ctg999 Privacy Policy

ctg999 is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform. We recognise that trust is the foundation of every player relationship, and that handling your personal information with care is a responsibility we take seriously.

This Policy applies to all personal data processed by ctg999 in connection with the operation of the ctg999.app platform, including data collected during account registration, the course of gameplay and wagering, payment processing, customer support interactions, and general use of the website and any associated mobile applications.

This Policy should be read alongside the ctg999 Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform. Where any provision of this Policy conflicts with the Terms & Conditions, the Terms & Conditions shall prevail to the extent of that inconsistency, unless the inconsistency relates specifically to the processing of personal data, in which case this Policy shall prevail.

If you have questions about this Policy or wish to exercise any of your data rights described in Section 8, please contact the ctg999 support team at [email protected] at any time.

ctg999 collects personal data in a number of ways: directly from you when you register an account, make a deposit, contact support, or interact with the Platform; automatically through cookies and similar technologies as you browse and use the Platform; and from third-party payment providers when they confirm transaction outcomes. The categories of personal data we collect are described in the table below.

ctg999 does not collect special category data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) unless specifically required by law and with your explicit consent. ctg999 does not collect full payment card numbers and does not store complete mobile banking credentials.

ctg999 uses personal data only for legitimate, defined purposes. We do not process personal data in ways that are incompatible with the purposes described below. The specific purposes for which we use each category of data are as follows:

• Account Creation and Management: Identity Data and Contact Data are used to register your account, verify your identity, maintain accurate account records, and enable you to log in and use the Platform securely.
• Age and Identity Verification: Verification Data is used to confirm that you are at least 18 years of age and that your identity matches the details provided at registration. This is a mandatory regulatory obligation that ctg999 takes seriously.
• Payment Processing: Financial Data is used to process deposits and withdrawal requests via bKash, Nagad, Rocket, and Upay. Transaction records are retained for accounting and anti-money laundering compliance purposes.
• Platform Delivery and Improvement: Gaming Activity Data and Technical Data are used to deliver a reliable betting and gaming experience, diagnose technical faults, monitor Platform performance, and develop new features and improvements.
• Fraud Prevention and Security: Technical Data, Financial Data, and Gaming Activity Data are analysed to detect and prevent fraud, money laundering, bonus abuse, collusion, and other prohibited conduct as defined in the ctg999 Terms & Conditions.
• Responsible Gaming Compliance: Responsible Gaming Data is used to enforce deposit limits, loss limits, cooling-off periods, and self-exclusion requests at the player's direction, and to identify players who may be exhibiting problematic gambling behaviour so that ctg999 can proactively offer support.
• Customer Support: Communications Data is used to respond to your support queries, resolve complaints, and maintain a record of interactions for quality assurance and dispute resolution purposes.
• Legal and Regulatory Compliance: ctg999 processes personal data as necessary to comply with applicable laws, respond to lawful requests from regulatory authorities, and maintain records as required by anti-money laundering and financial regulations.
• Marketing Communications: Where you have provided consent, Contact Data may be used to send you information about promotions, bonuses, and Platform updates. You may withdraw your consent to receive marketing communications at any time by updating your account preferences or contacting ctg999 support.

ctg999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and ctg999 — specifically, to provide the online casino and sports betting services you have registered to receive, including account management, deposits, withdrawals, and gameplay. Without this processing, ctg999 cannot deliver the services.
• Legal Obligation: Processing that is required to comply with applicable laws, including age verification, anti-money laundering checks, identity verification at withdrawal, and the retention of transaction records for the periods required by law.
• Legitimate Interests: Processing that is necessary for ctg999's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud detection and prevention, Platform security monitoring, performance analytics, and customer support quality assurance.
• Consent: Where ctg999 seeks to send you marketing communications or use non-essential cookies, we will request your explicit consent beforehand. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ctg999 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. Personal data is shared with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment Processors: Transaction data is shared with bKash, Nagad, Rocket, and Upay as necessary to process deposits and withdrawals. Each payment provider operates under its own privacy policy and data protection framework. ctg999 shares only the data strictly required to complete the transaction.
• Game Studios and Content Providers: Where you play games provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, those studios may receive your session identifier and gameplay data to facilitate the delivery of the game. These providers operate under separate data processing agreements with ctg999.
• Identity Verification Services: Where ctg999 uses a third-party KYC (Know Your Customer) service to verify your identity documents, the relevant verification data will be shared with that provider solely for the purpose of confirming your identity. Results are returned to ctg999 and the verification provider does not retain your data beyond the period required for that verification.
• Regulatory and Law Enforcement Authorities: ctg999 will disclose personal data to competent authorities where required to do so by law, court order, or lawful regulatory request. ctg999 will, where legally permitted, notify you of any such disclosure.
• Professional Advisers: ctg999 may share personal data with its legal advisers, auditors, and accountants where necessary for the provision of professional services, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of ctg999's assets, personal data may be transferred to the acquiring entity as part of that transaction. ctg999 will notify affected players prior to any such transfer and will ensure that the acquiring entity provides at least equivalent privacy protections.

All third parties with whom ctg999 shares personal data are required, by contract, to process that data only for the agreed purposes and to maintain appropriate technical and organisational security measures. ctg999 does not permit third-party data processors to use your personal data for their own purposes.

ctg999 uses cookies and similar tracking technologies on the Platform for the purposes described in this section. A cookie is a small text file placed on your device by a web server. Cookies allow the Platform to recognise your device across sessions and provide a consistent, personalised experience.

You can manage cookie preferences through your browser settings at any time. Note that disabling functional or analytical cookies may affect some non-essential features of the Platform. Disabling strictly necessary or responsible gaming cookies will impair core Platform functionality and is not recommended.

ctg999 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations. Extended retention may apply where a transaction is subject to an ongoing investigation or dispute.
• Gaming Activity Data: Retained for a minimum of three years from the date of the relevant gaming session. Aggregated and anonymised gaming data may be retained indefinitely for statistical and analytical purposes.
• Communications and Support Data: Retained for a minimum of two years from the date of the communication, or longer where the communication relates to a formal complaint, dispute, or legal proceeding that remains unresolved.
• Responsible Gaming Data: Self-exclusion records and responsible gaming tool configurations are retained for the duration of the exclusion or restriction period, and for a further period of five years following expiry, to prevent circumvention of exclusion periods.
• Marketing Consent Records: Retained for as long as your consent remains active, and for a further period of three years following withdrawal of consent, to demonstrate compliance with consent requirements.

When personal data is no longer required for any of the above purposes, ctg999 will securely delete or anonymise it in accordance with our data destruction policy. Where technical constraints prevent immediate deletion, the data will be isolated from active processing until deletion is possible.

As a ctg999 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact ctg999 support at [email protected]. ctg999 will respond to all valid data rights requests within 30 calendar days of receipt, and will not charge a fee for standard requests.

• Right of Access: You have the right to request a copy of the personal data that ctg999 holds about you, together with information about how that data is used. This is sometimes referred to as a "Subject Access Request" or SAR.
• Right to Rectification: If you believe that any personal data ctg999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may also update certain information directly via the account settings panel.
• Right to Erasure: In certain circumstances, you have the right to request that ctg999 delete the personal data it holds about you. This right is subject to exceptions where ctg999 is required to retain data to comply with a legal obligation or to establish, exercise, or defend a legal claim.
• Right to Restriction of Processing: You have the right to request that ctg999 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing pending verification of ctg999's legitimate grounds.
• Right to Object: Where ctg999 relies on legitimate interests as the legal basis for processing, you have the right to object to that processing. ctg999 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where ctg999 processes your personal data on the basis of your consent, you may withdraw that consent at any time without detriment. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

ctg999 is strictly an adult gambling platform. The Platform is not intended for, and must not be used by, any person under the age of 18. ctg999 does not knowingly collect or process personal data belonging to individuals under the age of 18.

ctg999 employs age verification checks at the point of account registration and at the time of withdrawal requests. Where ctg999 becomes aware, or has reasonable grounds to suspect, that an account is held or used by a person under the age of 18, that account will be suspended immediately and any associated funds will be subject to investigation prior to any return.

If you are a parent or guardian and believe that your child has registered an account with ctg999, please contact ctg999 support at [email protected] immediately. ctg999 will investigate the matter promptly and will delete any personal data relating to a minor that is confirmed to be in our systems.

ctg999 strongly encourages parents and guardians to use internet filtering and parental control software to prevent children from accessing online gambling platforms, and to discuss the risks of online gambling openly with young people in their care.

ctg999 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to the following:

• Transport Layer Security: All data transmitted between your device and ctg999 servers is encrypted using 256-bit SSL/TLS encryption. This applies to all Platform pages, including account login, registration, the cashier, and live chat.
• Access Controls: Access to personal data within ctg999's systems is restricted to authorised personnel who require access for the performance of their duties. Access is controlled through role-based permissions and monitored through audit logs.
• Password Storage: Player passwords are stored as salted cryptographic hashes. ctg999 does not store plaintext passwords, and ctg999 staff cannot retrieve your password — only reset it through the verified account recovery process.
• Infrastructure Security: ctg999 platform servers are hosted in secure data centres with physical access controls, redundant power systems, and continuous security monitoring. Regular vulnerability assessments and penetration testing are conducted.
• Incident Response: ctg999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, ctg999 will notify affected players without undue delay.

While ctg999 takes all reasonable measures to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. You are responsible for maintaining the security of your own account credentials and for ensuring that you access the Platform from a secure device and network connection. ctg999 recommends using a strong, unique password for your account and never accessing your account from a shared or public device.

ctg999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The effective date displayed at the top of this page will be updated each time the Policy is revised.

Where changes to this Policy are material — meaning they significantly affect how we process your personal data or the rights available to you — ctg999 will provide advance notice via the Platform or by email to the address associated with your registered account. Non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be made without prior notice.

Your continued use of the ctg999 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement that you have reviewed and understood the changes. ctg999 recommends that all registered players review this Policy periodically. If you do not agree with the terms of an updated Policy, please contact ctg999 support to discuss your options, including account closure if appropriate.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ctg999 holds about you, please contact the ctg999 support team using the details below. All privacy-related communications should be directed in writing to our support email address.

This Privacy Policy was last reviewed and updated on 1 January 2026. ctg999 recommends that all registered players review this document periodically to remain informed of any updates to our data processing practices.