ct9990 Privacy Policy

ct9990 collects personal information from you at different stages of your relationship with us — at registration, during account verification, through your use of the Platform, and via your interactions with customer support. Below is a detailed breakdown of the categories of data we collect.

Information You Provide Voluntarily. When you fill in registration forms, contact support, participate in promotions, or update your account profile on ct9990, you provide us with personal data directly. The accuracy of this information is your responsibility, and inaccurate data may result in restrictions on your account.

Information Collected Automatically. When you visit the ct9990 Platform, our servers automatically log certain technical information about your connection. This includes your IP address, device identifiers, browser version, and interaction patterns. This data helps us detect fraud, maintain platform security, and improve the user experience for Pakistani players.

Information from Third Parties. In some cases, ct9990 may receive information about you from third-party identity verification providers, payment processors such as JazzCash or EasyPaisa, and fraud prevention services. This data supplements what you provide directly and is used solely for the purposes described in this Policy.

ct9990 uses the personal data it collects for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following sets out our primary uses of your information:

• Account Management: To create and maintain your ct9990 account, authenticate your identity at login, and manage your account settings and preferences.
• Service Delivery: To provide access to casino games, PSL cricket betting, slot machines, live dealer tables, bingo, and all other ct9990 Services you use.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, bank transfer, and crypto methods. Financial data is processed only to the extent necessary to complete transactions.
• KYC & Age Verification: To verify that you are at least 21 years of age and that your identity matches the registration information provided. This is a non-negotiable licensing requirement.
• Regulatory Compliance: To meet our obligations under our international gaming license, including anti-money laundering (AML) checks, sanctions screening, and responsible gaming monitoring.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct on the ct9990 platform.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and communicate important account-related information.
• Marketing & Promotions: With your consent, to send you information about ct9990 bonuses, PSL season promotions, new game launches, and other offers. You may withdraw consent at any time via account settings or by contacting support.
• Platform Improvement: To analyse usage patterns and player behaviour in aggregate (anonymised) form in order to improve the ct9990 platform, game selection, and user experience.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling and to enforce responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods.

ct9990 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing:

• Contractual Necessity: Processing that is necessary to fulfil the contract between you and ct9990 — including account registration, game access, and payment processing — is undertaken on this basis. Without this processing, ct9990 cannot provide the Services.
• Legal Obligation: Processing required to comply with applicable laws and the conditions of our international gaming license, including KYC, AML, age verification, and regulatory reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and the improvement of our services, where our legitimate interests in doing so are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, where we rely on your freely given, informed, and revocable consent.

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before your withdrawal. Withdrawal of consent for essential processing (such as KYC) may result in restrictions on your account.

4.1 We Do Not Sell Your Data. ct9990 does not sell, rent, lease, or otherwise commercially exploit your personal information to any third party. This is an absolute commitment, not a qualified one.

4.2 Sharing With Service Providers. ct9990 works with trusted third-party service providers who process data on our behalf under strict contractual obligations. These include:

• Payment processors and gateway providers (JazzCash, EasyPaisa, bank partners) to facilitate PKR transactions
• KYC and identity verification technology providers
• Fraud detection and risk management services
• Cloud hosting and data storage providers operating under data security standards equivalent to or exceeding our own
• Customer support platform providers who handle live chat and ticket data
• Game software providers licensed to ct9990 who require session data to operate their titles

All third-party processors are bound by data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to ct9990.

4.3 Regulatory and Legal Disclosure. ct9990 may be required to disclose your personal data to regulatory authorities, law enforcement agencies, gaming commissions, or courts of competent jurisdiction where required by law or in response to a valid legal order. We will notify you of such disclosure where we are legally permitted to do so.

4.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of the ct9990 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email prior to any such transfer taking effect and given the opportunity to close your account if you do not wish your data to be transferred.

ct9990 uses cookies and similar tracking technologies on our Platform to deliver a functional, personalised, and secure experience. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

You can manage your cookie preferences through the ct9990 cookie consent tool, which is presented on your first visit to the Platform. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to use the ct9990 Platform.

ct9990 does not use cookies to collect sensitive personal data such as CNIC numbers, banking credentials, or payment card details. All payment information is handled exclusively through encrypted, PCI-compliant payment flows.

6.1 Retention Principles. ct9990 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our international gaming license and applicable law. We do not retain data indefinitely and apply defined retention schedules to all data categories.

6.2 Active Account Data. For as long as your ct9990 account remains active, we retain all data necessary to manage your account, process transactions, and comply with our licensing obligations.

6.3 Post-Closure Retention. Following account closure — whether initiated by you or by ct9990 — we are required under our gaming license to retain certain records for a minimum period. Transactional and identity records are typically retained for five (5) to seven (7) years after closure, depending on the regulatory requirements applicable at the time.

6.4 Marketing Data. If you have consented to receive marketing communications from ct9990, we retain your marketing preferences and contact details until you withdraw consent. Withdrawal of marketing consent does not affect the retention of other data categories required for regulatory purposes.

6.5 Anonymisation. Where data is no longer required in identifiable form, ct9990 may anonymise it for analytical purposes rather than deleting it. Anonymised data cannot be re-linked to you and falls outside the scope of data protection obligations.

As a ct9990 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team via live chat or at the email address listed in Section 11. We will respond within 30 days of receiving a verified request.

• Right of Access: You have the right to request a copy of all personal data that ct9990 holds about you. This includes your registration data, transaction history, game activity, and any documents submitted for KYC purposes.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that certain data — such as your CNIC number — can only be corrected following re-verification.
• Right to Erasure: You may request that ct9990 delete your personal data. This right is subject to limitations: we are not able to erase data that we are legally required to retain under our gaming license or AML obligations. We will inform you of any such limitations at the time of your request.
• Right to Restrict Processing: You may ask ct9990 to restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to ct9990, and to request that this data be transferred to another controller where technically feasible.
• Right to Object: You may object to processing of your personal data where ct9990 relies on legitimate interests as the legal basis. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent — including marketing communications and non-essential cookies — you may withdraw that consent at any time with immediate effect.

8.1 Technical Safeguards. ct9990 implements a comprehensive suite of technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include 256-bit SSL/TLS encryption for all data in transit, AES encryption for sensitive data at rest, firewalls, intrusion detection systems, and regular penetration testing by independent security professionals.

8.2 Access Controls. Access to personal data within ct9990 is restricted on a strict need-to-know basis. Only staff whose role requires access to player data — such as compliance officers, KYC reviewers, and customer support agents — are authorised to access personal information, and only to the extent necessary for their specific duties.

8.3 Payment Security. ct9990 does not store full payment card numbers, CVV codes, or banking passwords on our servers. PKR payment transactions via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank are processed through secure, tokenised payment flows. We maintain PCI-DSS alignment for all payment data handling.

8.4 Your Responsibilities. While ct9990 invests heavily in security on our end, you also play a role in protecting your account. Keep your password confidential, enable two-factor authentication, use a unique password for your ct9990 account, and notify us immediately if you suspect unauthorised access. ct9990 cannot be held liable for data breaches resulting from your failure to maintain the security of your own login credentials.

9.1 Strict 21+ Policy. The ct9990 Platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21, and we do not direct any marketing communications toward minors. Our registration process includes an age declaration requirement, and our KYC process includes mandatory documentary age verification before any withdrawal is processed.

9.2 Discovery of Underage Registration. If ct9990 discovers or is notified that a player under 21 years of age has registered an account, we will take immediate action: the account will be suspended, all gaming activity will be reviewed, any winnings will be voided, and deposited Real Funds will be returned to the original payment method following a compliance review. The personal data of the underage individual will be deleted to the extent permitted by our legal and regulatory obligations.

9.3 Parental Concerns. If you are a parent or guardian and believe that your child has registered with ct9990, please contact us immediately at the email address in Section 11. We will investigate and respond within 72 hours. We take underage gambling extremely seriously and will act swiftly on all such reports.

10.1 Right to Update. ct9990 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing requirements. All updates will be published on this page with a revised effective date.

10.2 Notification of Material Changes. Where a change is material — meaning it significantly affects how we use your personal data or reduces your rights — ct9990 will notify registered players by email at least seven (7) days before the change takes effect. Minor updates that do not materially affect your rights may be published without prior individual notification.

10.3 Continued Use. Your continued use of the ct9990 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material changes, you are entitled to close your account before the changes take effect without penalty to your Real Funds balance.

11.1 Data Protection Contact. If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how ct9990 handles your personal information, please contact our Data Protection team. We are available 24/7 via live chat on the Platform. For written enquiries, you may reach us by email — please note this is displayed as plain text and is not a clickable link:

11.2 Response Timeframe. ct9990 commits to acknowledging all privacy-related enquiries within 5 business days and to providing a full substantive response within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

11.3 Complaints. If you are not satisfied with ct9990's response to your privacy concern, you have the right to escalate your complaint to the relevant supervisory authority under our gaming license jurisdiction. ct9990 will cooperate fully with any regulatory investigation into data protection matters.