cd999 Privacy
Policy

This Privacy Policy applies to all services, products, and digital interfaces operated by cd999 (referred to in this document as "cd999", "we", "us", or "our"), including the website accessible at cd999.asia and all associated mobile-optimised interfaces, gaming platforms, and customer support channels.

cd999 is committed to safeguarding the privacy and personal data of all users ("you", "your", "User", "Player") who register an account or interact with the cd999 platform. This Policy describes in clear and accessible terms how cd999 handles your personal data in connection with providing online casino games, sports betting services, financial transaction processing, customer support, and marketing communications.

By creating an account with cd999 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy. Use of the cd999 Platform constitutes acceptance of the data practices described herein.

This Policy should be read alongside the cd999 Terms and Conditions, which govern your overall use of the Platform.

cd999 is the data controller responsible for the personal data collected through the cd999 Platform. cd999 operates under international gaming authority licensing and maintains data protection practices consistent with internationally recognised privacy standards.

As data controller, cd999 determines the purposes for which personal data is collected and the means by which it is processed. Where cd999 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification services), those providers act as data processors under contractual arrangements that impose data protection obligations consistent with those set out in this Policy.

cd999 collects only the personal data necessary to provide its services, comply with legal and licensing obligations, and maintain platform security. The categories of personal data cd999 collects are set out in the table below:

cd999 collects personal data through the following channels and mechanisms:

• Account Registration: Data you provide directly when creating a cd999 account, including name, mobile number, email address, date of birth, and city.
• KYC Verification: Identity and address documents you submit in response to cd999's verification requests, including CNIC scans and proof of address documentation.
• Financial Transactions: Data generated when you make deposits or withdrawal requests, including payment method reference data and transaction amounts in PKR.
• Platform Usage: Data automatically generated as you use the cd999 Platform, including game activity, bet history, session durations, and navigation patterns.
• Technical Data: Data automatically collected by cd999's servers when your device connects to the Platform, including IP address, device identifiers, browser type, and operating system.
• Customer Support Interactions: Data you provide during live chat sessions, email correspondence, or other communications with the cd999 support team.
• Cookies and Tracking Technologies: Session and functional data collected via cookies as described in Section 11 of this Policy.

cd999 uses your personal data only for the purposes identified in this Policy. The primary purposes for which cd999 processes personal data are:

• Account Management: Creating, maintaining, and administering your cd999 player account, including login authentication and account security.
• Service Delivery: Providing access to casino games, sports betting markets, live dealer tables, and all other cd999 Platform services.
• Identity and Age Verification: Conducting KYC checks to confirm your identity, verify that you are 21 years of age or older, and confirm your eligibility to use the Platform.
• Payment Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20.
• Anti-Money Laundering Compliance: Monitoring transactions for unusual or suspicious activity as required under international gaming licensing obligations.
• Fraud Prevention and Platform Security: Detecting and preventing fraudulent account activity, bonus abuse, multi-accounting, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming behaviour to identify potential signs of problem gambling and administering responsible gaming tools including deposit limits and self-exclusion requests.
• Customer Support: Responding to your enquiries, resolving account issues, and maintaining records of support interactions.
• Legal and Regulatory Compliance: Meeting obligations under international gaming licensing conditions, applicable data protection requirements, and financial crime regulations.
• Marketing Communications: Sending promotional offers and platform updates to players who have opted in to receive marketing communications from cd999.

cd999 processes personal data on the following legal grounds, depending on the purpose for which the data is used:

• Contractual Necessity: Processing required to fulfil cd999's obligations under the account agreement with you, including account creation, game access, and payment processing.
• Legal Obligation: Processing required to comply with international gaming licence conditions, AML obligations, KYC requirements, and applicable data protection law.
• Legitimate Interests: Processing conducted in pursuit of cd999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where such processing does not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, carried out only where you have provided clear and freely given consent, which you may withdraw at any time.

cd999 does not sell, rent, or trade your personal data to any third party. cd999 may share your personal data with the following categories of recipients only to the extent strictly necessary for the purposes described in this Policy:

• Payment Processors: JazzCash, EasyPaisa, Pakistani banking partners, and cryptocurrency transaction processors require transaction reference data to process your deposits and withdrawals. These processors handle your payment data under their own privacy and security policies.
• Identity Verification Services: Third-party KYC providers engaged by cd999 to assist with identity document verification and AML screening. These providers act as data processors under contractual data protection obligations.
• Game Content Providers: Where technically required, limited session and account identifier data may be shared with the game software providers whose titles are hosted on the cd999 platform, for the purpose of delivering game functionality and maintaining fair play audit records.
• Regulatory and Licensing Authorities: cd999 may be required to disclose player data to its licensing authority or to regulatory bodies in response to formal requests or as required under licence conditions.
• Law Enforcement Agencies: cd999 will disclose personal data to law enforcement agencies or government authorities where required to do so by applicable law or valid legal process.
• Professional Advisors: Legal, accounting, and compliance advisors may access personal data on a strictly confidential need-to-know basis where required to provide professional services to cd999.

cd999 operates as an internationally licensed platform and may process or store personal data on servers located outside of Pakistan. Where personal data is transferred to countries that do not provide an equivalent level of data protection to that expected under internationally recognised privacy standards, cd999 implements appropriate safeguards to protect your data.

Safeguards employed by cd999 for international data transfers include contractual data protection clauses in agreements with all third-party data processors located outside Pakistan, encryption of all data in transit and at rest, and access controls limiting personnel who can access personal data to those with a demonstrable need for such access.

cd999 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required by cd999's international gaming licence obligations or applicable law.

After the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification.

cd999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and cd999 servers is encrypted using industry-standard TLS encryption.
• Encryption at Rest: Sensitive personal data stored on cd999 servers — including KYC documents and financial data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. cd999 staff access to player data is logged and auditable.
• Two-Factor Authentication: Two-factor authentication is available for all cd999 player accounts and is enforced for all internal staff accounts with access to personal data.
• Security Monitoring: cd999 maintains continuous security monitoring and intrusion detection systems to identify and respond to potential threats.
• Regular Security Reviews: cd999 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in its systems.

In the event of a personal data breach that poses a risk to your rights, cd999 will notify affected users without undue delay in accordance with applicable data protection obligations.

cd999 uses cookies and similar tracking technologies on its Platform. Cookies are small text files stored on your device that help cd999 provide a functional, secure, and personalised gaming experience.

The types of cookies cd999 uses are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged into your cd999 account. These cannot be disabled.
• Functional Cookies: Store your Platform preferences such as language settings, game lobby view preferences, and responsible gaming settings. These enhance your experience but are not strictly required.
• Analytics Cookies: Collect anonymised data about how users navigate the cd999 Platform to help cd999 improve its services. No personally identifiable information is included in analytics data.

cd999 does not use third-party advertising cookies, cross-site tracking pixels, or any technology designed to profile you for advertising purposes across other websites.

You can manage cookie settings through your browser's privacy settings. Disabling strictly necessary cookies will prevent normal Platform login and functionality. Disabling other cookie types will not affect your ability to access and use cd999 games or account features.

Registered cd999 players hold the following rights in respect of their personal data. To exercise any of these rights, please contact cd999 support via live chat or email at support@cd999.asia.

• Right of Access: You have the right to request a copy of the personal data cd999 holds about you. cd999 will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by cd999.
• Right to Erasure: In certain circumstances you have the right to request deletion of your personal data. This right does not apply where cd999 is required to retain data under its licensing obligations or applicable law.
• Right to Restriction: You may request that cd999 restrict processing of your personal data in specified circumstances, for example where you contest the accuracy of the data or object to its use.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that cd999 provide your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on cd999's legitimate interests, and to withdraw consent for any processing previously conducted on a consent basis.
• Right to Withdraw Marketing Consent: You may unsubscribe from cd999 marketing communications at any time by contacting support or clicking any unsubscribe link in a marketing email.

cd999 may send promotional communications — including bonus offers, tournament announcements, new game notifications, and platform updates — to players who have opted in to receive marketing communications during registration or at any subsequent point.

cd999 does not send unsolicited marketing communications. All marketing emails include an unsubscribe mechanism. SMS marketing messages include opt-out instructions in each message. You may also update your marketing preferences at any time by contacting cd999 support.

Withdrawing consent for marketing communications will not affect your ability to use the cd999 Platform or access any gaming services. It will also not affect marketing communications sent to you in the context of your account relationship with cd999 — for example, notifications about changes to your account, security alerts, or responsible gaming notifications, which are sent as part of the service rather than as promotional communications.

The cd999 Platform is strictly intended for users aged 21 years and above. cd999 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process for all registered accounts.

Where cd999 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, cd999 will immediately suspend the associated account, delete the personal data concerned where legally permissible, and return any deposited funds to the originating payment method.

If you are a parent or guardian and believe that your child has registered an account with cd999 in breach of the age restriction, please contact cd999 support immediately via live chat or email so that the matter can be investigated and resolved without delay.

The cd999 Platform may contain links to third-party websites, applications, or services that are not operated by cd999. cd999 does not control the content or privacy practices of such third-party sites and is not responsible for their data collection or use practices.

When you leave the cd999 Platform via a third-party link, you are subject to the privacy policy and terms of use of that third party. cd999 strongly recommends that you review the privacy policies of any external websites or services you visit before providing personal data to them.

This Privacy Policy applies exclusively to personal data collected directly by cd999 through the cd999 Platform and does not extend to data collection practices of third-party payment processors, game content providers, or other external services, even where those services are accessed through the cd999 interface.

cd999 reserves the right to amend this Privacy Policy from time to time in response to evolving legal requirements, technological developments, or changes to cd999's business practices. Material amendments to this Policy will be notified to registered users via email to the address on file or via a prominent notice displayed on the cd999 Platform at login.

The date at the top of this Privacy Policy indicates when it was last reviewed and updated. Where amendments to the Policy materially change the way cd999 processes your personal data, cd999 will seek your renewed consent where required to do so by applicable law.

Your continued use of the cd999 Platform after notification of an amended Privacy Policy constitutes acceptance of the revised Policy. If you do not agree with any amendment, you may request voluntary account closure in accordance with the cd999 Terms and Conditions.

For any questions about this Privacy Policy, to exercise your data protection rights, or to raise concerns about how cd999 handles your personal data, please contact cd999 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat widget accessible from any page of the cd999 Platform.
• Email: support@cd999.asia

cd999 commits to acknowledging all data protection enquiries within 5 business days and providing a substantive response to access requests, rectification requests, and other rights exercises within 30 calendar days.