Privacy Policy

This Privacy Policy ("Policy") describes how 99ah ("99ah", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at 99ah.org, collects, uses, stores, and discloses personal data relating to registered players and website visitors ("you", "your"). This Policy applies to all interactions you have with the 99ah platform, including account registration, deposits and withdrawals via JazzCash, EasyPaisa, and Pakistani bank channels, participation in games and sportsbook markets, and all communications with our support team.

By registering a 99ah account or continuing to use the platform after the effective date of this Policy, you acknowledge that you have read and understood how your personal data is handled. This Policy forms part of the broader 99ah Terms & Conditions available at 99ah.org/terms-conditions. In the event of any conflict between this Policy and the Terms, this Policy governs all matters relating to personal data processing.

99ah takes its data protection obligations seriously. We apply technical and organisational measures proportionate to the risks presented by the personal data we process. We regularly review our practices to ensure they reflect current best standards for data security and player privacy.

99ah collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and occasionally from third-party verification or payment service providers. The categories of personal data we collect include:

99ah uses personal data only for specific, documented purposes. We do not use your data for purposes incompatible with those listed below without your prior consent or a valid legal basis to do so:

• Account administration: Creating, verifying, and maintaining your 99ah player account, including identity and age verification to confirm you are 21 or older and are who you say you are.
• Payment processing: Facilitating PKR deposits and withdrawals through your chosen payment method, including fraud screening and reconciliation of transaction records.
• Platform delivery: Providing access to casino games, cricket betting markets, PSL sportsbook, slots, bingo fishing, and all other 99ah products and services you use.
• Regulatory compliance: Meeting anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations imposed by applicable regulations.
• Security and fraud prevention: Detecting and investigating suspicious account activity, duplicate registrations, bonus abuse, and unauthorised access attempts.
• Customer support: Responding to your queries, complaints, and dispute submissions through live chat or email.
• Responsible gaming management: Monitoring player behaviour to identify indicators of problem gambling and applying protective measures such as self-exclusion, deposit limits, and reality checks.
• Marketing communications: Sending you promotional offers and platform updates where you have consented to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve our products, user interface, and customer experience.

Every instance of personal data processing at 99ah is grounded in one or more of the following legal bases. We identify the applicable basis before any processing activity commences:

• Contractual necessity: Processing required to fulfil our obligations under the player account agreement — including account creation, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, AML screening, and responsible gaming monitoring.
• Legitimate interests: Processing necessary for 99ah's legitimate operational interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

99ah does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. Data is shared only in the following limited and controlled circumstances:

• Payment service providers: JazzCash, EasyPaisa, and Pakistani banking partners receive the minimum data necessary to process your PKR transactions and comply with financial regulations.
• Identity verification providers: Third-party KYC and age verification services receive identity documents and biometric data solely for the purpose of confirming your eligibility to hold a 99ah account.
• Game technology providers: Casino software providers and live dealer studio operators receive gameplay session data required to deliver the gaming service and calculate outcomes.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, 99ah will disclose personal data to the relevant authority. We will notify you of such disclosure where permitted by law.
• Fraud prevention networks: In cases of suspected fraud, collusion, or match-fixing, limited account data may be shared with industry fraud prevention organisations for the purpose of investigation and prevention.

The 99ah platform uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, and gather aggregated analytics data. Cookies are small text files stored on your device when you visit 99ah.org. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged into your 99ah account and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations so that you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised data about how players navigate 99ah — which pages are visited most, where users drop off, and how features are used — to help us improve the platform. No individually identifiable data is included in these analytics reports.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotional content. These cookies help ensure that 99ah promotions relevant to cricket betting, PSL markets, or slot campaigns are shown to players who have opted in.

You may manage or withdraw your cookie consent at any time via the cookie preferences panel accessible from the footer of every 99ah page. Please note that disabling strictly necessary cookies will impair your ability to use the platform.

99ah implements a layered approach to data security, combining technical, physical, and organisational controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Transport Layer Security (TLS 1.3) encryption for all data transmitted between your device and the 99ah platform, including login credentials, payment details, and personal account data.
• Encryption at rest for sensitive data stored on 99ah servers, including identity documents, financial records, and authentication credentials.
• Role-based access controls ensuring that 99ah staff can only access personal data where their role requires it for a legitimate business purpose.
• Intrusion detection and monitoring systems providing continuous surveillance of platform infrastructure for suspicious activity.
• Regular security audits and penetration testing conducted by independent information security specialists.

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 99ah will notify affected players and relevant regulatory authorities in accordance with applicable legal notification obligations.

99ah retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. Specific retention periods are determined by the nature and sensitivity of the data and the applicable legal obligation:

• Account and identity data: Retained for the duration of your active 99ah account and for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of each transaction, consistent with financial record-keeping obligations applicable to licensed gaming operators.
• Gaming activity logs: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and regulatory audit.
• Support communications: Retained for two (2) years from the date of last interaction, unless the matter is subject to an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for the duration of your consent plus one (1) year as evidence of the consent basis for marketing communications sent during that period.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

As a 99ah player, you hold meaningful rights over your personal data. 99ah is committed to facilitating the exercise of these rights without undue delay and free of charge in the majority of cases. Your rights include:

To exercise any of these rights, contact the 99ah Data Support team via live chat or by emailing [email protected] with the subject line "Privacy Rights Request". We will respond within thirty (30) days. Where a request is complex or numerous, we may extend this period by a further sixty (60) days with prior notification.

The 99ah platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, solicit, or process personal data from any individual under the age of 21. If we discover or have reasonable grounds to believe that a player is under 21, the relevant account will be immediately suspended, data will be handled in accordance with our legal obligations, and the matter may be referred to the appropriate authorities.

If you believe a minor has registered a 99ah account using false information, please notify us immediately at [email protected]. 99ah takes underage gambling extremely seriously and will act swiftly on any such report.

As an internationally operated platform serving Pakistani players, some of the personal data 99ah processes may be transferred to, stored, or processed in jurisdictions outside Pakistan. Such transfers may occur when we use technology infrastructure providers, game software vendors, or identity verification services whose servers or processing facilities are located outside Pakistan.

Wherever such transfers occur, 99ah ensures that appropriate safeguards are in place to protect your personal data to the standard required under applicable data protection law. These safeguards include contractual data transfer agreements with recipient organisations that impose equivalent data protection obligations to those under which 99ah operates. If you wish to obtain further information about the safeguards applicable to a specific transfer, contact us at [email protected].

The 99ah platform may contain references to, or integrate with, third-party services such as game providers and payment processors. These third parties operate under their own independent privacy policies and data handling practices, for which 99ah accepts no responsibility. We recommend reviewing the privacy policies of any third-party service with which you interact in connection with your use of 99ah.

For the avoidance of doubt, the 99ah Privacy Policy applies solely to personal data collected and processed by 99ah in connection with your use of the 99ah platform at 99ah.org. It does not extend to any third-party website, application, or service, even where a link to such a service appears within the 99ah platform.

99ah reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered players via the email address on file or through a prominent notice displayed on the 99ah platform prior to the changes taking effect.

The effective date at the top of this Policy indicates when the current version was last updated. Your continued use of the 99ah platform following notification of an updated Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this Policy, please contact our support team to discuss your options, including account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 99ah, please contact our team through any of the channels listed below. All privacy-related communications are handled in strict confidence by staff trained in data protection obligations.