Privacy Policy – 99aba Online Betting Platform Pakistan

Who We Are

This Privacy Policy applies to the 99aba online gaming and betting platform, accessible at 99aba.biz. When this document refers to "99aba", "we", "us", or "our", it refers to the operator of this platform and all associated services.

99aba operates exclusively in Pakistani Rupees (PKR) and is designed for players based in Pakistan. Our platform offers sports betting, casino games, virtual sports, Aviator, Ludo, fishing games, jackpot slots, and roulette — all accessible via browser on desktop and mobile devices.

As the operator of this platform, 99aba is the data controller for any personal data collected during registration, account use, and interaction with our services. We take this responsibility seriously and this Policy is our commitment to you that your information is handled with care, transparency, and respect.

What Personal Data We Collect

The data 99aba collects falls into several categories. Below is a clear breakdown of what is collected, when, and why it is needed.

We do not collect payment card numbers in full. When a card is used on 99aba, only a masked version (showing the last four digits) is retained for reference purposes. Full card data passes directly through PCI-compliant payment processors and is not stored on 99aba systems.

Why We Collect Your Data

Every category of data that 99aba collects is used for a specific, legitimate purpose. We do not collect data speculatively or without a clear reason. The purposes for which we process your personal information are as follows.

• Account operation: Your name, contact details, and identity information are necessary to create and maintain your 99aba account, to authenticate your login, and to provide customer support when you need it.
• Transaction processing: Financial and transaction data is necessary to process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card methods — and to maintain an accurate record of your account balance and betting history.
• Legal and regulatory compliance: 99aba is subject to Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations. We are required by these obligations to verify the identity of our players, to monitor account activity for suspicious patterns, and to retain certain records for defined periods. These are legal requirements, not optional practices.
• Security and fraud prevention: Technical data including IP addresses and device information is used to identify suspicious login attempts, detect fraudulent activity, prevent account takeover, and protect the integrity of the platform for all players.
• Responsible gaming: Behavioural data such as bet frequency, session duration, and deposit patterns is used by 99aba's responsible gaming systems to identify players who may be showing signs of problem gambling, and to trigger appropriate interventions or player protection measures.
• Platform improvement: Aggregated, anonymised behavioural data helps us understand how players use 99aba, which features are popular, and where the experience can be improved. This analysis does not identify individual players.
• Communications: Your contact details are used to send transactional messages (deposit confirmations, withdrawal notifications, account alerts) and, where you have opted in, promotional communications about 99aba offers and events.

How Your Data Is Stored and Protected

Data security is a core part of how 99aba is built, not something added on top of the platform as an afterthought. The following protections are in place for all player data held on our systems.

• Encryption in transit: All data transmitted between your browser or mobile device and the 99aba platform is encrypted using Transport Layer Security (TLS). This means that even if your connection were intercepted, the data would be unreadable.
• Encryption at rest: Sensitive personal data stored on 99aba servers — including identity documents submitted for KYC — is encrypted at rest. Plain-text storage of sensitive personal data is not used.
• Access controls: Access to player data within 99aba is role-based and strictly limited. Only staff who need access to specific data categories in order to perform their job are granted that access. Access is logged and audited.
• Password security: Account passwords are not stored in recoverable form. They are processed through a one-way hashing function. 99aba support staff cannot see your password and will never ask you for it.
• Security monitoring: Our infrastructure is monitored for unusual activity patterns that could indicate attempted intrusion, data exfiltration, or other security threats. Alerts are reviewed by our security team around the clock.
• Incident response: In the unlikely event of a data security incident affecting player information, 99aba has an internal response protocol that includes containing the incident, assessing its scope, notifying affected players where required, and taking steps to prevent recurrence.

While 99aba implements strong security measures, no digital platform can guarantee absolute security against all possible threats. Players are encouraged to use a strong, unique password for their 99aba account and to enable any additional security options available in their account settings.

Data Sharing — Who We Share With and Why

99aba does not sell your personal data. We do not share it with advertisers, data brokers, or marketing platforms. Sharing of player data happens only in specific, limited circumstances as described below.

• Payment processors: To complete deposits and withdrawals, 99aba shares necessary transaction data with the relevant payment processor (such as Easypaisa, JazzCash, NayaPay, or card payment gateways). These processors receive only the data required to execute the transaction and are bound by their own privacy and security obligations.
• Identity verification providers: When KYC verification is required, identity document data may be processed by a third-party verification service. These providers are contracted to handle data securely and may not use it for any purpose other than the verification service they are providing to 99aba.
• Regulatory and law enforcement authorities: 99aba is obligated to share relevant information with regulators, financial intelligence units, or law enforcement agencies when legally required to do so — for example, in the context of an AML investigation or a court order. This sharing is not at our discretion; it is a legal obligation.
• Fraud and security services: Aggregated or anonymised technical data may be shared with security service providers who help us detect fraudulent activity, bot traffic, or platform abuse. These providers do not receive personally identifiable player data.
• Business transfers: In the event that 99aba's business or assets are transferred to another entity, player data may form part of that transfer. If this occurs, affected players will be notified prior to the transfer taking effect, and the receiving entity will be required to honour this Privacy Policy.

Cookies and Tracking Technologies

99aba uses cookies and similar browser technologies to make the platform work correctly, to understand how it is being used, and to maintain your session when you are logged in. Here is a clear breakdown of the types of cookies in use.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of the 99aba platform — particularly essential and security cookies. 99aba does not use advertising cookies or cross-site tracking cookies of any kind.

Your Data Rights

As a registered player on 99aba, you have specific rights over your personal data. These rights are meaningful and 99aba is committed to fulfilling them in a timely and straightforward manner.

To exercise any of these rights, contact the 99aba data team at support@99aba.biz with the subject line "Data Request – [Your Request Type]". We will respond within 30 calendar days. If your request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

Data Retention

99aba does not retain your personal data indefinitely. Retention periods are set based on legal obligations and legitimate operational need.

• Active accounts: Data associated with an active 99aba account is retained for as long as the account remains open and for a period following closure, as described below.
• Financial and transaction records: Transaction history, deposit and withdrawal records, and KYC verification data are retained for a minimum of five years following account closure. This is a legal obligation under anti-money laundering regulations and cannot be waived at a player's request.
• Support communications: Records of support conversations and complaint handling are retained for up to three years after the relevant interaction, to allow for follow-up and audit purposes.
• Technical logs: Server logs, security logs, and access logs are retained for up to 12 months before being deleted or anonymised. These logs are used for security investigation purposes only.
• Marketing preferences: Opt-in records for marketing communications are retained for as long as the preference is active and for one year following opt-out, as evidence of consent management.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an individual player.

Children and Minors

The 99aba platform is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. Age verification is carried out at registration and, where necessary, through additional KYC checks.

If it comes to our attention that a player is under 18, or that personal data of a minor has been collected inadvertently, the affected account will be closed immediately, any funds returned where possible, and the data deleted from our records subject to any legal obligations that may require its retention for investigation purposes.

Parents and guardians who believe a minor may have registered an account on 99aba should contact support@99aba.biz immediately with relevant details so that the situation can be investigated and resolved promptly.

Changes to This Privacy Policy

99aba may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When a material update is made, registered players will be notified by email or through an in-platform notification before the changes take effect.

The date at the top of this page indicates when the Policy was last reviewed. We encourage players to review the Privacy Policy periodically. If you continue to use the 99aba platform after a Policy update, you are accepting the updated terms of data processing.

If a proposed change is significant and you do not agree with it, you have the right to close your account before the change takes effect by contacting support@99aba.biz.

Contact and Data Enquiries

For any questions about this Privacy Policy, about the data 99aba holds about you, or to exercise any of your data rights, please get in touch using the contact details below.

For broader information about how 99aba operates, including account rules, payment terms, and responsible gaming tools, please also review our Terms and Conditions, Responsible Gaming, and FAQ pages.