CT 999 Privacy Policy — How We Protect Your Data

1. Introduction

CT 999 is committed to being transparent about data. We know that when you hand over your mobile number, CNIC details, or payment information, you are placing a significant amount of trust in us. This Privacy Policy is our commitment to explaining — plainly and without legal jargon where possible — exactly what we do with that information and how we keep it safe.

The Policy covers everyone who visits the CT 999 website, registers an account, uses any CT 999 service including sports betting and live games, contacts our support team, or participates in any CT 999 promotion. It applies whether you access CT 999 from a desktop browser, a mobile browser, or any other device.

This Privacy Policy should be read alongside the CT 999 Terms and Conditions, which set out the broader rules governing your use of the platform.

2. Who We Are

For the purposes of this Privacy Policy, "CT 999", "we", "us", and "our" refers to the operator of the platform accessible at ct999.wine. CT 999 is the data controller responsible for your personal information — meaning we determine the purposes and means by which your data is processed.

Our data protection contact is reachable at support@ct999.wine. If you have any question about this Privacy Policy or about how CT 999 handles your personal data, that is the right place to start.

3. Data We Collect

CT 999 collects only the data that is genuinely necessary to provide, operate, and improve our services. The categories of personal data we collect are set out in the table below.

4. How We Collect Your Data

CT 999 collects your personal data through three main routes:

Information You Give Us Directly

This is the most straightforward category — data you provide when you register a CT 999 account (name, date of birth, mobile number), when you complete identity verification (CNIC details), when you add a payment method, or when you contact our support team. You also provide data when you set responsible gaming limits or make account preference changes.

Automated Data Collection

When you visit the CT 999 website or use any of our services, our systems automatically collect technical and usage data. This includes your IP address, device information, browser type, and how you navigate around CT 999. This data is collected using cookies and similar tracking technologies — see Section 8 for full details on how CT 999 uses cookies.

Data from Third Parties

In certain circumstances CT 999 receives data about you from third parties. Our payment processors confirm the status of your Easypaisa, JazzCash, or bank transfer transactions. Identity verification providers may confirm whether documentation you have submitted is authentic. Fraud detection services may provide risk signals based on your device or network that help CT 999 protect your account against unauthorised access.

5. How We Use Your Data

CT 999 uses your personal data for the following specific purposes. Where a purpose relies on a particular legal basis, that is identified in Section 6.

• Account Management: Creating and maintaining your CT 999 account, processing your registration, and enabling you to log in securely.
• Payment Processing: Processing your deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card — and returning your winnings or withdrawals to your registered payment method.
• Identity Verification: Verifying your age and identity as required by our platform rules and to comply with anti-money laundering obligations. CT 999 is an 18+ platform and verification is not optional.
• Game and Bet Settlement: Recording your bets, calculating outcomes, and settling results — including ball-by-ball cricket and PSL markets, live casino rounds, and esports betting events.
• Fraud Prevention and Security: Detecting and preventing unauthorised account access, duplicate account creation, bonus abuse, and financial fraud. This includes automated risk scoring using technical data.
• Customer Support: Responding to your queries, resolving complaints, processing refunds where applicable, and maintaining a record of support interactions for quality and audit purposes.
• Responsible Gaming: Managing the self-exclusion, deposit limit, loss limit, and cooling-off tools you activate, and monitoring for indicators of problem gambling behaviour in order to intervene where appropriate.
• Platform Improvement: Analysing anonymised usage data to understand how players navigate CT 999, which games and sections are most popular, and where the platform experience can be improved.
• Marketing Communications: Sending you promotional emails and notifications about CT 999 bonuses, new games, and PSL promotions — but only where you have not opted out. See Section 13 for how to manage your marketing preferences.
• Legal Compliance: Fulfilling our obligations under applicable law, including maintaining transaction records for the period required by regulation, responding to lawful requests from authorities, and cooperating with investigations where required.

6. Legal Basis for Processing

CT 999 processes your personal data under the following legal bases:

• Performance of a Contract: The majority of CT 999's data processing — account management, payment processing, bet settlement, and customer support — is necessary to perform the contract you entered into when you registered. Without this processing, CT 999 cannot provide its services to you.
• Legal Obligation: Identity verification, anti-money laundering checks, and maintaining transaction records for defined retention periods are required by law. CT 999 must carry out this processing regardless of your preferences.
• Legitimate Interests: Fraud prevention, platform security, and anonymised usage analytics are carried out on the basis of CT 999's legitimate interest in operating a safe, fair, and efficient platform. These interests do not override your fundamental privacy rights.
• Consent: Marketing communications are sent on the basis of your consent. You may withdraw consent for marketing at any time without affecting other aspects of your CT 999 account.

7. Sharing Your Data

CT 999 does not sell, rent, or trade your personal data. We share your data only in the following limited and specific circumstances:

Payment Processors

CT 999 shares the minimum data necessary with our payment processing partners — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT network banks, and Visa/Mastercard processing partners — to complete your deposit and withdrawal transactions. These partners are themselves bound by data protection obligations.

Identity Verification Providers

To verify your CNIC details and age, CT 999 may share identity documents with a certified identity verification provider. This sharing is strictly limited to the verification purpose and the provider is contractually prohibited from using your data for any other purpose.

Fraud Prevention and Security Services

CT 999 uses third-party fraud detection services that receive technical signals — such as IP address, device fingerprint, and login behaviour patterns — to identify accounts that may be operating in breach of our Terms. Raw personal data such as your name or CNIC number is not shared with these services.

Legal and Regulatory Authorities

Where CT 999 receives a lawful request from a governmental or regulatory authority — including a court order, law enforcement request, or regulatory investigation — we will comply with that request and share the data required. CT 999 will inform you of any such request unless prohibited from doing so by the terms of the request itself.

Business Transfers

In the event that CT 999 is acquired by or merged with another entity, your data may be transferred as part of that transaction. You will be notified in advance of any such transfer that involves a material change to how your data is processed, and you will have the opportunity to delete your account and request erasure of your data before the transfer occurs.

8. Cookies and Tracking Technologies

CT 999 uses cookies and similar technologies to make the platform work correctly and to improve your experience. A cookie is a small text file that is placed on your device when you visit CT 999. Here is how CT 999 uses different types of cookies:

Essential Cookies

These cookies are strictly necessary for CT 999 to function. They maintain your login session, remember your language preferences, and enable the bet slip to function. You cannot disable essential cookies without breaking the CT 999 platform.

Performance and Analytics Cookies

CT 999 uses analytics tools to understand aggregate patterns in how players use the platform — which sports markets are most visited, where players spend the most time, and which pages generate the most support queries. This data is processed in anonymised or aggregated form and is not linked to your individual identity.

Functional Cookies

Functional cookies remember your preferences — for example, your preferred odds format (decimal, fractional, or American) and interface settings — so that CT 999 can provide a more consistent experience across sessions.

You can manage your cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use core CT 999 functions such as placing bets, depositing funds, or accessing your account.

9. Data Security

CT 999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it. These include:

• 256-bit SSL encryption on all connections between your device and the CT 999 servers — your data is never transmitted in readable form.
• Encryption at rest for sensitive stored data including identity documents and financial records.
• Payment tokenisation — CT 999 never stores your raw Easypaisa, JazzCash, or card details. Only a secure reference token is retained.
• Role-based access controls — access to personal data within CT 999 is limited to staff who require it for their specific role. All access is logged and auditable.
• Regular security audits — CT 999's platform undergoes periodic independent security reviews to identify and remediate vulnerabilities.
• Two-factor authentication — available to all CT 999 members and recommended for all accounts, particularly those with high transaction volumes.

Despite these measures, no internet platform can guarantee absolute security. If CT 999 becomes aware of a security breach that is likely to affect your rights or freedoms, we will notify you as quickly as practicable after becoming aware of it.

You also play a role in keeping your CT 999 account secure. Never share your password or OTP with anyone — including people claiming to be CT 999 support. CT 999 will never ask for your password in any communication.

10. Data Retention

CT 999 retains personal data only for as long as necessary for the purpose it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's existence plus a minimum of 5 years after account closure — required to comply with anti-money laundering and financial record-keeping obligations.
• Identity documents: Retained for a minimum of 5 years from the date of verification, or longer if required by a specific regulatory obligation.
• Transaction records: Deposits, withdrawals, and betting records are retained for a minimum of 5 years.
• Support communications: Live chat and email records with CT 999 support are retained for 2 years.
• Technical and usage data: Anonymised usage analytics are retained indefinitely. Raw technical data (IP logs, session data) is retained for up to 12 months.
• Marketing consent records: Records of your marketing preferences are retained for the duration of your account and 2 years after account closure.

When data reaches the end of its retention period, CT 999 securely deletes or anonymises it so that it can no longer be linked to you as an individual.

11. Your Rights Over Your Data

As a CT 999 member you have the following rights in relation to your personal data. To exercise any of these rights, contact CT 999 support at support@ct999.wine with the subject line "Data Rights Request".

CT 999 aims to respond to all verified data rights requests within 30 calendar days. In complex cases, this may be extended to 60 days — you will be informed if an extension is needed. Requests are processed free of charge unless they are manifestly unfounded or excessive.

12. Children's Privacy

CT 999 is strictly an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18. If CT 999 discovers that an account has been registered by a minor, the account will be closed immediately, all associated data will be deleted, and any funds deposited will be returned to the payment method used, minus any applicable verification costs.

If you are a parent or guardian and believe that a minor has registered at CT 999, please contact us immediately at support@ct999.wine with the subject line "Minor Account Concern". CT 999 will investigate and respond within 48 hours.

13. Marketing Communications

CT 999 may send you promotional communications about bonuses, new games, PSL promotions, esports tournaments, and other CT 999 offers. These communications are sent only where you have not opted out of receiving them during registration or subsequently.

You can opt out of CT 999 marketing communications at any time by:

• Using the unsubscribe link included in every marketing email from CT 999.
• Updating your communication preferences in your CT 999 account settings.
• Contacting CT 999 support at support@ct999.wine and requesting removal from the marketing list.

Opting out of marketing will not affect your ability to receive essential service communications — such as withdrawal confirmations, account security alerts, and support responses. These are sent regardless of your marketing preferences because they relate directly to the operation of your CT 999 account.

14. Changes to This Privacy Policy

CT 999 may update this Privacy Policy from time to time. The most current version is always available at ct999.wine/privacy-policy, with the "Last Updated" date displayed at the top. For material changes — those that affect your rights or significantly change how we use your data — CT 999 will notify registered members by email at least 7 days before the change takes effect. Continued use of CT 999 after the effective date of any change constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how CT 999 handles your personal data, please get in touch:

• Email: support@ct999.wine (subject: Privacy Policy Query)
• Live Chat: Available 24/7 inside your CT 999 account — average response time under 2 minutes

CT 999 takes privacy queries seriously and will acknowledge your message within 24 hours of receipt. If you are not satisfied with CT 999's response to a data rights request, you have the right to escalate your complaint to the relevant data protection authority.