Privacy Policy

1Introduction

This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") describes how 999ct (hereinafter referred to as "the Platform", "we", "us" or "our") collects, uses, stores, processes and protects the personal data of individuals who access or use the services available at 999ct.cam (hereinafter referred to as "the User", "you" or "your").

999ct is committed to protecting your privacy and handling your personal data with care, transparency and in accordance with applicable data protection standards. By registering an account, making a deposit or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform as a whole.

2Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other available data.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the operator of the 999ct Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a documented instruction.
• "Consent" means a freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their Personal Data.
• "KYC Data" means identity and address verification documents submitted during the Know Your Customer verification process.
• "Cookie" means a small text file placed on your device by a website that stores session or preference information.
• "Platform" refers to the 999ct website, any associated mobile-optimised interface and any application through which the services are accessed.

3Data We Collect

999ct collects only the Personal Data that is necessary for the purposes described in this Policy. The categories of data we collect include the following:

3.1 Registration Data

When you create an account, we collect:

• Full name;
• Date of birth (for age verification purposes);
• Email address;
• Username and password (password is stored in hashed form);
• Country and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar);
• Mobile phone number (where provided).

3.2 KYC Verification Data

To comply with identity verification and anti-money laundering requirements, we may collect:

• Government-issued photo identity documents (e.g., CNIC, passport or driving licence);
• Proof of residential address (e.g., utility bill, bank statement);
• Proof of payment method ownership (e.g., bank statement, mobile wallet screenshot);
• Facial verification data where required by applicable verification procedures.

3.3 Financial Data

In connection with deposits and withdrawals, we collect:

• Payment method details (e.g., bank account reference, mobile wallet identifier — references to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are contextual and do not imply those institutions process or endorse transactions on this Platform);
• Transaction amounts, timestamps and reference numbers;
• PKR (Pakistani Rupee) balance records associated with your account.

3.4 Gaming Activity Data

• Betting history, game session records, wager amounts and outcomes;
• Bonus claims and wagering progress;
• Responsible gambling tool settings (deposit limits, session timers, self-exclusion status).

3.5 Technical and Device Data

• IP address at time of login and account activity;
• Device type, operating system and browser information;
• Session logs and access timestamps;
• Geolocation data (country/region level, as derived from IP address).

3.6 Communications Data

• Support tickets, live chat transcripts and email correspondence submitted to or received from the Platform;
• Survey responses and feedback submitted voluntarily by the User.

4How We Collect Data

999ct collects Personal Data through the following channels:

4.1 Directly from You

The majority of your Personal Data is collected directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team or participate in any promotion or survey. You are under no obligation to provide Personal Data to 999ct; however, failure to provide required data may prevent us from delivering certain services, including account registration and withdrawal processing.

4.2 Automatically Through Platform Use

When you access and use the Platform, certain technical data is collected automatically through server logs, cookies and similar technologies. This includes IP address, device information, session duration and navigation patterns within the Platform. See Section 8 (Cookies & Tracking) for further detail.

4.3 From Third Parties

In certain circumstances, we may receive Personal Data about you from third-party service providers engaged for the purposes of identity verification (KYC), fraud detection or payment processing. Where we receive data from third parties, we ensure that those parties are subject to appropriate data-sharing arrangements.

5Data Processing

999ct processes your Personal Data for the following purposes:

• Account Management: To create, maintain and administer your 999ct account, including processing registration data and maintaining accurate account records.
• Service Delivery: To provide access to casino games, sports betting markets and all other features of the Platform.
• Identity Verification (KYC/AML): To verify your identity and age, comply with anti-money laundering obligations and prevent fraudulent activity.
• Financial Processing: To process deposit and withdrawal transactions and maintain accurate financial records.
• Responsible Gambling: To monitor gaming activity patterns that may indicate problematic behaviour and to apply responsible gambling tools as configured by you or as required under operator policy.
• Customer Support: To respond to your support queries, resolve disputes and maintain records of communications for quality assurance purposes.
• Security and Fraud Prevention: To detect, investigate and prevent fraudulent transactions, account takeovers and other security threats.
• Marketing Communications: To send you promotional communications relating to 999ct offers and services, where you have consented to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse usage patterns, performance metrics and user feedback to improve the Platform's features and user experience.
• Legal Compliance: To comply with applicable laws, regulations, court orders and other legal obligations.

6Legal Basis for Processing

Where applicable data protection frameworks require a legal basis for processing, 999ct relies on the following grounds:

• Contractual Necessity: Processing necessary to perform the contract between you and 999ct — including account management, game access and transaction processing.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements — including KYC, AML and record-keeping obligations.
• Legitimate Interests: Processing that serves the legitimate interests of 999ct or third parties, where those interests are not overridden by your fundamental rights — including fraud prevention, platform security and service improvement.
• Consent: Processing based on your freely given, specific and informed consent — including marketing communications and non-essential cookies. You may withdraw consent at any time by contacting our support team or adjusting your account settings.

7Data Sharing

999ct does not sell, rent or trade your Personal Data to any third party for commercial purposes. We may share your Personal Data with the following categories of recipients, strictly for the purposes described in this Policy:

7.1 Service Providers (Data Processors)

We engage third-party service providers to support the operation of the Platform. These include identity verification services, payment processing technology providers, fraud detection systems, cloud hosting providers and customer support platforms. All Data Processors are bound by contractual data-processing agreements and are prohibited from using your data for any purpose other than providing the contracted service.

7.2 Game and Odds Providers

In order to deliver gaming and betting content, certain session data (such as username identifiers and bet amounts) may be transmitted to the third-party studios or odds technology providers that supply the relevant game or market. This data is used solely for the purpose of game delivery and result settlement.

7.3 Regulatory and Legal Authorities

We may disclose Personal Data to competent regulatory bodies, law enforcement agencies or courts where required to do so by applicable law, court order or as necessary to protect the legal rights of 999ct or third parties. We will not share more data than is strictly necessary for the purpose of any such disclosure.

7.4 Corporate Transactions

In the event of a merger, acquisition, asset sale or restructuring of the operator business, Personal Data held by 999ct may be transferred to the relevant successor entity. Users will be notified of any material change in data controllership arising from such an event.

8Cookies & Tracking Technologies

999ct uses cookies and similar tracking technologies to operate the Platform, maintain user sessions, personalise your experience and gather analytical data on how the Platform is used. By continuing to use the Platform, you consent to the use of cookies as described in this section.

8.1 Types of Cookies Used

• Essential Cookies: Necessary for the Platform to function correctly. These cannot be disabled without disrupting core functionality, including session authentication and security features.
• Functional Cookies: Used to remember your preferences — such as language settings or preferred game category — to improve your experience on return visits.
• Analytical Cookies: Used to collect aggregated statistical data about how users interact with the Platform, helping us improve performance and usability. This data does not identify individual users.
• Marketing Cookies: Used to deliver relevant promotional content to users who have opted into marketing communications. These may track visits across sessions for retargeting purposes.

8.2 Managing Cookies

You may control and manage cookies through your browser settings. Most modern browsers allow you to view, block or delete cookies. Please note that disabling essential cookies may prevent parts of the Platform from functioning correctly. Instructions for managing cookies are available in your browser's help documentation.

9Data Retention

999ct retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulatory obligations. The retention periods applicable to each category of data are set out in the table in Section 3 of this Policy.

KYC and financial records are subject to minimum statutory retention periods — typically a minimum of five years following the conclusion of the relevant account or transaction — in order to satisfy anti-money laundering and financial crime prevention obligations. These retention obligations apply regardless of whether the account remains active.

Upon the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be used to identify any individual.

10Data Security

999ct implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive data, including hashed password storage;
• Access controls limiting internal access to Personal Data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of Platform infrastructure;
• Staff training on data protection obligations and security awareness.

While 999ct takes reasonable precautions to protect your data, no digital transmission or storage system is entirely immune from risk. You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact our support team immediately.

11User Rights

Subject to applicable data protection law, you may have the following rights in relation to the Personal Data that 999ct holds about you. To exercise any of these rights, please contact us using the details provided in Section 15 (Contact Us).

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and to receive information about how it is being processed.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal or regulatory retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your Personal Data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing your data for that purpose promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.

We will respond to all legitimate data subject requests within a reasonable period and, where applicable, within the timeframes required by law. We may need to verify your identity before processing any request.

12International Data Transfers

As an international online platform, 999ct may transfer your Personal Data to countries other than your country of residence for processing and storage purposes. Such transfers may occur, for example, where our hosting infrastructure, third-party service providers or Data Processors are located outside Pakistan.

Where Personal Data is transferred internationally, 999ct takes reasonable steps to ensure that appropriate safeguards are in place — such as contractual data-processing agreements incorporating standard data protection clauses — to maintain a level of protection consistent with the principles set out in this Policy.

13Minors

The 999ct Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect Personal Data from individuals below the applicable minimum age.

If we become aware that Personal Data has been collected from a person below the applicable minimum age, we will take immediate steps to delete that data and close the associated account. Age verification is carried out as part of the KYC process, and users may be required to provide documentary proof of age at any time.

If you are a parent or guardian and you believe that a minor in your care has registered on 999ct, please contact our support team immediately.

14Changes to This Privacy Policy

999ct reserves the right to update or amend this Privacy Policy at any time. The "Last Updated" date at the top of this page reflects the most recent revision. Where changes are material — for example, changes to the categories of data we collect or to our data-sharing practices — we will take reasonable steps to notify registered users, such as displaying a prominent notice on the Platform or sending an email to the registered address.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the Platform and, if applicable, request the closure of your account and deletion of your data.

15Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your Personal Data is being handled by 999ct, please contact us through the following channels:

• Live Chat: Available directly within the Platform, 24 hours a day, 7 days a week. Recommended for urgent queries.
• Help Centre: Accessible through the Platform's support section for self-service guidance and ticket submission.
• Email: [email protected] — for formal data subject requests and written correspondence. Please include your registered username and a clear description of your request. Do not include passwords or financial credentials in email communications.

We will acknowledge receipt of all data subject requests within a reasonable time and aim to provide a substantive response as promptly as the nature of the request allows.