99ab Privacy Policy – Your Data, Your Rights, Our Commitment

99ab operates the online betting and gaming platform accessible at 99ab.online, serving players across Pakistan. For the purposes of this Privacy Policy, 99ab acts as the data controller — meaning we are responsible for deciding how your personal data is collected and used.

99ab is designed specifically for the Pakistani market. All player accounts, transactions, and communications are managed in Pakistani Rupees (PKR) using Pakistani payment infrastructure including Easypaisa, JazzCash, NayaPay, SadaPay, and local bank transfer methods. This local focus shapes how we approach data collection — we only need, and only collect, what is relevant to providing our services to players in Pakistan.

If you have any questions about this Privacy Policy or about how 99ab handles your data, contact us at support@99ab.online or via the 24/7 live chat within the platform.

99ab collects personal data across three broad categories: information you provide directly, information generated by your use of the platform, and information received from third parties for verification purposes.

Information you provide directly:

• Full legal name, date of birth, and gender as entered during registration
• Pakistani mobile number used as your primary account identifier and for two-factor authentication
• Email address (where provided)
• CNIC (Computerised National Identity Card) number and a copy of your CNIC, collected as part of the KYC (Know Your Customer) verification process required before withdrawals are processed
• Payment method details including Easypaisa or JazzCash mobile wallet number, NayaPay or SadaPay account details, bank account details for IBFT, or Visa/Mastercard card details as applicable to your chosen deposit method
• Proof of address documents submitted during enhanced KYC, such as a utility bill or recent bank/mobile wallet statement
• Communications with our support team including live chat transcripts, emails, and support ticket content

Information generated by platform use:

• Login timestamps, session durations, and device/browser information
• IP address and approximate geographic location derived from IP
• Betting and gaming activity including markets accessed, bet amounts, outcomes, and game history
• Deposit and withdrawal transaction history
• Responsible gaming settings and any self-exclusion or deposit limit requests you make
• Promotional offer claims and wagering progress

Information from third parties:

• Identity and age verification data from third-party KYC service providers used to validate the documents you submit
• Fraud screening data from payment processors when transactions are reviewed for security purposes
• Publicly available information used to comply with anti-money laundering screening requirements

99ab uses the data collected for the following specific purposes:

• Account creation and management: Your registration details are used to create and maintain your 99ab account, verify your identity, and authenticate your logins.
• Processing transactions: Payment method details are used solely to process deposits and withdrawals in PKR. Transaction data is retained for financial record-keeping and dispute resolution.
• KYC and regulatory compliance: Identity documents are used to verify that you meet the 18+ age requirement and to comply with applicable anti-money laundering (AML) obligations. KYC data is handled with the highest level of security and access restriction.
• Responsible gaming: Betting activity, session data, and deposit history are monitored to identify patterns that may indicate problem gambling. This enables 99ab to apply responsible gaming interventions proactively and to honour any deposit limits or self-exclusion requests you make.
• Fraud and security: IP addresses, device information, and transaction patterns are analysed to detect and prevent fraudulent activity, bonus abuse, and security breaches.
• Customer support: Communications data is used to resolve your support queries, investigate complaints, and improve our support processes.
• Platform improvement: Aggregated, anonymised usage data helps us understand how players use 99ab so we can improve features, fix issues, and develop new services. This analysis does not involve identifying individual players.
• Promotions and communications: If you have opted in to receive communications, we may use your mobile number or email to notify you of relevant promotions at 99ab. You can opt out of marketing communications at any time by contacting support.

99ab processes your personal data under the following legal bases:

• Contractual necessity: Processing your registration data, payment information, and betting activity is necessary to deliver the 99ab service you have signed up for. Without this data, we cannot provide an account, process your deposits, settle your bets, or pay your winnings.
• Legal obligation: KYC verification, AML screening, transaction record-keeping, and age verification are legally required activities. We must process certain data to comply with these obligations regardless of your individual preferences.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and technical troubleshooting are carried out on the basis of 99ab's legitimate interest in maintaining a safe, fair, and sustainable platform for all players.
• Consent: Marketing communications (SMS notifications about 99ab promotions, for example) are sent only where you have given explicit consent during registration or subsequently. You can withdraw this consent at any time by contacting our support team.

99ab uses cookies and similar tracking technologies on the platform to provide a functional, personalised experience. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These cookies manage your login session, maintain your betting slip, and remember your language and display preferences. They cannot be disabled without breaking core platform functionality.
• Performance cookies: Used to collect anonymised data about how players navigate the 99ab platform — which pages are visited most, where errors occur, and how load times perform. This data is used exclusively for platform improvement and does not identify individual users.
• Security cookies: Used to detect unusual login patterns, prevent session hijacking, and support our fraud detection systems.
• Preference cookies: Used to remember settings you have chosen on 99ab, such as your preferred odds format or responsible gaming limits, so you do not have to re-enter them each session.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the 99ab platform normally.

99ab does not sell your personal data. We share your data only in the following limited, controlled circumstances:

• Payment processors: Your payment method details are shared with the relevant payment service provider (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, or card networks) solely for the purpose of processing your transaction. These providers are contractually bound to handle your data securely and not use it for any other purpose.
• KYC verification providers: Your identity documents are shared with specialist third-party KYC service providers who validate their authenticity. These providers operate under strict data processing agreements and are prohibited from using your data beyond the scope of verification.
• Fraud prevention services: Transaction data and device identifiers may be shared with fraud screening services to protect the platform and other players from fraudulent activity.
• Legal and regulatory authorities: 99ab will disclose personal data where required to do so by applicable law, court order, or regulatory request. Where permitted by law, we will notify you of such a disclosure.
• Casino game providers: Where you play live dealer or third-party casino games, limited session data (such as bet amounts and game outcomes) may be shared with the game provider for the purpose of delivering and settling the game. These providers are not permitted to use this data for marketing or profiling.

All third parties who receive personal data from 99ab are subject to contractual data processing agreements requiring them to handle your data securely, use it only for the specified purpose, and not share it further without authorisation.

99ab retains your personal data for as long as is necessary to provide our services and meet our legal obligations. The following specific retention periods apply:

• Active account data: Retained for the duration of your account and for a period of five years after account closure, to comply with financial record-keeping and AML requirements.
• KYC documents: CNIC copies and address verification documents are retained for five years from the date of your last transaction, as required by applicable financial regulations.
• Transaction history: Deposit and withdrawal records are retained for seven years from the date of each transaction in accordance with standard financial record-keeping obligations.
• Support communications: Live chat and email records with our support team are retained for two years from the date of the last communication in a thread, for quality assurance and dispute resolution purposes.
• Marketing consent records: If you have consented to receive marketing communications, a record of that consent is retained for as long as we continue to send you marketing material and for one year after you withdraw consent.

When data reaches the end of its retention period, it is securely and permanently deleted from 99ab's active systems. Backups are overwritten on the applicable backup rotation schedule.

Protecting your data is a genuine operational priority at 99ab, not a box-ticking exercise. The following technical and organisational measures are in place:

• All data in transit between your device and 99ab is encrypted using 256-bit TLS/SSL.
• Data at rest on 99ab servers is encrypted using AES-256 encryption.
• Access to player data within 99ab is strictly role-based. Each staff member can only access the categories of data relevant to their specific function. All access is logged.
• Two-factor authentication is available to all players and is strongly recommended for account security.
• 99ab's systems are subject to regular security testing and vulnerability assessments.
• All staff with access to player data receive data protection and information security training.
• Payment card details are never stored on 99ab's servers. Card transactions are processed by PCI-DSS compliant payment processors.

As a player at 99ab, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@99ab.online or via live chat. We will respond within 30 days.

99ab is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered at 99ab using false age information, please contact us immediately at support@99ab.online. We will investigate and close the account, returning any deposited funds to the original payment source after confirming the account holder's age.

Our KYC process is specifically designed to catch underage registrations. CNIC verification confirms date of birth for all players who request a withdrawal. Any account where the CNIC indicates the player is under 18 will be closed immediately, regardless of whether prior verification was bypassed during registration.

The 99ab platform does not contain links to external third-party websites. All navigation within the platform stays within 99ab.online. However, third-party casino game providers whose games are embedded within the platform operate their own technical environments. When you launch a live dealer or third-party slot game, limited game session data is processed within that provider's infrastructure under their own data handling practices.

99ab vets all casino game providers for data security standards before they are integrated into the platform. We require that these providers are bound by contractual data processing agreements consistent with the standards in this Privacy Policy. However, 99ab cannot be responsible for the independent data practices of third-party game providers beyond the scope of those agreements.

99ab reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable regulations, or the services we offer. When material changes are made, we will notify registered players via their registered mobile number or email address with at least seven days' advance notice before the updated policy takes effect.

The date of the most recent update is shown at the top of this page. Continuing to use 99ab after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you disagree with any update to this policy, you have the right to close your account before the changes take effect.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a complaint about how 99ab has handled your personal information, please get in touch through any of the following channels:

• Email: support@99ab.online — for detailed data access requests, deletion requests, or formal privacy complaints
• Live Chat: Available 24/7 within the 99ab platform — for quick queries about your data or account privacy settings
• Response time: We aim to acknowledge all privacy-related requests within 48 hours and resolve them within 30 days

If you are not satisfied with how 99ab has responded to your privacy concern after raising it through our internal process, you have the right to escalate your complaint to the appropriate regulatory authority in your jurisdiction. Details of how to do this will be provided in our response to your initial complaint.

For responsible gaming concerns specifically — including self-exclusion requests, deposit limit queries, or gambling-related support — please visit our Responsible Gaming page where full information and tool access are available.