Privacy Policy

This Privacy Policy ("Policy") describes how ct999d ("the Platform", "we", "us", "our"), accessible at https://ct999d.cam, collects, processes, stores, shares and protects personal data relating to registered users and site visitors ("you", "the User"). This Policy forms part of the contractual relationship between ct999d and its users, alongside the Terms & Conditions.

By accessing the ct999d Platform, creating an account, making a deposit, or otherwise interacting with any part of our services, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

The following defined terms are used throughout this Privacy Policy:

ct999d collects personal data across several distinct categories depending on how you interact with the Platform. The table below summarises the key data categories, the specific types of data within each, and the primary reason for collection.

ct999d processes personal data on one or more of the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to deliver the services described in the Terms & Conditions — including account creation, transaction processing, game delivery, and support provision — is necessary for the performance of the contract between ct999d and the User.
• Legal Obligation: Processing required to comply with Anti-Money Laundering (AML) regulations, age verification requirements, licensing conditions, law enforcement requests and other applicable legal or regulatory obligations applicable in the operator's licensing jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, analytics for platform improvement, and detection of prohibited account behaviour — where such interests are not overridden by the User's privacy interests.
• Consent: Where processing is based on consent (e.g., non-essential cookies, certain direct marketing communications), we will obtain explicit consent before processing. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Personal data collected by ct999d is used for the following purposes:

• Account Management: Creating, maintaining and securing your Account, including processing login sessions, managing two-factor authentication, and applying account-level responsible gambling settings such as deposit limits and self-exclusion.
• Identity & Age Verification (KYC): Verifying that you meet the minimum age requirement (18+, or higher where applicable) and confirming your identity in compliance with AML and licensing obligations. KYC data is processed by authorised verification partners under strict data processing agreements.
• Transaction Processing: Processing deposits, withdrawals, bonus credits and any related payment operations. Financial data is shared with our payment processing partners solely to the extent required to execute the transaction. Payment providers for Pakistani users may reference channels familiar to users such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah as context — these providers do not endorse or support gambling operations, and their processing rules govern their own data handling independently.
• Responsible Gambling Compliance: Monitoring gaming activity to identify potential problem gambling indicators, applying self-imposed limits, enforcing self-exclusion, and providing reality check notifications where active.
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, collusion, bonus abuse, money laundering and other prohibited conduct. This includes IP analysis, device fingerprinting and behavioural pattern analysis.
• Customer Support: Using account history, communication records and transaction logs to resolve support queries, investigate disputes, and respond to complaints efficiently.
• Legal Compliance: Retaining records as required by applicable AML legislation, licensing conditions, and any lawful regulatory authority requests.
• Platform Improvement: Using aggregated, anonymised analytics data to improve platform performance, user interface design, game library curation, and mobile optimisation for Pakistani users.
• Communications: Sending transactional emails (deposit confirmations, withdrawal status updates, security alerts), and where consent has been obtained, promotional communications. Promotional communications can be opted out of at any time via Account settings.

ct999d does not sell, rent or trade your personal data to third parties for their own independent commercial purposes. Data sharing is limited to the following categories of recipient, and only to the extent strictly necessary for the stated purpose:

• KYC & Identity Verification Partners: Specialist third-party providers that process identity documents and biometric liveness checks on our behalf. These partners are bound by data processing agreements and certified security standards (e.g., ISO 27001 or equivalent).
• Payment Processing Partners: Payment service providers and technical intermediaries required to execute deposit and withdrawal transactions. These providers process only the data necessary to complete the transaction and are independently regulated under their own licensing frameworks.
• Game Content Providers: Game studios and live dealer studios that supply gaming content to the Platform. These providers may receive anonymised session identifiers to support game-side analytics and game-state management. No directly identifiable personal data is shared beyond what is technically required.
• Fraud Prevention & Security Services: Third-party risk intelligence and fraud detection services that may receive technical identifiers (IP addresses, device signatures) to assess transaction risk. These providers do not receive full personal profiles.
• Regulatory & Law Enforcement Authorities: Where required by law, applicable licensing conditions, court order or legitimate regulatory authority request, ct999d will disclose personal data to competent authorities. We will notify affected users where legally permitted to do so.
• Successor Entities: In the event of a merger, acquisition, restructuring or asset sale, personal data may be transferred to the successor entity subject to equivalent data protection obligations being in place prior to any transfer.

ct999d uses cookies and similar tracking technologies to maintain session security, remember your Platform preferences, monitor platform performance, and support fraud prevention. The following categories of cookies may be in use:

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication tokens, CSRF protection tokens, and responsible gambling limit enforcement cookies. These cannot be disabled without preventing use of the Platform.
• Functional Cookies: Remember your preferences such as odds format, language setting and notification preferences. Disabling these does not prevent Platform access but may reduce personalisation quality.
• Performance & Analytics Cookies: Collect anonymised data about how users interact with the Platform (e.g., pages visited, session duration, error frequency) to support platform improvement. These are used in aggregate form only.
• Security Cookies: Support fraud detection and bot prevention systems including device fingerprinting and anomalous behaviour detection.

You may manage non-essential cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent normal Platform use. ct999d does not use cookies to build profiles for sale to third-party advertisers.

ct999d's servers and those of certain of our Data Processors may be located outside Pakistan. As a result, personal data relating to Pakistani users may be transferred to and processed in jurisdictions other than Pakistan. Where such transfers occur, ct999d ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses with Data Processors requiring equivalent data protection standards to those applicable in the operator's licensing jurisdiction
• Technical security measures (encryption in transit and at rest) applied irrespective of the processing location
• Access controls limiting data access to authorised personnel with a legitimate operational need

By using the ct999d Platform, Pakistani users acknowledge that their personal data may be transferred internationally for the purposes described in this Policy, and that such transfers are a necessary component of delivering the Platform's services.

ct999d retains personal data for the period necessary to fulfil the purposes described in this Policy, to comply with legal and regulatory obligations, and to support the resolution of disputes. The table below outlines indicative retention periods for the main data categories:

• Account & Registration Data: Retained for the duration of the active Account plus a minimum of 5 years following account closure, in compliance with standard AML and licensing record-keeping obligations. The applicable period may be extended by regulatory requirement.
• KYC Identity Documents: Retained for the duration required by the operator's licensing jurisdiction AML obligations — typically 5–7 years following the end of the business relationship. Document scans are held in access-restricted encrypted storage.
• Transaction & Gaming History: Retained for a minimum of 5 years from the date of the relevant transaction or gaming session, to support AML compliance, dispute resolution and responsible gambling audit requirements.
• Support Communications: Retained for 3 years from the date of the communication, unless the subject matter of the communication creates a longer retention obligation (e.g., an active dispute or regulatory inquiry).
• Technical Logs (IP, Device): Retained for a maximum of 12 months for standard security and platform performance analysis, unless a specific fraud investigation or legal matter requires extended retention.
• Anonymised Analytics Data: May be retained indefinitely in genuinely anonymised, aggregate form where no individual can be re-identified from the retained data.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is required by a verified User Rights request and is not legally prevented, ct999d will action the request within the timeframe described in Section 10.

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), ct999d recognises and will honour the following rights in respect of personal data we hold about you. Requests should be submitted to [email protected] using the subject line "Data Rights Request":

We will respond to all verifiable data rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly. We will not charge a fee for standard requests. We reserve the right to refuse or charge for manifestly unfounded or excessive requests. We may require identity verification before processing any rights request.

ct999d implements a layered approach to information security designed to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. Security measures in place include:

• Transport Layer Security: All data transmitted between your device and the ct999d Platform is encrypted using TLS 1.2 or higher. Connections using outdated, insecure protocols are rejected.
• Data Encryption at Rest: Sensitive personal data stored in our systems, including KYC documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised personnel with a documented operational need. Access privileges are reviewed on a regular basis and revoked promptly upon role change or departure.
• Security Assessments: We conduct regular security assessments, including vulnerability scans and code reviews, to identify and remediate security weaknesses before they can be exploited.
• Incident Response: ct999d maintains an incident response procedure for security breaches. In the event of a breach materially affecting your personal data, we will notify affected users and applicable regulators within the timeframes required by the applicable regulatory framework.
• Vendor Security: Third-party Data Processors are assessed for security standards prior to engagement and are contractually required to maintain appropriate technical and organisational security measures.

The ct999d Platform is strictly for adults aged 18 years or older — or the higher minimum age required by the operator's licensing jurisdiction or applicable local law. ct999d does not knowingly collect personal data from persons under the applicable minimum age.

If ct999d becomes aware that personal data has been collected from an individual below the applicable minimum age, that account will be immediately suspended and the data will be securely deleted or reported to applicable authorities in compliance with legal obligations. Any funds deposited by an underage user will be handled in accordance with the Terms & Conditions and applicable regulatory requirements.

If you are a parent or guardian and have reason to believe a minor has created an account on ct999d, please contact us immediately at [email protected].

ct999d reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or changes to the Platform's technical architecture. The date of the most recent revision is displayed at the top of this page.

Material changes to this Policy — including changes that significantly affect how we use your personal data or that reduce your privacy rights — will be communicated to registered users via email notification and/or a prominent notice on the Platform at least 14 days before the change takes effect, except where earlier implementation is required by applicable law.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. The current version of this Policy is always available at https://ct999d.cam/privacy-policy.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by ct999d, please contact us using the details below:

For account support, responsible gambling assistance and general enquiries, visit our FAQ page or Responsible Gambling section.