c999 Privacy Policy – Your Data, Clearly Explained

c999 is an online gaming platform accessible at c999.run, operated by the c999 company (referred to as "c999", "we", "us", or "our" throughout this Privacy Policy). c999 is the data controller for all personal information collected from players who register and use the c999 platform.

For the purposes of this Privacy Policy, "you" or "player" refers to any individual who has registered an account at c999.run, or who visits the c999 website without registering. "Personal data" means any information that identifies you as an individual, or that could reasonably be combined with other information to identify you.

If you have any questions about how c999 handles your personal data, you can contact us at any time at support@c999.run. Our support team is available 24 hours a day, seven days a week, and includes Urdu and English-speaking agents familiar with privacy-related requests from Pakistani players.

c999 collects personal data in several ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information provided to us by third-party service providers such as payment processors and identity verification agencies. Below is a breakdown of each category.

Information You Provide Directly

• Registration data: Full name, Pakistani mobile number, email address, date of birth, and the password you choose.
• Identity verification (KYC) data: CNIC number, CNIC scan or photograph, selfie for liveness verification — collected when withdrawal thresholds require identity confirmation.
• Payment data: Easypaisa/JazzCash mobile number, NayaPay/SadaPay account reference, IBFT bank account details, or Visa/Mastercard card details as applicable to the deposit method you use. Card details are never stored in full on c999 servers — they are tokenised by the payment processor.
• Communication data: Messages sent to c999 through live chat, email, or support tickets.

Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution.
• Usage data: Pages visited on c999, games played, session duration, bet history, deposit and withdrawal history, login timestamps, and navigation paths through the platform.
• Cookie and tracking data: As described in Section 6 of this Privacy Policy.

Information from Third Parties

• Payment processors: Transaction confirmation data including amount, timestamp, reference number, and payment method identifier.
• KYC verification providers: Identity verification result (pass/fail) and associated confidence score.
• Fraud prevention services: Device fingerprint data and risk indicators used to protect the c999 platform and its players from fraudulent activity.

c999 uses the personal data it collects exclusively for the following purposes. We do not use your data for any purpose beyond this list without first obtaining your explicit consent or being required to do so by applicable law.

• Creating and maintaining your account: Your registration data is used to create your c999 account, authenticate your logins, and personalise your experience on the platform.
• Processing PKR deposits and withdrawals: Payment data is used to initiate, verify, and record financial transactions between your chosen payment method and your c999 balance.
• Identity verification (KYC): CNIC and selfie data is used to verify your identity in compliance with applicable anti-money laundering requirements when withdrawal thresholds are reached.
• Preventing fraud and protecting security: Technical and device data is used by c999 and its fraud prevention partners to detect and block suspicious activity, multiple account creation, and financial fraud.
• Providing customer support: Communication data is used to respond to your queries, resolve complaints, and improve the quality of c999 support interactions.
• Regulatory compliance: Transaction data and identity records are retained for the periods required by applicable financial regulations to meet c999's compliance obligations.
• Platform improvement: Aggregated, anonymised usage data is analysed to improve game selection, site performance, and the overall c999 player experience. This analysis does not involve identifying individual players.
• Responsible gaming: Session and betting pattern data is used to power c999's responsible gaming tools — including session time alerts and deposit limit monitoring — and to identify players who may benefit from responsible gaming support.

c999 processes personal data only where there is a valid legal basis for doing so. The relevant bases under applicable data protection principles are as follows.

• Contractual necessity: The majority of data processing at c999 is necessary to perform the contract you enter into when you register an account — providing gaming services, processing deposits and withdrawals, and operating the c999 platform on your behalf.
• Legal obligation: KYC identity verification, transaction record-keeping, and AML monitoring are carried out because c999 is required to do so under applicable financial regulations. This data cannot be withheld without c999 being unable to process withdrawals above the relevant thresholds.
• Legitimate interests: Fraud detection, security monitoring, platform analytics (in anonymised aggregate form), and abuse prevention are carried out on the basis of c999's legitimate interest in maintaining a safe, fair, and sustainable platform for all Pakistani players.
• Consent: Where c999 sends you marketing communications about c999 promotions and offers, this is done on the basis of your explicit consent. You can withdraw this consent at any time by updating your communication preferences in your account settings or contacting c999 support.

c999 does not share your personal data with third parties except in the specific circumstances described below. In every case, third parties who receive your data are bound by data processing agreements that restrict how they may use it and require them to protect it to the same standard as c999.

Payment Processors

When you make a deposit or withdrawal at c999 via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, the transaction details necessary to complete that transaction are shared with the relevant payment processor. These providers are contractually prohibited from using this data for any purpose other than completing your transaction.

KYC and Identity Verification Providers

When your account reaches a withdrawal threshold that requires identity verification, your CNIC details and selfie are shared with c999's contracted KYC verification provider. This provider returns a verification result to c999 and is contractually prohibited from retaining or independently using your identity data beyond this purpose.

Fraud Prevention and Security Partners

Device fingerprint data and risk indicators may be shared with fraud prevention partners who help c999 detect multiple account creation, payment fraud, and cheating. These partners are data processors acting under c999's instruction and may not use the data independently.

Regulatory and Legal Requirements

c999 may be required to disclose player data to regulatory authorities, law enforcement agencies, or courts where compelled to do so by a valid legal order. c999 will challenge overly broad requests and will notify affected players of such requests wherever legally permitted to do so.

c999 uses cookies and similar technologies to ensure the platform works correctly, to protect your account, and to understand how Pakistani players use the platform so we can improve it. A cookie is a small text file stored on your device when you visit a website.

You can manage cookie preferences through your browser settings at any time. Disabling essential cookies will prevent you from logging in to your c999 account. Disabling analytics cookies has no effect on your ability to play or make transactions at c999.

c999 does not use third-party advertising cookies or retargeting pixels. No browsing data from your c999 sessions is shared with advertising networks.

c999 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or for as long as applicable legal requirements mandate. The following retention periods apply.

• Active account data: Retained for the full duration of your account's activity at c999, plus five years after account closure, to meet financial record-keeping obligations.
• KYC and identity verification records: Retained for five years following account closure or the date of the last transaction, whichever is later, as required by applicable AML regulations.
• Transaction records: Full PKR deposit and withdrawal records are retained for five years from the date of each transaction.
• Support communications: Chat logs and email correspondence with c999 support are retained for two years from the date of the conversation.
• Technical and device data: Session logs and device fingerprint data used for fraud prevention are retained for 12 months from collection.
• Marketing consent records: Records of marketing consent and opt-out requests are retained for the full period of your account activity plus two years, to demonstrate compliance with consent requirements.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

Protecting the personal data of Pakistani players at c999 is a technical and operational priority. The following security measures are in place across the c999 platform at all times.

• Transport Layer Security (TLS 1.3): All data transmitted between your device and c999 servers is encrypted. This includes your login credentials, payment details, and all account activity.
• AES-256 Encryption at Rest: Sensitive data stored on c999 servers — including identity documents and financial records — is encrypted at rest using AES-256, an industry-standard encryption protocol.
• Payment Tokenisation: c999 never stores full card details on its own servers. Card payment data is handled exclusively by PCI-DSS Level 1 certified payment processors, who return only a token reference to c999 for transaction tracking purposes.
• Role-Based Access Control: Access to player data within c999 systems is restricted to staff members whose job function requires it. All data access is logged, and access logs are reviewed regularly.
• Multi-Factor Authentication for Staff: All c999 staff with access to systems containing player data are required to use multi-factor authentication to prevent unauthorised access.
• Regular Security Audits: c999 conducts scheduled internal security reviews and periodic third-party penetration testing of all production systems that handle player data.
• Breach Response Protocol: c999 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player data, affected players will be notified within 72 hours with details of what data was involved and what steps are being taken.

Despite these measures, no digital system is entirely free from risk. c999 encourages all Pakistani players to use a strong, unique password for their c999 account and to enable any available two-factor authentication features.

As a c999 player, you have a number of rights regarding the personal data we hold about you. c999 takes these rights seriously and will respond to valid requests within 30 days. To exercise any of these rights, contact us at support@c999.run.

c999 is strictly for adults aged 18 and over. The c999 platform does not knowingly collect personal data from individuals under the age of 18. Age verification is conducted at registration and at the point of identity verification for withdrawals.

If you are a parent or guardian and believe your child has created an account at c999, please contact us immediately at support@c999.run. We will investigate and close the account within 24 hours of receiving a verified report.

c999 supports parental control tools and encourages parents to use internet filtering software if children have access to devices used to access c999. Our Responsible Gaming page includes guidance on protecting minors from accessing online gaming platforms.

c999 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in the services we offer, or changes in applicable law. The "Last Updated" date at the top of this page always reflects when the current version was published.

Where changes are material — meaning they could significantly affect your rights or the way c999 uses your personal data — we will notify you in advance via the email address registered to your account. The notification will clearly describe what is changing and when the new policy takes effect.

For minor or administrative changes — for example, corrections to wording that do not affect the substance of our data practices — c999 will update the page without direct notification, though the updated date will reflect the change.

Continued use of the c999 platform after a Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you should stop using c999 and contact support to close your account before the effective date.

c999 takes privacy queries from Pakistani players seriously. If you have a question, concern, or wish to exercise any of the rights described in Section 9, please get in touch using any of the following channels.

• Email: support@c999.run — mark your email "Privacy Request" for faster routing to our dedicated privacy team.
• Live Chat: Available 24/7 from within the c999 platform once you are logged in.
• FAQ: Visit our FAQ page for answers to common account and data questions.

c999 aims to respond to all privacy requests within 30 days. Complex requests involving data exports or multi-account investigations may take up to 60 days, in which case we will notify you of the extended timeline within the initial 30-day period.

For responsible gaming concerns, including self-exclusion requests and deposit limit queries, please visit our Responsible Gaming page or contact support directly. Responsible gaming requests are treated with priority and processed within 24 hours.