ct999 Privacy Policy

1 Introduction

1.1 ct999 is an online betting and live casino platform serving players in Bangladesh and other eligible markets. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered account holder, a visitor browsing the site, or a person communicating with our support team.

1.2 This Privacy Policy sets out the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, the third parties with whom we may share data, and the rights available to you as a data subject.

1.3 This Privacy Policy should be read alongside the ct999 Terms & Conditions and Responsible Gaming Policy, both of which are published on this site. In the event of any conflict between this Privacy Policy and another ct999 document regarding the handling of personal data, this Privacy Policy takes precedence.

1.4 We may update this Privacy Policy from time to time. The current version is always published at https://ct999.io/privacy-policy. We will notify registered players of material changes via the email address associated with their ct999 account. The date of the most recent update is displayed at the top of this page.

2 Data We Collect

2.1 ct999 collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and from third-party service providers where necessary for verification or fraud prevention purposes.

2.2 The following table summarises the main categories of personal data we collect and the primary source of each category:

2.3 ct999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than as part of identity document verification), or data concerning health or sexual orientation, unless specifically required by law or regulation in connection with responsible gaming obligations.

2.4 Where you choose not to provide personal data that is marked as mandatory during registration or KYC, we may be unable to open or maintain your account, process withdrawals, or provide certain features of the platform.

3 How We Use Your Data

3.1 ct999 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity and age, maintain accurate account records, and provide you with access to ct999 platform features.
• Transaction processing: To process deposits, withdrawals, and bonus credits via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and to maintain accurate financial records of all account transactions.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years, to verify the accuracy of the personal information provided at registration, and to satisfy KYC and anti-money-laundering (AML) obligations.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct as defined in the ct999 Terms & Conditions.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour, to apply deposit limits, cooling-off periods, or self-exclusion measures at your request, and to fulfil our duty of care obligations towards players.
• Customer support: To respond to your enquiries, process complaints, and provide technical assistance via live chat, email, or other support channels.
• Marketing communications: To send you promotional offers, bonuses, and platform news where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
• Platform improvement: To analyse aggregate usage data and session behaviour in order to improve the ct999 platform, identify technical issues, and develop new features.
• Legal compliance: To comply with applicable laws, regulations, court orders, and lawful requests from competent authorities.

3.2 ct999 does not use your personal data for automated profiling or automated decision-making that produces legal or similarly significant effects without human review. Where automated screening tools are used for fraud detection or responsible gaming monitoring, any account-level action arising from such screening is reviewed by a member of the ct999 team before implementation.

4 Legal Basis for Processing

4.1 ct999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform our contract with you — including account registration, transaction processing, and customer support — is carried out on the basis that it is required to fulfil our contractual obligations to you as a ct999 account holder.
• Legal obligation: Certain processing activities — including identity verification, KYC/AML checks, and financial record-keeping — are carried out because ct999 is legally required to do so under applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out where ct999 has a legitimate interest in doing so that is not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, for marketing communications — we will clearly identify this at the point of data collection. You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

4.2 If you wish to understand the specific legal basis for any particular processing activity carried out by ct999, you may submit a written request to our support team at [email protected].

5 Data Sharing & Disclosure

5.1 ct999 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment processors: Your payment details are shared with our approved payment processing partners (including bKash, Nagad, Rocket, Upay, and international card processors) strictly for the purpose of processing your deposit or withdrawal transaction.
• Identity verification providers: Your identity documents and personal information may be shared with third-party KYC and AML verification service providers for the purpose of confirming your identity and age.
• Game providers: In the course of providing live casino and slot game services, certain technical session data (such as your account identifier and bet amounts) is shared with our third-party game providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi. This sharing is limited to data strictly necessary for the delivery of the game service.
• IT and infrastructure providers: ct999 uses third-party cloud hosting, database, and security infrastructure providers. These providers process data on our behalf and are bound by data processing agreements that restrict their use of your data to the delivery of services to ct999.
• Legal and regulatory authorities: ct999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law, court order, or binding regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ct999's business, personal data held by ct999 may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer via their registered email address prior to their data being subject to a materially different privacy policy.

5.2 All third parties with whom ct999 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

6 Cookies & Tracking

6.1 ct999 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device by your browser when you visit ct999. They help us recognise your device, maintain your session, and understand how you use the platform.

6.2 ct999 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and security checks. These cookies cannot be disabled without preventing the platform from operating correctly.
• Performance and analytics cookies: These cookies collect aggregated, anonymous data about how visitors use ct999 — such as which pages are visited most frequently and whether users encounter error messages. This data helps us improve the platform experience.
• Functional cookies: These cookies remember your preferences (such as your preferred language and currency display settings) to provide a more personalised experience across your sessions.
• Marketing cookies: Where you have consented, these cookies track your activity across the platform to allow us to deliver relevant promotional content and measure the effectiveness of our marketing communications.

6.3 You may control cookie preferences through your browser settings. Please note that disabling certain categories of cookies — particularly strictly necessary cookies — may affect the functionality of the ct999 platform and prevent you from accessing some features.

6.4 ct999 does not use cross-site tracking cookies that follow your activity outside of the ct999 platform domain.

7 Data Security

7.1 ct999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and ct999 servers is encrypted using industry-standard SSL/TLS protocols.
• Access controls: Access to personal data is restricted to authorised ct999 personnel and third-party service providers on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Secure storage: Personal data is stored on secure, access-controlled servers. Payment card data is handled exclusively by PCI-DSS compliant payment processors and is not stored on ct999 servers.
• Intrusion detection: ct999 employs network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular security reviews: ct999 conducts periodic security assessments and vulnerability testing to identify and address weaknesses in our platform infrastructure.

7.2 Despite these measures, no method of transmission over the internet or electronic storage is completely secure. ct999 cannot guarantee absolute security of your personal data. If you have reason to believe that your ct999 account has been compromised, you should contact ct999 support immediately at [email protected] and change your account password without delay.

7.3 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ct999 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

8 Data Retention

8.1 ct999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable law.

8.2 The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, to meet financial record-keeping, anti-money-laundering, and responsible gaming audit requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years following the date of each transaction.
• KYC / identity documents: Copies of identity documents submitted for KYC verification are retained for a minimum of five (5) years following account closure.
• Support communications: Live chat transcripts and email correspondence with ct999 support are retained for up to three (3) years following the close of the relevant support case.
• Marketing data: Where you have opted in to marketing communications, your marketing preferences and associated contact data are retained until you opt out or request deletion, subject to any applicable legal retention requirements.
• Technical / log data: Server logs and technical access data are retained for up to twelve (12) months for security monitoring and platform diagnostic purposes.

8.3 At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and platform improvement purposes.

9 Your Rights

9.1 As a data subject, you have the following rights in relation to the personal data that ct999 holds about you. To exercise any of these rights, please contact ct999 support at [email protected]. ct999 will respond to verified requests within a reasonable timeframe.

9.2 ct999 will not charge a fee for exercising your data rights in ordinary circumstances. If a request is manifestly unfounded or excessive, ct999 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation provided.

9.3 ct999 may need to verify your identity before processing a data rights request. This is to ensure that personal data is not disclosed to, or amended at the request of, an unauthorised individual.

10 Children & Minors

10.1 ct999 is strictly an adults-only platform. The minimum age requirement to register and use ct999 is 21 years. We do not knowingly collect personal data from any person under the age of 21.

10.2 If ct999 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the affected account, return any funds to the payment source, and securely delete all personal data associated with the account.

10.3 If you believe that a minor has registered a ct999 account or that personal data of a person under 21 years has been submitted to ct999, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

11 Third-Party Services

11.1 The ct999 platform integrates services provided by third-party companies, including game providers, payment processors, and infrastructure partners. When you interact with these third-party services through the ct999 platform, those providers may collect certain technical and transactional data independently in accordance with their own privacy policies.

11.2 ct999 is not responsible for the privacy practices of third-party game providers or payment processors. We encourage you to review the privacy policies of any third-party service you interact with. The following third-party categories are relevant to ct999 users:

• Game providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi): May collect session and game-play data to deliver the game service and for their own fair-play and integrity monitoring purposes.
• Payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard processors): Collect and process payment transaction data in accordance with their own privacy policies and applicable financial regulations.
• KYC / AML providers: Process identity document data for the sole purpose of verifying player identity and age on behalf of ct999.

11.3 ct999 does not include links to external third-party websites within its platform. Any reference to third-party brands, game providers, or payment methods on ct999 is for informational purposes only and does not constitute endorsement of those parties' privacy or data practices.

12 Policy Updates

12.1 ct999 reserves the right to update or modify this Privacy Policy at any time. The updated version will be published at https://ct999.io/privacy-policy with the revised date displayed prominently at the top of the page.

12.2 Where changes to this Privacy Policy are material — meaning they significantly affect the way in which your personal data is collected, used, or shared — ct999 will notify registered players via the email address associated with their ct999 account at least seven (7) days before the updated policy takes effect.

12.3 Your continued use of the ct999 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not accept the updated Privacy Policy, you must cease using the platform and may request account closure by contacting ct999 support.

12.4 Previous versions of this Privacy Policy are available on request by contacting ct999 support at [email protected].

13 Contact Us

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way ct999 handles your personal data, please contact our support team using the details below. We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve substantive requests within thirty (30) days.

13.2 All privacy-related correspondence should be directed to:

13.3 When submitting a privacy request, please include your registered account username and the email address associated with your ct999 account so that we can locate your records and verify your identity efficiently. Do not include sensitive documents such as copies of identity documents in your initial email — our team will advise you on the secure submission process for any documentation required.

13.4 ct999 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response, you retain the right to escalate your concern to the appropriate data protection authority in your jurisdiction.