ct777d Privacy Policy

ct777d (referred to throughout this Privacy Policy as "ct777d", "we", "us", or "our") operates the online gaming and sports betting platform accessible at ct777d.org. ct777d is licensed under an international gaming licence and offers cricket sportsbook, live casino, slot games, keno, and lucky bingo services to eligible players globally, including registered users in Pakistan.

This Privacy Policy applies to all personal data collected through the ct777d website, any associated mobile web interface, and all communications between ct777d and its registered players — whether those players are based in Karachi, Lahore, Islamabad, Faisalabad, Peshawar, Multan, or anywhere else.

ct777d acts as the data controller for personal data collected directly from players during registration, KYC, deposit, withdrawal, and gaming activity. Where ct777d uses third-party processors (such as payment gateways or identity verification services), those processors act as data processors under strict contractual obligations.

ct777d collects personal data that falls into the following categories. We only collect data that is necessary and proportionate to the purposes described in Section 4.

ct777d collects personal data through several distinct channels depending on the stage of your interaction with our platform:

• Account Registration: When you create a ct777d account, you directly provide identity, contact, and address data through the registration form.
• KYC Verification: When you submit documents to verify your identity and age — such as a CNIC scan or utility bill — this data is collected and processed by our identity verification partner.
• Deposit & Withdrawal Transactions: Financial data is collected each time you initiate a deposit via JazzCash, EasyPaisa, or bank transfer, or request a withdrawal.
• Gaming Activity: ct777d's platform automatically records all gaming and betting activity associated with your account as part of normal system operation and regulatory compliance.
• Device & Technical Data: When you access the ct777d website from any device — whether a mobile in Lahore or a desktop in Islamabad — our servers automatically log technical data including IP address, browser type, and session duration.
• Customer Support: When you contact ct777d by email or live chat, the content of those communications is recorded and linked to your account for service continuity and dispute resolution purposes.
• Cookies: ct777d uses cookies and similar technologies to collect session data. See Section 6 for full details of our cookie policy.

ct777d processes personal data only where a valid legal basis exists. The following table sets out each processing purpose, the data categories involved, and the legal basis on which ct777d relies:

ct777d does not sell your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the specified purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum financial and identity data required to process your deposits and withdrawals. Each payment provider has its own privacy policy governing how it handles data.
• Identity Verification Partners: ct777d uses certified third-party KYC providers to verify CNIC, passport, and proof-of-address documents. These providers process your identity data solely for verification and are prohibited from using it for any other purpose.
• Game Studios & Software Providers: The third-party studios that supply slot, live casino, keno, and lucky bingo games to ct777d may receive anonymised session data for game performance and RTP auditing purposes. No personally identifiable data is shared with game studios.
• Fraud Prevention Services: ct777d uses specialist fraud and risk management tools that may process technical and financial data to detect multi-accounting, bonus abuse, and money laundering patterns.
• Legal & Regulatory Authorities: ct777d will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law, court order, or to enforce our Terms & Conditions.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving ct777d, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

ct777d uses cookies and similar browser-based technologies to ensure the platform functions correctly, to keep your session active, and to understand how players interact with different parts of the site. ct777d does not use third-party advertising cookies or behavioural tracking cookies for the purpose of selling advertising.

The cookies ct777d uses fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the ct777d platform to operate. They manage your login session, maintain your PKR wallet balance display, and handle security tokens. The platform cannot function without these cookies and they cannot be disabled.
• Functional Cookies: These cookies remember your platform preferences — such as your language setting, preferred game category, and responsible gaming tool configuration — so you do not have to re-enter them on every visit.
• Analytics Cookies: ct777d uses anonymised analytics cookies to understand aggregate player behaviour — for example, which game categories are most popular in Karachi versus Lahore. This data helps us improve the platform experience. No individually identifiable data is extracted from analytics cookies.
• Security Cookies: These cookies help ct777d detect and prevent fraudulent activity, including device fingerprinting to identify multi-account patterns and unusual access from unfamiliar locations.

You can control non-essential cookies through your browser settings. However, disabling strictly necessary cookies will prevent you from logging in to your ct777d account and using the platform. Most modern browsers (Chrome, Firefox, Safari) allow you to review and delete cookies from the browser's privacy or settings menu.

ct777d retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your ct777d account's active status plus a minimum post-closure period.
• KYC & Identity Documents: Retained for a minimum of 5 years after account closure, as required by anti-money laundering regulations applicable to licensed gaming operators.
• Financial Transaction Records: Retained for a minimum of 5 years after the date of each transaction, for regulatory audit and dispute resolution purposes.
• Gaming Activity Logs: Retained for a minimum of 3 years to support responsible gaming monitoring, bonus dispute resolution, and regulatory reporting obligations.
• Customer Support Communications: Retained for 2 years after the closure of each support ticket or complaint.
• Technical & Access Logs: Retained for 12 months for security monitoring and fraud prevention purposes.
• Marketing Preference Records: Consent and opt-out records retained indefinitely to demonstrate compliance with marketing consent obligations, even if the associated account is closed.

When data is no longer required for any applicable purpose or retention obligation, ct777d securely destroys it using methods appropriate to the data format (secure deletion for digital records, shredding for any physical documents).

ct777d implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• TLS Encryption in Transit: All data transmitted between your device and ct777d servers is protected by TLS 1.2 or higher. The ct777d.org domain enforces HTTPS across all pages.
• AES-256 Encryption at Rest: Personal data and financial records stored on ct777d infrastructure are encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are hashed using bcrypt with an appropriate work factor. ct777d staff cannot retrieve your plain-text password and will never ask you for it.
• Access Controls: Access to personal data within ct777d's operations is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks and regular data protection training.
• Intrusion Detection: ct777d deploys server-level intrusion detection and rate-limiting systems to identify and block suspicious access attempts.
• Penetration Testing: ct777d's platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-connected system can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to player rights and freedoms, ct777d will notify affected players and relevant authorities within the timeframes required by applicable law.

ct777d strictly enforces the 21+ age restriction across all its services. ct777d does not knowingly collect personal data from any person under 21 years of age. The platform is designed and operated exclusively for adult players.

ct777d's registration flow includes a date-of-birth declaration and KYC verification is required before withdrawals are processed, specifically to enforce this age restriction. Any account found to belong to a person under 21 will be immediately closed and all associated personal data will be deleted, except where retention is required by law.

If you are a parent or guardian and believe that a person under 21 in your household has registered a ct777d account, please contact [email protected] immediately. ct777d will investigate and close the account within 24 hours of a confirmed underage access report.

ct777d operates under an international gaming licence and its infrastructure, third- party processors, and data centres may be located outside Pakistan. When personal data is transferred internationally, ct777d ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards used for international transfers include:

• Contractual clauses: ct777d requires all third-party processors receiving personal data to sign data processing agreements that impose binding obligations equivalent to those applicable to ct777d itself.
• Adequacy assessments: Before transferring data to a new jurisdiction or processor, ct777d conducts a transfer impact assessment to evaluate the legal environment and data protection standards of the receiving country or organisation.
• Encryption in transit: All international data transfers are conducted over encrypted channels (TLS 1.2 or higher) to prevent interception during transmission.
• Minimal data transfers: ct777d applies a data minimisation principle to international transfers — only the specific data fields required by the receiving processor are transferred, never a full player record unless legally compelled.

To exercise any of the data rights described in this Privacy Policy — including access, rectification, erasure, restriction, portability, or withdrawal of consent — please contact ct777d's support team using the contact details in Section 13.

When submitting a data rights request, please include:

• Your full name and registered ct777d email address
• Your ct777d account username or player ID (if known)
• A clear description of the right you wish to exercise and the specific data it relates to
• A copy of your CNIC or passport for identity verification purposes (to ensure we action requests from the correct account holder only)

ct777d will acknowledge your request within 3 business days and will fulfil legitimate requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by up to a further 30 days, in which case ct777d will notify you of the extension and the reason for it.

ct777d will not charge a fee for processing data rights requests unless the request is manifestly unfounded, repetitive, or excessive — in which case a reasonable administrative fee may be applied, or the request may be refused with written explanation.

ct777d reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. The most current version of this Privacy Policy will always be published at ct777d.org/privacy-policy.

Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — ct777d will notify registered players by email to the address on file at least 14 days before the changes take effect. Continued use of the ct777d platform after the effective date of a material change constitutes acceptance of the revised Privacy Policy.

For minor or clarificatory changes (such as improved wording, corrected typographical errors, or updated contact details), ct777d may update the Policy without advance notice beyond publishing the updated version on this page with a revised "Last updated" date.

If you have any questions, concerns, or complaints about this Privacy Policy or how ct777d handles your personal data, please contact our support team using the following details:

When contacting us about a data privacy matter, please include your account username and a clear description of your query so our team can locate your records promptly and respond efficiently.