Privacy Policy – 999ab Online Gaming Pakistan

999ab ("we", "us", "the platform") is committed to protecting the personal data of every player who uses our online gaming and sports betting services. This Privacy Policy sets out the types of information we collect, why we collect it, how we use it and the measures we take to keep it secure.

We understand that Pakistani players value their privacy, particularly when it comes to financial information tied to JazzCash, Easypaisa, Raast and bank accounts. This policy is written in plain language so you can clearly understand what happens to your data — without having to dig through pages of legal jargon.

This policy applies to all data collected through the 999ab website at 999ab.vu, the 999ab mobile app, and any communications between you and the 999ab support team. It covers personal data collected from registration through to ongoing account use, gaming activity and payment processing.

We collect personal data from you in two main ways: information you provide directly, and information collected automatically when you use the platform.

Information you provide directly:

• Full name as it appears on your CNIC (Computerised National Identity Card)
• Date of birth and CNIC number (for age and identity verification)
• Mobile phone number, including the number linked to your JazzCash or Easypaisa wallet
• Email address
• Bank account details (IBAN) provided for withdrawals via Raast or Bank Transfer
• Copies of identity documents submitted during KYC (Know Your Customer) verification
• Communication records from live chat, email and support ticket interactions

Information collected automatically:

• IP address and approximate geolocation at the time of login or deposit
• Device type, operating system and browser version
• Session activity including pages visited, games played, bets placed and time on platform
• Login timestamps and session duration
• Cookies and similar tracking technologies (see Section 6)

Your personal data is used only for legitimate purposes related to the operation of the 999ab platform. We do not use your data for purposes beyond what is outlined below, and we do not sell your personal data to third parties for advertising or marketing.

Specific purposes for which we use your data include:

• Account management: Creating and maintaining your player account, processing login requests and managing account settings.
• Identity verification: Confirming your age and identity as part of our 18+ policy and KYC requirements before processing withdrawals or activating high-value bonuses.
• Payment processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer and other supported PKR payment methods.
• Fraud prevention & security: Detecting and investigating suspicious activity, duplicate accounts, unauthorised access and potential money laundering or payment fraud.
• Customer support: Responding to your queries, resolving disputes and providing assistance with account or payment issues.
• Platform improvement: Analysing usage patterns to improve game selection, platform performance, and the overall player experience.
• Bonus & promotion management: Verifying eligibility for offers, tracking wagering progress and preventing bonus abuse.
• Responsible gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling and offering appropriate tools or interventions.
• Legal compliance: Retaining records as required for audit, dispute resolution and compliance with applicable standards.

We take extra care with financial data. When you deposit or withdraw using JazzCash, Easypaisa, Raast or Bank Transfer, the transaction is processed through the relevant payment provider's own secure systems. 999ab does not store your full JazzCash PIN, Easypaisa mPIN or bank card details on our servers.

What we do retain is a record of:

• The mobile number or IBAN associated with your withdrawal or deposit
• Transaction amounts in PKR
• Transaction reference IDs provided by the payment provider
• Timestamps of deposit and withdrawal requests
• Payment method type used per transaction

This transaction history is retained to allow accurate reconciliation of your account balance, to resolve any payment disputes you raise with support, and to maintain records for audit purposes. Your financial data is never shared with other players or disclosed to marketing partners.

999ab does not sell, rent or trade your personal data. We share data with third parties only in the following limited circumstances:

• Payment providers: JazzCash, Easypaisa, Raast and bank partners receive only the data required to process your specific transaction (e.g. mobile number, transaction amount). They are bound by their own privacy and security obligations.
• Identity verification services: Where third-party KYC tools are used to verify document authenticity, your submitted identity documents are shared with those services under strict data processing agreements.
• Game software providers: Third-party game studios whose titles are hosted on 999ab may receive anonymised gameplay data (e.g. bet amounts, game outcomes) for audit and fairness verification purposes. No personally identifiable information is shared with game providers.
• Fraud detection services: IP addresses and device fingerprint data may be shared with fraud prevention partners to identify suspicious patterns across the industry.
• Legal obligations: If required by law or in response to a valid legal process, 999ab may disclose account data to the appropriate authorities.

All third parties with whom we share data are required to handle it securely, use it only for the stated purpose and not disclose it further without authorisation.

999ab uses cookies and similar technologies on the website and app to improve your experience and ensure platform security. A cookie is a small text file stored on your device when you visit the site. We use the following types of cookies:

• Essential cookies: Required for the platform to function. These handle session management, login state and security tokens. You cannot opt out of these without stopping use of the platform.
• Analytics cookies: Help us understand how players navigate the site — which pages are visited most, where users drop off and how long sessions last. This data is aggregated and does not identify individual players by name.
• Preference cookies: Remember your settings such as preferred language, odds format and display preferences so you don't have to reconfigure them each session.
• Security cookies: Used to detect unusual login patterns, bot activity and potential account compromise attempts.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using 999ab, though some features may behave differently. The 999ab mobile app uses equivalent device-level tracking mechanisms in place of browser cookies.

Protecting your data is a core operational priority at 999ab. We implement technical and organisational security measures appropriate for an online gaming and payment platform, including:

• TLS encryption on all data transmitted between your device and our servers
• Encrypted storage of sensitive fields including CNIC numbers and payment identifiers
• Access controls ensuring that only authorised 999ab staff can view account-level personal data, and only when required for support or compliance purposes
• Regular internal security reviews and monitoring for unusual data access patterns
• Two-factor authentication options available to all registered players for additional account protection

Despite our best efforts, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that affects your personal data, we will notify affected players promptly and take immediate steps to contain the incident.

We retain your personal data for as long as your account is active and for a period after account closure to meet legitimate operational and legal needs. Specific retention periods are as follows:

• Active account data: Retained for the full duration of your account's existence on the platform.
• Transaction records: Retained for a minimum of five years after the date of transaction to enable dispute resolution and audit requirements.
• KYC documents: Retained for a minimum of five years after account closure or the last transaction, whichever is later.
• Support communications: Retained for three years from the date of the interaction.
• Closed accounts: Core identity and transaction data is retained for up to seven years after account closure. Marketing preferences and analytics data are deleted within 90 days of closure.

When data is no longer required for any legitimate purpose, it is securely deleted or anonymised so it can no longer be linked back to you as an individual.

As a 999ab player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the 999ab support team with your registered username and a description of your request.

999ab does not knowingly collect personal data from individuals under the age of 18. The platform is strictly for adults. If we discover that a minor has registered an account or provided personal data, we will immediately close the account, delete the associated data and — where applicable — reverse any transactions made.

If you are a parent or guardian and believe a person under 18 has used your device or payment details to access 999ab, contact support immediately. We will investigate and take appropriate action without delay.

999ab may update this Privacy Policy from time to time to reflect changes in how we operate, the services we offer or applicable data protection standards. When we make material changes, we will notify registered players via a platform notification or by email to the address on your account.

The updated policy will be published on this page with a revised "Last Updated" date at the top. Your continued use of the 999ab platform after the updated policy takes effect constitutes your acceptance of the revised terms. We recommend checking this page periodically, particularly before making significant account changes such as a large withdrawal or new payment method setup.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to report a potential data security concern, you can reach the 999ab team through:

• Live chat: Available 24/7 via the chat button on the 999ab platform — the fastest way to get a response.
• Email: Send your query to [email protected] with the subject line "Privacy Request – [your username]".

If you are not satisfied with our response to your privacy query, you have the right to escalate the matter. However, please give us the opportunity to resolve your concern directly before doing so — our support team is committed to addressing privacy issues fairly and promptly.