1. Overview & Scope
cty999 operates Pakistan's premier online gaming destination, providing cricket betting, live casino games, slots, fishing games, and related services to players across Karachi, Lahore, Islamabad, Faisalabad, and throughout Pakistan. In the course of delivering these services, cty999 necessarily collects and processes certain personal information about the individuals who use our Platform.
This Policy applies to all personal data collected through:
- The cty999 website at cty999.pro and all associated subdomains.
- The cty999 mobile-optimised web interface.
- Any electronic communication between you and cty999, including support tickets, emails, and live chat.
- Third-party payment processors operating on behalf of cty999 for the purpose of processing your deposits or withdrawals.
This Policy does not apply to third-party websites or services that may be referenced on the Platform. cty999 is not responsible for the privacy practices of any external parties.
2. Data We Collect
cty999 collects the minimum data necessary to provide our services, fulfil legal obligations, and maintain platform security. The categories of personal data we collect are set out in the table below:
| Data Category | Specific Data Points | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, CNIC / passport number | Yes (KYC) |
| Contact Data | Email address, mobile phone number, residential address (city, province, Pakistan) | Yes |
| Financial Data | JazzCash / EasyPaisa account references, bank account details (for verified withdrawals), transaction history | Yes |
| Account Data | Username, encrypted password hash, account creation date, login history, session timestamps | Yes |
| Gaming Activity | Bet history, game sessions, wagering amounts, win/loss records, bonus redemptions | Yes |
| Device & Technical Data | IP address, browser type and version, operating system, device identifiers, time zone | Automatic |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Where applicable |
| KYC Documents | Scanned copies of CNIC, passport, driving licence, proof of address, proof of payment method | Yes (withdrawal) |
3. How We Collect Data
cty999 collects personal data through the following means:
3.1 Direct Collection
You provide data directly when you: register an account on the Platform; complete KYC verification; make a deposit or request a withdrawal; contact our support team; participate in promotions or surveys; or subscribe to marketing communications.
3.2 Automated Collection
When you access the cty999 Platform, we automatically collect device and technical data through server logs, cookies, web beacons, and similar tracking technologies. This data is collected passively and does not require any action on your part. Please refer to Section 9 for a detailed explanation of our cookie practices.
3.3 Third-Party Sources
cty999 may receive data about you from third parties in the following circumstances:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and Raast may share transaction confirmation data with cty999 to verify deposit and withdrawal processing.
- Identity Verification Services: cty999 may use third-party KYC verification partners who check your identity documents against official databases to assist with age and identity verification.
- Fraud Prevention Services: cty999 may receive risk assessment data from fraud detection providers to protect the Platform from misuse.
4. Purpose of Processing
cty999 processes your personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes described below:
- Account Management: To create, manage, and maintain your cty999 account, including authentication, password recovery, and account security.
- Service Delivery: To provide access to cricket betting, live casino, slots, fishing games, and all other gaming services available on the Platform.
- Financial Processing: To process deposits, withdrawals, and bonus credits; to maintain accurate financial records; and to facilitate refunds where applicable.
- Legal & Regulatory Compliance: To fulfil KYC obligations, conduct AML checks, comply with regulatory reporting requirements, and respond to lawful requests from government authorities.
- Responsible Gaming: To implement and monitor player protection tools including deposit limits, self-exclusion periods, and session reminders; to detect signs of problem gambling behaviour.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account abuse, bonus exploitation, bot usage, and other prohibited conduct as defined in our Terms and Conditions.
- Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance across all support channels.
- Marketing Communications: Where you have given consent or where permitted under applicable law, to send promotional offers, bonus notifications, and platform updates. You may opt out at any time.
- Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the overall performance, security, and user experience of the cty999 Platform.
5. Legal Basis for Processing
cty999 processes your personal data on one or more of the following legal bases:
- Contractual Necessity: Processing required to perform our contract with you — namely, operating your account, processing transactions, and delivering gaming services.
- Legal Obligation: Processing required to comply with applicable laws, including KYC/AML regulations, age verification requirements, and government reporting obligations.
- Legitimate Interests: Processing carried out for the legitimate business interests of cty999, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your rights and freedoms.
- Consent: Processing carried out on the basis of your explicit consent, including the sending of direct marketing communications. You may withdraw consent at any time without affecting prior processing.
6. Data Sharing & Disclosure
cty999 does not sell or rent your personal data. We share data only in the specific circumstances described below, and only to the extent necessary for each purpose:
6.1 Service Providers
cty999 engages carefully selected third-party service providers who process data on our behalf under strict contractual obligations. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, USDT TRC20 processors), KYC verification services, fraud detection providers, IT infrastructure suppliers, and customer support platforms. All service providers are required to maintain appropriate security standards and are prohibited from using your data for any purpose other than providing their contracted service to cty999.
6.2 Legal & Regulatory Authorities
cty999 may disclose your personal data to law enforcement agencies, regulatory bodies, tax authorities, or courts where required to do so by applicable law or valid legal process. cty999 will, where legally permissible, endeavour to notify you of such disclosure.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of cty999's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to this Policy that arise from it.
6.4 Aggregated & Anonymised Data
cty999 may share aggregated, anonymised statistical data with partners or publish it for research and marketing purposes. This data cannot be used to identify any individual player and does not constitute a disclosure of personal data.
7. Data Retention
cty999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal / regulatory obligation |
| Financial Transaction Records | 7 years from transaction date | AML & tax compliance |
| KYC Documents | 5 years after account closure | Regulatory requirement |
| Gaming Activity Logs | 3 years from account closure | Dispute resolution & auditing |
| Support Communications | 2 years from last interaction | Customer service & compliance |
| Marketing Consent Records | 3 years from consent or withdrawal | Evidence of consent |
| Device & Technical Logs | 12 months | Security & fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.
8. Data Security
cty999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security controls include:
- Encryption in Transit: All data transmitted between your browser and the cty999 Platform is encrypted using TLS 1.2 or higher (HTTPS).
- Encryption at Rest: Sensitive personal data and financial records stored on cty999 servers are encrypted using AES-256.
- Access Controls: Access to personal data within cty999 is restricted on a strict need-to-know basis. All staff with data access undergo background screening and regular privacy training.
- Intrusion Detection: cty999 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
- Regular Security Audits: The cty999 platform undergoes periodic third-party security assessments including penetration testing and vulnerability scanning.
9. Cookies & Tracking Technologies
cty999 uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how our service is used. The types of cookies we deploy are described below:
9.1 Strictly Necessary Cookies
These cookies are essential for the Platform to operate. They manage your login session, maintain your account security, and enable core functionality such as the game lobby and cashier. These cookies cannot be disabled without severely impacting your ability to use the Platform.
9.2 Analytics Cookies
cty999 uses analytics tools to collect anonymised information about how players navigate the Platform — which pages are visited most, where users drop off, and which features are most popular. This data is used exclusively to improve the Platform and is not linked to your individual identity.
9.3 Functional Cookies
Functional cookies remember your preferences such as language settings, display options, and last-visited game categories to provide a more personalised experience on return visits.
9.4 Managing Cookies
You can manage or delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the cty999 Platform. Instructions for managing cookies are available in your browser's help documentation.
10. Your Privacy Rights
As a cty999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at the details provided in Section 14:
- Right of Access: You may request a copy of all personal data we hold about you. We will respond within 30 days of receiving a verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. We cannot erase data that we are legally required to retain.
- Right to Restrict Processing: You may request that we temporarily suspend processing of your data while a dispute or correction request is being resolved.
- Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
- Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Objecting to marketing will result in immediate removal from all marketing lists.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
11. Protection of Minors
cty999 enforces a strict 21+ age restriction on all accounts and gaming activity. The Platform is not intended for, and does not knowingly collect personal data from, any individual under the age of 21.
If cty999 becomes aware that personal data has been collected from a person under the age of 21, the following steps will be taken immediately:
- The account will be suspended and access to the Platform revoked.
- All deposited funds will be returned to the original payment source.
- All personal data associated with the account will be deleted, subject to any legal obligation to retain records of the violation.
- No winnings or bonus credits will be paid out.
If you are a parent or guardian and believe that a minor in your care has registered on the Platform, please contact us immediately at [email protected] so that we can take prompt action.
12. International Data Transfers
cty999 primarily stores and processes data within its operational infrastructure. In some cases, personal data may be transferred to, or processed by, service providers located outside Pakistan — for example, when using international cloud infrastructure or KYC verification services that operate globally.
Where such transfers occur, cty999 ensures that appropriate safeguards are in place, including contractual protections equivalent to those required under applicable data protection standards. By using the Platform, you acknowledge that your data may be transferred internationally in accordance with this Policy.
13. Policy Amendments
cty999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we offer. Where changes are material, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.
The "Effective Date" at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy.
14. Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way cty999 handles your personal data, please contact us using the details below:
If you are not satisfied with how cty999 has handled a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. cty999 will cooperate fully with any such investigation.