Privacy Policy — How ct998 Handles Your Data

This Privacy Policy ("Policy") is issued by ct998 ("ct998", "we", "us", or "our"), the operator of the online gaming platform accessible at https://ct998.vip. This Policy governs the collection, use, storage, disclosure, and protection of personal information provided by or collected from individuals ("you", "your", "User", or "Player") who access or use the ct998 platform, including its website, mobile-optimised interface, customer support channels, and related services.

ct998 is committed to handling your personal data responsibly and transparently. This Policy has been drafted in plain English to ensure that players across Pakistan — including those in Karachi, Lahore, Faisalabad, and Islamabad — fully understand how their information is managed. We encourage you to read this Policy carefully before registering a ct998 account or making use of any platform feature.

By accessing ct998 and accepting our Terms and Conditions, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, you should not use the ct998 platform.

For the purposes of applicable data protection legislation, ct998 acts as the Data Controller in respect of the personal data you provide when registering for and using the ct998 platform. This means ct998 is responsible for determining the purposes and means by which your personal data is processed.

ct998 operates under an international gaming licence. All data processing activities are conducted in accordance with the data protection requirements of that licensing framework, as well as applicable international best-practice standards including principles aligned with the General Data Protection Regulation (GDPR), which ct998 has voluntarily adopted as a benchmark for data governance.

All data protection enquiries, subject access requests, and complaints relating to how ct998 handles your personal information should be directed to the ct998 Data Protection contact at: [email protected].

ct998 collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the site and its technical infrastructure, and from third-party service providers where permitted and necessary. The categories of personal data ct998 may collect include:

ct998 does not intentionally collect special category data (such as racial or ethnic origin, religious beliefs, or health information) unless you voluntarily disclose such information in a support communication, in which case it will be used only to assist with your specific enquiry and will not be retained beyond that purpose.

ct998 uses the personal data it collects for clearly defined purposes only. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which ct998 processes personal data are:

• Account Registration and Management: To create and maintain your ct998 account, verify your identity, and manage your access to platform features.
• Age and Identity Verification: To confirm that you are at least 21 years of age and to satisfy Know Your Customer (KYC) requirements mandated by ct998's licensing obligations.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or bank transfer) in PKR, and to maintain accurate financial records.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for suspicious activity and to comply with international AML and counter-terrorism financing obligations applicable to licensed gaming operators.
• Gaming Services Delivery: To provide cricket betting, sportsbook, slot games, live dealer games, and other gaming products, and to record and settle bets and wagers accurately.
• Responsible Gaming: To enforce deposit limits, self-exclusion requests, and cooling-off periods, and to identify patterns of play that may indicate problem gambling behaviour, in line with our obligations under our Responsible Gaming Policy.
• Bonus and Promotion Administration: To determine eligibility for bonuses, to enforce wagering requirements, and to detect and prevent bonus abuse.
• Customer Support: To respond to your enquiries, process complaints, and provide technical assistance.
• Security and Fraud Prevention: To detect, investigate, and prevent unauthorised account access, fraudulent transactions, multi-accounting, and other prohibited activities.
• Legal and Regulatory Compliance: To meet our obligations under applicable law and our licensing conditions, including responding to lawful requests from regulatory or law enforcement authorities.
• Service Improvement: To analyse aggregated, anonymised usage data to improve platform performance, user experience, and game offering.

ct998 will not use your personal data to send unsolicited marketing communications without your explicit prior consent. Where you have consented to receive promotional communications about bonuses, new games, or ct998 offers, you may withdraw that consent at any time by contacting ct998 support.

ct998 processes your personal data on the following legal bases, consistent with GDPR-aligned principles that ct998 applies as a data governance standard:

• Contractual Necessity: The majority of ct998's data processing is necessary to perform the contract between you and ct998 — namely, to provide you with an online gaming account and the associated services you have requested.
• Legal Obligation: Certain processing activities — including KYC verification, AML transaction monitoring, and record-keeping — are required by law or by the conditions of ct998's international gaming licence. ct998 cannot operate lawfully without undertaking this processing.
• Legitimate Interests: ct998 processes certain data on the basis of its legitimate interests in operating a secure and commercially viable gaming platform. This includes fraud detection, security monitoring, and the prevention of bonus abuse. In each case, ct998's legitimate interests are balanced against your rights and interests.
• Consent: Where ct998 relies on consent as a legal basis — for example, for the sending of promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ct998 does not sell, rent, or trade your personal data. ct998 may share your personal data with third parties only in the following specific and limited circumstances:

• Payment Processors: ct998 shares necessary financial data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer facilitators strictly for the purpose of processing your deposits and withdrawals. These providers are contractually bound to process your data only as instructed by ct998.
• Identity Verification Providers: ct998 may use third-party KYC and identity verification services to confirm your age and identity. These providers process your verification documents under strict confidentiality obligations.
• Gaming Software Providers: The game studios and software providers whose titles appear on ct998 may receive anonymised technical data necessary for game delivery and fairness certification. They do not receive your personally identifiable information.
• Regulatory and Law Enforcement Authorities: ct998 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by law, court order, or the conditions of ct998's gaming licence. ct998 will disclose only the minimum data necessary to satisfy any such request.
• Professional Advisers: ct998 may share data with lawyers, auditors, and other professional advisers under legally binding confidentiality obligations where necessary to obtain professional advice or conduct legal proceedings.
• Business Transfers: In the event of a merger, acquisition, or sale of ct998 or its assets, personal data held by ct998 may be transferred to the acquiring entity. In such circumstances, ct998 will notify affected users and ensure that the receiving entity is bound by data protection obligations at least equivalent to those in this Policy.

ct998 uses cookies and similar tracking technologies on its website and platform. A cookie is a small text file placed on your device when you visit a website. ct998 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the ct998 platform to function. They enable secure login, session management, and core gaming functionality. You cannot opt out of these cookies without ceasing to use the platform.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use ct998 — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data is used exclusively to improve the platform.
• Functional Cookies: These cookies remember your preferences, such as language settings and display options, to provide a more personalised experience on ct998.
• Security Cookies: ct998 uses security cookies to detect and prevent fraudulent activity, multi-accounting, and unauthorised access attempts. These are classified as necessary cookies for the purposes of the platform's integrity.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impair your ability to use some features of the ct998 platform. ct998 does not currently use third-party advertising or behavioural targeting cookies.

ct998 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. Specific retention periods applicable to different categories of data are set out below:

Upon expiry of the applicable retention period, ct998 will securely delete or anonymise your personal data in a manner that prevents its recovery or reconstruction.

ct998 operates under an international gaming licence and utilises technology infrastructure that may involve the storage or processing of personal data in jurisdictions outside Pakistan. Where personal data is transferred internationally, ct998 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards employed by ct998 for international data transfers include:

• Standard contractual clauses or equivalent contractual protections with recipient organisations;
• Transfers only to jurisdictions that ct998 has assessed as providing an adequate level of data protection;
• Application of end-to-end encryption for all data in transit across international networks.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting ct998 at [email protected].

As a ct998 player, you hold the following rights in relation to your personal data. ct998 is committed to facilitating the exercise of these rights without undue delay and at no cost to you:

• Right of Access: You have the right to request a copy of the personal data ct998 holds about you, together with information about how it is being processed. This is commonly known as a Subject Access Request (SAR). ct998 will respond to valid SARs within 30 days.
• Right to Rectification: If any personal data ct998 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request that ct998 delete your personal data. This right is not absolute — ct998 may be required to retain certain data to comply with legal obligations, resolve disputes, or enforce agreements. Where deletion is not possible in full, ct998 will explain which data must be retained and why.
• Right to Restriction of Processing: You have the right to request that ct998 temporarily restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where ct998 processes your personal data on the basis of consent or contractual necessity, and the processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of ct998's legitimate interests where you believe your rights and interests override ct998's. Upon receipt of an objection, ct998 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing conducted prior to withdrawal.

To exercise any of the above rights, please contact ct998 support at [email protected], clearly stating the nature of your request. ct998 may ask you to verify your identity before processing your request to protect against unauthorised data disclosure.

ct998 is strictly an adults-only platform. No person under the age of 21 is permitted to register a ct998 account, make a deposit, or participate in any gaming activity on the ct998 platform. ct998 employs age verification procedures at registration and reserves the right to request identity documents at any point to confirm a player's age.

ct998 does not knowingly collect personal data from individuals under the age of 21. If ct998 discovers or is notified that a minor has registered an account or provided personal data, ct998 will immediately suspend the account, void any balances, and permanently delete all associated personal data. Any deposits made by a minor will be refunded to the original payment method where technically possible.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on ct998, please contact ct998 immediately at [email protected] so that the account can be closed and the data removed without delay.

ct998 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• TLS 1.3 Encryption: All data transmitted between your browser or device and ct998's servers is encrypted using Transport Layer Security version 1.3, the current industry standard for secure web communications.
• AES-256 Encryption at Rest: Sensitive personal data stored on ct998's servers — including identity documents and payment identifiers — is encrypted using AES-256, a military-grade encryption standard.
• Access Controls: Access to systems and databases containing personal data is restricted to ct998 personnel who require it to perform their job functions. All access is logged and subject to regular review.
• Multi-Factor Authentication: ct998's internal systems require multi-factor authentication for staff access, reducing the risk of unauthorised internal access.
• Intrusion Detection: ct998 operates real-time intrusion detection and prevention systems to identify and respond to potential security threats before they impact player data.
• Regular Security Audits: ct998 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in its platform and infrastructure.
• Incident Response Plan: ct998 maintains a documented data breach response procedure. In the event of a security incident affecting personal data, ct998 will act swiftly to contain the breach, assess its scope, notify affected players, and report to relevant authorities where required.

While ct998 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure — choose a strong, unique password for your ct998 account, do not share your login credentials with anyone, and contact ct998 support immediately if you suspect unauthorised access to your account.

The ct998 platform may contain references or hyperlinks to third-party websites or services. ct998 has no control over the content, privacy practices, or data handling policies of such external sites. This Privacy Policy applies solely to personal data collected and processed by ct998 in connection with the ct998 platform. ct998 accepts no responsibility or liability for the privacy practices of third-party websites accessed via any link from the ct998 platform.

ct998 strongly recommends that you review the privacy policy of any third-party website you visit before providing any personal information on that site.

ct998 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, ct998's data processing practices, or platform functionality. When material changes are made to this Policy, ct998 will notify registered players by email to the address associated with their ct998 account, by a prominent notice on the ct998 platform, or by both methods.

The "Last Updated" date displayed at the top of this Policy indicates when the most recent revision took effect. Your continued use of the ct998 platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should close your ct998 account before the revised Policy takes effect and contact ct998 support to request deletion of your personal data.

ct998 encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected. Archived versions of previous Privacy Policy editions are available on request from ct998 support.

If you have any questions, concerns, or complaints about this Privacy Policy or about how ct998 handles your personal data, please do not hesitate to get in touch with the ct998 Data Protection team:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Average Response Time: Under 10 minutes

ct998 takes all privacy-related enquiries seriously and will respond to your communication as promptly as possible. Where your enquiry relates to the exercise of a data subject right, ct998 will acknowledge receipt within 3 business days and provide a substantive response within 30 days of receipt of your request, in accordance with applicable data protection standards.