Privacy Policy

Welcome to the cty999 Privacy Policy. cty999 ("we", "us", "our") operates the online gaming and sports betting platform accessible at cty999.org. This Privacy Policy explains how cty999 collects, uses, stores, shares, and protects the personal information of users ("you", "your", "Player") who access or register on our platform.

By accessing the cty999 platform, creating an account, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of the cty999 platform and contact our support team to arrange account closure.

This policy applies to all personal data collected through the cty999 website, mobile browser interface, customer support channels (including live chat, email, and WhatsApp), and any other interaction you have with cty999 as a service provider.

cty999 collects personal data through several channels during the course of providing our services. The categories of data we collect are set out below.

cty999 does not intentionally collect sensitive personal data beyond what is required for identity verification and regulatory compliance. Where CNIC data is collected as part of KYC, it is handled with an elevated level of care and access restriction.

cty999 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your cty999 account, including processing deposits, withdrawals, and bonus credits to your wallet balance.
• Identity Verification (KYC): To verify your identity and age in compliance with our 21+ policy and anti-money laundering obligations. This includes cross-referencing CNIC details and conducting enhanced due diligence where required.
• Service Delivery: To provide access to cty999 gaming products, including cricket betting, live casino, slots, crash games, and Double Fortune titles, and to personalise your experience on the platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, unauthorised account access, money laundering, and other activities that may violate our Terms & Conditions or applicable law.
• Customer Support: To respond to your queries, complaints, and support requests submitted via live chat, email, or WhatsApp, and to maintain records of those interactions for quality assurance purposes.
• Legal & Regulatory Compliance: To comply with applicable laws, court orders, regulatory requests, and reporting obligations. This may include sharing data with relevant authorities where legally required.
• Marketing Communications: To send you promotional offers, bonus notifications, PSL and cricket betting promotions, and other marketing messages — but only where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the cty999 platform's performance, security, and user experience for Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and beyond.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or having a valid legal basis to do so.

cty999 processes personal data only where we have a valid legal basis to do so. The applicable legal bases for our key processing activities are as follows:

• Contractual Necessity: Processing required to deliver the cty999 services you have registered for, including account creation, transaction processing, and access to gaming content. Without this processing, we cannot provide our services to you.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, tax reporting, and responses to lawful requests from regulatory authorities.
• Legitimate Interests: Processing carried out for cty999's legitimate business interests, including fraud prevention, platform security, customer support quality assurance, and internal analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications via email, SMS, and WhatsApp. You may withdraw consent at any time without affecting the lawfulness of prior processing.

cty999 does not sell your personal data to third parties. We may, however, share your data with the following categories of recipients where necessary to provide our services or comply with legal obligations:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners receive the minimum data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• KYC & Identity Verification Providers: Third-party identity verification services used by cty999 to authenticate player identity and conduct age verification in line with our 21+ policy receive relevant personal and document data on a need-to-know basis.
• Game Content Providers: Licensed third-party game studios whose content is integrated into the cty999 platform may receive anonymised or pseudonymised session data for the purposes of game fairness auditing and RNG certification. They do not receive your full identity data.
• Fraud Prevention & Security Services: Specialised vendors that assist cty999 with detecting and preventing fraudulent activity, bonus abuse, and money laundering may receive relevant technical and transactional data.
• Regulatory & Law Enforcement Authorities: cty999 may disclose personal data to competent authorities, regulators, or law enforcement agencies where required to do so by law, court order, or regulatory direction.
• Professional Advisers: Legal, accounting, and auditing firms retained by cty999 may access personal data on a confidential basis where necessary for the provision of professional advice or services.

All third parties with whom cty999 shares personal data are contractually required to maintain appropriate data protection standards and to use the data only for the specific purposes for which it was shared.

cty999 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data that helps us improve our services.

Essential cookies are strictly necessary for the cty999 platform to function and cannot be disabled. For all other cookie categories, you may manage your preferences through your browser settings. Please note that disabling functional or analytics cookies may affect some aspects of the cty999 experience.

cty999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law and our internal compliance obligations.

• Active Account Data: Personal data associated with an active cty999 account is retained throughout the lifetime of that account. This includes identity, contact, financial, and usage data.
• Closed Account Data: Upon account closure, cty999 retains identity and transactional data for a minimum period of five (5) years in order to comply with anti-money laundering record-keeping requirements and to resolve any post-closure disputes.
• KYC Documentation: Identity verification documents, including CNIC copies and payment method verification records, are retained for a minimum of five (5) years following the date of verification or account closure, whichever is later.
• Customer Support Records: Live chat transcripts, email correspondence, and support ticket records are retained for a period of three (3) years following the date of the interaction.
• Marketing Data: If you opt out of marketing communications, your opt-out preference is retained indefinitely to ensure we do not inadvertently re-contact you. The associated personal data used solely for marketing is deleted promptly upon opt-out.

Upon expiry of the applicable retention period, cty999 will securely delete or anonymise personal data so that it can no longer be associated with an identifiable individual.

As a cty999 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request and your registered username.

• Right of Access: You may request a copy of the personal data cty999 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For identity data such as your name or CNIC number, updated KYC documentation may be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate interest or legal obligation requiring retention.
• Right to Restrict Processing: You may request that cty999 restrict the processing of your data in certain circumstances — for example, while a rectification request is being investigated.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a structured, machine-readable copy of the personal data you have provided to cty999.
• Right to Object: You have the right to object to processing based on cty999's legitimate interests, including profiling for marketing purposes. Where you object, cty999 will cease that processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

cty999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• Encryption in Transit: All data transmitted between your browser and the cty999 platform is encrypted using TLS (Transport Layer Security) protocols. This protects your login credentials, payment details, and personal information from interception during transmission.
• Encryption at Rest: Sensitive data stored in cty999 systems — including passwords (which are stored as salted hashes, never in plain text) and financial identifiers — is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within cty999's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Security Monitoring: cty999 employs real-time monitoring tools to detect suspicious activity, unauthorised access attempts, and anomalous account behaviour. Security incidents are investigated promptly.
• Penetration Testing: cty999 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a personal data breach that poses a risk to affected users, cty999 will notify impacted players and relevant authorities within the timeframes required by applicable law, and will take immediate steps to contain and mitigate the breach.

While cty999 takes all reasonable steps to protect your personal data, no internet-based system is 100% secure. You play an important role in your own data security by maintaining a strong, unique password for your cty999 account and by not sharing your credentials with others.

cty999 strictly prohibits the use of its platform by individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. Our registration process includes an age declaration, and we conduct age verification as part of our KYC procedures to enforce this requirement.

If cty999 becomes aware that personal data has been collected from an individual who is under 21, we will take immediate steps to:

• Suspend the account and freeze any associated balance pending investigation.
• Delete the personal data collected from the underage individual from our active systems, subject to any mandatory legal retention obligations.
• Refund any deposited funds to the source payment method after confirming the identity of the account holder, in line with our responsible gaming obligations.

cty999 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they affect how we collect, use, or share your personal data in a significant way — we will notify registered players via email and display a prominent notice on the cty999 platform at least 14 days before the changes take effect.

• The "Last Updated" date at the top of this page reflects the most recent revision to this Privacy Policy.
• Continued use of the cty999 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.
• If you do not agree with any changes to this Privacy Policy, you must stop using the cty999 platform and may request account closure by contacting our support team before the effective date.
• Minor changes — such as corrections to typographical errors or clarifications that do not affect the substance of the policy — may be made without advance notice.

We recommend bookmarking this page and reviewing it periodically so you remain informed about how cty999 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cty999 handles your personal data, you may contact our Data & Privacy team through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line along with your registered username so we can locate your account promptly.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the cty999 platform. For data subject access requests or deletion requests, we recommend email to ensure a proper paper trail.
• WhatsApp Support: Available from 8:00 AM to 12:00 AM PKT for general privacy enquiries. Formal data rights requests should be submitted via email.

cty999 aims to respond to all privacy-related enquiries within 5 business days. For formal data subject rights requests — such as access, rectification, or erasure — we will acknowledge receipt within 48 hours and provide a substantive response within 30 days.