99ad Privacy Policy

99ad is Pakistan's premier online gaming platform, accessible at 99ad.bio. We offer cricket betting, live casino games, slot products, and instant-win gaming to registered Pakistani players, with all accounts denominated in Pakistani Rupees (PKR) and full support for local payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and IBFT transfers.

99ad operates under an internationally licensed gaming framework and is committed to the responsible handling of personal data. For the purposes of this Privacy Policy, 99ad acts as the data controller in respect of all personal information collected from players and visitors to the 99ad platform. This means we determine the purposes for which your personal data is processed and the means by which that processing takes place.

99ad collects personal data from you in the following circumstances: when you register an account, when you complete KYC verification, when you make deposits or withdrawals, when you use the gaming services, and when you contact our customer support team. The categories of data we collect are set out below.

99ad uses the personal data we collect for specific, defined purposes. We do not process your data in any manner that is incompatible with the purposes for which it was originally collected. The following table sets out the primary purposes for which 99ad processes personal data.

• Account Management: To create, maintain, and administer your 99ad PKR account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To provide the gaming services you request, including processing bets on cricket markets, facilitating live casino sessions, and crediting slot winnings to your PKR balance.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, and IBFT, and to maintain accurate transaction records for your account.
• KYC & Fraud Prevention: To verify your age and identity in compliance with 99ad's licensing obligations, to detect and prevent money laundering, and to identify and investigate suspicious or prohibited activity on the platform.
• Responsible Gaming: To monitor gaming behaviour patterns that may indicate problem gambling, to apply player-requested deposit limits, loss limits, cooling-off periods, and self-exclusion orders, and to refer at-risk players to appropriate support resources.
• Customer Support: To respond to your queries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and gaming updates via email, SMS, or push notification — but only where you have given your prior consent or where such communication is permitted under applicable frameworks.
• Platform Improvement: To analyse aggregated usage data in order to improve 99ad's product offering, identify technical issues, and enhance the overall player experience.
• Legal Compliance: To fulfil 99ad's obligations under its international gaming licence, including cooperation with regulatory audits, AML reporting requirements, and responses to lawful authority requests.

99ad processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing your account registration data, KYC documents, and payment information is necessary to fulfil the contract between you and 99ad — specifically, to provide the gaming services you have requested and to manage your PKR account.
• Legal Obligation: Certain processing activities — including identity verification, AML record-keeping, and cooperation with licensing authority audits — are required by law and by the terms of 99ad's international gaming licence. We must process this data regardless of your consent in order to remain compliant.
• Legitimate Interests: 99ad processes some data — including technical data, gaming activity data, and fraud detection signals — on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform. Where we rely on legitimate interests, we have carried out a balancing assessment and concluded that our interests do not override your fundamental privacy rights.
• Consent: Where 99ad relies on your consent as the legal basis for processing — most notably for direct marketing communications via email or SMS — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

99ad uses cookies and similar tracking technologies on the 99ad.bio platform to ensure the platform functions correctly, to remember your preferences, to analyse how players use the site, and to detect suspicious or fraudulent access attempts.

• Strictly Necessary Cookies: These cookies are essential for the 99ad platform to operate. They manage your session authentication, maintain your login state, and enable core functionality such as the cashier and game loading. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
• Functional Cookies: These remember your preferences such as your preferred language, notification settings, and responsible gaming limit configurations, so that you do not need to re-enter them on each visit.
• Analytical Cookies: 99ad uses anonymised analytics data to understand how players navigate the platform, which games are most popular, and where technical issues arise. This data is aggregated and does not identify you individually.
• Security Cookies: These cookies help 99ad detect unusual login patterns, bot access attempts, and other indicators of unauthorised account access, contributing to the overall security of your 99ad account.

99ad does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the specific, limited circumstances described below, and always with appropriate data protection safeguards in place.

• Payment Service Providers: To process your PKR deposits and withdrawals, 99ad shares necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, and Mastercard. Each of these providers operates under their own privacy policy and data protection obligations.
• KYC & Identity Verification Partners: 99ad may use third-party identity verification services to assist with the processing of CNIC, passport, and proof-of-address documents submitted during the KYC process. These partners are contractually bound to use your data solely for the verification purpose specified.
• Gaming Content Providers: Where 99ad's live casino and slot products are provided by third-party game studios or live dealer operators, limited technical data (such as session tokens) may be shared with those providers to facilitate seamless game delivery. Content providers do not receive your full identity or financial data.
• Regulatory & Licensing Authorities: 99ad may be required to disclose player data to its licensing authority or to regulatory bodies as part of audit, compliance review, or investigation processes. Such disclosures are made only to the extent required by legal obligation.
• Law Enforcement: Where required by a lawfully issued court order, regulatory demand, or applicable law, 99ad will disclose player data to competent law enforcement or governmental authorities. 99ad will notify affected players where legally permitted to do so.
• AML & Fraud Prevention Services: 99ad may share transactional and identity data with industry-standard fraud prevention and anti-money laundering screening services in order to identify and block prohibited financial activity on the platform.

99ad retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, or accounting requirements applicable under 99ad's international gaming licence.

• Active Accounts: Personal data associated with an active 99ad account is retained for the full duration of the account's active status plus a minimum of five (5) years following account closure, in order to satisfy AML record-keeping requirements.
• KYC Documents: Identity and verification documents submitted during the KYC process are retained for a minimum of five (5) years following the end of the business relationship, as required by applicable AML frameworks.
• Transaction Records: PKR deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years following the date of each transaction.
• Support Communications: Customer support interactions, including live chat transcripts and email correspondence, are retained for a period of three (3) years from the date of the interaction.
• Marketing Data: Marketing consent records and promotional communication history are retained for as long as your marketing consent remains active, plus two (2) years following any opt-out, to demonstrate compliance with consent obligations.
• Technical & Log Data: Server log data, IP address records, and device fingerprint data are retained for a maximum of twelve (12) months from the date of collection, unless retained for longer as part of an ongoing fraud or security investigation.

Where personal data is no longer required for any of the purposes described in this policy, 99ad will securely delete or anonymise it using industry-standard data destruction methods.

99ad implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and the 99ad platform is encrypted using TLS (Transport Layer Security) protocols. You can verify this by the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive personal data — including identity documents, payment references, and account credentials — is stored in encrypted form on 99ad's servers using AES-256 encryption or equivalent.
• Access Controls: Access to personal data within 99ad's systems is restricted on a strict need-to-know basis. Employees and contractors who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: 99ad offers two-factor authentication (2FA) for player accounts as an additional layer of security. We strongly encourage all 99ad account holders to enable 2FA in their account security settings.
• Penetration Testing & Audits: 99ad conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities in the platform's infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 99ad will notify affected players and the relevant regulatory authority within the timeframes required under applicable data protection law.

As a data subject whose personal information is processed by 99ad, you hold a number of rights in respect of that data. 99ad is committed to facilitating the exercise of these rights in a timely and transparent manner.

99ad operates a strict 21+ policy. The platform and all associated gaming services are intended exclusively for adults aged 21 years and over. 99ad does not knowingly collect, store, or process personal data belonging to individuals under the age of 21.

If 99ad becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation of age at registration or any other means — that account will be immediately suspended, all associated data will be reviewed, and any real-money balance will be held pending investigation and, where appropriate, returned via the original payment method. The matter may also be referred to relevant child protection authorities.

The 99ad platform integrates with a number of third-party service providers to deliver the full range of gaming, payment, and support services available to Pakistani players. Each third-party provider with whom 99ad shares personal data is subject to contractual data protection obligations consistent with 99ad's privacy standards.

• Third-party game content providers (live casino studios and slot game developers) operate under their own privacy policies in respect of any technical data processed at the game-delivery layer. 99ad is not responsible for the data practices of third-party game studios beyond the contractual obligations it imposes on them.
• Payment service providers including JazzCash, EasyPaisa, and partner banks process payment data under their own regulatory frameworks and privacy policies. 99ad recommends that players review the privacy documentation of their chosen payment provider.
• The 99ad platform does not contain links to external websites. If you navigate away from 99ad.bio to any third-party website, you do so at your own risk and subject to that website's own privacy terms. 99ad accepts no responsibility for the privacy practices of any third-party website.

99ad reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or enhancements to our gaming platform and services. When we make material changes to this policy, we will notify registered account holders via their registered email address and display a prominent notice on the 99ad platform for a minimum of 30 days following the update.

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made. We encourage all 99ad players to review this Privacy Policy periodically. Your continued use of the 99ad platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 99ad handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the 99ad platform with an average response time of 3–5 minutes. Live chat support is available in both English and Urdu.
• Email: The 99ad data protection support email address is displayed in the footer of this page. Please include "Privacy Request" in your subject line and provide your registered account username to allow us to locate your records and verify your identity efficiently.
• Formal Complaints: If you are not satisfied with 99ad's response to a privacy concern, you have the right to escalate your complaint to 99ad's formal complaints process as described in the FAQ section of the platform, or ultimately to the relevant regulatory authority under 99ad's licensing framework.

99ad is committed to resolving all privacy-related enquiries fairly and transparently. We acknowledge all privacy requests within 48 hours and aim to provide a full response within 30 calendar days of identity verification.