CT99 Privacy Policy – How We Protect Your Data

1 What Data We Collect

CT99 collects personal data in the following categories:

Account Registration Data

• Full name as it appears on your official identification
• Date of birth (to verify you are 18 or above)
• Email address
• Phone number
• Username and password (password is stored in encrypted, hashed form — never in plain text)
• Country and city of residence

Identity Verification Data

• Government-issued identification document (such as CNIC, passport or driving licence) — requested when your account reaches verification thresholds or when you request a withdrawal
• Proof of address documentation, where required
• Selfie or liveness verification image, in cases where document verification requires it

Payment and Transaction Data

• JazzCash or Easypaisa mobile wallet number (or other payment method identifier)
• Transaction amounts in PKR, timestamps and transaction IDs
• Deposit and withdrawal history
• Payment method type used for each transaction

Platform Usage Data

• Games played, bet amounts, session duration and game outcomes
• Betting history across all categories including Cricket, PSL, Slots, Fish Games and Live Casino
• Promotional offers claimed and wagering progress
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

Technical and Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system version and browser or app version
• Session identifiers and cookie data (see Section 6)
• Connection type (mobile data or Wi-Fi) — used to optimise streaming quality for Live Casino

Communications Data

• Support chat transcripts and email correspondence with CT99's support team
• Survey responses and feedback submitted through the platform
• Marketing communication preferences and opt-in/opt-out records

2 How We Collect It

CT99 collects personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support or respond to a promotion.
• Automatically during platform use — when you log in, play a game, place a bet or navigate the CT99 website or Android app. Technical data including IP address, device information and session identifiers are collected automatically.
• From payment processors — when a PKR transaction is initiated through JazzCash, Easypaisa, Raast or another supported method, the payment processor shares confirmation data (transaction ID, amount, status) with CT99 to credit your account accurately.
• From identity verification providers — if CT99 uses a third-party service to verify your CNIC or other identification, that service will return a verification result to CT99. The underlying document image may be retained by the verification provider under their own policy.
• Cookies and tracking technologies — the CT99 website uses cookies and similar technologies to maintain session state, remember preferences and analyse how the platform is used. See Section 6 for full details.

3 Why We Use Your Data

CT99 uses the personal data we collect for the following specific purposes:

CT99 does not use your personal data for any purpose not listed above without first informing you and, where required, obtaining your consent.

4 Who We Share Data With

CT99 does not sell your personal data. We may share specific data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners and card networks receive the data needed to process your PKR deposit or withdrawal. Each processor operates under their own privacy and security standards.
• Identity verification providers: Where CT99 uses a third-party service to verify your CNIC or other documentation, that provider receives your identification data to complete the verification check and returns a result to CT99.
• Cloud infrastructure and hosting providers: CT99's platform data is stored and processed on secure cloud infrastructure. These providers act as data processors under our instruction and are bound by data processing agreements.
• Fraud detection and security services: To identify suspicious activity, bot use and multi-accounting, CT99 uses specialist fraud detection tools that process technical and behavioural data from your account sessions.
• Game providers: When you play a third-party game on CT99, a game session identifier may be shared with the game provider to initialise and record the game session. Full personal details are not passed to game providers.
• Marketing and analytics platforms: Aggregated, anonymised analytics data may be shared with analytics tools to understand overall platform usage. No personally identifiable information is included in these analytics exports.
• Legal and regulatory obligations: CT99 may disclose personal data if required to do so by a valid legal process, court order or other binding legal obligation. We will notify you of such disclosures where we are legally permitted to do so.

5 Payment Data and PKR Transactions

All financial transactions on CT99 are conducted in Pakistani Rupees (PKR). CT99 takes particular care with payment data given its sensitive nature. The following specific practices apply to payment information:

• CT99 does not store full card numbers or complete JazzCash/Easypaisa credentials on its own servers. Payment authentication is handled directly within the respective payment platform's secure interface.
• Transaction records — including amounts, timestamps, payment method type and transaction IDs — are retained for account management, withdrawal verification and fraud prevention.
• Withdrawal requests require the destination payment account to match the name and details on your CT99 account. This matching process requires CT99 to compare your registered account details with your payment account identifier.
• For large deposits, CT99 may request evidence of the source of funds as part of standard account security. This information is handled confidentially and used only for the purpose of the security review.
• CT99 does not share your full transaction history with any third party except where required by a legal obligation or to directly resolve a payment dispute you have raised.

6 Cookies and Tracking

The CT99 website uses cookies and similar technologies to provide a functional, personalised experience. Here is a breakdown of the types of cookies in use:

• Essential cookies: Required for the platform to function. These include your login session cookie, CSRF protection tokens and language preference storage. You cannot opt out of essential cookies without losing access to core platform features.
• Functional cookies: Remember your preferences within the platform — such as your preferred game view, notification settings and last-used deposit method. These improve convenience but are not essential.
• Analytics cookies: Collect anonymised data on how players navigate the platform — which pages are visited, how long sessions last and which features are used most. This data helps CT99 improve the platform. No personally identifiable information is included.
• Security cookies: Used to detect and prevent fraudulent activity, including bot sessions, repeated failed login attempts and suspicious navigation patterns.

The CT99 Android app uses equivalent local storage and session tokens in place of browser cookies. These function in the same way and are subject to the same data handling practices described above.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to play games, deposit or withdraw — but some preference-based features may not function as expected.

7 How We Protect Your Data

CT99 implements layered technical and organisational security measures to protect your personal data:

• TLS encryption in transit: All communication between your browser or the CT99 app and our servers is encrypted using TLS. This applies to login, account management, game sessions and payment flows.
• Encrypted storage: Sensitive data including passwords (stored as salted hashes), identity documents and payment references are encrypted at rest.
• Access controls: Access to personal data within CT99 is restricted to staff who need it for their specific role. Access is logged and regularly reviewed.
• Two-factor authentication: CT99 supports two-factor authentication for player accounts. We strongly encourage all players to enable this within their account security settings.
• Fraud monitoring: Automated systems continuously monitor account activity for signs of unauthorised access, credential stuffing and other security threats.
• Regular security reviews: CT99 conducts periodic reviews of its security infrastructure to identify and address potential vulnerabilities.

While CT99 takes all reasonable precautions, no online platform can guarantee absolute security. Players are also responsible for keeping their own login credentials secure. If you suspect your account has been compromised, contact CT99 support immediately via live chat.

8 How Long We Keep Your Data

CT99 retains personal data for as long as it is genuinely needed. The following general retention guidelines apply:

• Active account data: Retained for the full lifetime of your CT99 account and for a reasonable period after account closure — typically up to five years — to handle any disputes, fraud investigations or legal obligations that may arise.
• Transaction and payment records: Retained for a minimum of five years from the date of the transaction, consistent with standard financial record-keeping practices.
• Identity verification documents: Retained for the period required to support account verification and any related investigations. Documents are deleted once retention obligations have been met.
• Support communications: Chat transcripts and email correspondence are retained for as long as they are relevant to an open issue, and for a reasonable period thereafter for quality assurance and dispute reference purposes.
• Marketing preferences: Opt-in and opt-out records are retained for as long as your account is active and for a period after closure to demonstrate compliance with your stated preferences.

When data is no longer required, it is securely deleted or anonymised so that it cannot be linked back to you as an individual.

9 Your Rights and Choices

As a CT99 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact CT99 support via live chat or email at [email protected]:

10 Children and Minors

CT99 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is part of the account registration process and is enforced before any financial transactions or real-money gaming can take place.

If CT99 discovers that personal data has been collected from a person under 18 — whether through a misrepresentation during registration or any other circumstance — the account will be immediately suspended, all funds held pending review and the data handled in accordance with the outcome of that review.

If you are a parent or guardian and believe your child may have registered a CT99 account, contact support immediately via live chat or at [email protected] and we will investigate and take appropriate action promptly.

11 Changes to This Policy

CT99 may update this Privacy Policy from time to time. Updates will be reflected by a revised "Last updated" date at the top of this page. For significant changes to how we handle personal data, CT99 may also notify players via email or an in-platform notification, depending on the nature of the change.

We encourage you to review this page periodically, especially if you are about to share additional personal data with CT99 — for example, when completing identity verification for the first time or updating your payment method.

Continued use of the CT99 platform after a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with an updated policy, you should discontinue use of the platform and contact support to discuss your account closure options.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how CT99 has handled your personal information, please get in touch:

• Live Chat: Available 24/7 within the CT99 website and Android app — fastest response channel for urgent concerns.
• Email: [email protected] — use this for data access requests, correction requests or detailed privacy queries. Include "Privacy Request" in the subject line to ensure it is routed correctly.
• FAQ: ct99.vin/faq — covers common questions about account data, verification and payment handling.

CT99 aims to acknowledge all privacy-related requests within 48 hours and to resolve them within a reasonable timeframe. Complex data requests may take longer, but we will keep you informed of progress throughout.

This Privacy Policy should be read alongside the Terms and Conditions and the Responsible Gaming page, both of which contain additional information relevant to your use of the CT99 platform.