cct999 Privacy Policy

cct999 ("cct999", "we", "us", "our") operates the online casino and sportsbook platform accessible at cct999.net, serving English-speaking players across Pakistan, including users in Karachi, Lahore, Islamabad, Faisalabad, and beyond. We are committed to protecting the personal information of every player who registers and plays with us.

This Privacy Policy describes how cct999 collects, uses, stores, shares, and protects personal data in connection with the operation of our platform and services. It applies to all visitors, registered players, and former players of cct999.net.

By registering for a cct999 account, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you should not register for or use cct999 services.

This Privacy Policy should be read alongside the cct999 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and cct999.

cct999 is the data controller responsible for the personal data collected and processed through cct999.net and all associated services. As data controller, cct999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws.

cct999 operates under an internationally recognised online gaming licence. Where data processing is carried out by third-party service providers on our behalf, those providers act as data processors under binding data processing agreements that require them to implement appropriate technical and organisational security measures.

cct999 collects personal data from you in the following categories:

cct999 does not intentionally collect sensitive special-category personal data (such as racial or ethnic origin, health data, or biometric data) except where required by law or regulation in the context of identity verification or responsible gaming obligations.

cct999 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, process KYC documentation, and manage your ongoing relationship with cct999.
• Service delivery: To provide access to casino games, sports betting (including PSL and cricket markets), live dealer tables, poker, slots, and other platform features.
• Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank, and to maintain accurate financial records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other prohibited activities.
• Legal compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) regulations, responsible gaming requirements, and any other applicable legal or regulatory obligations.
• Customer support: To respond to your enquiries, process complaints, and maintain records of communications for quality assurance and dispute resolution.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, apply self-exclusion measures, and enforce deposit limits in accordance with your preferences and cct999's responsible gaming obligations.
• Platform improvement: To analyse gameplay and technical data for the purpose of improving platform performance, game selection, and user experience.
• Marketing (where consented): To send promotional emails, SMS messages, and on-platform notifications about bonuses, new games, cricket betting markets, and other offers — only where you have opted in.

cct999 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to operate your account, deliver services, and process payments in accordance with the cct999 Terms & Conditions.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, licensing conditions, and any other applicable laws.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing of your data for marketing communications, which relies on your explicit opt-in consent and can be withdrawn at any time.

cct999 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment service providers: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposits and withdrawals. These providers are regulated financial institutions operating under their own data protection obligations.
• KYC and identity verification providers: Regulated third-party verification services receive identity documents and data for the purpose of completing mandatory age and identity checks. These providers operate under strict data processing agreements.
• Fraud prevention and AML services: Anonymised or pseudonymised transaction and behavioural data may be shared with fraud detection platforms to identify and prevent financial crime.
• Game software providers: Where you play games hosted by third-party studios (e.g., live dealer games), your player ID and gameplay data may be accessible to that provider solely for the purpose of delivering the game service.
• Regulatory and law enforcement authorities: cct999 is required by its licensing conditions and applicable law to report certain transactions and activities to relevant authorities. This includes suspicious transaction reports under AML obligations.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of cct999's business, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

cct999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your account's active status, plus a minimum of 5 years following account closure to comply with AML and gaming regulatory record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years following the end of the business relationship, in accordance with anti-money laundering legislation.
• Financial transaction records: Retained for a minimum of 5 years following the date of the transaction.
• Gameplay records: Retained for a minimum of 3 years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for 3 years following the closure of the relevant support ticket or complaint.
• Marketing consent records: Retained for the duration of your consent or until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.
• Technical and server log data: Retained for a maximum of 12 months unless required for an ongoing investigation or legal proceeding.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction.

cct999 implements technical and organisational security measures appropriate to the nature of the data we process and the risks associated with its processing. These measures include:

• 256-bit SSL/TLS encryption across all data transmitted between your device and the cct999 platform, including during registration, login, deposits, withdrawals, and gameplay.
• Password hashing using industry-standard one-way cryptographic algorithms. cct999 staff cannot view or recover your password in plaintext under any circumstances.
• Two-factor authentication (2FA) available to all players from the account security settings panel, providing an additional layer of protection against unauthorised access.
• Access controls ensuring that cct999 staff can only access player data on a strict need-to-know basis, commensurate with their job function. Access is logged and auditable.
• Regular security assessments and penetration testing of the cct999 platform infrastructure to identify and remediate vulnerabilities.
• Segregation of player funds from cct999 operational funds, reducing financial data exposure in any security incident.

Despite cct999's commitment to data security, no system connected to the internet is entirely immune from risk. cct999 strongly encourages all players to use a strong, unique password for their cct999 account and to enable 2FA. If you suspect your account has been compromised, contact cct999 support immediately via live chat.

cct999 uses cookies and similar tracking technologies on cct999.net to enhance platform functionality, maintain session state, and analyse usage patterns. A cookie is a small text file stored on your device by your browser when you visit a website.

cct999 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session cookies that maintain your login state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without disrupting platform functionality.
• Functional Cookies: Store your preferences, such as language settings, preferred game lobby view, and deposit limit reminder preferences. These cookies are set based on your account settings and cannot be disabled while you are logged in.
• Analytics Cookies: Used to understand how players navigate the platform — which games are most popular, how long sessions last, and which features are most used. This data is aggregated and anonymised and is used solely to improve the cct999 experience. cct999 uses first-party analytics only and does not use Google Analytics or similar third-party tracking services.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and multi-accounting. These cookies are essential to platform integrity and cannot be disabled.

You can manage or delete cookies via your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your cct999 account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

cct999 is an internationally operating platform. In the course of providing its services, personal data may be transferred to, stored in, or processed by systems located outside Pakistan. This includes transfers to the jurisdiction in which cct999 holds its gaming licence, as well as to data centres and third-party processors that may operate in multiple countries.

Where personal data is transferred outside Pakistan, cct999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or higher than the protections afforded under applicable Pakistani data protection law. These safeguards include:

• Contractual data protection clauses binding all recipient entities to data security and confidentiality obligations consistent with this Privacy Policy.
• Transfer to jurisdictions with regulatory frameworks recognised as providing adequate data protection.
• Technical controls ensuring that data transmitted internationally is encrypted in transit and stored securely at the destination.

As a cct999 player, you have the following rights with respect to your personal data. cct999 will respond to all valid data rights requests within 30 days of receipt. Requests should be submitted via live chat or email to [email protected], clearly identifying yourself and the specific right you wish to exercise.

Please note that certain rights may be limited where cct999 is required to retain or process data to comply with legal obligations — for example, AML record-keeping requirements may prevent immediate erasure of transaction data even where a deletion request is received.

cct999 operates a strict minimum age policy of 21 years. cct999 does not knowingly collect personal data from individuals under the age of 21. Registration for a cct999 account is not permitted for anyone under 21 years of age.

cct999 conducts age verification checks at the point of registration and again prior to the processing of the first withdrawal. Where age verification cannot be satisfactorily completed, the account will be suspended and any balance held will be reviewed in accordance with applicable regulations.

If cct999 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately closed, the data will be deleted in accordance with applicable retention requirements, and the matter will be reported to relevant authorities where required.

Parents and guardians who believe a minor may have accessed cct999 services using falsified credentials should contact cct999 support immediately via live chat or email so that the account can be investigated and closed without delay.

cct999 may send you promotional communications about bonuses, new games, cricket betting markets, PSL promotions, cashback offers, and other cct999 products and services — but only where you have given explicit consent to receive such communications during the registration process or subsequently via your account settings.

Marketing communications may be delivered via the following channels, subject to your consent preferences:

• Email: Promotional newsletters, bonus announcements, and event notifications sent to your registered email address.
• SMS: Short promotional alerts sent to your registered Pakistani mobile number (e.g., JazzCash-linked numbers).
• On-platform notifications: In-account banners and pop-ups displayed when you are logged in to your cct999 account.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in the cct999 account settings panel;
• Clicking the unsubscribe link included in every marketing email; or
• Contacting cct999 support via live chat or at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent will not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, security alerts, and account status updates — these are sent regardless of your marketing preferences as they are necessary for the operation of your account.

cct999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform services. The most current version of this Privacy Policy will always be accessible at cct999.net/privacy-policy.

Where a change to this Privacy Policy is material — meaning it affects how your personal data is collected, used, or shared in a way that is meaningfully different from the previous version — cct999 will notify you by sending an email to your registered email address and by displaying a prominent notice within your cct999 account dashboard at next login.

Your continued use of cct999 services following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you should cease using cct999 services and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cct999 processes your personal data, please contact our Data Protection team through any of the following channels:

• Live Chat: 24/7 live chat support is available directly within your cct999 account dashboard. This is the fastest way to reach us — typical response time is under 5 minutes.
• Email: Send your enquiry to [email protected]. Please include "Privacy Policy" or "Data Protection" in the subject line so your message is routed correctly. Typical email response time is under 2 hours.

cct999 is committed to resolving all data protection concerns promptly and transparently. If you are not satisfied with the outcome of your complaint, you may escalate it to the relevant regulatory authority in the jurisdiction under which cct999 holds its operating licence.