ct999h Privacy Policy

1

Introduction

ct999h ("we," "us," "our," "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the ct999h website at https://ct999h.net and all associated services. This Privacy Policy ("Policy") sets out our practices with respect to the collection, use, storage, disclosure, and protection of personal data provided by or collected about players, prospective players, and visitors ("you," "your").

This Policy applies to all personal data processed by ct999h in connection with the delivery of our online casino, sports betting, and ancillary services. It covers data collected through the ct999h website, mobile-optimised platform, customer support channels, and any other touchpoint through which you interact with ct999h.

ct999h operates the platform primarily for players based in Pakistan. While this Policy is written to be accessible to English-speaking Pakistani users, it reflects data protection principles applicable across the jurisdictions in which ct999h is licensed and operated.

2

Data Controller

For the purposes of applicable data protection law, ct999h is the data controller in respect of the personal data collected through the ct999h platform. As data controller, ct999h determines the purposes for which and the means by which your personal data is processed.

ct999h is responsible for ensuring that all personal data held on the platform is processed lawfully, fairly, and transparently, and that appropriate technical and organisational security measures are maintained at all times to protect that data against unauthorised access, alteration, disclosure, or destruction.

Where ct999h engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification services), those providers act as data processors under binding data processing agreements that require them to process data only on ct999h's documented instructions and to implement appropriate security safeguards.

3

Personal Data We Collect

ct999h collects the following categories of personal data:

ct999h does not intentionally collect any special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or biometric data beyond what is necessary for identity verification purposes). If you voluntarily provide such information in correspondence with our support team, it will be handled with additional care and used only to address your specific query.

4

How We Collect Your Data

ct999h collects personal data through the following means:

• Direct registration: When you create a ct999h account, you provide identity and contact data directly through the registration form.
• KYC document submission: When you submit identity and address verification documents as part of the KYC process prior to your first withdrawal.
• Transactional activity: When you make deposits or withdrawal requests via JazzCash, EasyPaisa, bank transfer, or USDT, financial data is recorded in association with your account.
• Automated collection: Technical and usage data is collected automatically as you navigate and use the ct999h platform, via server logs, session tracking, and first-party cookies.
• Customer support interactions: When you contact ct999h support by email or in-platform chat, the content of that communication is recorded and stored.
• Third-party verification services: Where ct999h uses licensed identity verification providers to validate documents or screen players against sanctions lists, data may be received back from those providers as part of the verification result.

5

How We Use Your Personal Data

ct999h uses the personal data it collects for the following purposes:

• To create, maintain, and manage your ct999h player account and verify your eligibility to use the platform.
• To process PKR deposits and withdrawals through your chosen payment method and to reconcile transaction records.
• To conduct KYC identity verification and ongoing due diligence in compliance with applicable anti-money laundering obligations.
• To screen players against sanctions lists, politically exposed persons (PEP) databases, and self-exclusion registers.
• To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in the ct999h Terms and Conditions.
• To personalise your ct999h gaming experience, including delivering relevant game recommendations and promotional offers where you have consented to receive them.
• To send account-related transactional communications including deposit confirmations, withdrawal status updates, and security alerts.
• To monitor and support responsible gaming compliance, including tracking deposit limits, session times, and self-exclusion status.
• To resolve player support queries and complaints in a timely and documented manner.
• To comply with applicable legal, regulatory, and licensing obligations, including the retention of records required by law.
• To improve, test, and maintain the technical performance and security of the ct999h platform.

ct999h will not use your personal data for any purpose materially different from those listed above without first obtaining your explicit consent or establishing a separate lawful basis for that additional processing.

6

Legal Basis for Processing

ct999h processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the player account agreement — including account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and regulatory reporting obligations.
• Legitimate interests: Processing carried out for ct999h's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as marketing communications and non-essential analytics cookies, where your freely given, specific, informed, and unambiguous consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7

Data Sharing and Disclosure

ct999h does not sell, rent, or trade your personal data to any third party for their own commercial purposes. ct999h may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network operators, to facilitate deposits and withdrawals.
• Identity verification providers: Licensed KYC and AML screening services used to verify player identity and conduct sanctions and PEP screening.
• Game software providers: Casino and sports betting software licensors whose games are available on the ct999h platform, to the extent necessary to record gaming outcomes and resolve disputes.
• Cloud infrastructure providers: Hosting and data storage providers who maintain ct999h's servers and databases under strict data processing agreements.
• Regulatory and law enforcement authorities: Where ct999h is required by law, court order, or regulatory direction to disclose personal data, including disclosures to financial intelligence units in connection with AML obligations.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by ct999h, who are bound by professional confidentiality obligations.

All third-party service providers with access to personal data are required to implement appropriate technical and organisational security measures and to process that data solely for the purposes specified by ct999h.

8

International Data Transfers

As an international online gaming platform serving Pakistani players, ct999h may transfer personal data to jurisdictions outside Pakistan in connection with the operation of its services. This may occur where ct999h's cloud infrastructure, game software providers, or identity verification partners are located in other countries.

Where personal data is transferred internationally, ct999h takes appropriate steps to ensure that the transfer is subject to adequate safeguards, including the use of standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognised as providing an adequate level of data protection.

By registering on and using the ct999h platform, you acknowledge and consent to the transfer of your personal data to third countries as described in this section, subject to the safeguards described herein.

9

Data Retention

ct999h retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of the player account relationship and for a period of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by regulatory direction or ongoing investigation.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, as evidence of the consent having been given.
• Technical and usage logs: Retained for up to twelve (12) months, unless longer retention is required for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ct999h's data destruction procedures.

10

Security Measures

ct999h implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data transmitted between your device and the ct999h platform.
• Encryption at rest for all sensitive personal data stored in ct999h's databases, including KYC documents and financial records.
• Role-based access controls limiting internal access to personal data to only those staff members who require it to perform their duties.
• Multi-factor authentication requirements for all ct999h staff accessing production systems containing personal data.
• Regular third-party security audits and penetration testing of the ct999h platform and infrastructure.
• Documented incident response procedures for identifying, containing, and reporting data security incidents in accordance with applicable obligations.
• Staff training on data protection and information security obligations.

Notwithstanding the above measures, no method of data transmission or storage can be guaranteed to be completely secure. In the event of a data breach affecting your personal data, ct999h will notify affected players and relevant authorities as required by applicable law.

11

Your Data Protection Rights

As a ct999h player, you have the following rights in respect of your personal data, subject to applicable legal limitations:

• Right of access: You may request a copy of the personal data ct999h holds about you, along with information about how it is being used. ct999h will respond to access requests within a reasonable timeframe.
• Right to rectification: If you believe that any personal data ct999h holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other lawful basis for processing), or where you object to processing on legitimate interests grounds and there are no overriding legitimate grounds. Note that erasure may not be possible where ct999h is required to retain data by law.
• Right to restriction: You may request that ct999h restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to object: You have the right to object to processing of your personal data based on ct999h's legitimate interests, and to opt out of direct marketing communications at any time.
• Right to withdraw consent: Where ct999h processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact ct999h at the support email address provided in Section 15. ct999h may need to verify your identity before processing your request. We will respond to all valid requests within a reasonable timeframe and will explain our reasoning if we are unable to fulfil a request.

12

Cookies and Tracking Technologies

ct999h uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. ct999h uses the following categories of cookies:

ct999h does not use third-party advertising cookies or cross-site retargeting trackers. You can manage cookie settings through your browser preferences. Disabling strictly necessary cookies will impair the functionality of the ct999h platform and may prevent you from accessing your account.

13

Minors and Age Restriction

The ct999h platform is strictly restricted to individuals aged 21 years and above. ct999h does not knowingly collect or process personal data from any individual under the age of 21. If ct999h becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has registered on the ct999h platform or provided personal data to ct999h, please contact us immediately at the support email address in Section 15. ct999h will investigate the matter promptly and take all necessary remedial action.

14

Changes to This Privacy Policy

ct999h reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, ct999h will provide notice to registered players by email or by displaying a prominent notification on the ct999h platform prior to the changes taking effect.

The updated Policy will be published at https://ct999h.net/privacy-policy with a revised effective date. Your continued use of the ct999h platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should discontinue use of the ct999h platform and may close your account in accordance with the Terms and Conditions.

ct999h encourages all players to review this Privacy Policy periodically to stay informed about how their personal data is being protected and used.

15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to ct999h's data protection practices, or if you wish to exercise any of your data subject rights as described in Section 11, please contact the ct999h data protection team using the details below.

Data protection contact email: [email protected]

Email displayed as plain text — not a clickable link. Please include "Privacy Policy Request" in the subject line of your email so that we can direct your query to the appropriate team member promptly.

ct999h aims to respond to all data protection queries and rights requests within 30 calendar days of receipt. Where a request is complex or we have received a high volume of requests, we will notify you within the initial 30-day period and provide an updated timeframe for resolution.