CT99 Privacy Policy – How We Protect Your Data

1. Introduction

This Privacy Policy applies to all users of the CT99 platform, including the website at ct99.wine and the CT99 mobile app available for Android and iOS devices. It covers all personal data processed by CT99 in connection with your account, your gaming activity and your use of our support services.

By registering an account or using the CT99 platform in any way, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how your data is collected and used as described here, you should not use the platform.

This policy should be read together with the Terms and Conditions, which set out the broader rules governing your use of CT99. Where the two documents overlap, the Terms and Conditions take precedence on matters of account conduct, and this Privacy Policy governs all matters relating to personal data.

CT99 takes its data responsibilities seriously. We collect the minimum amount of personal information necessary to deliver the services you use, keep your account secure and comply with identity and payment verification requirements. We do not collect data speculatively or hold it longer than necessary.

2. Data We Collect

The categories of personal data CT99 may collect from you include the following:

We do not collect sensitive data such as biometric data, health records, or political or religious views. We do not collect data about your activity on other websites unless it arrives via a legitimate referral mechanism.

3. How We Collect Your Data

CT99 collects your personal data through the following channels:

• Directly from you — when you register an account, make a deposit or withdrawal, contact support, respond to a promotion or submit verification documents.
• Automatically — when you use the website or app, our systems record technical data such as your IP address, device information, session duration and pages visited. This is standard practice for all online platforms.
• From payment providers — when you transact via JazzCash, Easypaisa, Raast or bank transfer, the payment provider shares transaction confirmation data with CT99 to credit or debit your account.
• From identity verification providers — when KYC checks are required, we may use third-party verification services that process your submitted documents and return a verification result to CT99.
• From fraud prevention services — CT99 uses industry-standard tools that may flag accounts for additional review based on behavioural or technical signals.

4. How We Use Your Data

CT99 uses your personal data for the following purposes. We only process data where there is a lawful basis for doing so — primarily because it is necessary to deliver the service you have requested, to comply with verification obligations, or because we have a legitimate interest in keeping the platform secure and fair.

• Account management — creating, maintaining and securing your CT99 account, and authenticating you when you log in.
• Payment processing — processing PKR deposits and withdrawals through your chosen payment method and maintaining accurate transaction records.
• Identity verification — confirming your identity and age in accordance with our 18+ policy and account security requirements.
• Customer support — responding to your queries, resolving account issues and maintaining records of support interactions.
• Fraud and security — detecting and preventing fraudulent activity, unauthorised account access, multi-accounting and bonus abuse.
• Platform improvement — analysing usage patterns to improve the website, mobile app, game selection and overall user experience.
• Responsible gaming — monitoring for patterns that may indicate problem gambling and supporting players who request self-exclusion or account restrictions.
• Communications — sending transactional notifications (deposit confirmations, withdrawal updates) and, where you have opted in, promotional communications about CT99 offers relevant to Pakistan players.

CT99 does not use automated decision-making or profiling in any way that produces legal or significantly adverse effects on you without human review.

5. Sharing Your Data

CT99 does not sell your personal data. We do not share your information with advertisers, data brokers or any third party for commercial marketing without your explicit consent. Data sharing is limited to what is necessary to operate the platform and keep it secure.

The categories of recipients who may receive your data are:

• Payment processors — JazzCash, Easypaisa, Raast, banks and other payment intermediaries, strictly for the purpose of processing your PKR transactions.
• Identity verification providers — third-party KYC services that verify identity documents. These providers are bound by strict data processing agreements.
• Fraud prevention and security providers — services that help CT99 detect suspicious activity and protect the platform and its users.
• Technology and hosting providers — companies that provide the infrastructure on which CT99 operates. These providers do not have independent rights to use your data.
• Legal and regulatory compliance — if required by a valid legal process, court order or applicable law, CT99 may disclose data to the relevant authority. We will notify you where we are legally permitted to do so.

All third parties who receive your personal data are required to handle it in a manner consistent with this Privacy Policy and applicable data protection standards.

6. Payments and PKR Transactions

CT99 processes all real-money transactions in PKR (Pakistani Rupees). When you make a deposit or submit a withdrawal request, the relevant transaction data is shared with the payment provider you have selected — JazzCash, Easypaisa, Raast or your bank — solely for the purpose of completing the transaction.

CT99 does not store full payment account credentials on our servers. Payment references and partial account identifiers are retained only to match transactions to your account, verify payment ownership and facilitate withdrawal processing.

• JazzCash and Easypaisa account numbers are stored in partial form (masked) after the initial transaction is confirmed.
• Bank account details submitted for withdrawal are handled in accordance with standard financial data security practices.
• CT99 does not have access to your full mobile wallet PIN or bank account password at any stage.

If you suspect that your payment details have been compromised in connection with your CT99 account, contact our support team immediately via live chat or at [email protected].

7. Data Security

CT99 applies technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures are reviewed and updated regularly in line with industry best practice.

• All data transmitted between your device and CT99 is encrypted using TLS (Transport Layer Security).
• Account passwords are stored using industry-standard cryptographic hashing — they are never stored in plain text.
• Access to personal data within CT99's systems is restricted to staff members who require it to perform their role, and is subject to access controls and audit logging.
• CT99's servers and infrastructure are hosted in secured data centre environments with physical and logical access controls.
• In the event of a data breach that affects your personal data in a material way, CT99 will notify affected users as promptly as possible.

No online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password, do not share your login credentials with anyone and contact support immediately if you suspect unauthorised access.

8. Data Retention

CT99 retains your personal data for as long as your account is active and for a reasonable period after account closure, in accordance with our legal and operational obligations. Specific retention periods vary by data category:

• Account and identity data — retained for a minimum of five years after account closure to satisfy record-keeping obligations.
• Transaction records — PKR deposit and withdrawal records are retained for a minimum of five years for financial audit and dispute resolution purposes.
• KYC verification documents — retained for the duration of the account and for five years after closure.
• Support communications — retained for up to two years after the interaction is resolved, unless the matter relates to an ongoing dispute.
• Technical and session data — retained for up to 12 months for security and fraud analysis purposes, after which it is anonymised or deleted.

When data is no longer required for any legitimate purpose, CT99 deletes or anonymises it in a secure manner. If you request account closure, your data will be retained for the applicable statutory period before being removed from active systems.

9. Your Rights Over Your Data

You have a number of rights in relation to the personal data CT99 holds about you. To exercise any of these rights, contact us at [email protected] with your registered email address and a description of your request. We will respond within a reasonable timeframe.

10. Cookies and Tracking

CT99 uses cookies and similar technologies to make the platform work properly, remember your preferences and understand how players navigate the site so we can improve the experience.

• Essential cookies — required for core functions such as keeping you logged in, maintaining your session and processing transactions securely. These cannot be disabled without breaking the platform.
• Functional cookies — used to remember your language preferences, display settings and other personalisation choices between sessions.
• Analytics cookies — help CT99 understand which pages and features are most used, how long sessions last and where players encounter difficulties. This data is aggregated and does not identify you individually.
• Security cookies — used to detect and prevent fraudulent or abusive behaviour on the platform.

Most browsers allow you to control cookies through settings. Blocking essential cookies may prevent some parts of CT99 from functioning correctly. CT99 does not use third-party advertising cookies or allow ad networks to track your activity across other websites through our platform.

11. Minors and Age Verification

CT99 is strictly an adults-only platform. We do not knowingly collect or process personal data belonging to individuals under the age of 18. Age verification is part of our registration and KYC process and is applied consistently to all accounts.

If CT99 becomes aware that personal data has been collected from a person under 18, that account will be suspended immediately, the data will be securely deleted and any deposits held in the account will be dealt with in accordance with our Terms and Conditions.

If you believe a minor may have registered an account using false information, please contact us at [email protected] so we can investigate and act immediately.

12. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how CT99 has handled your personal information, please get in touch with us. We are committed to resolving privacy concerns promptly and transparently.

• Email: [email protected]
• Live Chat: Available 24/7 through the CT99 website and mobile app
• Response time: We aim to respond to all privacy-related requests within one business day

If you submit a data access or erasure request, we may need to verify your identity before processing it. This is to ensure we do not release or delete personal data based on a request from an unauthorised person.