Privacy Policy

1 Introduction

cty999 ("we", "us", "the Platform", "cty999") operates the online gaming platform accessible at https://cty999.cam. This Privacy Policy ("Policy") describes how cty999 collects, uses, processes, stores and protects personal data about individuals ("you", "Player", "User") who register for, access or use the Platform.

cty999 is an English-language platform serving players across Pakistan, including in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. By registering an account or using the Platform, you acknowledge that you have read this Policy and that you consent to the collection and processing of your personal data in accordance with its terms.

2 Definitions

As used throughout this Privacy Policy, the following terms have the meanings set out below:

3 Data We Collect

cty999 collects personal data through several channels during your registration, use and closure of an account. The categories of data we collect include the following:

3.1 Registration Data

When you create an account on cty999, we collect:

• Full legal name as registered on your identity document.
• Date of birth, used to verify that you meet the minimum age requirement.
• Email address, used for account communication and security alerts.
• Country and city of residence.
• Chosen username and encrypted password.

3.2 KYC and Verification Data

Where identity verification is required, we collect:

• Copies of government-issued identity documents (e.g., Pakistani CNIC, passport).
• Proof-of-address documents such as recent utility bills or bank statements.
• Documentation confirming ownership of a payment method, where applicable.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps and payment reference identifiers.
• Payment method references. Note: cty999 does not store full card numbers or complete banking credentials; payment processing is handled by third-party payment service providers.
• Account balance history and transaction logs.

3.4 Gameplay and Activity Data

• Betting and wagering history, including game selection, stake amounts, outcomes and session duration.
• Responsible gambling tool usage, including limit settings and self-exclusion requests.
• Platform interaction logs, including login timestamps and feature usage patterns.

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system and browser version.
• Session cookies and analytics identifiers.
• Referring URLs and navigation path data within the Platform.

3.6 Communications Data

• Records of your support interactions via Live Chat, Help Centre or email.
• Feedback, complaints and dispute records.

4 How We Use Your Data

cty999 processes your personal data for specific, documented purposes. We do not use your data for any purpose incompatible with those listed below without first notifying you and, where required, obtaining your consent.

5 Legal Basis for Processing

Where applicable data protection law requires a documented legal basis for each processing activity, cty999 relies on the following grounds:

• Contractual Necessity: Processing required to perform the contract between cty999 and the Player — including account management, payment processing and game provision.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations and license conditions.
• Legitimate Interests: Processing in pursuit of cty999's legitimate business interests — including fraud prevention, platform security and analytics — provided those interests are not overridden by the Player's rights and interests.
• Consent: Where consent is required and obtained, including for optional marketing communications. Consent may be withdrawn at any time by contacting support or updating your account preferences.

6 Cookies & Tracking Technologies

cty999 uses cookies and similar tracking technologies to operate the Platform and understand how it is used. By continuing to use the Platform, you consent to our use of cookies as described below.

6.1 Types of Cookies Used

• Essential Cookies: Strictly necessary to operate the Platform — including session cookies that keep you logged in during a browser session. These cannot be disabled without preventing core Platform functionality.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players navigate the Platform. This helps us identify usability issues and improve the overall experience.
• Preference Cookies: Used to remember your settings and preferences — such as your selected language — across sessions.
• Security Cookies: Used to detect and prevent fraudulent activity, including CSRF (Cross-Site Request Forgery) protection tokens.

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will impair the Platform's functionality. Analytics and preference cookies can generally be disabled without affecting core Platform access.

7 Data Sharing & Disclosure

cty999 does not sell, rent or trade your personal data. We may share your data with third parties only in the following circumstances:

• Payment Service Providers: To process deposits and withdrawals. Providers receive only the data necessary to complete your transaction. Payment brands familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — may be referenced on the Platform for context; their inclusion does not imply an endorsement of or affiliation with gambling.
• Identity Verification Services: Third-party KYC providers may process identity documents on behalf of cty999 under strict data-processing agreements.
• Technical Infrastructure Providers: Hosting, cloud storage and security service providers that process data as data processors under documented instructions from cty999.
• Legal and Regulatory Authorities: Where cty999 is legally required to disclose data to law enforcement, regulatory bodies or competent courts.
• Business Transfers: In the event of a merger, acquisition or sale of assets involving cty999, personal data may be transferred as part of that transaction. Players will be notified of any material change in data controller.

8 Data Security

cty999 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. Key security measures include:

• SSL/TLS encryption applied to all data transmitted between your device and the Platform.
• Encrypted storage of passwords — cty999 does not store plaintext passwords.
• Access controls restricting internal access to personal data on a need-to-know basis.
• Regular review of security practices and system access logs.
• KYC documents stored with restricted-access controls and not accessible beyond the verification team.

Despite these measures, no system is entirely immune to security incidents. In the event of a data breach that is likely to result in a risk to your rights and interests, cty999 will notify affected Players in accordance with applicable obligations.

You are responsible for maintaining the security of your account credentials. Do not share your password with any third party. Contact support immediately if you suspect your account has been accessed without your authorisation.

9 Data Retention

cty999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain a registered account, or to comply with legal and regulatory obligations — whichever period is longer.

• Active Accounts: Personal data is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, cty999 retains core account data (including KYC records and transaction history) for the period required by the operator's license jurisdiction to meet anti-money laundering and record-keeping obligations. This is typically a period of several years from closure.
• Support Records: Communications records are retained for a reasonable period to enable resolution of any disputes that may arise after closure.
• Analytics Data: Aggregate, anonymised analytics data may be retained indefinitely as it does not identify individual Players.

Once the applicable retention period expires and there is no further legal basis for retention, personal data is securely deleted or anonymised.

10 Your Rights

Depending on the data protection law applicable to your circumstances, you may have the following rights regarding the personal data cty999 holds about you. To exercise any of these rights, contact our support team using the details in Section 14.

11 Third-Party Services

The cty999 Platform may reference or integrate with third-party services for functional purposes. This Policy applies solely to data processed by cty999 itself. The following third-party categories may be relevant to your use of the Platform:

• Payment Processors: When you make a deposit or request a withdrawal, transaction data passes through a third-party payment processor. That processor's own privacy policy governs how they handle payment data.
• Game Content Providers: Some casino games on the Platform are provided by third-party game studios. Gameplay data for those games may be processed by the game provider under a separate data-processing arrangement with cty999.
• Analytics Providers: cty999 may use analytics services that process anonymised, aggregate usage data. These services do not receive individually identifiable data.

cty999 is not responsible for the privacy practices of third-party services. No links to external third-party websites are embedded in this Policy.

12 Children & Minors

If cty999 discovers or is notified that a minor has registered an account, we will immediately suspend the account, void any transactions conducted on the account and delete the associated personal data, subject to any legal retention obligations. Any person who provides false date-of-birth information to circumvent the age restriction commits a material breach of the Terms & Conditions.

If you believe that a minor may have accessed the Platform using your account or that a minor has registered independently, please contact our support team immediately via Live Chat or email so that we can investigate and act accordingly.

13 Changes to This Policy

cty999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or Platform functionality. When material changes are made, we will display the updated Policy on the Platform with a revised "Last Reviewed" date at the top of the page.

It is your responsibility to review this Policy periodically. Where a change materially affects how we use your personal data, we will take reasonable steps to bring it to your attention — for example, through a Platform notification. Continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right or want to report a privacy concern, please contact the cty999 support team through any of the following channels:

We will acknowledge data rights requests and privacy enquiries within a reasonable timeframe and respond in English. Identity verification may be required before processing certain requests to protect against unauthorised data disclosure.