ccn9 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

The data controller responsible for the personal information of ccn9 players is the ccn9 operating entity, which owns and operates the online gaming platform accessible at ccn9.bid. As data controller, ccn9 determines the purposes for which your personal data is processed and the means by which that processing occurs.

ccn9 processes player data in accordance with its international gaming licence conditions, which incorporate data protection requirements consistent with internationally recognised standards for the handling of personal information in the online gaming sector.

ccn9 collects the following categories of personal data from players. The specific data collected may vary depending on the services you use and the account verification stage you have reached.

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (for mandatory age verification — players must be 21 or above);
• National Identity Card (CNIC) number or passport number;
• Chosen ccn9 username;
• Gender (optional, for personalisation purposes).

2.2 Contact Data

• Pakistani mobile number (03XX format), used as primary account identifier and for OTP verification;
• Email address (optional secondary contact, used for account communications and promotional opt-ins);
• City or province of residence (Karachi, Lahore, Islamabad, Faisalabad, etc.) for service localisation.

2.3 Financial & Payment Data

• JazzCash or EasyPaisa mobile wallet number registered to your account;
• HBL, UBL, or Meezan Bank account identifiers used for payment processing;
• Visa or Mastercard partial card number (last 4 digits) and expiry date for payment record purposes;
• Deposit and withdrawal transaction records, including amounts in PKR, dates, and payment method used;
• Source of funds declarations (required for high-value accounts under AML obligations).

2.4 Gaming & Betting Activity Data

• Complete bet history, including markets selected, stake amounts in PKR, odds accepted, and settlement outcomes;
• Casino game session records, including game titles, session duration, bet amounts, and results;
• Bonus activations, wagering progress, and bonus settlement records;
• VIP tier status and loyalty point accumulation history.

2.5 Technical & Device Data

• IP address and approximate geolocation at the time of login and during active sessions;
• Device type, operating system, and browser version used to access the ccn9 Platform;
• Session timestamps, login history, and activity logs;
• Cookie identifiers and similar tracking technologies (see Section 7).

2.6 Communications Data

• Records of support interactions, including live chat transcripts and email correspondence;
• Complaint and dispute records, including submissions, responses, and resolutions;
• Survey responses and feedback submissions, where voluntarily provided.

ccn9 collects your personal data through the following channels and mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or complete any form on the ccn9 Platform;
• Automatically during Platform use: Our servers and analytics infrastructure automatically collect technical and session data when you access ccn9, including device identifiers, IP addresses, page visit sequences, and event logs;
• From payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard, ccn9 receives transaction confirmation data from these payment service providers;
• From identity verification partners: Where ccn9 uses third-party identity verification services to support KYC processes, those services may share verification outcomes and associated identity data with ccn9;
• From fraud prevention services: ccn9 may receive risk signals and flagging data from third-party fraud prevention and anti-money-laundering screening services as part of its compliance obligations;
• From cookies and tracking technologies: As described in Section 7 of this Privacy Policy.

ccn9 processes your personal data on the following legal grounds, as applicable to each category of processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the ccn9 Terms and Conditions — including account creation, payment processing, game operation, and customer support;
• Legal obligation: Processing required to comply with ccn9's licensing conditions, anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and other applicable regulatory duties;
• Legitimate interests: Processing conducted for ccn9's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming compliance — where such interests are not overridden by your fundamental rights;
• Consent: Processing for optional purposes where we have obtained your explicit consent — including marketing communications and certain analytics activities. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ccn9 uses the personal data described in Section 2 for the following specific purposes:

5.1 Account & Service Delivery

• Creating and maintaining your ccn9 account;
• Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard;
• Providing access to sports betting, live casino, slots, and other ccn9 gaming products;
• Administering promotions, bonuses, and VIP programme benefits;
• Delivering customer support in English and Urdu.

5.2 Compliance & Security

• Verifying your age (21+ requirement) and identity as required by our licensing obligations;
• Conducting anti-money laundering screening and fraud prevention checks;
• Maintaining gaming session logs for dispute resolution and audit purposes;
• Detecting and preventing unauthorised account access, multi-accounting, and bonus abuse.

5.3 Responsible Gaming

• Monitoring gaming behaviour to identify indicators of problem gambling;
• Applying and tracking deposit limits, loss limits, session controls, and self-exclusion instructions;
• Proactively contacting players where our systems identify sustained high-risk gambling patterns.

5.4 Platform Improvement

• Analysing aggregated, anonymised player behaviour data to improve the ccn9 Platform's performance, reliability, and user experience;
• Conducting internal research into product features, game popularity, and payment method preferences among Pakistani players.

5.5 Marketing Communications (with consent)

• Sending promotional SMS notifications about new bonuses, PSL betting offers, and platform features, where you have opted in to receive such communications;
• Personalising promotional content based on your gaming preferences and activity history, subject to your consent settings.

ccn9 does not sell your personal data. We share your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the minimum transactional data necessary to process your deposits and withdrawals. These providers are bound by their own data protection obligations;
• Identity verification providers: Third-party KYC and identity verification services receive identity document data to support age and identity verification required by our licensing conditions;
• AML & fraud prevention services: Regulated fraud screening and anti-money laundering services receive transactional risk data to support compliance with international AML obligations;
• Game software providers: Certified game developers and live casino operators receive the minimum session and bet data necessary to operate their games within the ccn9 Platform;
• Legal and regulatory authorities: ccn9 will disclose personal data to law enforcement agencies, gaming regulators, or other public authorities where required by law, by court order, or by our international licensing conditions;
• Professional advisers: Legal counsel, auditors, and compliance advisers may access player data on a strictly confidential and need-to-know basis as part of ccn9's professional advisory relationships.

ccn9 uses cookies and similar tracking technologies on the ccn9 Platform. Cookies are small data files stored on your device that enable certain Platform functions and help ccn9 understand how the Platform is being used.

7.1 Types of Cookies ccn9 Uses

• Strictly necessary cookies: Essential for the Platform to function — including session management, login persistence, and security token storage. These cannot be disabled without rendering the Platform non-functional;
• Functional cookies: Remember your preferences such as display language, preferred payment method, and responsible gaming settings across sessions;
• Analytics cookies: Collect anonymised data about how Pakistani players navigate and use the ccn9 Platform, enabling us to identify performance issues and improve the user experience. These are used with consent;
• Security cookies: Support fraud detection and prevention functions, including IP anomaly detection and session integrity verification.

7.2 Managing Cookies

You may manage non-essential cookies through your browser settings. Most modern browsers — Chrome, Firefox, Safari, and the built-in browsers on Android and iOS devices — allow you to view, manage, and delete cookies. Disabling strictly necessary cookies will impair or prevent your ability to use the ccn9 Platform. For analytics cookies, you may also opt out through the ccn9 account settings panel.

ccn9 retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a legal obligation requires longer retention:

• Account and identity data: Retained for the duration of your active account plus 7 years following account closure, in accordance with international AML record-keeping requirements applicable to ccn9's licensing conditions;
• Financial transaction records: Retained for 7 years from the date of each transaction, consistent with financial record-keeping obligations under ccn9's licensing framework;
• Gaming session and bet records: Retained for 5 years from the date of each session or bet, for dispute resolution, regulatory audit, and responsible gaming monitoring purposes;
• Customer support communications: Retained for 3 years from the date of each interaction, to support complaint handling and service quality management;
• Marketing consent records: Retained for 3 years from the date of consent withdrawal or account closure, whichever is later, to demonstrate compliance with consent requirements;
• Technical and device logs: Retained for 12 months from the date of generation, for security and fraud prevention purposes.

As a ccn9 player, you hold the following rights in respect of the personal data ccn9 holds about you. To exercise any of these rights, contact ccn9 support at [email protected] with the subject line "Data Rights Request". ccn9 will respond within 30 days.

Please note that some rights are subject to limitations under applicable law — for example, ccn9 cannot delete data that it is legally required to retain under its licensing and AML obligations. Where ccn9 declines to fulfil a data rights request, we will explain the reasons in writing.

ccn9 operates as an internationally licensed platform and may process or store personal data on servers located outside Pakistan. Where personal data is transferred to countries that do not provide equivalent data protection standards to those applicable under ccn9's licensing framework, ccn9 implements appropriate safeguards to ensure your data remains protected.

Such safeguards include contractual data processing agreements with all international data processors, incorporating standard data protection clauses, and technical security measures equivalent to those applied within ccn9's primary infrastructure. Third-party providers who receive data transfers are required to comply with data protection standards at least equivalent to those described in this Privacy Policy.

The ccn9 Platform is strictly for adults aged 21 and above. ccn9 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the ccn9 registration process, and ccn9 may request documentary proof of age (CNIC, passport) at any stage of the account lifecycle.

If ccn9 discovers that an account has been registered by a person under the age of 21, the account will be permanently closed immediately, all funds in the account will be returned to the source payment method (where legally permissible), and all personal data associated with the underage account will be deleted except to the extent that retention is required for legal or regulatory purposes.

ccn9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction:

• All data transmitted between your device and the ccn9 Platform is encrypted using Transport Layer Security (TLS) with 256-bit encryption;
• Personal data stored on ccn9's infrastructure is encrypted at rest using AES-256 encryption;
• Access to player data within ccn9 is controlled on a role-based, need-to-know basis. All internal access is logged and audited;
• Two-factor authentication (OTP via registered mobile number) is available and strongly encouraged for all ccn9 accounts;
• ccn9's infrastructure undergoes regular independent security penetration testing;
• A 24/7 security monitoring system operates across ccn9's infrastructure, with automated detection and response protocols for anomalous access patterns;
• In the event of a personal data breach that poses a risk to your rights, ccn9 will notify affected players and the relevant regulatory authority within the timeframes required under our licensing conditions.

The ccn9 Platform does not contain links to third-party websites outside the ccn9 domain for commercial purposes. Where ccn9 links to responsible gaming resources or regulatory information as part of its licensing obligations, those third-party sites operate under their own independent privacy policies, over which ccn9 has no control or responsibility. ccn9 encourages you to review the privacy policies of any third-party sites you visit independently of the ccn9 Platform.

ccn9 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, or changes in our licensing conditions. Where updates are material — meaning they significantly affect how we use your personal data or the rights available to you — ccn9 will notify registered players via SMS to their registered mobile number and/or by prominent notice on the ccn9 Platform prior to the changes taking effect.

The date of the most recent update is displayed prominently at the top of this Privacy Policy. Continued use of the ccn9 Platform following a notified update constitutes your acknowledgement of the updated policy. If you do not agree to an updated Privacy Policy, please contact ccn9 support to close your account before the update takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 9, or wish to raise a complaint about ccn9's data practices, please contact us through the following channels:

• Live Chat: Available 24/7 within the ccn9 Platform — our support team handles privacy queries in English and Urdu. Average response under 4 minutes;
• Email: [email protected] — subject line "Privacy Policy Query" or "Data Rights Request". Responses within 5 business days;
• Data breach reports: [email protected] — subject line "Security / Data Breach". We treat these reports with the highest urgency.

If you are not satisfied with ccn9's response to a privacy complaint, you may escalate your complaint to the relevant data protection authority in the jurisdiction specified under ccn9's international gaming licence, or to any data protection supervisory authority with jurisdiction over your rights as a Pakistani player.