cf999 Privacy Policy

cf999 is an internationally licensed online casino and sports betting platform. The cf999 platform is operated under an international gaming licence and is accessible to English-speaking players throughout Pakistan at cf999.lat. References in this Privacy Policy to "cf999", "we", "us", or "our" refer to the cf999 platform operator in its capacity as the data controller responsible for your personal information.

As the data controller, cf999 determines the purposes and means of processing your personal data. We are responsible for ensuring that all data processing activities described in this Privacy Policy are carried out in compliance with the privacy standards required under our international licensing framework.

cf999 collects personal data in several categories depending on how you interact with the platform. The table below provides a clear overview of what we collect and why:

cf999 collects your personal data through the following channels:

• Direct Interactions: Data you provide when registering a cf999 Account, completing the cf999 Login process, submitting KYC documents, making deposits or withdrawals, or contacting our customer support team.
• Automated Technologies: Technical data collected automatically when you browse or use the cf999 platform, including cookies, web beacons, server logs, and similar tracking technologies as described in Section 7.
• Payment Processors: Transaction confirmation and verification data received from third-party payment providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processors.
• KYC Service Providers: Identity verification data returned by third-party KYC providers that cf999 uses to authenticate player identities in accordance with our international licensing requirements.
• Fraud Prevention Services: Risk scoring and flagging data from anti-fraud systems that analyse account activity patterns to protect the integrity of the platform and the security of all players.
• Publicly Available Sources: In limited circumstances, cf999 may verify information against publicly available records or databases to confirm the accuracy of data you have provided.

cf999 processes your personal data for the following specific, legitimate purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent:

• Account Management: To create, maintain, and secure your cf999 Account, process your cf999 Login requests, and manage account settings and preferences.
• Identity Verification: To conduct KYC checks as required under cf999's international gaming licence — verifying your age (21+), identity, and address before processing withdrawals or when unusual activity is detected.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, bank transfers, and other supported payment methods accurately and securely.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, underage gambling, and any other conduct prohibited under cf999's Terms & Conditions.
• Responsible Gaming: To monitor gaming behaviour patterns that may indicate problem gambling, apply self-imposed limits, enforce self-exclusions, and comply with responsible gaming obligations under our licence.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Legal & Regulatory Compliance: To comply with anti-money laundering laws, tax reporting obligations, and any directions issued by cf999's licensing authority or relevant regulatory bodies.
• Service Improvement: To analyse aggregated, anonymised usage data for the purpose of improving cf999's games, features, and overall platform experience.
• Marketing Communications: To send you promotional offers, bonus announcements, and platform news — but only where you have given explicit consent to receive such communications. You may opt out at any time.

cf999 processes your personal data on the following legal bases, which are grounded in the privacy framework applicable under our international gaming licence:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfil that contract.
• Legal Obligation: Processing required to comply with anti-money laundering regulations, KYC obligations, and any reporting duties imposed by cf999's licensing authority is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of cf999's legitimate interests, provided those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications and the use of non-essential cookies is carried out on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

cf999 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment Processors: Financial transaction data is shared with payment service providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processors) strictly for the purpose of processing your deposits and withdrawals in PKR.
• KYC & Identity Verification Providers: Identity documents and verification data are shared with authorised third-party KYC service providers to fulfil our licensing obligations. These providers are contractually bound to process your data only for verification purposes and in accordance with strict data security standards.
• Fraud Prevention & Security Services: Technical and behavioural data may be shared with anti-fraud platforms to protect the platform and all players from fraudulent activity and money laundering.
• Game Software Providers: Limited technical session data is shared with third-party game providers (live casino, slots, card games) to facilitate game delivery. These providers operate under data processing agreements with cf999.
• Regulatory & Licensing Authorities: cf999 is required by its international gaming licence to share certain player data with its licensing authority upon request. cf999 may also be required to disclose information to law enforcement or other government bodies where compelled to do so by applicable law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of cf999's business operations, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Players will be notified of any such transfer in advance.

The cf999 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. Cookies are small text files stored on your device when you visit cf999.lat. Below is a summary of the cookie categories we use:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that maintain your cf999 Login state, security tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences — such as your preferred language, display settings, and responsible gaming limit configurations — so you do not need to re-enter them on every visit.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate the cf999 platform. This data helps us understand which features are most used, identify performance bottlenecks, and prioritise improvements. Analytics cookies are only activated with your consent.
• Security & Fraud Detection Cookies: Used to identify and flag suspicious session behaviour, detect automated bots, and protect player accounts from unauthorised access. These cookies are a core part of cf999's security infrastructure.

You may manage your cookie preferences through the cf999 cookie consent tool displayed on your first visit to the platform, or through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the cf999 platform, including the cf999 Login feature.

cf999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international gaming licence obligations. The following retention periods apply as a general guide:

• Account Data: Retained for the duration of your active cf999 Account, plus a minimum of five (5) years after account closure to satisfy anti-money laundering and licensing record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, in line with international AML standards applicable to licensed gaming operators.
• Financial Transaction Records: Retained for a minimum of five (5) years to comply with financial record-keeping obligations under cf999's licensing framework.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the period of consent plus three (3) years to demonstrate compliance with consent obligations.
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud investigation purposes, then deleted or anonymised.

Once a retention period expires, cf999 will securely delete or anonymise the relevant data in accordance with its internal data disposal procedures.

As an internationally licensed gaming platform, cf999 may process or store certain categories of player data on servers or through service providers located outside Pakistan. Where such international transfers occur, cf999 ensures that adequate protections are in place to maintain the security and integrity of your personal data.

• cf999 only transfers data to jurisdictions or service providers that offer an adequate level of data protection, either through their legal framework or through contractual commitments (such as standard data protection clauses or equivalent binding agreements).
• All third-party data processors engaged by cf999 for international processing are subject to data processing agreements that impose security and confidentiality obligations equivalent to those described in this Privacy Policy.
• Where your KYC data is processed by an overseas verification provider, that provider is bound by the same verification-only use restriction as domestic providers.

As a cf999 player, you hold the following rights with respect to your personal data. cf999 is committed to honouring all valid requests promptly and without unnecessary delay:

• Right of Access: You may request a copy of all personal data cf999 holds about you. cf999 will provide this in a structured, commonly used format within a reasonable timeframe.
• Right to Rectification: If any personal data cf999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account details directly through your cf999 Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that certain data must be retained for legal and regulatory reasons as described in Section 8, and erasure requests may be partially declined on those grounds.
• Right to Restriction: You may request that cf999 restrict the processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request that cf999 provide your personal data in a machine-readable format that allows you to transfer it to another service provider, where this is technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, subject to cf999's ability to demonstrate overriding grounds.
• Right to Withdraw Consent: Where cf999 processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the above rights, please contact cf999 customer support via live chat or at support@cf999.lat. Please include your Account username and a clear description of your request. cf999 may need to verify your identity before processing the request.

The cf999 platform is strictly for adults aged 21 years and above. cf999 does not knowingly collect, process, or retain personal data from any individual under the age of 21. This is a non-negotiable policy enforced at registration and through ongoing KYC verification procedures.

• Age verification is a mandatory step of the cf999 registration process. Players who cannot verify that they are 21 or older will not be permitted to open or maintain a cf999 Account.
• If cf999 becomes aware that personal data has been collected from a person under 21 — whether through an error in the registration process or through subsequent discovery — that Account will be immediately suspended, all associated funds will be reviewed, and the data will be deleted from cf999 systems to the extent permitted by law.
• Parents and guardians who have reason to believe that a minor in their household has registered a cf999 Account are urged to contact cf999 customer support immediately at support@cf999.lat so that the matter can be investigated and resolved without delay.

cf999 employs a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and cf999 servers is encrypted using 256-bit SSL/TLS — the industry standard for secure online communications.
• Encrypted Data Storage: Sensitive data stored in cf999 databases — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to player data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Intrusion Detection Systems: cf999 operates real-time intrusion detection and prevention systems that monitor network traffic for indicators of compromise and trigger automatic alerts on suspicious activity.
• Regular Security Audits: cf999 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.
• Two-Factor Authentication: cf999 strongly recommends enabling two-factor authentication (2FA) on your cf999 Account to add an additional layer of protection to your cf999 Login credentials.

The cf999 platform integrates certain third-party services to deliver a complete gaming experience. This Privacy Policy applies exclusively to cf999's own data processing activities. Where third-party services process your data independently, their own privacy policies apply.

• Game Providers: Live casino, slot, and card game titles on the cf999 platform are powered by third-party software providers. These providers may collect limited technical session data within the game interface. cf999 selects game providers that meet high data security standards and are bound by data processing agreements.
• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processors are independent controllers of the data you share directly with them during payment transactions. cf999 is not responsible for the data practices of these payment processors in respect of data you provide directly to them on their own platforms.
• Analytics Providers: Where cf999 uses third-party analytics tools to understand platform usage patterns, this is done with anonymised or pseudonymised data only. No personally identifiable information is shared with analytics providers for this purpose.

cf999 does not embed third-party advertising trackers, social media pixels, or any cross-site tracking technologies that share your personal data with external marketing platforms.

cf999 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, legal obligations, or licensing requirements. When material changes are made, cf999 will notify registered players via the email address associated with their Account and/or by displaying a prominent notice on the platform at the time of cf999 Login.

• Updated versions of this Privacy Policy will be published at cf999.lat/privacy-policy with the revised effective date clearly indicated at the top of the document.
• Material changes will be notified at least 14 days before they take effect, except where changes are required urgently by law or regulatory direction.
• Your continued use of the cf999 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.
• If you do not agree with any changes, you should cease using the platform and request account closure before the updated Policy takes effect. Any data already collected will continue to be processed under the terms applicable at the time of collection, subject to any mandatory legal requirements.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cf999 handles your personal data, please get in touch with our dedicated privacy support team. We are committed to resolving all privacy-related queries promptly and transparently.

• General Privacy Queries: Contact cf999 customer support via live chat (available 24/7 on the cf999 platform) or by emailing support@cf999.lat. Please include "Privacy Query" in your subject line and provide your Account username where relevant.
• Data Rights Requests: To exercise any of the rights described in Section 10, submit your request to support@cf999.lat with your full name, Account username, and a clear description of the right you wish to exercise. cf999 will acknowledge your request within 24 hours and resolve it within 30 calendar days.
• Data Breach Notification: If cf999 becomes aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and in accordance with our obligations under applicable law.
• Complaints: If you are not satisfied with cf999's response to a privacy concern, you have the right to escalate your complaint to cf999's licensing authority's data oversight body. Details of the relevant authority are available on request from cf999 customer support.