Privacy Policy

1 Data Controller

The data controller responsible for your personal information is the operator of the ci999 platform, accessible at ci999.pro. ci999 operates under an international gaming license and is responsible for determining how and why your personal data is processed.

This Privacy Policy applies to all personal data collected through the ci999 website, mobile-optimised web application, live chat system, support communications, and any other service operated under the ci999 brand. It applies to all players based in Pakistan and any other territory where ci999 accepts registrations.

If you have any questions or concerns about how ci999 handles your personal data, please contact our Data Support team. Contact details are provided in Section 14 of this Policy.

2 Personal Data We Collect

ci999 collects personal data in the following categories. The data collected depends on how you interact with the platform and which services you use.

3 How We Collect Your Data

ci999 collects personal data through the following channels:

• Direct registration: When you create a ci999 account, you provide identity and contact information directly. This data is submitted through our secure registration form and stored in encrypted form on ci999's servers.
• KYC verification: When you submit identity documents (CNIC, passport, proof of address) as part of the account verification process, this documentation is processed and stored securely for the purposes of compliance with our gaming license obligations.
• Payment transactions: Financial data is collected each time you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or card networks. Full card numbers are never stored by ci999; only masked references are retained.
• Platform usage: Technical and gaming activity data is automatically collected as you navigate, play, and interact with the ci999 platform. This includes cookie data, session logs, and device fingerprint information.
• Support interactions: When you contact ci999 via live chat or email, the content of those communications is logged and retained for quality assurance and dispute resolution purposes.
• Third-party sources: ci999 may receive identity verification data from licensed KYC service providers, fraud screening data from payment processors, and device reputation data from fraud prevention partners.

4 Purposes of Processing

ci999 processes your personal data for the following specific purposes:

1. Account creation and management: To register your ci999 account, verify your identity, maintain your account settings, and provide access to platform services.
2. Payment processing: To process PKR deposits and withdrawals, verify payment instrument ownership, and maintain accurate transaction records.
3. Regulatory compliance (KYC/AML): To meet obligations imposed by ci999's international gaming license, including identity verification, age confirmation (21+ policy), source-of-funds checks, and suspicious activity monitoring.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, and other prohibited conduct as defined in ci999's Terms and Conditions.
5. Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour, apply deposit limits and self-exclusion measures, and comply with responsible gaming obligations under ci999's licensing framework.
6. Customer support: To respond to player enquiries, resolve disputes, and maintain records of support interactions for quality and audit purposes.
7. Platform improvement: To analyse aggregated, anonymised usage data to improve site performance, game selection, and user experience for Pakistani players.
8. Marketing communications (with consent): To send promotional offers, Eid and Ramadan seasonal promotions, bonus notifications, and platform updates to players who have opted in to receive such communications.
9. Legal obligations: To comply with any applicable law, court order, or regulatory direction requiring disclosure or retention of personal data.

5 Legal Basis for Processing

ci999 processes personal data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contract performance: Processing of identity, contact, financial, and gaming activity data is necessary to fulfil ci999's contractual obligations to you as a registered player under the ci999 Terms and Conditions.
• Legal obligation: KYC, AML, and responsible gaming data processing is required by the obligations imposed on ci999 under its international gaming license and applicable financial crime prevention frameworks.
• Legitimate interests: Fraud prevention, platform security, and aggregated analytics are conducted on the basis of ci999's legitimate interest in operating a safe, secure, and commercially viable platform, where these interests are not overridden by players' privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your freely given, informed consent. You may withdraw this consent at any time without affecting your account status.

6 Data Sharing & Third Parties

ci999 does not sell or rent personal data. We may share personal data with the following categories of third party only to the extent necessary for the purposes described in this Policy:

• Payment processors and mobile wallet operators: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card network operators receive transaction data necessary to process deposits and withdrawals. These parties operate under their own privacy and data security obligations.
• KYC and identity verification providers: ci999 works with licensed third-party KYC service providers to verify identity documents submitted by players. These providers are contractually bound to process data only for verification purposes.
• Fraud prevention and security partners: Technical and device data may be shared with fraud screening services to identify suspicious activity and protect the platform and its players.
• Game software providers: Certified game developers whose products are hosted on the ci999 platform may receive anonymised session data for RNG certification, game performance monitoring, and regulatory audit purposes.
• Regulatory and law enforcement authorities: ci999 will disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by a valid legal obligation, court order, or regulatory direction.
• Professional advisers: Legal, audit, and compliance advisers may access personal data on a confidential, need-to-know basis in connection with ci999's business operations.

7 Data Retention

ci999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player.

8 Data Security

ci999 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration:

• All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL).
• Player passwords are stored using one-way cryptographic hashing — ci999 staff cannot view your password in plain text.
• Payment card data is tokenised; full card numbers are never retained on ci999 servers.
• Server infrastructure is hosted in access-controlled, audited data centres.
• Administrative access to production systems is restricted to authorised personnel on a least-privilege basis, protected by multi-factor authentication.
• Regular vulnerability assessments and independent penetration tests are conducted on the ci999 platform.
• An incident response plan is maintained and reviewed periodically to ensure timely response to any data security event.

9 Cookies & Tracking Technologies

ci999 uses cookies and similar technologies on the ci999.pro website to improve your browsing experience, remember your preferences, maintain your logged-in session, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preferences, and enable core security features. These cookies cannot be disabled.
• Analytics cookies: ci999 uses aggregated, anonymised analytics data to understand how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data does not identify individual users.
• Functional cookies: These remember your preferences such as preferred game categories, display settings, and notification choices to provide a more personalised experience.
• Marketing cookies (with consent only): Where you have consented, ci999 may use cookies to measure the effectiveness of promotional campaigns and to deliver relevant offers. You may withdraw this consent via your account cookie settings.

You may manage cookie preferences through your browser settings. Disabling certain cookie categories may affect the functionality of the ci999 platform. Strictly necessary cookies cannot be disabled without preventing core platform features from operating.

10 Your Data Rights

As a ci999 player, you have the following rights with respect to your personal data. These rights may be subject to certain conditions and exceptions under applicable law and ci999's regulatory obligations:

• Right of access: You may request a copy of the personal data that ci999 holds about you. Requests will be fulfilled within a reasonable timeframe and at no charge for standard requests.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by ci999. For account details, you may update certain information directly via your ci999 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to ci999's legal and regulatory data retention obligations, which may require certain data to be retained for defined periods after account closure.
• Right to restrict processing: You may request that ci999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your data in a commonly used, machine-readable format.
• Right to object to marketing: You may withdraw your consent to marketing communications at any time via your ci999 account settings or by contacting support. Withdrawal does not affect your ability to use the platform.

To exercise any of the rights listed above, please contact ci999's data support team via live chat or email as set out in Section 14. ci999 will verify your identity before processing any data rights request.

11 Minors and the 21+ Policy

The ci999 platform is strictly intended for players aged 21 years and above. ci999 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If you believe that ci999 has inadvertently collected data from a person below the age of 21, please contact our support team immediately so that the matter can be investigated and resolved without delay.

12 International Data Transfers

ci999 operates under an international gaming license and may use service providers and infrastructure located outside Pakistan. Where personal data is transferred to a country outside Pakistan's jurisdiction, ci999 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that applied within Pakistan, including:

• Contractual data protection obligations imposed on receiving parties;
• Technical security measures equivalent to those described in Section 8;
• Transfer only to jurisdictions with adequate data protection frameworks recognised under ci999's licensing arrangements.

By registering a ci999 account and accepting these terms, you acknowledge that your personal data may be transferred and stored in jurisdictions outside Pakistan as described in this section.

13 Changes to This Privacy Policy

ci999 reserves the right to update or amend this Privacy Policy from time to time. Updates may be required due to changes in our platform services, regulatory requirements, or applicable data protection laws. Material changes to the Policy will be communicated to registered players by email at least seven (7) days before they take effect.

The updated Privacy Policy will be published on this page with a revised effective date. Continued use of the ci999 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using the platform and may request account closure in accordance with the ci999 Terms and Conditions.

We encourage all players to review this page periodically to stay informed about how ci999 protects their personal data.

14 Contact & Data Enquiries

For any questions about this Privacy Policy, to exercise your data rights, or to report a suspected data security issue, please contact ci999 through the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026. The current version supersedes all previous versions of the ci999 Privacy Policy.