ci999 Privacy Policy

ci999 (referred to throughout this Privacy Policy as "ci999", "we", "us", or "our") is an internationally licensed online gaming and sports betting platform operating at ci999.org. ci999 provides online casino games, sports betting including Pakistan Super League (PSL) cricket markets, live casino tables, slot games, Fortune Bingo, and Crash Goal gaming products to registered users.

For the purposes of this Privacy Policy, ci999 is the data controller responsible for the personal information you provide when accessing or using the ci999 platform. This means ci999 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all users of the ci999 platform regardless of the device used to access it, including users accessing from Karachi, Lahore, Islamabad, Faisalabad, and all other cities and regions across Pakistan.

ci999 collects personal data in the following categories. We collect only the minimum data necessary for each stated purpose:

ci999 does not collect sensitive personal data such as biometric data, health data, or religious beliefs. We do not collect data relating to your social media profiles unless you choose to contact us via a social channel.

ci999 collects your personal data through the following channels and mechanisms:

• Direct registration: Information you provide when creating your ci999 account, including your name, date of birth, contact details, and payment method.
• KYC verification submissions: Identity documents, proof of address, and payment ownership documents you submit when completing account verification.
• Platform activity: Data generated automatically as you use ci999 — including games accessed, bets placed, deposit and withdrawal transactions, and responsible gaming tool usage.
• Technical collection: Data collected automatically by our servers and analytics systems when you access ci999.org, including your IP address, browser fingerprint, device identifiers, and session timestamps.
• Cookies and tracking technologies: Data collected via cookies, web beacons, and similar technologies as described in Section 8 of this Privacy Policy.
• Support interactions: Records of your communications with the ci999 support team via live chat, email, or any other channel — including the content of those communications and metadata such as timestamps.
• Third-party payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners when you initiate deposits or withdrawals.

ci999 uses your personal data exclusively for the following legitimate purposes:

• Account management: Creating, maintaining, and securing your ci999 account, including resetting passwords, applying responsible gaming limits, and processing account closure requests.
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that the identity details you provided are accurate and genuine, in compliance with our Know Your Customer (KYC) obligations.
• Transaction processing: Processing your PKR deposits and withdrawals through supported payment channels, verifying payment ownership, and maintaining accurate financial records.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct defined in the ci999 Terms and Conditions.
• Regulatory compliance: Meeting our anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable regulatory reporting obligations under our international gaming licence.
• Platform improvement: Analysing aggregated usage data to identify technical issues, improve game performance, and optimise the ci999 user interface for players accessing from Pakistan and beyond.
• Responsible gaming: Monitoring your gaming behaviour to identify potential problem gambling patterns and, where our responsible gaming obligations require, proactively reaching out to offer support tools including deposit limits and self-exclusion.
• Customer support: Responding to your support queries, complaints, and feedback via live chat and email.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform news — only where you have explicitly opted in to receive such communications. You may unsubscribe at any time.

ci999 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required by our AML and fraud detection obligations.

ci999 processes your personal data under the following legal bases, applied according to the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the ci999 Terms and Conditions — including account creation, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations, gaming regulatory requirements, and financial record-keeping mandates under our international licence.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement, where these interests are not overridden by your individual privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where your explicit opt-in consent has been obtained. You may withdraw this consent at any time by contacting ci999 support.

ci999 does not sell your personal data. We share your personal data only in the following limited and controlled circumstances:

• Payment processors: Your payment account identifiers and transaction details are shared with your selected payment provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or bank transfer) solely for the purpose of processing your deposit or withdrawal transaction.
• KYC and identity verification providers: Identity documents may be shared with third-party KYC verification service providers engaged by ci999 to conduct identity and age verification. These providers are contractually bound to process data only for verification purposes and to maintain equivalent data protection standards.
• Regulatory and law enforcement authorities: ci999 is required by our international gaming licence and applicable law to report certain transaction patterns and account activities to regulatory authorities and, where legally mandated, to law enforcement agencies. Such disclosures are made only to the extent legally required.
• Technology and infrastructure providers: Service providers engaged to operate ci999's technical infrastructure — including cloud hosting, cybersecurity, and platform development vendors — may process limited personal data as data processors acting under ci999's instructions and subject to binding contractual data protection obligations.
• Game suppliers: Where specific casino games on the ci999 platform are provided by third-party game studios, minimal technical session data may be exchanged to deliver the game experience. Game suppliers do not receive your identity or financial data.

In the event of a merger, acquisition, or corporate restructuring involving ci999, your personal data may be transferred to the acquiring or successor entity, subject to equivalent privacy protections remaining in place.

ci999 takes the protection of your financial data with the utmost seriousness. The following payment data handling practices apply to all transactions on the ci999 platform:

• Full payment card numbers, bank account numbers, and mobile wallet PINs are never stored on ci999 servers.
• Payment transactions are processed through certified, encrypted payment gateways. ci999 receives only tokenised transaction confirmations — not your raw payment credentials.
• ci999 records payment method type (e.g. JazzCash, EasyPaisa), the masked identifier of your payment account (e.g. last four digits or wallet number prefix), and transaction amounts and timestamps for financial record-keeping and fraud prevention purposes.
• Withdrawal requests are processed only to payment methods that have been verified as belonging to the account holder. ci999 will not process withdrawals to unverified or third-party payment accounts under any circumstances.

ci999 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and understand how users interact with ci999.org. The following categories of cookies are used:

• Strictly necessary cookies: Required for the ci999 platform to function. These include session authentication cookies that keep you logged in to your account and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your platform preferences such as language settings and responsible gaming limit configurations, so you do not need to re-enter them on every visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate ci999.org — including which pages are visited most frequently, where users drop off, and overall session duration. This data is used solely to improve the ci999 platform experience.
• Security and fraud prevention cookies: Technical identifiers used to detect suspicious login attempts, unusual session behaviour, and potential account takeover activity.

ci999 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertisers.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your ci999 account. Disabling other cookie categories will not affect your ability to play.

ci999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your ci999 account and for a minimum of five (5) years following account closure, in line with standard AML and gaming regulatory record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction, or longer where required by the applicable regulatory authority under our international gaming licence.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with financial record-keeping obligations.
• Support communications: Retained for three (3) years following the closure of each support interaction, to enable review of complaint history and regulatory enquiries.
• Marketing preferences: Retained until you withdraw your consent to marketing communications, at which point marketing data is promptly deleted or suppressed.
• Technical and usage data: Anonymised or deleted within twelve (12) months of collection where it is no longer required for security, fraud prevention, or platform improvement purposes.

Upon expiry of the applicable retention period, ci999 securely deletes or permanently anonymises your personal data so that it can no longer be attributed to you.

As a ci999 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact the ci999 support team via live chat or email at [email protected]:

• Right of access: You may request a copy of the personal data ci999 holds about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
• Right to rectification: You may request that inaccurate or incomplete personal data we hold about you is corrected. Some data corrections may require you to submit updated identity documents for verification.
• Right to erasure: You may request deletion of your personal data in circumstances where it is no longer necessary for the purpose it was collected, you have withdrawn consent, or you object to processing based on legitimate interests. This right is subject to our legal retention obligations — ci999 cannot delete data we are legally required to retain.
• Right to restriction: You may request that ci999 restricts processing of your data (i.e., stores but does not actively use it) in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that ci999 provides your personal data in a machine-readable format suitable for transfer to another service provider.
• Right to object: You may object to ci999 processing your personal data on the basis of legitimate interests. ci999 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

ci999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data transmitted between your device and ci999 servers is encrypted using TLS (Transport Layer Security) protocols. The ci999.org website enforces HTTPS at all times.
• Encryption at rest: Sensitive personal and financial data stored on ci999 infrastructure is encrypted at rest using AES-256 or equivalent industry-standard encryption.
• Access controls: Access to personal data within ci999's internal systems is restricted to authorised personnel who have a demonstrable need to access it for their role. Access is granted on a least-privilege basis and subject to audit logging.
• Intrusion detection: ci999's infrastructure is protected by active intrusion detection and prevention systems that monitor for suspicious access patterns and potential breaches in real time.
• Penetration testing: ci999 conducts periodic third-party security assessments and penetration tests to identify and remediate vulnerabilities in our platform and data handling systems.
• Incident response: In the event of a confirmed personal data breach that poses risk to users, ci999 will notify affected users and relevant regulatory authorities within the timeframes required by our applicable obligations.

While ci999 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ci999 account password and for ensuring no unauthorised person accesses your account.

The ci999 platform is strictly intended for adults aged 21 years and over. ci999 does not knowingly collect, process, or retain personal data from individuals below the age of 21 under any circumstances.

As part of our account registration process, ci999 requires date of birth verification and conducts KYC age verification procedures to prevent minors from registering or accessing the platform. Any account found to belong to a person below 21 years of age will be immediately closed, all associated data deleted (subject to any mandatory legal retention requirements), and any funds on the account handled in accordance with our regulatory obligations.

If you are a parent or guardian and believe that a minor in your care has registered a ci999 account, please contact our support team immediately via live chat or at [email protected]. ci999 will investigate and take appropriate action promptly.

ci999 actively supports responsible gaming and child protection initiatives and works with recognised organisations to prevent underage access to online gaming platforms.

ci999 is an internationally operating platform. As a result, your personal data may be transferred to, stored in, and processed in countries outside of Pakistan, including the jurisdiction in which ci999 holds its international gaming licence and the countries where our technology infrastructure and service providers are located.

When ci999 transfers personal data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include:

• Contractual clauses with international service providers requiring them to maintain equivalent data protection standards.
• Transfer only to service providers in jurisdictions that maintain adequate data protection frameworks for the categories of data being transferred.
• Regular review of international data transfer arrangements to ensure continued adequacy of protections.

By using the ci999 platform, you acknowledge and consent to the international transfer of your personal data on the terms described in this section.

ci999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, platform features, or applicable legal and regulatory requirements. The effective date at the top of this document will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or the way ci999 processes your personal data — we will notify registered users via email to the address on file or via a prominent notice on the ci999 platform prior to the change taking effect.

For non-material updates (such as clarifications, formatting corrections, or minor rewording that does not change the substance of any provision), the updated Privacy Policy will be published on ci999.org without individual notification.

Continued use of the ci999 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, please cease using the platform and contact support to request account closure and data deletion where applicable.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ci999 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within your ci999 account dashboard — the fastest channel for all privacy-related enquiries.
• Email: [email protected] — for formal written data rights requests, data breach reports, or detailed privacy complaints.

ci999 aims to acknowledge all privacy-related correspondence within 48 hours and to provide a substantive response within 30 calendar days. For complex data subject access requests, the response period may be extended to 60 days, in which case you will be notified of the extension and the reason for it.