This Privacy Policy explains how ct999 Gaming Operations Ltd. ("ct999", "we", "us") collects, uses, stores, and shares personal information that you provide when registering an account, accessing our gaming services, making deposits or withdrawals, or interacting with us through any channel. Your privacy matters deeply to us — this document is written to be as clear and direct as possible, not buried in legal jargon that discourages reading.
Before reading the full policy below, these six principles summarise how ct999 approaches your personal information. They reflect our genuine commitments, not just regulatory language.
ct999 collects personal data only for specific, clearly defined purposes — account management, payment processing, identity verification, regulatory compliance, and responsible gaming enforcement. We do not collect data speculatively or share it with unrelated third parties for commercial gain.
All personal data held by ct999 is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data within the ct999 organisation is granted on a strict need-to-know basis and all staff with data access undergo background screening.
You have the right to request access to your personal data, correct inaccuracies, request deletion where legally permissible, object to certain processing, and request restriction of processing. ct999 will respond to all legitimate data subject requests within 30 calendar days.
ct999 collects the minimum personal information necessary to deliver the service, fulfil legal obligations, and operate responsibly. We do not ask for information we do not need and we do not retain data longer than legally or operationally required.
This Privacy Policy is written in plain English to ensure that Pakistani members can understand exactly what happens to their data. We will notify members of any material change to this Policy before it takes effect, giving you the opportunity to review and respond.
Where ct999 transfers personal data to service providers outside Pakistan — such as KYC verification providers and payment processors — we apply contractual safeguards equivalent to those required under internationally recognised data protection standards.
ct999 Gaming Operations Ltd. is the data controller responsible for the personal information you provide in connection with the ct999 platform accessible at ct999.vu. As data controller, ct999 determines the purposes and means by which your personal data is processed.
For all data protection matters — including subject access requests, correction requests, deletion requests, and complaints — please contact us at:
Data Protection Contact
ct999 Gaming Operations Ltd.
Email: [email protected] — this address is displayed as plain text and is not a clickable link.
Response commitment: Within 30 calendar days of receiving your request.
This Privacy Policy applies to all personal data processed by ct999 in connection with the ct999 platform, including the website, mobile interface, sportsbook, casino, slot games, instant games, and all customer support channels.
ct999 collects the following categories of personal data, depending on your interaction with the platform:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID / CNIC number (where required for KYC) | Registration / KYC verification |
| Contact Data | Pakistani mobile number, email address (if provided), city / province of residence | Registration / account updates |
| Financial Data | JazzCash / EasyPaisa number, bank account identifiers for HBL / UBL / Meezan Bank, transaction history, deposit and withdrawal amounts | Payment processing |
| Technical Data | IP address, device type, operating system, browser type, session tokens, login timestamps | Automatic — platform access |
| Gaming Data | Bet history, game sessions, wager amounts, bonus activity, wins and losses | Platform activity |
| Communications Data | Support chat transcripts, emails, complaint records, responsible gaming tool activations | Customer support interactions |
| Verification Data | Document images (ID card, proof of address), selfie images where required | Enhanced KYC / large withdrawal requests |
ct999 does not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or political opinions. Where gaming behaviour data is used for responsible gaming purposes, it is processed under separate safeguards described in Section 5.
The majority of personal data ct999 holds is provided directly by you during the registration process, when you complete KYC verification, when you initiate a deposit or withdrawal, when you contact customer support, or when you voluntarily provide information through your account settings.
Technical and gaming data is collected automatically when you access the ct999 platform. This includes your IP address, device identifiers, browser characteristics, session duration, pages viewed, games played, and bet placement data. This data is essential for the secure operation of the platform, fraud prevention, and the delivery of personalised game recommendations.
ct999 may receive personal data about you from third-party service providers in the following circumstances:
ct999 processes your personal data on one or more of the following legal bases:
You may request information about the specific legal basis ct999 relies on for any particular processing activity by contacting [email protected]. We will provide this information in writing within 30 days.
ct999 uses your identity and contact data to create and maintain your member account, authenticate your login sessions, process your account settings preferences, and communicate with you regarding your account status, verification requirements, and support requests.
Financial data is used to process deposits from your preferred Pakistani payment method — JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank — and to process withdrawal requests to your registered payment instruments. ct999 retains transaction records for the periods specified in Section 8 to comply with financial record-keeping obligations.
ct999 is required by its gaming licence conditions and applicable financial crime law to monitor transactions, verify member identities, and report suspicious activity to relevant authorities. Personal and financial data is processed for these purposes on the legal basis of legal obligation. ct999 cannot waive these obligations regardless of individual member preferences.
Gaming behaviour data — including bet frequency, session duration, deposit patterns, and loss trajectories — is analysed to identify members who may be at risk of developing gambling-related harm. Where ct999's responsible gaming systems flag a member as potentially at risk, we may make proactive contact, apply account restrictions, or activate cooling-off periods. This processing is conducted on the basis of legitimate interests and our licence obligations.
Technical data, identity data, and financial data are used to detect and prevent fraudulent activity — including multi-accounting, identity theft, payment fraud, bonus abuse, and unauthorised account access. ct999 employs automated fraud detection systems that may result in temporary account restrictions pending manual review.
Aggregated and anonymised gaming and technical data may be used to analyse platform performance, identify popular game categories, improve the user experience, and inform decisions about new product offerings. This analysis does not involve any processing that produces legal or significant effects in relation to individual members.
ct999 does not sell personal data to third parties for commercial marketing purposes. We do not share your gaming history, financial details, or contact information with advertisers, data brokers, or unrelated commercial entities.
ct999 shares personal data with the following categories of third parties, strictly on a need-to-know basis and under contractual data protection obligations:
Third-party service providers engaged by ct999 to support platform operations — including KYC identity verification platforms, payment gateway processors, cloud infrastructure providers, fraud detection services, and customer support software vendors — may have access to the personal data necessary to deliver their contracted services. All service providers are bound by data processing agreements that prohibit the use of ct999 member data for any purpose other than the specified contracted service.
Third-party game developers and live casino content providers whose games are accessible through the ct999 platform may receive anonymised session identifiers and bet data necessary to operate the game session. Game providers do not receive your personal identity information, contact details, or financial data unless specifically required for the resolution of a game dispute.
ct999 will disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, and courts where required to do so by law, regulatory instruction, or valid court order. ct999 will notify affected members of such disclosures where legally permitted to do so.
In the event that ct999 undergoes a merger, acquisition, restructuring, or sale of all or a material part of its business, personal data held by ct999 may be transferred to the acquiring entity as part of that transaction. Affected members will be notified of any such transfer and the privacy terms that will apply following completion.
ct999 uses cookies and similar tracking technologies on the ct999 platform for the following purposes:
On your first visit to the ct999 platform, a cookie consent notice will be displayed. You may manage your cookie preferences through your browser settings or the ct999 cookie preference centre. Disabling non-essential cookies will not prevent you from using the core ct999 platform, though some personalisation features may be unavailable.
Some third-party services embedded in the ct999 platform — including game content providers and analytics tools — may set their own cookies subject to their own privacy policies. ct999 does not control these third-party cookies and recommends reviewing the privacy policies of relevant third-party providers.
ct999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, and resolve any disputes or enforce any agreements. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 7 years post-closure | AML / gaming licence obligations |
| Financial transaction records | 7 years from transaction date | Financial crime legislation |
| KYC documents | 5 years post-account closure | Regulatory requirement |
| Gaming / bet history | 5 years from session date | Dispute resolution / regulation |
| Support communications | 3 years from last interaction | Legitimate interests |
| Marketing consent records | Until withdrawal + 3 years | Legal obligation (consent records) |
| Technical / log data | 12 months | Security / fraud prevention |
At the expiry of the applicable retention period, ct999 will either securely delete your personal data or anonymise it such that it can no longer be attributed to you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.
As a globally operated online gaming platform, ct999 may transfer personal data to service providers and infrastructure systems located outside Pakistan. Where such transfers occur, ct999 ensures that appropriate safeguards are in place to protect your personal data, including:
You may request details of the specific international transfer mechanisms that apply to your personal data by contacting us at the address in Section 1. We will provide this information within 30 days of your request.
ct999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, destruction, or alteration. These measures include:
Despite these measures, no online system is completely immune to security risk. If you suspect that your ct999 account has been accessed without your authorisation, please contact ct999 support immediately.
Subject to applicable law and any overriding legal obligations on ct999 (such as AML retention requirements), you have the following rights in relation to your personal data:
You may request a copy of the personal data that ct999 holds about you. ct999 will provide this information free of charge in a commonly used electronic format within 30 days of receiving your verified request.
If any personal data ct999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data directly through your ct999 account settings; for data that requires manual correction, please contact our support team.
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that ct999 may be required to retain certain data to comply with legal obligations — for example, AML regulations require us to retain transaction records for specified periods regardless of account closure.
You may request that ct999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection you have raised is being resolved.
Where ct999 processes your data on the basis of legitimate interests, you have the right to object to that processing. ct999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
You have the right to withdraw consent to receive marketing communications from ct999 at any time. You may do this through your account notification settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of marketing communications sent before the withdrawal.
To exercise any of the rights listed in this section, please contact ct999 at [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.
ct999 is strictly an adult platform. No person under the age of 21 may register an account, use the ct999 platform, or provide personal data to ct999. If ct999 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all associated data will be deleted (subject to any legal obligations to retain evidence of the breach), and the matter may be reported to relevant authorities.
ct999 employs age verification measures at registration to prevent under-21 access. If you are a parent or guardian who believes that a person under 21 in your care has created a ct999 account, please contact us immediately at [email protected] and we will act without delay. For tools to protect minors from accessing gambling websites, please visit our Responsible Gaming page where parental control information is provided.
With your consent, ct999 may send you promotional communications about new games, bonuses, PSL cricket betting promotions, special offers, and platform updates via SMS to your registered Pakistani mobile number and via email where an email address is registered. ct999 will not send marketing to members who have opted out or who have active self-exclusions.
You may withdraw your consent to receive marketing communications at any time by: updating your communication preferences within the ct999 account settings; replying STOP to any SMS marketing message; or contacting ct999 support and requesting removal from all marketing lists. Opt-out requests will be processed within 5 business days.
Even if you opt out of marketing communications, ct999 will continue to send you service-related communications that are necessary for account management — including deposit confirmations, withdrawal notifications, security alerts, verification requests, and updates to this Privacy Policy or the ct999 Terms and Conditions.
ct999 reviews this Privacy Policy regularly and reserves the right to update or amend it at any time. Where changes are material — such as changes to the purposes for which we process data, the third parties with whom we share data, or your rights — ct999 will notify members in advance of the change taking effect via the contact details registered to their account.
The version number and effective date displayed in the header of this document indicate the currently operative version. Following any update, your continued use of the ct999 platform constitutes your acknowledgement of the updated Policy. Previous versions are available on request.
ct999 recommends that members review this Privacy Policy periodically to stay informed about how their personal data is being protected. If you have questions about any change to this Policy, please contact us before the change takes effect.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the ct999 data protection team:
ct999 Data Protection Team
Email: [email protected] (displayed as plain text — not clickable)
Subject line: "Privacy Policy Enquiry" or "Data Subject Request"
Response time: Acknowledgement within 5 business days; substantive response within 30 days.
If you are not satisfied with how ct999 has handled your personal data or responded to a data subject request, you have the right to raise a complaint with ct999's designated data protection contact in the first instance. If your complaint is not resolved to your satisfaction, you may escalate the matter to the data protection supervisory authority in the jurisdiction applicable to your circumstances.
If your privacy enquiry relates specifically to responsible gaming data — such as how your gaming behaviour is monitored, how self-exclusion data is managed, or how to request deletion of responsible gaming records — please visit our Responsible Gaming page or contact the support team as above, specifying "Responsible Gaming Data" in your subject line.
This Privacy Policy was last reviewed and updated on 1 January 2026. ct999 Gaming Operations Ltd. All rights reserved. © 2026 ct999.
Your personal data is protected by enterprise-grade encryption, a transparent privacy policy, and a team that takes data protection seriously. Join 500,000+ Pakistani players on Pakistan's most trusted gaming platform.