Your privacy is a foundational commitment at 99aba, not a compliance checkbox. This Policy explains what personal data we collect, why we collect it, how it is processed and stored, and what rights you hold over your information as a user of our platform.
These six commitments summarise our approach to your data. Each is elaborated in full in the policy sections below.
We collect the minimum personal data required to operate your account, process transactions, comply with KYC obligations and deliver the 99aba service. We do not harvest data speculatively.
Your personal information is not sold, rented or traded to third-party advertisers, data brokers or marketing companies. Full stop. Any data sharing that does occur is strictly governed by necessity and confidentiality obligations.
Account data, KYC documents and payment records are stored using industry-standard encryption and access controls. Storage environments are subject to regular security review to reduce the risk of unauthorised access.
You have the right to access, correct, update and — in certain circumstances — request deletion of your personal data. We make exercising these rights straightforward through our support team.
We document the legal basis for every category of data we process. You will not discover a use of your data that is not described in this Policy. If processing changes materially, this Policy is updated and you are notified.
Data is retained only for as long as required to fulfil its stated purpose, comply with legal obligations or resolve disputes. Data no longer required is securely deleted or anonymised in accordance with our retention schedule.
This Privacy Policy ("Policy") describes how 99aba ("Platform", "We", "Us", "Our"), operating at https://99aba.cam, collects, uses, stores, shares and protects personal data belonging to individuals who register an account, visit the website or otherwise interact with our services ("Users", "You", "Your").
This Policy applies to all personal data processed in connection with the 99aba Platform, regardless of the device or connection method used to access it. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.
By registering an account or using the 99aba Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not create an account or submit any personal data through our Platform.
This Policy is written in clear English to ensure Pakistani users can understand how their data is handled. It does not constitute legal advice regarding data protection obligations under Pakistani law. Users with specific legal concerns should consult a qualified legal professional.
The following terms carry the meanings assigned below throughout this Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, email address, phone number, financial details and device identifiers. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, transfer and deletion. |
| Data Controller | The entity that determines the purposes and means of processing personal data — in this case, 99aba. |
| Data Processor | A third party that processes personal data on behalf of 99aba under a contractual obligation. |
| KYC Data | Identity and address verification documents submitted during Know Your Customer checks, including CNIC copies, passport scans and proof-of-address documents. |
| Cookies | Small data files placed on your device by the Platform to facilitate session management, analytics and preference storage. |
| Consent | A freely given, specific, informed and unambiguous indication of agreement to personal data processing for a defined purpose. |
| Legitimate Interest | A lawful basis for processing where 99aba has a genuine business need that is not overridden by the User's rights and interests. |
99aba acts as the Data Controller for all personal data collected through the Platform. As Data Controller, we are responsible for determining how and why your personal data is processed, and for ensuring that processing is conducted lawfully, fairly and transparently in accordance with applicable data protection principles.
Where 99aba engages third-party service providers to carry out specific processing activities on its behalf (for example, payment processing technology providers, identity verification services or analytics platforms), those providers act as Data Processors under contractual terms that restrict their use of your data to the specified purpose only.
Contact details for data-related queries are set out in Section 16 of this Policy.
We collect personal data through multiple channels: directly from you during account registration and KYC submission; automatically through your use of the Platform; and in limited cases from third-party verification or fraud-prevention services. The categories of data collected are set out below.
4.1 Data Provided Directly by You
4.2 Data Collected Automatically
Every processing activity carried out by 99aba is associated with a defined purpose and a lawful basis. The table below sets out our primary processing purposes:
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, communications data | Contract performance |
| Identity verification (KYC) | KYC data, payment data | Legal obligation / Contract |
| Payment processing and transaction management | Payment data, account data | Contract performance |
| Fraud detection and prevention | Device data, usage data, transaction data | Legitimate interest |
| Responsible gambling compliance | RG preferences, usage data, account data | Legal obligation / Legitimate interest |
| Platform analytics and improvement | Usage data, device data | Legitimate interest |
| Customer support | Communications data, account data | Contract performance |
| Direct marketing communications | Email address, usage data | Consent (opt-in) |
| Legal and regulatory compliance | All relevant categories | Legal obligation |
99aba does not sell, rent or trade your personal data to any third party. Limited data sharing occurs only in the following specific circumstances, and always subject to confidentiality obligations:
We will never share your personal data with third-party gambling operators, data brokers, advertising networks or marketing companies without your explicit prior consent.
As an online platform, 99aba may process your personal data in countries other than Pakistan. This may occur where our data processors, infrastructure providers or analytics partners operate servers or facilities in other jurisdictions.
Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that applicable in the operator's license jurisdiction, 99aba will implement appropriate safeguards, which may include:
By using the 99aba Platform, you acknowledge and consent to potential transfer of your personal data to jurisdictions outside Pakistan in accordance with the safeguards described in this section.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to establish, exercise or defend legal claims. Our general retention guidelines are as follows:
| Data Category | Retention Period |
|---|---|
| Account & registration data | Duration of account plus 5 years following closure, unless a longer period is required by law. |
| KYC verification documents | Duration of account plus 5 years following closure, in line with standard anti-money laundering record-keeping obligations. |
| Transaction & payment records | Minimum 5 years following the relevant transaction, for financial record-keeping compliance. |
| Support communications | 3 years from the date of the communication, unless relevant to an ongoing dispute. |
| Marketing consent records | Until consent is withdrawn, plus a reasonable period for audit purposes. |
| Analytics and usage data | Up to 24 months in identifiable form; indefinitely in aggregated, anonymised form. |
| Self-exclusion records | Retained for the full duration of any exclusion period plus a minimum of 5 years thereafter to prevent re-registration during excluded periods. |
Following the expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Deletion requests from Users are honoured where no legal obligation requires continued retention of the relevant data.
99aba implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or alteration. Our security practices include, but are not limited to:
Account security responsibilities shared by the User: You are responsible for maintaining the confidentiality of your account login credentials. Do not share your password with any third party, including 99aba support staff — you will never be asked to provide your password verbally or in writing by our team. Report any suspected unauthorised account access to our support team immediately.
No security system is impenetrable. While we maintain industry-standard protections, we cannot guarantee absolute security against all possible threats. In the event of a data breach that presents a material risk to your rights, we will notify affected users in accordance with our obligations and incident response procedures.
The 99aba Platform uses cookies and similar tracking technologies to facilitate core platform functionality, remember your preferences and analyse platform usage. The categories of cookies used are as follows:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security. Required for the Platform to function correctly. | No — essential for service |
| Functional | Language preferences, display settings, responsible gambling tool states. | Yes — may affect experience |
| Analytics | Aggregated usage statistics to understand how the Platform is used and identify improvement opportunities. | Yes — via cookie settings |
| Marketing / Retargeting | Used only where separate consent has been obtained. Not deployed by default. | Yes — withdraw consent at any time |
Most web browsers allow you to control cookie behaviour through browser settings. Disabling strictly necessary cookies will impair Platform functionality. For detailed information on managing cookies in your browser, refer to your browser's official documentation.
Subject to applicable law and certain exceptions (such as legal retention obligations or fraud investigation requirements), you have the following rights over your personal data held by 99aba:
You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed. We will provide this within a reasonable timeframe following identity verification.
You have the right to request correction of any inaccurate or incomplete personal data we hold. For account-level corrections, many fields can be updated directly in your account settings; others require support team assistance.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to legal retention obligations — for example, KYC and transaction records may be retained for compliance purposes even following account closure.
You may request that we restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending our assessment of that objection.
Where processing is based on your consent or contract performance, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
You have the right to object to processing based on legitimate interests, including profiling, and to withdraw consent for processing based on consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of the above rights, contact our support team as described in Section 16. We will respond within a reasonable period, typically within 30 days of receiving a verified request. We may need to verify your identity before processing a rights request.
99aba will only send you direct marketing communications — such as promotional offers, bonus notifications and platform news — where you have provided prior explicit consent to receive such communications during account registration or through your account preferences settings.
You may withdraw your consent to marketing communications at any time by:
Withdrawal of marketing consent does not affect your ability to receive essential account and transactional communications, such as deposit confirmations, KYC notifications, withdrawal updates and security alerts. These communications are necessary for service delivery and cannot be opted out of while your account remains active.
We will never share your email address or contact information with third-party marketers. Marketing analytics, where used, operate on aggregated data only — not targeted individual profiling shared externally.
The 99aba Platform is strictly restricted to adults aged 18 years or above — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect, process or retain personal data from individuals under the applicable minimum age.
Age verification is conducted as part of the account registration process, and KYC procedures include confirmation of date of birth against government-issued identity documents. Any account found to have been registered by a minor will be closed immediately, all associated balances will be voided and any deposits will be returned to the relevant payment method following verification.
If you believe that personal data of a minor has been submitted to our Platform, please contact our support team immediately using the details in Section 16. We will investigate and take appropriate remedial action without undue delay.
99aba serves a significant user base in Pakistan. We recognise that Pakistani users may have specific concerns about data privacy, financial data handling and the interaction between platform data practices and local laws.
The following Pakistan-specific points apply to this Policy:
99aba reserves the right to update, revise or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. The "Last Updated" date displayed at the top of this page reflects the most recent revision.
Where an update constitutes a material change to how we process your personal data, we will notify you via your registered email address or through a prominent notice displayed within the Platform, with a minimum of reasonable advance notice before the change takes effect.
Your continued use of the Platform following notification of a material policy change constitutes your acceptance of the updated Privacy Policy. If you do not agree with any amendment, you must cease using the Platform and may request account closure before the effective date of the change.
We recommend reviewing this Policy periodically. Previous versions are available on request from our support team.
For any questions, concerns or requests relating to this Privacy Policy, your personal data, or your data rights, please contact 99aba through the following channels:
We aim to respond to all data rights requests within 30 days. Complex requests involving large volumes of data or legal review may take longer, in which case we will notify you of the expected timeline.
To protect your privacy, we will verify your identity before processing any access, deletion or portability request. We will never ask you to share your account password as part of this process.
Continue Exploring 99aba
Now that you've read our Privacy Policy, explore the platform knowing exactly how your data is handled. Visit the homepage to browse sports markets and casino games, or read our Responsible Gambling guide before you register.