CT999 Privacy Policy — How We Protect Your Data

01 Who We Are

CT999 is an online gaming and sports betting platform operating at ct999.plus, offering cricket and sports betting, live casino, a full game lobby with slots, bingo and a VIP programme — all built specifically for players in Pakistan.

This Privacy Policy describes how CT999 ("we", "us", "our", "the Platform") collects, processes, stores and protects the personal data of players ("you", "your") who register accounts or use any service on the platform. This policy covers all CT999 products and services accessed through ct999.plus.

CT999 takes its responsibilities around data privacy seriously. We collect only what is necessary, use it only for the purposes described in this policy, and do not share it with anyone outside the boundaries set out here.

02 Information We Collect

CT999 collects personal information in several ways. The type of data collected depends on how you interact with the platform:

Information you provide directly:

• Full name and date of birth provided during registration
• Mobile number used to create your account
• CNIC number and supporting identity documents provided during verification
• Address details provided for account verification or withdrawal processing
• Messages, queries and complaints submitted to CT999 support

Information collected automatically:

• IP address and approximate geographic location at the time of login or activity
• Device type, operating system and browser used to access CT999
• Session data including login times, pages visited, games played and bets placed
• Transaction history including deposit amounts, withdrawal requests and bonus claims
• Cookies and similar tracking technologies (see Section 5 for full details)

Information from third parties:

• Identity verification results from CNIC verification services
• Transaction confirmations from JazzCash, Easypaisa, Raast and bank transfer processing partners
• Fraud detection flags from payment processing and security partners

03 How We Use Your Data

CT999 uses the personal data collected for the following specific purposes:

CT999 does not use your personal data for purposes beyond those listed above without obtaining your explicit consent first. If we ever need to use your data for a new purpose not covered by this policy, we will update this page and notify you where reasonably practical.

04 Payment Data & Financial Information

Because CT999 processes real-money deposits and withdrawals in PKR, we necessarily handle financial information. Here is how payment data is managed on the platform:

• Deposit and withdrawal transactions are processed through your registered JazzCash wallet, Easypaisa account, Raast-linked bank, bank transfer or other supported mobile wallet.
• CT999 does not store full debit or credit card numbers on its own servers. Card transactions are routed through PCI-DSS compliant payment processors who handle card data under their own security standards.
• Mobile wallet transaction references (such as your JazzCash or Easypaisa transaction ID) are retained for reconciliation, fraud prevention and dispute resolution purposes.
• Your payment account name must match your CT999 registered name. CT999 may use this matching process to verify your identity as part of its standard security checks.
• Transaction history — including deposit amounts, withdrawal amounts and dates — is retained for the period required under financial record-keeping obligations and may be used to resolve any disputes you raise about your account balance.

05 Cookies & Tracking Technologies

CT999 uses cookies and similar tracking technologies on the platform to deliver a better experience and to understand how the platform is being used. Here is a breakdown of the types of cookies we use:

• Essential cookies: These are required for the platform to function. They manage your login session, keep you authenticated while you navigate between pages, and maintain your account state. Without these, you cannot use CT999.
• Functional cookies: These remember your preferences — such as preferred language settings or last-used payment method — so you do not have to re-enter them every session.
• Analytics cookies: CT999 uses anonymised analytics data to understand which games are most popular, how players navigate the lobby and where any usability problems might exist. This data does not identify you personally.
• Security cookies: These help CT999 detect unusual login behaviour, suspected bot activity or account takeover attempts by identifying inconsistencies in session patterns.

CT999 does not use third-party advertising cookies or tracking pixels that share your data with external advertising networks. You can manage cookie settings through your browser, though disabling essential cookies will prevent you from logging in to your CT999 account.

06 Data Sharing & Third Parties

CT999 does not sell or rent your personal data. Data is shared with third parties only in the following limited and controlled circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and bank payment partners receive transaction data necessary to process your deposits and withdrawals.
• Identity verification services: Where CT999 uses a third-party KYC service to verify your CNIC or identity documents, that provider receives only the minimum data required to complete verification.
• Fraud and security partners: CT999 may share anonymised risk signals with fraud detection partners to prevent account takeovers and financial crime. These partners are contractually bound to use the data only for security purposes.
• Game content providers: Some games in the CT999 game lobby are provided by third-party studios. These providers may receive anonymised session data (such as game round results) for game operation purposes. They do not receive your personal identity information.
• Legal and regulatory obligations: CT999 may disclose personal data if required to do so by a valid legal order, court instruction or other binding obligation under applicable law.

All third-party partners that receive any CT999 player data are required to handle it securely, use it only for the stated purpose and not share it further without authorisation. CT999 reviews these partnerships regularly.

07 Data Retention

CT999 retains personal data for as long as is necessary to fulfil the purposes described in this policy. The following general retention guidelines apply:

• Active accounts: Personal data is retained for the lifetime of your account plus a reasonable period after closure to handle any outstanding disputes or withdrawal requests.
• Transaction records: Financial transaction records are retained for a minimum period as required by applicable financial record-keeping obligations, typically several years from the date of the transaction.
• Identity verification documents: CNIC copies and verification records are retained for the period required by applicable identity verification and anti-money laundering obligations.
• Support communications: Messages and support tickets are retained for up to 3 years to assist with ongoing dispute resolution and quality assurance.
• Closed accounts: After an account is closed, anonymised data (with no identifiable details) may be retained indefinitely for statistical analysis and platform improvement purposes only.

When personal data is no longer required under these retention guidelines, CT999 securely deletes or anonymises it so that it can no longer be associated with you.

08 Security Measures

CT999 takes the security of your personal data seriously and applies multiple layers of protection to keep it safe:

• SSL/TLS encryption: All data transmitted between your browser or device and CT999 is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using CT999.
• Secure data storage: Personal data stored on CT999 servers is held in secured, access-controlled environments. Access to player data is restricted to authorised staff who need it to perform their role.
• Login security: CT999 monitors login activity for unusual patterns such as access from unfamiliar locations or multiple failed login attempts, and may temporarily lock accounts to protect them.
• Regular security reviews: CT999 conducts periodic internal reviews of its data handling and security practices to identify and address potential vulnerabilities.
• Staff training: CT999 team members who handle player data are trained on data protection responsibilities and are bound by confidentiality obligations.

While CT999 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security against all possible threats. You also play an important role by keeping your password strong and private, not sharing your account credentials with anyone, and logging out of CT999 when using shared or public devices.

09 Your Privacy Rights

As a CT999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact CT999 support via live chat or email:

• Right of access: You can request a copy of the personal data CT999 holds about you. CT999 will respond within a reasonable timeframe, typically within 30 days.
• Right to correction: If any personal data held by CT999 is inaccurate or outdated — for example your registered mobile number has changed — you can request that it be corrected.
• Right to deletion: You can request the deletion of your personal data, subject to CT999's legal obligations to retain certain records (such as transaction history and identity verification records). Deletion requests for active accounts will be processed as part of the account closure procedure.
• Right to object to marketing: You can object to receiving promotional communications from CT999 at any time. Your account will continue to function normally after opting out of marketing.
• Right to data portability: You can request that CT999 provide your personal data in a structured, commonly used format so you can transfer it if needed.

CT999 will not charge you a fee for exercising any of these rights under normal circumstances. If a request is clearly excessive or repetitive, CT999 may apply a reasonable administrative fee or decline the request, with a clear explanation provided to you.

10 Children's Privacy

CT999 is strictly an adult platform. Players must be at least 18 years of age to register and use any CT999 service. CT999 does not knowingly collect personal data from anyone under 18.

If CT999 discovers that a player is under 18 years of age, the account will be closed immediately, any balance will be handled in accordance with the Terms and Conditions, and all personal data associated with the minor's account will be deleted from CT999 systems as promptly as possible.

If you believe a minor has created an account on CT999, please contact support immediately so the matter can be reviewed and resolved. Parents and guardians are encouraged to use device-level parental control tools to prevent underage access to online gaming platforms. Visit the Responsible Gaming page for additional guidance.

11 Marketing Communications

CT999 may send you promotional messages about bonuses, upcoming PSL or T20 cricket betting events, new game releases, VIP programme updates and special deposit offers via SMS or in-platform notifications, depending on the contact preferences associated with your account.

• Marketing communications are sent only to registered CT999 players who have not opted out.
• You can opt out of marketing messages at any time by contacting CT999 support and requesting removal from marketing communications.
• Opting out of marketing does not affect transactional communications — you will still receive account security alerts, deposit confirmations, withdrawal status updates and support responses.
• CT999 does not share your mobile number or contact details with external marketing companies for their own promotional campaigns.

12 Changes to This Privacy Policy

CT999 may update this Privacy Policy from time to time to reflect changes in how we operate, the services we offer, or applicable legal requirements. When changes are made, the updated policy will be published on this page with a revised "Last updated" date at the top.

For significant changes that materially affect how your data is used, CT999 will make a reasonable effort to notify registered players through in-platform notifications or via the mobile number on your account, where practically possible.

Your continued use of CT999 after any update to this Privacy Policy constitutes your acceptance of the revised version. It is your responsibility to review this page periodically. If you disagree with any update, you may close your account by contacting support.

13 Contact Us About Privacy

If you have any questions, concerns or requests related to this Privacy Policy or how CT999 handles your personal data, please reach out to the support team. CT999 takes privacy queries seriously and will respond promptly.

CT999 aims to respond to all privacy-related queries within 5 working days. For formal data access requests, a response will be provided within 30 days of receipt, in line with standard data subject access request timelines.