Your Privacy at 999ab — How We Handle Your Data

1Introduction

At 999ab, we take the privacy of our players seriously. This Privacy Policy describes how we collect and process personal information when you use the 999ab platform — including the website at 999ab.vin, the Android and iOS mobile app, and all associated services.

This policy applies to all registered players and visitors to the 999ab platform. It sits alongside our Terms and Conditions and Responsible Gaming Policy, both of which form part of our overall agreement with players.

We understand that for Pakistani players, sharing personal information and payment details — including your mobile number, CNIC details and JazzCash or Easypaisa account — involves real trust. We want to be clear about exactly what we do with that information, who can access it, and what your rights are. We have written this policy in plain language so it is actually readable, rather than being buried in legal jargon that nobody gets through.

If you have questions about this policy or want to exercise any of your data rights, our 24/7 support team is available through live chat on the website and in the app.

2Data We Collect

We collect data in three main ways: information you give us directly, information generated by your use of the platform, and in limited cases, information from third-party services we work with.

We only collect data that is necessary for the purposes described in this policy. We do not collect data we do not need.

3How We Use Your Data

The data we collect is used for the following purposes:

• Account management: To create, maintain and secure your 999ab player account. This includes verifying your identity, processing your PKR deposits and withdrawals, and keeping your account details up to date.
• Providing the platform: To deliver the games, sports betting markets, live casino tables and other features you access on the platform. Game history and betting records are maintained as part of the service.
• Customer support: To respond to your queries, resolve disputes, process complaints and provide assistance via live chat or email. Support interactions may be logged and reviewed for quality purposes.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, money laundering, underage access and other breaches of our Terms and Conditions. This is a core use of the data and cannot be opted out of as a condition of using the platform.
• Responsible gaming: To monitor for patterns that may indicate a player is experiencing difficulty managing their gaming activity, so we can prompt them to use responsible gaming tools where appropriate.
• Platform improvement: To understand how players use the platform, identify features that work well and areas that need improvement, and inform product development decisions.
• Communications: To send you account-related notifications (password changes, withdrawal confirmations, verification requests) and, where you have opted in, promotional messages about bonuses, Cricket season offers and new features on the platform.

4Data Sharing

We do not sell your personal data. We do not share it with third parties for their own marketing purposes. Data is shared only in the following limited, necessary circumstances:

• Payment processors: JazzCash, Easypaisa, Raast infrastructure partners, banks and card networks receive the transaction data necessary to process your PKR deposits and withdrawals. They operate under their own privacy policies and security standards.
• Identity verification providers: Where we use a third-party service to verify your CNIC or confirm your identity before processing withdrawals, the relevant documents and data are shared with that provider for verification purposes only.
• Game providers: Third-party game studios whose titles are available on the 999ab platform may receive a player identifier and game interaction data necessary to run the games and maintain game records. They do not receive your full personal profile.
• Fraud and security services: We may share data with specialist fraud detection and prevention services to protect the platform and all its players from bad actors.
• Platform infrastructure: Our hosting, cloud storage and technical service providers process data as part of operating the platform. They act under strict data processing agreements and are not permitted to use the data for their own purposes.
• Legal requirements: If we are required by applicable law, court order or lawful authority to disclose certain data, we will comply with that requirement. We will notify you where we are legally permitted to do so.

5Payment Data & PKR Transactions

Because 999ab operates exclusively in PKR and supports Pakistani payment methods including JazzCash, Easypaisa, Raast, bank transfer and cards, we collect certain payment-related data as part of processing your transactions. Here is how we handle it:

• Mobile wallet numbers (JazzCash, Easypaisa): Your registered mobile number for these wallets is stored to process transactions and to enforce our policy of returning withdrawals to the same method used for deposits. This number is not shared with third parties except as needed to execute transactions.
• Bank account details: Where you use bank transfer, the account number and bank name are stored for the same purpose — transaction processing and withdrawal routing.
• Card data: We do not store full card numbers on 999ab servers. Card transactions are processed through encrypted payment gateways that are PCI-DSS compliant. Only masked card references (e.g., last four digits) may be stored for display purposes in your transaction history.
• Transaction history: Your full PKR deposit and withdrawal history is stored as part of your account record. This is accessible to you through your account dashboard and is used by our support team when resolving payment queries.

All payment data is transmitted over encrypted connections (HTTPS/TLS). We do not process payments over unencrypted channels. If you ever receive a communication asking you to share payment credentials directly — not through the secure platform cashier — treat it as suspicious and contact support immediately.

6Cookies & Tracking Technologies

The 999ab website and app use cookies and similar technologies. These are small files stored on your device that help the platform function correctly and help us understand how players use it.

• Essential cookies: Required for the platform to work — keeping you logged in, maintaining your session, and remembering your language and currency settings. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand which pages and features are most used, how long players spend on different sections, and where players encounter difficulties. This data is aggregated and anonymised — it is about patterns, not individual players.
• Preference cookies: Store your settings and preferences so you do not have to reset them on every visit — things like your favourite game categories or notification preferences.
• Security cookies: Help detect and prevent fraud and suspicious login activity by identifying unusual patterns across sessions.

We do not use third-party advertising cookies or serve targeted ads based on your browsing behaviour outside of the 999ab platform. You can manage cookie settings through your browser's privacy controls. Disabling essential cookies will affect your ability to use the platform normally.

7Data Security

Protecting your personal data is something we invest in seriously. The security measures in place at 999ab include:

• Encryption in transit: All data transmitted between your device and the 999ab platform is encrypted using TLS (Transport Layer Security). This applies to the website, the mobile app, and all API communications.
• Encryption at rest: Sensitive data stored on our servers — including identity documents and payment information — is encrypted at rest using strong encryption standards.
• Access controls: Personal data is accessible only to staff members who need it to do their job. Access is role-based and logged. We do not give broad, unrestricted access to player data to anyone within our organisation.
• Two-factor authentication: Available to players for account login and is used internally for staff accessing systems that contain player data.
• Regular security reviews: Our platform infrastructure is subject to ongoing security monitoring and periodic reviews to identify and address vulnerabilities.

Despite our best efforts, no security system is completely immune to breaches. In the event of a data breach that affects your personal information, we will notify affected players and take immediate steps to contain and remediate the incident.

You also have a role to play in keeping your account secure. Use a strong, unique password. Do not share your OTP codes with anyone. If you notice any suspicious activity on your account, contact support through live chat immediately.

8Data Retention

We retain your personal data for as long as your account is active and for a reasonable period after account closure to comply with our operational and legal obligations. In practice this means:

• Active accounts: Data is retained throughout the life of your account to provide the service, maintain your transaction history and support responsible gaming monitoring.
• Closed accounts: Following account closure, we retain core account and transaction records for a period consistent with our legal obligations, fraud prevention requirements and operational needs. This is typically several years from the date of closure.
• Support records: Live chat and email support interactions are retained for a period necessary to resolve ongoing matters and for quality assurance purposes.
• Identity verification documents: Retained for as long as required by our verification obligations, and deleted securely when retention is no longer necessary.

When data is no longer required and the retention period has expired, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

9Your Rights & Choices

As a 999ab player, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via live chat or email:

• Right to access: You can request a copy of the personal data we hold about you. We will provide this in a clear, readable format.
• Right to correction: If any of your personal data is inaccurate or incomplete, you can request that we correct it. For some information — such as your name or date of birth — we may require supporting documentation before making changes.
• Right to deletion: In certain circumstances, you can request that we delete your personal data. Note that some data must be retained due to legal and operational obligations, so not all deletion requests can be fully fulfilled.
• Right to restrict processing: You can request that we limit how we use your data in certain circumstances — for example, while a correction request is being reviewed.
• Right to object to marketing: You can opt out of promotional and marketing communications at any time, either through your account settings or by contacting support. You will still receive essential account-related notifications.
• Right to data portability: You can request your data in a structured, machine-readable format where this is technically feasible.

10Children's Privacy

The 999ab platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a person under 18 has registered an account or provided personal data on the platform, we will close the account immediately and delete the associated data.

If you believe a minor has created a 999ab account, please contact our support team immediately. We take underage access very seriously and act on all such reports promptly.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. 999ab does not accept responsibility for minors accessing the platform through a parent or guardian's registered account — account security is the responsibility of the registered account holder.

11Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes in applicable legal requirements, or improvements in how we communicate our privacy practices. When we make updates, the revised policy will be published on this page with an updated "Last updated" date.

For significant changes — particularly those that affect how we use your data in ways that are meaningfully different from what this policy currently describes — we will make reasonable efforts to notify registered players via in-app notification or email before the changes take effect.

We encourage you to review this page periodically. Your continued use of the 999ab platform after a revised policy has been published constitutes your acceptance of the updated terms. If you disagree with any changes, you may contact support to discuss your options, including closing your account and withdrawing your available balance.

12Contact Us

If you have any questions about this Privacy Policy, want to understand more about how your data is used, or wish to exercise any of your data rights, please get in touch with us. Our support team is available 24/7 and can be reached through:

• Live Chat: Available on the 999ab website and in the mobile app. This is the fastest way to get a response — typically within minutes.
• Email: Our support email address is displayed in the footer of every page on the 999ab website. Email queries are typically answered within 24 hours during normal operating periods.

For account-specific privacy requests — such as requesting a copy of your data or asking for data to be deleted — please use the live chat or email channel and include your registered mobile number or account email so we can locate your account and process the request correctly.

You can also visit our FAQ page for quick answers to common questions about account data, verification and payments.