CT 9999 Privacy Policy — How We Protect Your Data in Pakistan

1Introduction

This Privacy Policy explains how CT 9999 ("we", "us", "our", "the Platform") collects, uses, stores, shares and protects the personal data of players who register and use the CT 9999 website at ct9999.biz. This Policy forms part of the CT 9999 Terms and Conditions and should be read alongside them.

CT 9999 is built specifically for Pakistani players and processes all transactions in Pakistani Rupees (PKR). We are committed to handling your data responsibly, transparently and in a way that respects your rights as a user. We do not treat privacy as a compliance exercise — it is a fundamental part of how we operate.

By registering a CT 9999 account, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described below. If you have questions at any point, contact us at support@ct9999.biz before proceeding.

2Data We Collect

CT 9999 collects personal data in several ways — information you provide directly, information generated by your use of the platform and, in some cases, information received from third-party service providers. The table below summarises the main categories:

Data You Are Not Required to Provide

CT 9999 does not require your home address for account registration. We do not collect biometric data, religious information, political views or health data. If at any point a data field feels intrusive or unclear, contact support before submitting it.

3How We Use Your Data

CT 9999 uses personal data for specific, legitimate purposes only. We do not use data for purposes that would surprise a reasonable player. The main uses are:

• Account Management: Creating and maintaining your CT 9999 account, processing logins, updating your profile and managing account settings including responsible gaming tools.
• Processing Transactions: Handling PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer and Visa/Mastercard.
• Identity Verification (KYC): Confirming that you are who you say you are, that you meet the minimum age requirement of 18 years and that you are not on any relevant exclusion or restricted-person list.
• Fraud Prevention: Detecting unusual patterns that may indicate account fraud, identity theft, payment fraud, bonus abuse or money laundering activity.
• Regulatory Compliance: Maintaining transaction records as required under applicable financial and gaming regulations.
• Platform Improvement: Analysing aggregated usage data to understand which games are popular, where players experience difficulty and how the CT 9999 platform can be improved.
• Customer Support: Responding to your questions, resolving disputes and processing complaints.
• Responsible Gaming: Monitoring play patterns that may indicate a player is experiencing difficulty and, where appropriate, applying proactive responsible gaming measures.
• Marketing Communications: Sending bonus and promotional notifications to players who have opted in. Players who have not opted in receive no marketing communications from CT 9999.

4Legal Basis for Processing

CT 9999 processes personal data on the following legal bases:

• Contract Performance: Processing your data is necessary to provide the CT 9999 service as described in the Terms and Conditions. This covers account management, game delivery, payment processing and support.
• Legal Obligation: Certain processing — particularly KYC identity verification and transaction record-keeping — is required by applicable financial regulations and anti-money laundering rules. CT 9999 cannot waive this processing regardless of player preference.
• Legitimate Interests: CT 9999 has a legitimate interest in preventing fraud, protecting the security of the platform and improving services through usage analysis. This processing is balanced against player privacy interests and never overrides player rights.
• Consent: Marketing communications are sent only where a player has given explicit consent. Consent can be withdrawn at any time without affecting any other aspect of the player's account.

5Data Sharing — Who Sees Your Information

CT 9999 does not sell, rent or trade personal data to any third party. Data is shared only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

Payment Processors

When you deposit or withdraw, relevant transaction data is shared with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT) or Visa/Mastercard. This sharing is necessary to complete the transaction. CT 9999 does not have ongoing access to your payment provider account; data is shared only for the specific transaction.

Game Technology Providers

CT 9999 uses third-party game studios and RNG providers to deliver casino games, live dealer tables and virtual sports. These providers receive limited technical data necessary to deliver the game (session identifiers, stake amounts, game outcomes). They do not receive your full identity data.

Identity Verification Services

CT 9999 may use third-party KYC service providers to assist with identity verification. These providers handle document checking and cross-reference checks. They are contractually bound to use your data only for this purpose and to maintain equivalent security standards to those applied by CT 9999.

Regulatory and Law Enforcement Authorities

CT 9999 may be required to share account information and transaction records with regulatory bodies or law enforcement agencies pursuant to a valid legal request. In such cases CT 9999 cooperates fully and promptly. Where legally permissible, we will notify the affected player of any such request.

6KYC and Identity Verification

CT 9999 is required to verify the identity of players as part of its anti-money laundering obligations and to confirm that players meet the minimum age requirement of 18 years. This process is commonly known as Know Your Customer (KYC).

When CT 9999 requests identity verification, you will typically be asked to provide one of the following documents:

• Pakistani National Identity Card (CNIC) — front and back
• Valid Pakistani Passport (photograph page)
• Pakistani Driving Licence

Documents submitted for KYC are processed securely, accessible only to authorised CT 9999 compliance staff and retained for the period required by applicable regulations (typically 5 years following account closure). Documents are stored in encrypted form and destroyed securely after the retention period expires.

CT 9999 does not use KYC documents for any purpose other than identity verification and regulatory compliance. Your CNIC number, for example, is never used in marketing databases or shared with advertisers.

When KYC Is Required

CT 9999 may request KYC verification at registration, before processing a withdrawal above a certain threshold, if unusual account activity is detected or if required by an update to regulatory requirements. Failure to complete a KYC request within a reasonable timeframe may result in account restriction until verification is complete.

7Payment Data and PKR Transactions

All CT 9999 transactions are denominated in Pakistani Rupees (PKR). No currency conversion is applied and no foreign exchange data is collected. Payment processing is handled via direct integrations with Pakistani payment providers.

What CT 9999 Stores

For each transaction, CT 9999 records the amount in PKR, the payment method used, the date and time, and a transaction reference number. This data is used for account balance management, dispute resolution and regulatory record-keeping.

What CT 9999 Does Not Store

CT 9999 never stores your full Easypaisa or JazzCash PIN, your bank account login credentials, your Visa/Mastercard CVV number or your full 16-digit card number. Payment credentials are handled entirely by the respective payment provider's secure systems.

8Cookies and Tracking Technologies

CT 9999 uses cookies and similar technologies to operate the platform, remember your preferences and analyse usage. Cookies are small text files placed on your device by the CT 9999 website. They do not contain personal data such as your name or payment information.

Types of Cookies Used

• Essential CookiesRequired — Necessary for the platform to function. These include session management cookies that keep you logged in during a session and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Analytics CookiesOptional — Used to understand how players navigate the CT 9999 platform. Data is aggregated and anonymised — individual browsing behaviour is not stored indefinitely. These cookies help CT 9999 identify pages that are slow to load, navigation paths that are confusing and features that are rarely used.
• Preference CookiesFunctional — Remember your platform settings such as language preference, game display options and responsible gaming configurations between sessions.

Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent you from logging in to your CT 9999 account. CT 9999 does not use third-party advertising cookies or cross-site tracking technologies.

9Data Security

CT 9999 applies multiple layers of technical and operational security to protect your personal data. The key measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and CT 9999's servers is encrypted in transit. This applies to login, game play, payment processing and all other platform interactions.
• Encrypted Data Storage: Sensitive data including identity documents and financial records is stored in encrypted form on CT 9999's servers. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to player data within CT 9999 is restricted to specific authorised personnel on a need-to-know basis. All internal access is logged and audited.
• Intrusion Detection: CT 9999's infrastructure is monitored continuously for unusual access patterns and potential security incidents.
• Regular Security Reviews: The platform undergoes periodic security assessments to identify and address vulnerabilities.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach affecting your personal information, CT 9999 will notify affected players as promptly as possible and take immediate steps to contain the incident.

Players also have a role in account security. Use a strong, unique password for your CT 9999 account. Do not share your login credentials. Log out of shared devices after each session. Enable any available account security features.

10Data Retention

CT 9999 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable regulations. The general retention periods applied are:

When the retention period expires, data is deleted or anonymised securely. CT 9999 does not retain data indefinitely "just in case." If you request account deletion, your data will be erased within 30 days subject to any regulatory retention obligations that require CT 9999 to keep specific records for a defined period.

11Your Rights Over Your Data

As a CT 9999 player, you have the following rights over your personal data. To exercise any of these rights, contact support@ct9999.biz with the subject line "Data Rights Request":

All data rights requests will be acknowledged within 5 business days. CT 9999 may request identity verification before fulfilling a data request to ensure data is not disclosed to the wrong person. Requests are processed free of charge unless they are clearly unfounded or excessive.

12Children and Underage Players

CT 9999 is strictly for players aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If we discover that a player has provided false information about their age to register an account, the account will be closed immediately, any balance will be returned via the original payment method and the matter may be escalated to the relevant authorities.

If you are a parent or guardian and believe a minor has accessed CT 9999, contact support@ct9999.biz immediately with full details. We treat all such reports with urgency.

CT 9999 strongly recommends that parents and guardians use parental control tools available on mobile devices and home networks to prevent underage access to gambling websites. A number of free tools are available for this purpose.

13Third-Party Links and Services

The CT 9999 website does not contain links to external websites for commercial or advertising purposes. However, certain functional integrations — such as payment provider interfaces — may involve leaving the CT 9999 environment temporarily. CT 9999 is not responsible for the privacy practices of third-party payment providers once you are operating within their own interface.

We recommend reviewing the privacy policies of Easypaisa, JazzCash, NayaPay, SadaPay and your bank independently to understand how they handle your data during payment transactions.

14Changes to This Privacy Policy

CT 9999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable regulations or improvements to how we communicate our privacy practices. Material changes — those that significantly affect how your data is used or your rights as a player — will be communicated to registered players via email and/or a platform notification at least 14 days before they take effect.

Minor updates, such as clarifications or corrections that do not change the substantive privacy practices described in this policy, may be made without prior notice. The "Last Updated" date at the top of this page will always reflect when the policy was most recently changed.

Continued use of CT 9999 after the effective date of any policy change constitutes acceptance of the revised Privacy Policy. If you do not agree with a proposed change, you may request account closure before the effective date — your real-money balance will be paid out in full.

15Contact CT 9999 About Privacy

If you have a question about this Privacy Policy, wish to exercise a data right or want to raise a privacy concern, the CT 9999 support team is available around the clock:

• Email (preferred for data requests): support@ct9999.biz — use the subject line "Privacy / Data Rights Request"
• Live Chat: Available after logging in to your account at ct9999.biz
• Response time: Privacy-related queries are prioritised and typically receive a substantive response within 2 business days. Full data subject access requests are completed within 30 days.

For information about responsible gaming tools available on the CT 9999 platform, visit the Responsible Gaming page. For general platform rules including bonus terms, visit Terms and Conditions.