CT 999 Privacy Policy — How We Handle Your Data in Pakistan

This Privacy Policy explains how CT 999, operating the gaming platform at ct999.life, collects, uses, stores, and protects the personal information of its users. It covers every person who visits the CT 999 website, registers an account, makes a deposit, places a bet, or interacts with CT 999 support — whether from Karachi, Lahore, Islamabad, Peshawar, Quetta, or anywhere else in Pakistan.

CT 999 takes its responsibility around data seriously. We understand that handing over your mobile number, CNIC details, and financial account information is a matter of trust — and we do not take that trust lightly. This policy is written in clear language because we believe every CT 999 player deserves to understand exactly what happens with their personal information, not have it buried in legal jargon.

By registering on CT 999 or continuing to use the platform after this policy is published or updated, you are confirming that you have read and understood its contents and that you consent to the data practices described here. If you do not agree with any part of this policy, please do not use CT 999 and contact our support team to close any existing account.

CT 999 collects only the personal data that is genuinely necessary to operate the platform, process payments, verify identity, and comply with applicable regulations. We do not collect data for the sake of it. The categories of data we collect are explained below.

Registration & Account Data

• Mobile number: Your Pakistani mobile number is your primary identifier on CT 999. It is used for account login, two-factor verification, and support communications.
• Email address: Used for account confirmation, promotional communications (if opted in), and formal correspondence. You can manage email preferences in your account settings.
• Date of birth: Collected to verify that you meet the 18+ age requirement to use CT 999. This is a mandatory field and cannot be changed after registration without supporting documentation.
• Username / display name: The name you choose to display within CT 999 is stored as part of your account profile.
• Password: Stored in hashed, encrypted form. CT 999 cannot retrieve or view your plaintext password. If you forget it, you must use the password reset flow — our staff cannot provide your existing password.

Identity Verification (KYC) Data

• CNIC / NIC number: Requested during enhanced verification checks, typically before processing withdrawals above certain thresholds or when account review is triggered by unusual activity.
• Document images: Clear photographs of your CNIC (front and back) or alternative acceptable identity document as required during verification.
• Proof of address: A recent utility bill, bank statement, or similar document confirming your Pakistani address, requested in specific circumstances.
• Selfie / liveness check: In some cases, a selfie photograph may be requested to confirm that the identity document provided belongs to the account holder.

Financial & Transaction Data

• Payment method identifiers: The mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay) or bank account details used for deposits and withdrawals. CT 999 does not store full card numbers — card payments are processed via PCI-compliant third-party gateways that handle card data directly.
• Transaction history: A complete record of every deposit, withdrawal, bonus credit, and bet placed on CT 999 is maintained for regulatory compliance, dispute resolution, and player account transparency.
• Deposit and withdrawal amounts: All PKR amounts transacted through the platform are logged with timestamps and payment method references.

Technical & Usage Data

• IP address: Your device's IP address is logged at login and during high-value transactions as a security and fraud prevention measure.
• Device information: Device type (mobile/tablet/desktop), operating system, and browser type are collected to optimise your CT 999 experience and detect unusual access patterns.
• Session data: Login times, session duration, pages viewed, and games played are recorded to support responsible gaming monitoring, customer support, and platform improvement.
• Geolocation (approximate): Country-level location data derived from your IP address is used to enforce geographic eligibility rules. CT 999 does not collect precise GPS location data.

CT 999 processes personal data only for specific, legitimate purposes. We do not use your data for purposes that are unrelated to operating the platform and serving you as a player. The primary uses are as follows:

CT 999 does not sell your personal data to any third party, full stop. We do not pass player lists to advertisers, data brokers, or marketing companies. Data sharing is limited to what is strictly necessary to operate the platform and comply with legal obligations.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment gateways receive only the minimum data required to complete your transaction — typically your wallet number or bank reference and the PKR amount. These providers operate under their own privacy policies and PCI-DSS security standards.
• Identity verification partners: If CT 999 uses a third-party KYC provider to assist with CNIC verification or document checking, that provider receives only the specific data needed to complete the verification task. They are contractually prohibited from using your data for any other purpose.
• Fraud prevention services: CT 999 may share anonymised device fingerprints, IP addresses, or transaction patterns with fraud detection services to help identify accounts associated with fraudulent activity across multiple platforms. No personally identifiable information is shared beyond what is necessary for this purpose.
• Regulatory authorities: CT 999 is obligated to cooperate with legitimate requests from Pakistani regulatory, law enforcement, or anti-money-laundering authorities. Personal data will be disclosed in response to valid legal orders or where CT 999 is legally required to report suspicious activity.
• Platform technology providers: Cloud infrastructure, analytics, and customer support software providers who process data on CT 999's behalf are bound by data processing agreements that prohibit them from using your data for their own purposes.
• Business transfers: If CT 999 is involved in a merger, acquisition, or sale of assets, player data would form part of the transferred business. You would be notified in advance of any such transfer and given the opportunity to delete your account before it takes place.

CT 999 retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable laws and regulations. Below are the standard retention periods for different data categories.

• Active account data: Retained for the full duration of your CT 999 account being open. You can request account closure and deletion at any time by contacting support.
• Transaction records: Financial transaction logs are retained for a minimum of five years after the transaction date, as required for anti-money-laundering and financial audit compliance purposes.
• KYC documentation: Identity documents are retained for a minimum of five years after the end of the business relationship (account closure), in line with standard regulatory requirements.
• Support communications: Chat logs and email correspondence with CT 999 support are retained for three years to support dispute resolution and quality improvement.
• Session and usage logs: Technical session data is retained for 12 months in readily accessible form, then archived for up to 36 months for fraud investigation purposes.
• Marketing data: Email and SMS preferences are retained until you withdraw consent. Once consent is withdrawn, your details are removed from active marketing lists within 30 days.

CT 999 uses cookies and similar technologies to operate the platform correctly, remember your preferences, keep your session active during play, and understand how players use the site so we can improve it. Here is a breakdown of the types of cookies in use.

You can control cookie preferences through your browser settings. Blocking all cookies will prevent CT 999 from working correctly — at a minimum, essential cookies must be allowed. CT 999 does not use third-party advertising cookies and does not allow ad networks to track CT 999 visitors.

CT 999 implements multiple layers of technical and operational security to protect player data. No online platform can guarantee absolute security against all possible threats, but CT 999 applies industry-standard measures and continuously reviews them to stay current with the threat landscape.

As a CT 999 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact CT 999 support at support@ct999.life with the subject line "Data Rights Request" and describe what you would like us to do. We will respond within 30 days.

CT 999 is strictly an adults-only platform. Registration is not permitted for anyone under 18 years of age. CT 999 actively employs age verification measures at registration and reserves the right to request documentary proof of age at any point during a player's relationship with the platform.

• No data from minors: CT 999 does not knowingly collect personal data from individuals under 18. If we discover that a minor has registered an account, the account will be immediately closed and all associated data deleted as quickly as legal requirements permit.
• Shared devices: If you share a device with children or teenagers, please ensure that your CT 999 account is secured with a strong password that the minor cannot access. Parental control software can also be used to block access to ct999.life on shared devices.
• Reporting underage accounts: If you have reason to believe that a minor has registered on CT 999 — including a minor in your own household — please contact CT 999 support immediately so the account can be reviewed and closed.

The CT 999 platform may incorporate third-party services for specific functions — payment processing, identity verification, live game streaming, and customer support software. This section explains the privacy implications of those integrations.

• Payment services: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, or a Visa/Mastercard gateway, your transaction data is handled partly by those providers under their own privacy policies and security frameworks. CT 999 has no control over those providers' data practices once data passes to their systems.
• Live casino game providers: Live dealer games on CT 999 are provided by third-party studio operators. These providers may collect game interaction data (bet amounts, outcomes) for game integrity and regulatory purposes. No personally identifiable data beyond what is necessary for the game is shared with these providers.
• No outbound advertising trackers: CT 999 does not embed third-party advertising pixels, social media tracking widgets, or affiliate marketing scripts that would allow external companies to track your behaviour across other websites. What happens on CT 999 stays on CT 999.
• Support tools: Live chat and customer support software may store conversation transcripts on third-party cloud infrastructure. These providers are bound by data processing agreements requiring them to handle this data securely and only in accordance with CT 999's instructions.

CT 999 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When we make material changes — meaning changes that significantly affect how your data is used or your rights in relation to it — we will notify you in advance.

• Notification method: Material policy changes will be communicated via a notice within the CT 999 platform and, where possible, by SMS or email to your registered contact details.
• Notice period: CT 999 will provide at least 7 days' advance notice before a material change to this policy takes effect.
• Effective date: The effective date at the top of this policy page will always reflect the date of the most recent update. The current version governs all data CT 999 holds at the time of reading.
• Continued use: Continuing to use CT 999 after a policy update takes effect constitutes acceptance of the updated terms. If you do not accept the changes, please close your account before the effective date.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way CT 999 handles your personal data, please get in touch through the channels below. We take all privacy enquiries seriously and will respond as promptly as possible.

• Email: support@ct999.life — Mark the subject line "Privacy Policy Enquiry" or "Data Rights Request" so it reaches the correct team without delay.
• Live chat: Available 24/7 within the CT 999 platform for immediate initial assistance. Complex data rights requests will be escalated from live chat to the relevant team internally.
• Response time: CT 999 aims to respond to all privacy-related communications within 3 business days for initial acknowledgement, and within 30 days for substantive responses to formal data rights requests.
• FAQ: Answers to many common privacy and account questions are also available on the CT 999 FAQ page.