Privacy Policy — ct777d

This Privacy Policy ("Policy") is issued by ct777d ("we", "us", "our" or the "Platform") and applies to all personal data collected from individuals ("you", "your" or "User") who access or use the ct777d website at https://ct777d.cam and all related services, features and content.

ct777d is an English-language online gaming guide and platform portal designed specifically for Pakistani users, including players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We take our responsibility to protect your personal information seriously and are committed to processing data lawfully, fairly and transparently.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. Together these documents govern your relationship with ct777d.

In this Policy, the following terms have the meanings set out below:

• "Data Controller" means ct777d, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of ct777d under a data processing agreement.
• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, email address, date of birth, CNIC number, device identifiers and financial account information.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission and deletion.
• "KYC Data" means identity verification documents and information submitted as part of the Know Your Customer process, including government-issued ID, proof of address and payment method verification.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences and analytics data.
• "Sensitive Data" means special categories of personal data requiring heightened protection — including biometric data, health information and financial details.

ct777d collects personal data in the following categories:

We do not deliberately collect data about your race, ethnicity, religious beliefs, political views, trade union membership or sexual orientation. If any such information is incidentally included in documents you submit for KYC, it will not be processed for any other purpose.

ct777d collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit, place a bet, contact support or respond to a promotion;
• Automatically: Through cookies, web beacons and server logs as you browse and interact with the Platform — including technical and usage data described in Section 3;
• From payment providers: Confirmation data from payment processing references such as Easypaisa, JazzCash, Raast and bank transfer providers (e.g. HBL, UBL, Meezan Bank, Bank Alfalah) where you use these as deposit or withdrawal methods. This data is limited to transaction confirmation and does not imply any endorsement of gambling by those providers;
• From identity verification services: Where we use a third-party KYC provider to cross-reference the documents you submit with official records for fraud prevention purposes;
• From analytics providers: Aggregated, pseudonymised behavioural data to help us understand how the Platform is used and to improve user experience.

ct777d processes your personal data on one or more of the following legal bases depending on the nature and purpose of the processing:

• Performance of a contract: Processing necessary to register your account, process bets, handle deposits and withdrawals and provide customer support;
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC verification, anti-money laundering obligations and regulatory record-keeping;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, analytics and product improvement — where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear, freely given consent that you may withdraw at any time.

ct777d uses personal data for the following purposes:

• Creating and administering your ct777d Account;
• Verifying your identity and age in compliance with KYC requirements;
• Processing deposits and withdrawals, including PKR-denominated transaction records;
• Providing access to sports betting, live casino, slot games and other Platform Services;
• Monitoring betting and gaming activity to identify problem gambling behaviour and administer responsible gambling tools including deposit limits, loss limits and self-exclusion;
• Detecting, investigating and preventing fraudulent activity, cheating, collusion and money laundering;
• Responding to customer support enquiries and resolving disputes;
• Sending you transactional communications including account confirmations, withdrawal notifications and security alerts;
• Sending promotional communications where you have provided consent and have not subsequently opted out;
• Improving the Platform through aggregated analytics, A/B testing and user experience research;
• Complying with applicable regulatory obligations and responding to lawful requests from competent authorities.

We will not use your personal data for any purpose incompatible with those described in this Policy without providing you with prior notice and, where required, obtaining your separate consent.

ct777d does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. Your data may be shared in the following limited circumstances:

• Service providers and Data Processors: Third parties contracted to deliver services on our behalf, including KYC verification providers, payment processing infrastructure, cloud hosting, security services and customer support platforms. All processors are bound by data processing agreements requiring them to maintain appropriate security standards;
• Associated operators: Where ct777d provides access to gaming services operated by a licensed third-party operator, relevant account and transaction data will be shared with that operator to the extent necessary to deliver the Service;
• Fraud prevention and security: Data may be shared with fraud detection networks, credit reference agencies and law enforcement agencies where there is reasonable suspicion of fraudulent, criminal or abusive activity;
• Legal and regulatory obligations: We may disclose personal data where required by applicable law, court order, regulatory direction or lawful request by a competent authority;
• Business restructuring: In the event of a merger, acquisition, sale of assets or corporate restructuring involving ct777d, personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

ct777d operates an internationally accessible platform and may store or process personal data on servers located outside Pakistan. Where personal data is transferred to countries that may not have data protection laws equivalent to those in your jurisdiction, ct777d will ensure that appropriate safeguards are in place, which may include:

• Contractual data transfer agreements incorporating standard clauses requiring recipients to maintain appropriate security and privacy protections;
• Transfers to recipients in jurisdictions recognised as providing adequate data protection by relevant regulatory frameworks;
• Other legally recognised transfer mechanisms as appropriate to the specific transfer.

If you have questions about the safeguards in place for international data transfers involving your personal information, please contact us at [email protected].

ct777d retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. In practice, this means:

• Account data: Retained for the duration of your active account relationship with ct777d, plus a minimum period of five (5) years following account closure for regulatory and audit purposes;
• KYC and identity documents: Retained for the period required by the applicable licensing jurisdiction's anti-money laundering regulations — typically a minimum of five (5) years from the date of the last transaction;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction for compliance, audit and dispute resolution purposes;
• Support communications: Retained for up to three (3) years from the date of the last communication, or longer where required in connection with an unresolved dispute;
• Marketing consent records: Retained until withdrawn or for three (3) years from the last marketing interaction, whichever is earlier;
• Technical and usage logs: Retained for up to twelve (12) months for security and platform improvement purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

ct777d uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair core Platform functionality including login and session management. For analytics and marketing cookies, you may withdraw consent at any time without affecting your ability to use the Platform.

Subject to applicable law, you hold the following rights in respect of your personal data held by ct777d:

ct777d is strictly for users aged 18 or above — or the higher minimum age required by the operator or its license jurisdiction. The Platform is not directed at, and should not be used by, any person under the applicable minimum age.

We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person below the minimum age without appropriate verification, we will take immediate steps to delete that data and close the associated Account.

If you are a parent or guardian and have reason to believe that a minor in your care has registered on ct777d, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

ct777d implements technical and organisational security measures appropriate to the sensitivity of the data we process. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Passwords stored using strong one-way cryptographic hashing — ct777d staff cannot view your password in plain text;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing and vulnerability assessments;
• Incident response procedures including notification protocols in the event of a material data breach.

No data transmission over the internet or electronic storage system can be guaranteed as completely secure. Whilst ct777d takes all reasonable precautions, we cannot provide an absolute guarantee of security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying us promptly if you suspect any unauthorised access to your Account.

The ct777d Platform may contain references to third-party services including payment providers (such as Easypaisa, JazzCash and Raast) and game suppliers. ct777d does not control the privacy practices of these third parties and is not responsible for their data collection, use or security practices.

Any personal data you provide directly to a third-party service — whether a payment provider, game studio or other external operator — is governed exclusively by that party's own privacy policy. We encourage you to review the relevant privacy policies before engaging with third-party services.

ct777d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. When we make material changes — those affecting how we collect, use or share your personal data — we will post a prominent notice on the Platform prior to the revised Policy taking effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed of how ct777d handles your personal data.

Continued use of the Platform after a revised Policy becomes effective constitutes your acceptance of the changes. If you object to any change, you must cease using the Platform and may contact us to close your Account.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by ct777d, please contact our Data Protection team through the following channel:

• Email (plain text — not a clickable link): [email protected]
• Live Chat: Available 24/7 via the in-platform chat widget when you are logged in to your ct777d Account.

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days. For complex or multi-faceted requests, we will keep you informed of progress if the response requires additional time.

Support is available in English. Urdu-language assistance may also be available on request, serving players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.