99abb Privacy Policy

1 Who We Are

99abb is an internationally licensed online casino and sports betting platform operating the website accessible at 99abb.bet. The platform offers cricket betting, live casino, slot games, and a range of other wagering products specifically tailored to players in Pakistan and other eligible jurisdictions.

For the purposes of applicable data protection law, 99abb is the data controller in respect of personal data collected through the Platform. This means we are the entity that determines the purposes and means of processing your personal data.

If you have any questions about how we handle your personal information, please refer to Clause 16 (Contact & Complaints) for details of how to reach our Data Protection team directly.

2 Scope of This Policy

This Policy applies to all personal data processed by 99abb in connection with your use of the Platform, including but not limited to:

• Data collected when you register an account on 99abb;
• Data collected during identity verification (KYC) procedures;
• Data collected when you make deposits or withdrawals using JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, or any other supported payment method;
• Data collected during your gameplay sessions, including betting history and session logs;
• Data collected when you contact our customer support team;
• Data collected automatically through cookies and similar tracking technologies when you browse the Platform;
• Data collected through any promotional or responsible gaming tools you engage with.

This Policy does not govern the privacy practices of third-party websites or services that may be linked to or from the Platform. 99abb is not responsible for the privacy practices of any third party.

3 Data We Collect

The categories of personal data that 99abb may collect about you are set out in the table below. Not all categories will apply in every case — the specific data collected depends on how you interact with the Platform.

4 How We Collect Your Data

99abb collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a financial transaction, contact support, or interact with any feature on the Platform that requires you to provide information.
• Automatically: When you visit and interact with the Platform, our systems automatically record Technical Data and Usage Data through cookies, web beacons, pixel tags, and server logs. See Clause 10 for full details of our cookie practices.
• From third-party sources: In certain circumstances, we may receive data about you from third parties, including identity verification service providers (used for KYC compliance), payment processors (for transaction validation), and fraud prevention agencies.
• From publicly available sources: Where relevant to fraud prevention or regulatory compliance, we may consult publicly available registers, watchlists, or sanction databases.

5 Why We Use Your Data

99abb uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your 99abb player account, including authentication and access control.
• Identity & Age Verification: To verify that you are who you say you are and that you are at least 21 years of age, as required by our licensing obligations and responsible gaming commitments.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, Raast, and other supported Pakistani payment methods, and to process withdrawal requests back to your verified payment instrument.
• Regulatory Compliance: To meet our anti-money laundering (AML), counter-terrorism financing (CTF), and KYC obligations under applicable regulations. This includes monitoring transactions for suspicious activity and reporting to relevant authorities where legally required.
• Customer Support: To respond to your queries, complaints, and requests submitted via Live Chat or email.
• Gameplay & Platform Delivery: To provide you with access to our casino and sports betting products, record your bets and gaming history, calculate and pay out winnings, and apply responsible gaming limits you have set.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and any other prohibited behaviour on the Platform.
• Marketing Communications: Where you have given your explicit consent, to send you promotional offers, bonus notifications, and relevant updates about 99abb products and services. You may withdraw this consent at any time.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the performance, security, and user experience of the Platform based on aggregated and anonymised data.
• Legal Claims: To establish, exercise, or defend legal claims where necessary.

6 Legal Bases for Processing

Every processing activity conducted by 99abb rests on one or more of the following lawful bases under applicable data protection legislation:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 99abb — i.e., to operate your player account, process your bets, and pay your winnings.
• Legal Obligation: Processing that is required to comply with our legal and regulatory obligations, including AML/KYC requirements, licence conditions, and court orders.
• Legitimate Interests: Processing carried out for our legitimate business interests or those of a third party, where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, and internal analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital Interests: In rare circumstances, processing may be necessary to protect your vital interests or those of another person (for example, in a responsible gaming emergency).

7 Sharing Your Data

99abb does not sell, rent, or trade your personal data to third parties for commercial purposes. We may, however, share your personal data with the following categories of recipients where necessary and lawful:

• Identity Verification Providers: Third-party KYC and age verification services that assist us in confirming the identity and age of players during onboarding and ongoing due diligence.
• Payment Service Providers: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other payment processors that facilitate your deposits and withdrawals. These providers are bound by their own privacy policies and financial data protection obligations.
• Fraud Prevention Agencies: Organisations that maintain databases of known fraudsters, money launderers, or sanctioned individuals, with which 99abb checks player data as part of its AML/CTF compliance programme.
• Gaming Technology Providers: Software suppliers and game content providers that power the games available on the 99abb Platform. These providers may receive anonymised or pseudonymised gameplay data for technical purposes.
• Customer Support Platforms: Third-party live chat and CRM software providers that facilitate our 24/7 customer support operations.
• Regulatory Authorities: Gaming regulators, financial intelligence units, tax authorities, law enforcement agencies, and courts, where we are legally required to disclose information or where disclosure is necessary to prevent serious harm.
• Professional Advisers: Lawyers, auditors, accountants, and insurers who provide professional services to 99abb under obligations of confidentiality.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and its implications for this Policy.

All third-party recipients of your personal data are required to handle it in compliance with applicable data protection laws and are prohibited from using it for any purpose other than that for which it was disclosed.

8 International Data Transfers

As an internationally licensed platform, 99abb may transfer your personal data to countries outside of Pakistan in order to operate its services. Some of our third-party service providers — including cloud hosting providers, KYC vendors, and gaming technology partners — may be located in or process data in jurisdictions other than Pakistan.

Wherever such transfers occur, 99abb takes appropriate steps to ensure that your data receives an equivalent level of protection to that which it would receive within Pakistan. These safeguards may include:

• Entering into Standard Contractual Clauses (SCCs) or equivalent data transfer agreements with the recipient;
• Transferring data only to countries recognised as providing an adequate level of data protection;
• Applying additional technical and organisational measures such as end-to-end encryption where the destination jurisdiction's protections are considered insufficient on their own.

9 Data Retention

99abb retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our general retention periods are as follows:

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the resulting anonymised dataset is no longer considered personal data and may be retained indefinitely for statistical and analytical purposes.

10 Cookies & Tracking Technologies

99abb uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to operate and improve the Platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without rendering the Platform inoperable.
• Functional Cookies: These cookies remember your preferences (such as language setting and game display preferences) to personalise your experience. You can disable these, but some Platform features may not work optimally as a result.
• Analytics Cookies: We use analytics tools to understand how players interact with the Platform — which pages are visited most, where users drop off, and how long sessions last. This data is aggregated and used solely to improve our service. Analytics cookies require your consent where applicable.
• Marketing Cookies: Where you have consented, we may use cookies to track your interaction with our promotional materials and to deliver relevant offers. You may withdraw this consent at any time.

Managing Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when new cookies are being set. Please note that disabling certain cookies may affect the functionality of the 99abb Platform.

11 Your Privacy Rights

Subject to applicable data protection law and certain exceptions, you have the following rights in relation to your personal data held by 99abb:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where we have no other lawful basis to retain it. This right is subject to our legal and regulatory retention obligations — we cannot delete data we are required by law to keep.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request its transfer to another controller.
• Right to Object: You have the right to object to processing based on our legitimate interests at any time. You may also object to processing for direct marketing purposes at any time, with no justification required.
• Rights Related to Automated Decision-Making: If we make any decisions about you based solely on automated processing (without human involvement) that produce legal or similarly significant effects, you have the right to request human review of that decision.

To exercise any of the above rights, please contact our Data Protection team as described in Clause 16. We may need to verify your identity before processing your request. There is no charge for exercising your rights, and we aim to respond to all requests within 30 days. If we are unable to fulfil your request — for example, due to a conflicting legal obligation — we will explain the reason clearly and in writing.

12 Children & Minors

The 99abb Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, use, or store personal data relating to individuals under the age of 21.

As part of our registration and KYC process, we take reasonable steps to verify the age of all players. Where we discover or have reasonable grounds to suspect that personal data has been collected from a person under the age of 21, we will:

• Immediately suspend the relevant account pending investigation;
• Delete all personal data associated with the underage user as soon as reasonably practicable, subject to any legal reporting obligations;
• Refund any deposits made to the payment method from which they originated;
• Forfeit any winnings accumulated by the underage user in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has created an account on 99abb, please contact us immediately at the address in Clause 16. We will take prompt action to investigate and, where confirmed, close the account and erase the associated data.

13 Security Measures

99abb employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes, but is not limited to:

• Encryption: All personal data is encrypted at rest using AES-256 and in transit using TLS 1.3. All payment data is handled in accordance with PCI DSS standards.
• Access Controls: Access to personal data within 99abb is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Multi-Factor Authentication (MFA): MFA is mandatory for all internal systems that hold or process personal data.
• Penetration Testing: Our Platform undergoes regular security audits and independent penetration testing to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required by law.
• Data Pseudonymisation: Where possible, we apply pseudonymisation techniques to personal data used for analytics and testing purposes, reducing the risk of re-identification in the event of an unauthorised access.

While we take every reasonable precaution to protect your personal data, no system is entirely immune to risk. You also play an important role in keeping your account secure — please use a strong, unique password for your 99abb account, never share your login credentials with anyone, and contact us immediately if you suspect any unauthorised access to your account.

14 Third-Party Links

The 99abb Platform may contain links to third-party websites or services. These links are provided for your convenience only. 99abb has no control over, and assumes no responsibility for, the content, privacy practices, or security of any third-party website. We strongly encourage you to review the privacy policy of any website you visit that is not operated by 99abb before providing any personal information.

The inclusion of any link on the Platform does not constitute an endorsement by 99abb of the linked website or its operator.

15 Changes to This Policy

99abb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and services offered on the Platform. When we make material changes to this Policy, we will:

• Update the "Last Revised" date at the top of this page;
• Post a prominent notice on the Platform informing users of the change;
• Where required by law or where changes materially affect your rights, contact you directly via the email address registered to your account.

Your continued use of the 99abb Platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you should discontinue use of the Platform and may close your account by contacting our support team.

We recommend that you review this Policy periodically to stay informed about how 99abb is protecting your information.

16 Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which 99abb handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] (Data Protection enquiries — please include "Privacy" in your subject line)
• Live Chat: Available 24/7 directly on the 99abb Platform

We aim to respond to all privacy-related enquiries within 5 working days and to resolve substantive data subject requests within 30 calendar days of receipt (extendable by a further 60 days in complex cases, with prior notice to you).

If you are not satisfied with our response, or believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We would, however, appreciate the opportunity to address your concerns directly before you escalate to a regulatory body, and encourage you to contact us in the first instance.