Plain-language summary: cty999 collects the data it needs to run your account and process your PKR deposits and withdrawals. We use SSL encryption, keep your data on secure servers, and never sell your information to marketers. You can request, correct or delete your data at any time. The full details are below.
1. Introduction
This Privacy Policy describes how cty999 — operated at cty999.biz — collects, processes, stores and protects the personal information of players who register and use the cty999 platform. It applies to all services offered on cty999, including Ludo Games, Aviator, jackpot slots, live casino, card games and virtual sports.
By creating a cty999 account or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. This document is part of the broader agreement between you and cty999, alongside the Terms and Conditions and the Responsible Gaming Policy.
We take data privacy seriously. cty999 was built for Pakistani players by a team based in Pakistan, and we understand the importance of keeping personal and financial information private and secure in the local context. This policy is written in plain English — not legal boilerplate — because we want you to actually understand it.
2. What Data cty999 Collects
2.1 Registration Data
When you create a cty999 account, we collect the information you provide directly:
- Full legal name (as it appears on your CNIC)
- Date of birth (to verify you are 18 or older)
- Pakistani mobile number
- Email address
- City and province of residence
- Username and password (password stored as an encrypted hash — never in plain text)
2.2 Identity Verification (KYC) Data
When you request a withdrawal above certain thresholds, or when cty999 determines that verification is required for compliance reasons, we may ask you to provide:
- A copy of your Computerised National Identity Card (CNIC) — front and back
- A selfie photograph for liveness verification
- Proof of address (utility bill, bank statement or similar document dated within 90 days)
2.3 Payment Data
cty999 processes PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and Visa/Mastercard. We record transaction amounts, timestamps, payment method identifiers and transaction reference numbers. Full card numbers and mobile wallet PINs are never stored on cty999 servers — payment processing is handled by PCI-DSS compliant third-party processors.
2.4 Gaming and Activity Data
We record a complete log of your gaming activity on cty999, including:
- Games played, bet amounts, outcomes and session durations
- Tournament entries and results
- Bonus claims, wagering progress and promotional interactions
- Responsible gaming tool usage (deposit limits set, self-exclusion requests)
2.5 Technical and Device Data
When you access cty999, we automatically collect certain technical information:
- IP address and approximate geographic location
- Device type, operating system and browser version
- Session start and end times
- Pages visited and features accessed within the cty999 platform
- Error logs and crash reports
| Data Category | Examples | Basis for Collection | Required? |
|---|---|---|---|
| Registration | Name, DOB, mobile, email | Contract performance | Required |
| KYC / Identity | CNIC copy, selfie, address proof | Legal obligation | On request |
| Payment | Transaction ID, method, amount | Contract performance | Required |
| Gaming Activity | Bets, results, session logs | Legitimate interest | Required |
| Technical / Device | IP, OS, browser, session time | Legitimate interest | Automatic |
| Marketing Preferences | Email opt-in, promo history | Consent | Optional |
3. How We Collect Your Data
cty999 collects data through several channels:
- Directly from you — when you register, complete KYC verification, make deposits or withdrawals, contact support, or respond to promotions
- Automatically — through server logs, cookies and similar technologies when you browse or use the cty999 platform (see Section 7)
- From third-party payment processors — transaction confirmations and references from Easypaisa, JazzCash, NayaPay, SadaPay and banking partners
- From identity verification providers — verification status and risk scores from KYC service providers when you submit documentation
cty999 does not purchase personal data lists from data brokers, social media platforms or any other third-party source for the purpose of contacting individuals who have not registered on cty999.
4. Why We Use Your Data
cty999 uses the data it collects for the following specific purposes:
Account Management
Your registration data is used to create and maintain your cty999 account, verify your eligibility to play, process logins, and communicate with you about your account status. This is the core purpose of data collection on cty999 and is necessary to provide the service at all.
Payment Processing
Transaction data is used to process your PKR deposits and withdrawals accurately, reconcile accounts, generate payment records for your reference, and investigate any disputed transactions. cty999 is required to maintain financial transaction records for a minimum period set by applicable regulations.
Legal Compliance and Anti-Fraud
cty999 uses identity and activity data to comply with anti-money laundering (AML) obligations, verify age and identity, detect fraudulent activity, prevent multiple account creation and respond to lawful requests from regulatory or law enforcement authorities.
Platform Improvement
Aggregated and anonymised technical data is used to identify performance issues, improve game loading times, optimise the cty999 mobile experience and understand which features Pakistani players use most frequently.
Responsible Gaming
Gaming activity data is monitored to identify patterns that may indicate problem gambling. This is done in the interests of player wellbeing — cty999 may use this information to prompt players to use responsible gaming tools or to implement cooling-off periods where appropriate.
Marketing (with your consent)
Where you have opted in to marketing communications, cty999 uses your contact details to send information about promotions, tournaments, bonuses and new features. You can withdraw marketing consent at any time — see Section 12.
5. Who We Share Your Data With
cty999 shares your personal data only in the following limited circumstances:
- Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the transaction data necessary to process your deposits and withdrawals. These partners are contractually obligated to handle your data securely.
- KYC/identity verification providers — When you submit CNIC or other verification documents, these are processed by our third-party KYC partner under a strict data processing agreement.
- IT and hosting infrastructure — cty999's technical infrastructure involves cloud hosting providers. Servers used to store cty999 data are subject to security standards and access controls specified in our provider agreements.
- Regulatory and law enforcement authorities — cty999 will disclose data to relevant authorities when legally required to do so, including for AML investigations, tax compliance or court orders.
- Professional advisors — Legal counsel, auditors and compliance consultants may access relevant account data on a need-to-know basis, subject to professional confidentiality obligations.
What we do not do: cty999 does not sell, rent or trade your personal data to advertisers, data brokers or any unrelated commercial third party. We do not share your data with other gaming platforms or betting operators. We do not use third-party ad networks that track you across other websites.
Any third party that receives data from cty999 is contractually bound to process that data only for the specific purpose for which it was shared and to apply security measures that meet or exceed those described in this policy.
6. PKR Payments and Identity Verification
Because cty999 handles real PKR transactions, payment security and identity verification deserve special attention. Here is how we handle both:
6.1 How Payment Data is Handled
When you make a deposit or request a withdrawal on cty999, the transaction is initiated through our platform but the actual fund movement is processed entirely by the relevant payment partner — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or your card provider. cty999 receives a transaction reference and confirmation; it does not store full card numbers, CVV codes or mobile wallet PINs at any point.
All payment-related pages on cty999 are served over HTTPS with valid SSL certificates. You should always check for the padlock icon in your browser before entering any payment information.
6.2 Why We Verify Your Identity
Identity verification (KYC) is required by financial regulations applicable to platforms handling real-money transactions. On cty999, KYC is triggered in specific circumstances — most commonly when you request a withdrawal above Rs 50,000 for the first time, or when our systems flag a transaction pattern for review.
KYC documents submitted to cty999 are reviewed by a trained verification team and/or a certified third-party KYC provider. Documents are stored in encrypted form and are not visible to general cty999 staff. Access is restricted to the compliance team on a need-to-know basis.
Once identity is verified, cty999 retains verification status and a record that KYC was completed. Full document copies are retained for the minimum period required by applicable regulations and then securely deleted.
7. Cookies and Tracking Technologies
cty999 uses cookies and similar technologies to improve your experience on the platform. Here is what each type of cookie does:
Essential Cookies
These cookies are required for cty999 to function. They maintain your login session, remember your preferences, and enable secure payment flows. You cannot opt out of essential cookies without disabling the platform entirely.
Performance and Analytics Cookies
cty999 uses analytics tools to understand how players navigate the platform — which pages load slowly, where players drop off, and which game categories are most popular. This data is processed in aggregate and is not linked to your individual identity in the analytics system.
Functional Cookies
These cookies remember your preferences — such as your preferred language, last game category visited, and display settings — so that cty999 feels consistent between sessions.
cty999 does not use third-party advertising cookies or allow ad networks to set cookies on the cty999 domain. You will not be tracked across other websites based on your activity on cty999.
You can manage cookie settings through your browser. Disabling non-essential cookies will not affect your ability to play on cty999, though some preferences may not be remembered between sessions.
8. How We Protect Your Data
cty999 applies a layered approach to data security designed to protect your personal and financial information from unauthorised access, loss or disclosure:
- SSL/TLS encryption on all data transmitted between your device and cty999 servers
- Encryption at rest for all sensitive fields in the cty999 database, including passwords (hashed), CNIC data and payment references
- Role-based access controls — cty999 staff access only the data relevant to their specific role. Support agents cannot view payment card details; compliance staff cannot view game logs unless an investigation requires it
- Regular penetration testing by independent security firms to identify and address vulnerabilities before they can be exploited
- Two-factor authentication available for all player accounts and mandatory for all cty999 staff accessing internal systems
- Incident response procedures — in the event of a data breach affecting player data, cty999 will notify affected players within 72 hours of becoming aware of the breach
No security system is completely impenetrable. cty999 commits to maintaining security standards that are appropriate to the nature and volume of data processed and to improving those standards continuously. If you discover a potential security vulnerability on the cty999 platform, please report it immediately to support@cty999.biz.
9. How Long We Keep Your Data
cty999 retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law:
- Account data — retained for the life of your account and for 5 years following account closure
- Financial transaction records — retained for a minimum of 7 years in line with financial record-keeping obligations
- KYC documentation — retained for the period required by applicable AML regulations from the date of last transaction, then securely deleted
- Game logs and activity data — retained for 3 years from the date of each session
- Technical / server logs — retained for 12 months then automatically purged
- Marketing preferences and communication logs — retained until you withdraw consent, plus 6 months for audit purposes
When the retention period for any data category expires, cty999 securely deletes or anonymises that data so that it can no longer be associated with your identity.
10. Your Privacy Rights
You have the following rights over the personal data cty999 holds about you. To exercise any of these rights, contact us at support@cty999.biz and we will respond within 14 days:
Right of Access
Request a copy of all personal data cty999 holds about you. We'll provide it in a readable format within 14 days of your request.
Right to Rectification
If any data we hold about you is inaccurate or incomplete, you can ask us to correct it. Name changes require supporting documentation.
Right to Erasure
You can request deletion of your personal data. This right is subject to legal obligations — financial transaction records must be retained for regulatory compliance and cannot be deleted on request.
Right to Portability
Request an export of your personal data in a common machine-readable format (CSV or JSON) to transfer to another service if you choose.
Right to Restrict Processing
If you dispute the accuracy of your data or object to how it's being used, you can ask cty999 to restrict processing while the issue is investigated.
Right to Object
You can object to processing of your data for marketing purposes at any time. You can also object to processing based on legitimate interest — cty999 will assess each objection on its merits.
To exercise any of these rights, email support@cty999.biz with the subject line "Data Rights Request" and include your registered mobile number for account verification. We do not charge a fee for reasonable requests and will respond within 14 days.
11. Children's Privacy
cty999 is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that an account has been created by or for a person under 18, we will close the account immediately, delete all associated personal data and return any deposits less applicable administrative costs.
If you are a parent or guardian and believe your child has registered on cty999, please contact support@cty999.biz immediately with the registered mobile number or email address. We will investigate and act promptly.
12. Marketing Communications
cty999 sends marketing emails and SMS notifications only to players who have actively opted in to receive them during registration or through their account settings. These communications include information about new games, promotions, tournament schedules, bonus offers and platform updates.
You can withdraw your marketing consent at any time through one of the following methods:
- Log in to your cty999 account, go to Settings → Notifications, and toggle off marketing communications
- Click the "Unsubscribe" link at the bottom of any marketing email from cty999
- Reply STOP to any marketing SMS from cty999
- Email support@cty999.biz with the subject "Unsubscribe from Marketing"
Withdrawing marketing consent does not affect transactional communications — you will continue to receive account activity notifications, withdrawal confirmations, security alerts and important platform updates regardless of your marketing preference.
cty999 will process your unsubscribe request within 5 business days. You may receive one or two further communications while the unsubscribe is being processed — this is a system latency issue, not a deliberate action on our part.
13. Changes to This Privacy Policy
cty999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or platform features. When material changes are made, we will notify registered players by email to their registered address at least 14 days before the changes take effect.
Minor corrections and clarifications may be made without prior notice. The "Last Updated" date at the top of this page always reflects the most recent revision. We recommend bookmarking this page and reviewing it periodically.
If you disagree with any changes to this policy, you have the right to close your account as described in our Terms and Conditions, following which cty999 will delete or anonymise your data in accordance with Section 9 above.
14. Contact Us About Privacy
If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how cty999 has handled your personal information, please get in touch:
- Email: support@cty999.biz (subject: "Privacy Query")
- Live Chat: Available 24/7 through your cty999 account
- FAQ: Visit our FAQ page for common questions
We aim to respond to all privacy-related queries within 5 business days and to complete all data rights requests within 14 calendar days. If you are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.
This Privacy Policy was last updated on 1 June 2025. Previous versions are available on request from support@cty999.biz.