99abb Privacy Policy

This Privacy Policy ("Policy") is published by 99abb ("the Platform", "we", "us", "our") and applies to all users of the 99abb website, platform, and associated services ("Users", "Players", "you"). This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy. By registering an account, accessing the platform, or otherwise using 99abb services, you confirm that you have read and understood this Privacy Policy. If you do not agree to any part of this Policy, you should not use 99abb. This Policy was last substantively reviewed on 1 January 2026.

99abb is the data controller responsible for the personal information collected from players who use the 99abb platform. As data controller, 99abb determines the purposes for which personal data is collected and the means by which it is processed. 99abb operates under an international gaming licence from a recognised regulatory authority, and is subject to the data protection obligations set out in that licensing framework.

For all data protection enquiries, access requests, or privacy-related complaints, Players may contact 99abb at the following address: [email protected]. Please mark any formal data protection correspondence with the subject line "Data Privacy Request" to ensure it is directed to the appropriate team member.

99abb collects the following categories of personal data from registered users and, in some cases, from visitors who have not yet completed registration:

99abb does not intentionally collect sensitive personal data (such as health information, religious beliefs, or political views) from players. If any such data is incidentally disclosed during a support interaction, it will not be processed beyond what is strictly necessary to resolve that specific enquiry.

99abb collects personal data through the following channels and mechanisms:

• Directly from you — when you register an account, submit KYC documents, complete transactions, contact support, set account preferences, or interact with any platform feature.
• Automatically — through cookies, server logs, and technical tracking when you access the 99abb website or platform. This includes IP address logging, session data, and device fingerprinting for fraud prevention purposes.
• From payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners share transaction confirmation data with 99abb to enable deposit crediting and withdrawal processing.
• From KYC verification providers — third-party identity verification services may share the results of document verification and age confirmation checks with 99abb as part of the mandatory KYC process.
• From fraud prevention services — 99abb uses third-party risk management tools that may provide signals about high-risk account activity, potential multi-accounting, or IP-based fraud indicators.

Under applicable data protection law, every instance of personal data processing must rest on a valid legal basis. 99abb processes personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfil 99abb's obligations to you under the Terms and Conditions — including account creation, enabling gameplay, processing transactions, and delivering bonuses.
• Legal Obligation: Processing is required to comply with mandatory legal requirements, including anti-money laundering (AML) regulations, KYC obligations under 99abb's gaming licence, and financial record-keeping requirements.
• Legitimate Interests: Processing is conducted to pursue 99abb's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and improving platform functionality — provided these interests are not overridden by your fundamental privacy rights.
• Consent: For optional processing activities — particularly marketing communications — 99abb relies on your express, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

99abb uses personal data collected from Players for the following specific, declared purposes:

• To create, manage, and maintain your 99abb account, including identity verification, age confirmation, and account security.
• To process deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT, and bank transfer channels, and to maintain accurate financial records of all transactions.
• To enable participation in all 99abb Casino games, sports betting markets, live casino tables, crash games, Pool Rummy, and other platform products.
• To detect, investigate, and prevent fraud, multi-accounting, bonus abuse, money laundering, and other prohibited conduct under our Terms and Conditions.
• To comply with our AML obligations, including transaction monitoring, suspicious activity reporting, and cooperation with regulatory and law enforcement authorities where legally required.
• To operate 99abb's responsible gaming programme — including monitoring for signs of problem gambling, applying player-requested account restrictions, and enforcing self-exclusion periods.
• To provide customer support via live chat and email, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• To improve 99abb's platform, games library, user interface, and service offerings through anonymised or aggregated analysis of platform usage patterns.
• To send promotional communications about bonuses, new games, seasonal promotions, and platform updates — but only to players who have expressly opted in to receive such communications.
• To fulfil any other purpose for which you have specifically provided data and given consent, as disclosed at the time of collection.

99abb does not sell, rent, or otherwise commercially transfer your personal data to any third party. Data sharing occurs only in the following specific, necessary circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT processors, and other payment partners receive the minimum data necessary to process your transaction — typically your registered mobile number or bank account details and transaction amount. All payment partners operate under data processing agreements with 99abb.
• KYC & Identity Verification Providers: Third-party services used to verify CNIC authenticity and age receive identity document data for the sole purpose of completing verification. This data is not retained by the verification provider beyond the period necessary to complete the check.
• Game Software Providers: Providers of casino games, live dealer tables, crash games, and other platform products may receive session and gameplay data for the purpose of game delivery, fairness auditing, and technical support. Game providers operate under data processing agreements.
• Fraud Prevention & Security Services: Risk management tools used to detect fraud, multi-accounting, and AML violations may process technical and behavioural data. These services are bound by strict confidentiality obligations.
• Regulatory Authorities & Law Enforcement: 99abb may be legally required to disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies in response to lawful requests, court orders, or regulatory obligations. 99abb will only comply with verified, legally valid requests.
• Professional Advisors: Lawyers, auditors, accountants, and other professional advisors engaged by 99abb may have access to personal data to the extent necessary for the provision of their professional services, under binding confidentiality obligations.

99abb uses cookies and similar tracking technologies (including local storage, session tokens, and browser fingerprinting) on its website and platform. These technologies serve several important functions:

• Essential Cookies: Strictly necessary for the platform to function. These enable user authentication (keeping you logged in to your 99abb account), session management, security verification, and basic platform navigation. These cookies cannot be disabled without preventing core platform functionality.
• Functional Cookies: Enable personalisation features such as remembering your language preference, game filter settings, and responsible gaming notification preferences. These cookies improve your experience but are not strictly required for basic access.
• Analytics Cookies: Used to collect anonymised or aggregated data about how players use the 99abb platform — which pages are visited, how long sessions last, which games are most popular, and where technical errors occur. This data helps 99abb improve its platform. Analytics data is not linked to individual user profiles.
• Security & Fraud Prevention Cookies: Used to detect unusual login patterns, identify potential account takeover attempts, flag suspicious session behaviour, and support 99abb's AML and fraud prevention obligations.

You may manage cookie preferences through your browser settings. However, disabling essential cookies will impair or prevent your ability to log in to and use your 99abb account. 99abb does not currently use third-party advertising cookies or behavioural tracking for cross-site advertising purposes.

99abb implements a comprehensive information security programme designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL-256 Encryption in Transit: All data transmitted between your device and 99abb servers — including login credentials, personal data, and financial information — is encrypted using TLS 1.3 with 256-bit encryption.
• AES-256 Encryption at Rest: Sensitive data stored in 99abb's databases — including identity documents, payment details, and personal identifiers — is encrypted using AES-256 standard.
• Access Controls: Personal data is accessible only to 99abb staff and contractors with a legitimate need to access it for their specific role. Access is governed by the principle of least privilege and is logged for audit purposes.
• Two-Factor Authentication: All 99abb internal systems containing personal data require two-factor authentication for staff access. Players are strongly encouraged to enable 2FA on their own 99abb accounts.
• Regular Security Audits: 99abb conducts periodic penetration testing, vulnerability assessments, and security audits of its platform infrastructure and data processing systems.
• Incident Response Plan: 99abb maintains a documented data breach incident response plan. In the event of a confirmed breach affecting personal data, affected players will be notified within 72 hours of 99abb confirming the incident.

99abb retains personal data only for the period necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or licensing obligations:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised or aggregated data may be retained indefinitely for analytical purposes. If you request account closure, retained data will continue to be held for the minimum mandatory periods set out above — this is a legal requirement that 99abb cannot waive at individual player request.

Subject to applicable law and certain exceptions, you hold the following rights regarding your personal data processed by 99abb. These rights may be exercised by contacting 99abb's support team with the subject line "Data Rights Request". 99abb will respond within 30 calendar days of receiving a verified request.

99abb is an internationally operated platform. Your personal data may be stored or processed in countries outside Pakistan — for example, on cloud infrastructure operated by 99abb's hosting providers, or by game software providers whose servers are located in Europe, Asia, or elsewhere. Where personal data is transferred outside the country of collection, 99abb ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards for international transfers include: Data Processing Agreements incorporating standard contractual clauses, reliance on service providers operating under recognised data protection frameworks, and transfer impact assessments where required. 99abb does not transfer personal data to countries that offer no meaningful legal data protection framework without additional contractual or technical safeguards in place.

99abb's services are strictly restricted to individuals aged 21 years and above. 99abb does not knowingly collect personal data from any person under the age of 21. All registrants are required to confirm their age during registration, and CNIC-based age verification is mandatory before withdrawal processing.

If 99abb becomes aware that personal data has been collected from a person under the age of 21, the affected account will be immediately suspended, the data will be securely deleted to the extent legally permissible, and the matter will be reviewed in accordance with our responsible gaming policy. If you believe that a person under 21 has registered on 99abb using falsified information, please contact our support team immediately.

99abb may send marketing communications — including information about new bonuses, promotions, game launches, seasonal offers, and VIP programme updates — to players who have expressly opted in to receive such communications. Marketing consent is obtained during registration or through account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your 99abb account settings.
• Clicking the unsubscribe link in any marketing email sent by 99abb.
• Contacting 99abb support and requesting removal from all marketing lists — effective within 3 business days.

Opting out of marketing communications will not affect transactional messages — such as deposit confirmations, withdrawal notifications, responsible gaming alerts, security notifications, and account verification messages — which are sent on the basis of contractual necessity and cannot be disabled while your account remains active.

99abb may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where updates are material — meaning they significantly change how we process your personal data or affect your rights — we will provide advance notice via your registered email address or through a prominent notice on the 99abb platform.

The most current version of this Privacy Policy is always available at 99abb.bio/privacy-policy and supersedes all prior versions. The "Last Reviewed" date at the top of this Policy indicates when the most recent substantive update was made. Continued use of the 99abb platform after a policy update takes effect constitutes acceptance of the updated Policy.

For all privacy-related enquiries, data rights requests, or complaints regarding 99abb's data processing practices, players may contact us through the following channels:

• Live Chat (Preferred for Urgent Issues): 24/7 support via the Live Chat function within the 99abb platform. For data rights requests through live chat, please mark your enquiry as "Data Privacy" so it is directed to the appropriate team.
• Email: [email protected] — use the subject line "Data Rights Request" for formal data access, rectification, or erasure requests; "Data Privacy Complaint" for formal complaints about our data practices.
• Response Time: 99abb will acknowledge all formal data privacy requests within 3 business days and provide a substantive response within 30 calendar days of verifying your identity and the nature of your request.

If you are not satisfied with 99abb's response to a privacy complaint, you may also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction, or with the independent dispute resolution body associated with 99abb's gaming licence. This Privacy Policy was last reviewed and updated on 1 January 2026. 99abb thanks you for taking the time to read and understand our privacy commitments.