ct99 Privacy
Policy & Data Protection

This Privacy Policy ("Policy") describes how ct99 ("ct99", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who access, register on, or otherwise interact with the ct99 online gaming platform available at ct99.bio and any associated mobile interfaces or services.

This Policy applies to all Pakistani players and international users of ct99 regardless of how they access the platform — whether via a mobile browser in Karachi, a desktop connection in Lahore, or any other access method from Islamabad, Faisalabad, Rawalpindi, or elsewhere across Pakistan. It covers all data processing activities from the moment you first visit ct99 through the entire lifecycle of your account, including any period following account closure during which data retention obligations apply.

By registering a ct99 account or by continuing to use the ct99 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of ct99 and contact our support team to close your account.

For the purposes of applicable data protection law, the data controller responsible for your personal information is ct99, the internationally licensed online gaming operator behind the ct99 platform. ct99 determines the purposes and means by which your personal data is processed in connection with the provision of its gaming, betting, and related services.

Where ct99 engages third-party service providers (including payment processors, game content providers, and customer support platforms) to process data on our behalf, those parties act as data processors under written agreements that impose data protection obligations consistent with ct99's own standards and licensing requirements.

All questions, requests, and complaints relating to data protection at ct99 should be directed to our Data Protection contact via the details provided in Section 15 of this Policy.

ct99 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the ct99 platform, and from third parties as part of our compliance and verification processes. The categories of data we collect are described below.

ct99 processes your personal data for the following specific purposes:

4.1 Account Management & Service Delivery

To create and maintain your ct99 account, authenticate your identity at login (including OTP-based two-factor authentication), process your bets and game sessions, manage your PKR wallet, and provide access to all ct99 gaming products including cricket betting, live casino, slots, Aviator, and Cat Fishing.

4.2 Payment Processing

To facilitate your deposits and withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT. This includes verifying that the payment method belongs to you and reconciling transactions against your ct99 wallet balance. Payment reference data is shared with the relevant payment processor solely to the extent necessary to complete the transaction.

4.3 KYC Verification & Regulatory Compliance

To verify your identity and age in accordance with ct99's international gaming licence requirements, anti-money laundering (AML) obligations, and counter-terrorism financing (CTF) regulations. CNIC data and associated verification documents are processed for this purpose and retained for the periods required by our licensing authority.

4.4 Responsible Gaming

To monitor your gaming activity on ct99 for patterns that may indicate problem gambling behaviour, to implement and enforce any responsible gaming limits or self-exclusion requests you have set, and to contact you proactively where our responsible gaming algorithms flag a potential concern. This processing is carried out in your interest and in compliance with our licensing obligations.

4.5 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity, duplicate accounts, bonus abuse, money laundering, match-fixing, and other prohibited conduct on ct99. This includes automated analysis of technical data, betting patterns, and account behaviour. Where fraud is suspected, ct99 may share relevant data with law enforcement or our licensing authority.

4.6 Customer Support

To provide you with assistance via ct99's 24/7 live chat and email support channels, to resolve disputes, to process complaints, and to maintain records of our interactions for quality assurance and regulatory audit purposes.

4.7 Marketing Communications

Where you have provided explicit consent to receive promotional communications from ct99, we may use your contact data to send you information about bonuses, free spins, PSL match specials, and other ct99 promotions. You may withdraw your marketing consent at any time by updating your communication preferences within your ct99 account settings or by contacting our support team.

4.8 Platform Improvement

To analyse aggregate, anonymised data about how Pakistani players use ct99 in order to improve the platform's performance, user experience, game selection, and payment systems. This analysis does not identify individual players.

ct99 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the ct99 Terms and Conditions — including account management, bet settlement, wallet transactions, and customer support;
• Legal Obligation: Processing required to comply with our international gaming licence, AML/CTF regulations, KYC obligations, and lawful requests from regulatory or law enforcement authorities;
• Legitimate Interests: Processing carried out in ct99's or a third party's legitimate interests, including fraud prevention, security monitoring, and platform analytics — provided those interests are not overridden by your fundamental rights;
• Consent: Processing for which you have given us explicit, freely given, and informed consent — primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

ct99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances, and only to the extent strictly necessary for each purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners receive the minimum data required to process your ct99 deposit or withdrawal transaction;
• Game Content Providers: Licensed gaming studios (including Evolution Gaming, Pragmatic Play, and others) receive your anonymised session data to facilitate game delivery and RNG verification. They do not receive your identity or payment data;
• KYC & Identity Verification Partners: Certified identity verification service providers process your CNIC and related documents under strict data processing agreements on behalf of ct99;
• Fraud & AML Services: Third-party fraud detection and anti-money laundering screening tools process technical and transactional data to assist ct99 in meeting its compliance obligations;
• Regulatory Authorities & Licensing Bodies: ct99's licensing authority and, where legally required, law enforcement agencies may receive player data in connection with compliance audits, regulatory inquiries, or criminal investigations;
• Customer Support Platforms: Live chat and ticketing platform providers process your support interactions under agreements that prohibit any secondary use of your data;
• Legal Proceedings: We may disclose personal data where required by a valid court order, legal process, or where ct99 believes disclosure is necessary to protect the rights, property, or safety of ct99, its players, or the public.

ct99 uses cookies and similar tracking technologies to operate the platform, maintain your login session, personalise your experience, detect fraud, and analyse platform performance. The categories of cookies used on ct99 are as follows:

• Strictly Necessary Cookies: Essential for the ct99 platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. You cannot opt out of strictly necessary cookies without ceasing to use ct99;
• Functional Cookies: Remember your ct99 preferences such as language settings, game lobby filters, and stake defaults. These improve your experience but are not strictly required;
• Analytical Cookies: Help ct99 understand how players use the platform — which game categories are most popular, where players drop off during deposit flows, and how the ct99 login process performs across different Pakistani mobile devices. Data is aggregated and anonymised;
• Security Cookies: Used to detect abnormal session behaviour, bot access, and potential account takeover attempts on ct99. These are integral to our fraud prevention infrastructure.

ct99 does not use third-party advertising cookies. You may manage your cookie preferences at any time through your browser settings. Disabling functional or analytical cookies may affect your ct99 experience but will not prevent you from placing bets or accessing games.

ct99 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by our legal and regulatory obligations — whichever period is longer. The following general retention periods apply:

When the applicable retention period expires, ct99 will securely delete or irreversibly anonymise your personal data in accordance with our data destruction procedures. Anonymised, aggregated data that cannot identify you may be retained indefinitely for statistical and analytical purposes.

ct99 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ct99 is encrypted in transit using industry-standard SSL/TLS protocols — the same standard used by international banks and financial institutions;
• AES-256 Encryption at Rest: Sensitive data stored on ct99 servers — including CNIC images, financial records, and account credentials — is encrypted at rest using AES-256 encryption;
• Access Controls: Access to ct99 player data systems is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and comprehensive audit logging;
• Two-Factor Authentication: ct99 employees with access to player data systems are required to authenticate using multi-factor authentication. Players are also encouraged to enable OTP-based 2FA on their ct99 accounts;
• Penetration Testing: ct99 engages certified independent security firms to conduct regular penetration testing and vulnerability assessments of the ct99 platform;
• Incident Response: ct99 maintains a documented data breach incident response plan. In the event of a breach affecting player data, affected players will be notified in accordance with our regulatory obligations and applicable law.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to the personal data ct99 holds about you. Requests to exercise any of these rights may be submitted to ct99's support team via the contact details in Section 15.

ct99 will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days with notice to you. We reserve the right to decline requests that are manifestly unfounded, repetitive, or where compliance would conflict with our legal or regulatory obligations — in which case we will explain the reasons for refusal in writing.

ct99 is strictly restricted to persons who are 21 years of age or older. ct99 does not knowingly collect or process personal data belonging to minors. Any account found to have been registered by a person under 21 will be closed immediately, and any personal data associated with that account will be deleted or retained only to the extent required by our regulatory obligations.

Age verification via CNIC is mandatory before any withdrawal can be processed from a ct99 account. ct99 actively monitors registration patterns and account behaviour for indicators of potential underage access. If you believe a minor has accessed or registered an account on ct99, please contact our support team immediately at [email protected]. Parents and guardians in Pakistan are advised to use device-level parental control software to restrict access to online gaming platforms on shared household devices.

ct99 operates as an internationally licensed gaming platform. Some of the service providers we use to deliver ct99 — including certified game studios, cloud infrastructure providers, and fraud detection services — may process your data in countries outside Pakistan. Where such international transfers occur, ct99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards for international data transfers employed by ct99 include contractual data processing agreements that impose binding data protection obligations on recipient processors, and selection of service providers that operate in jurisdictions with recognised data protection frameworks.

ct99 does not transfer player data to countries on recognised lists of inadequate data protection destinations without implementing enhanced safeguards. Your financial data processed by Pakistani payment providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) remains within Pakistan's payment infrastructure.

The ct99 platform integrates with third-party services to deliver certain features — including live casino content from Evolution Gaming and Pragmatic Play, slot games from third-party studios, and payment processing via Pakistani payment gateways. When you interact with these third-party services within ct99, some data may be processed by those third parties in accordance with their own privacy policies.

ct99 has no control over and accepts no responsibility for the data practices of any third party whose services you access independently of ct99. This Policy does not govern any third-party website, platform, or service that you may navigate to from a link found outside the ct99 platform.

All third-party data processors engaged by ct99 are subject to rigorous due diligence, contractual data protection obligations, and regular compliance reviews to ensure they meet the standards required under ct99's international gaming licence.

ct99 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, licensing obligations, or the services offered on the ct99 platform. The "Last Updated" date at the top of this Policy indicates when the most recent version took effect.

Where changes are material — meaning they significantly affect how we use your data or alter your rights under this Policy — ct99 will notify registered players by displaying a prominent notice on the ct99 platform upon their next login and, where appropriate, by sending a notification to your registered Pakistani mobile number.

Your continued use of ct99 following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any revision, you should stop using ct99 and contact our support team to close your account and request deletion of your data to the extent permitted by our retention obligations.

For all data protection enquiries, rights requests, and privacy complaints, you may contact ct99 through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: 24/7 live support accessible within your ct99 account dashboard
• Subject Line: Please mark privacy-related emails with "DATA PROTECTION REQUEST" for priority routing
• Response Time: ct99 targets a response to all data rights requests within 30 calendar days of receipt of a verifiable request

ct99 takes all privacy complaints seriously and will investigate and respond to every complaint received. If you are not satisfied with ct99's handling of your complaint, you have the right to escalate the matter to the relevant data protection or regulatory authority in the jurisdiction under which ct99 is licensed, or to your local consumer protection authority in Pakistan.