99ab Privacy Policy — How We
Protect Your Personal Data

This Privacy Policy sets out how 99ab ("we," "us," "our," or "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals who register for an account, browse the website, or interact with 99ab in any capacity ("you," "your," or "Player").

99ab is committed to protecting the privacy and personal data of all its users. As an online gaming platform operating under an international gaming license and serving players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Multan, Peshawar, and other cities — we recognise the importance of handling personal information responsibly, securely, and in full compliance with the data protection requirements imposed by our licensing authority.

This Privacy Policy applies to all data collected through the 99ab website, mobile browser, and any related communications (including live chat and email correspondence with our support team).

The data controller for the purposes of this Privacy Policy is the company that operates the 99ab platform under its international gaming license ("the Company"). The Company is responsible for determining the purposes and means of processing your personal data and is accountable for complying with all applicable data protection obligations imposed by the licensing authority.

For all privacy-related enquiries, requests, or complaints, you may contact the 99ab data protection team at [email protected] or via live chat available 24/7 on the platform.

99ab collects the following categories of personal data from Players. The specific data collected depends on the nature of your interaction with the platform:

99ab processes your personal data for the following specific purposes:

• Account Management: To create and maintain your 99ab account, authenticate your login sessions, and manage your PKR wallet balance.
• Identity Verification: To complete KYC checks as required by our international gaming license. This includes verifying your age (21+ requirement), identity, and residential address before processing withdrawals.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to your verified payment method.
• Gaming Services: To deliver the 99ab gaming experience — including cricket betting, live casino, and slot games — and to settle bets, calculate winnings, and credit payouts.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as outlined in our Terms and Conditions.
• Responsible Gaming: To enforce deposit limits, session timers, self-exclusion periods, and reality checks as configured by the Player or required by our licensing conditions.
• Customer Support: To respond to your queries, complaints, and requests submitted through live chat, email, or any other support channel.
• Legal Compliance: To comply with the data retention, anti-money laundering, and reporting obligations imposed by our international gaming license and applicable laws.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the 99ab platform, optimising the user experience, and identifying technical issues.
• Communication: To send you essential account notifications, security alerts, KYC reminders, and, where you have opted in, promotional communications regarding 99ab offers and events.

99ab does not use your personal data for any purpose that is incompatible with those listed above. We do not use Player data for automated decision-making or profiling that produces legal effects on you.

99ab processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and 99ab (your acceptance of our Terms and Conditions). This includes account management, gaming services, and payment processing.
• Legal Obligation: Processing that is necessary to comply with the legal and regulatory obligations imposed on 99ab by its international gaming license — including KYC verification, anti-money laundering (AML) checks, and regulatory reporting.
• Legitimate Interest: Processing that is necessary for 99ab's legitimate business interests, provided those interests do not override your fundamental privacy rights. This includes fraud detection, platform security, and anonymous analytics for service improvement.
• Consent: Where you have given explicit consent — for example, opting in to receive promotional marketing communications. You may withdraw consent at any time by adjusting your notification settings or contacting 99ab support.

99ab does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly as necessary for the purposes described in this policy:

• Payment Processors: JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank) receive only the financial and identity data required to process your deposits and withdrawals.
• KYC & Verification Providers: Third-party identity verification services used to validate CNIC documents and selfie matches during the KYC process. These providers act as data processors under contractual obligations to 99ab.
• Game Providers: Licensed game studios that supply casino and slot content to 99ab receive anonymised session data necessary for game delivery. They do not receive your personal identity information.
• Regulatory Authorities: The licensing body that issued 99ab's international gaming license may request access to Player data during compliance audits or investigations. 99ab is legally obligated to comply with such requests.
• Law Enforcement: 99ab will disclose personal data to law enforcement authorities when required by a valid legal order, court order, or where disclosure is necessary to prevent serious crime, fraud, or harm.
• Professional Advisors: Legal counsel, auditors, and compliance consultants retained by 99ab may access personal data in the course of providing professional services, subject to confidentiality obligations.

All third parties with whom 99ab shares personal data are contractually required to implement appropriate data protection measures and to process your data only for the specific purpose for which it was shared. 99ab does not permit third-party recipients to use your data for their own independent marketing or commercial purposes.

Given that 99ab processes financial transactions in PKR through JazzCash, EasyPaisa, and major Pakistani banks, the handling of payment data warrants specific disclosure:

• Full bank account numbers and mobile wallet account numbers are transmitted via encrypted channels to the relevant payment processor at the time of transaction. 99ab stores only a truncated reference (last four digits) for display purposes in your transaction history.
• JazzCash and EasyPaisa OTP codes used during transactions are not stored by 99ab at any point — they are generated and validated entirely by the mobile wallet provider.
• 99ab does not store complete credit or debit card numbers on its systems. Where card payments are supported, they are processed through PCI DSS-compliant payment gateways.
• Transaction records (amounts, dates, payment method references) are retained for the duration specified in Section 10 of this policy for auditing and compliance purposes.

99ab uses cookies and similar tracking technologies on its website for the following purposes:

• Essential Cookies: Required for the basic functionality of the 99ab platform, including login session management, security tokens, and language preference storage. These cookies cannot be disabled without breaking core platform features.
• Analytics Cookies: Used to collect anonymised, aggregated data about how Players interact with the 99ab website — including page views, session duration, navigation paths, and device types. This data is used to improve the platform experience and does not identify individual users.
• Preference Cookies: Used to remember your settings, such as preferred display options and recently played games, to provide a personalised experience when you return to 99ab.

99ab does not use advertising or retargeting cookies. We do not serve third-party advertising on the platform and do not share cookie data with advertising networks.

Most web browsers allow you to manage cookie preferences through browser settings. Disabling essential cookies may prevent you from logging in to your 99ab account or using certain platform features.

99ab implements the following technical and organisational measures to protect your personal data:

• Encryption: All data transmitted between your device and 99ab is protected by 256-bit SSL/TLS encryption. Data at rest is encrypted using AES-256 standard.
• Access Controls: Personal data is accessible only to authorised personnel on a need-to-know basis. Different teams (support, payments, compliance) have access only to the data categories relevant to their function.
• Two-Factor Authentication: Player accounts support 2FA via SMS to Pakistani mobile numbers (Jazz, Zong, Ufone, Telenor), adding an additional layer of protection beyond passwords.
• Intrusion Detection: 99ab employs automated intrusion detection and prevention systems to monitor for unauthorized access attempts, data breaches, and suspicious activity.
• Regular Audits: Security and data protection practices are audited regularly as a condition of 99ab's international gaming license. Audit findings are acted upon promptly.
• Incident Response: 99ab maintains a data breach response plan that includes immediate containment, impact assessment, notification of affected Players within 72 hours (where required by licensing conditions), and reporting to the relevant regulatory authority.

While 99ab takes all reasonable measures to protect your data, no system of electronic storage or transmission over the internet is 100% secure. 99ab cannot guarantee absolute security and encourages Players to take their own precautions — including using strong, unique passwords and enabling 2FA on their 99ab accounts.

99ab retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations:

• Active Accounts: All personal data associated with your 99ab account is retained for the duration of the account's active status.
• Closed Accounts: Following voluntary account closure or suspension, 99ab retains identity data, financial records, and gaming activity data for a minimum of five (5) years to comply with anti-money laundering record-keeping requirements imposed by our gaming license.
• KYC Documentation: Copies of identity documents submitted during KYC are retained for a minimum of five (5) years following account closure.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction.
• Technical & Analytics Data: Anonymised analytics data (which cannot identify individual users) may be retained indefinitely for platform improvement purposes.

After the applicable retention period, personal data is permanently deleted from all active systems and, within a reasonable period thereafter, from backup systems. Anonymised data that cannot be linked to any individual is not subject to deletion requirements.

As a 99ab Player, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data 99ab holds about you. We will provide this within 30 calendar days of receiving a valid request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. You can update most information directly through your 99ab account settings; for changes requiring verification (e.g., legal name), contact support.
• Right to Erasure: You may request deletion of your personal data, subject to the legal retention obligations described in Section 10. Where retention is legally required, 99ab will inform you of the specific reason and expected retention end date.
• Right to Restriction: You may request that 99ab restricts the processing of your data while a dispute or enquiry is being resolved.
• Right to Object: You may object to the processing of your personal data where 99ab relies on legitimate interest as the legal basis. 99ab will cease processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Data Portability: You may request that 99ab provides your personal data in a structured, machine-readable format for transfer to another service, where technically feasible.

To exercise any of these rights, contact 99ab at [email protected] or via live chat. You will be required to verify your identity before any data request is processed. 99ab does not charge a fee for the first request in any 12-month period; repeated or manifestly excessive requests may incur a reasonable administrative charge.

99ab's services are strictly intended for individuals aged 21 years and above. The platform does not knowingly collect or process the personal data of any person under the age of 21. If 99ab becomes aware that an account has been registered by or on behalf of a minor, the following actions will be taken immediately:

• The account will be permanently closed with no right of re-registration.
• All personal data associated with the account will be deleted within 30 days, subject only to any legal obligation to retain records of the incident.
• All deposited funds will be returned to the originating payment method where possible. Winnings and bonus funds will be voided.
• The incident may be reported to relevant authorities if required by our licensing conditions.

If you believe that 99ab may have inadvertently collected data from a person under 21, please contact us immediately at [email protected].

99ab reserves the right to amend this Privacy Policy at any time. Where changes are material — meaning they affect the scope of data collection, the purposes of processing, or your rights — 99ab will provide notice to registered Players via email or an in-platform notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page indicates the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the 99ab platform after the effective date of any changes constitutes acceptance of the revised policy.

Archived versions of previous Privacy Policy documents are available upon request from 99ab support.

For all enquiries related to this Privacy Policy, your personal data, or any privacy concern, please contact 99ab using the following channels:

• Email: [email protected] — for formal privacy requests, data access requests, and written complaints. Response time: within 48 hours.
• Live Chat: Available 24/7 on any page of the 99ab platform. Our support team can address privacy enquiries in both Urdu and English and can escalate complex requests to the data protection team.

When contacting us regarding a privacy matter, please provide your registered email address or username so that we can locate your account efficiently. You will be asked to verify your identity before any personal data is disclosed or modified.