c999 Privacy Policy — How We Handle Your Data on Pakistan's Gaming Platform

This Privacy Policy explains how c999 — operated through the website at c999.click — collects, uses, processes, stores and protects your personal information when you access or use our platform. The platform includes all services offered by c999: online casino games, live casino, sports betting, cricket betting, football betting, virtual sports, Teen Patti, deposit and withdrawal functionality, and any related features or communications.

c999 is committed to handling your personal data with care, transparency and respect. We built this platform for Pakistani players, and we understand that trust in how we handle your data is just as important as the quality of the games and services we offer. This policy is written in plain English — not dense legal language — so you can clearly understand what we do and why.

By registering a c999 account and using our platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside the c999 Terms and Conditions, which govern your overall use of the platform.

c999 is the data controller responsible for the personal information collected through this platform. As data controller, c999 determines the purposes for which your personal data is processed and the means by which that processing takes place.

For any questions, requests or concerns relating to your personal data and how c999 handles it, you can contact us directly:

c999 collects several categories of personal data in the course of providing its services to you. Below is a detailed breakdown of the types of information we hold:

c999 does not collect special categories of sensitive personal data such as racial or ethnic origin, religious beliefs, health information or biometric data.

c999 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support or submitting account settings changes.
• Automated collection: Technical and usage data collected automatically through your browser and device when you access c999 — including IP addresses, device identifiers and session data captured via cookies and similar technologies.
• Payment partners: Transaction confirmation data received from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks and card payment processors to confirm deposits and withdrawals on your c999 account.
• KYC and verification partners: Where you submit identity documents for verification, c999 may use third-party KYC service providers to process and confirm the authenticity of those documents. These providers operate under strict data processing agreements with c999.
• Fraud and risk monitoring systems: Automated systems that analyse transactional and behavioural patterns to detect suspicious activity, unusual access patterns or potential account security breaches.

c999 uses your personal data for the following specific purposes:

• Account operation: Creating, maintaining and managing your c999 account, including login authentication, balance management and account history.
• Payment processing: Executing deposit and withdrawal transactions via your chosen PKR payment method and maintaining accurate financial records associated with your account.
• Identity verification: Confirming your age, identity and the ownership of payment methods used on your account, as required by our operational and compliance obligations.
• Anti-money laundering (AML) compliance: Monitoring transaction patterns and maintaining records as required to detect and report suspicious financial activity in accordance with applicable regulations.
• Responsible gaming: Monitoring gaming behaviour patterns to identify signs of problem gambling and, where applicable, intervening with responsible gaming tools or communications as part of c999's duty of care obligations.
• Customer support: Responding to your queries, resolving disputes and maintaining records of support interactions for quality assurance purposes.
• Platform security: Detecting and preventing fraud, unauthorised account access, bonus abuse and any other activity that violates c999's Terms and Conditions.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the platform and improve features, game selection and user experience.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates to players who have opted in to marketing communications. You can opt out at any time through your account settings.

c999 processes your personal data based on one or more of the following legal grounds, depending on the type of processing:

c999 does not sell, rent or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only with the following categories of service provider, and only to the extent necessary to deliver the c999 service to you:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard processing networks — to execute your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party services that verify the authenticity of identity documents submitted during account verification. These providers are bound by strict data protection agreements.
• Game software providers: Pragmatic Play, NetEnt, Ezugi, Play'n GO, Microgaming, Playtech and other providers whose games are hosted on the c999 platform. These providers may receive limited technical data necessary to deliver their games to your device.
• Fraud prevention and security services: Specialist providers that assist c999 in detecting and preventing fraudulent activity, account takeovers and financial crime.
• Legal and regulatory authorities: Where required by law, c999 will disclose personal data to government authorities, law enforcement agencies or regulators — including in connection with AML investigations or court orders.
• Business transfers: In the event of a merger, acquisition or asset sale involving c999's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

Some of c999's service providers — particularly game software companies and technical infrastructure providers — operate servers located outside Pakistan. Where your personal data is transferred internationally, c999 ensures that appropriate safeguards are in place to protect your information to the same standard as this policy describes.

These safeguards include contractual data protection clauses in agreements with all international service providers, restricting access to only what each provider needs to perform their specific service function, and regular reviews of the security practices of key third-party partners.

c999 takes the security of your personal data seriously. The platform employs the following technical and organisational measures to protect your information:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the c999 platform.
• Encrypted storage for sensitive data including payment information and identity documents.
• Role-based internal access controls — only c999 staff who need access to specific data categories for their job function can access those records.
• OTP (one-time password) verification for login, withdrawals and sensitive account changes.
• Regular internal security audits and monitoring of access logs to detect unusual activity.
• Automated fraud detection systems that flag suspicious transaction patterns for review.

While c999 implements robust security measures, no platform can guarantee absolute security against all possible threats. You play an important role in protecting your own account — use a strong, unique password, never share your login credentials and contact c999 support immediately if you notice any unusual activity on your account.

c999 retains your personal data for as long as is necessary for the purposes described in this policy and as required by applicable regulations:

• Active account data: Retained throughout the period your c999 account remains open and active.
• Transaction and financial records: Retained for a minimum of 5 years after the date of the transaction, as typically required by financial regulations and anti-money laundering obligations.
• Identity verification documents: Retained for the period required by applicable KYC regulations, typically 5 years from account closure or the last transaction date.
• Support communication records: Retained for up to 3 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing preferences: Retained only while your account is active or until you withdraw consent, whichever is earlier.

When data is no longer required and its retention period has passed, c999 securely deletes or anonymises it so it can no longer be linked to your identity.

As a c999 user, you have the following rights over your personal data. To exercise any of these rights, contact us at support@c999.click. c999 will respond to all data rights requests within 30 days.

c999 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that help the platform function correctly and give us insight into how it's being used.

c999 uses the following types of cookies:

• Essential cookies: Required for the platform to function — including session management, login authentication and security features. These cannot be disabled without affecting platform functionality.
• Performance cookies: Collect anonymised data about how users interact with c999 — page views, time on site, features used. This data helps us identify what's working well and what needs improvement.
• Functional cookies: Remember your preferences — language, display settings, last visited section — to provide a more personalised experience on return visits.
• Marketing cookies: Used only where you have consented to receive personalised promotions — to show relevant offers and track the effectiveness of marketing communications. You can opt out of these through your account settings.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the c999 platform normally — in particular, login sessions may not persist correctly.

c999 may send you promotional emails, SMS messages and in-platform notifications about bonuses, new games, special offers and platform news — but only where you have explicitly opted in to receive these communications during registration or through your account settings.

You can withdraw your marketing consent and opt out of all promotional communications at any time by:

• Updating your communication preferences in your c999 account settings.
• Clicking the unsubscribe link in any marketing email sent by c999.
• Contacting support at support@c999.click and requesting removal from all marketing lists.

Withdrawing marketing consent does not affect the sending of essential transactional communications — c999 will continue to contact you about account activity, deposits, withdrawals, security alerts and support responses regardless of your marketing preference setting.

c999 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the account registration and KYC process to confirm that all c999 users meet the minimum age requirement.

If c999 becomes aware that personal data has been collected from a person under 18, that account will be closed immediately, all funds will be returned via the verified payment method and the personal data will be deleted from c999's systems as soon as legally permissible.

If you believe a minor may have registered on c999, please contact us immediately at support@c999.click.

c999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or platform features. When material changes are made, c999 will notify registered users via email or via a notification within the platform before the changes take effect.

The current version of this policy is always available at c999.click/privacy-policy, with the effective date shown at the top of the page. Your continued use of the c999 platform after updates to this policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should stop using c999 and request account closure.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how c999 is handling your personal information, please get in touch with our team. We take all privacy enquiries seriously and will respond as quickly as possible.

For information about the responsible gaming tools available on c999 — including deposit limits, self-exclusion and cooling-off periods — please visit the Responsible Gaming page.