This Privacy Policy explains what personal data cr999 collects from Pakistani players, why we collect it, how it is used and protected, and the rights available to you regarding your information. cr999 is committed to handling your data with transparency, care, and full accountability.
Six foundational principles that guide how cr999 handles your personal data
All personal data stored by cr999 is protected using 256-bit AES encryption at rest and TLS 1.3 in transit. Your mobile number, payment details, and gaming history are secured at every layer.
cr999 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Your information is used solely to operate and improve the cr999 platform and its services.
Data collected by cr999 is used only for the purposes explicitly described in this Privacy Policy. We do not repurpose data for unrelated activities without obtaining fresh consent from you.
cr999 publishes a complete, plain-English account of every category of data we collect, why we collect it, and with whom it may be shared. No hidden data practices, no fine print surprises.
You have the right to access, correct, delete, and restrict the use of your personal data. cr999 will respond to all data rights requests within 30 days without charge for standard requests.
cr999 retains personal data only for as long as necessary for the stated purpose or as required by applicable law. Data that is no longer needed is securely deleted or anonymised.
cr999 ("we", "us", "the Company", or "cr999") is the operator of the online gaming platform accessible at cr999.club (the "Platform"). cr999 is the data controller responsible for the personal data of players who register accounts, access services, or interact with any feature of the Platform.
This Privacy Policy applies to all personal data collected through the cr999.club website, any associated mobile-optimised interfaces, customer support communications, and all other services delivered under the cr999 brand. It does not apply to third-party websites or services that may be linked from the Platform.
By registering an account on cr999.club and using any of its services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision of this Policy, you should not use the Platform.
cr999 collects personal data through several means — directly from you during registration and account use, automatically through your use of the Platform, and occasionally from third-party payment processors or identity verification providers. The categories of data we collect are as follows:
2.1 Data Provided by You Directly
2.2 Data Collected Automatically
2.3 Data from Third Parties
cr999 uses your personal data for the following purposes. Each purpose is matched to its legal basis in Section 4.
| Purpose | Data Used |
|---|---|
| Creating and managing your cr999 account | Identity, contact, authentication data |
| Processing deposits and withdrawals via JazzCash, EasyPaisa, and bank transfer | Financial data, transaction data |
| Verifying your age and identity (KYC) | Identity data, verification documents |
| Detecting, investigating, and preventing fraud, money laundering, and prohibited conduct | Technical, transaction, location, identity data |
| Providing customer support via live chat and email | Communications data, account data |
| Personalising your gaming experience and displaying relevant content | Usage data, transaction data |
| Responsible gaming monitoring, including early problem gambling detection | Usage data, transaction data, communications data |
| Sending service notifications (deposit confirmations, withdrawal updates, security alerts) | Contact data, transaction data |
| Sending promotional communications where you have consented | Contact data, usage data |
| Complying with legal, regulatory, and licensing obligations | All categories where required by law |
| Improving the Platform through analytics and performance monitoring | Technical data, usage data (aggregated or anonymised where possible) |
cr999 processes personal data on the following legal bases:
Where cr999 relies on legitimate interests as a legal basis, we have conducted and documented a balancing assessment to confirm that our interests do not unduly override your privacy rights.
cr999 does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:
5.1 Payment Processors. Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors as required to process deposits and withdrawals. These processors handle your financial data under their own privacy policies and are bound by contractual data protection obligations with cr999.
5.2 KYC and Identity Verification Providers. Identity documents and verification data may be shared with licensed third-party KYC providers to confirm player age and identity in fulfilment of cr999's licensing obligations. KYC providers are bound by strict data handling agreements.
5.3 Fraud Prevention and AML Services. Technical and transaction data may be shared with third-party fraud detection and anti-money laundering compliance services for the purpose of protecting cr999, its players, and the integrity of the Platform.
5.4 Gaming Software Providers. Where game software is provided by licensed third-party studios, limited technical and session data may be transmitted to those studios as required to operate the games. No financial or identity data is shared with game studios.
5.5 Regulatory and Law Enforcement Authorities. cr999 will disclose personal data to government authorities, regulators, or law enforcement agencies where required by law, court order, or in response to a legally valid demand. cr999 will notify affected players of such disclosures where legally permitted to do so.
5.6 Business Transfers. In the event of a merger, acquisition, or sale of assets involving cr999, personal data held by cr999 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected players will be notified in advance of any such transfer.
cr999 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve performance, and — where you have consented — to personalise your experience. A summary of the cookies used by cr999 is provided below:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Essential | Login sessions, account authentication, security tokens, load balancing | No — necessary for Platform operation |
| Functional | Language preferences, game settings, notification preferences | No — improve user experience |
| Analytics | Page views, session duration, feature usage (aggregated and anonymised) | Yes — subject to consent |
| Responsible Gaming | Session time tracking, responsible gaming tool activation monitoring | No — player safety obligation |
You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in to and use the cr999 Platform. cr999 does not use third-party advertising cookies or permit advertising networks to place cookies on cr999.club.
cr999 implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:
cr999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidance:
Upon expiry of the applicable retention period, cr999 will securely delete or irreversibly anonymise your personal data.
You have the following rights in relation to your personal data held by cr999. To exercise any of these rights, please contact cr999 at [email protected] or via live chat. cr999 will respond to all verified requests within thirty (30) calendar days at no charge for standard requests.
Request a copy of the personal data cr999 holds about you, including what categories of data are processed and for what purposes.
Request correction of inaccurate or incomplete personal data. You may also update basic account information directly from your cr999 dashboard.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations.
Request that cr999 restrict processing of your data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
Request a structured, machine-readable copy of personal data you have provided to cr999, where processing is based on your consent or a contract.
Object to processing carried out on the basis of legitimate interests, including profiling for personalisation or marketing. Marketing opt-outs take effect immediately.
cr999 strictly prohibits the use of its Platform by individuals under the age of 21 years. The Platform is designed and marketed exclusively for adults. cr999 does not knowingly collect personal data from individuals under 21.
Where cr999 becomes aware — through age verification, player reporting, or any other means — that personal data belonging to a person under 21 has been collected, that data will be immediately and securely deleted and the associated account permanently closed.
cr999 operates under an international gaming licence and may process or store personal data on servers located outside Pakistan. Where personal data is transferred to jurisdictions that may not offer the same level of data protection as Pakistan, cr999 implements appropriate safeguards to ensure your data remains protected to the same standard described in this Policy.
Such safeguards may include standard contractual clauses with data processors, binding corporate rules, or reliance on adequacy decisions where applicable. Details of the specific safeguards applied to any international transfer can be requested from cr999 at [email protected].
By using the cr999 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan, subject to the protections described above.
cr999 may send you marketing communications — including promotional SMS messages, bonus offers, and platform updates — where you have provided your explicit consent to receive such communications. Consent is requested at the point of account registration and can be updated at any time from your account settings.
12.1 Opting Out. You may withdraw your consent to marketing communications at any time by:
Withdrawal of marketing consent takes effect within 48 hours. Note that withdrawing marketing consent does not affect your receipt of essential service communications — such as transaction confirmations, security alerts, and responsible gaming notifications — which are sent on the basis of contractual necessity and cannot be opted out of while your account is active.
12.2 Profiling for Marketing. cr999 may use your gaming activity and usage patterns to personalise bonus offers and promotions shown to you. This profiling is carried out on the basis of legitimate interests. You have the right to object to such profiling at any time by contacting cr999 support.
The cr999 Platform may contain links to or integrations with third-party services — including payment processors and game software providers. These third parties operate under their own privacy policies, which cr999 does not control and is not responsible for.
cr999 recommends that you review the privacy policies of any third-party payment service — including JazzCash (Jazz/Warid) and EasyPaisa (Telenor) — before submitting personal data to those services, as their data practices may differ from cr999's.
cr999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.
Where changes are material — affecting your rights or the way cr999 processes your data in a significant way — cr999 will notify you via your registered mobile number or via an on-platform notification at least seven (7) days before the changes take effect. For minor, non-material changes, the updated Policy will be posted on this page without prior notice.
Your continued use of the cr999 Platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material change, you should close your account and request deletion of your personal data before the change takes effect.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how cr999 has handled your personal data, please contact us through the following channels:
cr999 will acknowledge all privacy-related correspondence within 48 hours and provide a full response within thirty (30) calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further 60 days with notice to you.
If you are not satisfied with cr999's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority under cr999's operating jurisdiction. Details of the applicable authority are available from cr999 support on request.
Bank-grade encryption, no data selling, and full transparency — now you know exactly how cr999 handles your personal data. Ready to play?
🔐 Login to cr999 🏢 About cr999