At 99ba, we understand that trust is the foundation of our relationship with every Pakistani player on our platform. This Privacy Policy explains in clear terms what personal data we collect, why we collect it, how we use and protect it, who we may share it with, and what rights you hold as a data subject. We have written this policy to be genuinely readable — not buried in impenetrable legalese.
Before you dive into the full policy detail below, these six principles summarise the standards 99ba holds itself to on data privacy — without exception.
99ba applies a minimum-necessary data collection principle. We do not ask for personal information unless it is directly required for account management, identity verification, payment processing, or regulatory compliance. We do not collect your data speculatively or for future undefined uses.
All personal data held by 99ba is protected using 256-bit SSL encryption in transit and AES-256 encryption at rest. Our data infrastructure undergoes regular independent security audits. We maintain strict internal access controls — only team members with a legitimate operational need can access Player data.
As a 99ba Player, you hold meaningful rights over your personal data. You may request access to your data, correction of inaccuracies, restriction of processing, portability of your data, and erasure in circumstances where retention is no longer required. Requests are handled within 30 days.
99ba does not sell your personal data to third parties under any circumstances. Where we share data with service providers — game studios, payment processors like JazzCash and EasyPaisa, fraud prevention providers, or KYC services — we do so under strict contractual data processing agreements.
Personal data held by 99ba is retained only for as long as required to fulfil the purpose for which it was collected, or as mandated by applicable anti-money laundering, KYC, and gaming regulatory retention requirements. When retention is no longer required, data is securely deleted or anonymised.
If 99ba makes material changes to this Privacy Policy — particularly changes that affect how your data is used or shared — we will notify registered Players via email or an in-platform notification before the changes take effect. You will never be surprised by a silent policy change at 99ba.
1.1 Identity of the Data Controller. 99ba operates the online gaming platform accessible at 99ba.biz and is the data controller responsible for the personal data of registered Players and website visitors. As data controller, 99ba determines the purposes and means by which personal data is processed in connection with your use of the platform.
1.2 Scope of This Policy. This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by 99ba in connection with: (a) your registration and maintenance of a 99ba account; (b) your use of any product or service available on the 99ba platform, including cricket betting, live casino, slots, pool rummy, and fisher games; (c) your communications with 99ba customer support; (d) your access to the 99ba website, whether as a registered Player or unregistered visitor; and (e) any other interaction between you and 99ba in the context of the services provided.
1.3 Contact for Privacy Matters. All privacy-related enquiries, data subject rights requests, and complaints should be directed to the 99ba data protection team at: [email protected] — please include "Privacy" in the subject line of your message so that it is directed to the appropriate team member without delay.
2.1 99ba collects personal data across the following categories, depending on your level of engagement with the platform:
| Category | Data Types Collected | When Collected |
|---|---|---|
| Identity | Full legal name, date of birth, CNIC number, CNIC document image | Registration & KYC |
| Contact | Pakistani mobile number, email address | Registration |
| Financial | JazzCash/EasyPaisa account reference, bank account name & number (for bank withdrawals), deposit and withdrawal history, transaction IDs | Deposits & Withdrawals |
| Gaming Activity | Bet history, game session logs, win/loss records, wager amounts, game types accessed, promotional claims | During gameplay |
| Technical | IP address, device type, browser type and version, operating system, session timestamps, login history | All platform access |
| Communications | Support chat transcripts, emails, complaint correspondence | Customer contact |
| Preferences | Responsible gaming limit settings, marketing consent status, notification preferences | Account settings |
2.2 Special Category Data. 99ba does not intentionally collect special category personal data (as defined under applicable data protection frameworks), including data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where collection of such data is strictly required by applicable law or regulation (for example, where health data is provided voluntarily in the context of a responsible gaming self-exclusion request).
3.1 Data You Provide Directly. The majority of personal data 99ba holds about you is information you provide directly, including: information submitted during the account registration process; identity and address documentation submitted for KYC verification; payment method details submitted in connection with deposits or withdrawals; information provided during customer support interactions via live chat, email, or other communication channels; and preferences you set within your 99ba account settings.
3.2 Data Collected Automatically. When you access the 99ba website or use the platform, we automatically collect certain technical data through standard web technologies. This includes your IP address, device identifiers, browser type and version, operating system, referring URL, pages visited, session duration, and the times and dates of your access. This technical data is collected through server logs, cookies, and similar technologies described further in Section 8.
3.3 Data from Third Parties. 99ba may receive personal data about you from third-party sources in limited circumstances, including: identity verification and fraud prevention agencies used for KYC processing; payment processors including JazzCash, EasyPaisa, and banking partners, in the context of transaction verification; and, where applicable, publicly available databases used for sanctions screening and AML compliance checks.
4.1 99ba processes your personal data under one or more of the following legal bases, depending on the specific processing activity:
5.1 99ba uses the personal data it collects for the following purposes:
6.1 No Sale of Personal Data. 99ba does not sell, rent, or trade your personal data to any third party for their independent commercial use under any circumstances. This is an absolute policy, not a conditional one.
6.2 Service Providers (Data Processors). 99ba shares personal data with carefully selected third-party service providers who process data on our behalf and under our instruction, subject to binding data processing agreements. These include:
6.3 Legal and Regulatory Disclosure. 99ba may disclose personal data to regulatory authorities, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, regulation, court order, or lawful regulatory request. 99ba will, where legally permissible, notify you of any such disclosure request before complying.
7.1 Payment Data Handling. 99ba takes particular care in the handling of financial and payment data. When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, or any other payment method, the financial authentication step — including your mobile wallet PIN or bank login — occurs entirely within the respective payment provider's own platform. 99ba receives only a transaction confirmation reference and the transaction amount; we do not receive, store, or process your JazzCash PIN, EasyPaisa PIN, or bank account login credentials at any point.
7.2 Bank Account Details for Withdrawals. Where you request a withdrawal to a Pakistani bank account (HBL, UBL, Meezan Bank, etc.), you will be required to provide your bank account name and account number for payment routing purposes. This information is stored in encrypted form and is used solely for processing the specific withdrawal request. 99ba verifies that bank account details match the name registered on your 99ba account as part of our AML compliance procedures.
7.3 Transaction Records. 99ba maintains records of all deposit and withdrawal transactions associated with your account for a minimum of five (5) years from the date of the transaction, in accordance with applicable anti-money laundering regulations. This retention requirement applies regardless of whether your account is still active at the time the retention period begins to run.
8.1 What Cookies Are. Cookies are small text files placed on your device when you visit the 99ba website. They are widely used across the internet to make websites function correctly, to remember user preferences, and to provide website operators with information about how their sites are used.
8.2 Cookies Used by 99ba. The 99ba platform uses the following categories of cookies:
8.3 Managing Cookies. You can control and delete cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your 99ba account. Disabling functional or analytics cookies will not prevent platform access but may affect your experience.
9.1 Technical Security Measures. 99ba implements comprehensive technical security controls to protect your personal data, including: 256-bit SSL/TLS encryption for all data in transit between your device and the 99ba platform; AES-256 encryption for personal and financial data stored at rest in 99ba's databases; multi-factor authentication requirements for access to systems containing Player data by 99ba personnel; regular independent penetration testing and vulnerability assessments of 99ba's platform infrastructure; and automated anomaly detection systems that monitor for unusual data access patterns.
9.2 Organisational Security Measures. Technical controls alone are not sufficient — 99ba also maintains robust organisational security practices, including strict role-based access controls ensuring that employees and contractors can only access Player data that is necessary for their specific job function; mandatory data protection and security awareness training for all 99ba personnel with access to personal data; binding confidentiality obligations for all staff; and a documented incident response plan for managing and reporting personal data breaches.
9.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 99ba will notify you without undue delay and will take immediate remedial action in accordance with our incident response procedures. 99ba maintains a dedicated security incident response capability operating on a 24/7 basis.
10.1 General Retention Principle. 99ba retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When the applicable retention period expires, data is securely deleted or irreversibly anonymised.
10.2 Specific Retention Periods. The following retention periods apply to the main categories of data 99ba holds:
10.3 Early Deletion Requests. You may request earlier deletion of your personal data in circumstances where retention is no longer legally required. Deletion requests are subject to our ability to satisfy applicable regulatory retention obligations — where a legal requirement to retain data exists, 99ba cannot process a deletion request in respect of that data until the relevant retention period expires.
11.1 As a 99ba Player, you hold the following rights in respect of your personal data held by 99ba. To exercise any of these rights, please contact our data protection team at [email protected] with "Privacy Rights Request" in the subject line. 99ba will respond to all rights requests within 30 days.
12.1 Strict 21+ Requirement. The 99ba platform is strictly prohibited for use by individuals under the age of 21. We do not knowingly collect, process, or retain personal data belonging to any individual under the age of 21. Age verification is a mandatory step in the 99ba registration and KYC process.
12.2 Detection of Underage Registrations. If 99ba discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21 — whether through registration fraud, misrepresentation, or any other means — 99ba will immediately suspend the associated account, delete the personal data of the minor to the extent not required for regulatory purposes, and notify the relevant authorities where required by law.
12.3 Parental Responsibility. Adults who have registered 99ba accounts are responsible for ensuring that minors in their household are not able to access their accounts. 99ba recommends the use of device-level parental controls and password protection to prevent minors from accessing any online gambling platform, including 99ba.
13.1 The 99ba platform is operated for Pakistani users and 99ba's primary data processing activities are conducted with Pakistani players in mind. However, given the international nature of online gaming technology infrastructure — including game servers operated by global providers such as Evolution Gaming, PG Soft, and Pragmatic Play — your personal data may in some circumstances be processed outside Pakistan by third-party service providers operating in other jurisdictions.
13.2 Where personal data is transferred to a third-party service provider operating in another jurisdiction, 99ba ensures that appropriate safeguards are in place to protect your data to the same standard as it would be protected within 99ba's own systems. These safeguards include binding contractual data processing agreements that impose data protection obligations on the receiving party, and — where applicable — standard contractual clauses.
13.3 By registering a 99ba account and accepting these terms, you acknowledge that your personal data may be processed in connection with the international gaming infrastructure described above. If you have concerns about international data transfers in connection with your 99ba account, please contact our data protection team.
14.1 How to Contact Us About Privacy. For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 99ba holds about you, please contact our data protection team using the details below. Please include "Privacy" or "Data Request" in the subject of your message to ensure prompt routing to the correct team member.
Email (Privacy Matters): [email protected]
Live Chat: Available 24/7 via the 99ba platform
Response Target: Within 30 calendar days of receipt
14.2 Complaints. If you are dissatisfied with how 99ba has handled your personal data or responded to a privacy rights request, you have the right to raise a complaint. In the first instance, 99ba requests that you raise your complaint with our data protection team, giving us the opportunity to address your concern before any external escalation. We will acknowledge your complaint within 5 business days and provide a substantive response within 30 days.
14.3 Policy Updates. This Privacy Policy was last reviewed on 1 January 2026. 99ba reserves the right to update this Privacy Policy from time to time. Where material changes are made, 99ba will notify registered Players via email or in-platform notification before the updated policy takes effect. The most current version of this Privacy Policy will always be available at 99ba.biz/privacy-policy.
These are the personal data rights you hold as a 99ba Player. To exercise any of these rights, contact our support team — all requests are processed within 30 days.
You have the right to request a copy of all personal data that 99ba holds about you. Your request will be fulfilled within 30 days and delivered in a clear, readable format at no charge.
You have the right to request correction of any personal data 99ba holds about you that is inaccurate or incomplete. Account details can be updated through your account settings, or by contacting our support team.
You may request that 99ba delete your personal data where retention is no longer required for the purposes it was collected. Note that legal and regulatory retention requirements may prevent immediate full deletion of certain data categories.
In certain circumstances, you have the right to request that 99ba restrict the processing of your personal data — for example, while an accuracy dispute is being resolved. During a restriction period, your data is stored but not actively processed beyond storage.
You have the right to receive your personal data from 99ba in a commonly used, machine-readable format, and to transfer that data to another service provider. This right applies to data you have actively provided and that is processed based on your consent or on contract.
You have the right to object to 99ba processing your personal data where that processing is based on legitimate interests. You also have an unconditional right to opt out of marketing communications at any time through your account settings.
Security at 99ba is measurable, audited, and continuously improved — not just described in a policy document.
Our data protection team answers privacy queries 24/7. We believe Pakistani players deserve clear answers about how their personal data is handled — and we stand behind this policy completely.