CT555 Privacy Policy – How We Protect Your Data

CT555 is an online entertainment platform offering slot games, sports betting, Bingo, live casino and related services to players in Pakistan. To deliver these services, maintain account security, process PKR deposits and withdrawals, and comply with our internal fraud prevention obligations, CT555 needs to collect and process certain personal information about you.

This Privacy Policy tells you — in plain, straightforward language — exactly what information CT555 collects when you use the platform, how that information is used, who it may be shared with under limited circumstances, how it is protected, how long it is retained, and what rights you have over your own data.

CT555 acts as the data controller in respect of all personal data collected through ct555.fun and the CT555 Android app. This means CT555 is responsible for deciding how and why your data is processed. If you have any questions or concerns about how your personal data is handled, you can reach the CT555 support team via the live chat on the platform at any time.

CT555 collects only the data that is necessary to operate the platform and provide a safe, fair gaming experience. Below is a clear breakdown of the categories of personal data we may hold about you:

CT555 does not collect sensitive personal data such as biometric data, health data, religious beliefs, or political opinions. If you choose to provide additional information voluntarily through support channels, that information may be retained as part of your support record.

CT555 collects your personal data through several channels. Understanding these helps you stay informed about what information you provide at each stage of using the platform:

• During registration: When you create your CT555 account, you provide your name, date of birth, contact number and email address directly. This is the primary source of identity and contact data.
• During KYC verification: When CT555 requests identity documents — such as a CNIC scan or proof of a JazzCash or Easypaisa account — you upload or submit these directly through the platform or via the support team.
• During transactions: When you make a deposit or request a withdrawal, CT555 records the transaction details including the amount in PKR, the payment method used, and the timestamps associated with the transaction.
• Through platform activity: CT555 automatically logs technical and usage data as you navigate the website or app. This includes which games you play, how long your sessions last, what device and browser you are using, and your IP address.
• Through support interactions: When you contact the CT555 support team via live chat, the conversation is recorded and linked to your account for service quality and dispute resolution purposes.
• Through cookies and similar technologies: CT555 uses cookies and local storage to maintain your session, remember preferences, and gather aggregated analytics. See Section 7 for full details.

CT555 uses your personal data only for legitimate, clearly defined purposes. We do not process your data in ways that are incompatible with the reason it was originally collected. The specific purposes for which CT555 uses your data are:

• Account management: To create, maintain and secure your CT555 account, verify your identity, and enable you to log in and access your account balance.
• Processing payments: To credit deposits in PKR to your account, process withdrawal requests to your registered JazzCash, Easypaisa, Raast or bank account, and maintain an accurate transaction history.
• Providing gaming services: To deliver slot games, sports betting markets (including Cricket and PSL), Bingo, and live casino games. Usage data helps us personalise your experience and ensure game integrity.
• Fraud prevention and security: To detect and prevent unauthorised access, suspicious transactions, multi-accounting, bonus abuse, and other fraudulent activity that could harm you or other players on the platform.
• Responsible gaming: To monitor gaming patterns and identify potential signs of problem gambling, in order to apply protective tools such as deposit limits, cool-off periods or self-exclusion where appropriate.
• Customer support: To respond to your queries, resolve disputes, and maintain a record of support interactions linked to your account.
• Platform improvement: To analyse aggregated, anonymised usage trends and technical performance data in order to improve the CT555 website and app.
• Communications: To send you important account-related notifications, such as deposit confirmations, withdrawal updates, security alerts, and policy change notices.

CT555 will only send you marketing communications if you have opted in to receive them. You may opt out of marketing messages at any time by contacting the support team. Please note that opting out of marketing does not affect account-essential communications.

CT555 does not sell, rent, or trade your personal data to any third party. Your data is not shared with advertisers, data brokers, or any entity that would use it for purposes unrelated to the delivery of CT555's services. The only circumstances in which CT555 shares your personal data with external parties are:

• Payment processors: CT555 shares the minimum necessary financial information with payment providers — including JazzCash, Easypaisa, Raast, and bank partners — strictly to facilitate the processing of your PKR deposits and withdrawals. These providers operate under their own privacy obligations.
• Identity verification providers: Where CT555 uses a third-party KYC service to verify your identity documents (such as your CNIC), your identity data is shared with that provider solely for verification purposes and is not retained by them beyond what is necessary for that purpose.
• Game studios and platform providers: CT555's gaming library is powered by third-party studios including Pragmatic Play, NetEnt, Habanero and others. These studios may receive anonymised session identifiers to facilitate game delivery and RNG audit trails. They do not receive your name, contact details, or financial data.
• Legal and regulatory obligations: CT555 may disclose personal data to law enforcement, government authorities, or other authorised bodies where required to do so by applicable law or in response to a valid legal request.
• Business transfers: In the event that CT555 undergoes a merger, acquisition or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and given an opportunity to delete your account before the transfer takes effect.

Given the financial nature of CT555's services, we treat payment-related data with an especially high level of care. When you make a deposit or withdrawal, CT555 records the transaction details necessary to maintain an accurate account ledger and to process your funds correctly. This includes the amount in PKR, the payment method used, the transaction reference number, and the date and time of the transaction.

CT555 does not store full card numbers, CVV codes, or mobile banking PINs. Sensitive card data is handled directly by the card processing partner and is never exposed to CT555's internal systems. For JazzCash and Easypaisa transactions, CT555 stores only the account reference (mobile number) associated with the transaction — not your wallet password or PIN.

All financial data transmitted between your device and CT555's servers is protected by SSL/TLS encryption. CT555's payment infrastructure is hosted on secured servers with access restricted to authorised personnel only.

If you believe there has been an unauthorised transaction on your CT555 account, please contact the support team immediately via live chat. CT555 will freeze the account and investigate as a matter of urgency.

CT555 uses cookies and similar local storage technologies to make the platform function correctly, to maintain your login session, and to gather aggregate analytics that help us improve the service. Below is a plain-language summary of the types of cookies CT555 uses:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your language preference, and keep your game state intact during a session. You cannot opt out of essential cookies while using CT555.
• Analytics cookies: These collect anonymised, aggregated data about how visitors use the platform — such as which pages are most visited, how long sessions last, and where users navigate from. This data is used solely to improve the platform and cannot be linked back to an individual user.
• Security cookies: These help CT555 detect suspicious activity, such as rapid successive login attempts from different locations, and are part of our fraud prevention infrastructure.
• Preference cookies: These remember choices you have made on the platform, such as display settings or notification preferences, so you do not need to re-enter them each session.

CT555 does not use advertising cookies, retargeting pixels, or any tracking technology that monitors your behaviour on other websites. CT555 cookies are limited to the ct555.fun domain and the CT555 app environment.

CT555 stores your personal data on secured servers with industry-standard physical and digital protections in place. Access to personal data is restricted to CT555 staff who have a legitimate need to process it as part of their role. All staff with access to personal data are bound by confidentiality obligations.

The security measures CT555 employs include:

• SSL/TLS encryption on all data transmitted between your device and CT555's servers.
• Encrypted storage for sensitive data fields including CNIC document references and financial identifiers.
• Two-factor authentication options for player accounts to add an additional layer of access security.
• Intrusion detection systems that monitor server access logs for unusual activity in real time.
• Regular security audits and vulnerability assessments carried out on the platform infrastructure.
• Role-based access controls that ensure CT555 staff can only access data relevant to their specific function.

While CT555 takes all reasonable and practical steps to protect your data, no online platform can provide a 100% guarantee against all possible security threats. In the unlikely event of a data breach that poses a risk to your rights, CT555 will notify affected users promptly and take immediate steps to contain and remediate the breach.

CT555 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable internal policies and legal obligations. The following general retention periods apply:

• Active account data (identity, contact, financial): Retained for the duration of your account's active status plus a period of up to 5 years following permanent account closure, to meet anti-money laundering record-keeping obligations.
• Transaction records: Full transaction history in PKR is retained for a minimum of 5 years to support dispute resolution and fraud investigation requirements.
• KYC verification documents: Retained for up to 5 years after account closure. Copies of identity documents such as CNIC scans are stored securely and deleted once the retention period has elapsed.
• Support communications: Live chat transcripts and support emails are retained for up to 2 years to support ongoing service quality and dispute resolution.
• Analytics data: Anonymised, aggregated analytics data that cannot be linked to an individual is retained indefinitely for platform improvement purposes.
• Security logs: Technical security logs, including IP access logs and failed login records, are retained for up to 12 months and then purged unless flagged as part of an ongoing investigation.

When data is no longer required and its retention period has elapsed, CT555 deletes or anonymises it in a secure manner. You may also request deletion of your personal data before the standard retention period has elapsed — see Section 10 for details on your rights.

CT555 respects your right to understand and control how your personal data is used. You have the following rights in relation to data CT555 holds about you:

• Right to access: You can request a copy of the personal data CT555 holds about you at any time. CT555 will provide this in a clear, readable format within a reasonable timeframe.
• Right to correction: If any personal data CT555 holds about you is inaccurate or out of date, you have the right to request that it be corrected. You can update basic contact details directly through your account settings, or contact support for other corrections.
• Right to deletion: You can request that CT555 delete your personal data. CT555 will process deletion requests subject to any legal retention obligations — for example, transaction records may need to be retained for a defined period regardless of a deletion request.
• Right to restrict processing: In certain circumstances, such as where you contest the accuracy of your data or object to its use, you can request that CT555 restrict processing of your data while the matter is resolved.
• Right to data portability: You can request a copy of the data you have provided to CT555 in a structured, commonly used and machine-readable format.
• Right to withdraw consent: Where CT555 processes your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the CT555 support team via live chat on the platform. CT555 will acknowledge your request promptly and aim to fulfil it within 30 days. In some cases, CT555 may need to verify your identity before fulfilling a data access or deletion request.

CT555 is strictly an adult platform. You must be at least 18 years of age to register an account or use any part of CT555's gaming and betting services. CT555 does not knowingly collect personal data from anyone under the age of 18.

If CT555 discovers or has reason to believe that a person under 18 has registered an account or provided personal data through the platform, CT555 will immediately suspend the account, delete the associated personal data, and where applicable, return any funds to the originating payment method.

If you are a parent or guardian and believe that a minor in your household may have accessed CT555 or provided their personal data, please contact the CT555 support team immediately via live chat. CT555 takes all such reports seriously and will act without delay.

CT555 may update this Privacy Policy from time to time to reflect changes in the platform, changes in applicable law, or improvements to our data handling practices. When changes are made, the updated Privacy Policy will be published on this page with a revised "Last Updated" date at the top.

For material changes — such as a significant new use of your personal data or a change in how data is shared — CT555 will make reasonable efforts to notify registered users via their registered email address or via an in-app notification before the changes come into effect. For minor clarifications or wording updates, the updated policy will simply be posted without advance notice.

Your continued use of CT555 after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any changes to the Privacy Policy, you should stop using the platform and contact the CT555 support team to close your account and request deletion of your personal data.

CT555 encourages you to review this Privacy Policy periodically so you are always informed about how your data is being handled. If you have any questions about this policy or how CT555 processes your personal data, the support team is available via live chat on the platform around the clock.