ct777d Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ct777d ("ct777d", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the ct777d website at ct777d.app and all associated services, betting markets, games, and cashier functions (collectively, the "Platform").

By registering an account, making a deposit, or otherwise using the ct777d Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent, you must not use the ct777d Platform.

This Policy forms part of the overall agreement between you and ct777d, alongside the Terms & Conditions and the Responsible Gaming Policy.

2. Data Controller

For the purposes of applicable data protection legislation, ct777d is the data controller in respect of the personal data of all registered players and website visitors. Requests relating to personal data, including access requests and objections, should be directed to ct777d's data protection contact, details of which are set out in Section 14 of this Policy.

3. Data We Collect

ct777d collects personal data in the following categories:

3.1 Registration Data

When you create a ct777d account, we collect: full legal name, date of birth, residential address, email address, and Pakistani mobile number. This data is mandatory for account creation and identity verification.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to prevent underage gambling, ct777d may request copies of: government-issued photographic identification (CNIC, passport, or driving licence), proof of address (utility bill or bank statement), and proof of payment method ownership.

3.3 Financial Transaction Data

Records of all deposits, withdrawals, bonuses credited, and bets placed on ct777d are retained as part of the transactional record. This includes JazzCash transaction references, Easypaisa wallet identifiers, and bank transfer details where applicable. Full payment card numbers are never stored by ct777d.

3.4 Technical and Device Data

When you access ct777d, we automatically collect: IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, session duration, and pages visited. This data is used for security monitoring, fraud prevention, and platform optimisation.

3.5 Behavioural and Gaming Data

ct777d retains records of game sessions, betting history, sports markets accessed, bonus usage, and account activity logs. This data supports responsible gaming monitoring, customer support, dispute resolution, and regulatory compliance.

3.6 Communications Data

If you contact ct777d support, we retain records of the communication, including email content, chat transcripts, and the nature of any issue raised or resolved.

4. How We Use Your Data

Purpose	Data Categories Used
Account registration and authentication	Registration data, device data
Identity verification and KYC compliance	Registration data, KYC documents
Processing deposits and withdrawals in PKR	Financial transaction data
Fraud prevention and security monitoring	Technical data, behavioural data, financial data
Responsible gaming monitoring and intervention	Behavioural and gaming data
Customer support and dispute resolution	All categories as relevant
Regulatory compliance and AML reporting	Registration, KYC, and financial data
Platform analytics and service improvement	Technical and behavioural data (aggregated)
Marketing communications (with consent)	Registration data, communications preferences

ct777d does not sell your personal data to third parties. We do not use your data for profiling purposes unrelated to the delivery of ct777d's gaming and betting Services.

5. Legal Basis for Processing

ct777d processes personal data under the following legal bases:

• Contractual necessity – Processing required to provide the Services you have requested, including account management, payment processing, and game delivery.
• Legal obligation – Processing required to comply with AML regulations, KYC requirements, and applicable gaming legislation.
• Legitimate interests – Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests do not override your fundamental rights.
• Consent – Processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time by updating your communication preferences in the ct777d account settings.

6. Cookies & Tracking Technologies

ct777d uses cookies and similar tracking technologies to operate the Platform and improve your experience. The categories of cookies used are:

• Strictly Necessary Cookies – Required for session management, authentication, and basic platform function. These cannot be disabled without rendering the Platform inoperable.
• Performance Cookies – Collect anonymised data on how players interact with the Platform to help us identify and resolve technical issues and improve navigation.
• Functional Cookies – Remember your preferences such as language settings and display options.
• Analytics Cookies – Help ct777d understand aggregate usage patterns across the platform. Data is processed in anonymised or pseudonymised form.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access your ct777d account or place wagers.

7. Third-Party Data Sharing

ct777d shares personal data with the following categories of third parties, only to the extent necessary to fulfil the stated purpose:

• Payment processors – JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT infrastructure providers receive transaction-level data necessary to process your deposits and withdrawals.
• Game providers – Certified game studios receive the minimum data required to deliver game sessions and maintain fair play records.
• KYC and identity verification services – Third-party identity verification providers receive KYC documents for verification purposes.
• Regulatory and law enforcement bodies – ct777d will disclose personal data to competent authorities where required by law or court order, without prior notice where legally prohibited from doing so.
• IT and security service providers – Infrastructure, hosting, and cybersecurity vendors operating under strict data processing agreements with ct777d.

All third-party processors engaged by ct777d are bound by data processing agreements that prohibit them from using your personal data for any purpose beyond the scope of their engagement with ct777d.

8. International Data Transfers

As an online platform serving Pakistani players, ct777d may process or store data on servers located outside Pakistan. Where personal data is transferred to jurisdictions that do not provide an equivalent level of data protection, ct777d implements appropriate safeguards including standard contractual clauses, binding corporate rules, or equivalent mechanisms recognised under applicable data protection law.

9. Data Retention

ct777d retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum periods:

• Account and registration data – retained for the duration of the account plus a minimum of 5 years following closure, in compliance with AML retention obligations.
• Financial transaction records – minimum 5 years from the date of the transaction.
• KYC verification documents – minimum 5 years from account closure or the end of the business relationship.
• Communications and support records – minimum 2 years from the date of the communication.
• Technical and device data – 12 months from collection for security and fraud monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised unless further retention is required by law.

10. Your Privacy Rights

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to the personal data ct777d holds about you:

• Right of access – Request a copy of the personal data ct777d holds about you.
• Right to rectification – Request correction of inaccurate or incomplete personal data.
• Right to erasure – Request deletion of your personal data, subject to ct777d's legal retention obligations.
• Right to restriction of processing – Request that ct777d restrict processing of your data in specific circumstances.
• Right to data portability – Receive your personal data in a commonly used, machine-readable format.
• Right to object – Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent – Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact ct777d at the details provided in Section 14. ct777d will respond to valid requests within 30 days. Identity verification may be required before a request can be processed.

11. Children's Privacy

The ct777d Platform is strictly for persons aged 18 years and over. ct777d does not knowingly collect, process, or retain personal data of persons under 18. Where ct777d becomes aware that personal data of a person under 18 has been collected, such data will be immediately deleted and the associated account will be closed. Parents or guardians who believe a minor has registered on ct777d should contact us immediately at the details in Section 14.

12. Security Measures

ct777d implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and ct777d's servers
• Encrypted storage of sensitive personal and financial data at rest
• Role-based access controls limiting staff access to personal data to those with a legitimate business need
• Regular security audits and penetration testing of ct777d's infrastructure
• Two-factor authentication options for player accounts
• Automated anomaly detection and suspicious activity alerts

No security system is entirely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ct777d will notify affected players and the relevant regulatory authority in accordance with applicable legal requirements.

13. Amendments to This Policy

ct777d reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be notified to registered players via email and/or a prominent notice on the ct777d Platform prior to the amendment taking effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of the ct777d Platform following a Policy update constitutes acceptance of the amended terms.

14. Contact & Data Protection Enquiries

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ct777d, please contact our support team. We endeavour to respond to all privacy-related enquiries within 30 days.

Email: [email protected]

Our support team is available 24 hours a day, 7 days a week, in English for Pakistani players.