Privacy Policy — How ci999 Collects,
Uses and Protects Your Data

Introduction

This Privacy Policy ("Policy") is issued by ci999 ("we", "us", "our") in respect of the ci999 online betting and casino platform accessible at ci999.cam ("the Platform" or "the Site"). It applies to all users who register, access or interact with the Platform, including users located in Pakistan.

ci999 is an English-language platform designed for Pakistani players, covering cricket betting — including Pakistan Super League (PSL) fixtures, ICC tournaments and T20 events — alongside football, UFC, live dealer casino games, slots, table games, esports and instant games. In operating this platform, we collect and process personal data about our users. This Policy describes exactly how we do that and what your rights are as a data subject.

By creating an account on ci999, using any feature of the Platform or making a deposit, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not use the Platform.

Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or could identify a living natural person, including name, email address, CNIC number, IP address, device identifiers and transaction records.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For users of ci999, the Data Controller is ci999 as described in Section 3 below.
• "Data Processor" — A third party that processes personal data on behalf of and under the instructions of the Data Controller.
• "User" / "Data Subject" — Any individual who accesses or uses the ci999 Platform and whose personal data is processed under this Policy.
• "KYC" — Know Your Customer procedures, including identity verification and age verification required under the operator's compliance framework.
• "Cookies" — Small text files placed on a user's device by a website to store session information, preferences and analytical data.

Data Controller

ci999, operating the platform at ci999.cam, acts as the Data Controller for personal data collected through this Site. ci999 is an online betting and casino platform and does not hold or claim a Pakistani gambling license. The platform operates under an international operator licensing framework, the details of which are available on request through our support team.

For all privacy-related enquiries, data subject requests and complaints, users may contact ci999 through the support details provided in Section 16 of this Policy. We aim to respond to all data-related requests within a reasonable timeframe and in any event no later than 30 calendar days of receipt.

Data We Collect

ci999 collects personal data from users across several categories, described in the table below:

4.1 Data You Provide Directly

The majority of personal data we hold is provided directly by users during registration, KYC submission, deposit or withdrawal requests, and support interactions. You are under no obligation to provide certain data, but failure to provide mandatory information (such as KYC documents) may prevent access to specific platform features, including withdrawals.

4.2 Data Collected Automatically

When you access the ci999 platform, certain technical and behavioural data is collected automatically through server logs, cookies and similar tracking technologies. This includes your IP address, device identifiers, browser type, pages visited and session duration. This data is used for fraud prevention, platform security, performance optimization and analytics.

4.3 Data from Third Parties

We may receive personal data from third-party identity verification providers, payment processors and fraud prevention services as part of our KYC and AML compliance processes. Any data received from third parties is handled in accordance with this Policy.

Lawful Basis for Processing

ci999 processes personal data only where a lawful basis exists. The applicable bases are:

• Contractual necessity: Processing required to fulfil the account registration agreement, including KYC, account management, payment processing and bet settlement.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, responsible gambling requirements and operator licensing conditions.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, technical maintenance and internal analytics, where these interests are not overridden by user rights.
• Consent: Processing for optional marketing communications where users have opted in. Consent may be withdrawn at any time by contacting support or updating account preferences.

How We Use Your Data

Personal data collected through the ci999 platform is used for the following purposes:

• Creating and managing your registered ci999 account.
• Verifying your identity and age as part of mandatory KYC requirements.
• Processing deposits and withdrawals, including PKR transactions via available payment methods.
• Settling bets, awarding bonuses and managing account balances.
• Complying with anti-money-laundering (AML) obligations, including transaction monitoring and suspicious activity reporting where required.
• Providing customer support, responding to enquiries and resolving disputes.
• Operating responsible gambling monitoring systems, including flagging potentially problematic betting patterns.
• Fraud detection, risk assessment and platform security monitoring.
• Sending transactional communications (account confirmations, withdrawal notifications, security alerts) and, with your consent, marketing communications.
• Improving the platform through anonymised analytics and aggregated usage data.
• Complying with any court orders, regulatory directions or legal obligations applicable to the operator.

Data Sharing & Disclosure

ci999 does not sell, rent or trade your personal data to third parties for commercial purposes. We may share personal data with the following categories of recipients, strictly on a need-to-know basis:

• Identity verification providers: Third-party KYC and document verification services used to authenticate user identity and age.
• Payment processors: Service providers involved in processing PKR deposits and withdrawals. Payment provider names familiar to Pakistani users — such as those associated with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned for contextual reference only. These providers do not endorse or affiliate with ci999, and their own privacy policies govern how they handle data passed to them through payment processing flows.
• Fraud prevention and AML services: Third-party providers that assist in detecting fraud, suspicious transactions and potential money laundering activity.
• Cloud and infrastructure providers: Technology vendors that host platform data under strict data processing agreements.
• Regulatory and law enforcement authorities: Where we are legally required to disclose data in response to a valid court order, regulatory direction or law enforcement request.
• Professional advisors: Lawyers, auditors and consultants engaged to advise on legal, financial or compliance matters, subject to professional confidentiality obligations.

International Data Transfers

ci999 operates under an international operator licensing framework. As such, personal data collected through the Platform may be transferred to, stored in and processed by servers or service providers located outside Pakistan and outside the European Economic Area (EEA). Such transfers are carried out only where adequate safeguards are in place, including data processing agreements with service providers that impose data protection obligations consistent with internationally recognised standards.

Pakistani users should be aware that data transferred internationally may be subject to the laws of the destination country, which may differ from Pakistani data protection requirements. By using the ci999 platform, you acknowledge and accept this cross-border data transfer as a necessary part of the platform's operation.

Data Retention

ci999 retains personal data only for as long as is necessary for the purposes set out in this Policy. Retention periods are determined by the following factors:

• Active accounts: Personal data is retained for the duration of your account's active status and for a period thereafter as required by AML retention obligations (typically a minimum of 5 years following account closure in many licensing jurisdictions).
• KYC documents: Identity documents submitted for verification are retained for the period required under the operator's AML compliance framework and applicable regulatory obligations.
• Transaction records: Financial transaction data, including PKR deposit and withdrawal records, is retained for the period required for financial compliance, dispute resolution and tax/accounting obligations.
• Support communications: Chat transcripts and email correspondence are retained for a reasonable period to support dispute resolution and service quality monitoring.
• Marketing data: Where consent for marketing communications has been given, data is retained until consent is withdrawn, after which it is promptly removed from marketing lists.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any identifiable individual.

Your Rights as a Data Subject

Subject to applicable law and the operator's legal obligations, you have the following rights in respect of your personal data held by ci999. These rights are set out below and can be exercised by contacting our support team:

To exercise any of the above rights, contact our support team at the details provided in Section 16. We will respond within 30 calendar days. Some rights are subject to legal limitations — for example, data retained for mandatory AML compliance purposes cannot be deleted on request alone. We will explain any limitations that apply to your specific request.

Cookies & Tracking Technologies

ci999 uses cookies and similar tracking technologies to operate core platform functionality, maintain session security and collect aggregated analytics. The categories of cookies we use are described below:

• Essential Essential cookies — Required for the platform to function. These include session cookies that keep you logged in, security tokens and cookies that manage account state. These cannot be disabled without breaking core platform functionality.
• Functional Functional cookies — Store your preferences such as language settings, display options and responsible gambling tool configurations. These improve your experience but are not strictly necessary.
• Analytics Analytics cookies — Collect anonymised or pseudonymised data about how users navigate the platform. Used to understand performance and identify areas for improvement. No individual user is identified in analytics reports.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair or prevent access to the ci999 platform. ci999 does not use third-party advertising cookies or cookie-based behavioural retargeting for commercial advertising purposes.

Security Measures

ci999 takes the security of personal data seriously. We implement a range of technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and the ci999 platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Access controls limiting personal data access to authorised personnel with a documented operational need.
• Regular security assessments and internal audit procedures.
• Logging and monitoring of access to sensitive personal data systems.
• Incident response procedures for data breach scenarios, including user notification obligations where required by applicable law.

While ci999 maintains strong security practices, no online platform can guarantee complete security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your ci999 account has been accessed without your authorisation, contact our support team immediately.

Minors & Underage Users

The ci999 platform is strictly for users aged 18 years and above, or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory part of the KYC process.

If ci999 discovers that personal data has been collected from a user who is under the applicable minimum age, that account will be suspended immediately, all associated data will be reviewed, and any balance remaining in the account may be returned to the source payment method subject to verification. The relevant personal data will be deleted as soon as it is no longer needed for any legal purpose.

If you have reason to believe that a minor has registered an account on ci999, please contact our support team immediately.

Payment Data & PKR Transactions

ci999 accounts are denominated in Pakistani Rupees (PKR). When you deposit or withdraw funds, payment data — including transaction amounts, payment method references and timestamps — is processed and recorded. ci999 does not store full payment card numbers or mobile wallet PINs on its own systems; this sensitive payment credential data is handled directly by payment processors.

Pakistani payment rails commonly referenced on the platform — including Easypaisa, JazzCash, Raast and bank transfers via HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned for user familiarity only. None of these providers endorses, affiliates with or supports ci999. The data handling practices of these payment service providers are governed by their own privacy policies, which users should review independently.

All financial transaction data is retained for the period required by applicable AML and financial compliance obligations. This data may be disclosed to regulatory or law enforcement authorities in the event of a valid legal request.

Policy Amendments

ci999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, new data sharing arrangements or revised user rights — we will notify affected users through on-platform notifications and, where practicable, email communication to the address registered on your account.

The "Last reviewed" date at the top of this page will be updated to reflect the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the ci999 platform after a revised Policy comes into effect constitutes acceptance of the updated terms.

Contact Us

For all privacy-related enquiries, data subject access requests or complaints regarding how ci999 handles your personal data, please contact our support team. We aim to acknowledge all privacy requests within 5 working days and to provide a substantive response within 30 calendar days.

Support is available in both English and Urdu, serving players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and all other locations in Pakistan.

Support hours: 24 hours a day, 7 days a week.

Support Email: [email protected]