Privacy Policy – 99pkr Pakistan Online Betting Platform

This Privacy Policy applies to 99pkr, the online betting and gaming platform operating at https://99pkr.ws. When this policy refers to "99pkr," "we," "us," or "our," it means the operator of the 99pkr platform and all services offered through it — including sports betting, football betting, Teen Patti, Poker, virtual sports, and payment processing.

99pkr acts as the data controller for the personal information you provide when registering an account, making deposits or withdrawals, placing bets, or communicating with our support team. As the data controller, we are responsible for deciding how and why your personal data is processed.

If you have any questions about how 99pkr handles your data, you can reach our privacy team at any time at support@99pkr.ws. We aim to respond to all privacy-related queries within 5 business days.

99pkr collects only the personal data that is genuinely necessary to operate the platform, verify your identity, process your transactions, and comply with legal requirements. The table below sets out the categories of data we collect, with examples of specific data points in each category.

We do not collect sensitive personal data beyond what is required for KYC (CNIC information) and responsible gaming records. We do not collect information about your religion, political views, ethnicity, or health, except where a health-related self-exclusion is voluntarily disclosed by you as part of a responsible gaming request.

99pkr collects your personal data through the following methods:

• Directly from you: When you register an account, complete KYC verification, make a deposit, place a bet, activate responsible gaming tools, or contact our support team. This is the primary source of personal data at 99pkr.
• Automatically through technology: When you visit the 99pkr website or use the platform, we automatically collect device and technical data including your IP address, browser information, and session behaviour through our server logs and analytics tools. This happens whether or not you are logged in.
• Through payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard, the relevant payment provider may share transaction confirmation data with 99pkr as part of processing the payment. We receive only what is necessary to confirm the transaction — we do not receive your full wallet password or card PIN.
• Through cookies and similar technologies: As described in Section 8, 99pkr uses cookies to maintain your login session, remember your preferences, and analyse platform usage patterns.

99pkr does not purchase personal data lists, collect data from social media profiles, or use third-party data brokers to supplement the information you provide directly.

Every use of your personal data at 99pkr has a specific, legitimate purpose. We do not use your data for anything beyond what is described in this policy. The main purposes are:

• Account creation and management: To register your account, maintain it, verify your identity, and give you access to the 99pkr platform.
• Identity verification (KYC): To confirm that you are who you say you are, that you are at least 18 years old, and that your payment accounts are registered in your name — as required for a regulated betting platform.
• Processing transactions: To process your deposits and withdrawals accurately, track transaction history, and prevent duplicate or fraudulent transactions.
• Providing betting and gaming services: To record your bets, settle results, calculate winnings, apply bonus wagering progress, and maintain a complete and accurate account history.
• Customer support: To respond to your queries, resolve disputes, and maintain records of communications in case of future reference.
• Fraud prevention and security: To detect and prevent fraudulent activity, bonus abuse, money laundering, and unauthorised account access. Device data and IP information are used as part of this function.
• Legal and regulatory compliance: To meet our obligations under applicable laws, respond to lawful requests from authorities, and maintain records as required by financial compliance standards.
• Responsible gaming: To maintain records of responsible gaming preferences and restrictions, apply deposit limits or exclusions as requested, and monitor accounts for signs of problem gambling behaviour.
• Platform improvement: Using aggregated and anonymised analytics data to understand how the platform is used and identify areas for improvement. This does not involve identifying you personally.

99pkr processes your personal data under the following legal grounds:

• Contractual necessity: Processing your identity data, contact data, transaction data, and betting data is necessary to provide the services you signed up for. Without this processing, 99pkr cannot operate your account or process your bets.
• Legal obligation: KYC verification and the retention of financial transaction records are required by applicable financial regulations. This processing is not optional — it is a legal requirement for operating a compliant payment platform.
• Legitimate interests: Fraud detection, security monitoring, and platform analytics are carried out based on 99pkr's legitimate interest in operating a safe and reliable platform. We apply proportionality to ensure this processing does not override your privacy interests.
• Your consent: Where 99pkr sends you optional promotional communications — such as email updates about new promotions — this is done on the basis of your consent. You can withdraw consent at any time by contacting support@99pkr.ws.

99pkr does not sell your personal data. We do not share it with advertisers. The only circumstances in which your data may be shared with third parties are the following:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, and Visa/Mastercard processing networks receive only the transaction data necessary to execute your deposit or withdrawal. Each processor operates under its own privacy policy and relevant financial regulations.
• Identity verification providers: Third-party KYC service providers may process your CNIC information and identity photographs on 99pkr's behalf to complete the verification process. These providers are bound by strict data processing agreements and may not use your data for any purpose other than verification on 99pkr's behalf.
• Technology service providers: Companies that provide hosting, infrastructure, analytics, or customer support software to 99pkr may process data on our behalf as data processors. They act only under our instructions and are contractually prohibited from using your data for their own purposes.
• Law enforcement and regulatory authorities: 99pkr will disclose personal data to law enforcement agencies, courts, or regulatory bodies when legally required to do so by a valid order, warrant, or regulatory direction. We will inform you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event that 99pkr or part of its business is acquired by or merged with another entity, personal data may be transferred as part of that transaction. Players will be notified before their data is subject to a different privacy policy as a result of any such transfer.

99pkr retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and KYC records: Retained for the duration of your active account and for a minimum of 5 years after account closure, as required by financial record-keeping obligations.
• Transaction records: Deposit and withdrawal records are retained for 7 years after the transaction date in compliance with financial regulations applicable to payment processing platforms.
• Betting and gaming history: Your full bet and game play history is retained for the life of your account and for 3 years following account closure.
• Support communications: Customer support transcripts and email correspondence are retained for 2 years from the date of the communication.
• Self-exclusion and responsible gaming records: Where a player has activated a self-exclusion, this record is retained indefinitely to ensure the exclusion can be enforced if the player attempts to re-register.
• Device and technical data (server logs): Standard server logs containing IP addresses and session data are retained for 90 days and then deleted, unless retained longer in connection with an active fraud or security investigation.

When data is no longer required and has passed its retention period, 99pkr deletes or anonymises it securely. Anonymised data — from which you cannot be identified — may be retained indefinitely for aggregate statistical analysis.

99pkr uses cookies and similar technologies to make the platform work properly and to understand how it is being used. Here is a breakdown of the types of cookies we use:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will impair your ability to use the 99pkr platform — the login session, cashier, and account features require them to function correctly.

Data security is not something 99pkr treats lightly. Every Pakistani player who registers an account is trusting us with personal and financial information — CNIC details, mobile numbers, payment records — and we take that responsibility seriously. The security measures we have in place include:

• 256-bit SSL encryption on all data transmitted between your device and our servers. This means any data in transit — your login credentials, payment details, personal information — is encrypted and cannot be intercepted.
• Encrypted storage for sensitive data at rest, including CNIC scans, KYC documents, and financial records. Encryption keys are managed separately from the data they protect.
• Access controls limiting personal data access to staff who need it for specific operational purposes. Staff with access to personal data are bound by confidentiality obligations.
• Regular security audits of our systems and processes to identify and address vulnerabilities before they can be exploited.
• Fraud detection systems that monitor for unusual account activity, login anomalies, and suspicious transaction patterns in real time.

No digital system is completely immune to security threats. In the event of a data breach that affects your personal data, 99pkr will notify affected players promptly and will take immediate steps to contain the breach and prevent further exposure.

You also have a role in keeping your account secure: use a strong, unique password for your 99pkr account, do not share your credentials with anyone, and contact support immediately if you suspect your account has been compromised.

As a 99pkr player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@99pkr.ws with your account username and the right you wish to exercise. We will respond within 30 days.

The 99pkr platform is strictly for adults aged 18 years and above. We do not knowingly collect personal data from anyone under 18. If a person under 18 registers an account on 99pkr, this violates our Terms and Conditions and this Privacy Policy, and the account will be closed upon discovery.

If you are a parent or guardian and have reason to believe a minor has registered an account on 99pkr using their details or yours, please contact us immediately at support@99pkr.ws. We will investigate and close any confirmed minor account promptly, deleting any personal data collected in connection with it.

As part of our KYC process, 99pkr verifies that all players are at least 18 years old using CNIC identity documents before withdrawals are permitted. This check serves as our primary control against underage gambling.

99pkr may update this Privacy Policy from time to time. This can happen because our services change, because the law changes, or because we improve our data practices in ways that require the policy to be updated.

For material changes — particularly anything that affects how your personal data is used or who it is shared with — 99pkr will notify registered players by email at least 7 days before the changes take effect. For minor or administrative updates (for example, updated contact details or clarifications that do not change the substance of how data is used), the policy may be updated without prior notice. The "Last Updated" date at the top of this page always reflects the most current version.

We encourage you to review this Privacy Policy periodically. If you are not comfortable with any update to the policy, you have the right to close your account and request erasure of your data to the extent permitted by our legal retention obligations. To exercise this right, contact support@99pkr.ws.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how 99pkr handles your personal information, please contact our privacy team through any of the following channels:

• Email: support@99pkr.ws — mark your subject line "Privacy Request" for fastest routing to the relevant team.
• Live Chat: Available 24 hours a day, 7 days a week through the chat icon in your 99pkr account dashboard. For complex privacy requests, email is preferred as it provides a written record.
• Response Time: Privacy requests submitted by email are acknowledged within 24 hours and resolved within 30 calendar days. If a request is complex and requires more time, we will notify you within the initial 30 days and provide an updated timeline.

99pkr takes privacy complaints seriously. If you feel a concern has not been handled adequately, please escalate by replying to the original response and requesting senior review. We are committed to resolving all privacy matters fairly and transparently.