99pk Privacy Policy

99pk ("we", "us", "our") is the data controller responsible for the personal information collected through the 99pk website and platform, accessible at https://99pk.lat. As data controller, 99pk determines the purposes for which and the means by which personal data is processed in connection with the operation of Pakistan's online casino and cricket betting services.

This Privacy Policy applies to all personal data processed in connection with your 99pk account registration, 99pk login activity, deposits and withdrawals in Pakistani Rupees (PKR), cricket and sports betting activity, casino gameplay, customer support interactions, and any other use of the 99pk platform.

By registering a 99pk account and proceeding with 99pk login, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, you must not register or use the 99pk platform.

99pk collects and processes the following categories of personal data:

2.1 Identity Data

Full legal name as it appears on your Pakistani CNIC or passport, date of birth, CNIC number or passport number, nationality, and gender. This data is collected during registration and verified as part of our Know Your Customer (KYC) process.

2.2 Contact Data

Email address, Pakistani mobile phone number (typically a Jazz, Telenor, Zong, or Ufone number), and residential address. These are used for account communications, transaction alerts, and support correspondence.

2.3 Financial Data

Details of deposits and withdrawals processed through JazzCash, EasyPaisa, SadaPay, HBL, UBL, Allied Bank, and USDT TRC20 wallets. We receive transaction confirmation data and masked account references — we do not store your full mobile wallet PINs or bank account credentials.

2.4 Gaming Activity Data

Records of all bets placed, games played, sessions commenced and ended, wager amounts in PKR, outcomes, bonus activations, and responsible gaming tool usage. This data is integral to platform operation and regulatory compliance.

2.5 Technical & Device Data

IP address, browser type and version, device type (mobile or desktop), operating system, screen resolution, session timestamps, referring URL, and pages visited on the 99pk platform. This is collected automatically when you access the site.

2.6 KYC Document Data

Scanned or photographed copies of government-issued identification (CNIC, passport, driving licence), proof of address documents, and payment method verification screenshots. These are collected when triggered by KYC requirements or withdrawal requests above certain PKR thresholds.

99pk collects personal data through the following channels:

• Direct submission: When you complete the 99pk registration form, provide KYC documents, contact customer support, or update your account profile.
• Automated collection: Through server logs, cookies, and analytics tools that record your interactions with the 99pk website during and after 99pk login sessions.
• Payment processors: JazzCash, EasyPaisa, SadaPay, and our banking partners provide transaction confirmation data when you make a deposit or withdrawal. We receive only the confirmation and masked reference — not your full credentials.
• KYC verification partners: Where third-party identity verification services are used to check the authenticity of submitted documents against national databases, they may return verification outcome data to 99pk.
• Responsible gaming monitoring: Our platform automatically logs behavioural patterns relevant to responsible gaming assessments, such as session duration, betting velocity, and deposit frequency.

99pk processes your personal data for the following clearly defined purposes:

• Account management: Creating and maintaining your 99pk player account, managing 99pk login sessions, processing password resets, and handling account closure requests.
• Service delivery: Enabling access to casino games, cricket and PSL betting markets, live dealer tables, slot games, fishing games including Ocean King Jackpot, and all other 99pk platform features.
• Financial processing: Executing PKR deposits and withdrawals via JazzCash, EasyPaisa, SadaPay, and bank transfer, and maintaining accurate financial records for each account.
• Identity verification (KYC/AML): Verifying your identity and age in compliance with anti-money laundering obligations and our operating licence requirements, including the strict 21+ age verification policy.
• Fraud prevention: Detecting and preventing fraudulent activity, bonus abuse, account takeover attempts, and collusion between players.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, applying requested self-exclusion restrictions, enforcing deposit limits, and proactively intervening where required.
• Customer support: Responding to your support queries, resolving complaints, and maintaining records of your support history for quality assurance.
• Legal compliance: Fulfilling obligations under applicable gaming regulations, financial crime prevention laws, and orders from regulatory authorities.
• Marketing communications: Sending you promotional offers, bonus notifications, and PSL betting updates by email or SMS — but only where you have explicitly opted in and only in relation to 99pk products.
• Platform improvement: Using aggregated and anonymised analytics to improve site performance, game selection, payment method reliability, and user experience on mobile devices used by players across Karachi, Lahore, Islamabad, and beyond.

99pk relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and 99pk — including account registration, game access, and financial transactions — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal obligation: KYC identity verification, AML transaction monitoring, and regulatory reporting are carried out because 99pk is legally required to do so under the terms of its operating licence and applicable financial crime prevention frameworks.
• Legitimate interests: Fraud detection, security monitoring, platform analytics, and responsible gaming behavioural monitoring are carried out on the basis of 99pk's legitimate interests in operating a safe, secure, and compliant platform — provided these interests are not overridden by your rights.
• Consent: Marketing communications and non-essential cookies are processed only where you have provided explicit, freely given consent. You may withdraw this consent at any time through your account settings or by contacting support.

99pk does not sell your personal data to any third party under any circumstances. We share your data only in the following limited and controlled circumstances:

6.1 Payment Processors

To process your PKR deposits and withdrawals, we share necessary transaction data with JazzCash, EasyPaisa, SadaPay, HBL, UBL, Allied Bank, and our USDT processing partner. These entities receive only the minimum data required to complete the transaction and are bound by their own privacy obligations.

6.2 KYC and Identity Verification Partners

Where third-party identity verification is required, your CNIC details and submitted documents may be shared with a licensed KYC verification provider. These partners process your data solely for identity verification purposes and are contractually prohibited from any secondary use.

6.3 Game Software Providers

Third-party game providers including Pragmatic Play, PG Soft, and Habanero receive a pseudonymous player identifier and session token when you launch their games. They do not receive your full name, CNIC, or financial details.

6.4 Regulatory and Law Enforcement Authorities

99pk will disclose personal data to regulatory bodies, licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by a valid legal order, court process, or regulatory demand. We will notify you of such a disclosure where legally permitted to do so.

6.5 Professional Advisors

Lawyers, auditors, and financial advisors engaged by 99pk may access your data on a strictly need-to-know basis, subject to binding confidentiality obligations.

As an internationally licensed gaming operator, 99pk's infrastructure — including servers, data centres, and certain third-party service providers — may be located outside Pakistan. Where your personal data is transferred to or processed in a jurisdiction other than Pakistan, 99pk takes steps to ensure that an adequate level of protection is maintained through one or more of the following safeguards:

• Contractual clauses in data processing agreements that require recipient entities to maintain data protection standards equivalent to those applied by 99pk.
• Transfers only to countries or entities that have been assessed as providing adequate data protection standards.
• Encryption of data in transit using TLS 1.2 or higher, so that even in the event of interception during transfer, the data remains unreadable.

Players located in Karachi, Lahore, Islamabad, Faisalabad, or any other city in Pakistan should be aware that by using 99pk's services, they consent to such international data transfers as described in this section.

99pk retains your personal data for the periods set out below. After the applicable retention period, data is securely deleted or irreversibly anonymised.

99pk implements a layered technical and organisational security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:

• Encryption in transit: All communications between your browser or mobile device and 99pk servers are encrypted using TLS 1.2 or 1.3. This applies to all pages, including the 99pk login page, deposit flows, and KYC document uploads.
• Encryption at rest: Sensitive data fields — including identity document references and financial account references — are encrypted in our database using AES-256 encryption.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access is logged and audited.
• Two-factor authentication: Player accounts support two-factor authentication to prevent unauthorised 99pk login by third parties who may have obtained account credentials.
• Intrusion detection: 99pk operates network-level intrusion detection and automated anomaly monitoring to identify and respond to suspicious activity in real time.
• Penetration testing: Our platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

While 99pk takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own 99pk login credentials and for logging out of shared devices after each session.

99pk uses cookies and similar browser-based tracking technologies to operate the platform, maintain your session after 99pk login, and improve your overall experience. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the 99pk website to function. They maintain your authenticated session after 99pk login, store your language and currency preferences, and enable the shopping cart functionality for deposits. These cannot be disabled without impairing core platform functionality.

10.2 Analytics Cookies

Aggregate, anonymised analytics cookies help us understand how players navigate the 99pk platform — which pages are visited most frequently, where users drop off during the registration flow, and how mobile users in Pakistan interact with the site differently from desktop users. This data is never linked back to an individual player identity.

10.3 Functional Cookies

These cookies remember your game preferences, recently played titles, preferred deposit method (e.g., JazzCash vs EasyPaisa), and responsible gaming tool settings, so you do not need to reconfigure them on every visit.

10.4 Marketing Cookies

Only placed with your explicit consent, marketing cookies allow 99pk to show relevant promotional content to returning visitors. These cookies are never used to build advertising profiles that are shared with third-party advertisers.

You may manage your cookie preferences through your browser settings at any time. Blocking strictly necessary cookies will prevent 99pk login and core platform functionality from operating correctly.

As a 99pk player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 14. We will respond within 30 calendar days of receiving a valid request.

• Right of Access: You may request a copy of all personal data that 99pk holds about you, including your account registration details, KYC records, transaction history, and gaming activity logs.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that changes to identity data may require re-verification.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Note that regulatory retention obligations (Section 8) may prevent full erasure in some cases.
• Right to Restrict Processing: You may request that 99pk limits the processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format that you can transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Objections to marketing will be actioned immediately; objections to other processing will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

99pk operates a strict 21+ age policy. The platform is not intended for, and must not be used by, any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

Age verification is a mandatory component of the 99pk registration and KYC process. If, following registration, 99pk discovers or reasonably suspects that a player is under 21, the account will be immediately suspended, all gameplay will be void, and any balance will be held pending investigation. Data collected in relation to an underage account will be retained solely for the purpose of preventing re-registration attempts and may be reported to relevant authorities.

Parents and guardians in Pakistan who are concerned that a minor may have registered on 99pk are encouraged to contact our support team immediately. We will investigate the matter and take appropriate action within 48 hours of a verified report.

99pk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. Where a change is material — for example, a new category of data being collected or a new third-party processor being engaged — we will provide advance notice to registered players via email or on-platform notification at least 14 days before the change takes effect.

Minor, non-material changes (such as clarifications of existing language or updated retention periods resulting from regulatory changes) may be made without prior notice, though the updated version will always be published at https://99pk.lat/privacy-policy with a revised "Last Updated" date.

Your continued use of the 99pk platform following the effective date of any change constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically, particularly before making significant transactions or sharing additional personal data.

If you have questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 11, or want to raise a data-related complaint, please contact the 99pk Data Privacy team through the following channels:

• Live Chat: Available on the 99pk platform 24 hours a day, 7 days a week for registered players after 99pk login.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered account username so we can locate your records promptly.
• Response Time: We aim to acknowledge all privacy-related requests within 5 business days and provide a full response within 30 calendar days of receipt.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or to our licensing authority's player protection division.