Your Privacy Matters at 999ct

This Privacy Policy ("Policy") is published by 999ct ("the Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at 999ct.net. This Policy describes how we collect , use, store, share, and protect the personal information of users ("you", "your", "the player") who access or register on the 999ct Platform.

999ct is committed to maintaining the highest standards of data privacy and information security. We recognise that players across Karachi, Lahore, Islamabad, Faisalabad, and all other cities in Pakistan place significant trust in us when they share their personal data, and we take that responsibility seriously.

By registering an account on the 999ct Platform, accessing our services, or continuing to use the website after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

This Policy should be read in conjunction with our Terms and Conditions, which govern the overall use of the 999ct Platform and are incorporated herein by reference.

999ct collects various categories of personal data depending on how you interact with the Platform. The categories of data we may collect are described in the table below:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless required to fulfil specific responsible gaming obligations (for example, self-exclusion status or problem gambling indicators).

3.1 Directly From You

The majority of personal data we hold is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, respond to surveys, or update your account profile. You are under no obligation to provide this data, but failure to supply certain information may prevent you from accessing specific features of the Platform.

3.2 Automatically Through Technology

When you access the 999ct Platform, our systems automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data helps us understand how players interact with the Platform, detect fraudulent activity, and optimise performance. Please refer to Section 07 for full details of our cookie practices.

3.3 From Third Parties

We may also receive personal data about you from trusted third-party sources, including:

• Identity verification and KYC service providers who confirm the authenticity of documents you submit.
• Payment processors and financial institutions (such as JazzCash, EasyPaisa, HBL, and Meezan Bank) who facilitate your transactions.
• Fraud prevention and anti-money laundering screening services.
• Analytics and marketing partners who provide aggregated or pseudonymised behavioural data.
• Publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and adverse media.

999ct uses the personal data we collect for the following purposes. We only process data where we have a valid legal basis for doing so, as described in Section 05.

4.1 Account Management

We use your identity and contact data to create and manage your 999ct account, verify your identity, process login credentials, and communicate account-related notices with you. This includes sending you security alerts, deposit confirmations, withdrawal notifications, and updates to our Terms or this Privacy Policy.

4.2 Payment Processing

Financial data is used to process deposits and withdrawals via supported methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, Allied Bank, 1LINK, and USDT TRC20. All transactions are subject to anti-money laundering screening and may require additional documentation before processing is completed.

4.3 Regulatory Compliance

We are required by our international gaming licence to collect and retain certain player data for the purposes of age verification, identity verification, anti-money laundering compliance, responsible gaming monitoring, and fraud prevention. This processing is non-negotiable and forms part of our legal obligations as a licensed gaming operator.

4.4 Platform Improvement

Usage and technical data is analysed to improve the performance, stability, and user experience of the 999ct Platform. This includes A/B testing, feature development, game performance analysis, and customer journey optimisation. This processing is conducted on pseudonymised data wherever possible.

4.5 Customer Support

Communications data is retained to provide effective customer support, maintain a record of your interactions with our team, and resolve disputes or complaints. Support interactions via live chat are logged for quality assurance and training purposes.

4.6 Responsible Gaming

We use gameplay and account data to monitor for signs of problem gambling behaviour. This may involve automated systems that flag unusual patterns and trigger responsible gaming interventions, including deposit limit prompts, session reminders, or referral to self-exclusion options. This processing is carried out in your interest and forms a core part of our duty of care as a gaming operator.

4.7 Marketing Communications

Where you have provided explicit consent, we may use your contact data to send you promotional offers, bonus notifications, and news about 999ct. You may withdraw this consent at any time. See Section 13 for details on managing your marketing preferences.

999ct processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to fulfil the contract between you and 999ct — including account creation, payment processing, and the provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML legislation, KYC obligations under our gaming licence, and responsible gaming mandates.
• Legitimate Interests: Processing carried out in pursuit of legitimate business interests, including fraud prevention, platform security, analytics, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

999ct does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Service Providers

We engage third-party service providers who process data on our behalf under binding data processing agreements. These include identity verification providers, payment processors, cloud hosting providers, customer support software vendors, and fraud detection services. All such providers are contractually obligated to process your data only as instructed by 999ct and to maintain appropriate security standards.

6.2 Regulatory and Law Enforcement Authorities

We may be legally required to disclose your personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction in connection with investigations into fraud, money laundering, or other illegal activity. We will comply with all such lawful requests and may not be able to notify you of such disclosure where prohibited by law.

6.3 Gaming Licence Authorities

As a licensed gaming operator, 999ct may be required to submit player data reports to the licensing authority that governs our gaming operations. Such disclosures are made in compliance with our licensing obligations and applicable gaming regulations.

6.4 Business Transfers

In the event that 999ct undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

The 999ct Platform uses cookies and similar tracking technologies to enhance your user experience, maintain your session, prevent fraud, and analyse Platform usage. A cookie is a small text file stored on your device when you visit a website. Below is a summary of the types of cookies we use:

Essential cookies are strictly necessary for the Platform to function and cannot be disabled. All other cookie categories may be managed through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Continued use of the 999ct Platform following the display of our cookie notice constitutes your acceptance of non-essential cookies unless you adjust your settings.

999ct retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in line with AML and gaming regulatory requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by anti-money laundering legislation.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the communication relates to an ongoing dispute or investigation.
• Marketing consent records: Retained for the duration of your marketing subscription and for two (2) years following withdrawal of consent, to demonstrate compliance.
• Technical and usage logs: Retained for up to thirteen (13) months for analytics purposes, then aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

The security of your personal data is a top priority at 999ct. We implement a comprehensive suite of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 999ct Platform is encrypted using industry-standard TLS protocols, ensuring your information cannot be intercepted in transit.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. Our staff access to production systems requires mandatory 2FA at all times.
• Firewall and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems that monitor for anomalous activity around the clock.
• Access Controls: Access to personal data within 999ct is restricted on a strict need-to-know basis. Staff access is logged, regularly audited, and revoked immediately upon role change or departure.
• Regular Security Audits: We commission periodic third-party penetration testing and security audits of our systems and infrastructure to identify and remediate vulnerabilities proactively.
• Data Pseudonymisation: Where technically feasible, personal identifiers are pseudonymised in analytical and development environments to limit exposure of live player data.

Subject to applicable law and certain regulatory limitations, you have the following rights in relation to the personal data 999ct holds about you. You may exercise any of these rights by contacting our support team via live chat or by writing to our support email address.

The 999ct Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted as part of the registration process and may be repeated at any time at the Company's discretion.

If we become aware that personal data has been submitted by or on behalf of an individual under 21, we will immediately suspend the associated account, void any balances in accordance with our Terms and Conditions, and securely delete the data subject to any regulatory retention obligations.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the 999ct Platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action without delay.

999ct operates internationally and may transfer your personal data to, and process it in, countries outside Pakistan. This may include countries where data protection laws differ from those applicable in your jurisdiction. When transferring data internationally, we implement appropriate safeguards to ensure an adequate level of protection, including:

• Standard contractual clauses approved by relevant data protection authorities.
• Binding corporate rules where applicable within our corporate group.
• Transfers to countries recognised as providing an adequate level of data protection.
• Other legally recognised transfer mechanisms as applicable under the laws of the relevant jurisdiction.

By using the 999ct Platform, you acknowledge and consent to the transfer of your personal data to countries outside Pakistan as described in this section.

With your consent, 999ct may send you promotional emails, SMS messages, and in-platform notifications regarding bonuses, new games, special offers, PSL betting promotions, and other news relevant to your 999ct account. We will only send marketing communications where you have opted in to receive them at registration or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email we send you.
• Updating your communication preferences within your 999ct account settings.
• Contacting our support team via live chat and requesting removal from our marketing list.

Please allow up to 72 hours for your opt-out preference to take effect across all our communication channels. Opting out of marketing communications does not affect transactional or account-related messages, which we will continue to send as required for the operation of your account.

999ct reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the features and services available on the Platform. Material changes to this Policy will be communicated to registered players via email or a prominent notice displayed on the Platform prior to the changes taking effect.

Non-material changes, such as minor clarifications of existing practices or corrections to typographical errors, may take effect immediately upon publication. The effective date displayed at the top of this page will always reflect when the Policy was most recently updated.

Your continued use of the 999ct Platform following the effective date of any amendment to this Policy constitutes your acceptance of the updated terms. We strongly encourage you to review this page periodically to remain informed of how we are protecting your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999ct handles your personal data, please do not hesitate to get in touch with our dedicated support team. We are available 24 hours a day, 7 days a week via the live chat facility on the Platform.

For formal data protection enquiries, subject access requests, or complaints regarding our data processing practices, please write to us at our support email address. We will acknowledge receipt of your enquiry within 48 hours and aim to provide a substantive response within 30 days.

Our contact email for data protection matters is: [email protected]