ct99 Privacy Policy — How We Protect Your Personal Data

ct99 ("we", "our", "the Platform") is committed to protecting the privacy and personal data of every player who registers on or interacts with ct99. This Privacy Policy sets out, in clear and formal terms, the categories of personal data ct99 collects, the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights available to players in relation to their data.

This Privacy Policy applies to all personal data collected through the ct99 website at ct99.io, through the ct99 mobile web interface, through interactions with ct99 customer support, and through any promotional communications ct99 sends to registered players.

By completing the ct99 registration process and using the platform, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. This Policy should be read in conjunction with the ct99 Terms & Conditions and the ct99 Responsible Gaming Policy.

ct99 collects personal data in several contexts — during account registration, during identity verification (KYC), during financial transactions, through platform usage, and through support interactions. The categories of data collected include:

Registration Data:

• Full legal name as it appears on government-issued identification.
• Date of birth, collected to verify that the player meets the minimum age requirement of 21 years.
• Email address and mobile phone number, used for account access, notifications, and support communications.
• Residential address, including city, district, and postal code within Bangladesh.
• Preferred currency (Bangladeshi Taka, BDT) and language preference.

Identity Verification (KYC) Data:

• Copies of government-issued photo identification, such as the Bangladesh National Identity Card (NID), passport, or driving licence.
• Proof of residential address, such as a recent utility bill or bank statement.
• Where applicable, confirmation of mobile financial service account ownership (e.g., bKash or Nagad registered number).

Financial Transaction Data:

• Deposit and withdrawal amounts, dates, and payment method identifiers.
• Mobile wallet transaction reference numbers for bKash, Nagad, Rocket, and Upay transactions.
• Bank account details where bank transfer methods are used.
• Masked card details where Visa or Mastercard payments are processed through a third-party gateway.

Platform Usage Data:

• IP address, device type, operating system, and browser type, collected automatically when a player accesses ct99.
• Betting history, game session records, wagering amounts, and outcomes.
• Login timestamps and session durations.
• Interaction data from responsible gaming tools, including deposit limits set and self-exclusion periods applied.

ct99 processes personal data only for defined, legitimate purposes. The primary purposes for which player data is used are as follows:

• Account Management: To create, maintain, and administer player accounts, including processing deposits and withdrawals, applying bonuses, and managing responsible gaming settings.
• Identity Verification: To verify that players meet the eligibility requirements set out in the ct99 Terms & Conditions, including the minimum age requirement of 21 years and the single-account policy.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other activities that may harm players or the integrity of the platform.
• Legal and Regulatory Compliance: To meet obligations imposed by applicable financial compliance, anti-money laundering (AML), and data protection frameworks.
• Customer Support: To respond to player enquiries, resolve disputes, investigate complaints, and provide assistance through ct99's 24/7 support channels.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve platform performance, game selection, and user experience. This analysis does not involve the identification of individual players.
• Promotional Communications: To send eligible players information about ct99 promotions, bonuses, and platform updates, where the player has not opted out of such communications. Players may opt out at any time by contacting [email protected].
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour, and to apply responsible gaming measures — including account restrictions — where appropriate and in accordance with the ct99 Responsible Gaming Policy.

ct99 processes personal data on the basis of one or more of the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between ct99 and the player — namely, the provision of the ct99 betting and casino platform services as described in the Terms & Conditions.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including financial record-keeping requirements and anti-money laundering obligations.
• Legitimate Interests: Processing is carried out for ct99's legitimate interests in operating a safe, fair, and commercially viable platform — including fraud prevention, security monitoring, and platform analytics — provided those interests are not overridden by the player's own privacy rights.
• Consent: Where ct99 relies on consent as the legal basis for processing — for example, in relation to optional marketing communications — players may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

ct99 does not sell, rent, or trade player personal data. Data is shared with third parties only in the following limited and controlled circumstances:

• Payment Processors: Personal and financial data is shared with third-party payment service providers — including mobile financial service operators such as bKash and Nagad, and international card networks — solely to facilitate the processing of deposits and withdrawals. These providers are contractually bound to use data only for that purpose.
• Identity Verification Providers: KYC documentation may be shared with third-party identity verification services engaged by ct99 to authenticate player identity and comply with age verification obligations.
• Game Providers: Where a player participates in a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, Ezugi, or Spribe — limited session data may be transmitted to that provider's systems to facilitate gameplay. Game providers operate under their own privacy policies and are contractually restricted from using ct99 player data for any purpose other than game delivery.
• Legal and Regulatory Authorities: ct99 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by law, court order, or lawful regulatory request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving ct99, player data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

In all cases where personal data is shared with third parties, ct99 requires those parties to implement appropriate technical and organisational measures to protect the data and to process it only for the purposes for which it was shared.

Financial data — including deposit amounts, withdrawal requests, transaction reference numbers, and payment method details — is treated with the highest level of confidentiality within the ct99 platform. The following specific rules apply to payment data:

• Full bank account numbers and mobile wallet PINs are never stored by ct99. Only masked identifiers and transaction references are retained.
• Card payment data (where Visa or Mastercard is used) is processed exclusively through PCI-DSS compliant third-party gateways. ct99 does not store full card numbers on its own servers.
• Transaction records are retained for a minimum of five years from the date of the transaction to comply with financial record-keeping obligations. After this period, records are securely deleted unless an active investigation or legal proceeding requires their continued retention.
• Financial data is accessible only to authorised ct99 personnel who have a legitimate operational need for access, and to external auditors or regulators as required by law.

ct99 uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file placed on a player's device when they visit ct99. The types of cookies used by ct99 are as follows:

• Essential Cookies: Required for the platform to function correctly. These cookies maintain login sessions, remember security tokens, and ensure that platform features operate as intended. They cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember player preferences, such as language settings and responsible gaming tool configurations, so that these do not need to be re-entered on each visit.
• Analytics Cookies: Used by ct99 to collect aggregated, anonymised data about how players interact with the platform — such as which pages are most visited and how long sessions last. This data is used solely to improve platform performance and does not identify individual players.

ct99 does not use third-party advertising cookies or cross-site tracking technologies. Players may manage cookie settings through their browser preferences. Please note that disabling essential cookies will impair the ability to log in and use the ct99 platform normally.

ct99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Active Accounts: Personal data associated with an active ct99 account is retained for the full duration of the account's activity.
• Closed Accounts: Following account closure, ct99 retains core account and KYC data for a minimum of five years to comply with financial compliance and anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five years from the date of the transaction.
• Support Interactions: Records of customer support interactions, including email correspondence and live chat transcripts, are retained for up to two years from the date of the interaction.
• Marketing Data: Where a player has consented to receive marketing communications, associated preference data is retained until the player withdraws consent. Following opt-out, marketing data is deleted within thirty days.

Data that has exceeded its applicable retention period and is not subject to any active legal hold is permanently and securely deleted from ct99's systems.

Players have the following rights in relation to personal data held by ct99. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your ct99 account. ct99 will respond within a reasonable period, ordinarily within fourteen business days.

• Right of Access: The right to request a copy of the personal data ct99 holds about you, including a description of the purposes for which it is processed and any third parties with whom it has been shared.
• Right to Rectification: The right to request that inaccurate or incomplete personal data held by ct99 be corrected. Players are also encouraged to keep their account details up to date directly through the ct99 platform settings.
• Right to Erasure: The right to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, and where no overriding legal obligation requires its retention. Note that financial and KYC records subject to mandatory retention periods cannot be deleted on request.
• Right to Restrict Processing: The right to request that ct99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Object: The right to object to processing carried out on the basis of ct99's legitimate interests, including profiling for responsible gaming monitoring purposes, where you believe your individual circumstances warrant an override.
• Right to Withdraw Consent: Where processing is based on consent — such as receipt of marketing communications — the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

ct99 does not knowingly collect personal data from individuals under the age of 21. The ct99 platform is strictly for adults aged 21 and above. During registration, players are required to confirm their date of birth, and ct99 reserves the right to request supporting documentation to verify this declaration at any time.

If ct99 becomes aware that personal data has been collected from a player who is under 21 years of age, the relevant account will be suspended immediately, any funds held will be subject to review, and the data will be deleted in accordance with applicable legal obligations. Parents or guardians who believe a minor has registered on ct99 should contact [email protected] immediately.

ct99 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between player devices and ct99 servers.
• Encrypted storage of sensitive data at rest, including KYC documentation and financial records.
• Role-based access controls ensuring that personal data is accessible only to ct99 personnel who require it for a defined operational purpose.
• Multi-factor authentication requirements for internal ct99 systems that handle player data.
• Intrusion detection and monitoring systems providing continuous surveillance of the ct99 infrastructure.
• Regular independent security assessments and penetration testing conducted by qualified third-party security professionals.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own ct99 login credentials and for ensuring their devices are free of malware. Any suspected security incident affecting a player's account should be reported to [email protected] immediately.

The ct99 platform may contain references to or integrations with third-party game studios and content providers, including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, JILI, and Spadegaming. While ct99 takes reasonable steps to ensure that third-party providers meet acceptable data protection standards, ct99 is not responsible for the privacy practices of those providers in relation to data processed independently within their own systems.

Players who have questions about how a specific game provider handles data within their game environment should consult that provider's own privacy documentation. ct99 does not endorse or accept liability for the content or privacy practices of any external entity.

ct99 reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in platform operations, applicable law, or industry best practices. When a material change is made, ct99 will endeavour to notify registered players via the email address associated with their account and will update the effective date displayed at the top of this document.

The current version of the Privacy Policy will always be accessible at ct99.io/privacy-policy. Players are encouraged to review this document periodically. Continued use of the ct99 platform following notification of an update constitutes acceptance of the revised Privacy Policy.

This Privacy Policy is written and maintained in English. In the event of any inconsistency between the English version and any translated summary or paraphrase, the English version of this document shall prevail.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ct99 holds about you, please contact the ct99 support team. All privacy-related enquiries are handled by English-language support staff available 24 hours a day, 7 days a week.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" in the subject line of your email to ensure prompt routing to the relevant team.
• Response Time: Privacy-related requests will ordinarily receive an initial response within four business hours during Bangladesh Standard Time (BST, UTC+6) peak hours. Complex data access requests may require up to fourteen business days to fulfil in full.
• Identity Verification: To protect the security of player data, ct99 will verify the identity of the requestor before fulfilling any data access, rectification, or deletion request. You may be asked to confirm details associated with your registered account.

All formal privacy correspondence must be submitted in English and directed to the email address above. ct99 is committed to resolving privacy concerns promptly and transparently.