Data & Privacy
This Privacy Policy explains how 99abai collects, uses, stores and protects personal data provided by users of our Platform, including Pakistani users whose information may be processed in connection with account registration, KYC verification and payment transactions. Please read this document carefully.
Privacy at a Glance
99abai does not sell, rent or trade your personal data to third parties for marketing purposes. Your information is used solely to operate your account, comply with legal obligations and improve the platform experience.
All data transmitted between your browser or device and 99abai is encrypted using industry-standard SSL/TLS protocols. This applies to account data, payment information and all in-session communications.
Subject to applicable legal obligations, you have the right to access, correct, restrict processing of and request deletion of your personal data. Contact our support team to exercise these rights at any time.
We collect only the personal information necessary to operate your account, complete KYC verification, process payments and meet anti-money laundering obligations. We do not collect data beyond what is required.
We use cookies and similar technologies to maintain session security, remember your preferences and analyse aggregate platform usage. You can manage non-essential cookies through your browser settings at any time.
We will only contact you for purposes directly related to your account or for promotional communications you have explicitly opted in to. You can unsubscribe from marketing communications at any time through your account preferences.
99abai ("we", "us", "our") operates the online betting and casino platform accessible at https://99abai.cam (the "Platform"). This Privacy Policy describes how we collect, use, process, store, disclose and protect personal information that users ("you", "your") provide to us or that we collect in the course of providing our services.
This Policy applies to all users of the Platform, including users based in Pakistan and users accessing the Platform from other locations. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.
Notice for Pakistani Users: Pakistan's personal data protection framework is developing. While we process data in accordance with internationally recognised privacy principles and our licensing jurisdiction's applicable law, users in Pakistan should be aware that domestic data protection legislation may evolve. This Privacy Policy reflects our current practices and will be updated accordingly. This Policy does not constitute legal advice.
If you have any questions about how 99abai handles your personal data, you may contact our Data Protection contact via the details set out in Section 15 of this Policy.
Any information relating to an identified or identifiable natural person — including name, date of birth, address, email address, phone number, financial account details and device identifiers.
Any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
99abai, which determines the purposes and means of processing personal data collected through the Platform.
A third party that processes personal data on behalf of 99abai under a contractual obligation, such as a KYC verification provider or payment processing partner.
Any individual whose personal data is collected or processed by 99abai in connection with use of the Platform.
Know Your Customer — identity and age verification procedures required to comply with Anti-Money Laundering (AML) obligations and confirm user eligibility.
Small data files stored on your device by the Platform for the purpose of session management, preference storage and analytics.
We collect the following categories of personal data in connection with account registration, platform use, KYC verification and payment processing:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, CNIC / passport number | Account creation; KYC verification; age verification |
| Contact Data | Email address, phone number, residential address, city (e.g., Karachi, Lahore, Islamabad) | Account communication; support; regulatory correspondence |
| Financial Data | Deposit / withdrawal history; payment method details; transaction references | Payment processing; AML compliance; dispute resolution |
| Technical Data | IP address; device type; browser; operating system; session data | Security monitoring; fraud prevention; platform optimisation |
| Behavioural Data | Betting history; game activity; login frequency; responsible gambling tool usage | Responsible gambling monitoring; personalisation; analytics |
| KYC Documents | Scanned CNIC / passport; proof of address documents; source-of-funds documents | Identity verification; AML compliance; regulatory requirements |
| Communications Data | Support chat transcripts; email correspondence; complaint records | Dispute resolution; quality assurance; regulatory records |
We do not intentionally collect sensitive personal data (e.g., health, religious affiliation, political views) unless it is voluntarily disclosed in support communications or required for responsible gambling assessment.
We collect personal data through the following methods:
99abai processes personal data for the following purposes:
We process your personal data on one or more of the following legal grounds, depending on the processing activity:
99abai does not sell, rent or trade your personal data. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:
Our Commitment: All third-party data processors engaged by 99abai are subject to contractual data processing agreements that impose obligations consistent with this Privacy Policy, including requirements around security, confidentiality and restrictions on further processing.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years post-closure | AML regulatory requirement |
| KYC Documents | Duration of account plus 5 years post-closure | AML / licensing obligation |
| Financial Transaction Records | Duration of account plus 5 years post-closure | Financial regulatory obligation |
| Betting & Gaming History | Duration of account plus 3 years post-closure | Dispute resolution; responsible gambling |
| Support Communications | 3 years from last interaction | Dispute resolution; quality assurance |
| Marketing Preferences | Until withdrawn or account closure | Consent-based |
| Technical / Log Data | 12 months | Security monitoring; fraud detection |
After the applicable retention period, personal data will be securely erased or anonymised. Where data is anonymised, it may be retained indefinitely for aggregated analytical purposes, as it will no longer constitute personal data.
99abai implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:
Your Responsibility: While 99abai implements robust security measures, no internet transmission is entirely risk-free. You are responsible for keeping your account credentials confidential and notifying us immediately if you suspect unauthorised access to your account. 99abai will never request your password via email, chat or telephone.
99abai uses cookies and similar tracking technologies to operate the Platform effectively. We use the following categories of cookies:
You can manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your ability to use some features of the Platform. We do not use third-party advertising or cross-site tracking cookies.
Subject to applicable law and any overriding obligations under AML, regulatory or contractual requirements, you have the following rights with respect to your personal data:
You have the right to request a copy of the personal data we hold about you and to receive information about how it is processed. Requests will be responded to within 30 days in most cases.
You have the right to request correction of inaccurate or incomplete personal data. You may update certain information directly through your account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations — including AML and regulatory requirements that mandate retention for up to 5 years post-account-closure.
You may request that we restrict processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or where processing is unlawful and you prefer restriction to erasure.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service provider.
You have the right to object to processing based on legitimate interests, and to object to receiving marketing communications at any time. Marketing opt-outs can be actioned via account preferences or by contacting support.
Where processing is based on consent — including marketing communications — you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of the above rights, please contact our support team using the details in Section 15. We may need to verify your identity before actioning a request. We will not charge a fee for exercising your rights under normal circumstances.
The Platform is intended exclusively for adults aged 18 years or older — or the higher minimum required by the operator's licensing jurisdiction. 99abai does not knowingly collect personal data from individuals under 18 years of age.
Age verification is a mandatory component of the KYC process. Where we discover that personal data has been collected from an individual below the applicable minimum age, we will:
If you believe that a minor has accessed the Platform or provided personal data without your knowledge, please contact our support team immediately.
As an internationally operating platform, 99abai may transfer personal data to servers, service providers or regulatory authorities located outside Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place, which may include:
Pakistani users should be aware that international data transfer rules under Pakistani law are currently developing. We will update this section as applicable legislation evolves.
99abai reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered users via email or through a prominent notice on the Platform, giving you an opportunity to review the updated Policy before it takes effect.
The "Last Updated" date at the top of this page reflects the most recent revision. We recommend reviewing this Policy periodically. Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes.
If you have any questions, concerns or requests related to this Privacy Policy — including requests to exercise your data rights — please contact us using the details below. All contact details are provided as plain text only and are not clickable links:
We aim to acknowledge all privacy-related requests within 5 business days and to resolve them within 30 days, except where complexity requires a longer investigation period (in which case we will inform you of the expected timeline). Support is available in English, with Urdu assistance available during designated hours.
For complaints regarding our handling of your personal data that we have not resolved to your satisfaction, you may wish to seek guidance from a relevant data protection authority in your jurisdiction, or seek independent legal advice.
We are committed to handling your data with transparency, care and respect. Now that you've reviewed our Privacy Policy, explore the rest of 99abai with confidence — or contact us if you have any questions.
Adults 18+ only, or the higher minimum required by the operator/license jurisdiction. Local laws in Pakistan may restrict gambling. Please know your legal obligations before participating.