Privacy Policy

This Privacy Policy ("Policy") sets out how ct999c ("we", "us", "our", "the Platform" or "the Operator") collects, processes, stores, shares and protects personal data relating to users ("you", "your" or "the User") of the ct999c platform, accessible at https://ct999c.cam and any associated mobile or application interfaces.

ct999c is an online sports betting and casino entertainment platform serving users with a focus on cricket, PSL, T20 and ICC markets. In providing these services, we necessarily collect and process certain categories of personal data. This Policy explains our data practices clearly and in plain language, so that every ct999c player — whether accessing the platform from Karachi, Lahore, Islamabad, Rawalpindi, Peshawar, Faisalabad, Multan or anywhere else — understands exactly what happens to their information.

By registering an account, depositing funds, placing a bet or otherwise accessing the ct999c platform, you acknowledge that you have read this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use the platform.

The following definitions apply throughout this Privacy Policy. Capitalised terms not defined here carry the meaning assigned to them in the ct999c Terms and Conditions.

ct999c collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the platform, and from third-party service providers engaged in platform operation. The categories of personal data we collect are set out in the table below.

ct999c processes personal data only where a valid legal basis exists for that processing. The following legal bases apply to different categories of our data processing activities:

• Contractual Necessity: Processing your identity, contact and financial data is necessary to create and maintain your account, process deposits and withdrawals, verify your identity and provide the Services you have registered for. Without this processing, we cannot perform our contractual obligations to you.
• Legal Obligation: Processing KYC data, transaction records and certain communication data is necessary to comply with anti-money laundering requirements, fraud prevention obligations and other regulatory requirements applicable to the Operator's platform licence.
• Legitimate Interests: Processing technical and usage data for the purpose of platform security, fraud detection, improving service quality and maintaining the integrity of sports betting and casino markets is carried out on the basis of our legitimate interests as a platform operator, provided these interests are not overridden by your fundamental rights.
• Consent: Processing your data for direct marketing communications (promotional emails, bonus notifications, PSL season offers) is carried out only where you have given your explicit consent at registration or via your account preferences. You may withdraw this consent at any time without it affecting your ability to use the platform.

ct999c uses the personal data we collect for the following purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or updating this Policy.

• Account Creation and Management: Registering your account, authenticating your login sessions, managing your account preferences and maintaining your betting and transaction history.
• Identity Verification (KYC): Verifying your identity, age and address to comply with the Operator's platform obligations and prevent underage gambling, fraud and money laundering.
• Transaction Processing: Processing your deposits and withdrawals, reconciling PKR-denominated account balances and communicating with payment service providers as necessary to complete transactions.
• Platform Security and Fraud Prevention: Detecting, investigating and preventing fraudulent activity, multiple account creation, bonus abuse, unauthorised access and other prohibited conduct as defined in the Terms and Conditions.
• Customer Support: Responding to your queries via live chat or email ([email protected]), resolving disputes, processing complaints and maintaining records of support interactions.
• Responsible Gambling: Monitoring account activity for indicators of problem gambling, applying player-set deposit and loss limits, processing self-exclusion requests and complying with responsible gambling obligations.
• Service Improvement and Analytics: Analysing aggregate, anonymised usage data to improve platform features, betting market depth, loading performance and the overall user experience for Pakistani players.
• Legal and Regulatory Compliance: Retaining records as required by applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and fulfilling obligations under the Operator's platform licence.
• Marketing Communications (Consent Only): Where you have opted in, sending promotional offers, bonus notifications, PSL season updates and other marketing communications by email or in-platform notification. You may opt out at any time.

ct999c does not sell, rent or trade your personal data to third parties for their independent marketing or commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Service Providers (Data Processors): We engage third-party service providers to support platform operations, including payment processing infrastructure, identity verification services, cloud hosting providers, cybersecurity services, customer support tools and analytics platforms. These providers act as Data Processors under our instruction and are contractually prohibited from using your data for any purpose other than the specific service they provide to ct999c.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, regulation, court order or lawful governmental request, we may disclose personal data to relevant authorities. We will, where legally permissible, notify affected users of such disclosures.
• Fraud and Security Investigations: We may share data with third-party fraud prevention services, anti-money laundering databases and betting integrity organisations where we have a reasonable basis to suspect fraudulent, abusive or integrity-compromising conduct on the platform.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of the Operator's business or assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. Affected users will be notified of any such transfer and the privacy terms applicable post-transfer.

ct999c retains personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations and resolve disputes. Retention periods vary by data category as follows:

• Account and Identity Data: Retained for the duration of your account plus a minimum of five years following account closure, in line with typical anti-money laundering record-keeping obligations. Where a legal investigation or dispute is ongoing, data may be retained for longer.
• Transaction and Financial Records: Retained for a minimum of five years from the date of each transaction, in compliance with financial record-keeping requirements applicable to the Operator.
• KYC Documents: Retained for the period required by the Operator's compliance obligations, typically five years from the end of the business relationship.
• Support Communications: Retained for a minimum of two years from the date of the communication, or longer if the subject matter relates to an unresolved dispute or investigation.
• Technical and Usage Data: Anonymised aggregate analytics data may be retained indefinitely. Raw IP and session log data is typically retained for 12 months.
• Marketing Preferences and Consent Records: Retained for the duration of your account and for a reasonable period following account closure to demonstrate compliance with consent requirements.

At the end of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

ct999c implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• SSL Encryption: All data transmitted between your device and the ct999c platform is encrypted using 256-bit SSL/TLS technology. This protects your login credentials, personal information and payment data in transit.
• Access Controls: Access to personal data within the Operator's organisation is strictly limited to personnel who require it to perform their job functions. Access rights are reviewed regularly and revoked when no longer required.
• Data Storage Security: Personal data is stored on servers with industry-standard physical and logical security controls, including firewalls, intrusion detection systems and regular vulnerability assessments.
• Password Hashing: User account passwords are never stored in plain text. They are processed using a strong cryptographic hashing algorithm.
• Incident Response: ct999c maintains documented procedures for responding to data security incidents. In the event of a breach that poses a risk to your rights, we will notify affected users without undue delay.

ct999c uses cookies and similar tracking technologies (including local storage and session storage) to support the operation of the platform and improve user experience. This section explains what cookies we use and why.

You can manage cookie preferences through your web browser settings. Note that blocking certain cookies may impair the functionality of the ct999c platform. For detailed browser cookie management guidance, consult your browser's help documentation.

Subject to applicable law and the Operator's platform obligations, you have the following rights in respect of the personal data ct999c holds about you. To exercise any of these rights, contact us via live chat or the support email address set out in Section 15.

ct999c will not charge a fee for exercising your data rights in standard circumstances. We may need to verify your identity before processing a request. We aim to respond to all verified requests within 30 calendar days.

As an online platform serving an international user base, ct999c may transfer your personal data to servers, service providers or affiliates located in countries outside the country in which you are based. This may include jurisdictions with different data protection standards to those applicable in your location.

Where such transfers occur, ct999c takes steps to ensure that your personal data is subject to appropriate safeguards, which may include contractual clauses, data processing agreements requiring equivalent levels of data protection, or transfers to jurisdictions recognised as providing adequate protection.

By using the ct999c platform and consenting to this Privacy Policy, you acknowledge and agree to the transfer of your personal data as described in this section.

ct999c is strictly intended for adults aged 18 and over — or the higher minimum age required by the operator/license jurisdiction. We do not knowingly collect, process or retain personal data from individuals who are under the minimum eligible age.

If we become aware or reasonably suspect that personal data has been collected from a minor, we will take immediate steps to delete that data, close the associated account and, where applicable, return any funds deposited subject to investigation. We do not use personal data of suspected or confirmed minors for any purpose other than the account closure process.

If you believe that a minor has registered an account on ct999c, please contact us immediately via live chat or the support email address in Section 15.

The ct999c platform does not contain links to third-party websites or external resources beyond the navigation and footer links listed in our site menu structure. Should you encounter references to external services — for example, payment providers — please note that ct999c does not control the data practices, privacy policies or security measures of those external entities.

References to payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on this platform are provided as familiar Pakistani payment context only. Any interaction you have with these providers' own platforms is governed entirely by their respective privacy policies and terms of service, not this Policy.

ct999c is not responsible for the privacy or data security practices of any third-party service provider, payment processor or external platform. We recommend reviewing the privacy policies of any external service before providing them with your personal information.

ct999c reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform functionality. When we make material changes to this Policy, we will notify registered users via email or an in-platform notification prior to or upon the date those changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the ct999c platform following the effective date of any update constitutes your acceptance of the revised Policy.

The current version of this Privacy Policy is always accessible at https://ct999c.cam/privacy-policy.

If you have any questions, concerns or requests relating to this Privacy Policy or the personal data ct999c holds about you, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the ct999c platform. Live chat is the fastest way to reach our support team for account-specific privacy queries.
• Support Email: [email protected] — please copy and paste this address into your mail client. This address is displayed as plain text only and is not a clickable link. We aim to respond to privacy-related requests within 30 calendar days of receipt of a verified submission.

When contacting us regarding a data rights request, please include your registered account username or the email address associated with your account, a clear description of your request and, where applicable, evidence of your identity. We may need to verify your identity before processing any request to protect against unauthorised access to another user's data.