ct888 Privacy Policy —
How We Protect Your Personal Data

This Privacy Policy ("Policy") is published by ct888 ("ct888", "the Company", "we", "us", "our") and applies to all personal data collected from individuals ("Players", "Users", "you") who access or use the ct888 platform at ct888.bio, including all associated gaming, betting, payment, and account management services.

ct888 is committed to protecting the privacy and security of every registered player's personal data. This Policy has been drafted to be transparent, readable, and practical — explaining in clear terms what data ct888 collects, why it is collected, how it is processed, and what rights you have over it as a player based in Pakistan or accessing ct888 from elsewhere.

This Policy is incorporated into and must be read alongside the ct888 Terms & Conditions and Responsible Gaming Policy. By registering a ct888 account, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

For the purposes of applicable data protection legislation, ct888 acts as the data controller in respect of all personal data collected from players through the ct888 platform. As data controller, ct888 determines the purposes and means by which your personal data is processed.

ct888 operates under an international gaming licence. The Company's registered details, including the full legal entity name and registered address, are available on request by contacting our support team. ct888's designated data protection contact can be reached via the details set out in Section 15 of this Policy.

ct888 collects the following categories of personal data from players. The specific data collected depends on the nature of your interaction with the platform:

ct888 does not intentionally collect special category data (such as data concerning health, religion, or political opinions) from players. If such data is incidentally included in documents provided for verification purposes, it will not be processed beyond what is strictly necessary for the relevant verification.

ct888 collects personal data through the following channels and methods:

• Direct Collection: Data you provide when registering your ct888 account, completing identity verification, making deposits or withdrawals, contacting customer support, or responding to promotions.
• Automated Collection: Technical and usage data collected automatically when you access the ct888 platform, including via cookies, web server logs, and similar tracking technologies as described in Section 9.
• Third-Party Sources: Data received from identity verification providers, payment processors (including JazzCash and EasyPaisa), fraud prevention services, and our gaming licence regulator where such data sharing is permitted or required under applicable law.
• Public Sources: In limited circumstances, ct888 may verify data against publicly available sources as part of anti-money laundering screening obligations.

ct888 processes your personal data only where a lawful basis for doing so exists. The following table sets out the primary purposes for which ct888 processes personal data and the corresponding lawful basis:

• Account Creation and Management (Contractual Necessity): ct888 processes your identity and contact data to create and maintain your player account, authenticate your logins, and communicate with you about your account status.
• Payment Processing (Contractual Necessity): Financial data is processed to facilitate PKR deposits via JazzCash, EasyPaisa, and other accepted methods, and to process withdrawal requests to your designated payment method.
• Regulatory Compliance — KYC and AML (Legal Obligation): ct888 is required under its gaming licence to verify the identity of all players and to conduct ongoing monitoring for money laundering and related financial crimes. Processing of identity and verification data for these purposes is mandatory and cannot be withheld.
• Responsible Gaming Compliance (Legal Obligation and Legitimate Interest): ct888 processes usage and behavioural data to identify players who may be experiencing gambling-related harm and to apply responsible gaming interventions where required.
• Fraud Prevention and Security (Legitimate Interest): Technical and usage data is processed to detect and prevent fraudulent account activity, multi-accounting, bonus abuse, and other forms of platform misuse.
• Customer Support (Contractual Necessity): Communications data is processed to manage and resolve player queries and complaints efficiently.
• Marketing (Consent): Where you have opted in to receive promotional communications from ct888, contact data is used to send you information about offers, bonuses, and new games on the ct888 platform. You may withdraw this consent at any time.
• Platform Improvement (Legitimate Interest): Aggregated and anonymised usage data is analysed to improve the ct888 platform, optimise the player experience, and inform new feature development.

ct888 does not sell your personal data to third parties. ct888 may share your personal data with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and other payment processors receive the financial and identity data necessary to complete your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and AML screening services receive identity and verification documents to conduct the checks required under ct888's gaming licence.
• Game Software Providers: Game studios and content providers may receive pseudonymised gameplay data necessary to operate, maintain, and certify the fairness of games available on the ct888 platform.
• Regulatory Authorities: ct888 is required to report certain information to its gaming licence regulator and, where legally compelled, to law enforcement and financial intelligence authorities.
• IT and Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers process data on ct888's behalf under binding data processing agreements.
• Professional Advisors: Legal counsel, auditors, and accountants may access limited personal data as required for the provision of professional advice to ct888.

ct888 operates internationally and some of the third-party service providers engaged by ct888 — including gaming software studios, cloud infrastructure providers, and payment technology companies — may be based outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where personal data is transferred internationally, ct888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include contractual provisions, the use of service providers in jurisdictions with adequate data protection frameworks, or other legally recognised transfer mechanisms.

By registering a ct888 account and accepting this Privacy Policy, you consent to the international transfer of your personal data as described in this section, provided that ct888 maintains the safeguards described above.

ct888 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active ct888 account, and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Data: Financial transaction records are retained for a minimum of five (5) years following the date of each transaction, as required by applicable AML regulations.
• KYC Verification Documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the end of the business relationship.
• Customer Support Records: Support correspondence is retained for a minimum of three (3) years following the closure of the relevant case.
• Marketing Data: Marketing preferences and related data are retained until you withdraw your consent, following which they are deleted or anonymised within a reasonable period.
• Technical and Usage Data: Aggregated and anonymised usage data may be retained indefinitely for analytics purposes. Individually identifiable technical data is deleted or anonymised within twelve (12) months of collection.

On expiry of the applicable retention period, ct888 will securely delete or irreversibly anonymise the relevant personal data.

ct888 uses cookies and similar tracking technologies on its platform to provide and improve the service. Cookies are small data files placed on your device when you access a website. ct888 uses the following types of cookies:

• Strictly Necessary Cookies: Required for the ct888 platform to function, including maintaining your login session, remembering your language preference, and enabling secure payment processing. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences and personalisation settings — such as your preferred game lobby view or deposit method — to improve your experience on the ct888 platform on repeat visits.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the ct888 platform — which games are most played, how players navigate the interface, and where technical errors occur — to enable ct888 to identify improvements.
• Security Cookies: Support ct888's fraud detection systems by tracking session characteristics that may indicate unauthorised account access or automated bot activity.

ct888 does not place third-party advertising cookies on the platform. On your first visit to ct888.bio, you will be presented with a cookie consent notice. Strictly necessary cookies operate without requiring your consent; all other cookie categories require your explicit opt-in before activation.

You may manage or withdraw your cookie consent at any time through your browser settings or the cookie preference centre accessible on the ct888 platform. Please note that disabling certain cookies may impact the functionality of specific ct888 features.

ct888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end 256-bit SSL encryption on all data transmissions between your device and the ct888 platform.
• Encrypted storage of sensitive personal data, including financial information and identity verification documents, using AES-256 or equivalent encryption standards.
• Access controls limiting internal access to personal data to only those ct888 employees and contractors whose roles require it, subject to strict confidentiality obligations.
• Multi-factor authentication for ct888 internal system access and optional two-factor authentication for player accounts via Pakistani mobile number OTP.
• Regular security vulnerability assessments and penetration testing of the ct888 platform infrastructure.
• Fraud detection systems that continuously monitor account activity for patterns consistent with unauthorised access or platform abuse.
• Incident response procedures enabling ct888 to identify, contain, and notify affected parties of any data breach in accordance with applicable legal obligations.

While ct888 takes every reasonable precaution to protect your personal data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. Players are encouraged to maintain strong, unique passwords and to enable two-factor authentication on their ct888 accounts.

ct888 may send you promotional communications — including information about new games, available bonuses, reload offers, VIP programme updates, and special Pakistan-focused promotions — via email and SMS to your registered mobile number, but only where you have provided your explicit consent to receive such communications.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email sent by ct888.
• Replying "STOP" to any ct888 promotional SMS sent to your registered Pakistani mobile number.
• Updating your communication preferences in the notification settings section of your ct888 account dashboard.
• Contacting ct888 support via live chat and requesting removal from all marketing lists.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal. Transactional and account-related communications — such as deposit confirmations, withdrawal notifications, and security alerts — will continue to be sent regardless of marketing preferences, as these are necessary for the operation of your ct888 account.

The ct888 platform is strictly for individuals aged 21 and above. ct888 does not knowingly collect personal data from individuals under the age of 21. If ct888 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed.

ct888 conducts age verification as part of the mandatory KYC process applied to all registered accounts. Where age cannot be verified to ct888's satisfaction, account access will be restricted until satisfactory verification is provided. ct888 uses technical and procedural controls to prevent minors from accessing the platform.

The ct888 platform may, from time to time, contain references or links to third-party websites, services, or resources — for example, information about payment providers, licensing bodies, or responsible gaming organisations. This Privacy Policy applies solely to personal data collected and processed by ct888 through the ct888 platform and does not extend to third-party websites.

ct888 is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any third-party site you visit before providing personal data to that site.

ct888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our licensing obligations. Where changes are material, ct888 will notify registered players by email and/or by displaying a prominent notice on the ct888 platform prior to the changes taking effect.

The updated Policy will display a revised "Last Updated" date at the top of this page. Your continued use of the ct888 platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and contact ct888 to request account closure.

ct888 recommends that players review this Privacy Policy periodically to remain informed of how their personal data is being handled.

If you wish to exercise any of your data rights described in this Policy, have a question about how ct888 handles your personal data, or wish to make a complaint about ct888's data processing practices, please contact us using the details below:

When submitting a data access or erasure request, please be prepared to verify your identity so that ct888 can confirm the request originates from the registered account holder. ct888 cannot process data rights requests from unverified individuals to protect registered players from malicious third-party access requests.

This Privacy Policy was last reviewed and updated in January 2026. ct888 thanks you for taking the time to read it and for trusting us with your personal data.