cm999 Privacy Policy – How We Protect Your Personal Data

1Introduction

At cm999, we understand that trust is the foundation of any long-term relationship between a platform and its users. Pakistani players who register on cm999 are sharing personal information with us — their names, mobile numbers, CNIC details and financial data — because they need to in order to use the platform. We take that trust seriously, and this Privacy Policy is how we explain and honour it.

The purpose of this document is straightforward: to tell you, in plain language, exactly what personal data cm999 collects, why it is collected, how it is processed, who it is shared with, how long it is kept, and what rights you have over it. We have deliberately avoided writing this policy in a way that requires a legal background to understand. If anything here is unclear, our support team is available 24/7 and will explain it.

By using cm999.app — whether as a registered player or as a visitor — you acknowledge that you have read this Privacy Policy and that you consent to the collection and use of your information as described. If you do not agree with any part of this policy, you should not use cm999.app.

2What Personal Data We Collect

cm999 collects personal data from you through three main channels: information you provide directly, information collected automatically when you use the platform, and information provided by third parties in connection with identity or payment verification.

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, Pakistani mobile number, email address, and a username and password of your choosing.
• Identity verification: CNIC number and, where required, a photograph or scan of your CNIC document. This is required before your first withdrawal can be processed.
• Payment information: Easypaisa or JazzCash account number, bank account details for IBFT transfers, or card details for Visa/Mastercard deposits. Note that cm999 does not store full card numbers — these are handled by our PCI-DSS compliant payment processor.
• Communications: Any messages, complaints, support requests or other communications you send to the cm999 team via live chat, email or other channels.
• Responsible gaming information: Any deposit limits, self-exclusion requests or responsible gaming preferences you set on your account.

2.2 Information Collected Automatically

• Device and browser data: Device type, operating system, browser type and version, screen resolution and device identifiers.
• Connection data: IP address, internet service provider, approximate geographic location derived from IP, and connection timestamps.
• Usage data: Pages visited on cm999.app, bet history, game sessions, transaction history, session duration, navigation patterns and features used.
• Cookie and tracking data: Information collected through cookies and similar technologies as described in Section 5 of this Policy.

2.3 Information from Third Parties

• Identity verification providers: When cm999 performs CNIC-based age and identity verification, we may receive a confirmation of verification status from our identity verification partner.
• Payment processors: Transaction status, payment confirmations and fraud signals from Easypaisa, JazzCash, NayaPay, SadaPay and banking partners.
• Fraud and risk data: Information from industry fraud prevention databases used to protect cm999 and its players from fraudulent activity.

3How We Use Your Personal Data

cm999 uses your personal data for specific, legitimate purposes. We do not use your data for any purpose beyond what is described below without first seeking your consent.

3.1 Account Management and Platform Operation

Your registration data is used to create and maintain your cm999 account, authenticate your identity when you log in, and provide you with access to all platform features including sports betting, live casino, crash games and Andar Bahar.

3.2 Payment Processing

Your payment details are used solely to process deposits and withdrawals in PKR via your chosen payment method. Payment data is passed to our payment processing partners under strict data sharing agreements and is not retained by cm999 beyond what is needed for transaction records.

3.3 Identity Verification and Legal Compliance

cm999 is required to verify the identity and age of players in accordance with applicable anti-money laundering (AML) and responsible gaming obligations. CNIC data is used for this purpose and retained in accordance with legal requirements, which typically mandate a minimum of five years' retention after account closure.

3.4 Customer Support

Communications you send to cm999 — via live chat, email or any other channel — are retained in order to handle your enquiry, maintain a record of interactions, and improve the quality of our customer service. Support records may be reviewed internally for quality assurance purposes.

3.5 Platform Security and Fraud Prevention

Automatically collected data including IP addresses, device identifiers and usage patterns is used to detect unusual account activity, prevent fraudulent transactions, identify attempts at bonus abuse or multi-accounting, and protect the integrity of the platform for all players.

3.6 Platform Improvement

Aggregated and anonymised usage data is used to understand how players use cm999, which features are most popular, where technical issues occur, and how the platform can be improved. This analysis does not involve identifying individual players.

3.7 Service Communications

cm999 may contact you by SMS, email or push notification regarding your account — including deposit confirmations, withdrawal status updates, security alerts, bonus activations and policy changes. These communications are operational in nature and cannot be fully opted out of while your account is active, as they relate to the management of your account.

Promotional communications — such as bonus offers and new game announcements — are subject to your communication preferences, which can be managed in your account settings.

4Sharing Your Personal Data

cm999 does not sell, rent or share your personal data with third parties for their own marketing or commercial purposes. Data is shared only in the following specific circumstances:

All third parties who receive data from cm999 are bound by data processing agreements that require them to use the data only for the specified purpose, protect it with appropriate security measures, and delete or return it when the purpose is fulfilled.

5Cookies and Tracking Technologies

cm999 uses cookies and similar technologies (such as local storage) on cm999.app to provide a functional, personalised and secure browsing experience. A cookie is a small text file stored on your device by your browser when you visit a website.

5.1 Types of Cookies We Use

5.2 Managing Cookies

Required cookies cannot be disabled as they are essential for the platform to function. Optional cookies can be managed through your browser settings. Most modern browsers allow you to view, delete and block cookies on a site-by-site basis. Note that disabling certain optional cookies may affect the functionality or personalisation of your cm999 experience.

6Data Security

Protecting your personal data from unauthorised access, loss or disclosure is a core priority at cm999. The following security measures are in place at all times:

• Encryption in transit: All data transmitted between your device and cm999.app is protected by 256-bit TLS/SSL encryption.
• Encryption at rest: Sensitive personal data — including CNIC details and payment information — is stored in encrypted form on cm999's servers.
• Access controls: Access to player personal data within cm999 is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to background checks and confidentiality obligations.
• Payment card security: cm999 uses PCI-DSS compliant payment processors for all card transactions. Full card numbers are never stored on cm999's own systems.
• Regular security testing: cm999's platform undergoes regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their cm999 accounts for additional login security.

Despite these measures, no online platform can guarantee absolute security against all possible threats. If you become aware of any security vulnerability or suspicious activity on your cm999 account, please contact our support team immediately.

7Data Retention

cm999 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your account and for a minimum of five years following account closure, in compliance with anti-money laundering (AML) legislation.
• Transaction records: Payment records and betting history are retained for a minimum of five years following the transaction date.
• Identity verification records: CNIC documents and verification records are retained for a minimum of five years after account closure.
• Customer support communications: Chat logs and email records are retained for three years from the date of the last interaction.
• Analytics data: Anonymised usage data may be retained indefinitely for platform improvement purposes. This data cannot be used to identify individual players.

When personal data is no longer required and its retention period has expired, cm999 will securely delete or anonymise the data. Players may request early deletion subject to legal retention obligations — see Section 8 for details.

8Your Rights Over Your Personal Data

As a user of cm999, you have the following rights regarding your personal data. These rights can be exercised by contacting our support team at support@cm999.app.

All rights requests are handled within 30 days of receipt. Where a request cannot be fulfilled — for example, because legal retention obligations apply — cm999 will explain the reason clearly. There is no charge for exercising any of these rights.

9Minors and Underage Access

cm999 is strictly for adults aged 18 and above. cm999 does not knowingly collect personal data from anyone under the age of 18. The platform takes active steps to prevent underage registration, including date-of-birth collection at registration and CNIC-based age verification before withdrawals are processed.

If cm999 becomes aware that a registered account belongs to a person under 18, the account will be immediately suspended, all bets will be voided, any deposits will be returned to the original payment method, and the registration data will be deleted promptly. Parents or guardians who believe a minor has registered on cm999 should contact our support team immediately at support@cm999.app so the account can be investigated and closed without delay.

10Changes to This Privacy Policy

cm999 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, the services we offer, or applicable law. When material changes are made, we will:

• Update the "Effective Date" at the top of this page
• Notify registered players via SMS or email at the contact details held on their account, at least 7 days before the changes take effect
• Where required by law, seek renewed consent for any new or materially changed data processing activities

We encourage all cm999 players to review this Privacy Policy periodically. Your continued use of cm999.app after the effective date of any revision constitutes your acceptance of the updated policy. If you do not accept a revised policy, you may request account closure and we will process this without penalty.

11Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a data protection concern, please contact the cm999 privacy team through the following channels:

• Email: support@cm999.app (include "Privacy Request" in the subject line)
• Live Chat: Available 24/7 on cm999.app — ask to speak to the privacy team
• Response Time: Privacy requests are acknowledged within 48 hours and fully resolved within 30 days

For all other account-related enquiries including responsible gaming tools, deposit limits and self-exclusion requests, you can visit our Responsible Gaming page or contact support via any of the channels above.