ct333 Privacy Policy

1. Definitions and Scope

In this Privacy Policy, the following definitions apply throughout unless the context clearly requires otherwise:

• "ct333" / "we" / "us" / "our" refers to the ct333 online gaming platform operated at ct333.org and all associated mobile-optimised interfaces and service delivery infrastructure.
• "Personal Data" / "Personal Information" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including but not limited to name, CNIC number, mobile number, IP address, device identifiers, payment account details, and gameplay transaction records.
• "Player" / "User" / "you" refers to any natural person who registers an account with ct333, makes a deposit, participates in any ct333 game or promotion, contacts ct333 support, or accesses the ct333 platform in any capacity.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "KYC" means Know Your Customer identity verification, the process by which ct333 verifies a Player's identity using their Pakistani CNIC and any additional documentation requested.
• "Cookies" means small text files placed on your device by the ct333 platform for the purposes described in Section 7 of this Policy.
• "Third-Party Service Providers" means external organisations engaged by ct333 to deliver services including payment processing, game content delivery, fraud detection, customer support infrastructure, and data analytics.

This Privacy Policy applies to all Personal Data collected by ct333 in connection with the provision of its online casino, sports betting, live dealer, and related services to players accessing the ct333 platform from Pakistan and internationally. It should be read in conjunction with the ct333 Terms and Conditions and Responsible Gaming Policy.

2. Data Controller Identity

ct333, operating through ct333.org, is the data controller responsible for the Personal Data of players and users collected through its platform and associated services. As data controller, ct333 determines the purposes and means of processing your Personal Data and is responsible for ensuring such processing complies with applicable data protection obligations.

For all privacy-related inquiries, data subject requests, or concerns regarding this Privacy Policy, Pakistani players may contact the ct333 data protection point of contact through the channels specified in Section 16 of this Policy. ct333 will acknowledge all privacy inquiries within 48 hours and provide a substantive response within 30 days.

3. Categories of Personal Data We Collect

ct333 collects Personal Data through several channels: information you provide directly during registration and KYC; information generated automatically through your use of the ct333 platform; and information received from authorised third-party service providers engaged to support ct333 operations. The categories of data collected are described below:

4. How ct333 Uses Your Personal Data

ct333 processes your Personal Data for the following specific and lawful purposes:

4.1 Account Administration and Service Delivery

ct333 uses your Identity Data, Contact Data, and Technical Data to create and maintain your player account, authenticate your ct333 login sessions, deliver the gaming services you request, process your JazzCash and EasyPaisa deposits and withdrawals, manage your bonus entitlements, and provide customer support in response to your inquiries. Without this processing, ct333 would be unable to provide you with any of its services.

4.2 Identity Verification and Regulatory Compliance (KYC/AML)

ct333 is obligated under its operating framework to verify the identity of all players prior to processing withdrawals and to maintain records of such verification. ct333 uses your Identity Data, Financial Data, and Communications Data for KYC verification, age verification (confirming 21+ requirement), anti-money laundering (AML) screening, sanctions list screening, and reporting to regulatory or law enforcement authorities where legally required. These processing activities are mandatory and cannot be opted out of by players wishing to use ct333 withdrawal services.

4.3 Fraud Prevention and Platform Security

ct333 uses Technical Data, Gameplay Data, Financial Data, and Behavioural Data to detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, multi-accounting, collusion, and other prohibited activities on the ct333 platform. This processing is necessary to protect the security of the platform and the integrity of the gaming environment for all Pakistani players.

4.4 Responsible Gaming Monitoring

ct333 uses Gameplay Data, Financial Data, and Responsible Gaming Data to monitor for indicators of problem gambling behaviour, enforce player-set responsible gaming limits, apply self-exclusion restrictions, and proactively intervene where ct333's responsible gaming indicators suggest a player may be experiencing harm. This processing reflects ct333's genuine commitment to player welfare.

4.5 Platform Improvement and Analytics

ct333 uses Behavioural Data and Technical Data in aggregated and pseudonymised form to analyse platform performance, understand how Pakistani players navigate and use the ct333 interface, optimise game loading times on Pakistani mobile networks, and improve the overall user experience. This analytical processing does not involve decision-making that materially affects individual players.

4.6 Marketing Communications (With Consent)

Where you have expressly consented to receive marketing communications from ct333, we will use your Contact Data to send you information about ct333 promotions, new game releases, PSL betting offers, and special bonuses via SMS to your registered Pakistani mobile number. You may withdraw this consent at any time by contacting ct333 support. Withdrawal of marketing consent does not affect your ability to use ct333 services.

5. Legal Basis for Processing

ct333 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of the contract between you and ct333 (the ct333 Terms and Conditions), including account creation, service delivery, payment processing, and customer support.
• Legal Obligation: Processing necessary for ct333 to comply with its legal obligations, including KYC verification, AML reporting, sanctions screening, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for ct333's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and platform improvement, provided such interests are not overridden by your fundamental data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including the sending of marketing communications. You may withdraw consent at any time without prejudice to the lawfulness of prior processing.

6. Data Sharing and Disclosure

ct333 does not sell, rent, or trade your Personal Data to any third party for their own commercial marketing purposes. ct333 shares your Personal Data only in the following limited and controlled circumstances:

6.1 Third-Party Service Providers

ct333 engages carefully selected third-party service providers who process Personal Data on ct333's behalf under contractual obligations that require them to implement appropriate security measures and process data only in accordance with ct333's instructions. These providers include: payment processing infrastructure for JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 transactions; certified game content providers who operate the games available in the ct333 lobby; fraud detection and identity verification service providers; customer support platform providers; and cloud infrastructure providers hosting ct333's server infrastructure.

6.2 Regulatory and Law Enforcement Authorities

ct333 will disclose Personal Data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where it is legally required to do so, or where such disclosure is necessary to protect ct333's legal rights or the safety of its players. Any such disclosure will be made in accordance with applicable legal requirements and documented in ct333's internal compliance records.

6.3 Business Transfers

In the event that ct333 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, Personal Data held by ct333 may be transferred to the acquiring or successor entity. Players will be notified of any such transfer via their registered mobile number prior to its completion, and the successor entity will be required to honour the commitments in this Privacy Policy.

7. Cookies and Tracking Technologies

ct333 uses cookies and similar tracking technologies on its platform to deliver essential functionality, improve your gaming experience, and support platform analytics. The categories of cookies used by ct333 are as follows:

• Strictly Necessary Cookies: Essential for the ct333 platform to function. These cookies maintain your authenticated ct333 login session, remember your language preferences, and ensure the security of your interactions. These cookies cannot be disabled without preventing core platform functionality from operating correctly.
• Functional Cookies: Enable ct333 to remember your preferences such as recently played games, your last-visited lobby section, and your preferred deposit method, providing a more personalised experience during your session.
• Analytics Cookies: Used in pseudonymised form to help ct333 understand how Pakistani players navigate the platform, which features are most used, and where technical performance improvements are needed. This data is processed in aggregated form and is not used to identify individual players.
• Security Cookies: Used to detect and prevent fraudulent account access, identify suspicious login patterns, and enforce session security measures including Two-Factor Authentication state management.

The ct333 platform does not deploy third-party advertising cookies or permit advertising networks to place tracking technologies on the ct333 domain. Players using mobile browsers on Jazz, Telenor, Zong, or Ufone networks can manage cookie preferences through their browser settings, though disabling strictly necessary cookies will prevent access to ct333 services.

8. Data Retention

ct333 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, and reporting obligations. The following retention periods apply as general guidance:

• Account and Identity Data: Retained for the duration of your ct333 account plus a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations and to support the resolution of any post-closure disputes.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping requirements applicable to gaming operators.
• KYC Verification Documents: Retained for the duration of your account and for a minimum of five (5) years post-account closure. CNIC copies are stored in encrypted form with restricted access limited to ct333's compliance personnel.
• Gameplay Data: Retained for five (5) years from the date of each game session to support dispute resolution, responsible gaming monitoring, and regulatory audit requirements.
• Customer Support Communications: Retained for three (3) years from the date of the final communication in a support interaction, to support quality assurance and complaint resolution.
• Marketing Consent Records: Retained from the date of consent until the earlier of your withdrawal of consent or five (5) years from the date of the last marketing communication.
• Technical and Behavioural Data: Retained in pseudonymised or aggregated form for up to two (2) years for platform analytics and improvement purposes.

Upon expiry of the applicable retention period, ct333 will securely delete or anonymise your Personal Data in accordance with its internal data deletion procedures. Where deletion is not technically feasible for specific data sets, ct333 will isolate such data from further active processing until deletion is possible.

9. Data Security Measures

ct333 implements a comprehensive framework of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ct333 servers — including ct333 login credentials, payment details, and gameplay data — is encrypted using 256-bit SSL/TLS encryption, the same standard employed by Pakistan's major commercial banks.
• Encrypted Data Storage: Sensitive Personal Data including CNIC details, financial account numbers, and authentication credentials are stored in encrypted form using industry-standard encryption algorithms. Encryption keys are managed separately from the encrypted data under strict access controls.
• Access Controls: Access to Personal Data within ct333's systems is strictly limited to personnel whose job functions require access to specific data categories. All access is logged, monitored, and subject to regular review. ct333 support agents cannot view player passwords under any circumstances.
• Two-Factor Authentication: ct333 offers SMS-based Two-Factor Authentication to all players and strongly recommends its activation. This provides an additional layer of security beyond the ct333 login password, protecting your account even if your password is compromised.
• Fraud Detection Systems: ct333 employs automated fraud detection and anomaly monitoring systems that analyse login patterns, transaction behaviour, and gameplay data in real time to identify and respond to potential security threats to player accounts.
• Regular Security Assessments: ct333 conducts regular security assessments of its platform infrastructure, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.

10. Your Data Subject Rights

Subject to applicable data protection law, ct333 players have the following rights with respect to their Personal Data. You may exercise any of these rights by contacting ct333 through the channels specified in Section 16:

ct333 will respond to all data subject rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case ct333 will notify you of the extension and the reasons for it within the initial 30-day period. ct333 will not charge a fee for data subject rights requests unless they are manifestly unfounded, repetitive, or excessive.

11. Third-Party Services and Game Providers

The ct333 casino lobby features games supplied by internationally certified third-party game studios. When you play games in the ct333 lobby, limited gameplay data (such as session identifiers, bet amounts, and game outcomes) is shared with the relevant game provider to enable the game to function correctly and to support fairness certification auditing by the game provider's independent testing laboratories.

Game providers are contractually prohibited from using ct333 player data for their own independent marketing or commercial purposes. Their data processing activities are limited to the technical delivery and certification of their games as supplied to ct333. Game providers engaged by ct333 are required to maintain data security standards commensurate with those required by their independent gaming certification bodies.

Payment processing partners engaged by ct333 to facilitate JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 transactions process your financial data solely for the purpose of completing the specific transactions you initiate. These partners operate under their own privacy policies with respect to data they collect independently of ct333, and ct333 encourages Pakistani players to review the privacy policies of their chosen payment providers.

12. Children's Privacy and Underage Access

ct333 services are strictly intended for adults aged 21 years and above. ct333 does not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21. ct333's registration process and KYC verification framework are designed to prevent underage individuals from creating ct333 accounts and accessing gambling services.

In the event that ct333 discovers, or is notified, that an individual under the age of 21 has provided Personal Data to ct333 — whether by misrepresenting their age during registration or by any other means — ct333 will immediately suspend the relevant account, delete all Personal Data associated with the underage individual to the extent not required for legal or regulatory compliance purposes, and return any remaining account balance in accordance with applicable responsible gaming obligations.

If you believe that an individual under the age of 21 has registered with ct333 or accessed ct333 services, please notify ct333 immediately via live chat or at [email protected] so that appropriate action can be taken without delay.

13. International Data Transfers

ct333 operates using cloud infrastructure and third-party service providers whose servers may be located in jurisdictions outside Pakistan. Where your Personal Data is transferred to a country that does not provide an equivalent level of data protection to that applicable under ct333's operating framework, ct333 will implement appropriate safeguards to ensure that your Personal Data remains protected to a comparable standard.

Such safeguards may include the use of standard contractual clauses approved by applicable data protection authorities, binding corporate rules, or reliance on the adequacy decisions of relevant regulatory bodies. ct333 will document all international data transfers and the safeguards applied, and will provide you with information about specific transfers upon request.

14. Anti-Money Laundering and Regulatory Disclosure

ct333 is committed to preventing its platform from being used for money laundering, terrorist financing, or other financial crimes. In fulfilment of its AML obligations, ct333 processes Financial Data, Identity Data, and Gameplay Data to monitor transaction patterns for indicators of suspicious activity, screen players against international sanctions lists and Politically Exposed Persons (PEP) databases, request source of funds declarations where transaction volumes trigger enhanced due diligence requirements, and file Suspicious Transaction Reports (STRs) with the relevant financial intelligence authorities where required by law.

ct333 is legally obligated to make such regulatory disclosures without notifying the subject of the report ("tipping off" prohibition). Where ct333 is required to file a regulatory report concerning your account activity, it may be legally prohibited from informing you that such a report has been made. This is a legal obligation that ct333 cannot override regardless of a player's data subject rights requests in such circumstances.

15. Amendments to This Privacy Policy

ct333 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, ct333's data processing practices, or the services offered through the ct333 platform. Material amendments — that is, changes that meaningfully affect your privacy rights or ct333's data processing activities in a way that is less favourable to you — will be communicated to registered account holders via their registered Pakistani mobile number at least seven (7) days before the amendment takes effect.

The most current version of this Privacy Policy will always be accessible at ct333.org/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent amendment was made. Your continued use of ct333 services after the effective date of an amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept an amendment to this Policy, you may close your ct333 account by contacting our live chat support team.

16. Contact and Privacy Inquiries

For all privacy-related inquiries, data subject rights requests, concerns about this Privacy Policy, or to report a suspected privacy incident, Pakistani players may contact ct333 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the ct333 platform. Average initial response time under 3 minutes. For data subject rights requests, please clearly state "PRIVACY REQUEST" at the start of your message.
• Email: [email protected] — for formal privacy inquiries, data subject rights requests, and complaint submissions. Please include your registered mobile number and username (but never your password) in any email correspondence.

ct333 acknowledges all privacy inquiries within 48 hours and provides substantive responses within 30 calendar days. This Privacy Policy was last reviewed and updated on 1 January 2026. ct333 thanks all Pakistani players for taking the time to understand how we handle your personal information.