Privacy Policy — ct9999 Data Practices

This Privacy Policy ("Policy") is published by ct9999 ("ct9999", "we", "us", "our"), the operator of the online gaming platform accessible at https://ct9999.cam and all associated sub-domains and interfaces (collectively, the "Platform"). This Policy applies to all individuals who access or use the Platform, whether as registered account holders or as visitors who have not yet registered ("you", "your", "the User").

We take our obligations regarding your personal data seriously. This Policy describes, in clear and accessible language, what data we collect, why we collect it, how we use and share it, how long we retain it and what rights you have in respect of it.

By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle personal data as described here, you should stop using the Platform and, if applicable, close your account by contacting our support team.

The following terms have the meanings set out below throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, email address, account number, device identifier, IP address or one or more factors specific to their physical, economic or online identity.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is ct9999.
• "Data Processor" — a natural or legal person that processes Personal Data on behalf of the Data Controller under a written agreement, without independent authority over that data.
• "KYC" — Know Your Customer; the identity and age verification process conducted on users as required by the operator's licensing obligations.
• "Cookies" — small text files placed on your device by the Platform to store session information, preferences and analytics data.
• "Platform" — the ct9999 website, associated mobile interfaces and any related applications operated by ct9999.

ct9999 acts as the Data Controller in respect of the Personal Data it collects directly from users of the Platform. Where ct9999 engages third-party service providers to carry out specific processing activities (such as payment processing, identity verification or analytics), those providers act as Data Processors under contractual terms that require them to handle data securely and only for the specified purpose.

ct9999 does not exercise control over the independent data-handling practices of third-party payment providers, financial institutions or banking networks whose names are referenced on the Platform for contextual purposes. References to payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah and others describe services that users may be familiar with — they do not indicate that those providers are Data Processors engaged by ct9999 or that they endorse or support ct9999's operations.

ct9999 collects Personal Data through a number of channels, including registration forms, identity verification submissions, payment transactions, live chat interactions, Help Center communications and automated technical data collection. The categories of data we collect are described in the table below.

ct9999 processes Personal Data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between ct9999 and the User — including account management, game access, transaction processing and KYC verification required to honour the Terms & Conditions.
• Legal Obligation: Processing required for ct9999 to comply with applicable legal obligations, including anti-money laundering (AML) requirements, age verification, fraud prevention and licensing conditions imposed by the operator's regulatory authority.
• Legitimate Interests: Processing for purposes that serve ct9999's legitimate business interests, provided those interests are not overridden by the User's privacy rights — including platform security, fraud detection, internal analytics, responsible gambling monitoring and system performance.
• Consent: Where ct9999 relies on your consent as the legal basis for processing (for example, sending promotional communications), you may withdraw that consent at any time by updating your account marketing preferences or contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

ct9999 uses the Personal Data it collects for the following purposes:

Platform Operations

• Creating, maintaining and managing your account;
• Authenticating your identity at login and verifying eligibility requirements;
• Processing deposit and withdrawal transactions;
• Providing access to casino games, sports betting markets and other Services;
• Crediting bonuses and tracking bonus wagering progress;
• Managing the loyalty programme and associated tier benefits.

Compliance & Risk Management

• Conducting KYC and AML checks in accordance with the operator's licensing obligations;
• Monitoring transactions for indicators of financial crime, fraud or suspicious activity;
• Verifying that users meet the minimum age requirement (18+ or higher as required) before enabling full account access;
• Implementing responsible gambling tools, including deposit limit enforcement and self-exclusion processing;
• Complying with legal hold obligations in connection with ongoing investigations or litigation.

Customer Support

• Responding to support queries submitted in English or Urdu through available channels;
• Resolving disputes regarding bets, transactions or account issues;
• Maintaining records of support interactions for quality assurance and training purposes.

Communications & Marketing

• Sending transactional communications relating to your account (deposit confirmations, withdrawal updates, KYC requests) — these are not optional and do not require consent;
• Sending promotional communications about bonuses, new game releases and platform features — only where you have opted in or where legitimate interest applies and an opt-out mechanism is provided.

Analytics & Platform Improvement

• Analysing aggregated gameplay and usage data to improve platform performance, game selection and user experience;
• Monitoring responsible gambling indicators to identify users who may benefit from proactive outreach or additional safeguards.

ct9999 does not sell, rent, trade or otherwise transfer your Personal Data to third parties for their own commercial purposes. We share data only in the following circumstances and only to the extent strictly necessary:

• KYC & Identity Verification Providers: We engage specialist third-party identity verification services to process document submissions and confirm your identity and age. These providers act as Data Processors and are bound by contractual data processing agreements;
• Payment Processing Partners: Transaction data is shared with payment processors to facilitate deposits and withdrawals. These are independent service providers — their data practices are governed by their own privacy policies and applicable financial regulation;
• Game Studio Providers: Gameplay session data (such as bets placed, game outcomes and session duration) may be shared with the relevant game studio to facilitate play, resolve disputes and generate game statistics. Studio providers do not receive unnecessary personal identity data;
• Technology & Infrastructure Providers: Hosting, cloud storage, analytics and security service providers may have access to data to the extent required to deliver their services under appropriate contractual safeguards;
• Legal & Regulatory Disclosure: ct9999 will disclose Personal Data to competent regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order, or in connection with AML or fraud investigation obligations. We will notify users of such disclosures where legally permitted to do so;
• Corporate Transactions: In the event of a merger, acquisition, restructuring or sale of assets involving ct9999, Personal Data held by ct9999 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

ct9999 retains Personal Data for no longer than is necessary for the purposes for which it was collected, taking into account the nature of the data, the legal basis for processing and any applicable statutory retention requirements. The following general retention guidelines apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with ct9999's internal data lifecycle management procedures.

ct9999 uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, authentication tokens and security features. These cannot be disabled without significantly impairing Platform functionality;
• Performance & Analytics Cookies: Used to collect anonymised or pseudonymised data about how users interact with the Platform — including pages visited, session duration and error reports — to help us improve platform performance;
• Functional Cookies: Store your preferences such as language settings, displayed currency (e.g., PKR) and responsible gambling limit settings to personalise your experience across sessions;
• Marketing Cookies: Used, where applicable, to track the effectiveness of promotional campaigns. These are only deployed with your consent or where a legitimate interest basis exists.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies or receive notification before a cookie is placed. Note that disabling strictly necessary cookies may result in certain Platform features not functioning as expected.

ct9999 operates on a global infrastructure and may transfer your Personal Data to, or process it in, countries outside of your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur, ct9999 takes steps to ensure that appropriate safeguards are in place, which may include:

• Contractual clauses between ct9999 and the relevant data recipient that impose obligations equivalent to internationally recognised data protection standards;
• Ensuring that third-party service providers engaged outside of your jurisdiction are subject to binding data processing agreements;
• Limiting the scope and volume of data transferred to what is strictly necessary for the purpose of the transfer.

By using the Platform, you acknowledge and consent to the potential transfer of your Personal Data to other jurisdictions as described in this section, where necessary for ct9999 to deliver the Services.

ct9999 implements a range of technical and organisational security measures designed to protect your Personal Data from unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the Platform is encrypted using industry-standard transport layer security;
• Access Controls: Access to personal data is restricted to authorised personnel whose roles require it, using role-based access permissions and audit logging;
• Data Minimisation: Payment method details (such as card numbers) are stored in masked or tokenised form where technically possible. Full payment credentials are not retained by ct9999;
• Intrusion Detection: The Platform employs monitoring systems designed to detect unusual access patterns, suspicious login attempts and other security anomalies;
• Vendor Security Standards: Third-party service providers engaged by ct9999 are assessed for security compliance and are required to maintain appropriate technical safeguards under their contractual agreements with ct9999.

Subject to applicable law and, where relevant, the operator's licensing obligations, you have the following rights in respect of the Personal Data that ct9999 holds about you. To exercise any of these rights, please contact us through the support channel referenced in Section 16.

ct9999 will respond to data rights requests within a reasonable period, which will not exceed 30 days in most cases. Where a request is complex or involves a large volume of data, we may extend this period and will notify you accordingly. There is no charge for exercising your data rights in standard circumstances; however, manifestly unfounded or excessive requests may be subject to a reasonable administrative fee.

The Platform is strictly intended for adults who are at least 18 years of age, or the higher minimum age required by the operator's licensing jurisdiction. ct9999 does not knowingly collect Personal Data from individuals under the applicable minimum age. Age verification is conducted as part of the KYC process, and accounts found to belong to minors will be closed immediately with any Real Funds balance returned to the source payment method, subject to verification.

If a parent or guardian becomes aware that a minor has provided Personal Data to ct9999, they are asked to contact us immediately through the support channel set out in Section 16. Upon receiving such a notification, ct9999 will take reasonable steps to delete the relevant data and close the associated account.

The Platform may contain references to third-party services, organisations or resources — for example, mentions of payment brands such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These references are for informational and contextual purposes only. ct9999 does not control the websites, data practices or privacy policies of third-party organisations and accepts no responsibility for how they handle personal data.

Users who access third-party services — whether through their own choice or in connection with funding their ct9999 account — do so subject to the privacy policies and terms of those third parties. We encourage users to review the applicable third-party privacy documentation before providing data to any external service.

ct9999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. All updates will be published on this page with a revised "Last Updated" date. Where a material change is made to how we process your Personal Data, we will take reasonable steps to notify you — which may include a notice displayed upon login or an email communication.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of those changes. If you do not agree with any changes, you should stop using the Platform and contact us to discuss your options, including account closure.

If you have any questions about this Privacy Policy, wish to exercise a data right, or need to report a potential data protection concern, please contact ct9999's support team using the details below. All data-related communications should clearly identify the subject matter in the message to ensure prompt handling.

For questions about your account terms and gameplay rules, please refer to our Terms & Conditions. For questions about responsible gambling tools, please visit our Responsible Gambling page.