99aab Privacy Policy

For the purposes of applicable data protection legislation, the data controller responsible for the personal information of 99aab players is the entity operating the 99aab platform under its international gaming licence. References to "99aab", "we", "us", or "our" throughout this Policy refer to that licensed operating entity.

If you have any questions regarding how 99aab processes your personal data, or wish to exercise any of the rights described in this Policy, you may contact our designated data enquiries team using the contact details set out in Section 13 of this document.

Depending on how you interact with the 99aab platform, we may collect the following categories of personal data:

99aab collects personal data through the following means:

• Directly from you: Information you provide when completing the 99aab registration form, submitting KYC documents, contacting customer support, or updating your account profile.
• Automatically: Technical data collected via cookies, server logs, and similar tracking technologies each time you access the platform. See Section 8 for full details on our cookie practices.
• From payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20 network confirmations when you make a deposit or withdrawal.
• From identity verification partners: Where 99aab uses a third-party KYC service provider, that provider may return verified identity data including document authenticity results and sanction-list screening outcomes.
• From fraud prevention services: Risk-scoring data from fraud detection and anti-money laundering screening services used to assess account activity and transactions.

99aab processes your personal data only where a valid legal basis exists. The following table outlines our primary processing purposes and the corresponding legal basis for each:

Where 99aab relies on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests — see Section 9 for how to do so.

99aab does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT network infrastructure providers receive transaction data strictly as required to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services receive your CNIC or passport data and related documentation solely for the purpose of completing the mandatory KYC process required under our licensing obligations.
• Fraud prevention and AML screening services: Anonymised or pseudonymised transaction and behavioural data is shared with fraud detection services to identify and prevent financial crime on the platform.
• Game content providers: Game providers whose titles are hosted on 99aab may receive anonymised session data (such as bet stakes and game round outcomes) for the purpose of game fairness auditing and technical support. These providers do not receive your identity or contact information.
• Legal and regulatory authorities: 99aab will disclose personal data to government bodies, regulatory authorities, law enforcement agencies, or courts when required to do so by a valid legal obligation, court order, or regulatory directive.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by 99aab may access personal data on a strictly need-to-know basis and are bound by confidentiality obligations.

99aab retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data (KYC records): Retained for a minimum of five years from the date of account closure, in accordance with anti-money laundering record-keeping requirements applicable under our licensing framework.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction for AML compliance and dispute resolution purposes.
• Gaming session logs: Retained for up to three years from the date of each session to support dispute resolution and responsible gaming monitoring.
• Support communications: Retained for up to three years from the date of the final communication in a given support thread.
• Marketing preference data: Retained until you opt out of marketing communications, after which it is deleted within 30 days except where a record of your opt-out itself must be retained to demonstrate compliance.
• Technical and log data (IP addresses, session metadata): Retained for up to 12 months from collection, unless required for longer in connection with a security investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

99aab implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 99aab platform.
• Encrypted storage of sensitive data fields — including CNIC numbers, financial account references, and authentication credentials — at rest within our infrastructure.
• Access controls: Personal data is accessible only to authorised 99aab personnel and service providers on a strict need-to-know basis. All internal access is logged and audited.
• Two-factor authentication (2FA) is available for player accounts and is mandatory for all internal staff accessing personal data systems.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures: In the event of a data breach that poses a risk to player rights and freedoms, 99aab will notify affected players and relevant authorities in accordance with applicable data breach notification requirements.

While 99aab takes all reasonable steps to protect your data, no internet-based system is completely impenetrable. You also have a responsibility to keep your own account credentials secure — please review Section 3 of our Terms and Conditions for your account security obligations.

99aab uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session preferences, to detect and prevent fraud, and to understand how players interact with the site so that we can improve the experience.

• Strictly Necessary Cookies: Essential for the platform to operate. These include session authentication cookies and security tokens. They cannot be disabled without rendering the platform non-functional.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gaming limit confirmations between sessions.
• Analytical Cookies: Used to collect anonymised information about how players navigate the platform — including which games are most visited and how long sessions last — enabling us to improve performance and usability.
• Fraud Prevention Cookies: Used to fingerprint device characteristics for the purpose of detecting bot activity, multi-accounting, and other prohibited behaviour described in our Terms and Conditions.

You may configure your browser to refuse cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling analytical and functional cookies will not affect your ability to play but may reduce the quality of your experience.

Subject to applicable law and certain regulatory limitations, you hold the following rights in respect of the personal data 99aab processes about you:

• Right of Access: You may request a copy of the personal data we hold about you. We will respond to verified access requests within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold. Minor corrections (such as updating your email address) can be made directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes collected, where you withdraw consent, or where you object to processing. Note that this right is subject to overriding legal retention obligations — for example, KYC and AML records cannot be deleted before their mandatory retention period expires.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances, such as while a dispute over its accuracy is being resolved.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to us, for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-outs take effect immediately; legitimate interests objections are assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing before the withdrawal date.

To exercise any of these rights, please contact 99aab using the details in Section 13. We may ask you to verify your identity before processing your request to ensure we do not disclose or alter data belonging to a different individual.

The 99aab platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the 99aab registration and KYC process.

If 99aab discovers or is notified that personal data has been collected from an individual who is under 21 years of age, all associated data will be deleted immediately, the account will be closed, and any deposited funds will be returned to the payment method of origin net of any gaming losses incurred. Parents and guardians who believe their child has registered on 99aab are urged to contact us immediately at the address provided in Section 13.

As an internationally licensed gaming platform, 99aab may process or store personal data on servers located outside Pakistan. Where personal data is transferred to jurisdictions that do not offer the same level of data protection as Pakistan, 99aab will implement appropriate safeguards to ensure that your data remains protected to an equivalent standard.

Safeguards used for international transfers include contractual clauses that impose data protection obligations on the recipient of the data, equivalent to those applicable to 99aab under its licensing and operational framework. Third-party service providers — including payment processors and KYC providers — operating in other jurisdictions are required to process Pakistani player data in accordance with confidentiality and security standards consistent with this Policy.

99aab reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our privacy framework. The date of the most recent update is displayed at the top of this page.

Where changes are material — particularly those affecting the purpose for which your data is used, the categories of third parties with whom it is shared, or your rights — we will notify you via your registered email address at least 14 days before the revised Policy takes effect. Your continued use of the 99aab platform after the effective date constitutes acceptance of the revised Policy.

We recommend bookmarking this page and checking it periodically. If you have questions about any changes, please contact us before the effective date using the details below.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern about how 99aab handles your personal information, please contact our data enquiries team:

For responsible gaming queries — including setting deposit limits, activating self-exclusion, or requesting a cooling-off period — these options are also accessible directly from your account settings panel after completing your 99aab login, without the need to contact support.