Privacy Policy

Introduction

This Privacy Policy ("Policy") describes the data practices of ct999f ("ct999f", "we", "us", "our") in relation to the personal information we collect from users ("you", "your") who visit, register on, or use the ct999f online gaming platform accessible at ct999f.net and all associated domains and services (collectively, the "Platform").

ct999f is committed to protecting the personal information of its users in accordance with applicable data protection principles. This Policy is intended to give you a clear and honest account of what data we collect, why we collect it, how we use and protect it, who we share it with, how long we keep it, and what rights you have in relation to your personal data held by ct999f.

This Policy should be read together with the ct999f Terms & Conditions, which are incorporated herein by reference. By using the Platform, you confirm that you have read and understood this Policy and consent to the data practices described within it. If you do not agree with any part of this Policy, you must not register an account or use ct999f Services.

Data Controller

For the purposes of applicable data protection law, ct999f is the data controller in respect of personal data collected and processed through the Platform. As data controller, ct999f determines the purposes and means of processing personal data held about registered users and visitors to the Platform.

All data protection enquiries, including requests to exercise your data rights, should be directed to ct999f via the support contact: [email protected]. Please include "Privacy" in the subject line of your enquiry to ensure it is routed to the appropriate team promptly.

Data We Collect

ct999f collects personal data through several channels depending on how you interact with the Platform. The categories of personal data we collect include:

ct999f does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless expressly required for responsible gaming intervention purposes, in which case the minimum necessary data is collected with your knowledge.

How We Use Your Data

ct999f uses the personal data described in Section 3 for the following purposes:

• Account creation and management: To create, maintain, and administer your ct999f account, including processing your registration, managing your login credentials, and maintaining your PKR wallet.
• Identity and age verification (KYC): To verify that you are who you say you are and that you meet the 18+ age eligibility requirement to use ct999f Services. See Section 6 for more detail.
• Service delivery: To process bets, settle cricket betting markets, operate live casino games, run slots, and credit and debit your account accordingly.
• Payment processing: To process deposits and withdrawals through JazzCash, Easypaisa, bank transfers, and other supported payment methods, and to verify that payment accounts belong to the registered account holder.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
• Responsible gaming: To monitor gaming activity for indicators of problematic gambling behaviour, to enforce deposit limits, loss limits, and self-exclusion settings, and to communicate with users who may need support.
• Regulatory compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements and any reporting obligations.
• Customer support: To respond to enquiries, resolve disputes, and provide assistance with account issues.
• Platform improvement: To analyse aggregate, anonymised usage data to improve the Platform's features, performance, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and updates where you have consented to receive such communications. You may withdraw this consent at any time via account settings.

Legal Basis for Processing

ct999f processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between ct999f and you, including account management, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML checks, and mandatory record-keeping.
• Legitimate interests: Processing carried out for ct999f's legitimate interests where these are not overridden by your rights — including fraud prevention, security monitoring, and responsible gaming management.
• Consent: Processing based on your explicit consent, primarily in relation to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

KYC & Identity Verification

KYC (Know Your Customer) verification is a mandatory element of the ct999f account system. All registered accounts must complete KYC before withdrawal functionality is activated and before certain deposit threshold levels are reached. The primary purposes of KYC processing at ct999f are:

• Confirming the identity of the account holder to prevent identity fraud and protect the account holder's own funds.
• Confirming that the account holder meets the minimum age requirement of 18 years, in compliance with ct999f's responsible gaming commitments.
• Satisfying anti-money laundering obligations by verifying the identity of persons who transact on the Platform.

KYC documents submitted to ct999f — typically a CNIC (Computerised National Identity Card) or passport — are processed by ct999f's compliance team. Documents are stored securely in encrypted form and are not shared with third parties except as required for verification services or regulatory compliance. Submitted documents are retained for the period specified in Section 9 of this Policy.

Pakistani players will be familiar with the CNIC as the standard identity document. ct999f processes the data contained on your CNIC — including your name, date of birth, CNIC number, and address — solely for the KYC purposes described above. This data is not used for any marketing purpose or shared with commercial third parties.

Cookies & Tracking

ct999f uses cookies and similar tracking technologies on the Platform to enable core site functionality, analyse usage patterns, and improve the user experience. The following types of cookies may be placed on your device when you access ct999f:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations within your ct999f session.
• Analytics cookies: Collect aggregate, anonymised data about how users navigate the Platform — pages visited, session duration, device types. This data is used to identify areas for improvement and is not linked to your personal identity.
• Preference cookies: Store settings that personalise your experience on return visits, such as your preferred payment method display.

You can manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled without preventing core functionality from operating.

Data Sharing & Disclosure

ct999f does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared only in the following limited circumstances:

• KYC and identity verification providers: Third-party services used to validate identity documents and confirm age. These providers process data under strict contractual data processing agreements with ct999f and may not use your data for any purpose other than verification.
• Payment processors: Financial service providers (including JazzCash, Easypaisa, and banking partners) receive transaction data necessary to process deposits and withdrawals. These providers are independently regulated and are subject to their own privacy and data protection obligations.
• Technology and hosting providers: Infrastructure partners who provide server hosting, database management, and security services to ct999f. These providers operate under confidentiality and data processing agreements.
• Regulatory and law enforcement authorities: Where ct999f is under a legal obligation to disclose personal data — including in response to a lawful request from a competent authority or in connection with AML reporting obligations — data will be shared to the extent required by applicable law.
• Fraud prevention and responsible gaming networks: ct999f may share data with shared self-exclusion databases or industry fraud prevention schemes where legally obligated or operationally necessary to protect users and the integrity of the Platform.

In all cases where data is shared with third parties, ct999f takes reasonable steps to ensure those parties maintain appropriate data security standards and process data only for the purposes authorised by ct999f.

Data Retention

ct999f retains personal data for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law. General retention guidelines are as follows:

• Active account data: Retained for the duration of your registered ct999f account and for a period of no less than five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC documents: Retained for the duration of account activity and for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Transaction and gaming records: Retained for a minimum of five (5) years following the date of each transaction or gaming session.
• Customer support records: Retained for a period of three (3) years following resolution of the relevant support interaction.
• Marketing consent records: Retained for as long as you hold a ct999f account plus one (1) year, or until consent is withdrawn, whichever occurs first.
• Technical and log data: Retained for up to twelve (12) months from the date of collection for security and fraud analysis purposes.

After the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

Data Security

ct999f implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Specific measures employed include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ct999f servers.
• Encrypted storage of passwords — your password is never stored in plain text and is inaccessible even to ct999f staff.
• Encrypted storage of KYC documents and sensitive identity data at rest.
• Two-factor authentication available to all account holders to protect login access.
• Login activity monitoring with alerts for suspicious access patterns, including logins from unrecognised locations.
• Restricted internal access to personal data — staff access is role-based and limited to what is necessary for the performance of job functions.
• Regular security review processes and penetration testing of the Platform infrastructure.

Notwithstanding the above, no security system is completely impenetrable. In the event of a data breach that is likely to result in risk to your rights and interests, ct999f will notify affected users in accordance with applicable legal requirements. You are also responsible for maintaining the security of your own account credentials and for reporting any suspected unauthorised access to ct999f support promptly.

Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to personal data that ct999f holds about you:

• Right of access: You may request a copy of the personal data ct999f holds about you. Requests will be fulfilled within a reasonable timeframe and in a commonly used format.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by ct999f. Where factually correct, account profile data can often be updated directly through account settings.
• Right to erasure: In certain circumstances you may request deletion of your personal data. Note that this right is subject to ct999f's legal obligations to retain data — particularly AML and KYC record-keeping obligations — which may override an erasure request.
• Right to restriction of processing: You may in certain circumstances request that ct999f limit its processing of your personal data while a dispute regarding accuracy or lawfulness is resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time through account settings or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of ct999f's legitimate interests. ct999f will cease such processing unless compelling legitimate grounds can be demonstrated that override your interests.

To exercise any of the above rights, please contact ct999f at [email protected] with the subject line "Data Rights Request". We will respond to verified requests within a reasonable period. Identity verification may be required before any request is fulfilled to protect against unauthorised disclosure.

Children's Privacy

ct999f Services are strictly restricted to individuals aged 18 years and older. ct999f does not knowingly collect personal data from persons under the age of 18. If ct999f becomes aware that personal data has been collected from a person under 18, the relevant account will be immediately suspended, all associated data will be securely deleted, and any funds deposited will be returned to the source payment method.

If you believe that a person under 18 has registered an account on ct999f or otherwise provided personal data to the Platform, please notify us immediately at [email protected]. We take the protection of minors extremely seriously and will act promptly on all such notifications.

Changes to This Policy

ct999f reserves the right to update this Privacy Policy at any time. Where material changes are made to how we collect or use personal data, ct999f will provide notice via the registered email address on your account or through a prominent notification on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically to stay informed of how ct999f handles your personal data.

Contact

For any questions, concerns, or requests related to this Privacy Policy or the personal data ct999f holds about you, please contact the ct999f data protection team:

Email: [email protected] (subject: "Privacy")

We aim to acknowledge all privacy-related enquiries within two business days and to resolve them within thirty (30) days, subject to complexity. For requests to exercise data rights, additional time may be required where identity verification is necessary.