CT888 Privacy Policy – How We Protect Your Data in Pakistan

1 Who We Are

CT888 is an online gaming and sports betting platform serving players in Pakistan. When this Privacy Policy refers to "ct888," "we," "us," or "the Platform," it means the operator and technology team responsible for running ct888.click and all associated services.

CT888 acts as the data controller for all personal information collected through the platform. This means we determine the purposes and means by which your data is processed. If you have any questions about how ct888 handles your personal data, you can reach our data team directly at support@ct888.click.

2 Data We Collect

CT888 collects personal information from you in several ways. Here is a clear breakdown of what we gather and when:

2.1 Information You Provide Directly

• Registration data: Your name, date of birth, mobile number, and any other details required when you create a ct888 account.
• Identity verification: Copies of your CNIC or other government-issued ID when ct888 carries out account verification checks.
• Payment information: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT, or card details for Visa/Mastercard transactions. CT888 does not store full card numbers — payment card data is tokenised by our PCI-DSS compliant payment processors.
• Support communications: Messages, chat logs, and emails you send to ct888's customer support team.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, browser version, operating system, and mobile network (Jazz, Zong, Telenor, Ufone, etc.).
• Session data: Pages visited on ct888, time spent on each section, click patterns, and navigation paths.
• Gaming activity: Games played, bet amounts in PKR, session duration, win/loss records, and bonus usage history.
• Location data: General geographic location inferred from IP address. CT888 does not collect precise GPS location data unless you explicitly grant device location permission.

3 How CT888 Uses Your Data

CT888 uses your personal data only for clearly defined purposes. Here is what we do with the information we hold about you:

• Account management: Creating and maintaining your ct888 account, processing login requests, and maintaining account security.
• Payment processing: Executing deposits and PKR withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments. Processing refunds where applicable.
• Identity verification and AML compliance: Verifying your age and identity as required by anti-money laundering obligations. CT888 is required by applicable law to conduct these checks.
• Platform personalisation: Tailoring the ct888 game lobby and promotional offers to match your gaming history and preferences — for example, surfacing cricket betting markets for players who regularly bet on cricket.
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance related to your ct888 account.
• Security and fraud prevention: Detecting and preventing unauthorised access, money laundering, bonus abuse, and other fraudulent activities on the ct888 platform.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and, where appropriate, proactively reaching out to offer support tools.
• Marketing communications: Sending you relevant ct888 promotional offers via SMS or push notification — only where you have opted in or where we have a legitimate interest to do so. You can opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve ct888's product, fix technical issues, and prioritise new features.

4 Legal Basis for Processing

CT888 processes your personal data under the following legal grounds:

• Contractual necessity: Most data processing at ct888 is necessary to fulfil our agreement with you as a player — operating your account, processing bets, and paying out winnings in PKR.
• Legal obligation: Certain data processing — particularly identity verification and transaction monitoring — is required by applicable anti-money laundering and financial crime prevention regulations.
• Legitimate interests: CT888 processes some data based on legitimate business interests, such as fraud detection, platform security, and responsible gaming monitoring. We balance these interests against your privacy rights.
• Consent: Where ct888 sends you marketing communications beyond what is necessary for the service, we rely on your consent. You may withdraw consent at any time by contacting support@ct888.click or updating your communication preferences in your account settings.

5 Who We Share Your Data With

CT888 does not sell, rent, or trade your personal data. We share it only in the following limited circumstances:

5.1 Service Providers

CT888 works with trusted third-party service providers who process data on our behalf under strict contractual confidentiality obligations. These include our payment processing partners (who handle your PKR transactions), our live dealer game studio providers, our cloud infrastructure provider, and our customer support platform. All service providers are vetted and operate under data processing agreements that restrict them from using your data for any purpose beyond providing the specific service to ct888.

5.2 Legal and Regulatory Requirements

CT888 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when legally required to do so. This includes responses to court orders, subpoenas, and AML reporting obligations. We will only disclose the minimum data necessary to comply with such requirements.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of ct888's business, player data may be transferred to a successor entity as part of that transaction. Any successor would be bound by this Privacy Policy with respect to the data transferred.

6 PKR Payment Data & Financial Privacy

Given that ct888 operates exclusively in Pakistani Rupees and uses local payment methods that are closely tied to Pakistani players' everyday mobile and banking activity, we take extra care with financial data.

6.1 Mobile Wallet Numbers

Your Easypaisa and JazzCash mobile wallet numbers are stored in encrypted form and used only for processing your ct888 deposit and withdrawal requests. They are never shared with advertisers or any party outside of the payment processing chain. CT888 support agents can see the last four digits of a registered wallet number for verification purposes — not the full number.

6.2 Bank Account and Card Data

For IBFT transfers and card payments, ct888 uses PCI-DSS compliant payment processors. Full card numbers are never stored by ct888 itself — they are tokenised at the point of entry. Bank account details provided for IBFT withdrawals are stored encrypted and accessible only to the ct888 payments team for processing your specific withdrawal request.

6.3 Transaction History

CT888 maintains a full record of all financial transactions on your account — deposits, withdrawals, bets, bonus credits, and adjustments — in PKR. This history is accessible to you in your account dashboard at any time. CT888 retains this financial data for a period of at least five years to comply with applicable financial regulations.

7 Cookies & Tracking Technologies

CT888 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and measure how players use the site so we can improve it. Here is a breakdown of the cookie types in use:

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent ct888 from functioning properly. Disabling analytics cookies will not affect your ability to play or withdraw.

8 How Long We Keep Your Data

CT888 does not keep your personal data for longer than necessary. Retention periods depend on the type of data and the reason we hold it:

• Account data: Retained for the duration of your active ct888 account, plus a minimum of five years after account closure — required for financial regulatory compliance.
• Transaction records: All PKR deposit, withdrawal, and betting records are retained for a minimum of five years following the transaction date.
• Identity verification documents: CNIC copies and similar documents are retained for up to five years after your account closes, in line with AML requirements.
• Customer support communications: Live chat transcripts and email correspondence are retained for up to two years.
• Session and analytics data: Anonymised and aggregated after 13 months. Raw session logs are deleted after 90 days.
• Marketing preference records: Maintained until you withdraw consent or for up to two years of inactivity, whichever comes first.

After these retention periods, ct888 securely deletes or anonymises your personal data. Data held purely for anonymised analytical purposes (with no connection to your identity) may be retained indefinitely.

9 Your Privacy Rights

As a ct888 player, you have the following rights regarding your personal data. These can be exercised by contacting support@ct888.click with the subject line "Privacy Request" along with your registered mobile number for verification:

10 How CT888 Keeps Your Data Secure

CT888 uses a combination of technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

• TLS encryption: All data transmitted between your browser or device and the ct888 platform is encrypted using TLS (Transport Layer Security). You can verify this by the padlock icon in your browser's address bar.
• Encrypted data storage: Sensitive personal data — including mobile wallet numbers, bank details, and identity document images — is stored in an encrypted form that cannot be read without decryption keys held separately and securely.
• Access controls: Internal access to personal data at ct888 is restricted on a need-to-know basis. Employees can only access the data relevant to their specific role — for example, the payments team can access financial data but not game session history.
• Regular security audits: CT888 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: CT888 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, you will be notified promptly and given guidance on protective steps.

While ct888 takes all reasonable measures to protect your data, no internet transmission or electronic storage system is 100% secure. We encourage you to use a strong, unique password for your ct888 account and never share your login credentials with anyone.

11 Children's Privacy

CT888 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. All users are required to confirm they are 18 or older during the registration process, and ct888 conducts age verification checks on accounts where there is any doubt.

If ct888 discovers that a user under 18 has created an account, we will immediately close that account, delete all associated personal data (beyond what is required for regulatory purposes), and return any deposited funds. If you believe a minor may be using a ct888 account, please contact us immediately at support@ct888.click.

12 Changes to This Privacy Policy

CT888 may update this Privacy Policy from time to time to reflect changes in our data practices, new services we introduce, or changes in applicable law. When material changes are made, we will notify you via a prominent notice on the ct888 platform and, where appropriate, via your registered contact details.

The "Last Updated" date at the top of this page always shows when the policy was most recently revised. We encourage you to review this page periodically. Your continued use of ct888 after a policy update constitutes acceptance of the revised terms.

13 How to Contact CT888 About Privacy

For any questions, concerns, or requests relating to your personal data and ct888's handling of it, please use the following contact channels: