ct998 Privacy Policy

This Privacy Policy ("Policy") describes how ct998 ("ct998", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal information of individuals who visit, register on, or otherwise interact with the ct998 online betting platform at https://ct998.io (the "Platform").

ct998 is committed to safeguarding the privacy and security of every registered player and site visitor. We recognise that your personal data belongs to you, and we process it only to the extent necessary to provide you with a safe, fair, and efficient betting experience tailored to players across Bangladesh.

By accessing the Platform or creating a ct998 account, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

ct998 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the mandatory 21+ age requirement).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other).
• Email address used for account registration and correspondence.
• Mobile phone number used for account verification and transaction alerts.

2.2 KYC & Verification Documents

• Copies of government-issued photo ID (National ID Card, passport, or driving licence).
• Proof of address documents (utility bill, bank statement dated within 90 days).
• Source-of-funds documentation where required under anti-money laundering obligations.

2.3 Financial & Transaction Data

• Mobile banking account numbers and wallet identifiers for bKash, Nagad, Rocket, and Upay transactions.
• Bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other bank transfer methods.
• Cryptocurrency wallet addresses for USDT (TRC-20), BTC, and ETH deposits and withdrawals.
• Full transaction history including deposit amounts, withdrawal requests, bet stakes, and winnings.

2.4 Technical & Usage Data

• IP address, device type, operating system, browser type and version.
• Pages visited, session duration, click paths, and feature interactions on the Platform.
• Login timestamps, session tokens, and authentication logs.
• Geolocation data (country and city level) derived from IP address.

2.5 Communications Data

• Records of live chat conversations with ct998 customer support agents.
• Email correspondence and support ticket content.
• Feedback, complaint submissions, and survey responses.

ct998 uses the personal data we collect for clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below:

ct998 does not use personal data to build advertising profiles, sell targeted advertising inventory, or share player data with social media platforms for retargeting purposes.

ct998 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and ct998 — specifically, to operate your betting account, process deposits and withdrawals, and deliver the services you have requested.
• Legal Obligation: ct998 is required to process certain data to comply with applicable anti-money laundering, counter-terrorism financing, and know-your-customer regulations. This processing is mandatory and cannot be opted out of while your account remains active.
• Legitimate Interests: ct998 processes technical and usage data on the basis of legitimate interests, including the prevention of fraud, ensuring platform security, and improving the quality of our services. These interests do not override your fundamental privacy rights.
• Consent: For optional processing activities such as promotional email communications and personalised offers, ct998 relies on your freely given, informed, and specific consent. You may withdraw consent at any time by updating your account communication preferences or contacting support.

ct998 shares your personal data with third parties only where strictly necessary and only with parties who are contractually bound to process your data securely and exclusively for the purposes authorised by ct998. The categories of third-party recipients are as follows:

• KYC & Identity Verification Providers: Specialist identity verification services that validate government-issued documents, confirm age (21+), and screen against sanctions lists and politically exposed persons (PEP) databases.
• Payment Processors: Mobile financial service providers including bKash, Nagad, Rocket, and Upay; banking partners including Dutch-Bangla Bank and other institutions; and cryptocurrency processing networks. These providers receive only the transaction data required to complete your requested payment.
• Fraud Prevention & Security Services: Third-party fraud detection platforms that analyse transaction patterns and device fingerprints to identify and prevent account takeover, bonus abuse, and money laundering activity.
• Cloud Infrastructure Providers: Hosting and database services that store ct998 platform data on encrypted, access-controlled servers. All infrastructure providers are subject to data processing agreements.
• Customer Support Platforms: Live chat and ticketing software used to manage in-platform support conversations. Support agents access only the data required to resolve your specific query.
• Regulatory & Law Enforcement Authorities: ct998 will disclose personal data to competent authorities where required to do so by applicable law, valid legal process, court order, or in cooperation with a regulatory investigation.

ct998 uses cookies and similar tracking technologies to enable core Platform functionality, maintain your authenticated session, and gather anonymised analytics data that helps us improve the Platform experience.

Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain security tokens, and remember your language and currency preferences. These cookies cannot be disabled without significantly impairing Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised, aggregated information about how players navigate the Platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used solely to improve Platform performance and user experience.
• Functional Cookies: These cookies remember your preferences (such as game type filters, display settings, and notification preferences) to personalise your Platform experience between sessions.
• Fraud Prevention Cookies: These cookies support our fraud detection systems by establishing a consistent device fingerprint across sessions. They help identify suspicious login attempts or unusual account activity.

ct998 does not use third-party advertising cookies or allow external ad networks to place tracking technologies on the Platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect your ability to log in and use the Platform.

ct998 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following table summarises our standard retention periods by data category:

On expiry of the applicable retention period, ct998 will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual. Data subject to an ongoing legal dispute, regulatory investigation, or court order may be retained beyond the standard periods stated above until the matter is resolved.

ct998 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS 1.2 or higher protocols. Our SSL certificate is maintained and renewed without interruption.
• Encryption at Rest: Sensitive data including KYC documents, financial records, and authentication credentials are stored using AES-256 encryption on our database servers.
• Access Controls: Access to personal data within ct998's internal systems is restricted on a strict need-to-know basis. Staff access is controlled through role-based permissions, multi-factor authentication, and activity audit logging.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular penetration testing conducted by independent security professionals.
• Secure Payment Handling: ct998 does not store complete payment card numbers or full mobile banking credentials. Payment processing is handled by PCI-DSS compliant payment partners.
• Incident Response: ct998 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

As a ct998 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact ct998 support at [email protected] with the subject line "Data Rights Request" and include your account username and a clear description of your request.

• Right to Access: You may request a copy of the personal data that ct998 holds about you. We will provide this information in a commonly used electronic format within 30 calendar days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that we may be required by law to retain certain data (such as financial transaction records) even after account closure; in such cases we will explain which data must be retained and why.
• Right to Data Portability: You may request a structured, machine-readable export of the personal data you have provided to ct998 directly, for the purpose of transferring it to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to processing based on ct998's legitimate interests where you believe that your fundamental rights and freedoms override those interests.
• Right to Restrict Processing: In certain circumstances, you may request that ct998 restrict the processing of your personal data — for example, while a data accuracy dispute is being resolved.

The ct998 Platform is strictly intended for adults aged 21 years and above. ct998 does not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and accounts found to belong to individuals under 21 will be immediately closed and all associated data will be deleted.

If you have reason to believe that a minor has registered a ct998 account or submitted personal data to the Platform, please contact us immediately at [email protected]. ct998 will investigate the matter promptly and take all necessary steps to remove the data and prevent any further access by the minor.

ct998 primarily processes and stores player data within secure data centres. In some cases, data may be transferred to, and processed by, service providers located outside Bangladesh — for example, cloud infrastructure providers or KYC verification platforms that operate global processing facilities.

Where personal data is transferred internationally, ct998 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include contractual data processing agreements that bind recipient parties to confidentiality, security, and purpose-limitation obligations consistent with our own standards.

ct998 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing the contractual protections described above. If you have questions about the specific countries to which your data may be transferred, please contact our support team.

ct998 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made to this Policy, we will:

• Publish the updated Policy on this page with a revised effective date.
• Notify registered players of material changes via the email address associated with their ct998 account at least 7 days before the changes take effect.
• Where the change requires fresh consent (for example, a new processing purpose), request your explicit consent before the new processing commences.

We encourage you to review this Policy periodically. Your continued use of the ct998 Platform after the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not agree with the updated Policy, please cease using the Platform and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or ct998's data practices, please reach out to our support team. All privacy-related communications must be made in English.

For responsible gaming concerns or self-exclusion requests, please also refer to our Responsible Gaming page, which outlines the full range of player protection tools available on the ct998 platform.