ab99 Privacy Policy

01 Introduction & Scope

ab99 is committed to protecting the privacy and personal data of all Members using the platform. This Privacy Policy applies to all personal data collected through the ab99 website at ab99.today, any associated mobile-optimised interfaces, live chat interactions, customer support communications, and all other touchpoints through which ab99 receives data from Members.

This Policy should be read alongside the ab99 Terms & Conditions, which govern the broader contractual relationship between ab99 and its Members. Where any conflict arises between this Privacy Policy and the Terms & Conditions on privacy matters specifically, this Privacy Policy prevails.

02 Data Controller

For the purposes of this Privacy Policy, ab99 acts as the data controller in respect of personal data collected from Members. As data controller, ab99 determines the purposes and means by which your personal data is processed, and bears responsibility for ensuring that processing is conducted lawfully, fairly, and transparently.

If you have any questions about how ab99 processes your personal data, or wish to exercise any of your rights described in this Policy, you may contact the ab99 Data Protection contact via the support channels listed in Section 15 of this document.

03 Data We Collect

ab99 collects the following categories of personal data from Members:

ab99 does not intentionally collect special categories of sensitive personal data (such as health data, religious beliefs, or biometric data for identification purposes beyond standard liveness verification in KYC). If any such data is provided inadvertently by a Member, it will be deleted promptly and will not be processed.

04 How We Use Your Data

ab99 uses the personal data described above for the following purposes:

• Account Management: Creating, operating, and maintaining your ab99 account, processing deposits and withdrawals, and communicating account-related information.
• Identity Verification (KYC): Confirming your age (21+), identity, and source of funds in compliance with applicable anti-money laundering obligations.
• Platform Security & Fraud Prevention: Detecting and preventing fraudulent activity, bonus abuse, multi-accounting, and unauthorised account access.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and offering appropriate intervention tools such as deposit limits and self-exclusion.
• Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance via live chat and email.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, user interface design, and platform performance.
• Marketing Communications: Sending promotional offers, PSL season bonuses, and platform updates to Members who have opted in to receive such communications.
• Legal Compliance: Retaining records and reporting to regulatory or law enforcement authorities where legally required.

05 Legal Basis for Processing

ab99 processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil the agreement between ab99 and the Member, including account operation, payment processing, and game delivery.
• Legal Obligation: Processing required for compliance with anti-money laundering regulations, age verification obligations, and responses to lawful regulatory requests.
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregated analytics, where such interests do not override the Member's privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where explicit opt-in consent has been obtained from the Member. Consent can be withdrawn at any time without affecting lawful processing carried out prior to withdrawal.

06 Data Sharing & Third-Party Disclosure

ab99 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared only in the following circumstances and only to the minimum extent necessary:

6.1 Payment Processors

Transaction data is shared with payment service providers including JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and Raast as required to process deposits and withdrawals in PKR. These processors operate under their own privacy frameworks and are contractually bound to use your data solely for payment processing purposes.

6.2 Identity Verification Services

KYC document data is processed through secure identity verification systems for the purpose of confirming age, identity, and compliance with applicable regulations. Verification providers are bound by confidentiality and data protection obligations.

6.3 Fraud Prevention and Security

Technical data including IP addresses and device identifiers may be shared with fraud detection services to identify and prevent account abuse, bonus fraud, and money laundering activity. This processing is carried out under ab99's legitimate interest in maintaining platform integrity.

6.4 Legal and Regulatory Disclosure

ab99 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or governmental request. ab99 will notify affected Members of such disclosure where legally permitted to do so.

07 Data Retention

ab99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of account membership plus five years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of five years following account closure or the completion of the relevant transaction, in accordance with applicable compliance requirements.
• Transaction records: Retained for five years from the date of each transaction.
• Support communications: Retained for three years from the date of the interaction.
• Marketing preferences and opt-in records: Retained until consent is withdrawn or the account is closed, whichever is earlier.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual Member.

08 Security Measures

ab99 implements industry-standard technical and organisational security measures to protect Member personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS 1.3) with 256-bit SSL encryption for all data in transit between Member devices and ab99 servers
• AES-256 encryption for sensitive data stored at rest on ab99 servers
• Password hashing using bcrypt with per-record salting — passwords are never stored in plain text under any circumstances
• Role-based access controls limiting internal staff access to personal data to those with a legitimate operational need
• Regular security audits and penetration testing of platform infrastructure
• Two-factor authentication available for all Member accounts to prevent unauthorised login
• Automated intrusion detection and alerting systems monitoring for unusual access patterns

While ab99 takes all reasonable precautions, no online platform can guarantee absolute security. Members are encouraged to use strong, unique passwords for their ab99 accounts and to enable two-factor authentication. If you suspect unauthorised access to your account, contact support immediately via live chat.

09 Cookies & Tracking Technologies

9.1 Types of Cookies Used

ab99 uses the following categories of cookies on the platform:

• Essential / Session Cookies: Required for the platform to function. These maintain your login session, remember your game preferences, and preserve your PKR balance display across page navigations. These cookies cannot be disabled without impairing platform functionality.
• Security Cookies: Used by ab99's fraud and abuse detection systems to identify unusual access patterns and verify that interactions originate from a legitimate human session.
• Analytics Cookies: Aggregate, anonymised data about how Members use the platform — which pages are visited most, where Members encounter friction, and how game categories perform. This data is used to improve the platform and is not linked to individual identities.
• Preference Cookies: Remember your display preferences such as language settings and notification opt-in status.

9.2 Managing Cookies

You can manage and delete cookies through your browser settings. Disabling essential cookies will affect your ability to use certain ab99 platform features, including maintaining a logged-in session. Analytics and preference cookies can be disabled without affecting core platform functionality. ab99 does not use advertising tracking cookies or cross-site tracking technologies.

10 Your Rights Over Your Data

As a Member of ab99, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the ab99 support team using the contact details in Section 15.

ab99 will respond to all rights requests within 30 days of receipt. In cases of complexity or high volume, this may be extended by a further 60 days with prior notification. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Please note that certain data — particularly KYC documents and transaction records — must be retained by ab99 for regulatory compliance purposes regardless of a deletion request, and this retention will be explained clearly in any response to such a request.

11 Children & Minors

The ab99 platform is strictly intended for individuals who are 21 years of age or older. ab99 does not knowingly collect personal data from individuals under the age of 21. If ab99 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has registered an ab99 account or provided personal data to the platform, please contact the ab99 support team immediately via live chat or the contact details in Section 15.

12 International Data Transfers

ab99 operates with server infrastructure that may involve the storage or processing of Member data in jurisdictions outside Pakistan. Where such transfers occur, ab99 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to those described in this Privacy Policy, including contractual data protection obligations with all relevant service providers.

ab99 will not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards, such as standard contractual clauses or equivalent mechanisms.

13 Marketing Communications & Preferences

With your consent, ab99 may send you promotional communications by email or SMS, including information about new games, PSL season bonuses, deposit offers, and platform updates. You may withdraw your marketing consent at any time by:

• Updating your notification preferences in your ab99 account settings
• Using the unsubscribe link included in any ab99 marketing email
• Contacting the ab99 support team via live chat and requesting removal from marketing communications

Withdrawal of marketing consent will not affect the delivery of transactional communications necessary for account operation — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent regardless of marketing preferences as they form part of the ab99 service.

14 Amendments to This Privacy Policy

ab99 reserves the right to update or amend this Privacy Policy at any time. The "Last Updated" date at the top of this document will reflect the date of the most recent revision. Where changes are material — for example, a change to how ab99 shares data or a new category of data collection — ab99 will provide notice to Members via the platform notification system or by email to the registered address.

Continued use of the ab99 platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. ab99 encourages Members to review this page periodically, particularly before engaging in high-value transactions.

15 Contact Information & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to submit a complaint regarding how ab99 processes your personal data, please contact the ab99 Data Protection contact using one of the following methods:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly from the ab99 platform (click the support icon in the bottom-right corner)
• Response Time: Data protection enquiries are acknowledged within 48 hours and typically resolved within 30 days

ab99 takes all privacy complaints seriously and will investigate and respond to each enquiry in a timely and transparent manner. If you are not satisfied with ab99's response to a data protection complaint, you have the right to escalate the matter to the relevant data protection supervisory authority with jurisdiction over ab99's operations.