Privacy Policy – 99ab Casino

1. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal data of 99ab Casino users is 99ab Casino, operating the platform accessible at https://99ab.asia ("99ab," "we," "us," "the Platform"). References to "you," "your," or "the Player" refer to any individual who accesses, registers with, or uses the 99ab platform in any capacity.

By registering an account or using any feature of the 99ab platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to the practices described in this policy, you should not create an account or use the 99ab platform.

2. Personal Data We Collect

99ab collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

2.1 Identity Data

• Full legal name as it appears on your CNIC (Computerised National Identity Card)
• CNIC number and copies of your CNIC (front and back) submitted during KYC verification
• Date of birth, for age verification purposes
• Selfie photograph submitted during KYC identity confirmation

2.2 Contact Data

• Pakistani mobile phone number (primary account identifier and 2FA delivery channel)
• Email address, where provided during account registration or customer support interactions
• Residential city or address, where required for verification or dispute resolution purposes

2.3 Financial Data

• JazzCash or Easypaisa mobile wallet identifiers associated with deposit and withdrawal transactions
• Bank account details (account holder name, IBAN, bank name) where bank transfer payment methods are used, including HBL, UBL, Meezan Bank, or Bank Alfalah
• USDT wallet addresses where cryptocurrency transactions are conducted
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used

2.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session logs including login timestamps, session duration, and logout events
• Game activity records including games played, bet amounts, game outcomes, and bonus usage
• Cookies and similar tracking technologies as described in Section 8

3. How We Collect Your Data

99ab collects personal data through the following means:

• Direct collection: Information you provide when registering your 99ab account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the 99ab platform, including through cookies, server logs, and session tracking systems.
• Third-party sources: Identity verification data may be cross-referenced against third-party identity verification services as part of the KYC process. Payment transaction data is received from payment processing partners including mobile wallet operators and banking institutions.

4. How We Use Your Personal Data

99ab uses the personal data collected from Pakistani players and all other users for the following purposes:

• Account management: Creating, maintaining, and securing your 99ab player account, including authentication, password reset, and account recovery services.
• Identity verification (KYC): Verifying your identity and age in compliance with anti-underage-gambling obligations and anti-money-laundering requirements before processing withdrawals.
• Payment processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, Pakistani banks, and USDT. Transaction records are maintained for accounting, dispute resolution, and regulatory compliance purposes.
• Platform provision: Delivering casino games, sports betting markets, live dealer tables, and all other features of the 99ab platform to you.
• Responsible gaming: Monitoring account activity to identify problem gambling indicators. Where self-exclusion is requested, your data is retained and used specifically to prevent re-registration during the exclusion period.
• Customer support: Responding to queries, resolving disputes, processing complaints, and managing chargebacks or payment disputes submitted through the 99ab support system.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to your registered mobile number or email address, where you have not opted out of such communications. You may opt out at any time by contacting 99ab support.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other conduct that violates the 99ab Terms & Conditions.
• Legal compliance: Fulfilling obligations under applicable anti-money-laundering laws, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required by applicable legal frameworks.

5. Legal Basis for Processing

99ab processes your personal data on the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil the agreement between you and 99ab, including account management, payment processing, and game delivery.
• Legal obligation: Processing required by applicable law, including KYC identity verification, anti-money-laundering checks, and regulatory reporting obligations.
• Legitimate interest: Processing carried out for 99ab's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, including marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing and Disclosure

99ab does not sell your personal data to third parties. We may share your personal data in the following limited circumstances:

6.1 Payment Processors

Financial data necessary to process your deposits and withdrawals is shared with the relevant payment service provider — such as JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, or USDT network providers — solely to the extent necessary to complete the transaction.

6.2 Identity Verification Partners

Identity documents submitted during KYC may be processed by third-party identity verification service providers engaged by 99ab for this purpose. These providers are contractually obligated to handle your data only for identity verification purposes and in accordance with applicable data protection standards.

6.3 Legal and Regulatory Disclosure

99ab may disclose your personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or regulatory direction. 99ab will comply with such requests to the extent legally required and will, where legally permissible, notify affected players of such disclosures.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 99ab's assets, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.

7. Data Retention

99ab retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Account data and transaction records are retained for a minimum of five years following account closure, in compliance with applicable anti-money-laundering record-keeping requirements.
• KYC documents including CNIC copies and selfie photographs are retained for the duration of the account relationship and for five years thereafter.
• Self-exclusion records are retained indefinitely to prevent re-registration by excluded players during and after the exclusion period.
• Technical and usage logs may be retained for up to twenty-four months for fraud detection and security monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

8. Cookies & Tracking Technologies

99ab uses cookies and similar technologies on its platform to ensure the correct functioning of the website, remember your preferences, analyse usage patterns, and support platform security.

8.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without preventing access to the platform.
• Functional cookies: Remember your language and display preferences to personalise your 99ab experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the 99ab platform to enable product improvements. No personally identifiable information is sent to analytics providers.

You may configure cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the 99ab platform. 99ab does not use third-party advertising or behavioural targeting cookies.

9. Data Security

99ab implements technical and organisational security measures appropriate to the risk level of the data processed. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 99ab platform.
• Encrypted storage of passwords — 99ab does not store plain-text passwords.
• Two-factor authentication (2FA) available to all registered players to protect account access.
• Restricted internal access to personal data on a need-to-know basis, with access logging.
• Regular security assessments of platform infrastructure.

No security system is entirely impenetrable. In the event of a data breach that poses a material risk to affected players, 99ab will notify those players as required by applicable law and take appropriate remediation steps.

10. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by 99ab:

• Right of access: You may request a copy of the personal data 99ab holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: You may request that 99ab limits the processing of your data in certain circumstances.
• Right to object: You may object to processing based on legitimate interest, including direct marketing communications.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact the 99ab support team using the contact information in Section 13. 99ab will respond to verifiable requests within a reasonable timeframe. Identity verification may be required before requests are actioned.

11. Children's Privacy

The 99ab platform is strictly for adults aged 18 years and above. 99ab does not knowingly collect, use, or retain personal data from individuals under the age of 18. If 99ab determines that personal data has been collected from a minor, the account will be immediately closed, the data deleted in accordance with legal obligations, and the matter escalated in accordance with applicable child protection obligations. If you believe that a minor has registered an account on the 99ab platform, please contact our support team immediately.

12. Amendments to This Policy

99ab reserves the right to update or amend this Privacy Policy at any time. The current version of this policy, with the effective date displayed at the top of the document, is always available at https://99ab.asia/privacy-policy. Where amendments are material, 99ab will make reasonable efforts to notify registered players. Continued use of the 99ab platform following the effective date of any amendment constitutes acceptance of the revised policy.

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about the handling of your personal data by 99ab, please contact our support team. The 99ab support email address is provided below as plain text:

[email protected]

99ab will acknowledge receipt of all privacy-related requests and respond within a reasonable timeframe. Where a complaint cannot be resolved directly, you may have the right to lodge a complaint with an applicable data protection authority in your jurisdiction.