Privacy Policy
How 99abba Collects, Uses & Safeguards Your Personal Data

99abba is an online casino and sports betting platform operated under an international gaming licence and accessible at 99abba.net. We provide casino games, live dealer experiences, sports betting markets — including cricket and PSL — and related entertainment services to players in Pakistan and other permitted jurisdictions.

For the purposes of this Privacy Policy, "99abba", "we", "us", and "our" refer to the operating entity behind the 99abba platform. We act as the data controller in respect of all personal data collected from users of our platform, meaning we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected by 99abba through the 99abba.net website, including during account registration, gameplay, financial transactions, customer support interactions, and any marketing communications you receive from us.

99abba collects personal data through several channels: directly from you when you register, deposit, play, or contact us; automatically as you use the platform; and in limited cases from third-party verification services. The categories of data we collect are as follows:

99abba uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, verify your identity and age (21+), and maintain your account in a functional state throughout your time as a 99abba player.
• Service delivery: To process your deposits and withdrawals in PKR via JazzCash, EasyPaisa, and banking channels; to record your bets; to settle winnings; and to provide live support.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access. This includes automated risk scoring and manual review of flagged accounts.
• Regulatory compliance: To fulfil our obligations under our international gaming licence, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
• Responsible gaming: To monitor gaming behaviour, identify signs of problem gambling, and proactively offer or apply responsible gaming tools where our systems detect risk indicators.
• Marketing and promotions: To send you offers, bonus notifications, and news about 99abba by SMS, email, or in-platform notifications — only where you have given consent. You may withdraw consent at any time.
• Platform improvement: To analyse aggregated and anonymised usage data in order to improve the layout, performance, and product range of the 99abba platform.
• Legal proceedings: To establish, exercise, or defend legal claims where necessary.

Where applicable data protection frameworks require us to identify a legal basis for processing personal data, 99abba relies on the following bases:

• Contractual necessity: Processing required to perform the contract with you — including account management, game operation, and payment processing — is necessary to deliver the 99abba service you have requested.
• Legal obligation: Processing required to comply with applicable laws, including AML obligations, KYC requirements, and gaming regulatory requirements under 99abba's international licence.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics, where these interests do not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing purposes, where consent has been explicitly obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

99abba does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 network operators receive the financial data necessary to process your transactions. Each processor is bound by its own regulatory framework and privacy obligations.
• Identity verification providers: Third-party KYC service providers process identity documents and CNIC data on 99abba's behalf to fulfil age and identity verification obligations. These providers act as data processors under binding agreements.
• Game technology providers: Licensed game studios whose products appear on the 99abba platform may receive technical session data (not identity data) necessary to operate game rounds, particularly for live dealer products with real-time data flows.
• Regulatory and law enforcement authorities: 99abba will disclose personal data to relevant authorities where required by law, court order, or in connection with reporting obligations under its gaming licence — including suspicious activity reports under AML frameworks.
• Professional advisors: Legal, accounting, and auditing firms engaged by 99abba may access personal data subject to professional confidentiality obligations.

99abba uses cookies and similar tracking technologies on the 99abba.net website to ensure the platform functions correctly and to improve the user experience for Pakistani players. Cookies are small data files stored on your device by your browser.

The types of cookies used by 99abba include:

• Essential cookies: Required for core platform functionality including maintaining your login session, remembering language preferences, and processing bets. These cookies cannot be disabled without breaking the platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the 99abba platform, including which games are most popular and which pages experience high exit rates. This data is used to improve the platform.
• Responsible gaming cookies: Used to store session time data and trigger reality check notifications as configured in your account settings.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will impair or prevent your ability to use the 99abba platform. Analytics cookies may be disabled without loss of core functionality.

99abba retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to overriding legal retention obligations. The following general retention periods apply:

• Account data and KYC records: Retained for a minimum of five years from the date of account closure, in accordance with AML regulatory requirements applicable under our international gaming licence.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, again in accordance with AML obligations.
• Marketing consent records: Retained for the duration of your account and for three years following account closure, to evidence the lawful basis for any marketing communications sent.
• Customer support communications: Retained for three years from the date of the interaction, for training, quality assurance, and dispute resolution purposes.
• Technical and usage data: Typically retained for twelve months in identifiable form, after which it is anonymised or deleted.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identified individual.

99abba implements a range of technical and organisational security measures to protect personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.2 or higher encryption for all data transmitted between your device and 99abba servers.
• Encryption at rest for sensitive data fields including identity documents, payment credentials, and CNIC numbers.
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need.
• Regular security assessments, penetration testing, and vulnerability management processes.
• Multi-factor authentication requirements for staff accessing systems that contain personal data.
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable obligations.

Subject to applicable law and regulatory obligations, players have the following rights in respect of their personal data held by 99abba:

• Right of access: You may request a copy of all personal data 99abba holds about you. We will provide this within 30 calendar days of a verified request at no charge.
• Right to rectification: If your personal data is inaccurate or incomplete, you may request that it be corrected. Certain data — such as name and date of birth — may require re-verification via CNIC before correction is applied.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no overriding legal obligation requires its retention.
• Right to restriction: You may request that 99abba restrict processing of your data while a rectification or objection request is being assessed.
• Right to object: You may object to processing of your data on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. We will assess such objections and respond within 30 days.
• Right to withdraw consent: Where processing is based on consent — particularly for marketing communications — you may withdraw consent at any time via your account settings or by contacting support.

To exercise any of the above rights, please contact the 99abba support team via live chat or by emailing [email protected]. We will need to verify your identity before processing any data rights request.

The 99abba platform is strictly not intended for individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. Our registration process includes age verification steps, and all accounts are subject to CNIC-based age confirmation before withdrawal access is granted.

If 99abba discovers that personal data has been collected from a minor, the account will be immediately suspended, all collected data will be securely deleted, and any deposited funds will be returned to the payment source. If you believe a minor has accessed or registered on the 99abba platform, please notify us immediately at [email protected].

As an internationally licensed gaming platform, 99abba operates infrastructure across multiple jurisdictions. Personal data collected from Pakistani players may be transferred to and processed in countries outside Pakistan in connection with the operation of the 99abba platform.

Where personal data is transferred internationally, 99abba ensures appropriate safeguards are in place to protect the data to a standard equivalent to that required under applicable data protection frameworks. These safeguards include contractual clauses in data processing agreements with all third-party service providers who may access personal data.

By registering on the 99abba platform and accepting this Privacy Policy, you acknowledge that your personal data may be processed in jurisdictions other than Pakistan as described in this section.

The 99abba platform may contain references to third-party service providers, payment processors, and game providers. While 99abba exercises due diligence in selecting its partners, we are not responsible for the privacy practices of third-party entities.

This Privacy Policy applies solely to data processing carried out by 99abba under the 99abba.net domain. If you interact with a third-party service — for example, initiating a JazzCash deposit through a third-party gateway — the privacy policy of that third party will govern the processing of any data submitted directly to them.

99abba reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where a material change is made, registered players will be notified via SMS or email to the contact details held on their account, at least 7 days before the change takes effect.

The version date at the top of this page indicates when the current version was last reviewed and approved. Continued use of the 99abba platform after a policy update constitutes acceptance of the revised Privacy Policy. Previous versions of this policy are available upon request from the 99abba support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or 99abba's data practices, you may contact us through the following channels:

• Live Chat: Available 24/7 from any page on 99abba.net. This is the fastest way to reach our support team for privacy-related queries.
• Email: [email protected] — Privacy-related requests are acknowledged within 48 hours and resolved within 30 calendar days.

If you are not satisfied with how 99abba has handled your privacy concern after raising it with our support team, you may escalate the matter to the relevant supervisory authority or dispute resolution body designated under 99abba's international gaming licence. Details of the applicable body are available upon request.