1. About This Policy
This Privacy Policy explains how CM999 ("CM999", "we", "us", "our") collects, stores, uses, and shares personal information belonging to players who register and use the CM999 platform at cm999.bet. It applies to all products and services offered by CM999, including sports betting, live casino, Aviator, Baccarat, Ludo Games, the VIP Club, and all promotional activities.
By registering a CM999 account, making a deposit, or otherwise using the platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described here. If you do not agree with any part of this policy, you should not use CM999.
Pakistan Context
CM999 is designed for Pakistani players and all data handling practices are conducted with awareness of Pakistani user expectations around privacy. We do not share your information with any party outside the scope described in this policy, and we do not sell your data under any circumstances.
This policy should be read alongside the CM999 Terms and Conditions and Responsible Gaming documentation, both of which contain additional information about how your account is managed.
2. Data We Collect
CM999 collects personal data from you in three main ways: information you provide directly, information generated by your use of the platform, and information received from third-party payment and identity verification providers.
2.1 Information You Provide Directly
- Full legal name as it appears on your CNIC
- Date of birth
- Pakistani mobile phone number (used for OTP verification)
- Email address
- Residential address
- CNIC number (collected for identity verification at withdrawal stage)
- Payment method details — Easypaisa/JazzCash account numbers, bank IBAN, or card details as applicable
- Your chosen username and password (password stored as an encrypted hash — never in plain text)
- Communications you send to CM999 support, including live chat transcripts and emails
2.2 Information Generated Automatically
- Device information: device type, operating system version, browser type
- IP address and approximate geographic location derived from IP
- Session data: login and logout timestamps, session duration, pages visited
- Betting and gaming activity: all bets placed, games played, stakes, results, and win/loss history
- Deposit and withdrawal transaction records
- VIP point accumulation history
- Bonus and promotion usage records
- Responsible gaming tool settings you have applied to your account
2.3 Information from Third Parties
When you make a payment, CM999 receives confirmation data from payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, and card payment networks. This data confirms that a transaction has been authorised and includes the transaction reference, amount, and the payment method identifier. CM999 does not receive or store full card numbers or full mobile wallet PINs.
Where identity verification is required (typically at the withdrawal stage for accounts that have not previously been verified), CM999 may use a third-party identity verification provider. That provider may cross-reference your CNIC details against official databases to confirm your identity. The result — verified or unverified — is shared with CM999. The underlying database data is not transferred to CM999.
| Data Category |
Examples |
How Collected |
| Identity | Name, CNIC, date of birth | Registration form / verification |
| Contact | Mobile number, email, address | Registration form |
| Financial | Payment method IDs, transaction records | Deposit / withdrawal flow |
| Behavioural | Bets, game sessions, login times | Automatically from platform usage |
| Technical | IP address, device type, browser | Automatically from your device |
| Communications | Support chat, emails | When you contact CM999 |
3. How We Use Your Data
CM999 uses the personal data it holds to operate the platform, comply with legal obligations, prevent fraud, and (with your consent) communicate relevant offers to you. Here is a breakdown of each use:
3.1 Operating Your Account
Your name, mobile number, email, and password are necessary to create and maintain your CM999 account. Without this data, we cannot register you, process your bets, credit your winnings, or provide customer support. This is the core purpose of the data collection and represents the primary use of your information.
3.2 Processing Deposits and Withdrawals
Financial data and payment method identifiers are used solely to process your PKR transactions — deposits from and withdrawals to your chosen payment method. CM999 never uses your financial data for any purpose beyond completing the transaction you have requested.
3.3 Identity Verification and Fraud Prevention
CNIC and identity documents are collected and verified to confirm that account holders are real individuals aged 18 or above. This process protects all CM999 players by preventing fraudulent accounts from operating on the platform. Transaction monitoring data is analysed to identify potentially fraudulent deposit-withdrawal patterns or money laundering indicators, as required by applicable anti-money-laundering obligations.
3.4 Customer Support
When you contact CM999 support by live chat or email, your communication history — including your account details and previous interactions — is accessible to support staff to enable them to assist you effectively. Support conversations are retained for quality assurance and dispute resolution purposes.
3.5 Responsible Gaming
CM999 uses your gaming activity data — session length, betting frequency, deposit patterns, and loss history — to monitor for signs of problem gambling. If our systems identify patterns that may indicate disordered gaming, we may proactively reach out to you with information about responsible gaming tools or apply safeguards as required by our responsible gaming obligations. See Section 12 for more detail on this specific use.
3.6 Promotions and VIP Club
Your betting activity and deposit history are used to calculate VIP points, determine your VIP tier, calculate weekly cashback, and establish eligibility for bonuses and promotions. This is necessary to operate the CM999 loyalty programme.
3.7 Marketing Communications
CM999 may send you promotional communications — about offers, tournaments, new features, and relevant platform news — by SMS, email, or push notification. We will only do this if you have given us your consent to receive marketing. You can withdraw this consent at any time by updating your account notification settings or by emailing support@cm999.bet. Withdrawing marketing consent does not affect your ability to use CM999 or receive service-related notifications about your account.
4. Legal Basis for Processing
CM999 processes your personal data on the following legal grounds:
- Contract performance: Most data processing is necessary to operate your CM999 account and fulfil the services you have registered for — this is the primary basis for processing identity, contact, financial, and behavioural data.
- Legal obligation: Identity verification, transaction monitoring, and record retention are required by anti-money-laundering obligations and age-verification requirements applicable to gaming platforms.
- Legitimate interest: Fraud detection, security monitoring, and responsible gaming analysis are conducted on the basis of CM999's legitimate interest in maintaining a safe and fair platform for all players.
- Consent: Marketing communications are sent only on the basis of your consent, given at registration or subsequently through account settings. This consent can be withdrawn at any time.
5. Cookies and Tracking Technologies
CM999 uses cookies and similar technologies on the platform to maintain your session (keeping you logged in between pages), remember your preferences, and analyse how the platform is used so we can improve it.
5.1 Types of Cookies
- Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without preventing access to CM999.
- Functional cookies: Remember your preferences such as language, display settings, and recently viewed sections of the platform.
- Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform — which pages are visited most, where sessions end, how long bets take to place. This data is used to improve the CM999 user experience. It does not identify you individually.
5.2 Managing Cookies
You can control non-essential cookies through your browser settings. Please be aware that disabling all cookies may affect your ability to use certain CM999 features, including staying logged in across page loads. CM999 does not use third-party advertising networks or targeting cookies.
No Ad Tracking
CM999 does not use advertising network cookies, retargeting pixels, or any tracking technology that shares your data with external advertisers. Your browsing activity on CM999 stays on CM999.
6. Who We Share Your Data With
CM999 does not sell, rent, or trade your personal data. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for each purpose.
6.1 Payment Processors
To process deposits and withdrawals, CM999 shares necessary transaction data — your registered payment method identifier, PKR amount, and transaction reference — with the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, or Visa/Mastercard processing networks). These providers are contractually bound to use your data only to process the transaction and are not authorised to use it for any other purpose.
6.2 Identity Verification Partners
Where required, CM999 engages a third-party identity verification provider to confirm that account holders are genuine and of legal age. Your identity documents and CNIC data may be shared with this provider for verification purposes only. The provider does not retain your data beyond the verification process.
6.3 Technology and Platform Providers
CM999 uses third-party technology providers for services including cloud hosting infrastructure, game software providers, live dealer streaming, and customer support tooling. These providers may process your data as part of delivering their services to CM999, but do so under strict data processing agreements that prohibit use of your data for any independent purpose.
6.4 Legal and Regulatory Disclosure
CM999 may disclose personal data to law enforcement, regulatory bodies, or other government authorities where we are legally required to do so. We do not make such disclosures voluntarily and will disclose only what is specifically required by the applicable legal process or regulatory direction.
No Sale of Data
CM999 will never sell your personal data to marketing companies, data brokers, or any other third party for commercial gain. This is an absolute commitment — not a conditional one.
7. Data Retention
CM999 retains your personal data only for as long as it is needed for the purposes described in this policy or as required by applicable legal obligations.
- Active account data: Retained for the full duration your CM999 account is active.
- Financial transaction records: Retained for a minimum of five years from the date of the transaction to satisfy anti-money-laundering record-keeping requirements.
- Identity verification documents: Retained for a minimum of five years from account closure or last transaction, whichever is later.
- Betting and gaming history: Retained for five years to support dispute resolution and responsible gaming monitoring.
- Customer support communications: Retained for three years from the date of the communication.
- Analytics data: Retained in anonymised, aggregated form indefinitely. No individual player is identifiable in retained analytics data.
When retention periods expire, data is securely deleted or irreversibly anonymised. You may request early deletion of your data under the rights described in Section 9, subject to the limitations described there.
8. Security Measures
CM999 takes the security of your personal data seriously and implements both technical and organisational measures to protect it from unauthorised access, loss, alteration, or disclosure.
8.1 Technical Measures
- All data in transit between your device and CM999 is encrypted using TLS (Transport Layer Security), the same technology used by banks.
- Passwords are stored as salted cryptographic hashes — the original password is never stored and cannot be recovered, only reset.
- Payment method details (full card numbers, wallet PINs) are never stored on CM999 servers — only tokenised references provided by payment processors.
- CM999 infrastructure uses firewalls, intrusion detection systems, and regular security scanning.
- Database access is restricted to authorised personnel only, with full access logging.
8.2 Organisational Measures
- Access to player personal data is restricted to CM999 staff who require it to perform their specific role.
- Staff with access to personal data receive regular privacy and security training.
- CM999 has a documented data breach response procedure. In the event of a breach that affects your data, we will notify you as required by applicable law.
Your Responsibility
CM999 cannot protect data that you disclose to third parties. Keep your CM999 login credentials — username, password, and OTP codes — confidential. Do not share them with anyone, including people claiming to be CM999 support staff. CM999 support will never ask for your password.
9. Your Rights Over Your Data
As a CM999 player, you have the following rights regarding your personal data. To exercise any of these rights, contact CM999 at support@cm999.bet. We aim to respond to all rights requests within 30 days.
Right to Access
Request a copy of all personal data CM999 holds about you. We will provide it in a readable format within 30 days.
Right to Correction
Request correction of inaccurate personal data. For name or CNIC corrections, supporting documentation may be required.
Right to Deletion
Request deletion of your personal data. Note: legal retention obligations (e.g., financial records) may prevent complete deletion.
Right to Portability
Request your personal data in a structured, machine-readable format for transfer to another service.
Right to Object
Object to processing of your data for direct marketing at any time. Processing for contract or legal obligation purposes cannot be objected to.
Right to Restriction
Request that CM999 restricts processing of your data while a correction or objection request is being assessed.
CM999 will not charge a fee for exercising any of these rights. If a request is clearly unfounded or repetitive, we may charge a reasonable fee or decline, and will explain our reasoning. Deletion requests will be actioned as fully as legal retention obligations permit — financial and identity records subject to regulatory retention periods cannot be deleted ahead of those periods.
10. Children's Privacy
CM999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If CM999 becomes aware that a person under 18 has registered an account or provided personal data, that account will be suspended immediately and all personal data associated with it will be deleted, except where retention is required for record-keeping related to the detection of the underage access.
If you believe a minor has accessed CM999 — whether through your own device, shared credentials, or otherwise — please contact support@cm999.bet immediately. We will act swiftly on any such report.
Parental Controls
If you share a device with children or teenagers, please use device-level parental controls to restrict access to cm999.bet. CM999 cannot provide a technical barrier to access from shared devices — this is the responsibility of the device owner.
11. Third-Party Links
CM999 does not include links to external third-party websites in its main platform. If any third-party link ever appears on CM999, clicking it will take you away from cm999.bet to a website that is not operated by or affiliated with CM999. This Privacy Policy does not govern the data practices of any third-party website. CM999 accepts no responsibility for the privacy practices of third parties, and recommends that you read the privacy policy of any external website before providing personal information to it.
12. Responsible Gaming and Your Data
CM999 uses your personal data in specific ways to support responsible gaming — both at your individual request and proactively. This is a permitted use of your data under our legitimate interest in protecting player welfare.
The responsible gaming tools available to you — deposit limits, wagering limits, session reminders, cooling-off periods, and self-exclusion — are recorded in your account settings and enforced by CM999's systems. When you set a deposit limit, that limit data is stored and applied to every subsequent deposit. When you activate self-exclusion, your account exclusion status is stored and prevents login for the duration of the exclusion period.
CM999 also monitors account-level behavioural data — specifically patterns of increasing deposit frequency, escalating bet sizes, extended single sessions, or rapid loss cycles — as part of our responsible gaming obligations. If these patterns are detected, CM999 may contact you with information about responsible gaming resources or, in serious cases, apply protective measures to your account. This monitoring does not involve sharing your data with any third party.
Full information about responsible gaming tools available at CM999 is on the Responsible Gaming page.
13. Changes to This Privacy Policy
CM999 may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. For material changes — those that significantly affect how we collect or use your data — we will also notify registered players by email ahead of the change taking effect, giving you an opportunity to review the updated policy before it applies to you.
Continued use of CM999 after a policy update is published (and, for material changes, after the effective date communicated by email) constitutes your acceptance of the revised terms. If you do not agree with a change, you should contact CM999 at support@cm999.bet to discuss your options, which include account closure.
14. Contact Us About Privacy
For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy concern, please contact CM999 directly:
- Email: support@cm999.bet (mark your subject line "Privacy Request" for faster routing)
- Live Chat: Available 24/7 on cm999.bet
- VIP Account Manager: Gold tier and above members can raise privacy requests directly with their account manager
CM999 aims to acknowledge all privacy requests within 48 hours and to resolve them within 30 days. For complex requests — particularly deletion requests that require cross-referencing with legal retention obligations — we may need up to 60 days and will communicate this to you with an explanation.
If you are not satisfied with how CM999 has handled your privacy concern, you have the right to raise a complaint with the appropriate data protection authority in your jurisdiction.
