1. Introduction
This Privacy Policy ("Policy") describes how CT666 ("CT666", "we", "us", "our"), operator of the website at https://ct666.cam (the "Platform"), collects, uses, stores and protects personal data relating to users ("you", "your") who access or interact with the Platform.
CT666 is an English-language online gaming information platform built for players across Pakistan. We take our obligations regarding your personal data seriously and are committed to handling that data responsibly, transparently and in accordance with applicable data protection principles.
By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must stop using the Platform immediately.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. Together, these documents govern your use of the CT666 platform.
2. Definitions
For the purposes of this Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and payment reference details. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction, whether automated or manual. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. CT666 acts as the Data Controller for personal data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of CT666, subject to written contractual obligations and data protection safeguards. |
| "Consent" | A freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
| "Cookie" | A small text file placed on your device by the Platform to store session information, preferences or analytics data. |
3. Data Controller
CT666 is the Data Controller responsible for personal data collected through the Platform. As Data Controller, CT666 determines the purposes for which personal data is processed and the means by which processing is carried out.
CT666 does not hold or claim a Pakistan gambling license and is not endorsed by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, any provincial government body, or any Pakistani financial institution including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah. References to these institutions within the Platform are for contextual familiarity only and imply no affiliation, endorsement or data-sharing arrangement.
For all data protection enquiries, subject access requests and complaints, users may contact the CT666 Data Protection team at [email protected]. Please include "Data Protection Request" in your subject line and provide sufficient detail to allow us to identify your account and process your request efficiently.
4. Data We Collect
CT666 collects personal data through several channels. The categories of personal data we may collect are set out below, along with the typical source and context of collection:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, username, government-issued ID (for KYC) | Provided by you during registration or verification |
| Contact Data | Email address, phone number, city of residence (e.g., Karachi, Lahore, Islamabad) | Provided by you during registration or support enquiries |
| Financial Data | Payment method reference (e.g., mobile wallet identifier), transaction history, deposit and withdrawal amounts in PKR | Generated during platform transactions |
| Technical Data | IP address, browser type and version, device type, operating system, session duration, referring URL | Automatically collected via cookies and server logs |
| Usage Data | Pages visited, features accessed, game guides viewed, search queries entered | Automatically collected via analytics tools |
| Communications Data | Support ticket content, email correspondence, feedback form submissions | Provided by you when contacting support |
CT666 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data or health information unless required for responsible gambling compliance purposes, in which case your explicit consent will be sought beforehand.
5. Legal Basis for Processing
CT666 processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:
- Contractual necessity: Processing is required to perform our obligations under the Terms & Conditions you have agreed to, including account management, transaction processing and customer support.
- Legitimate interests: Processing is necessary for CT666's legitimate business interests — such as fraud prevention, platform security and improving user experience — where those interests are not overridden by your fundamental rights.
- Legal obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) verification and law enforcement requests.
- Consent: For non-essential cookies, marketing communications and certain analytics activities, we rely on your freely given and specific consent, which you may withdraw at any time without affecting the lawfulness of prior processing.
6. How We Use Your Data
CT666 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent:
- Account management: To register, verify, maintain and administer your CT666 account, including processing identity verification documents submitted for KYC compliance.
- Platform operation: To deliver the features and content you request, personalise your experience and ensure the platform functions correctly across different devices and connection types.
- Transaction processing: To record, facilitate and reconcile deposits, withdrawals and any associated payment references in PKR, ensuring accurate financial records.
- Customer support: To respond to your enquiries, resolve disputes, process complaints and provide technical assistance in English (and Urdu where requested).
- Fraud and security: To detect, investigate and prevent fraudulent activity, money laundering, bonus abuse and any other conduct that threatens the integrity of the Platform or its users.
- Legal compliance: To meet our obligations under applicable law, including AML/KYC regulations, data retention requirements and responses to lawful requests from Pakistani or international authorities.
- Platform improvement: To analyse aggregated usage patterns — such as popular cricket betting guides, PSL market pages and live casino content viewed — and improve platform structure accordingly.
- Responsible gambling: To monitor account activity for signs of problem gambling behaviour and, where appropriate, apply protective measures or make contact in accordance with our Responsible Gambling Policy.
- Marketing communications: To send you promotional offers, platform updates and relevant gaming content — only where you have provided explicit consent and only via channels you have opted into.
7. Data Sharing & Disclosure
CT666 does not sell, rent or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:
- Service providers and data processors: Third-party vendors who provide services necessary for platform operation, including cloud hosting providers, payment processing infrastructure, identity verification services, email delivery platforms and analytics tools. All processors are bound by written data processing agreements.
- Regulatory and law enforcement authorities: Where CT666 is legally required or compelled by a valid court order or regulatory directive to disclose personal data to Pakistani or international authorities, we will do so in accordance with applicable law and, where permitted, will notify you of such disclosure.
- Professional advisors: Lawyers, auditors, accountants and other professional advisors engaged by CT666 where disclosure is necessary for the performance of their services, subject to professional confidentiality obligations.
- Business transfers: In the event of a merger, acquisition, restructuring or sale of all or part of CT666's business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable thereafter.
CT666 will never share your personal data with third-party advertisers, data brokers or marketing networks without your prior explicit consent. Any CT666 communication referencing Pakistani payment providers such as Easypaisa, JazzCash or Raast does not imply that those providers have access to your personal data.
8. Cookies & Tracking Technologies
CT666 uses cookies and similar tracking technologies to operate the Platform effectively, understand user behaviour and improve platform content. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Enable core platform functionality including session management, security features and navigation. Cannot be disabled without breaking the platform. | No — essential |
| Functional | Remember your preferences such as language selection, display settings and recently viewed content. | No — legitimate interest |
| Analytics | Collect aggregated, anonymised data on how users navigate the Platform, which pages receive the most traffic and where users exit. | Yes — consent based |
| Marketing | Track interactions with promotional content and measure the effectiveness of CT666 marketing campaigns. | Yes — explicit consent |
You may manage your cookie preferences at any time through the cookie consent banner displayed on your first visit to the Platform, or by adjusting your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.
CT666 does not use cookies to track your browsing activity on third-party websites, nor do we deploy advertising pixels for the purpose of re-targeting you on external platforms without your explicit consent.
9. Data Retention
CT666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:
- Account data: Retained for the duration of your active account and for a period of up to five years following account closure, to meet AML record-keeping obligations.
- Transaction records: Financial transaction data is retained for a minimum of five years from the date of the transaction in accordance with anti-money laundering requirements.
- KYC documents: Identity verification documents are retained for the period required by applicable regulations, typically five years from the end of the business relationship.
- Support communications: Customer support correspondence is retained for up to three years from the date of the interaction.
- Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once de-identified.
- Marketing consent records: Records of your consent to receive marketing communications are retained for as long as you remain subscribed and for a period of two years thereafter as evidence of lawful processing.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.
10. Data Security
CT666 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security framework includes the following measures:
- Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
- Encryption of personal data at rest using industry-standard algorithms.
- Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
- Regular penetration testing and vulnerability assessments of Platform infrastructure.
- Multi-factor authentication requirements for all staff accessing systems that hold personal data.
- Documented incident response procedures enabling CT666 to detect, contain and report personal data breaches within legally required timeframes.
No method of electronic transmission or storage is completely secure. While CT666 takes all reasonable measures to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If you suspect unauthorised access to your account, contact support immediately at [email protected].
11. Your Data Rights
Subject to applicable law, you hold the following rights in relation to your personal data held by CT666. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.
Right of Access
Request a copy of the personal data CT666 holds about you, along with information about how it is processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where there is no compelling reason for CT666 to continue processing it.
Right to Restriction
Request that CT666 restrict processing of your data while a dispute about its accuracy or lawfulness is resolved.
Right to Portability
Receive a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service.
Right to Object
Object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us at [email protected] or update your preferences in your account settings.
12. Children's Privacy
The CT666 Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator or license jurisdiction applicable to you. CT666 does not knowingly collect or process personal data relating to minors.
If we become aware that personal data has been submitted by or on behalf of a person under the applicable minimum age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has registered on the Platform without your consent, please contact us immediately at [email protected].
You are responsible for ensuring that minors in your household do not access the CT666 Platform. We recommend using parental control software and keeping your account credentials secure and out of reach of children. Local laws in Pakistan may impose additional obligations on you in this regard.
13. International Data Transfers
CT666 may transfer your personal data to, or store it in, countries outside your country of residence for the purposes described in this Policy. Such transfers may occur when our service providers — including cloud infrastructure and analytics providers — operate data centres in jurisdictions outside Pakistan.
Where personal data is transferred internationally, CT666 takes appropriate steps to ensure that adequate protections are in place, which may include:
- Standard contractual clauses approved by relevant data protection authorities;
- Binding corporate rules where the recipient forms part of a corporate group;
- Transfers to jurisdictions recognised as providing an adequate level of data protection; or
- Your explicit consent where no other adequate safeguard is available.
By using the Platform, you acknowledge that your personal data may be transferred and processed in jurisdictions with different data protection standards from those in Pakistan. CT666 will always apply the protections described in this Policy regardless of where data is processed.
14. Third-Party Links & Services
The Platform may contain references to or descriptions of third-party gaming operators, payment services and sports leagues — including PSL, ICC tournaments, and Pakistani football competitions — for informational context only. CT666 does not include hyperlinks to external websites and is not responsible for the privacy practices of any third-party service you independently choose to access.
This Policy applies exclusively to personal data collected and processed by CT666 through the Platform. If you visit a third-party website referenced contextually within our content, you should review that website's own privacy policy before providing any personal data.
References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on this Platform are for contextual familiarity with Pakistani payment methods only. None of these institutions are data processors for CT666, and none have access to your personal data through your use of this Platform.
15. Policy Updates
CT666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing activities or the structure of the Platform. When we make material changes, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered users by email or via a prominent notice on the Platform.
We recommend that you review this Policy periodically to stay informed of how CT666 protects your personal data. Your continued use of the Platform after a revised Policy has been posted constitutes your acceptance of the updated terms.
If any revision materially affects your rights or the way in which CT666 processes your personal data in a way that requires your fresh consent, we will seek that consent before applying the revised processing activities to your data.
16. Contact Us
If you have any questions, concerns or complaints about this Privacy Policy or the way CT666 handles your personal data, please contact our support team. We are committed to resolving all privacy-related enquiries promptly and transparently.
Platform: CT666 — https://ct666.cam
Data Protection Contact: [email protected] (plain text — not a clickable link)
Subject Line for Data Requests: "Data Rights Request" or "Data Protection Enquiry"
Response Time: Within 30 calendar days of receipt of a valid request
Support Language: English (Urdu available on request)
Operating Hours: 24 hours a day, 7 days a week
If you are not satisfied with CT666's response to your data protection complaint, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Pakistani users may wish to seek independent legal advice regarding data protection rights under applicable local law.