cs999 Privacy Policy — How We Handle Your Personal Data

cs999 operates the online casino and sports betting platform accessible at cs999.bio (the "cs999 Platform"). For the purposes of this Privacy Policy, cs999 acts as the data controller in respect of personal data collected from players and visitors to the cs999 Platform.

As data controller, cs999 determines the purposes and means of processing personal data collected through the cs999 Platform. cs999 is responsible for ensuring that such processing complies with applicable data protection laws and that the rights of data subjects — meaning you, as a cs999 player or Platform visitor — are respected and upheld throughout the duration of your engagement with cs999.

cs999 is designed specifically for the Pakistan market. The cs999 Platform operates in English and accepts Pakistani Rupees (PKR) via JazzCash, EasyPaisa, and major Pakistani banks. Personal data collected through the cs999 Platform includes data provided by players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Multan, and other cities and regions throughout the country.

This Privacy Policy applies to all personal data collected, processed, or stored by cs999 in connection with:

• Registration and maintenance of a cs999 player account.
• Use of any feature, game, or service available on the cs999 Platform following cs999 login.
• Deposits, withdrawals, and other financial transactions conducted through the cs999 Platform.
• Communications between players and the cs999 support team, including live chat and email correspondence.
• Participation in cs999 promotions, bonuses, the VIP programme, and any other cs999 marketing activities.
• Browsing the cs999 Platform without registering an account, to the extent that technical data is collected during such visits.

This Privacy Policy does not apply to third-party websites or services that may be referenced on the cs999 Platform. cs999 is not responsible for the data practices of third-party entities, and you are encouraged to review the privacy policies of any third party whose services you access.

By using the cs999 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the cs999 Platform and close your account.

cs999 collects the following categories of personal data in the course of providing its services to Pakistani players:

cs999 does not intentionally collect special category data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless specifically required for responsible gaming purposes — for example, where a player discloses a gambling addiction in the course of requesting self-exclusion. Any such data is treated with the highest level of protection and processed only for the purpose for which it was disclosed.

cs999 collects personal data through the following means:

• Direct provision by you: Data you enter into the cs999 registration form, KYC verification submission, deposit or withdrawal request forms, and communications with cs999 support are collected directly from you. This is the primary source of identity, contact, and financial data held by cs999.
• Automated technical collection: When you access the cs999 Platform, cs999's servers automatically record technical data including your IP address, device identifiers, browser characteristics, and session activity. This data is collected through standard server log mechanisms and, where applicable, through cookies and similar tracking technologies as described in Section 8.
• Payment processing partners: cs999's integrated payment processors — including JazzCash, EasyPaisa, and banking partners — provide cs999 with transaction confirmation data necessary to credit your cs999 account and process withdrawal instructions. cs999 does not receive your full payment credentials; only transaction reference data and amounts are shared with cs999 by payment partners.
• Identity verification partners: For KYC purposes, cs999 may use third-party identity verification services to authenticate documents submitted during the verification process. These services return a verification result to cs999 and do not independently retain your identity documents beyond the verification workflow.
• Responsible gaming disclosures: Where you proactively contact cs999 to disclose a gambling-related concern or request a self-exclusion or limit, the information you provide in that communication is recorded for the purpose of activating and maintaining the requested protective measures.

cs999 processes personal data only where a valid legal basis exists. The legal bases on which cs999 relies are as follows:

• Contractual necessity: Processing required to perform the cs999 player account agreement — including account creation, deposit processing, game access, withdrawal handling, and customer support. Without this processing, cs999 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable regulatory requirements, including anti-money laundering (AML) obligations, KYC verification requirements, record-keeping requirements imposed by cs999's licensing authority, and cooperation with lawful requests from competent authorities.
• Legitimate interests: Processing undertaken in pursuit of cs999's legitimate business interests where these interests are not overridden by your rights and interests. This includes fraud prevention, platform security monitoring, service improvement analytics, and responsible gaming monitoring. cs999 has assessed that its legitimate interests in these activities are proportionate and that the processing does not cause undue harm to players.
• Consent: Where cs999 relies on your consent as the legal basis for processing — principally in relation to direct marketing communications — you have the right to withdraw that consent at any time by contacting cs999 support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

cs999 uses personal data collected from Pakistani players for the following defined purposes:

• Account management: Creating, verifying, and maintaining your cs999 account; authenticating your cs999 login; processing password resets and account recovery requests.
• Payment processing: Processing PKR deposits via JazzCash, EasyPaisa, and Pakistani bank channels; verifying withdrawal instructions; completing interbank transfers; maintaining transaction records.
• Identity verification (KYC): Verifying your identity and age in compliance with anti-money laundering and responsible gaming obligations; preventing underage access; ensuring the one-account-per-player policy is enforced.
• Game and Platform provision: Delivering access to cs999 casino games, live dealer tables, and sports betting markets; recording game outcomes and account balances; applying and tracking wagering requirements on bonus funds.
• Fraud and security: Monitoring account activity for indicators of fraud, collusion, account takeover, money laundering, and other prohibited conduct; investigating security incidents; taking protective action where necessary.
• Customer support: Responding to player queries, complaints, and requests; maintaining records of support interactions to ensure continuity and accountability in dispute resolution.
• Responsible gaming: Monitoring gaming patterns for indicators of problem gambling; administering self-exclusion, deposit limit, and cool-off tools; communicating with players about responsible gaming resources where appropriate.
• Legal compliance: Meeting record-keeping requirements; responding to lawful requests from regulatory or law enforcement authorities; fulfilling reporting obligations to cs999's licensing authority.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the cs999 Platform's performance, user experience, and game selection. This analysis is conducted on data that cannot be traced back to individual players.
• Promotional communications: Sending information about cs999 bonuses, promotions, and VIP programme updates where you have consented to receive such communications, or where cs999 has a legitimate interest in doing so in connection with your active account.

cs999 does not sell, rent, or commercially transfer your personal data to any third party. Data sharing is limited to the following categories of recipient and purposes:

• Payment processors: JazzCash, EasyPaisa, and Pakistani banking partners receive only the transaction data necessary to process your deposit or withdrawal. These partners operate under their own data protection policies and are contractually bound to handle your data securely.
• KYC and identity verification providers: Third-party identity verification services receive your identity documents solely for the purpose of authenticating your KYC submission. These providers do not retain your identity data beyond the verification workflow.
• Game content providers: Licensed third-party game studios whose titles are available on cs999 receive anonymised game session data necessary for technical operation, RNG auditing, and game performance monitoring. They do not receive your name, contact details, or financial information.
• IT and infrastructure service providers: cs999 uses third-party cloud hosting, CDN, and cybersecurity service providers to operate the Platform. These providers access technical data strictly in the course of providing contracted infrastructure services and are bound by data processing agreements.
• Regulatory and legal authorities: cs999 may disclose personal data to its licensing authority, law enforcement agencies, financial intelligence units, or courts where required by law, court order, or regulatory obligation. cs999 will notify affected players of such disclosures where legally permitted to do so.
• Professional advisors: cs999's legal counsel, auditors, and compliance consultants may access personal data strictly to the extent necessary to provide their professional services. These advisors are bound by professional confidentiality obligations.

cs999 uses cookies and similar tracking technologies to operate and improve the cs999 Platform. A cookie is a small text file placed on your device when you visit a website. cs999 uses the following categories of cookies:

cs999 does not use third-party advertising cookies or cross-site tracking cookies that follow your activity on websites other than the cs999 Platform itself. You can manage cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect some aspects of your cs999 Platform experience.

cs999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or for longer where required by applicable legal, regulatory, or licensing obligations. The following retention periods apply to the main categories of cs999 player data:

• Account and identity data: Retained for the duration of the active cs999 account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by financial regulatory obligations applicable to cs999's licensing jurisdiction.
• Gaming and betting history: Retained for the duration of the active cs999 account plus 2 years following account closure, for audit, dispute resolution, and responsible gaming monitoring purposes.
• KYC verification documents: Retained for the duration of the active cs999 account plus 5 years following account closure. Original document copies are securely deleted when regulatory minimum retention periods expire.
• Support communications: Retained for 3 years from the date of the interaction, to support continuity of service and dispute resolution.
• Responsible gaming records: Self-exclusion records and limit-setting histories are retained permanently to prevent re-registration by excluded players. Other responsible gaming interaction records are retained for 5 years.
• Technical and session data: Retained for 12 months from collection, after which it is anonymised or deleted. Anonymised aggregated technical data may be retained indefinitely for performance analysis.

Upon expiry of the applicable retention period, cs999 will either securely delete your personal data or anonymise it in a manner that prevents re-identification. cs999 conducts regular data audits to ensure that data no longer required for any legitimate purpose is removed from active systems promptly.

cs999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and cs999 servers.
• AES-256 encryption for all personal data stored in cs999 databases.
• Role-based access controls ensuring that cs999 staff access personal data only to the extent required for their specific job function.
• Regular penetration testing and vulnerability assessments of the cs999 Platform conducted by independent cybersecurity professionals.
• Multi-factor authentication for internal cs999 systems access by staff who handle personal data.
• Automated anomaly detection systems that flag unusual access patterns or data egress events for immediate investigation.
• Regular staff training on data protection obligations and security protocols.
• Incident response procedures that enable cs999 to detect, contain, and report data security incidents in a timely manner.

While cs999 applies industry-standard security practices, no online system can guarantee absolute security. You are advised to use a strong, unique password for your cs999 account, enable two-factor authentication, and notify cs999 support immediately if you suspect your account has been accessed without your authorisation.

cs999 operates internationally and may process or store personal data on servers located outside Pakistan. Where personal data is transferred to or processed in a jurisdiction outside Pakistan, cs999 ensures that appropriate safeguards are in place to protect the data at the destination location.

Safeguards used by cs999 for international data transfers include: standard contractual clauses with data processors and subprocessors located in third countries; transfer only to organisations that demonstrate equivalent data protection standards to those applied by cs999; and technical encryption measures that protect data regardless of the jurisdiction in which it is processed.

cs999's use of Pakistani payment processors — JazzCash, EasyPaisa, and local banking partners — means that the payment-related data of Pakistani players is processed primarily within Pakistan's domestic financial infrastructure, limiting the extent of international transfer for this data category.

As a cs999 player, you hold the following rights in respect of the personal data cs999 holds about you. These rights can be exercised by submitting a written request to cs999 support. cs999 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

The cs999 Platform is strictly restricted to individuals who are 21 years of age or older. cs999 does not knowingly collect or process personal data relating to individuals under 21 years of age. If cs999 becomes aware that personal data has been submitted by or on behalf of a person under 21, cs999 will immediately suspend the associated account, delete the relevant data, and retain only the minimum information required to prevent re-registration by that individual.

Where a parent or guardian suspects that a minor has accessed or registered on the cs999 Platform, they should contact cs999 support immediately at the address provided in Section 16 of this Privacy Policy. cs999 will investigate and act on all such reports within 24 hours.

The cs999 Platform may from time to time contain references to third-party services — including game content providers, responsible gaming resources, and payment processors — whose own privacy policies govern the handling of data collected through their respective interfaces.

cs999 is not responsible for the privacy practices of any third-party service. When you interact with a third-party service accessible from the cs999 Platform, you should review that party's own privacy policy before providing any personal data to them. cs999 has no control over third-party data practices and accepts no liability for privacy incidents arising from third-party data handling.

cs999 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or Platform functionality. The revised Privacy Policy will be published on the cs999 Platform with an updated effective date. Where changes are material, cs999 will notify active players through the cs999 Platform notification system or via a message to the registered mobile number on file.

Continued use of the cs999 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the cs999 Platform and contact cs999 support to initiate account closure.

cs999 maintains an archive of previous versions of this Privacy Policy. If you wish to review a previous version, please contact cs999 support with the date of the version you wish to access.

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a privacy-related concern about cs999's data practices, please contact the cs999 data protection team through the following channels:

• Live Chat: Available 24/7 from within your cs999 account dashboard following cs999 login. This is the fastest route for urgent privacy matters.
• Email: [email protected] — please include your registered Pakistani mobile number and a description of your request. cs999 aims to respond to all privacy-related email enquiries within 12 hours.

For formal data subject rights requests, please mark your email with the subject line "Data Subject Rights Request" and include your full name as registered on your cs999 account and the specific right you wish to exercise. cs999 will acknowledge formal requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves large volumes of data, cs999 may extend this period by an additional 30 days and will notify you of the extension.