CT999 Privacy Policy – How We Handle Your Personal Data

1. Overview and Scope

This Privacy Policy explains how CT999 ("we", "us", "CT999") collects, uses, stores, and protects the personal data of players registered on the CT999 platform at ct999.world. It applies to all personal data processed in connection with your CT999 account, regardless of how you access the Platform — whether via mobile browser, desktop browser, or any other access method.

CT999 is committed to handling all personal data responsibly and transparently. This Policy is written to be clear and readable — not buried in legal language that no one actually reads. If you've registered a CT999 account or are considering doing so, this Policy is worth your time.

This Privacy Policy should be read alongside the CT999 Terms and Conditions and the Responsible Gaming Policy. By creating and using a CT999 account, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

CT999 collects the minimum data necessary to operate your account safely, process your transactions, and comply with our legal obligations. The data we collect falls into the following categories:

CT999 does not collect data that is not necessary for the purposes described in this Policy. We do not collect sensitive categories of data such as health information, religious beliefs, or political views.

3. How We Collect Your Data

CT999 collects personal data through the following means:

• Direct registration: When you create your CT999 account, you directly provide your name, contact details, and date of birth.
• Account activity: As you use the CT999 Platform, we automatically record game history, transaction data, session details, and device/technical information.
• KYC verification: When CT999 requests identity verification, you submit documents directly to our verification process.
• Payment transactions: When you deposit or withdraw, your payment provider shares transaction confirmation details with CT999. Full payment credentials are never passed directly to CT999 — they remain with your payment provider.
• Customer support interactions: When you contact CT999 support, the content of those conversations is recorded and stored.
• Cookies and technical tracking: CT999 uses cookies and session tracking technologies to operate the Platform. See Section 8 for full details.

4. Why We Use Your Data

CT999 uses your personal data for the following purposes, each grounded in a clear legal basis:

• Account operation: To create and maintain your CT999 account, verify your identity, and provide you with access to all Platform features. Legal basis: contractual necessity.
• Payment processing: To process deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card networks. Legal basis: contractual necessity.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multiple account creation, and other abuse of the CT999 Platform. Legal basis: legitimate interest and legal obligation.
• Regulatory compliance: To fulfil CT999's obligations under applicable law, including anti-money laundering (AML), know-your-customer (KYC), and record-keeping requirements. Legal basis: legal obligation.
• Responsible gaming: To monitor gaming patterns, apply responsible gaming tools, and identify players who may be showing signs of problem gambling. Legal basis: legitimate interest and legal obligation.
• Customer support: To respond to queries, resolve complaints, and maintain records of support interactions. Legal basis: contractual necessity and legitimate interest.
• Marketing communications: To send you promotional offers, bonuses, and platform updates — only if you have opted in to receive these. Legal basis: consent (freely withdrawable at any time).
• Platform improvement: To analyse aggregated, anonymised usage patterns to improve the CT999 Platform experience. Individual player data is not used for this purpose in identifiable form. Legal basis: legitimate interest.

5. Who We Share Your Data With

CT999 does not sell your personal data. We do not share your data with third parties for their own commercial or marketing purposes. Data sharing is limited to the following categories of recipients, each bound by data protection obligations:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank networks receive only the data necessary to process your specific transaction. They do not receive your full CT999 game history or profile.
• KYC and identity verification providers: CT999 uses professional KYC service providers to verify identity documents. These providers process your verification data on CT999's behalf under strict data processing agreements.
• Fraud prevention and AML services: CT999 uses third-party fraud screening tools that may receive technical data (IP address, device fingerprint) and transaction metadata to assess risk. No full personal profiles are shared.
• Cloud infrastructure providers: CT999's Platform is hosted on secure cloud infrastructure. Hosting providers have access to server data but operate under strict contractual data protection obligations.
• Regulatory and law enforcement authorities: CT999 will disclose personal data to relevant authorities where required by applicable law — for example, in response to a court order, or where CT999 is obligated to report suspicious transactions. CT999 will not notify you of such disclosures where legally prohibited from doing so.
• Professional advisers: CT999's legal, audit, and compliance advisers may access limited personal data where necessary for professional services, under confidentiality obligations.

6. How Long We Keep Your Data

CT999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following retention periods apply as a guide:

After the applicable retention period expires, CT999 will securely delete or anonymise your personal data such that it can no longer be linked back to you as an individual. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

7. How CT999 Secures Your Data

CT999 takes data security seriously. The following technical and organisational measures are in place to protect your personal data:

• Encryption in transit: All data transmitted between your device and CT999 servers is encrypted using TLS (Transport Layer Security). This applies to all account activity, transactions, and support communications.
• Encryption at rest: Personal data and financial records stored on CT999 servers are encrypted at rest. Sensitive fields including identity document data and transaction references are encrypted with additional application-level encryption.
• Payment data isolation: Full card numbers, bank account numbers, and wallet credentials are never stored on CT999 servers. Payment transactions are tokenised through the relevant payment processor — CT999 only stores a masked reference (e.g., last 4 digits, wallet identifier).
• Access controls: Access to personal data within CT999's systems is strictly limited on a need-to-know basis. Staff access is logged, audited, and subject to regular review. Access credentials use multi-factor authentication.
• Security monitoring: CT999 operates continuous security monitoring for unusual access patterns, potential intrusions, and data anomalies. Incident response procedures are in place for any detected security events.
• Regular security reviews: CT999 conducts periodic security reviews of its systems and processes, including review of third-party provider security practices.

Despite these measures, no online platform can guarantee 100% security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, CT999 will notify affected players and relevant authorities as quickly as practicable.

8. Cookies and Tracking Technologies

CT999 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve the experience. A cookie is a small text file stored in your browser by a website you visit. CT999 uses the following types of cookies:

Essential cookies cannot be disabled — without them, the CT999 Platform cannot function. Functional and analytics cookies can be managed through your browser settings. Note that disabling functional cookies may affect your CT999 experience (for example, your session preferences may not be remembered).

CT999 does not use third-party advertising cookies or cross-site tracking technologies that share your data with advertising networks.

9. Payment Data and PKR Transactions

All financial transactions on CT999 are conducted in Pakistani Rupees (PKR). CT999 supports Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer via IBFT, and Visa/Mastercard. Here is how payment data is specifically handled:

• When you make an Easypaisa or JazzCash deposit, your mobile wallet credentials are entered directly into the payment provider's secure interface — not into CT999 systems directly. CT999 receives only a transaction confirmation reference and the amount in PKR.
• For IBFT bank transfers, CT999 may receive your bank account number as part of the transfer record. This is retained only for transaction reconciliation and dispute resolution purposes.
• For Visa/Mastercard transactions, card data is processed through a PCI-DSS compliant payment gateway. CT999 never sees your full card number — only a masked reference (last 4 digits and card type) is stored for your transaction history.
• Withdrawal payment details are stored in your CT999 account profile to facilitate repeat withdrawals to the same method. You can update or remove these details from your account settings at any time.

10. KYC Verification and Identity Documents

CT999 is required by its operational policies to conduct Know Your Customer (KYC) verification for player accounts, particularly before processing withdrawals above certain thresholds. KYC verification exists to prevent fraud, money laundering, and underage gambling — it protects you as much as it protects CT999.

Documents you submit for KYC verification — such as your CNIC, passport, or proof of address — are handled as follows:

• Documents are transmitted to CT999 via secure encrypted upload only. Do not send KYC documents by unencrypted email or messaging apps.
• Documents are reviewed by CT999's verification team and, where applicable, processed through CT999's KYC verification provider. The provider operates under a strict data processing agreement with CT999.
• Your original document images are retained for the applicable regulatory period (see Section 6) then securely deleted. They are not shared with any party outside of CT999 and its KYC provider except where legally required.
• CT999 does not use your identity documents for any purpose other than identity verification and regulatory compliance.

If your KYC verification is declined, CT999 will inform you of the reason (where permitted) and give you the opportunity to resubmit with corrected documentation. Continued inability to verify your identity may result in withdrawal restrictions in line with the CT999 Terms and Conditions.

11. Your Rights Over Your Personal Data

You have the following rights in relation to the personal data that CT999 holds about you. To exercise any of these rights, contact CT999 at support@ct999.world with your account details and a description of your request. CT999 will respond within 30 days.

CT999 will not charge a fee for handling data rights requests in standard circumstances. If a request is manifestly unfounded or excessive, CT999 may charge a reasonable administrative fee and will explain its reasoning.

12. Minors and Data Protection

CT999 does not knowingly collect personal data from any person under the age of 18. The CT999 Platform is strictly for adults only. If CT999 discovers that it has collected data from a minor — whether through a falsified registration or any other means — it will delete that data immediately and close the associated account.

If you believe a person under 18 has accessed or registered on the CT999 Platform, please notify CT999 immediately at support@ct999.world. CT999 takes all such reports seriously and will investigate and act promptly.

Parents and guardians who are concerned about underage access to online gambling platforms should use parental control software and open conversations with young people about the risks of gambling. CT999 supports all responsible measures to prevent underage gambling.

13. Changes to This Privacy Policy

CT999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or new privacy best practices. When material changes are made, CT999 will notify registered players via the email address on their account at least 7 days before the updated Policy takes effect.

The effective date of the current version of this Policy is always shown at the top of this page. We encourage you to review this Policy periodically. Continued use of the CT999 Platform after the effective date of any updated Policy constitutes your acceptance of the updated terms.

Non-material changes — such as typographical corrections or clarifications that do not reduce your rights — may be made without prior notice.

14. Contact CT999 About Your Privacy

For any question, concern, or request relating to your personal data and this Privacy Policy, please contact the CT999 privacy team:

• Email: support@ct999.world (mark your subject line "Privacy Request")
• Live Chat: Available 24/7 from within your logged-in CT999 account

CT999 aims to acknowledge privacy requests within 48 hours and to resolve them fully within 30 days. Complex requests may require additional time, in which case CT999 will inform you of the extended timeline and the reason for it.

If you are not satisfied with CT999's response to a privacy request or complaint, you have the right to escalate your concern through the formal dispute process described in the CT999 Terms and Conditions, or to seek guidance from relevant data protection authorities in your jurisdiction.