CT666 Privacy Policy – How We Protect Your Data in Pakistan

1. Introduction

This Privacy Policy describes how CT666 ("CT666", "we", "us", "the platform") collects, processes, stores, and protects personal information relating to individuals ("you", "Player", "User") who access or use the CT666 website, mobile application, or any other service operated under the CT666 brand.

We understand that handing over personal information to an online platform is a matter of trust. Our goal in writing this Policy is to be completely transparent about what we do with your data so that you can make an informed decision about using CT666. There is no buried small print here — everything CT666 does with your personal information is described on this page.

This Policy applies to all players accessing CT666 from Pakistan and should be read alongside the CT666 Terms and Conditions, which govern your use of the platform as a whole. By registering on CT666 or continuing to use the platform after being presented with this Policy, you confirm that you have read and understood its contents.

2. Who We Are

CT666 is an online gaming and sports betting platform operated for the Pakistani market. CT666 is the data controller for the personal information of all players who register on the platform. This means CT666 determines the purposes for which your personal data is used and how it is processed.

CT666 can be contacted regarding any privacy matter through our dedicated support email at support@ct666.click or via the 24/7 live chat service accessible directly from the CT666 platform. Our team includes a designated point of contact for data privacy matters, and all formal privacy requests are handled with priority.

Where CT666 uses third-party service providers who process data on our behalf — such as payment processors or game software providers — those providers act as data processors and are bound by contractual obligations to handle your data only in accordance with CT666's instructions and applicable data protection standards.

3. What Data CT666 Collects

CT666 collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information from third parties where legally permitted. Here is a complete breakdown:

3.1 Information You Provide Directly

3.2 Information Generated by Platform Use

• Technical data: IP address, browser type and version, device model, operating system, screen resolution, and time zone.
• Usage data: Pages visited, games played, session duration, features accessed, and navigation patterns within the CT666 platform.
• Transaction data: Full history of deposits, withdrawals, bets placed, games played, bonus usage, and account balance changes.
• Location data: Approximate location derived from your IP address, used solely to comply with jurisdictional access restrictions and detect unusual account access.

3.3 Information from Third Parties

CT666 may receive limited data about you from third parties in specific circumstances: from payment processors confirming the outcome of a transaction, from identity verification services when enhanced verification is required, or from fraud prevention databases where CT666 has a legitimate interest in verifying the integrity of an account. CT666 will inform you if third-party data has materially affected a decision about your account.

4. How CT666 Uses Your Data

CT666 uses personal data only for the purposes described below. We do not use your data for purposes that are incompatible with those for which it was originally collected.

• Account management: Creating, maintaining, and operating your CT666 account including login authentication, password resets, and account settings management.
• Payment processing: Verifying and executing deposits and withdrawals in PKR via your chosen payment method, and maintaining financial records of all transactions.
• Identity verification: Confirming your age, identity, and payment method ownership to meet our obligations and prevent fraud and money laundering.
• Game delivery: Providing the games and betting markets you select, recording and settling bets, and applying bonuses and promotions to your account.
• Responsible gaming compliance: Monitoring gaming patterns to detect signs of problem gambling and applying the responsible gaming tools you have configured on CT666.
• Fraud and security monitoring: Detecting and investigating suspicious account activity, duplicate accounts, or fraudulent payment behaviour to protect both CT666 and its players.
• Customer support: Responding to queries, resolving disputes, and improving the quality of CT666's support services.
• Platform improvement: Analysing aggregated, anonymised usage data to identify and fix bugs, improve user experience, and make informed decisions about new features on CT666.
• Legal compliance: Fulfilling obligations under applicable financial monitoring, anti-money laundering, and data protection regulations.
• Marketing communications: Sending relevant CT666 promotions and offers to players who have opted in to marketing communications. You can opt out at any time through your account settings.

5. Legal Basis for Processing

CT666 processes your personal data on the following legal grounds:

• Contractual necessity: Most data processing at CT666 is necessary to fulfil our contractual obligations to you as a registered player — including account operation, game delivery, and payment processing. Without this processing, CT666 cannot provide its service.
• Legal obligation: Certain data processing — particularly identity verification, transaction record-keeping, and reporting obligations — is required by applicable law regardless of your preferences.
• Legitimate interests: CT666 processes some data on the basis of legitimate interests, including fraud prevention, security monitoring, and platform analytics. In each case, we have assessed that our interests do not override your fundamental privacy rights.
• Consent: Where data processing is not covered by the grounds above — most notably marketing communications and non-essential cookies — CT666 relies on your explicit consent and provides a clear mechanism to withdraw that consent at any time.

6. Who CT666 Shares Your Data With

CT666 does not sell your personal data. We share data only with the specific categories of recipients described below, and only to the extent necessary for the stated purpose:

6.1 Payment Processors

When you make a deposit or withdrawal, CT666 shares the minimum necessary transaction data with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing partners, or Visa/Mastercard networks. These providers receive only the data needed to execute and record the transaction. They are contractually prohibited from using this data for any other purpose.

6.2 Game Software Providers

CT666 partners with third-party game developers and live casino studios to deliver some games on the platform. These providers may receive a pseudonymous player identifier and game session data to deliver and settle the game. They do not receive your real name, contact details, or payment information.

6.3 Identity Verification Services

When enhanced verification is required, CT666 may share your submitted documents with a certified identity verification service. These providers act under strict contractual data processing terms and are required to delete verification data after the verification process is complete.

6.4 Legal and Regulatory Authorities

CT666 will disclose personal data to law enforcement, financial intelligence units, or other regulatory bodies where required by law or in response to a lawful request. CT666 will inform you of any such disclosure where legally permitted to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of CT666's business, player data may be transferred to the acquiring entity as part of that transaction. CT666 will notify affected players before their data is transferred and before it becomes subject to a different privacy policy.

7. International Data Transfers

CT666's primary data storage and processing infrastructure is located in data centres with strong technical and organisational security measures. Some third-party service providers — including certain game studios and technology vendors — may be located in other countries. Where personal data is transferred outside Pakistan, CT666 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to process data to a standard equivalent to CT666's own obligations.
• Transfers only to service providers in countries or under frameworks that provide adequate data protection standards.
• Technical safeguards including encryption in transit and at rest for all cross-border data flows.

If you have questions about the safeguards CT666 applies to a specific international transfer, please contact our support team and we will provide the relevant information.

8. How Long CT666 Keeps Your Data

CT666 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

When data reaches the end of its retention period, CT666 securely destroys or permanently anonymises it. Anonymised data — which cannot be linked back to an individual — may be retained indefinitely for aggregate analytical purposes.

9. How CT666 Protects Your Data

CT666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and CT666's servers. Data is never transmitted in plain text.
• Encryption at rest for all sensitive data stored in CT666's databases, including identity documents and payment method details.
• Access controls — only CT666 staff with a specific operational need are granted access to personal data, and all access is logged and audited.
• Two-factor authentication available for player accounts to provide an additional layer of login security.
• Regular security assessments including penetration testing and vulnerability scanning conducted by independent security professionals.
• Incident response procedures — CT666 maintains a documented breach response plan. In the event of a confirmed data breach, the response team is activated within 24 hours.

While CT666 takes every reasonable measure to protect your data, no internet-based service can guarantee 100% security. You also have a role to play — please keep your CT666 password confidential, use a strong and unique password, and enable two-factor authentication on your account.

10. Cookies and Tracking Technologies

CT666 uses cookies and similar tracking technologies to operate the platform, improve your experience, and — with your consent — deliver relevant promotions. Here is exactly what types of cookies CT666 uses and why:

You can manage your cookie preferences at any time through your browser settings or the CT666 cookie preference centre accessible from the platform footer. Withdrawing consent for optional cookies will not affect your ability to use any CT666 gaming feature.

11. Your Privacy Rights

As a CT666 player, you have the following rights over your personal data. CT666 will respond to all valid rights requests within 30 days of receipt. There is no charge for exercising your rights.

To exercise any of these rights, please contact CT666 at support@ct666.click with the subject line "Privacy Rights Request" or raise the request directly through the 24/7 live chat on the CT666 platform. CT666 may need to verify your identity before processing a rights request to ensure data is not disclosed or deleted in error.

12. Children's Privacy

CT666 is strictly an 18+ platform. We do not knowingly collect, store, or process personal data relating to individuals under 18 years of age. If CT666 discovers that a registered account belongs to a person under 18, that account will be immediately suspended and all personal data associated with it will be deleted except where retention is required for legal compliance purposes.

If you are a parent or guardian and you believe that your child has registered on CT666 without your knowledge, please contact CT666 support immediately at support@ct666.click and we will investigate and resolve the matter as a priority.

13. Changes to This Privacy Policy

CT666 reviews this Privacy Policy regularly and may update it when our data practices change, when new legal requirements come into effect, or when we introduce new features to the platform that affect how data is processed.

When material changes are made to this Policy, CT666 will notify players by displaying a notice on the platform at login, or by sending a notification to the mobile number or email address registered with your CT666 account. The effective date of the revised Policy is always displayed at the top of this page.

If you continue to use CT666 after the effective date of a revised Privacy Policy, you are confirming your acceptance of the changes. If you do not accept the changes, you should stop using CT666 and request closure of your account. CT666 will process the return of any real-money balance in your account in accordance with the standard withdrawal process.

Minor clarifications that do not materially change any data processing practice may be made without a formal notification. We encourage you to revisit this page periodically to remain informed about how CT666 handles your personal data.

14. Contact CT666 About Privacy

If you have any question, concern, or request relating to this Privacy Policy or CT666's handling of your personal data, you can reach us through the following channels:

• Email: support@ct666.click — use the subject line "Privacy Enquiry" for priority routing to our data privacy team.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the CT666 platform. For urgent matters — such as suspected account compromise — live chat is the fastest route to assistance.

CT666 targets a response time of 5 business days for all formal privacy requests, though many straightforward requests are resolved within 48 hours. Complex requests — such as full data access exports — may take up to 30 days, and CT666 will keep you informed of progress throughout.

If you are not satisfied with CT666's response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority or seek independent legal advice.