CT777 Privacy Policy – How We Protect Your Data in Pakistan

CT777 is an online gaming platform operating at ct777.wine and serving players primarily in Pakistan. When we say "CT777," "we," "our," or "us" in this Privacy Policy, we are referring to the legal entity that operates the CT777 platform under its international gaming licence.

This Privacy Policy applies to all personal data that CT777 collects, processes, stores and transmits in connection with your use of the CT777 website, mobile interface, games, customer support channels, and any related services. It covers data collected from both registered CT777 account holders and visitors who browse the platform without registering.

By accessing or using CT777, you acknowledge that you have read this Privacy Policy and that CT777 will handle your personal data as described here. If you are a Pakistani player and you have questions about how your data is handled, CT777's Data Protection contact details are provided in Section 14 of this policy.

This Privacy Policy is intended to be read alongside CT777's Terms and Conditions and Responsible Gaming Policy. Together, these three documents describe the complete framework under which CT777 operates.

CT777 collects personal data in several ways — information you provide directly, information generated by your use of the platform, and in limited cases, information from third-party sources used for verification purposes. Here is a full breakdown:

Data You Provide Directly to CT777

• Registration information: Full name, date of birth, gender, email address, mobile number, and Pakistani address when you create a CT777 account.
• Identity verification documents: Copies of CNIC, passport or other government-issued identification when CT777 requests KYC (Know Your Customer) verification.
• Payment information: Easypaisa account number, JazzCash number, NayaPay wallet ID, SadaPay details, bank account number for IBFT, or debit card details for Visa/Mastercard transactions. CT777 does not store full card numbers — payment processing is handled by certified payment gateways.
• Support communications: Any information you share with CT777 via live chat, email, or other support channels, including the content of your messages and attachments.
• Survey and feedback responses: Information provided when participating in CT777 satisfaction surveys or promotional activities.

Data Generated by Your CT777 Activity

• Gaming records: Full history of games played, bets placed, amounts wagered, wins and losses, and game timestamps across all CT777 games including Teen Patti, Andar Bahar, Aviator and casino games.
• Transaction records: Complete deposit and withdrawal history, including amounts in PKR, payment methods used, transaction timestamps and processing status.
• Login and session data: IP address, device type, operating system, browser version, session duration, pages visited within CT777, and login timestamps.
• Location data: General geographic location derived from your IP address. CT777 does not use GPS-level precise location tracking.
• Responsible gaming data: Records of any deposit limits, session limits, cooling-off periods or self-exclusion settings you configure in your CT777 account.

Data From Third Parties

• Identity verification data from government database checks used to confirm CNIC validity during KYC processes.
• Fraud prevention data from licensed anti-fraud service providers used to protect the CT777 platform and its players.
• Age verification data from third-party verification providers in cases where additional age confirmation is required.

CT777 uses your data only for the purposes described below. We do not use personal data in ways that you would not reasonably expect given the nature of an online gaming platform.

• Account management: Creating and maintaining your CT777 account, verifying your identity, enabling login, and processing account changes you request.
• Game delivery: Running all CT777 games — including live dealer games, casino games, Teen Patti, Andar Bahar, Aviator and crash games — and ensuring they function correctly for your device and connection.
• Payment processing: Processing PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments. Transaction records are maintained for accounting and regulatory compliance.
• Customer support: Responding to your queries, investigating complaints, resolving disputes and providing technical assistance via CT777's 24/7 support channels.
• Fraud and security: Detecting and preventing fraudulent activity, bonus abuse, multi-accounting, money laundering and other misuse of the CT777 platform. This includes automated monitoring of unusual betting patterns and transaction irregularities.
• Legal and regulatory compliance: Meeting CT777's obligations under its gaming licence, including age verification, responsible gaming programme delivery, anti-money laundering (AML) checks, and record-keeping requirements.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and providing interventions where required under CT777's responsible gaming policy.
• Platform improvement: Analysing aggregated, anonymised usage data to improve CT777's game library, website performance, and user interface.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates to players who have not opted out. See Section 12 for full details and opt-out instructions.

CT777 processes your personal data on the following legal bases:

CT777 does not sell your personal data to anyone. CT777 does not share your personal data with third parties for their own marketing purposes. Data sharing is limited strictly to what is necessary for CT777 to operate its platform and meet its legal obligations.

CT777 may share your data with the following categories of third parties:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners for IBFT, and card payment gateways — solely to process your PKR transactions. These providers are bound by their own data security standards and CT777's data processing agreements.
• Identity and age verification providers: Licensed KYC services used to verify the authenticity of identity documents and confirm player age as required by CT777's licence conditions.
• Fraud prevention services: Specialist providers used to identify and prevent fraudulent activity on the CT777 platform. These providers process only the minimum data necessary for fraud scoring.
• Game software providers: Third-party game developers whose titles appear on the CT777 platform. Session data may be shared to run game logic correctly, but these providers are contractually prohibited from using CT777 player data for any other purpose.
• Regulatory authorities: CT777's licensing authority and other relevant regulators as required by law. CT777 will always inform you of such disclosures unless legally prohibited from doing so.
• Law enforcement: Where CT777 is legally compelled to disclose data in response to a valid court order or law enforcement request.
• Professional advisers: Lawyers, accountants and auditors under strict confidentiality obligations where necessary for CT777's business operations.

CT777 takes data security seriously and implements industry-standard technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction.

CT777's security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and CT777's servers is encrypted using current industry-standard protocols. The padlock in your browser's address bar confirms this connection is active.
• Encrypted data storage: Sensitive data including identity documents, payment details and account credentials are stored in encrypted form in CT777's databases. Raw payment card numbers are never stored by CT777.
• Access controls: CT777 staff access to player data is restricted on a strict need-to-know basis. Access logs are maintained and reviewed regularly. Staff with data access undergo regular privacy and security training.
• Two-factor authentication: CT777 supports two-factor authentication (2FA) on player accounts and strongly recommends that all Pakistani players enable it for additional protection.
• Penetration testing: CT777's platform undergoes regular security assessments by independent specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: CT777 maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, CT777 will notify affected players and relevant regulators within the timeframe required by applicable law.

CT777 uses cookies and similar technologies — including local storage and session tokens — to make the platform function correctly, remember your preferences, and understand how Pakistani players use the platform so we can improve it.

Here is what each category of cookie does on CT777:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent CT777 from functioning correctly. CT777 does not use cross-site tracking cookies or share cookie data with advertising networks.

CT777 retains personal data only for as long as it is necessary for the purpose it was collected, or for as long as required by CT777's legal obligations under its gaming licence and applicable regulations.

• Account data: Retained for the duration of your active CT777 account plus a minimum of 5 years after account closure, as required for AML and gaming licence compliance.
• Transaction records: All PKR deposit, withdrawal and betting records are retained for a minimum of 5 years from the date of each transaction.
• Identity documents (KYC): Retained for 5 years from the date of verification, or longer where required by CT777's regulatory obligations.
• Customer support records: Retained for 3 years from the date of the interaction, or longer where the matter is subject to ongoing dispute or legal proceedings.
• Marketing consent records: Retained until you withdraw consent plus 1 year for audit purposes.
• Session and analytics data: Aggregated analytics data may be retained indefinitely in anonymised form. Raw session logs are retained for 12 months.

When retention periods expire, CT777 securely deletes or anonymises personal data so that it can no longer be associated with any individual.

CT777 respects your rights over your personal data. You can exercise any of the following rights at any time by contacting CT777's Data Protection contact (details in Section 14):

• Right of access: You can request a copy of all personal data CT777 holds about you. CT777 will respond within 30 days.
• Right to rectification: If any personal data CT777 holds about you is inaccurate or incomplete, you can request that it be corrected.
• Right to erasure: You can request that CT777 delete your personal data. Note that CT777 may be unable to fulfil erasure requests where retention is required by law (e.g., AML records must be kept for 5 years).
• Right to restrict processing: You can ask CT777 to stop using your data for certain purposes while a dispute is resolved.
• Right to data portability: You can request your CT777 account data in a structured, machine-readable format.
• Right to object: You can object to CT777 processing your data for marketing purposes or on the basis of legitimate interests. Objections to marketing will always be honoured immediately.
• Right to withdraw consent: Where CT777 relies on your consent to process data (primarily for marketing), you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

CT777 is an online gaming platform intended exclusively for adults aged 18 and above. CT777 does not knowingly collect, process or retain personal data from anyone under the age of 18.

CT777 implements age verification checks at registration and may request documentary proof of age at any point during a player's account lifetime. If CT777 discovers that a player under 18 has registered, the account will be closed immediately and any funds will be returned to the source payment method.

If you are a parent or guardian and you believe that a minor may have registered a CT777 account using your details or without your knowledge, please contact CT777 support immediately. CT777 will investigate and take appropriate action without delay.

CT777 encourages parents to use parental control software on shared devices to prevent minors from accessing online gaming platforms, including CT777. A list of recommended tools is available on CT777's Responsible Gaming page.

CT777 is an internationally operated platform and some of the data processing activities described in this Privacy Policy may involve transferring personal data to countries outside Pakistan. This may include the jurisdictions in which CT777's servers, payment processors, KYC providers or game software partners are located.

Where CT777 transfers personal data internationally, it ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include:

• Contractual clauses in agreements with all third-party processors that require them to protect your data to CT777's standards.
• Transfers only to jurisdictions that CT777's licensing authority considers to have adequate data protection standards.
• Encryption of data in transit for all international transfers.

If you would like more information about the specific safeguards CT777 applies to international data transfers, contact our Data Protection contact at the details in Section 14.

CT777 may send you promotional emails, SMS messages or in-platform notifications about bonuses, new games, special offers and platform updates. CT777 only sends marketing communications to players who have consented to receive them during the registration process or subsequently via account settings.

You can opt out of CT777 marketing communications at any time in the following ways:

• Click the "unsubscribe" link in any CT777 marketing email.
• Go to your CT777 account settings and disable marketing preferences under the "Notifications" section.
• Contact CT777 support via live chat or email and request to be removed from the marketing list.

Opting out of marketing communications does not affect transactional communications — CT777 will still send you messages about your account balance, deposit confirmations, withdrawal updates, and important security notices. These are not marketing communications and cannot be disabled without closing your account.

CT777 may update this Privacy Policy from time to time to reflect changes in data protection law, our business practices, or the services we offer to Pakistani players. The "Last Reviewed" date at the top of this page will always reflect when the most recent changes were made.

Where changes to this Privacy Policy are material — meaning they significantly affect how CT777 uses your personal data or the rights available to you — CT777 will:

• Notify all registered CT777 account holders via email at least 14 days before the changes take effect.
• Display a prominent notice on the CT777 platform during the notification period.

Minor updates — such as clarifications, corrections of typographical errors, or improvements to readability that do not change the substance of the policy — may be made without prior notification.

Your continued use of the CT777 platform after a revised Privacy Policy takes effect constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how CT777 has handled your personal data, please contact us through the following channels: