99betpkr Privacy Policy

1 Introduction

99betpkr ("we", "us", "our") is committed to safeguarding the privacy of every individual who interacts with our platform. This Privacy Policy describes how 99betpkr collects, uses, shares, retains, and protects personal information relating to players, prospective players, and visitors to the 99betpkr.app website (collectively, "you" or "your").

We understand that Pakistani players value discretion and expect their personal and financial information to be handled with full professionalism. Whether you are placing a bet on PSL cricket from Lahore, playing Teen Patti from Karachi, or accessing our slot catalogue from Islamabad, your data is protected under the same rigorous standards at all times.

This policy is written in plain English and is intended to be read alongside the Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and 99betpkr.

2 Data Controller

For the purposes of applicable data protection legislation, 99betpkr acts as the data controller in respect of personal data collected from players and website visitors. This means we determine the purposes and means by which your personal data is processed.

Where 99betpkr engages third-party service providers to process personal data on our behalf (for example, identity verification providers or payment processors), those providers act as data processors under contractual obligations that restrict their use of your data to the specific purposes we have authorised.

Our Data Protection Officer (DPO) can be reached at the contact details provided in Section 14 of this policy. All formal data subject requests must be directed to the DPO for proper logging and timely response.

3 Data We Collect

99betpkr collects the following categories of personal data, depending on how you interact with the platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly necessary for identity verification purposes (i.e., a photograph for CNIC matching). Where we do process such data, we do so only with your explicit consent or where required by applicable law.

4 How We Collect Data

99betpkr collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC, contacting customer support, participating in promotions, or adjusting your account settings.
• Automated technologies: Technical data collected automatically via cookies, server logs, and similar tracking technologies when you visit or interact with the 99betpkr platform. See Section 9 for full cookie details.
• Payment processors: Transaction reference data returned by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank upon processing your deposit or withdrawal requests.
• Identity verification providers: Confirmation data returned by our KYC partners after verifying your government-issued identity documents and proof of address.
• Fraud prevention systems: Device fingerprinting and behavioural analytics data generated by our anti-fraud platform to detect unauthorised account access or suspicious wagering patterns.
• Publicly available sources: In limited circumstances, we may cross-reference publicly available records (such as sanctions lists or politically exposed persons databases) as part of our AML compliance obligations.

5 Purposes & Legal Bases for Processing

We process your personal data only where we have a valid legal basis to do so. The table below maps each processing purpose to its corresponding lawful basis:

Where we rely on legitimate interests as a legal basis, we have conducted a balancing test to confirm that our interests do not override your fundamental rights and freedoms. You may request a copy of any legitimate interests assessment by contacting our Data Protection Officer.

Where we rely on consent — specifically for promotional email and SMS communications — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

6 Data Sharing & Disclosure

99betpkr does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to protect it:

• Licensed Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction reference data necessary to process your PKR deposits and withdrawals. These entities are regulated by the State Bank of Pakistan and operate under their own data protection obligations.
• Identity Verification Providers: Our KYC partner receives copies of identity documents you submit during verification. They process this data under strict contractual instructions and are prohibited from using it for any independent purpose.
• Fraud Prevention Platforms: Technical and behavioural data is shared with our fraud detection service provider to protect all platform users from unauthorised access and financial crime.
• Game Content Providers: Game studios and live dealer studios that power games on the 99betpkr platform receive anonymised session data (e.g., bet sizes, game outcomes) for RNG auditing and RTP reporting. No personally identifiable information is shared with game providers.
• Regulatory Authorities: 99betpkr is obligated to disclose player data to its licensing authority, financial intelligence units, or law enforcement agencies upon receipt of a lawful request. We will notify affected players of such requests where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and insurers may access relevant personal data on a need-to-know basis under confidentiality obligations when advising 99betpkr on its legal, financial, or regulatory matters.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 99betpkr's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments. Affected players will be notified in advance of any such transfer.

7 International Data Transfers

As an internationally licensed operator, 99betpkr may transfer certain categories of personal data to jurisdictions outside Pakistan for the purposes of hosting, processing, and technical operations. Where such transfers occur, we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) or equivalent contractual protections binding the recipient to data protection standards no less stringent than those applied by 99betpkr.
• Transfers exclusively to countries or organisations that have been assessed as providing an adequate level of data protection relative to international standards.
• Data minimisation principles — only the minimum data necessary for the specific purpose is transferred internationally.

Your gaming data, account records, and financial transaction history are primarily stored on servers located within jurisdictions covered by our international gaming licence. Payment transaction data processed by Pakistani payment providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) remains within Pakistan's financial infrastructure in accordance with State Bank of Pakistan requirements.

8 Data Retention

99betpkr retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or our licensing obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, in line with standard financial record-keeping obligations.
• Gaming History: Retained for the duration of your account and for five (5) years after closure, for dispute resolution and regulatory audit purposes.
• Responsible Gaming Records: Self-exclusion and limit records are retained for a minimum of five (5) years to prevent re-registration during an active exclusion period.
• Support Communications: Retained for three (3) years from the date of the communication, unless the matter relates to an ongoing dispute or legal claim.
• Technical and Log Data: Server logs and device data retained for twelve (12) months for fraud prevention and security monitoring purposes.
• Marketing Consent Records: Retained for the duration of your consent, plus two (2) years from the date of withdrawal, as proof of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised data (which cannot be used to identify you) may be retained indefinitely for statistical and analytical purposes.

9 Cookies & Tracking Technologies

99betpkr uses cookies and similar tracking technologies to operate the platform securely, remember your preferences, and understand how players interact with our services. We do not use cookies for third-party advertising or cross-site behavioural profiling.

The cookies we deploy fall into the following categories:

• Strictly Necessary Cookies: These are essential for platform functionality, including maintaining your login session, remembering your preferred language and currency (PKR), and ensuring security tokens are correctly applied. These cookies cannot be disabled without impairing core platform features.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use the 99betpkr platform — for example, which game categories are most visited and how long sessions last. This data helps us improve the platform experience for all players. No personally identifiable information is captured.
• Fraud Prevention Cookies: These cookies support our fraud detection system by generating a device fingerprint that helps us identify suspicious login attempts or account takeover patterns. They are essential for player account security.
• Preference Cookies: These store your display preferences — such as theme settings, notification preferences, and responsible gaming reminder intervals — so they persist across sessions.

You can manage non-essential cookie preferences via the Cookie Settings panel accessible from your account dashboard. Please note that disabling strictly necessary or fraud prevention cookies may result in reduced functionality or inability to access certain platform features.

Most modern browsers also allow you to block or delete cookies at the browser level. For instructions specific to your browser, please refer to the browser's built-in help documentation.

10 Your Data Rights

Subject to applicable law and certain regulatory exceptions, you have the following rights in respect of your personal data held by 99betpkr:

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is being processed. We will respond within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that this right is subject to overriding legal obligations — for example, AML record-keeping requirements mean we cannot delete certain financial records before the mandatory retention period expires.
• Right to Restriction: You may request that we temporarily restrict processing of your data — for example, while a rectification request is being assessed — in which case we will store your data but not actively process it.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data where it is based on legitimate interests, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We may require proof of identity before processing your request to prevent unauthorised access to your data. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive.

11 Security Measures

99betpkr implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS Encryption: All data transmitted between your browser or app and our servers is encrypted in transit using industry-standard Transport Layer Security protocols.
• At-Rest Encryption: Sensitive data fields — including identity document copies, financial account references, and authentication credentials — are encrypted at rest using AES-256 encryption.
• Multi-Factor Authentication (MFA): All 99betpkr staff with access to player data are required to authenticate using MFA. Players are encouraged to enable MFA on their accounts via the security settings panel.
• Role-Based Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Customer support agents, for example, can view account status and gaming history but cannot access full financial account numbers.
• Regular Penetration Testing: 99betpkr engages independent security specialists to conduct penetration tests and vulnerability assessments on a scheduled basis. Identified vulnerabilities are remediated according to a defined severity-based timeline.
• Incident Response Plan: In the event of a data breach that poses a risk to players' rights and freedoms, 99betpkr will notify the relevant supervisory authority within 72 hours of becoming aware of the breach and will notify affected players without undue delay where the breach is likely to result in a high risk to them.

While we take all reasonable precautions, no internet-based system is completely immune from security threats. We recommend that all players use strong, unique passwords for their 99betpkr accounts and enable MFA to maximise their own account security.

12 Children & Minors

If you are a parent or guardian and believe that a minor in your care has created an account on 99betpkr, please contact our support team immediately at the details provided in Section 14. Upon verification of such a report, we will promptly suspend the account, delete all associated personal data, and return any deposits to the verified payment source.

99betpkr strongly recommends that parents and guardians in Pakistan make use of parental control software to restrict minors' access to online gambling platforms. We also encourage households to keep login credentials for financial applications (JazzCash, EasyPaisa, online banking) secure and inaccessible to minors.

13 Changes to This Policy

99betpkr reviews this Privacy Policy on a regular basis and may update it to reflect changes in our data practices, applicable law, or our operational requirements. When we make material changes to this policy, we will:

• Post the updated policy on this page with a revised "Last Updated" date at the top.
• Notify registered players via the email address associated with their account at least 14 days before material changes take effect.
• Where changes require fresh consent (e.g., a new processing purpose based on consent), present a clear consent prompt to affected players upon their next login.

We encourage you to revisit this page periodically to stay informed about how 99betpkr protects your data. The version of the policy in effect at the time of any particular data processing activity governs that activity. Continued use of the platform following the effective date of any update constitutes acknowledgement of the revised policy.

14 Contact Us

For any privacy-related enquiries, data subject access requests, or concerns about how 99betpkr handles your personal information, please contact our Data Protection Officer through the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026. The current version supersedes all previous versions of the 99betpkr Privacy Policy.