cf999 Privacy Policy

This Privacy Policy ("Policy") is published by cf999, the operator of the online gaming and sports betting platform accessible at cf999.today ("Platform", "cf999", "we", "us", or "our"). This Policy applies to all personal data collected from individuals ("you", "your", "Player", or "User") who visit, register on, or interact with cf999.today in any capacity — including registered Players, prospective Players who browse without registering, and any person who contacts cf999 support.

cf999 operates as an internationally licensed online gaming platform. In providing its services to Pakistani players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan, cf999 collects and processes personal data in accordance with the obligations imposed by its international gaming licence and applicable data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, and confidentiality.

By registering an Account on cf999, depositing funds, placing bets, or otherwise using the cf999 Platform in any manner, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the cf999 Platform.

cf999 collects personal data from Pakistani players through several channels: directly from you during registration and KYC; automatically through your use of the cf999 Platform; and, in limited circumstances, from trusted third-party service providers. The specific categories of data collected are set out below.

2.1 Registration & Account Data

When you create a cf999 Account, we collect:

• Full legal name (as it appears on your CNIC or passport);
• Date of birth (for mandatory 21+ age verification);
• Pakistani mobile number (for account access, OTP verification, and communications);
• Email address (for account notifications and support correspondence);
• Username and encrypted password;
• Residential address in Pakistan.

2.2 Identity Verification (KYC) Data

As part of cf999's mandatory KYC process — required before withdrawal requests are processed — we collect copies of:

• Pakistani National Identity Card (CNIC) — front and back;
• Pakistani Passport (where CNIC is unavailable or insufficient);
• Proof of payment method ownership (e.g., screenshot of registered JazzCash or EasyPaisa account);
• Proof of address (utility bill, bank statement) where required by compliance procedures.

2.3 Financial & Transaction Data

cf999 records all financial transactions conducted through your Account, including: deposit amounts and timestamps; withdrawal requests, amounts, and processing status; payment method identifiers (JazzCash account number, EasyPaisa number, bank account reference — never full card numbers); bonus credit and debit records; and PKR balance history.

2.4 Gaming Activity Data

cf999 maintains detailed records of your gaming activity on the Platform, including: games played and bet amounts; sports betting selections, odds, and outcomes; session start and end times; responsible gaming tool settings; and in-Platform chat or support interactions.

2.5 Technical & Device Data

When you access cf999, our systems automatically collect: IP address; device type, operating system, and browser type; mobile network operator (relevant for Pakistani players using JazzCash/EasyPaisa-linked SIMs); geographic location data at country and city level; and session identifiers and cookies (see Section 5).

cf999 processes your personal data only for specific, documented purposes. We do not process data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which cf999 uses your data are:

1. Account creation and management: Registering your cf999 Account, verifying your identity, and maintaining your Account in good standing;
2. Service delivery: Enabling you to deposit funds, place bets, play games, and withdraw winnings in PKR through Pakistani payment methods including JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank;
3. Age verification: Confirming that you meet cf999's strict 21+ age requirement before granting access to real-money gaming;
4. Anti-fraud and financial crime prevention: Detecting and preventing fraudulent transactions, money laundering, and other financial crimes in accordance with cf999's licence obligations;
5. Regulatory compliance: Meeting the reporting and record-keeping obligations imposed by cf999's international gaming licence;
6. Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, applying player-set limits, and managing self-exclusion requests;
7. Communications: Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about cf999 offers;
8. Customer support: Responding to Account queries, complaints, and disputes submitted by Pakistani players;
9. Platform security: Protecting cf999.today against technical attacks, account takeover attempts, and bot activity;
10. Analytics and improvement: Understanding how Pakistani players use cf999 to improve game selection, payment flows, and overall platform experience — using aggregated, anonymised data where possible.

cf999 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing that is necessary to perform the agreement between you and cf999 — including account management, payment processing, game delivery, and withdrawal processing;
• Legal obligation: Processing required to comply with cf999's licensing obligations, anti-money laundering requirements, and fraud prevention duties imposed by cf999's international gaming regulator;
• Legitimate interests: Processing for fraud prevention, platform security, and analytics where those interests are not overridden by your privacy rights. cf999 has conducted balancing assessments to confirm these interests are proportionate;
• Consent: Where cf999 relies on your consent as a legal basis — specifically for optional marketing communications — you may withdraw that consent at any time by contacting [email protected] without affecting the lawfulness of processing prior to withdrawal.

cf999.today uses cookies and similar tracking technologies to operate the Platform, maintain your session, prevent fraud, and improve user experience. A cookie is a small text file stored on your device by your browser when you visit a website.

5.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the cf999 Platform to function — enabling login sessions, maintaining your PKR balance display, and preserving your language and payment preferences. These cannot be disabled without breaking core Platform functionality;
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and account takeover attempts on cf999;
• Performance & Analytics Cookies: Collect anonymised data about how Pakistani players navigate cf999 — page load times, game loading performance, and session flow. Used in aggregate form only to improve Platform performance;
• Functional Cookies: Remember your cf999 preferences — such as last-used payment method and responsible gaming limit settings — so you do not need to reconfigure them on each visit.

5.2 Managing Cookies

You may control cookie settings through your browser's privacy preferences. Note that disabling strictly necessary cookies will impair your ability to use core cf999 features including login and deposits. cf999 does not use third-party advertising cookies or cross-site tracking technologies to serve behavioural advertising to Pakistani players.

cf999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared only in the limited circumstances described below, and only with parties who are contractually obligated to handle it securely and in accordance with cf999's instructions.

6.1 Payment Processors

To process your JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK transactions in PKR, cf999 shares the minimum necessary transaction data with the respective Pakistani payment processor. These processors act as independent data controllers in respect of their own platform data and are subject to Pakistan's financial regulations.

6.2 KYC & Identity Verification Partners

cf999 may use regulated third-party KYC service providers to verify the authenticity of your CNIC or passport and to conduct AML screening. These providers act as data processors under cf999's instruction and are prohibited from using your KYC data for any purpose other than verification for cf999.

6.3 Game Software Providers

The game studios whose titles appear on cf999 — providing slots, live dealer games, Dragon Tiger, and Vivo Live content — receive anonymised session identifiers necessary to deliver game results. They do not receive your name, Pakistani mobile number, CNIC, or payment details.

6.4 Regulatory & Legal Disclosures

cf999 may disclose your personal data to its international gaming licensor, law enforcement agencies, financial intelligence units, or courts where required by law, a valid legal order, or in connection with the investigation of fraud, money laundering, or other criminal activity affecting the cf999 Platform.

cf999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulations applicable to cf999's international gaming licence;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for financial compliance and audit purposes;
• Gaming activity logs: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and regulatory reporting;
• Support communications: Retained for three (3) years from the date of last interaction to support complaint handling and quality assurance;
• Marketing consent records: Retained for three (3) years from the date of consent or until withdrawn, to demonstrate compliance with applicable opt-in requirements.

Where retention is required beyond these periods due to an ongoing legal proceeding, regulatory investigation, or dispute, cf999 will retain the relevant data until resolution of that matter. Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with cf999's data disposal procedures.

cf999 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption across all cf999.today pages, including login, deposit, and withdrawal flows — every Pakistani player's session is encrypted end-to-end;
• Encrypted password storage — cf999 never stores passwords in plain text. All passwords are hashed using industry-standard cryptographic algorithms;
• Multi-factor authentication options for Pakistani players accessing cf999 from new devices or locations;
• Access controls — internal cf999 systems operate on a strict need-to-know basis. Only authorised personnel with a documented operational need may access player personal data;
• Regular security audits — cf999's systems are subject to periodic penetration testing and vulnerability assessments by independent security specialists;
• Fraud monitoring systems — automated systems flag unusual transaction patterns, login anomalies, and potential account takeover attempts in real time.

cf999 recognises and respects your rights in relation to your personal data. The following rights are available to Pakistani players in connection with their cf999 Account data:

To exercise any of the rights described above, submit a written request to cf999 at [email protected]. cf999 will respond to all data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days with written notification to you. Identity verification may be required before cf999 processes a data rights request.

cf999 is strictly an adult platform. No person under the age of 21 may register an Account, access cf999 games, place bets, or use any cf999 service in any capacity. cf999 does not knowingly collect personal data from individuals under 21 years of age.

Where cf999 has reasonable grounds to suspect that a registered Account belongs to an individual under 21, the Account will be suspended immediately pending age verification. If age verification confirms the Player is underage, the Account will be permanently closed, any real-money Balance will be refunded to the original deposit source (less applicable processing fees), all winnings will be voided, and the personal data of the underage individual will be securely deleted as soon as legally permissible.

Parents and guardians in Pakistan who become aware that a minor has created a cf999 Account should contact [email protected] immediately. cf999 will prioritise such notifications and take immediate action.

The cf999 Platform may contain links to third-party websites or services — for example, links to your JazzCash or EasyPaisa app to complete a deposit. Once you leave cf999.today and access a third-party platform, this Privacy Policy no longer applies. Third-party platforms operate under their own privacy policies, for which cf999 accepts no responsibility.

cf999 recommends that Pakistani players review the privacy policies of any third-party service they access in connection with their cf999 Account, particularly Pakistani payment providers handling PKR transactions.

cf999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or operational requirements. When material changes are made, cf999 will notify active Pakistani Players by email to their registered address or through a prominent notice on the cf999 Platform, no fewer than fourteen (14) days before the changes take effect.

The updated Privacy Policy will be published at cf999.today/privacy-policy with a revised effective date. Continued use of the cf999 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you must discontinue use of cf999 and may request Account closure in accordance with cf999's Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy, your personal data held by cf999, or the exercise of any data rights described in Section 9, please contact cf999's Data Protection team through the following channel:

📧 Email: [email protected]

cf999 support is available 24 hours a day, 7 days a week. Data rights requests and privacy queries are handled by cf999's dedicated compliance team and are separated from general gameplay support to ensure they receive the appropriate level of attention. Responses to data rights requests will be provided within 30 calendar days.

For general responsible gaming queries, self-exclusion requests, or deposit limit management, please visit cf999's dedicated Responsible Gaming page.