ab99 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ab99 ("we," "us," "our") collects, uses, stores, and protects personal data relating to individuals ("you," "your") who access or use the ab99 platform at ab99.click, including any associated mobile interfaces, gaming products, and support services (collectively, the "Platform").

By registering an account on ab99 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

We are committed to handling your personal data responsibly, lawfully, and transparently. If you have questions about anything in this Policy, our support team is available 24/7 via live chat.

---

2. Data Controller

For the purposes of applicable data protection legislation, ab99 is the data controller in respect of all personal data collected and processed through the Platform. ab99 operates under an international gaming licence, and our data processing activities are governed by the requirements of that licence as well as applicable international data protection standards.

Where ab99 engages third-party service providers to process personal data on its behalf — for example, payment processors or KYC verification providers — those parties act as data processors under contracts that impose binding data protection obligations consistent with this Policy.

---

3. Personal Data We Collect

The following categories of personal data may be collected and processed by ab99:

---

4. How We Collect Your Data

ab99 collects personal data through the following means:

4.1 Direct Collection

The majority of personal data we hold is provided directly by you during the registration process, when completing KYC verification, when making deposits or withdrawal requests, when contacting our support team, or when responding to surveys or promotional offers. You are always informed at the point of collection about why we need the data and how it will be used.

4.2 Automated Collection

When you access and use the Platform, certain technical and usage data is collected automatically through cookies, web beacons, server logs, and similar technologies. This includes your IP address, device identifiers, browser information, and session activity. This automated collection is necessary for the security and operation of the Platform. Please refer to Section 8 for full details on our use of cookies.

4.3 Third-Party Sources

In some circumstances ab99 may receive personal data about you from third-party sources, including: identity verification and fraud prevention agencies engaged for KYC purposes; payment service providers such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in connection with transaction processing; and our licensing authority in connection with regulatory compliance obligations.

---

5. Legal Basis for Processing

ab99 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — operating your account, processing deposits and withdrawals, and delivering gaming services.
• Legal obligation: Processing required to comply with our licensing conditions, anti-money laundering obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing carried out for purposes such as fraud prevention, platform security, improving user experience, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

---

6. How We Use Your Personal Data

ab99 uses the personal data we collect for the following purposes:

6.1 Account Management

To create and maintain your ab99 account, verify your identity and age, manage your account settings, process your login credentials securely, and communicate with you about your account status, transactions, and any changes to our terms or policies.

6.2 Payment Processing

To process deposits made via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, to verify ownership of the payment methods you use, to process withdrawal requests, and to maintain accurate financial records of all transactions on your account. All financial data is handled in strict accordance with the requirements of the relevant payment networks and our licensing authority.

6.3 Regulatory Compliance

To fulfil our obligations under our international gaming licence, including age verification, anti-money laundering (AML) screening, know-your-customer (KYC) checks, and mandatory reporting to our licensing authority. These processing activities are non-negotiable — without them, we cannot lawfully offer gaming services.

6.4 Responsible Gaming

To monitor gaming patterns and identify behaviour that may indicate problem gambling, to enforce deposit limits and self-exclusion requests, and to communicate with players who may benefit from responsible gaming support. This monitoring is conducted in your interest and is a condition of our operating licence. Full details are available on our Responsible Gaming page.

6.5 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other security threats. Technical data such as IP addresses and device fingerprints are used to identify suspicious access patterns and to protect the integrity of the Platform.

6.6 Customer Support

To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance. Support interactions may be recorded and retained for quality assurance and training purposes.

6.7 Platform Improvement

To analyse aggregated usage data, identify areas where the Platform can be improved, test new features, and optimise the overall player experience. Where possible, data used for analytics purposes is anonymised or pseudonymised.

6.8 Marketing

Subject to your marketing preferences, to send you information about promotions, bonuses, new games, and other offers available on ab99. You can update your marketing preferences at any time from your account settings or by contacting our support team. We do not send unsolicited marketing to individuals who have not consented.

---

7. Sharing Your Personal Data

ab99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

7.1 Payment Service Providers

We share financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment processor necessary to execute your deposit or withdrawal transactions. These providers are contractually bound to use your data solely for transaction processing and are prohibited from using it for any other purpose.

7.2 Identity Verification and Fraud Prevention Agencies

We share identity data with third-party KYC and anti-fraud service providers to verify your identity and detect fraudulent activity. These agencies may retain a record of the checks performed in accordance with their own regulatory obligations.

7.3 Licensing and Regulatory Authorities

We are required by our international gaming licence to provide certain player data to our licensing authority upon request, and to report suspicious transactions to relevant financial intelligence authorities. These disclosures are legal obligations that we cannot refuse.

7.4 Professional Advisors

In limited circumstances we may share personal data with legal counsel, auditors, or other professional advisors where necessary for the conduct of our business. All such parties are bound by professional confidentiality obligations.

7.5 Corporate Transactions

In the event of a merger, acquisition, or other corporate restructuring involving ab99, personal data held by ab99 may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy implications before it takes effect.

---

8. Cookies & Tracking Technologies

ab99 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and collect analytical data. A cookie is a small text file placed on your device by your browser when you visit a website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function — maintaining your login session, remembering your language preferences, and securing your account. These cannot be disabled.
• Analytical Cookies: Used to understand how players interact with the Platform so we can identify improvements. Data collected is aggregated and does not identify you personally.
• Functional Cookies: Remember your preferences and settings to personalise your experience across visits.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorised account access.

8.2 Managing Cookies

You can control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair the functionality of the Platform — in particular, you will not be able to maintain a logged-in session. Disabling analytical or functional cookies will not affect your ability to use core Platform features.

---

9. Data Retention

ab99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by our licensing obligations and applicable law. The following general retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years from the date of account closure, as required by our licensing authority's anti-money laundering obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming session logs: Retained for a minimum of three (3) years from the date of each session.
• Support communications: Retained for three (3) years from the date of each interaction.
• Marketing preferences and consent records: Retained for the duration of your account and for two (2) years following account closure.
• Technical and usage data: Retained in aggregated or anonymised form indefinitely; raw logs retained for up to twelve (12) months.

Where data is retained solely to comply with a legal obligation rather than for operational purposes, access to that data is restricted to personnel with a specific compliance need.

---

10. Data Security

ab99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls ensuring that personal data is accessible only to employees and contractors who require it to perform their duties;
• Regular security assessments, penetration testing, and vulnerability scanning of our infrastructure;
• Two-factor authentication and strict password policies for all internal system access;
• Incident response procedures that include mandatory notification protocols in the event of a data breach.

While ab99 takes all reasonable measures to protect your data, no system is entirely immune to security risks. You can contribute to the security of your account by using a strong, unique password, not sharing your credentials, and contacting our support team immediately if you suspect unauthorised access to your account.

---

11. International Data Transfers

ab99 operates under an international gaming licence, and some of the service providers we use may be located in countries outside Pakistan. Where personal data is transferred internationally, ab99 takes steps to ensure that appropriate safeguards are in place, including contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable under our licensing framework.

By using the Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries outside Pakistan. In all such cases, your data is protected in accordance with this Policy and applicable data protection requirements under our licensing framework.

---

12. Your Data Rights

Subject to applicable law and the requirements of our licensing obligations, you have the following rights in respect of your personal data held by ab99:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update basic profile information directly from your account settings.
• Right to Erasure: In certain circumstances you may request that we delete your personal data. Note that we may be unable to fulfil erasure requests where retention is required by our licensing obligations or applicable law.
• Right to Restrict Processing: In certain circumstances you may request that we restrict the processing of your personal data while a dispute is resolved.
• Right to Data Portability: You may request a copy of personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time.

To exercise any of these rights, please contact our support team via live chat or email. We may require you to verify your identity before processing your request. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

---

13. Marketing Communications

With your consent, ab99 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, cricket betting markets, and other offers on the Platform. You can opt in or opt out of marketing communications at any time through your account settings or by contacting our support team.

Even if you opt out of marketing communications, we will continue to send you transactional and account-related communications — such as deposit confirmations, withdrawal notifications, and security alerts — as these are necessary for the operation of your account.

We do not engage in unsolicited bulk marketing. All marketing communications sent by ab99 will clearly identify ab99 as the sender and will include an easy mechanism for you to unsubscribe.

---

14. Minors

The ab99 Platform is strictly intended for individuals who are 21 years of age or older. ab99 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is conducted as part of the registration and KYC process.

If ab99 becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately, all Bonus Funds will be forfeited, and any real-money balance will be returned to the payment method used for deposit. The personal data of the underage individual will be deleted from our systems subject to any mandatory retention obligations.

If you believe that a minor may have registered an account on ab99, please contact our support team immediately so that we can investigate and take appropriate action.

---

15. Changes to This Policy

ab99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, our licensing obligations, or applicable law. When material changes are made, we will notify registered players by email to the address on their account and by posting a prominent notice on the Platform before the changes take effect.

The effective date at the top of this Policy indicates when the current version was last updated. We encourage you to review this Policy periodically to stay informed about how ab99 is protecting your data. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

---

16. Contact Us & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which ab99 handles your personal data, please contact our support team via 24/7 live chat on the Platform. Our support address is also displayed as plain text in the footer of every page on this site for your reference.

We take all privacy complaints seriously and will acknowledge your complaint within 48 hours of receipt, with a substantive response provided within 14 business days. Where a complaint cannot be resolved to your satisfaction, you may refer the matter to our licensing authority in accordance with the complaints procedure set out in our Terms & Conditions.