ctt999 Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") is issued by ctt999 ("ctt999", "we", "us", "our") and applies to all personal data collected from players, visitors, and prospective users of the ctt999 website at https://ctt999.net and all related services operated under the ctt999 brand.

For the purposes of this Policy, "personal data" means any information that identifies you as an individual or that can reasonably be used to identify you — including your name, CNIC number, contact details, payment information, device identifiers, and account activity records.

By creating a ctt999 account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the ctt999 platform immediately.

2 Data We Collect

ctt999 collects personal data from you in the following categories depending on how you interact with the platform:

Where you voluntarily provide personal data belonging to a third party (for example, when verifying a shared payment method), you represent that you have obtained the necessary consent from that individual to share their data with ctt999 for verification purposes.

3 How We Use Your Data

ctt999 uses the personal data it collects for the following specific purposes:

• Account Management: To create, maintain, and administer your ctt999 player account, including processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved methods;
• Identity Verification (KYC): To verify your identity and age (21+) as required by our international gaming licence obligations, and to comply with applicable anti-money laundering (AML) regulations;
• Platform Operations: To provide access to casino games, sports betting markets, live dealer tables, and all other ctt999 product features;
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, unauthorised account access, and other security threats to the ctt999 platform;
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling and to apply responsible gaming controls — including deposit limits and self-exclusion — where appropriate;
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes;
• Legal Compliance: To meet our obligations under applicable licensing conditions, financial crime regulations, and any lawful requests from regulatory or law enforcement authorities;
• Platform Improvement: To analyse aggregated, anonymised usage data to improve site performance, game selection, and the overall ctt999 player experience.

ctt999 does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects, except as may be strictly required for fraud detection and AML screening — in which case you have the right to request human review of any decision that affects your account.

4 Legal Basis for Processing

ctt999 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfil our obligations under the Terms & Conditions you agreed to when opening your ctt999 account — including account administration, payment processing, and game access;
• Legal Obligation: Processing is required to comply with obligations imposed by our gaming licence, AML regulations, and any applicable laws — including KYC verification and transaction monitoring;
• Legitimate Interests: Processing is carried out for the legitimate interests of ctt999 in operating a secure, fair, and commercially viable platform — including fraud prevention, responsible gaming monitoring, and platform analytics. These interests have been assessed and do not override your fundamental data protection rights;
• Consent: Where we send you optional promotional communications about ctt999 offers and bonuses, we do so only where you have provided explicit opt-in consent. You may withdraw this consent at any time by updating your communication preferences within your account settings.

5 Cookies & Tracking Technologies

ctt999 uses cookies and similar tracking technologies to operate core platform functions and to maintain platform security. The following categories of cookies are used on the ctt999 website:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking platform functionality;
• Performance Cookies: Used to collect anonymised information about how players navigate the ctt999 platform — for example, which game categories are most visited and where errors occur. This data is used solely to improve platform reliability and user experience;
• Fraud Prevention Cookies: Used to detect unusual patterns of activity that may indicate fraudulent behaviour or multi-accounting, in conjunction with our automated fraud detection systems.

ctt999 does not use advertising cookies, social media tracking pixels, or any third-party cookies that track your activity across other websites. You can manage your cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to log in and use the ctt999 platform.

6 Sharing Your Personal Data

ctt999 does not sell or commercially share your personal data. We share your data only in the following limited and controlled circumstances:

• Payment Processors: Your financial data is shared with approved payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and SadaPay — strictly to process deposits and withdrawals on your behalf;
• KYC & AML Service Providers: Identity verification data may be shared with licensed third-party KYC screening providers to fulfil our regulatory obligations. These providers are contractually bound to use your data only for the specified verification purpose;
• Game Content Providers: Anonymised gameplay session data may be shared with our licensed game suppliers to support technical integration and fairness auditing. No personally identifying data is shared with game providers;
• Regulatory & Law Enforcement Authorities: ctt999 will disclose personal data to competent authorities where required by law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so;
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of ctt999's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy protections applicable to your data will be maintained.

All third parties with whom ctt999 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond that for which it was disclosed.

7 International Data Transfers

ctt999 operates under an internationally recognised gaming licence and may process or store certain categories of player data on servers located outside Pakistan. Where personal data is transferred internationally, ctt999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the data protection obligations of our licensing jurisdiction.

Such safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that have been assessed as providing an adequate level of data protection. If you would like further information about the specific safeguards applicable to any particular international transfer of your data, you may contact ctt999 support at [email protected].

8 Data Retention

ctt999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active ctt999 account plus a minimum of five (5) years following account closure, in line with AML record-keeping obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, as required under applicable financial crime regulations;
• KYC Documentation: Retained for the duration of your account plus five years following closure. Documents that fail verification are deleted promptly after the verification decision is communicated to you;
• Technical and Usage Data: Retained for up to twelve (12) months from collection, after which it is anonymised and aggregated for platform analytics purposes;
• Support Communications: Retained for three (3) years from the date of the interaction for quality assurance, dispute resolution, and regulatory compliance purposes.

Where retention beyond these standard periods is required by a specific legal obligation — for example, in connection with ongoing regulatory investigation or litigation — ctt999 will retain the relevant data until that obligation is resolved.

9 Security Measures

ctt999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit TLS encryption for all data in transit between your device and ctt999 servers;
• AES-256 encryption for sensitive personal and financial data stored at rest;
• Role-based access controls ensuring that only authorised personnel with a verified operational need may access player records;
• Comprehensive audit logging of all internal access to personal data;
• Regular penetration testing and security vulnerability assessments conducted by qualified third-party security firms;
• Two-factor authentication requirements for all internal administrative access to production systems;
• Automated intrusion detection and real-time threat monitoring across all platform infrastructure.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, ctt999 will notify you and the relevant regulatory authority within the timeframe required by applicable law.

10 Your Data Protection Rights

Subject to applicable law and the conditions of our gaming licence, you hold the following rights in respect of your personal data held by ctt999:

• Right of Access: You may request a copy of the personal data ctt999 holds about you, along with information about how it is used and with whom it is shared;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your ctt999 account. For certain categories of data (such as your registered name and CNIC), corrections must be supported by documentary evidence;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations — particularly those arising from our AML and KYC regulatory duties;
• Right to Restriction: You may request that ctt999 restrict the processing of your data in specific circumstances, such as while the accuracy of data is being contested or a complaint is under review;
• Right to Data Portability: You may request a copy of personal data you have provided to ctt999 in a structured, commonly used, and machine-readable format;
• Right to Object: You may object to the processing of your data on the basis of legitimate interests, including any profiling carried out for fraud detection purposes. ctt999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent (such as promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact ctt999 via live chat inside your account dashboard or by email at [email protected]. We will respond to all data subject requests within 30 days. Complex requests may be extended by a further two months, in which case you will be notified of the extension and the reason for it.

11 Children's Privacy

The ctt999 platform is strictly intended for persons aged 21 years and over. ctt999 does not knowingly collect personal data from individuals under the age of 21. Age is verified as part of the mandatory KYC process before any withdrawal is permitted, and ctt999 reserves the right to conduct age verification checks at any point during a player's account lifecycle.

If you believe that ctt999 has inadvertently collected personal data from a person under the age of 21, please contact us immediately at [email protected]. Upon confirmation, ctt999 will close the relevant account, void any associated activity, and delete the personal data of the underage individual as promptly as regulatory obligations permit.

12 Third-Party Links

The ctt999 website does not contain links to third-party websites, applications, or services other than those strictly necessary for the provision of approved payment methods. Where payment redirects to the interface of an approved payment provider — such as JazzCash or EasyPaisa — that provider's own privacy policy governs the collection and use of any personal data processed on their platform.

ctt999 is not responsible for the privacy practices of any third-party payment or technology provider. We recommend that you review the privacy policy of any third-party service you interact with in connection with your ctt999 account.

13 Amendments to This Policy

ctt999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, we will notify registered players via the email address associated with their account no less than seven (7) days before the revised Policy takes effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to remain informed of how ctt999 protects your personal data. Your continued use of the ctt999 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how ctt999 has handled your personal data, please contact our support team in the first instance:

• Live Chat: Available 24/7 inside your ctt999 account dashboard — the fastest way to reach us;
• Email: [email protected] — for formal written requests including data subject access requests and erasure requests.

ctt999 will acknowledge all privacy-related correspondence within 48 hours and aims to resolve complaints within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the data protection supervisory authority in your jurisdiction, or to the dispute resolution body specified in ctt999's licensing documentation.

For general platform information, game rules, and payment guidance, please visit our FAQ page. For information about our responsible gaming commitments and player protection tools, please visit our Responsible Gaming page.