ct9990 Privacy Policy

1. Data Controller

ct9990 is the data controller responsible for the personal data collected and processed through the ct9990 Platform at ct9990.onl. As data controller, ct9990 determines the purposes for which personal data is processed and the means by which that processing is carried out. All queries relating to data control, data access requests, and privacy complaints should be directed to the ct9990 support team at the contact details provided in Section 12 of this Policy.

2. Personal Data We Collect

ct9990 collects personal data across two broad categories: data you provide directly to us, and data we collect automatically when you use the Platform.

Data you provide directly:

• Registration data: Full name, date of birth, residential address (including division — Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, or Mymensingh), email address, and mobile number provided when creating a ct9990 Account.
• Identity verification documents: Copies of national identity cards (NID), passports, or other government-issued identification submitted during the Know Your Customer (KYC) verification process.
• Payment data: Mobile banking account identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details (for bank transfer transactions), and transaction reference numbers. Full payment card numbers are never stored by ct9990.
• Communications data: The content of messages, emails, and live chat transcripts exchanged with the ct9990 support team.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, cooling-off period activations, and session time preferences submitted through the Account dashboard.

Data collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, game sessions initiated, time spent on each game, bet amounts, wager histories, login timestamps, and session durations.
• Geolocation data: General geographic location derived from your IP address. ct9990 does not collect precise GPS location data.
• Cookie and tracking data: Information collected via cookies, pixels, and similar technologies as described in Section 9 of this Policy.

3. Legal Basis & Purposes for Processing

ct9990 processes your personal data only where a lawful basis for doing so exists. The primary legal bases and corresponding processing purposes are set out below:

Where ct9990 relies on legitimate interests as a legal basis, we ensure that such interests are not overridden by your fundamental rights and freedoms. Where ct9990 relies on consent, you retain the right to withdraw that consent at any time by contacting the support team or updating your Account communication preferences.

4. How ct9990 Uses Your Personal Data

ct9990 uses the personal data we collect for the following specific purposes:

• To create and maintain your ct9990 Account, verify your eligibility to use the Platform, and authenticate your identity at login.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers, and to maintain accurate financial records of all transactions.
• To conduct age verification and KYC checks in accordance with responsible gaming obligations, ensuring that the Platform is not accessed by individuals under the age of 21.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in the ct9990 Terms & Conditions.
• To monitor gameplay patterns for the purpose of identifying problem gambling indicators and triggering responsible gaming interventions where appropriate.
• To respond to your customer support enquiries, process complaints, and maintain a record of communications for quality assurance and dispute resolution purposes.
• To send you transactional communications — including deposit confirmations, withdrawal notifications, and Account security alerts — that are necessary for the operation of your Account.
• To send you promotional communications about ct9990 bonuses, VIP programme updates, and seasonal offers (such as Eid, Pohela Boishakh, and BPL-related promotions) where you have provided consent or where ct9990 has a legitimate interest in doing so. You may opt out of promotional communications at any time.
• To analyse aggregate, anonymised usage data for the purpose of improving Platform performance, game selection, and overall user experience.
• To comply with applicable legal, regulatory, and law-enforcement obligations.

5. Data Sharing & Third-Party Processors

ct9990 does not sell or rent your personal data to any third party. However, to deliver the ct9990 service effectively, we share specific categories of personal data with trusted third-party service providers acting as data processors on our behalf. These providers are contractually bound to process your data solely for the purposes specified by ct9990 and to maintain appropriate security standards.

Categories of third-party processors and the data shared with each include:

• Payment service providers (bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks): Transaction amounts, account identifiers, and reference numbers necessary to process deposits and withdrawals.
• Game content providers (Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe): Session identifiers and wager data necessary to operate game sessions and resolve disputes. These providers do not receive your name, NID, or payment details.
• Identity verification service providers: Name, date of birth, address, and document images submitted during KYC, processed to confirm identity and age.
• Cloud infrastructure and hosting providers: Encrypted Account data stored on secure servers for Platform operation and disaster recovery.
• Analytics platforms: Anonymised, aggregated usage data for the purpose of improving Platform functionality. No personally identifiable data is shared with analytics providers.

ct9990 may also disclose personal data to competent law-enforcement authorities, financial intelligence units, or regulatory bodies where required to do so by applicable law or in response to a lawful order. In such cases, ct9990 will disclose only the minimum data necessary to satisfy the legal obligation.

6. Data Retention

ct9990 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention requirements. The following general retention periods apply:

• Active Account data (registration details, transaction history, gameplay records): Retained for the duration of the Account's active status.
• Closed Account data: Retained for a minimum of five years following Account closure to satisfy financial record-keeping, anti-money-laundering, and dispute resolution obligations.
• KYC / identity verification documents: Retained for a minimum of five years following the completion of the verification process or Account closure, whichever is later.
• Customer support correspondence: Retained for a minimum of three years to support complaint resolution and quality assurance.
• Responsible gaming records (self-exclusion, deposit limit history): Retained for a minimum of five years to prevent circumvention of self-exclusion measures.
• Anonymised analytics data: May be retained indefinitely in aggregated, anonymised form that cannot be linked to any individual player.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. ct9990 conducts periodic data audits to ensure that data is not retained beyond its defined retention period.

7. Data Security

ct9990 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the ct9990 Platform.
• Encryption at rest for sensitive data stored on ct9990's infrastructure, including identity documents and payment identifiers.
• Role-based access controls ensuring that ct9990 staff can only access personal data where necessary for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Multi-factor authentication options available to players for Account login security.
• Secure, geographically redundant server infrastructure with automated backup and disaster recovery protocols.

While ct9990 takes all reasonable steps to protect your personal data, no security system is entirely impenetrable. In the unlikely event of a data breach that poses a risk to your rights and freedoms, ct9990 will notify affected players without undue delay and take immediate remedial action. If you believe your ct9990 Account has been compromised, please contact support immediately.

8. Your Privacy Rights

As a ct9990 player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to the ct9990 support team using the contact details in Section 12. ct9990 will respond to all verified privacy rights requests within 30 days.

• Right of access: You have the right to request a copy of the personal data that ct9990 holds about you, together with information about how that data is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update many details directly through your Account settings.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to any overriding legal obligation that requires ct9990 to retain the data.
• Right to restriction of processing: You have the right to request that ct9990 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where the data was provided by you and is processed on the basis of consent or contract.
• Right to withdraw consent: Where ct9990 processes your data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to processing of your personal data where ct9990 relies on legitimate interests as the legal basis, unless ct9990 demonstrates compelling legitimate grounds that override your interests.

9. Cookies & Tracking Technologies

ct9990 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the ct9990 website. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including session management, login authentication, and security tokens. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your Account preferences — such as language settings, game history, and display preferences — to provide a more personalised experience.
• Analytics cookies: Used to collect anonymised, aggregated information about how visitors interact with the Platform, including pages visited and time spent per session. This data helps ct9990 improve its service.
• Marketing cookies: Used only where you have provided explicit consent. These cookies may track your interaction with ct9990 promotional content to measure campaign effectiveness.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in to your ct9990 Account or using key Platform features. ct9990 does not use cookies to collect sensitive personal information such as payment details or identity documents.

10. Children's Privacy & Underage Access

The ct9990 Platform is strictly restricted to individuals aged 21 years and above. ct9990 does not knowingly collect personal data from individuals under the age of 21. If ct9990 becomes aware that personal data has been collected from an underage individual, the associated Account will be immediately suspended, all funds held pending review will be returned net of any bonuses, and the personal data will be deleted as soon as practicable.

If you believe that a minor may be accessing the ct9990 Platform — including through use of your Account or a shared device — please contact the ct9990 support team immediately. ct9990 strongly recommends the use of parental control software on any device that may be accessed by individuals under the age of 21.

11. Changes to This Privacy Policy

ct9990 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, ct9990 will post the revised Policy on the Platform with an updated "Last Updated" date and, where appropriate, will notify registered Account holders via Platform notification or email. Your continued use of the ct9990 Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with any revised Policy, you must discontinue use of the Platform and may close your Account by contacting support.

12. Contact & Privacy Enquiries

All privacy-related enquiries, data access requests, rectification requests, erasure requests, and complaints should be directed to the ct9990 support team. Our privacy support is available 24 hours a day, 7 days a week in Bangladesh Standard Time (BST, UTC+6).

Support email: [email protected] (plain text — not a clickable link).

Please include your registered username, a clear description of your request, and any relevant reference numbers in all correspondence. ct9990 aims to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 days. Complex or multi-part requests may require additional time; ct9990 will notify you if an extension is required.