99aba Privacy Policy — How We Protect Your Personal Data

1Who We Are

99aba is an online gaming and sports betting platform operating at 99aba.ws. When this Privacy Policy refers to "99aba", "we", "us", or "the Company", it refers to the entity that operates the 99aba platform and is responsible for processing your personal data.

99aba is the data controller for all personal information collected through the platform. As data controller, we determine the purposes and means by which your personal data is processed and are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

This Privacy Policy applies to all services provided through 99aba.ws, including sports betting (cricket, PSL, football, Esports), live casino (Baccarat and other tables), Ludo tournaments, Jackpot Slots, the Refer a Friend programme, customer support services, and all promotional and bonus activities. By registering an account or using any 99aba service, you confirm that you have read and understood this policy.

2Personal Data We Collect

99aba collects only the personal data that is necessary to provide you with a functioning, secure, and enjoyable platform experience. Below is a breakdown of the categories of personal data we collect:

99aba does not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data as part of standard platform operations.

3How We Collect Your Data

99aba collects personal data through the following methods:

• Direct collection: Information you provide when you register an account, complete KYC verification, make a deposit, request a withdrawal, contact customer support, or participate in a promotion on 99aba.
• Automated collection: Technical and usage data collected automatically as you navigate the 99aba platform through cookies, server logs, and similar tracking technologies. See Section 10 for full cookie details.
• Payment processors: Transaction confirmation data shared by Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors when you make a deposit or withdrawal. 99aba does not receive or store full card numbers or complete mobile wallet PINs.
• Verification partners: Identity confirmation data from authorised verification services when KYC checks are required. We only use verification partners bound by equivalent data protection standards.
• Refer a Friend programme: When you refer a friend to 99aba, we collect the referee's contact information only for the purpose of processing the referral. Referred contacts who do not register within 30 days have their information deleted.

4Why We Use Your Personal Data

99aba processes your personal data for the following specific purposes:

• Account creation and management: Creating and maintaining your 99aba account, verifying your identity, and ensuring the security of your account against unauthorised access.
• Service delivery: Processing deposits, settling bets, calculating winnings, processing withdrawals, and delivering all other core 99aba platform functions.
• Legal compliance and fraud prevention: Meeting our anti-money laundering (AML) obligations, age verification requirements, fraud detection, and reporting obligations to financial regulatory authorities where required.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and providing assistance with account issues through live chat, WhatsApp, and email.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling behaviour, enforcing self-exclusions and deposit limits, and proactively reaching out to players showing high-risk patterns — all as part of our player welfare commitment.
• Platform improvement: Analysing aggregated usage data to improve the performance, design, and feature set of the 99aba platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing communications: Sending promotional offers, bonus notifications, and news about new 99aba features — but only where you have consented to receive such communications and only through the channels you have approved. See Section 13 for marketing preferences.
• Security and integrity: Detecting and preventing cheating, bot use, collusion, account sharing, and other activities that violate 99aba's Terms and Conditions.

5Legal Bases for Processing

99aba processes your personal data under one or more of the following legal bases:

• Contract performance: Processing necessary to deliver the services you signed up for — running your account, processing bets and payments, and providing support.
• Legal obligation: Processing required to comply with AML regulations, age verification laws, financial reporting requirements, and other applicable legal obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving the platform — where these interests do not override your privacy rights.
• Consent: Marketing communications and non-essential cookies, where your explicit opt-in consent is obtained first. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Data Sharing With Third Parties

99aba does not sell your personal data. We share data with third parties only in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment networks receive the transaction data necessary to process your deposits and withdrawals. These processors are bound by their own privacy and security standards.
• Identity verification providers: When KYC verification is required, your identity documents may be shared with authorised verification service providers. All such providers are contractually bound to protect your data.
• Game software providers: For casino and slot games, necessary session and outcome data is shared with the software provider to deliver the game. Game providers do not receive your full personal profile.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics partners to help improve 99aba. No personally identifiable information is included in these data transfers.
• Legal authorities: 99aba is legally required to disclose specific data to financial intelligence units, law enforcement agencies, or regulatory bodies when formally requested under applicable law. We cannot notify you in advance when such disclosures are legally prohibited.
• Business transfers: In the event of a merger, acquisition, or sale of the 99aba business, your data may be transferred to the new entity. You will be notified of any such transfer and given the option to close your account if you prefer.

7International Data Transfers

99aba operates its core infrastructure within secure data centres. In some cases, data may be processed or stored on servers located outside Pakistan. Where international transfers occur, 99aba ensures appropriate safeguards are in place, which may include:

• Standard contractual clauses that bind the receiving party to equivalent data protection standards.
• Transfers only to jurisdictions with adequate data protection frameworks.
• Contractual obligations on all international processors to maintain security standards no less rigorous than those applied within Pakistan.

If you have questions about specific international transfers or wish to obtain a copy of the safeguards in place, contact support@99aba.ws.

8Data Security

99aba implements a multi-layered approach to data security across all systems and processes that handle your personal information:

• Encryption in transit: All data exchanged between your device and 99aba servers is encrypted using 256-bit SSL/TLS protocols. This prevents interception by third parties during transmission.
• Encryption at rest: Sensitive personal data including financial records and identity documents is encrypted within our database systems.
• Access controls: Personal data is accessible only to authorised 99aba personnel who require it for their specific role. Access is governed by role-based permissions and all access is logged and audited.
• Two-factor authentication: Available for all player accounts and mandatory for internal staff accessing player data.
• Regular security testing: 99aba conducts periodic security audits and vulnerability assessments of our platform infrastructure.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, 99aba will notify affected players within 72 hours of becoming aware of the incident, providing details of what data was affected and what steps are being taken.

9Data Retention Periods

99aba does not retain personal data longer than necessary for the purpose for which it was collected. The following retention periods apply:

• Active account data: Retained for the full duration of your active 99aba account.
• Transaction and betting records: Retained for 7 years after the transaction date to satisfy financial regulatory and AML requirements, even after account closure.
• Identity verification documents: Retained for 5 years after account closure in line with standard AML compliance obligations.
• Customer support communications: Retained for 2 years from the date of the last interaction.
• Marketing data: Retained until you withdraw your marketing consent, after which it is deleted within 30 days.
• Responsible gaming data: Self-exclusion records are retained for the full exclusion period plus 5 years to prevent circumvention of exclusion requests.
• Technical and usage data: Aggregated analytics data is retained indefinitely in anonymised form. Identifiable technical data (IP logs, session data) is deleted after 12 months.

When a retention period expires and there is no legal requirement to extend it, personal data is securely deleted or anonymised so it can no longer be linked to you.

10Cookies and Tracking Technologies

99aba uses cookies and similar technologies to make the platform function correctly, remember your preferences, and understand how players use the site so we can improve it. A cookie is a small text file stored on your device when you visit 99aba.

You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent you from being able to use 99aba. Instructions for managing cookies are available in your browser's help section.

11Your Data Rights

As a 99aba player, you have the following rights over your personal data. These rights can be exercised at any time by contacting support@99aba.ws:

12Children's Privacy

99aba is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires players to confirm their age, and we conduct age verification checks where required.

If 99aba becomes aware that personal data has been collected from a minor — through any channel — the account will be closed immediately, all balances will be returned to the depositing payment method where possible, and the data will be deleted from our systems without delay. If you believe a minor has registered on 99aba, please contact support@99aba.ws immediately so we can investigate and take appropriate action.

13Marketing Communications

99aba would like to keep you informed about new promotions, bonus offers, tournaments, and platform features that might be relevant to you. Marketing communications are only sent with your explicit consent and only through channels you have approved.

• How we communicate: Marketing messages may be sent via SMS to your registered Pakistani mobile number, push notifications through the web platform, or email where you have provided an address and given consent.
• Opting out: You can withdraw your marketing consent at any time by contacting support@99aba.ws, by updating your communication preferences in your account settings, or by replying STOP to any SMS message from 99aba. Opt-outs are processed within 5 working days.
• Service communications: Even if you opt out of marketing, 99aba will still send you essential service communications — such as withdrawal confirmations, security alerts, and responsible gaming notifications. These are not marketing and cannot be opted out of while your account remains active.

99aba does not share your contact details with any external marketing partner. All promotional communications come directly from 99aba through our own channels.

14Changes to This Privacy Policy

99aba may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players through an in-platform notification or SMS to your registered mobile number at least 14 days before the changes take effect.

The updated policy will always be published on this page with a revised "last updated" date at the top. Your continued use of 99aba after the effective date of any change constitutes acceptance of the revised policy. If you do not agree with the updated terms, you may close your account before the changes take effect.

For minor changes that do not materially affect how we process your data — such as clarifications or formatting improvements — we may update the policy without advance notice, though the updated date will always reflect the most recent revision.

15Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how 99aba handles your personal data, we want to hear from you. Please reach out through any of the following channels:

• Email (privacy enquiries): support@99aba.ws — subject line "Privacy Enquiry"
• Live chat: Available 24/7 directly on the 99aba website — request to speak with the data privacy team
• WhatsApp: Available 24/7 — Urdu and English supported

We take every privacy concern seriously and commit to a substantive response within 5 working days for general enquiries and within 30 days for formal data rights requests. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.

For responsible gaming support — which is managed separately from general privacy enquiries — please visit our Responsible Gaming page or speak directly with a support agent who can activate player protection tools on your behalf without delay.