ct999f Privacy Policy

01 Introduction & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by ct999f in connection with the ct999f platform available at ct999f.org. It covers all interactions you have with ct999f — from the moment you first visit the website through to account registration, gameplay, deposit and withdrawal transactions, customer support communications, and beyond.

ct999f is committed to handling your personal data with transparency, care, and strict adherence to applicable data protection standards. This policy is written in plain English so that every player across Pakistan — whether in Karachi, Lahore, Islamabad, Faisalabad, or beyond — can clearly understand how their information is handled.

This Privacy Policy should be read alongside the ct999f Terms & Conditions and Responsible Gaming policy, both of which incorporate and cross-reference data protection matters relevant to those contexts.

02 Data We Collect

ct999f collects personal data through several channels. The specific data collected depends on how you interact with the platform.

2.1 Registration Data

When you create a ct999f account, we collect the following information:

• Full legal name
• Date of birth (used to verify that you are 21 or older)
• Registered mobile number (used for account security and JazzCash/EasyPaisa payment verification)
• Email address
• City and province of residence within Pakistan
• Username and encrypted password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, ct999f may request:

• A copy of your valid Pakistani CNIC (Computerised National Identity Card)
• A recent utility bill or other proof of address
• Confirmation of the payment method registered to your account (e.g. a screenshot of your JazzCash or EasyPaisa account showing your registered mobile number)
• In some cases, a selfie or liveness check for facial comparison against your CNIC photograph

2.3 Financial Transaction Data

ct999f records all deposit and withdrawal transactions, including amounts (in PKR), timestamps, payment method used (JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, or GrabPay), and transaction reference numbers. We do not store full bank account credentials or mobile wallet PINs.

2.4 Gameplay & Betting Data

We record all bets placed, games played, game session durations, wins and losses, bonus activity, and responsible gaming tool usage. This data is used for account management, dispute resolution, bonus administration, and regulatory compliance.

2.5 Technical & Device Data

When you access ct999f, we automatically collect certain technical data including:

• IP address
• Device type, operating system, and browser version
• Session timestamps and page navigation data
• Geolocation data (country/region level only, derived from IP)

2.6 Communications Data

If you contact ct999f support via Live Chat, Messenger, Viber, or email, we retain records of those communications for quality assurance, dispute resolution, and training purposes.

2.7 Summary Table

03 How We Use Your Data

ct999f uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your ct999f player account, including password recovery and security alert notifications.
• Age & Identity Verification: Confirming that you meet the 21+ age requirement and that your identity matches the details provided during registration, in compliance with anti-fraud and responsible gaming obligations.
• Payment Processing: Facilitating PKR deposits and withdrawals via your chosen payment method, whether JazzCash, EasyPaisa, Raast, or a linked bank account.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, multiple account abuse, money laundering, and unauthorised access attempts.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, administering deposit limits and self-exclusion tools, and proactively contacting players who may need support.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance in English and Urdu.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the ct999f platform, fix bugs, and enhance the player experience.
• Legal & Regulatory Compliance: Meeting obligations imposed by applicable law, including anti-money laundering (AML) requirements and any regulatory reporting obligations.
• Promotional Communications: Where you have provided explicit consent, sending you information about ct999f promotions, bonuses, and new game releases. You may withdraw this consent at any time.

04 Legal Basis for Processing

ct999f processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform our obligations under the ct999f Terms & Conditions — for example, creating your account, processing your deposits, and paying out your withdrawals.
• Legal Obligation: Processing is required to comply with applicable laws — for example, retaining KYC documentation and transaction records for anti-money laundering compliance.
• Legitimate Interests: Processing is in the legitimate interests of ct999f — for example, fraud detection, platform security, and improving the player experience — provided that these interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — for example, for sending promotional communications — you have the right to withdraw that consent at any time by contacting ct999f support or updating your account preferences.

05 Data Sharing & Third Parties

ct999f does not sell, rent, or trade your personal data. We share data with third parties only in the following limited and defined circumstances:

5.1 Payment Processors

To process your PKR deposits and withdrawals, ct999f shares the minimum necessary financial and identity data with payment processors including JazzCash, EasyPaisa, Raast, 1LINK, and partnered banking institutions (HBL, UBL, Meezan Bank). These processors are contractually bound to protect your data and use it solely for payment processing purposes.

5.2 KYC & Identity Verification Providers

ct999f uses third-party KYC providers to verify your CNIC and confirm your age. These providers operate under strict data processing agreements and are not permitted to use your documents for any purpose beyond the specific verification task.

5.3 Game Software Providers

Some ct999f games are provided by third-party software studios. These providers may receive anonymised or pseudonymised session data for game performance and fairness auditing purposes. They do not receive your personal registration or payment information.

5.4 Legal & Regulatory Authorities

ct999f may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid legal process, or to protect the rights and safety of ct999f, its players, or the public.

06 Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. ct999f uses cookies and similar technologies to keep the platform functioning correctly, to keep you logged in securely, and to understand how players navigate the site so we can improve it.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Performance Cookies: Collect anonymised data about how players use ct999f — for example, which pages are most visited and where errors occur. This data is used solely to improve platform performance.
• Preference Cookies: Remember your settings such as language preference and responsible gaming limits so you do not have to re-enter them on every visit.

6.3 What We Do Not Use

ct999f does not use third-party advertising cookies, cross-site tracking pixels, or any tracking technology that shares your browsing behaviour with advertisers or data brokers.

6.4 Managing Cookies

You can manage or disable non-essential cookies via your browser settings. Please note that disabling essential cookies will prevent you from logging in to your ct999f account and using most platform features. Instructions for managing cookies in common browsers are available through your browser's own help documentation.

07 Data Security

ct999f employs a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data in transit between your device and ct999f servers is encrypted using industry-standard SSL/TLS protocols.
• Data at Rest Encryption: Sensitive stored data — including CNIC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Password Security: Player passwords are stored only in irreversibly hashed form using a modern, salted hashing algorithm. ct999f staff cannot see your plaintext password at any time.
• Access Controls: Access to personal data within ct999f is strictly limited on a need-to-know basis. Staff access is logged and audited regularly.
• Fraud Detection Systems: Automated systems monitor for suspicious login attempts, unusual transaction patterns, and other indicators of account compromise — protecting both ct999f and its players.
• Regular Security Audits: ct999f conducts regular internal and third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

08 Data Retention

ct999f retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Personal data associated with an active ct999f account is retained for the lifetime of the account plus a minimum post-closure period required for legal and regulatory compliance.
• KYC & Financial Records: Identity verification documents and financial transaction records are retained for the period required by applicable anti-money laundering regulations, which is typically a minimum of five years from the date of the relevant transaction or account closure.
• Support Communications: Records of customer support interactions are retained for a period sufficient for dispute resolution purposes — typically two years from the date of the interaction.
• Technical & Log Data: Server logs and technical access data are retained for a shorter period, typically 90 days, unless retained for longer as part of an active security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual player.

09 Your Rights

As a ct999f player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the ct999f support team at the details provided in Section 13.

• Right of Access: You may request a copy of the personal data that ct999f holds about you. We will provide this within a reasonable timeframe and at no charge for reasonable requests.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to overriding legal retention obligations — for example, we cannot delete KYC or financial records that we are legally required to retain.
• Right to Restriction: You may request that ct999f restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of ct999f's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

10 Children & Minors

If you are a parent or guardian and you believe that a minor in your care has registered a ct999f account or provided personal data to ct999f, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.

ct999f uses a combination of registration-level age declarations, document-based KYC verification, and ongoing behavioural monitoring to enforce our 21+ age restriction. We take this obligation seriously and invest continuously in improving the robustness of our age verification processes.

11 International Data Transfers

ct999f's primary player base is located in Pakistan, and we aim to process and store data within the region wherever possible. However, some of the third-party service providers we use — including certain KYC verification providers and game software studios — may process data in other countries.

Where personal data is transferred outside Pakistan, ct999f ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Contractual clauses in data processing agreements with third-party providers that impose equivalent data protection obligations.
• Transferring data only to providers located in jurisdictions with adequately recognised data protection frameworks.
• Applying additional technical safeguards such as end-to-end encryption for data transfers involving sensitive personal information.

If you would like more information about the specific safeguards in place for any particular international transfer, please contact the ct999f support team.

12 Policy Updates

ct999f reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Privacy Policy, we will notify registered players via email and display a prominent notice on the ct999f website for a minimum of 30 days prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how ct999f protects your personal data. Your continued use of the ct999f platform after any update constitutes your acceptance of the revised Privacy Policy.

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please contact the ct999f data protection team using the details below.

Email: [email protected] (plain text — not a clickable link)

Support Hours: 24 hours a day, 7 days a week

Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 days.

If you are not satisfied with ct999f's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. ct999f will cooperate fully with any such investigation.