ct666 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "ct666" / "we" / "us" / "our" — the internationally licensed online gaming operator that owns, operates, and is responsible for the ct666 Platform at ct666.biz.
• "Platform" — the ct666 website, all associated pages, and mobile-optimised browser interfaces through which Gaming Services are offered.
• "Member" / "you" / "your" — any registered ct666 account holder or visitor who accesses the Platform.
• "Personal Data" — any information that identifies or can reasonably identify you as an individual, including your name, CNIC number, email address, phone number, IP address, and financial transaction details.
• "Processing" — any operation performed on Personal Data, including collection, storage, organisation, retrieval, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. ct666 is the Data Controller for all Personal Data collected through the Platform.
• "Third-Party Processor" — a service provider engaged by ct666 to process Personal Data on ct666's behalf, subject to contractual data protection obligations.
• "KYC Data" — Know Your Customer documentation collected for identity verification, age verification, and anti-money-laundering compliance purposes, including CNIC copies, proof of address, and payment method documentation.

2.1 ct666 collects Personal Data that is necessary for the lawful operation of the Platform and for fulfilment of our obligations under our international gaming license. We do not collect Personal Data beyond what is required for these purposes. The categories of data we collect are described below:

2.1 Registration & Identity Data

When you create a ct666 account, we collect the following information:

• Full legal name as it appears on your CNIC
• Pakistani CNIC number (required for age and identity verification)
• Date of birth (must confirm you are 21 years of age or older)
• Email address (primary account communication channel)
• Mobile phone number (used for OTP verification and account security)
• Residential address in Pakistan
• Username and encrypted password (password is stored in hashed form only)

2.2 KYC Verification Documents

To comply with our gaming license requirements and anti-money-laundering (AML) obligations, ct666 may request and retain copies of the following documents:

• CNIC (front and back) — required for all accounts
• Proof of current residential address (recent utility bill or bank statement)
• Proof of payment method ownership (JazzCash/EasyPaisa account screenshot, bank statement showing your name)
• Source of funds documentation for accounts exceeding defined transaction thresholds

2.3 Financial Transaction Data

ct666 records all financial transactions processed through your PKR Wallet, including:

• Deposit amounts, dates, times, and payment method references
• Withdrawal requests, amounts, processing dates, and destination account references
• Bonus credits, wagering requirement fulfilment records, and bonus expiry data
• Currency: all transactions are recorded in Pakistani Rupees (PKR)

2.4 Gaming Activity Data

• Full bet and wager history across all product areas (sports betting, casino, slots, fishing games)
• Game session duration, frequency, and timing data
• Responsible gaming limit settings and any self-exclusion activations
• Promotional and bonus claim history

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Browser type, version, and operating system
• Device type (mobile, desktop, tablet) and screen resolution
• Session timestamps, page interaction logs, and navigation paths
• Cookie identifiers and similar tracking data (see Section 8)

3.1 ct666 collects Personal Data through the following channels:

• Directly from you — during account registration, KYC submission, support interactions, and any correspondence you initiate with ct666 via live chat or email
• Automatically through the Platform — via cookies, session logs, server-side analytics, and technical data collected each time you interact with the ct666 website or gaming interfaces
• From payment service providers — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank share transaction confirmation data with ct666 for the purpose of crediting your PKR Wallet and verifying withdrawal destinations
• From identity verification services — ct666 may use third-party KYC verification services to cross-reference the identity documents you provide; these services share verification outcomes (pass/fail) with ct666 but do not retain your data independently
• From fraud prevention and AML screening services — ct666 screens member data against applicable watchlists and databases as required by our gaming license obligations

4.1 ct666 processes your Personal Data for the following purposes and on the following legal bases:

4.2 Where ct666 relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5.1 ct666 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Your data is shared only in the circumstances described below:

5.1 Third-Party Service Providers

ct666 engages carefully selected third-party processors who assist in operating the Platform. These providers process your data only on ct666's instructions and are contractually bound to maintain appropriate data protection standards. Categories of processors include:

• Payment processors — JazzCash, EasyPaisa, and banking partners for transaction execution
• KYC / identity verification providers — for CNIC validation and age verification
• AML screening services — for watchlist and sanctions screening required by our gaming license
• Cloud hosting and data storage providers — for secure infrastructure hosting
• Customer support platform providers — for live chat and ticket management systems
• Analytics providers — using anonymised or aggregated data only for Platform performance analysis

5.2 Regulatory & Legal Disclosure

ct666 may disclose your Personal Data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where such disclosure is required by applicable law, court order, or our gaming license obligations. ct666 will, to the extent permitted by law, notify affected members of any such required disclosure.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ct666's assets, your Personal Data may be transferred to the acquiring entity. In such circumstances, ct666 will ensure that the acquiring entity is bound by data protection obligations at least equivalent to those in this Privacy Policy, and members will be notified of the transfer and any changes to their data rights.

6.1 ct666 retains your Personal Data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years after account closure, as required by ct666's gaming license AML obligations
• KYC documents — retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later
• Financial transaction records — retained for a minimum of five (5) years in accordance with anti-money-laundering regulatory requirements
• Gaming activity records — retained for a minimum of three (3) years after the relevant gaming session or transaction
• Customer support correspondence — retained for three (3) years from the date of the last interaction
• Marketing consent records — retained until consent is withdrawn, and for one (1) year thereafter as evidence of the consent interaction

6.2 Where retention is required solely to comply with a legal obligation, ct666 will restrict access to that data during the retention period to only those personnel or systems with a specific need to access it.

6.3 Upon expiry of the applicable retention period, ct666 will securely delete or anonymise your Personal Data so that it can no longer be associated with you as an identifiable individual.

7.1 ct666 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption — all data transmitted between your browser and the ct666 Platform is encrypted using Transport Layer Security (TLS) protocol
• Password hashing — account passwords are stored exclusively in hashed and salted format; ct666 staff cannot read plaintext passwords
• Access controls — Personal Data is accessible only to ct666 personnel who require access to perform their job functions; access is governed by role-based permissions and logged for audit purposes
• Encrypted data storage — sensitive Personal Data and KYC documents are stored in encrypted form on secured infrastructure
• Regular security audits — ct666 conducts periodic internal and third-party security assessments of its Platform and data infrastructure
• Fraud monitoring systems — automated systems continuously monitor account activity for unusual patterns indicative of unauthorised access or fraudulent behaviour

7.2 In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, ct666 will notify affected members and the relevant regulatory authority as required by applicable data protection law, within the timeframe prescribed by that law.

8.1 ct666 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the ct666 website. ct666 uses the following categories of cookies:

• Strictly Necessary Cookies — essential for the Platform to function. These include session authentication cookies that keep you logged into your ct666 account. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies — used to collect anonymised or aggregated data about how members navigate the ct666 Platform, which pages are most visited, and where technical errors occur. This data helps ct666 improve the Platform experience.
• Functionality Cookies — remember your preferences (such as language settings and lobby view preferences) so you do not need to reset them each session.
• Security Cookies — used to detect and prevent fraudulent activity, unauthorised account access, and bot traffic on the Platform.

8.2 ct666 does not use advertising or tracking cookies that share your data with third-party advertising networks. You will not see ct666-related retargeting advertisements on other websites as a result of your ct666 account activity.

8.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the ct666 Platform, including the ct666 Login functionality.

9.1 ct666 respects your rights in relation to your Personal Data. Subject to applicable law and our legitimate interests as a licensed gaming operator, you have the following rights:

• Right of Access — you may request a copy of the Personal Data ct666 holds about you. ct666 will respond to verified access requests within 30 days.
• Right to Rectification — if any Personal Data ct666 holds about you is inaccurate or incomplete, you may request that it be corrected. Certain data (such as CNIC number and date of birth) cannot be changed after KYC verification without re-verification.
• Right to Erasure ("Right to be Forgotten") — you may request deletion of your Personal Data. ct666 will honour erasure requests to the extent possible, subject to our legal obligation to retain certain data (such as financial records and KYC documents) for the minimum periods required by our gaming license.
• Right to Restrict Processing — you may request that ct666 restrict processing of your data in certain circumstances, for example while you dispute the accuracy of data we hold.
• Right to Data Portability — you may request a structured, machine-readable copy of Personal Data you have provided to ct666, where processing is carried out by automated means on the basis of your consent or a contract.
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior lawful processing.
• Right to Object — you may object to processing carried out on the basis of ct666's legitimate interests. ct666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

9.2 To exercise any of these rights, contact ct666 Customer Support via the live chat service or at the email address published on the Platform. ct666 may require you to verify your identity before processing a data rights request to ensure the security of your information.

9.3 ct666 will not charge a fee for processing data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied or the request refused, with explanation.

10.1 If ct666 becomes aware that Personal Data has been collected from an individual under 21, that account will be immediately suspended and all associated Personal Data will be deleted in accordance with applicable law, subject only to any retention obligations required by our gaming license in connection with the account closure.

10.2 Parents or guardians who believe that a minor may have created a ct666 account should contact ct666 Customer Support immediately via live chat. ct666 will investigate and take appropriate action promptly.

11.1 ct666 operates globally and may store or process your Personal Data on servers located outside Pakistan. Where your data is transferred to, or processed in, a country that does not have data protection laws equivalent to those applicable to ct666's operations, ct666 will implement appropriate safeguards to protect your data during the transfer.

11.2 Appropriate safeguards for international data transfers may include contractual clauses binding the receiving entity to data protection standards equivalent to those described in this Privacy Policy, or reliance on adequacy decisions where applicable.

11.3 ct666 ensures that all Third-Party Processors who receive your Personal Data outside Pakistan are subject to binding data processing agreements that require them to protect your data to a standard at least equivalent to this Privacy Policy.

12.1 With your consent (given during account registration or subsequently via account communication preferences), ct666 may send you marketing communications about new games, promotions, bonuses, PSL betting offers, and other Platform features. These communications may be sent via email or SMS to the contact details registered on your ct666 account.

12.2 You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your ct666 account settings
• Clicking the unsubscribe link in any ct666 marketing email
• Contacting ct666 Customer Support and requesting removal from marketing communications

12.3 Withdrawal of marketing consent will not affect your ability to use the ct666 Platform. You will continue to receive transactional communications (account notifications, deposit confirmations, withdrawal confirmations, security alerts, and KYC requests) regardless of your marketing preferences, as these are necessary for the operation of your account.

12.4 ct666 does not share your contact details with third-party advertisers or marketing agencies for the purpose of sending you marketing communications from those third parties.

13.1 The ct666 Platform may contain links to third-party websites or services. This Privacy Policy applies only to data processing carried out by ct666 on the ct666 Platform. ct666 is not responsible for the privacy practices of third-party websites and encourages members to review the privacy policies of any third-party site they visit.

13.2 The inclusion of a link on the ct666 Platform does not constitute an endorsement of the linked website or its data handling practices.

14.1 ct666 may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, our data processing practices, or the structure of the ct666 Platform. The current version of this Privacy Policy, including its Effective Date, is always available on the ct666 Platform.

14.2 Where changes are material — meaning they affect your rights or the way we handle your data in a significant way — ct666 will notify registered members via the email address registered to their account prior to the changes taking effect, and will display a prominent notification on the Platform upon next login.

14.3 Continued use of the ct666 Platform after the Effective Date of an updated Privacy Policy constitutes acceptance of the updated Policy. If you do not accept the updated Policy, you should contact ct666 to request account closure.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by ct666, please contact our support team through the following channels:

15.2 ct666 will verify your identity before processing any data rights request to ensure the security of your account information. Please be prepared to confirm your registered email address and additional account details as requested.

15.3 If you are not satisfied with ct666's response to a privacy concern or data rights request, you have the right to escalate the matter to the data protection regulatory authority applicable in your jurisdiction. Details of the relevant authority are available from ct666 Customer Support upon request.