Privacy Policy

CT999 reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, legal requirements or platform features. When material changes are made, CT999 will notify active Members via their registered email address or via an on-screen notification upon next login — at least 7 days before the updated policy takes effect.

The most current version of this Privacy Policy is always accessible at ct999.online/privacy-policy. The "Last updated" date at the top of this page reflects when the most recent changes were made. Continued use of CT999's platform after an updated policy's effective date constitutes acceptance of the revised terms.

13Contact CT999 About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or the way CT999 handles your personal data, please get in touch with our team using the details below:

• Email: support@ct999.online — use the subject line "Privacy Policy Query" for fastest routing to the relevant team. Responses are typically provided within 2 business hours via email.
• Live Chat: Available 24/7 at ct999.online. For urgent data-related requests such as suspected unauthorised account access, live chat is the fastest channel.

CT999's support team handles privacy enquiries in both English and Urdu for the convenience of our Pakistani Members. You will not be charged for submitting a data rights request and you do not need to justify why you are making the request to receive assistance.