This policy explains what personal data we collect when you use the 99ba platform, why we collect it, how we process and protect it, and the rights you hold as a user.
These cards give you a quick snapshot of our core data-handling principles. The full policy below contains all applicable detail — please read it in its entirety.
All data transmitted between your device and 99ba is protected by TLS/HTTPS encryption. Sensitive account data is stored using industry-standard security practices.
We do not sell, rent or trade your personal data to third-party advertisers or data brokers. Your information is used only for the purposes described in this policy.
You may request access to, correction of, or deletion of your personal data at any time by contacting our support team. We respond to all data requests within a reasonable timeframe.
We collect only the data necessary to provide our services, meet legal obligations and keep your account secure. We do not collect data for its own sake.
Personal data is retained only for as long as required by our service obligations and applicable legal requirements. Data no longer needed is securely deleted or anonymised.
When this policy changes materially, we will notify you via your registered email address or a prominent notice on the Platform before the changes take effect.
This Privacy Policy ("Policy") describes how 99ba ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://99ba.cam ("Platform"), collects, uses, stores, shares and protects personal data relating to users of the Platform ("you", "your").
We are committed to handling personal data in a transparent, lawful and responsible manner. This Policy applies to all personal data we process in connection with your use of the Platform, including data collected through our website, mobile interface, support channels and any related services.
This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy. By creating an account or using the Platform, you acknowledge that you have read and understood this Policy.
Note for Pakistani Users: Pakistan has its own data protection framework under applicable law. While 99ba operates its data-handling practices to high international standards, this Policy does not constitute legal advice. If you have questions about your privacy rights under Pakistani law, you should consult an independent legal adviser.
The following definitions apply throughout this Policy:
We collect the categories of personal data described in the table below. We collect only what is necessary for the stated purposes.
| Category | Examples | Why We Collect It |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, photograph | Account registration, KYC verification, age verification |
| Contact Data | Email address, phone number, city of residence (e.g., Karachi, Lahore, Islamabad) | Account communication, support, security notifications |
| Financial Data | Payment method details, transaction history, PKR balances, withdrawal records | Deposit and withdrawal processing, AML compliance, fraud prevention |
| Technical Data | IP address, device type, browser type, operating system, session identifiers | Platform security, fraud detection, service optimisation |
| Usage Data | Pages visited, games played, bets placed, session duration, click patterns | Platform improvement, responsible-gambling monitoring, personalisation |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Support resolution, quality assurance, legal record-keeping |
| Responsible Gambling Data | Self-exclusion status, deposit limits set, cooling-off periods | Compliance with responsible-gambling obligations |
We collect data you actively provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or set responsible-gambling limits. This includes information submitted through registration forms, document uploads and live-chat interactions.
When you access the Platform, our systems automatically collect technical and usage data — including your IP address, device identifiers, browser type and activity logs. This collection happens through server logs, cookies, pixel tags and similar technologies.
We may receive personal data from third-party service providers engaged to assist with identity verification, fraud screening, payment processing or analytics. We require all such providers to handle data in accordance with applicable data protection standards and our contractual requirements.
We rely on one or more of the following legal bases when processing your personal data:
We use the personal data we collect for the following purposes:
To create, maintain and administer your 99ba account, verify your identity and eligibility, process your deposits and withdrawals in PKR or applicable currency, and manage your account settings and communication preferences.
To operate the Platform's gaming and betting services, including sports markets (cricket, PSL, T20, football, UFC), live dealer games, slots and table games, and to personalise your experience based on your usage patterns where permitted.
To comply with KYC, AML and counter-terrorism-financing obligations; to verify your age (18+ or the higher minimum required); to detect, investigate and prevent fraudulent activity; and to respond to lawful requests from regulatory authorities.
To monitor for patterns of play that may indicate problem gambling, to enforce self-exclusion orders and deposit limits set by you, and to provide you with access to responsible-gambling resources. See our Responsible Gambling page for more information.
To protect the integrity of the Platform, detect unauthorised access, prevent the exploitation of promotions or bonuses, and maintain a secure environment for all users.
To send you transactional communications (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have consented, to send you promotional communications about Platform offers. You may opt out of marketing communications at any time.
To analyse aggregated usage data, diagnose technical issues and improve the performance, functionality and user experience of the Platform on mobile and desktop devices.
We do not sell your personal data. We share personal data only in the following circumstances:
We share data with carefully selected third-party processors who provide services on our behalf, including payment processors, identity-verification providers, fraud-screening services, game content providers, analytics platforms and IT infrastructure providers. All processors are contractually bound to process data only on our instructions and to maintain appropriate security standards.
References to payment services commonly used by Pakistani consumers — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — indicate familiar payment rails only and do not imply any endorsement of gambling by those institutions.
We may disclose personal data to law-enforcement agencies, regulatory bodies or courts where required by applicable law, court order or regulatory requirement, or where we believe disclosure is necessary to protect the rights, property or safety of 99ba, its users or the public.
In the event of a merger, acquisition, restructuring or sale of all or part of our business, personal data may be transferred to the acquiring or successor entity as part of that transaction. We will notify you of any such transfer and your options where required by applicable law.
We may share aggregated or anonymised data — which cannot reasonably be used to identify you — with third parties for analytical, research or business purposes. Such data does not constitute personal data for the purposes of this Policy.
The Platform uses cookies, local storage, pixel tags and similar technologies to enable core functionality, remember your preferences, maintain your session, and collect analytics data about how the Platform is used.
You can manage cookie preferences through your browser settings. Blocking all cookies may impair certain Platform features. Where a consent mechanism is presented on the Platform, you may update your preferences at any time.
We retain personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. Our general retention principles are as follows:
When data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.
We implement a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:
No method of transmission over the internet is completely secure. While we apply robust protections, we cannot guarantee absolute security. If you believe your account has been compromised, contact support immediately at [email protected].
Subject to applicable law and certain exceptions, you hold the following rights in relation to your personal data. To exercise any right, contact us at [email protected] with sufficient detail to identify your account and the right you wish to exercise.
Request a copy of the personal data we hold about you and information about how we process it.
Request correction of inaccurate or incomplete personal data held in your account.
Request deletion of your personal data where we no longer have a lawful basis to retain it, subject to legal retention obligations.
Request that we limit how we use your data in certain circumstances, such as while accuracy is disputed.
Receive a structured, machine-readable copy of personal data you provided to us, where processing is based on consent or contract.
Object to processing based on our legitimate interests, including any direct-marketing communications.
We will respond to all valid data-rights requests within a reasonable timeframe. We may need to verify your identity before processing a request. If we are unable to fulfil a request, we will explain why.
The Platform is strictly for users who are 18 years of age or older — or the higher minimum age required by the operator/license jurisdiction or applicable local law. We do not knowingly collect personal data from individuals under the applicable minimum age.
If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has accessed the Platform and provided personal data, please contact us immediately at [email protected].
Parents and guardians in Pakistan are encouraged to use parental-control tools to restrict access to online gambling platforms and to discuss the risks of gambling with young people in their care.
The Platform may contain references to or integrations with third-party services — for example, payment processors or game content providers. These third parties operate under their own privacy policies, which we do not control. We are not responsible for the privacy practices of third parties.
We recommend that you review the privacy policies of any third-party service you interact with in connection with your use of the Platform, particularly payment service providers you select in the cashier.
As an online platform with international infrastructure and third-party service providers, your personal data may be transferred to, stored in and processed in countries other than Pakistan. Such transfers may include countries that have different data protection laws to those in your country of residence.
Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place — such as contractual data-processing agreements with recipient parties — to protect your personal data to a standard comparable to the protections applied within the operator's licensed jurisdiction.
We may update this Privacy Policy from time to time to reflect changes in our data-processing practices, legal requirements or Platform functionality. The "Last Updated" date at the top of this page indicates when the most recent changes came into effect.
Where changes are material, we will provide advance notice by email to your registered address and/or by a prominent notice on the Platform. Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgment of the revised terms. If you do not agree to the updated Policy, you should stop using the Platform and contact support to close your account.
If you have questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please contact our support team through the channels listed below. We take all privacy enquiries seriously and will respond within a reasonable timeframe.
For responsible-gambling concerns, self-exclusion requests or account-closure enquiries, please visit our dedicated Responsible Gambling page or contact support directly using the details above.
To protect your privacy, we will verify your identity before processing any data-rights request. Please be prepared to confirm your account details and provide a copy of a valid identification document if requested.
Our support team can clarify any aspect of this policy in plain English. You can also review our FAQ for common questions or return to the homepage to explore the platform.
18+ only — or the higher minimum required by the operator/license jurisdiction. Local laws may restrict gambling. Please play responsibly.