cc99 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by cc99 in connection with your use of the cc99 platform at cc99.cam. It covers data collected through the website, account registration process, payment transactions, customer support interactions, and any other touchpoint between you and cc99.

cc99 is the data controller responsible for your personal information. We operate under an international gaming licence and are committed to maintaining the highest standards of data protection and player privacy. Our practices are guided by internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and transparency.

By registering an account on cc99 or by continuing to use the platform after this Policy has been updated, you confirm that you have read and understood how cc99 handles your personal data as described in this document. If you do not agree with this Policy, please discontinue use of the platform and contact our support team to initiate account closure.

cc99 collects personal data through several channels. Below is a clear breakdown of the categories of data we collect and the circumstances in which each category arises:

cc99 does not collect or store sensitive data such as biometric records, health information, religious beliefs, or political opinions. Where CNIC copies are submitted for KYC verification, they are stored in an encrypted, access-controlled environment and are not used for any purpose beyond identity and age verification.

cc99 processes your personal data only for specific, legitimate purposes. Every use of your data is grounded in one of the following lawful bases: performance of a contract (your player account agreement), compliance with a legal obligation, legitimate interest of cc99 (balanced against your rights), or your explicit consent where required.

The primary purposes for which cc99 uses your personal data are as follows:

• Account creation and management: To register your account, verify your identity, and administer your PKR wallet and gaming activity;
• Payment processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 in a secure and accurate manner;
• KYC and AML compliance: To verify your age (21+), identity, and source of funds in accordance with anti-money laundering obligations applicable under our international gaming licence;
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-account abuse, bot usage, and any other form of prohibited conduct;
• Customer support: To respond to queries, complaints, and technical issues submitted via live chat or email;
• Responsible gaming: To monitor gaming patterns, apply self-exclusion requests, enforce deposit and loss limits, and fulfil our responsible gaming obligations;
• Personalisation: To tailor your experience on the cc99 platform, including relevant game recommendations and promotional offers where you have opted in to receive them;
• Legal and regulatory compliance: To meet our obligations under our operating licence, including reporting obligations to relevant regulatory authorities;
• Platform improvement: To analyse aggregated usage data and improve the performance, content, and design of the cc99 platform.

cc99 will never use your personal data for purposes incompatible with those stated above without first obtaining your explicit consent or having a clear legal basis for doing so.

cc99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes — under any circumstances. Data is shared with third parties only in the following limited and controlled situations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and cryptocurrency payment gateways receive only the minimum financial data required to process your transaction;
• Identity verification providers: Accredited KYC service providers may process your CNIC and identity documents solely to verify your eligibility to hold a cc99 account;
• Game content providers: Third-party game studios that supply slots, live casino, keno, and fishing games may receive anonymised session data to support game functionality and technical auditing;
• Regulatory authorities: cc99 may be required by law or by the terms of our operating licence to disclose player data to relevant regulatory, law enforcement, or anti-money laundering bodies;
• Professional advisers: Legal, accounting, and audit firms engaged by cc99 may access data on a strictly confidential, need-to-know basis;
• Business transfers: In the event of a merger, acquisition, or sale of cc99's business, player data may be transferred to the successor entity, subject to equivalent privacy protections.

cc99 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and understand how players interact with our site. A cookie is a small data file stored on your device by your browser when you visit a website.

The following categories of cookies are used on cc99.cam:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing core site functionality;
• Functional cookies: Remember your preferences such as language, display settings, and responsible gaming limit configurations;
• Analytics cookies: Collect anonymised data about how pages are used to help us improve the platform experience;
• Marketing cookies: Only set where you have explicitly consented, used to serve relevant promotional content relating to cc99's own offers.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using core platform features. cc99 does not use third-party advertising network cookies.

cc99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Account data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure to meet anti-money laundering record-keeping requirements;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial compliance obligations;
• KYC / identity documents: Retained for the duration of the account relationship plus five (5) years following closure, or longer if required by regulatory instruction;
• Support and communications records: Retained for three (3) years from the date of the last interaction;
• Technical and usage data: Aggregated and anonymised after thirteen (13) months; raw data is not retained beyond this period;
• Marketing preference records: Retained until you withdraw consent, and for one (1) year thereafter for audit purposes.

When the applicable retention period expires, cc99 will securely delete or irreversibly anonymise your personal data so that it can no longer be attributed to you as an individual.

cc99 takes the security of your personal data seriously. We have implemented a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and cc99's servers;
• Encryption at rest for all stored personal and financial data, using industry-standard AES-256 encryption;
• Segregated player funds held in dedicated accounts, entirely separate from cc99's operational banking, ensuring your PKR balance is never commingled with company funds;
• Role-based access controls ensuring that cc99 staff can only access player data on a strict need-to-know basis, with comprehensive audit logging;
• Multi-factor authentication (MFA) available and encouraged for all player accounts;
• Regular penetration testing and independent security audits conducted by certified third-party security firms;
• 24/7 security monitoring with automated alerts for unusual login patterns, suspicious transaction activity, and potential data access anomalies.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, cc99 will notify affected players without undue delay and will take immediate remedial action in accordance with our data breach response procedure.

As a player on cc99, you have clear and enforceable rights over your personal data. cc99 is committed to honouring these rights promptly and without unnecessary obstruction. Your rights include the following:

• Right of Access: You may request a copy of all personal data cc99 holds about you at any time. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly via your account settings panel.
• Right to Erasure: You may request deletion of your personal data where cc99 no longer has a legitimate or legal basis to retain it. Note that data subject to regulatory retention obligations (e.g., AML records) cannot be deleted before the applicable retention period expires.
• Right to Restriction: You may request that cc99 restrict processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format to transfer to another service provider where technically feasible.
• Right to Object: You may object to cc99 processing your data for direct marketing purposes at any time. You can also object to processing based on legitimate interest where you have grounds relating to your particular situation.
• Right to Withdraw Consent: Where cc99's processing of your data is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, contact cc99's support team via email at [email protected] or through live chat. We will verify your identity before processing any data rights request to protect against unauthorised requests made on your behalf.

If cc99 becomes aware that personal data has been collected from a player who is under the age of 21, we will immediately suspend the relevant account, delete the associated personal data without undue delay, and reverse any financial transactions to the extent that this is operationally possible.

If you are a parent or guardian and you believe that a minor in your care has registered on cc99, please contact our support team immediately via live chat or email. We will investigate and act promptly.

cc99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via their registered email address or via an in-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically. Your continued use of the cc99 platform following the posting of any amended Policy constitutes your acceptance of those changes.

If any proposed change to this Policy is unacceptable to you, you should cease using the platform and contact support to close your account in accordance with our Terms & Conditions. Your outstanding real-money balance will be returned to your registered payment method following completion of any required KYC checks.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the cc99 team through the following channels:

cc99 aims to acknowledge all data-related enquiries within 48 hours and to resolve them fully within 30 calendar days. For complex access or erasure requests, we may request proof of identity before proceeding.

This Privacy Policy was last reviewed and updated in January 2026. cc99 © 2026. All rights reserved.