ct66 Privacy
Policy

This Privacy Policy ("Policy") is published by the operator of the ct66 online gaming platform, accessible at ct66.one ("ct66", "we", "us", or "our"). It describes how ct66 collects, uses, stores, protects, and in certain circumstances discloses the personal information of all individuals who register for, access, or use the ct66 Platform — including players based in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and across Pakistan, as well as players in other jurisdictions.

By creating a ct66 account or by continuing to use the ct66 Platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents and that you consent to the collection and use of your personal information as described herein. If you do not consent to this Policy, you must not use the ct66 Platform.

ct66 collects several categories of personal data depending on the nature of your interaction with the Platform. The following table sets out the main categories of data we collect and specific examples within each category:

ct66 does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If you voluntarily disclose such information in support communications, it will be used only to resolve your query and will not be stored beyond the duration necessary for that purpose.

ct66 collects personal data through the following means:

Data that you provide directly to ct66 when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in promotions, or update your account settings. This includes all identity, contact, and financial data listed in Section 2.

When you access the ct66 Platform, our systems automatically collect certain technical and usage data including your IP address, device characteristics, browser type, pages visited, time spent on pages, and click-stream data. This collection occurs through server logs, cookies, and similar tracking technologies (see Section 7 for full cookie details).

ct66 may receive personal data about you from third-party sources in limited circumstances, including:

• KYC and identity verification service providers (for document validation against government databases);
• Payment processors (for transaction confirmation and fraud prevention signals);
• Fraud prevention and AML (anti-money laundering) screening databases;
• Self-exclusion registers, where ct66 participates in cross-operator exclusion schemes.

ct66 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your ct66 account, including processing your registration, verifying your identity, and enabling login access.
• Service Delivery: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20; to make games and betting markets available to you; and to process your bets and credit your winnings.
• Legal Compliance: To verify that you meet the age requirement (21+), to conduct anti-money laundering (AML) checks, to comply with Know Your Customer (KYC) obligations, and to meet any other applicable legal or regulatory requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account creation, and other prohibited conduct as defined in the ct66 Terms & Conditions.
• Responsible Gaming: To monitor for signs of problem gambling behaviour, to apply deposit limits and self-exclusion requests you have set, and to communicate responsible gaming information to you where appropriate.
• Customer Support: To respond to your support enquiries, complaints, and feedback, and to maintain records of your support history for continuity of service.
• Platform Improvement: To analyse usage patterns across the ct66 Platform in aggregate in order to improve game performance, interface usability, and the overall player experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and ct66 news — only where you have consented to receive such communications. You may withdraw marketing consent at any time via your account settings or by contacting support.

ct66 relies on the following legal bases for the processing of your personal data. Each basis applies to specific processing activities as set out below:

• Contractual Necessity: Processing required to fulfil our obligations to you under the ct66 Terms & Conditions — including account management, game delivery, and payment processing. Without this processing, we cannot provide you with ct66 services.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, age verification obligations, and gaming licence conditions. ct66 cannot waive these processing activities at your request.
• Legitimate Interests: Processing carried out to pursue ct66's legitimate business interests where these do not override your fundamental privacy rights. This includes fraud prevention, platform security monitoring, and aggregated usage analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

ct66 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network operators receive the minimum financial data necessary to process your transactions.
• KYC and Identity Verification Partners: Third-party verification services receive your identity documents and details to validate your identity against authoritative databases in accordance with ct66's licensing obligations.
• Fraud Prevention and AML Screening Services: Specialist risk and compliance service providers process certain account and transaction data to identify and prevent money laundering, fraud, and other financial crimes.
• Technology and Infrastructure Providers: Cloud hosting providers, database administrators, and cybersecurity companies who process data on behalf of ct66 under strict data processing agreements and may not use your data for any purpose other than delivering services to ct66.
• Game Content Providers: Where you play games provided by third-party studios through the ct66 Platform, limited technical and gameplay data may be processed by those providers for the purpose of delivering and auditing the game.
• Regulatory and Law Enforcement Authorities: ct66 will disclose personal data to competent authorities where required by applicable law, court order, or the conditions of our gaming licence. ct66 will notify affected users of such disclosures where legally permitted to do so.

The ct66 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to enhance your user experience, and to analyse how the Platform is used. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the ct66 Platform. Disabling analytics or marketing cookies will not affect your ability to use the Platform or access your account.

ct66 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account relationship with ct66 and for a minimum of five (5) years following account closure, in compliance with AML and gaming licence record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with anti-money laundering regulations and applicable financial record-keeping obligations.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Support Communications: Retained for a minimum of two (2) years from the resolution of the relevant support interaction.
• Technical and Log Data: Server logs and IP address data are retained for up to twelve (12) months for security and fraud investigation purposes.
• Marketing Consent Records: Retained indefinitely as proof of consent history, even after marketing consent is withdrawn.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ct66's data disposal procedures.

The security measures employed by ct66 include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and ct66 servers;
• AES-256 encryption for personal and financial data stored in ct66 databases;
• Role-based access controls ensuring that ct66 staff can only access personal data where strictly necessary for their job function;
• Regular independent penetration testing and vulnerability assessments of the ct66 Platform;
• Two-factor authentication available for all ct66 user accounts;
• Firewalls, intrusion detection systems, and 24/7 security monitoring of ct66 infrastructure;
• Formal data breach response procedures, including notification processes where applicable.

Notwithstanding the above, no security system is completely impenetrable. ct66 cannot guarantee the absolute security of data transmitted over the internet. You play an important role in your own data security by maintaining a strong, unique password and enabling two-factor authentication on your ct66 account.

Subject to applicable law and the limitations set out below, ct66 users — including Pakistani players — hold the following rights in respect of their personal data:

• Right of Access: You have the right to request a copy of all personal data ct66 holds about you. Requests will be fulfilled within 30 calendar days.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. You can update many details directly within your ct66 account settings; for identity data corrections, please contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where ct66 no longer has a legitimate or legal basis to retain it. Note that we cannot delete data subject to mandatory legal retention periods (e.g., AML records).
• Right to Restrict Processing: You may request that ct66 temporarily suspend processing of your data (without deleting it) in certain circumstances, for example while a data accuracy dispute is under investigation.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to ct66, for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to processing based on ct66's legitimate interests, and the right to withdraw marketing consent at any time.

To exercise any of the above rights, please contact the ct66 data team using the contact details in Section 14. ct66 will verify your identity before processing any data rights request to protect against unauthorised access to another person's data.

The ct66 Platform is strictly intended for adults aged 21 years and above. ct66 does not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the registration and KYC process for all new accounts.

If ct66 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account in accordance with our Terms & Conditions. Any funds associated with an underage account will be handled in accordance with applicable gaming licence regulations.

If you believe a minor has created a ct66 account, please contact our support team immediately. ct66 takes underage gambling extremely seriously and cooperates fully with parental or guardian reporting of suspected underage access.

ct66 is an internationally operated platform, and your personal data may be processed and stored on servers located outside of Pakistan. Where personal data is transferred to countries that may not have data protection laws equivalent to those applicable in your jurisdiction, ct66 ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by relevant data protection authorities;
• Data processing agreements with all third-party processors that impose obligations equivalent to those ct66 adheres to under this Policy;
• Technical security measures (encryption, access controls) that apply regardless of the server location.

By using the ct66 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

ct66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or the introduction of new features on the Platform. The "Last updated" date at the top of this Policy will always reflect the most recent version.

Where a material change is made to this Policy — particularly one that expands the ways in which ct66 uses or shares personal data — ct66 will notify registered users via email and via an on-site notification displayed upon login. Continued use of the ct66 Platform following such notification constitutes your acceptance of the revised Policy.

If you do not accept the changes made to this Policy, you must cease using the Platform and may request account closure in accordance with the ct66 Terms & Conditions. Note that data subject to mandatory legal retention periods will be retained even if you close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ct66's handling of your personal data, please contact us using one of the following channels:

• Email: [email protected] (Subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 via the ct66 Platform once logged in (select "Privacy & Data Protection" as your enquiry topic)
• Support Hours: Email and live chat support operate 24 hours a day, 7 days a week for all ct66 users including Pakistani players

ct66 aims to respond to all privacy and data rights enquiries within 30 calendar days of receipt. Where a request is complex or we have received multiple requests from you, we may extend this period by up to an additional 30 days and will notify you of such an extension.