CR999 Privacy Policy – How We Handle Your Data in Pakistan

This Privacy Policy explains how CR999 ("we", "us", "our") collects, stores, uses and protects the personal information of players who use the CR999 platform. CR999 is an online sports betting and casino platform serving users in Pakistan. All transactions on CR999 are conducted in Pakistani Rupees (PKR).

By registering a CR999 account, making a deposit or using any CR999 service, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described below. If you do not agree with any part of this policy, please stop using CR999 immediately and contact us to close your account.

CR999 is committed to protecting your privacy. We collect only the data that is genuinely necessary to provide our services, keep it secure, and give you meaningful control over what happens to it. This policy is written in plain English because Pakistani players deserve clarity – not pages of confusing legal language.

CR999 collects personal data from you in three main ways: information you provide directly when registering or using the platform, data generated automatically by your use of CR999, and information from third-party payment providers when you make a deposit or withdrawal.

CR999 uses your personal data for specific, legitimate purposes directly related to providing the CR999 betting and gaming service to Pakistani players. We do not use your data for any purpose beyond what is described here without your explicit consent.

• Account Management – To create and maintain your CR999 account, verify your identity and age, and manage your login security.
• Service Delivery – To process your bets, settle markets, credit winnings to your CR999 balance and provide access to all sports betting and casino features.
• Payments Processing – To handle PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments, and to process withdrawal requests to your registered payment method.
• Customer Support – To respond to your queries, handle complaints and resolve issues related to your CR999 account.
• Legal Compliance – To comply with anti-money laundering (AML) requirements, fraud prevention obligations and age verification requirements. CR999 is required by law to maintain records of transactions for a minimum period.
• Responsible Gaming – To monitor betting patterns that may indicate problem gambling and to deliver responsible gaming interventions such as deposit limit reminders and cooling-off notifications.
• Platform Improvement – To analyse aggregated, anonymised usage data to improve the CR999 platform experience, fix bugs and optimise performance for Pakistani users.
• Security – To detect and prevent fraud, cheating, multiple account creation and other activities that violate the CR999 Terms and Conditions.

CR999 processes your personal data on the following legal grounds, depending on the nature of the data and the purpose of processing:

• Contractual Necessity – Processing your registration data, payment information and betting activity is necessary to perform the contract between you and CR999 (the Terms and Conditions you accepted at registration). Without this data, CR999 cannot provide its services.
• Legal Obligation – Processing identity verification documents, transaction records and certain account history data is required by law for anti-money laundering compliance, fraud prevention and age verification obligations.
• Legitimate Interests – Processing technical data such as IP address and device information is based on CR999's legitimate interest in maintaining platform security, preventing fraud and improving the service experience.
• Consent – Processing your data for direct marketing communications is based on the consent you provided at registration. You may withdraw this consent at any time without affecting the availability of CR999 services.

CR999 does not sell, rent or trade your personal data to any third party for marketing purposes. This is an absolute commitment. Your name, contact details, betting history and PKR transaction records will never be passed to advertisers, data brokers or marketing agencies.

CR999 shares personal data only in the following limited circumstances and only to the minimum extent necessary:

• Payment Processors – CR999 shares transaction data with Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT systems and card payment processors solely to process your deposits and withdrawals in PKR. These processors operate under strict data protection agreements with CR999.
• Identity Verification Partners – When age or identity verification requires document checking, CR999 may use a regulated third-party verification service. Documents are processed for verification only and not retained by the verification partner beyond the verification process.
• Game Content Providers – Slot and casino game providers on CR999 receive session data (game played, stake in PKR, outcome) to operate their game software. This is the minimum data required and is not associated with your full personal profile.
• Legal Authorities – CR999 will disclose personal data to law enforcement or regulatory authorities if required by a valid legal order. CR999 will always seek to verify the legal authority of such requests before complying.
• Internal Business Transfer – In the event of a merger, acquisition or sale of CR999 assets, your data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and given the option to close your account.

All financial transactions on CR999 are processed in Pakistani Rupees (PKR). CR999 takes the security of payment data particularly seriously given the sensitive nature of financial information.

For Easypaisa and JazzCash transactions, CR999 receives a transaction reference number and confirmation of the PKR amount transferred. CR999 does not receive or store your mobile wallet PIN or login credentials. For IBFT bank transfers, CR999 records the sending account reference and transaction amount. For Visa and Mastercard payments, CR999 stores only the last four digits of your card number and the card type – full card numbers are never stored on CR999 servers.

• All payment data is transmitted over SSL-encrypted connections.
• PKR transaction records are retained for a minimum of 5 years to comply with anti-money laundering regulations applicable in Pakistan.
• CR999 applies automated fraud detection to all deposit and withdrawal transactions. Suspicious transactions may be flagged for manual review, during which the transaction may be temporarily held.
• Chargebacks or fraudulent payment disputes will result in immediate account suspension pending investigation.

CR999 uses cookies and similar technologies to make the platform function correctly, remember your preferences and improve your experience. A cookie is a small text file stored on your device when you visit CR999. The types of cookies used on CR999 are as follows:

You can manage cookie preferences through your browser settings. Disabling non-essential cookies on CR999 will not prevent you from accessing the platform or placing bets. Disabling essential cookies may prevent CR999 from functioning correctly. CR999 does not use third-party advertising cookies or social media tracking pixels.

CR999 retains your personal data for as long as your account is active and for a period after account closure as required by law or legitimate business necessity. The following retention periods apply:

• Active Account Data – Retained for the duration of your CR999 account and for 5 years after account closure for AML and fraud prevention compliance.
• Transaction Records (PKR) – All PKR deposit and withdrawal records are retained for a minimum of 5 years from the date of each transaction, as required under anti-money laundering regulations.
• Identity Verification Documents – Retained for 5 years after account closure. Copies provided for verification are stored securely and not shared beyond verification purposes.
• Customer Support Records – Email and chat correspondence related to your CR999 account is retained for 3 years after your last interaction.
• Technical / Log Data – Server logs and IP access records are retained for 12 months for security and fraud investigation purposes.

When retention periods expire, CR999 securely deletes or anonymises the relevant data. Anonymised data (where all identifying information has been removed) may be retained indefinitely for statistical and analytical purposes.

CR999 implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and CR999 servers.
• Encryption of sensitive data at rest, including identity verification documents and payment records.
• Access controls ensuring that only authorised CR999 personnel with a legitimate business need can access personal data.
• Regular security audits and penetration testing of the CR999 platform infrastructure.
• Automated intrusion detection systems monitoring for suspicious access patterns in real time.
• Two-factor authentication available for CR999 accounts to provide an additional layer of login security.

Despite our best efforts, no online platform can guarantee 100% security. You play an important role in keeping your CR999 account secure by maintaining a strong unique password, not sharing login details and logging out of shared devices after each session.

As a CR999 player in Pakistan you have the following rights over your personal data. To exercise any of these rights, contact CR999 support at support@cr999.click. Requests are processed within 14 working days.

CR999 strictly enforces an 18+ age policy. The CR999 platform, including all betting markets, casino games and slots, is intended exclusively for adults. CR999 does not knowingly collect personal data from any person under the age of 18.

If you are a parent or guardian and believe your child has registered a CR999 account or submitted personal data to CR999, please contact support@cr999.click immediately. CR999 will promptly close the underage account, return any deposited PKR balance to the originating payment method and securely delete all associated personal data.

CR999 uses date of birth verification at registration and may request CNIC or other government-issued identification documents to confirm a user's age. Accounts that cannot be verified as belonging to an adult will be suspended pending verification and permanently closed if verification fails.

CR999 may update this Privacy Policy from time to time to reflect changes in the way we operate, changes in applicable law or improvements to our data practices. When material changes are made, CR999 will notify registered players via email at least 7 days before the changes take effect.

The most current version of the CR999 Privacy Policy will always be available at cr999.click/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of CR999 after the effective date of any update constitutes your acceptance of the revised policy.

If you disagree with any changes to this Privacy Policy, you have the right to close your CR999 account before the changes take effect. Contact support@cr999.click to initiate account closure and any remaining real-money PKR balance will be returned to your registered withdrawal method.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how CR999 has handled your personal information, please get in touch. CR999 support is available 24 hours a day, 7 days a week.