Your privacy is not an afterthought at 99ah — it is built into the foundation of how we operate. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used, and the rights you hold as a player on our platform.
Our Privacy Commitments
We believe players deserve to know exactly how their data is handled. Here is a plain-English summary of the six core commitments that underpin our full Privacy Policy.
99ah collects personal data on a strict need-to-know basis. We do not harvest excessive information. Every data point we request — from your CNIC number to your JazzCash wallet ID — has a specific, documented purpose tied to account management, security, or legal compliance.
All data transmitted between your device and 99ah servers is protected by industry-standard TLS/SSL encryption. Personal data stored on our systems is encrypted at rest using AES-256. This standard is the same one used by major Pakistani banks including HBL and UBL.
99ah does not sell, rent, or trade your personal data to any third party for commercial purposes. Period. Data is shared only with trusted service providers under strict contractual obligations, and only to the extent necessary to deliver platform services.
You have the right to access, correct, or request deletion of your personal data held by 99ah at any time. Data subject requests are processed within 30 days. Simply contact our support team at [email protected] to initiate a request.
99ah uses cookies strictly for session management, platform functionality, and aggregate analytics. We do not use tracking cookies to build advertising profiles. Our cookie policy is clearly explained in Section 7 of this Privacy Policy below.
99ah does not hold onto your data indefinitely. Retention periods are tied to legal obligations and operational necessity. Transaction records are retained for seven years in line with standard financial compliance requirements. Other categories have shorter retention windows.
1.1 99ah is committed to protecting the privacy and personal data of all players who use our online casino and sports betting platform. We understand that players in Pakistan place a great deal of trust in us when they share personal information, and we take that responsibility seriously.
1.2 This Privacy Policy applies to all data collected through the 99ah website, mobile platform, customer support channels, and any other touchpoints through which a player interacts with the 99ah brand.
1.3 This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between 99ah and its players.
1.4 If you have any questions about this Privacy Policy or about how 99ah handles your personal data, please contact our support team before using the platform. Contact details are provided in Section 15.
2.1 For the purposes of applicable data protection law, 99ah acts as the data controller in respect of all personal data collected from players and visitors to the platform.
2.2 As data controller, 99ah determines the purposes for which personal data is collected and the means by which it is processed. Where 99ah engages third-party processors to carry out specific processing activities on its behalf, appropriate data processing agreements are in place.
2.3 All data subject requests, complaints, and privacy-related enquiries should be directed to 99ah's designated privacy contact, whose details are set out in Section 15 of this Privacy Policy.
3.1 99ah collects personal data across several categories, depending on how you interact with the platform. The table below summarises the main categories of data collected and the context in which each category arises.
| Data Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality | Account registration and KYC verification |
| Contact Data | Email address, mobile number, city of residence | Account registration, customer support |
| Financial Data | JazzCash wallet ID, EasyPaisa number, bank account details, transaction history | Deposits, withdrawals, and payment verification |
| Technical Data | IP address, device type, browser, operating system, session tokens | Automatic collection on platform access |
| Usage Data | Games played, bets placed, time on platform, feature interactions | Ongoing platform activity |
| Communications Data | Live chat transcripts, email correspondence, support tickets | Customer support interactions |
| Verification Documents | CNIC scan, proof of address, payment method screenshot | KYC and AML compliance checks |
3.2 Data You Provide Directly. The majority of personal data held by 99ah is data that you provide voluntarily during registration, identity verification, payment processing, or when contacting customer support.
3.3 Data Collected Automatically. When you access the 99ah platform, certain technical and usage data is collected automatically through cookies, server logs, and similar technologies. This data is used for security monitoring, platform optimisation, and fraud detection purposes.
3.4 Data From Third Parties. In limited circumstances, 99ah may receive data about you from third-party identity verification providers, payment processors such as JazzCash or EasyPaisa, or fraud prevention services. Such data is used solely to verify your identity or to comply with legal obligations.
4.1 99ah uses personal data only for legitimate, documented purposes. The following list outlines the primary purposes for which your data is processed:
4.2 99ah does not use personal data for automated decision-making that produces significant legal effects on players, with the exception of real-time fraud detection systems which may temporarily restrict account activity pending manual review.
5.1 Every data processing activity carried out by 99ah is supported by at least one of the following legal bases:
6.1 99ah does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the circumstances described below, and only to the minimum extent necessary.
99ah engages trusted third-party service providers to support platform operations. These include payment processors (JazzCash, EasyPaisa, bank partners), identity verification providers, cloud hosting and infrastructure providers, customer support software providers, and fraud detection services. All service providers are bound by data processing agreements that restrict them from using your data for any purpose other than providing the contracted service to 99ah.
99ah may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of 99ah, its players, or the public.
In the event of a merger, acquisition, or sale of all or substantially all of 99ah's assets, personal data held by the platform may be transferred to the acquiring entity. Players will be notified of such a transfer prior to its taking effect, and the acquiring entity will be bound by this Privacy Policy or a substantially equivalent policy.
7.1 99ah uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you access the platform.
7.2 The following categories of cookies are used on 99ah:
7.3 99ah does not use third-party advertising cookies or behavioural targeting cookies. We do not allow advertising networks to place cookies on the 99ah platform.
7.4 You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the platform.
8.1 99ah retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 7 years post-closure | AML/KYC legal obligation |
| Financial transaction records | 7 years from transaction date | Financial compliance requirement |
| Customer support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Technical and usage data (logs) | 13 months on a rolling basis | Security monitoring / fraud prevention |
| Marketing consent records | Until consent is withdrawn + 1 year | Demonstrating lawful processing basis |
| Self-exclusion records | Duration of exclusion + 7 years | Responsible gaming obligation |
8.2 When data reaches the end of its retention period, 99ah securely deletes or anonymises it in a manner that ensures it cannot be reconstructed or attributed to any individual.
9.1 As a player whose personal data is processed by 99ah, you hold the following rights in relation to that data:
9.2 To exercise any of these rights, please contact 99ah's privacy team using the contact details in Section 15. We will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.
9.3 99ah will not charge a fee for processing data subject requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
10.1 99ah implements a layered approach to data security, combining technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure.
10.2 Key technical security measures in place include:
10.3 Despite these measures, no system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to player rights and freedoms, 99ah will notify affected players without undue delay and in accordance with applicable notification requirements.
10.4 Players are encouraged to take their own security precautions, including using a strong, unique password for their 99ah account, enabling two-factor authentication, and logging out of the platform when using a shared or public device.
11.1 The 99ah platform is strictly intended for adults aged 21 years and over. 99ah does not knowingly collect personal data from any person under the age of 21.
11.2 Age verification is conducted as part of the registration and KYC process. If 99ah becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.
11.3 Parents and guardians who believe that a minor may have registered an account on 99ah are encouraged to contact our support team immediately so that the matter can be investigated and resolved without delay.
12.1 99ah's primary operations are focused on the Pakistani market. Where personal data is transferred to or processed in a country outside Pakistan, 99ah ensures that appropriate safeguards are in place to protect the data at a standard equivalent to that required under applicable Pakistani data protection principles.
12.2 International transfers are limited to circumstances where a service provider operates infrastructure or support functions from outside Pakistan. In all such cases, contractual data protection obligations are imposed on the receiving entity.
13.1 The 99ah platform does not include links to third-party websites or services other than those described in these policies. However, if at any time you navigate to a third-party site from a 99ah-related source, please be aware that those sites operate under their own privacy policies, and 99ah accepts no responsibility for the privacy practices of third parties.
13.2 Players are encouraged to review the privacy policy of any third-party service they interact with, particularly payment service providers such as JazzCash and EasyPaisa, whose data practices are governed by their own respective policies.
14.1 99ah may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. The effective date at the top of this policy will be updated whenever a material change is made.
14.2 Where changes are material, 99ah will notify registered players by email or via an on-site notification prior to the changes taking effect. We encourage players to review this Privacy Policy periodically to stay informed about how their data is being protected.
14.3 Your continued use of the 99ah platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any change, you should cease using the platform and contact support to request account closure.
15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 99ah handles your personal data, please contact us using the details below:
15.2 When submitting a data subject request, please include your registered email address and a description of your request so that we can locate your account records and respond efficiently. We may ask for additional information to verify your identity before processing a request.
15.3 99ah aims to resolve all privacy-related enquiries fairly and promptly. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.
With bank-grade encryption, zero data selling, and full player rights, 99ah is the platform Pakistani players trust. Explore our casino, place your cricket bets, and play with confidence.