ct9 Privacy Policy

Information We Collect

ct9 collects personal information from you in several ways: directly when you register an account or contact support, automatically when you use the platform, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are described below.

Registration and Account Data

When you create a ct9 account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, email address, mobile phone number, and your chosen username. This data is essential for creating and managing your account and for verifying that you meet the minimum age requirement of 18 years.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, ct9 may request copies of identity documents such as a National Identity Card (NID), passport, or birth certificate, as well as proof of address documents such as a bank statement or utility bill. This data is processed solely for the purposes of verifying your identity, confirming your age, and preventing fraud and money laundering.

Financial Transaction Data

When you make a deposit or withdrawal, ct9 records transaction details including the payment method used (for example, bKash, Nagad, Rocket, Upay, or DBBL), the transaction amount in Bangladeshi Taka (৳), the transaction date and time, and the transaction reference number. ct9 does not store full payment account credentials. Transaction data is retained for the period required by our financial recordkeeping obligations.

Gameplay and Betting Activity Data

ct9 records a log of all gameplay and betting activity conducted through your account. This includes game sessions, bet amounts, game outcomes, bonus usage, and wagering history. This data is used to provide our services, resolve disputes, power responsible gaming features, and improve the ct9 platform.

Technical and Device Data

When you access ct9, our systems automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type, screen resolution, and access timestamps. This data is used for security monitoring, fraud prevention, and platform optimisation.

Communications Data

If you contact ct9 through our support channels, we retain records of those communications, including the content of messages sent to and from [email protected], chat transcripts, and any supporting documents you attach. These records are used to resolve your query, train our support team, and maintain an audit trail of customer interactions.

Data Category	Examples	Purpose
Account Data	Name, DOB, email, mobile, username	Account creation, age verification, communications
KYC Documents	NID, passport, proof of address	Identity verification, fraud prevention
Financial Data	Transaction amounts, payment method, timestamps	Payment processing, financial recordkeeping
Gameplay Data	Bet history, game sessions, bonus usage	Service delivery, dispute resolution, responsible gaming
Technical Data	IP address, browser, device type	Security, fraud detection, platform optimisation
Communications	Support emails, chat transcripts	Query resolution, quality assurance

How We Use Your Data

ct9 uses your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with those purposes. The primary purposes for which ct9 processes your personal data are set out below.

Providing and Managing the ct9 Service

The most fundamental use of your personal data is to operate your ct9 account and deliver the services you have requested. This includes processing your deposits and withdrawals, giving you access to casino games and sports betting markets, crediting bonuses to your account, and maintaining an accurate record of your betting and gaming history. Without this processing, ct9 cannot provide its core service to you.

Identity Verification and Fraud Prevention

ct9 uses your registration data, KYC documents, and transaction history to verify your identity, confirm your eligibility to use the platform, detect and prevent fraudulent activity, and ensure compliance with anti-money-laundering (AML) obligations. These activities are essential to maintaining the integrity of the platform and protecting all players.

Responsible Gaming Monitoring

ct9 analyses gameplay data, deposit patterns, and session duration data to identify players who may be exhibiting signs of problem gambling. Where patterns of concern are detected, ct9 may reach out proactively to offer responsible gaming support, apply protective account restrictions, or prompt the player to review their deposit limits and self-exclusion options. This processing is carried out in the best interests of player welfare.

Customer Support

When you contact ct9 support, we use your account data and communications history to identify you, understand your query, and provide an accurate and helpful response. Support interactions are logged and may be reviewed for quality assurance and training purposes.

Platform Improvement and Analytics

ct9 uses aggregated and anonymised data derived from player activity to analyse platform performance, identify technical issues, improve the user experience, and develop new features and game offerings. This analysis does not involve making decisions about individual players on the basis of automated processing.

Marketing Communications

With your consent, ct9 may send you promotional communications about new games, seasonal bonuses, and special offers by email or SMS. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or using the unsubscribe link in any marketing email. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

Data Sharing & Disclosure

ct9 does not sell your personal data. We share your data only where necessary to deliver our services, comply with legal obligations, or protect the security of the platform. The categories of third parties with whom ct9 may share your data are described below.

Payment Processors

When you make a deposit or withdrawal, ct9 shares the minimum necessary transaction data with the relevant payment processor — such as bKash, Nagad, Rocket, Upay, or DBBL — to facilitate the transaction. Payment processors operate under their own privacy policies and data protection obligations. ct9 does not share your full account profile with payment processors, only the data required to complete the specific transaction.

Game Providers

ct9 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, a session identifier and the applicable game configuration data are shared with the provider to enable gameplay. Game providers do not receive your full personal profile; they receive only the session-level data necessary to run the game and record the outcome.

Identity Verification Providers

To fulfil our KYC obligations, ct9 may use specialist third-party identity verification services. These providers process the identity documents you submit on our behalf and return a verification result. They are bound by strict data processing agreements and are not permitted to use your data for any purpose other than the verification service they provide to ct9.

Legal and Regulatory Disclosure

ct9 may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required to do so, where we have a good-faith belief that such disclosure is necessary to prevent fraud or financial crime, or where disclosure is required to protect the rights and safety of ct9, its players, or the general public.

• Payment partners — transaction data only, to process deposits and withdrawals.
• Game providers — session identifiers only, to enable gameplay.
• KYC verification services — identity documents only, to verify eligibility.
• Legal authorities — only when required by law or to prevent serious harm.
• Advertisers or data brokers — never. ct9 does not sell or share data for advertising purposes.
• Unaffiliated third parties — never, without your explicit consent.

Cookies & Tracking

ct9 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how players use the site. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your login session or preferred settings. Cookies are not programs and cannot carry viruses or access other files on your device.

Types of Cookies Used by ct9

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, security tokens	Session / until logout
Functional	Remembering language and display preferences	Up to 12 months
Analytics	Understanding how players navigate and use ct9 (aggregated, anonymised)	Up to 24 months
Security	Fraud detection, bot prevention, suspicious activity monitoring	Session / rolling

Managing Your Cookie Preferences

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain categories, or delete cookies already stored on your device. Please note that disabling strictly necessary cookies will prevent you from logging in to your ct9 account, as these cookies are required for session management and security.

Data Security

ct9 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

Technical Security Measures

• 256-bit SSL/TLS encryption on all data transmitted between your device and ct9 servers.
• Encrypted storage for all personal data and sensitive account information held at rest.
• Role-based access controls ensuring only authorised personnel can access player account data.
• Intrusion detection systems that monitor platform traffic for anomalous patterns in real time.
• Regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Secure password hashing — ct9 never stores your password in plain text.

Organisational Security Measures

Beyond technical controls, ct9 maintains strict internal data handling policies. Access to player data is restricted on a need-to-know basis. All staff and contractors with access to personal data are bound by confidentiality obligations. ct9 conducts regular data protection training for all relevant personnel.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, ct9 will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. We will provide clear information about what data was involved, what steps ct9 has taken in response, and what you can do to protect yourself.

Data Retention

ct9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Once data is no longer needed for those purposes, it is securely deleted or anonymised.

Retention Periods by Data Category

Data Category	Retention Period	Rationale
Account registration data	Duration of account + 5 years after closure	Legal obligation, dispute resolution
KYC / identity documents	Duration of account + 5 years after closure	Anti-money-laundering compliance
Financial transaction records	7 years from transaction date	Financial recordkeeping obligations
Gameplay and betting history	Duration of account + 3 years after closure	Dispute resolution, responsible gaming audit
Support communications	3 years from date of interaction	Quality assurance, dispute evidence
Technical / device logs	90 days rolling	Security monitoring, fraud detection
Marketing consent records	Until consent is withdrawn + 3 years	Evidence of lawful processing basis

Following the expiry of the applicable retention period, personal data is permanently deleted from ct9 systems or rendered irreversibly anonymous so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Your Privacy Rights

As a ct9 player, you have a number of rights with respect to the personal data we hold about you. ct9 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected]. We aim to respond to all data rights requests within 30 calendar days.

Right of Access

You have the right to request a copy of the personal data that ct9 holds about you. This is commonly known as a Subject Access Request (SAR). Upon receiving a verified SAR, ct9 will provide you with a summary of the personal data we hold, the purposes for which it is processed, the categories of third parties with whom it has been shared, and the applicable retention periods.

Right to Rectification

If any of the personal data ct9 holds about you is inaccurate or incomplete, you have the right to request that we correct it. For most account data (such as your email address or mobile number), you can update this directly through your ct9 account settings. For data that you cannot update yourself (such as your registered name following a legal name change), please contact support with supporting documentation.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that ct9 may be required to retain certain data for legal and regulatory reasons even after receiving an erasure request. In such cases, ct9 will inform you of the data that must be retained and the reason for retention.

Right to Restrict Processing

In certain circumstances, you may request that ct9 restrict the processing of your personal data — for example, while a disputed transaction is under investigation. Where processing is restricted, ct9 will continue to store your data but will not process it for other purposes until the restriction is lifted.

Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. If you exercise this right, ct9 will immediately cease processing your data for marketing purposes. You can opt out of marketing communications by contacting [email protected] or using the unsubscribe link in any marketing email.

Policy Updates & Contact

ct9 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, legal requirements, or platform features. When we make material changes to this Privacy Policy, we will publish the updated version on this page with a revised effective date. For significant changes that affect how we use your data, we will notify you directly by email to your registered address prior to the changes taking effect.

Continued Use Constitutes Acceptance

Your continued use of the ct9 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any material change to this Privacy Policy, you should discontinue your use of the ct9 platform and contact support to close your account in accordance with the voluntary account closure procedure described in the ct9 Terms & Conditions.

Contact Our Data Team

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which ct9 handles your personal data, please contact our support team directly. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within one hour during Bangladesh Standard Time (BST, UTC+6) business hours.