Privacy Policy — 999ct

1 Who We Are

999ct (available at 999ct.pro) is an online gaming and sports betting platform built specifically for players in Pakistan. When this policy says "we", "us" or "999ct", it refers to the platform operator. When it says "you" or "your", it refers to any person who visits, registers on, or otherwise uses the 999ct website.

This Privacy Policy applies to all personal data collected through the 999ct website — during registration, account use, deposits and withdrawals in PKR, sports betting activity, casino and bingo sessions, customer support interactions and any promotional engagement.

By creating an account on 999ct, you acknowledge that you have read and understood this policy. It should be read alongside the Terms and Conditions, which govern the broader use of the platform.

2 Data We Collect

999ct collects personal information in two ways — information you give us directly and information collected automatically as you use the platform.

Information You Provide Directly

This is the information you enter when you register, verify your account, make a deposit or contact our support team. It includes:

• Full name as it appears on your CNIC
• Date of birth (used to verify you are 18 or older)
• CNIC number and a copy of your identity document when verification is requested
• Email address and mobile number
• Billing address or residential address
• Payment method details — such as your JazzCash or Easypaisa account number, bank account details or card information used for PKR deposits and withdrawals
• Messages and attachments you send to our support team

Information Collected Automatically

When you access 999ct, certain technical data is collected automatically. This helps us keep the platform secure and running smoothly. It includes:

• IP address and approximate location (country and city level)
• Device type, operating system and browser version
• Pages visited, time spent on each page, clicks and navigation paths
• Session start and end times
• Game activity logs — games played, bet amounts in PKR, outcomes and session durations
• Cookies and similar tracking technologies (see Section 5)

3 How We Use Your Data

The personal information collected by 999ct is used for the following purposes:

999ct does not use your personal data to build profiles for sale to third-party advertisers, nor do we use it for any purpose not listed above without first notifying you and, where required, obtaining your consent.

4 Payment & PKR Transaction Data

All financial transactions on 999ct are processed in PKR. When you make a deposit or request a withdrawal via JazzCash, Easypaisa, Raast, bank transfer or card, the relevant payment details are processed through our secure payment infrastructure.

What We Store

999ct stores a reference to your payment method — for example, the last four digits of a card or the registered mobile number of a JazzCash wallet — alongside transaction amounts, dates and statuses. Full card numbers and full wallet credentials are not stored on 999ct servers; these are handled by our payment processing partners under their own security standards.

Transaction Records

A complete history of your PKR deposits, withdrawals and bonus credits is kept in your account and is accessible from your dashboard at any time. These records are also retained internally for fraud prevention, dispute resolution and compliance purposes.

Refunds & Disputes

If a transaction dispute arises, we may need to share transaction reference data with your payment provider — for example JazzCash or your bank — to resolve the matter. No additional personal data beyond what is necessary to resolve the dispute will be shared.

5 Cookies & Tracking Technologies

999ct uses cookies and similar technologies to keep your session active, remember your preferences and understand how players use the platform. Here is a breakdown of the types of cookies in use:

You can manage or delete non-essential cookies at any time through your browser settings. Disabling essential or security cookies may affect your ability to log in or use account features. 999ct does not use third-party advertising cookies or sell cookie data to outside parties.

6 Third-Party Data Sharing

999ct does not sell, rent or trade your personal data. We only share it with third parties in the following specific circumstances:

Payment Processors

To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer or card, we share the minimum required payment details with the relevant payment provider. These providers operate under their own privacy policies and security standards.

Identity Verification Services

When we require you to verify your identity as part of our KYC (Know Your Customer) process, your CNIC details and supporting documents may be shared with a third-party identity verification service. These services are contractually bound to process your data only for the purpose of identity verification and to delete it once the check is complete.

Fraud & Security Partners

To protect the platform and all users from fraud, we may share IP addresses, device fingerprints and transaction patterns with fraud detection systems. No directly identifiable information such as your name or CNIC is shared for this purpose.

Legal Obligations

If we receive a lawful request from a relevant authority requiring disclosure of user data, we will comply to the minimum extent required. We will inform affected users where we are legally permitted to do so.

7 Data Retention

999ct keeps your personal data for as long as your account is active and for a defined period after closure. The main retention periods are:

• Account data (name, email, CNIC details): retained for the life of your account and for up to 5 years after account closure for fraud prevention and dispute resolution purposes.
• Transaction records (PKR deposit and withdrawal history): retained for a minimum of 5 years after the transaction date.
• Support communications: retained for up to 3 years after the last interaction.
• Session and game logs: retained for up to 2 years and used only for fraud investigation and responsible gaming analysis.
• Identity verification documents: deleted within 90 days of verification being completed, unless a legal obligation requires longer retention.

Once the applicable retention period has passed and there is no ongoing legal requirement to keep the data, it is permanently deleted from our systems.

8 How We Protect Your Data

999ct takes the security of your personal information seriously. The following measures are in place to protect your data:

• TLS Encryption: All data transmitted between your browser and 999ct servers is encrypted using Transport Layer Security (TLS).
• Encrypted Storage: Sensitive fields including passwords and payment references are stored using strong encryption at rest.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff members do not have access to full payment credentials or raw identity documents beyond what is required for their specific role.
• Two-Factor Authentication: Available on your 999ct account to add an extra layer of login security.
• Regular Security Audits: Our platform and infrastructure undergo periodic security reviews to identify and address vulnerabilities.
• Fraud Monitoring: Automated systems monitor for suspicious login attempts, unusual transaction patterns and other security signals in real time.

9 Your Rights Over Your Data

As a 999ct account holder, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team at [email protected] from the email address registered to your account.

• Right of Access: You can request a summary of the personal data we hold about you at any time.
• Right to Correction: If any information in your account is inaccurate or out of date, you can request that it be corrected. Some fields — such as your registered name — may require re-verification before being updated.
• Right to Erasure: You may request deletion of your personal data. This right is subject to legal retention obligations — for example, transaction records that must be kept for fraud and compliance purposes cannot be deleted on request before the mandatory retention period expires.
• Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances, such as while a dispute is being investigated.
• Right to Data Portability: You can request a copy of your account and transaction data in a commonly used format.
• Right to Object: You can object to the use of your data for any purpose beyond what is strictly necessary to operate your account.

We will respond to all data rights requests within 30 days. Complex requests may take longer, in which case we will notify you of the delay and provide an estimated completion date.

10 Minors

999ct is strictly for adults aged 18 and above. We do not knowingly collect or store personal data from individuals under the age of 18. Age is verified as part of the account registration and KYC process using CNIC details.

If we discover that an account has been created by or on behalf of a minor, the account will be suspended immediately, all data associated with it will be deleted, and any funds in the account will be returned to the payment method used for the original deposit after identity verification of the appropriate adult guardian.

If you believe a minor has registered on 999ct using false information, please contact [email protected] immediately so we can investigate and take appropriate action.

11 Changes to This Policy

999ct may update this Privacy Policy from time to time to reflect changes in how we operate, the services we offer, or to address new legal or security requirements. When we make material changes, we will update the "last updated" date at the top of this page.

For significant changes that affect how your data is processed, we will send a notification to your registered email address at least 14 days before the change takes effect. Your continued use of the platform after the effective date of any update constitutes your acceptance of the revised policy.

We recommend checking this page periodically to stay up to date with how 999ct handles your personal information.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your information has been handled, you can get in touch with the 999ct support team directly.

• Email: [email protected]
• Live Chat: Available 24/7 through the platform once logged in
• Response Time: Data-related queries are typically responded to within 3 business days

For general platform questions, visit the FAQ page where many common queries are already answered. For account access issues, the Login page has further guidance.