cc999 Privacy Policy — Your Data, Protected and Transparent

1 Introduction

cc999 is committed to protecting the privacy and personal data of every player who accesses or uses the cc999 platform. We understand that Pakistani players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Privacy Policy has been written in clear English to help you understand exactly how your data is handled — without unnecessary legal jargon where it can be avoided.

This Privacy Policy applies to all personal data collected by cc999 through the cc999.fyi website, associated mobile interfaces, and all services offered under the cc999 brand. It does not apply to third-party websites or services that may be linked to or from the cc999 platform.

2 Data Controller

cc999 is the data controller responsible for the personal data collected through the cc999 platform. As data controller, cc999 determines the purposes for which and the means by which your personal data is processed. If you have any questions about how cc999 handles your data, please contact our support team via the details in Section 15.

3 Personal Data We Collect

cc999 collects personal data at different stages of your interaction with the platform. The categories of data we collect include:

cc999 does not intentionally collect special category data (such as health information, religious beliefs, or biometric data) unless specifically required by a legal or regulatory obligation.

4 How We Use Your Personal Data

cc999 uses the personal data it collects for the following purposes:

• To create, verify, and manage your cc999 account.
• To process PKR deposits and withdrawals via Easypaisa, JazzCash, HBL, UBL, and other supported payment methods.
• To verify your identity and age (18+) in accordance with responsible gaming and legal requirements.
• To detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities.
• To provide customer support via Live Chat, WhatsApp, Telegram, and email.
• To personalise your experience on the cc999 platform, including game recommendations.
• To send you information about promotions, bonuses, and platform updates (where you have consented or where permitted by applicable law).
• To comply with applicable legal, regulatory, and tax obligations.
• To improve the performance, security, and usability of the cc999 platform.
• To enforce the cc999 Terms & Conditions and resolve disputes.

cc999 does not use automated decision-making that produces legal or similarly significant effects on Players without human review.

5 Legal Basis for Processing

cc999 processes your personal data on the following legal grounds depending on the specific processing activity:

• Contractual necessity: Processing required to operate your account and deliver the services you have requested — including PKR transaction processing.
• Legal obligation: Processing necessary to comply with anti-money laundering, counter-terrorism financing, age verification, and other applicable regulatory requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improving the cc999 product experience — where these interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, where your consent has been obtained and can be withdrawn at any time.

6 Cookies & Tracking Technologies

cc999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. The types of cookies used by cc999 include:

• Essential cookies: Required for the platform to function — including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and game lobby filters.
• Analytics cookies: Used to understand how players navigate the platform so we can improve the experience. Data collected is aggregated and anonymised where possible.
• Fraud prevention cookies: Used to detect and prevent fraudulent behaviour and account takeover attempts.

7 Sharing Your Personal Data

cc999 does not sell your personal data. We may share your personal data with the following categories of third parties where necessary:

• Payment processors: Easypaisa, JazzCash, HBL, UBL, MCB Bank, SadaPay, and Raast — to facilitate PKR deposits and withdrawals.
• Identity verification providers: To verify your identity and age in compliance with our KYC obligations.
• Fraud and AML screening providers: To screen transactions and account activity against sanctions lists and fraud databases.
• Game providers: Game studios whose titles are hosted on cc999 may receive technical session data necessary to operate their games. They do not receive full player profiles.
• IT and infrastructure providers: Cloud hosting and platform infrastructure providers operating under contractual data protection obligations.
• Legal and regulatory authorities: Where required by law, court order, or regulatory instruction.

All third-party service providers who process personal data on behalf of cc999 are required to do so under contractual terms that protect your data to a standard consistent with this Privacy Policy.

8 PKR Payments & Financial Data

cc999 processes PKR financial data with a high level of care given its sensitivity. Financial data — including Easypaisa and JazzCash wallet identifiers, bank account details, and transaction histories — is encrypted at rest and in transit and is accessible only to personnel with a specific operational need.

cc999 does not store full payment card numbers (if applicable in future) in its own systems. Payment processing is handled by certified payment processors under their own security standards.

9 Data Security

cc999 implements technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS encryption for all data in transit between your device and cc999 servers.
• Strong encryption for sensitive data stored at rest, including identity documents and financial records.
• Role-based access controls limiting data access to personnel with a legitimate business need.
• Regular security assessments and vulnerability monitoring of the cc999 platform.
• Two-factor authentication options for Player accounts.
• Incident response procedures for timely handling of any data security events.

While cc999 takes all reasonable steps to protect your data, no internet transmission is completely secure. Players are responsible for keeping their own login credentials confidential and for notifying cc999 immediately if they suspect any unauthorised access to their account.

10 Data Retention

cc999 retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. In general terms:

• Account data is retained for the duration of the account relationship and for a period thereafter as required by law.
• PKR transaction records are retained for the minimum period required by applicable financial regulations.
• KYC and identity verification documents are retained for the period required by anti-money laundering legislation.
• Support communications are retained for a reasonable period to resolve disputes and improve service quality.
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter.

When personal data is no longer required, cc999 will securely delete or anonymise it in a manner that prevents reconstruction.

11 Your Privacy Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by cc999:

• Right of access: You may request a copy of the personal data cc999 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to restriction: You may request that cc999 restrict the processing of your personal data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the cc999 support team. We will respond within a reasonable timeframe. We may need to verify your identity before processing your request.

12 Children's Privacy

13 Third-Party Links

The cc999 platform may contain references to third-party game providers and payment services. These third parties have their own privacy policies and cc999 has no control over how they collect or use personal data. We recommend reviewing the privacy policies of any third-party services you interact with. cc999 is not responsible for the data practices of third-party services.

14 Updates to This Privacy Policy

cc999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. The effective date at the top of this document will be updated when changes are made. Where changes are material, cc999 will notify Players via the platform and/or registered contact details prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the cc999 platform after any update constitutes acceptance of the revised Privacy Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data cc999 holds about you, please contact the cc999 Data Privacy team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the cc999 platform
• Telegram: 24/7 support channel
• WhatsApp: 24/7 support channel

cc999 will acknowledge all privacy-related requests within two (2) business days and will respond substantively within thirty (30) days of receiving a verifiable request. All communications regarding privacy matters should be submitted in writing to create a clear record.