cp999 Privacy Policy

cp999 ("we", "us", "our", the "Platform") operates the online gaming and information platform accessible at https://cp999.cam. As a platform serving users across Pakistan — including in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — we recognise that the protection of personal data is fundamental to the trust placed in us by our users.

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by cp999. It applies to all data processing activities carried out in connection with your use of the Platform, whether you are a registered account holder or a visitor who has not yet created an Account.

By accessing the Platform and creating an Account, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the Platform.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers or factors specific to that person's identity.
• "Data Controller" means cp999, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of cp999 in accordance with documented instructions.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
• "User" / "you" means any natural person who accesses or uses the Platform, whether as a registered Account holder or as an unregistered visitor.
• "KYC Data" means identity verification documents and information collected pursuant to Know Your Customer obligations, including government-issued identity documents, proof of address and related records.
• "Cookies" means small text files placed on your device by the Platform for purposes including session management, analytics and functional personalisation.
• "Third-Party Service Providers" means external organisations engaged by cp999 to provide specific services in support of the Platform's operation, including but not limited to payment processing, fraud detection, IT infrastructure and analytics.

cp999 collects the following categories of Personal Data in connection with your use of the Platform:

3.1 Identity & Registration Data

• Full legal name and date of birth
• Username and encrypted password
• Gender (where provided voluntarily)
• Nationality and country of residence

3.2 Contact Data

• Email address
• Residential address (city, province, postal code)
• Mobile telephone number

3.3 KYC & Verification Data

• Copies of government-issued identity documents (CNIC, passport or equivalent)
• Proof of address documentation
• Source of funds declarations where required
• Selfie or biometric confirmation images where verification requires it

3.4 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (masked account numbers, wallet IDs) — payment method names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced for identification purposes only and do not imply endorsement
• Account balance history
• Bonus and promotional transaction records

3.5 Behavioural & Technical Data

• IP address and approximate geolocation
• Device type, operating system and browser information
• Pages visited, session duration and navigation patterns
• Game history, wager amounts and gaming session data
• Login timestamps and Account activity logs

3.6 Communications Data

• Contents of messages submitted through our support channels
• Email correspondence with the cp999 support team
• Feedback or complaints submitted voluntarily

cp999 collects Personal Data through the following means:

• Direct submission: Information you provide when creating an Account, completing KYC, making deposits or withdrawals, or contacting our support team.
• Automated technical collection: Data gathered automatically when you use the Platform, including via server logs, cookies, browser fingerprinting and session-tracking technologies.
• Third-party verification providers: Identity and fraud-check data received from external KYC and AML verification service providers engaged by cp999.
• Payment processing intermediaries: Transaction confirmation and status information passed from payment processors in connection with your deposits and withdrawals.
• Analytics providers: Aggregated and pseudonymised usage data received from web analytics tools used to improve platform performance.

cp999 processes your Personal Data only for clearly defined, legitimate purposes. The table below summarises the primary processing activities and their corresponding purposes:

cp999 does not use Personal Data for targeted advertising, third-party marketing profiling or the sale of data to commercial partners.

cp999 processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions — including Account management, payment processing and game provision.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including KYC, AML and record-keeping requirements imposed by the operator's licensing jurisdiction.
• Legitimate interests: Processing conducted for cp999's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: For processing activities not covered by the bases above (e.g., optional marketing communications where offered), we will seek your specific, informed and freely given consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

cp999 does not sell, rent or trade your Personal Data to third parties. Personal Data is shared only in the limited circumstances set out below, and only to the minimum extent necessary for the stated purpose:

• KYC and AML verification providers: Identity verification service providers engaged to process KYC checks on cp999's behalf, operating under binding data processing agreements.
• Payment processors: Third-party payment intermediaries required to facilitate your deposits and withdrawals. Only the transaction data necessary to complete the payment is shared.
• IT infrastructure and security providers: Cloud hosting, server management, DDoS protection and cybersecurity vendors who process data on our behalf under strict confidentiality obligations.
• Analytics providers: Web analytics services that receive pseudonymised or aggregated data to help us understand platform usage and improve performance.
• Regulatory and law enforcement authorities: Competent authorities who issue lawful requests, orders or warrants requiring disclosure of specific data. cp999 will comply with such requests to the extent required by law.
• Professional advisers: Lawyers, accountants and auditors who require access to data under strict professional confidentiality obligations in connection with the operation of the Platform.

The cp999 Platform uses cookies and similar tracking technologies to deliver and maintain its services. Cookies are small text files stored on your device that allow the Platform to recognise you across sessions and provide a consistent, functional experience.

Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These enable session management, login authentication and security features. They cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences (e.g., language settings, game layout preferences) to personalise your experience.
• Analytics Cookies: Used to collect pseudonymised information about how Users interact with the Platform — pages visited, time spent and navigation paths — to help us improve performance. No individually identifiable data is used for this purpose.
• Security Cookies: Used to detect fraudulent activity, multiple-account patterns and suspicious session behaviour.

cp999 does not use third-party behavioural advertising cookies or profiling technologies that would allow external advertisers to track your activity across the web. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent the Platform from functioning correctly.

cp999 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to any applicable legal or regulatory requirements that mandate longer retention periods. The following general retention periods apply:

• Account and registration data: Retained for the duration of the Account and for a minimum of five (5) years following Account closure, in line with standard AML record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, in compliance with applicable regulatory obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Retained for a minimum of two (2) years from the date of the final communication in a support thread.
• Technical and behavioural logs: Retained for periods ranging from 90 days to 24 months depending on the nature and security sensitivity of the log data.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

cp999 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include, but are not limited to:

• TLS/SSL encryption: All data transmitted between your browser and cp999 servers is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Encrypted data storage: Sensitive data, including KYC documents and financial records, is stored using encryption at rest.
• Access controls: Access to Personal Data is restricted to authorised personnel on a need-to-know basis, with role-based access controls and audit logging.
• Intrusion detection and monitoring: Platform infrastructure is continuously monitored for suspicious activity, unauthorised access attempts and data anomalies.
• Password security: User passwords are stored using one-way cryptographic hashing; plain-text passwords are never stored or transmitted.
• Third-party security obligations: All Data Processors engaged by cp999 are contractually bound to maintain equivalent security standards.

Despite these measures, no data transmission or storage system can be guaranteed to be completely secure. In the event of a data breach that is likely to affect your rights and freedoms, cp999 will notify affected users and relevant authorities in accordance with applicable legal obligations.

cp999 operates globally and may transfer Personal Data to servers, processors or service providers located in jurisdictions outside Pakistan. Where such transfers occur, cp999 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Transfers to jurisdictions assessed as providing an adequate level of data protection;
• Use of contractual clauses binding recipients to data protection standards equivalent to those applied by cp999; or
• Other lawful transfer mechanisms recognised under applicable data protection frameworks.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Pakistan. cp999 does not represent that Pakistani data protection law specifically governs these transfers; the applicable framework is determined by the operator's licensing jurisdiction.

Subject to applicable law and the operator's licensing jurisdiction's data protection framework, you have the following rights in respect of your Personal Data held by cp999:

• Right of Access: You may request a copy of the Personal Data cp999 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: You may request deletion of your Personal Data in certain circumstances, subject to legal retention obligations that may override this right.
• Right to Restrict Processing: You may request that we limit the processing of your Personal Data in defined circumstances.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that your Personal Data be provided in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests where your specific circumstances warrant it.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the cp999 support team at [email protected]. We will respond to verified requests within thirty (30) days, and will notify you promptly if additional time is required.

The cp999 Platform is strictly intended for adults aged 18 years or over, or the higher minimum age required by the operator's licensing jurisdiction. cp999 does not knowingly collect, process or store Personal Data from any individual under the applicable minimum age.

If cp999 becomes aware that Personal Data has been collected from a minor, the associated Account will be immediately suspended, all data will be deleted in line with applicable legal requirements, and any funds deposited may be returned after verification to the extent permitted by law and regulatory obligations.

If you believe that a minor may have registered an Account or provided Personal Data to cp999, please notify us immediately at [email protected] so that appropriate action can be taken promptly.

cp999 reserves the right to amend this Privacy Policy at any time to reflect changes in data processing practices, legal obligations or platform functionality. Where changes are material, we will provide advance notice to registered Account holders by displaying a prominent notice on the Platform or by sending an email to the address associated with your Account.

The "Last Updated" date at the top of this page indicates when the current version was published. Continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the updated terms. Users who do not accept material changes should discontinue use of the Platform and may request Account closure in accordance with the Terms & Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by cp999, please contact our support team through the following channels. All data-related communications should be submitted in English.

• Support Email: [email protected] — for data rights requests, privacy queries and data breach notifications
• Live Chat: Available 24/7 within your Account dashboard for general support, including privacy matters
• Response Time: Written data rights requests are typically acknowledged within 5 business days and resolved within 30 days

For matters relating to the general terms of platform use, please refer to our Terms & Conditions. For information about responsible gambling tools and self-exclusion, please visit our Responsible Gambling page.