Privacy Policy – 999ab Casino

1. Who We Are

1.1 999ab is an online entertainment platform offering sports betting, live casino games, video slots, crash games, and fishing game titles. The platform operates under international licensing standards and maintains compliance programs covering data protection, anti-money laundering (AML), and responsible gaming.

1.2 This Privacy Policy governs the collection and processing of personal data by 999ab in connection with all platform services. It is to be read alongside the 999ab Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

2.1 999ab collects personal data that is necessary to provide the platform's services, meet legal obligations under applicable licensing conditions, and comply with anti-money laundering and counter-terrorism financing (AML/CTF) requirements. The categories of personal data we collect include:

2.2 We do not collect sensitive personal data beyond what is strictly required for identity verification and AML compliance. Where CNIC photographs and biometric data are collected, they are processed solely for the purpose of verifying identity as required under our licensing obligations and are not used for any other purpose.

3. How We Collect Your Data

3.1 999ab collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to any survey or promotion on the 999ab platform.
• Automated collection: Technical and usage data collected automatically when you access and interact with the 999ab platform, including through cookies, log files, and session tracking technologies.
• Third-party sources: Data received from payment service providers (JazzCash, Easypaisa, participating banks) in connection with transaction processing; data from identity verification service providers used to authenticate KYC documents; fraud prevention database checks.

4. Legal Basis for Processing

4.1 999ab processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the services described in the 999ab Terms & Conditions, including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with AML/CTF regulations, KYC requirements imposed by our licensing authority, and any applicable data retention obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving service quality, where such processing does not override your fundamental privacy rights.
• Consent: Where we rely on your consent for specific processing activities (such as marketing communications), you retain the right to withdraw that consent at any time by contacting support.

5. How We Use Your Personal Data

5.1 999ab uses personal data collected from players for the following purposes:

• Registering and maintaining your 999ab account;
• Verifying your identity and age in accordance with KYC and licensing requirements;
• Processing deposits and withdrawals via JazzCash, Easypaisa, and participating Pakistani banks;
• Providing customer support through live chat and email;
• Monitoring gameplay patterns for responsible gaming purposes, including identifying potential problem gambling behaviours and activating responsible gaming interventions;
• Detecting, investigating, and preventing fraud, money laundering, and other illegal or prohibited activities;
• Complying with legal and regulatory obligations under our licensing conditions;
• Sending transactional communications (account notifications, deposit confirmations, withdrawal updates) to your registered mobile number or email address;
• Improving platform performance, game offerings, and user experience based on aggregated usage data.

5.2 999ab does not sell your personal data to third parties. We do not share your data with advertisers or data brokers.

6. Data Sharing & Third Parties

6.1 999ab shares personal data with third parties only where strictly necessary and only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers receive the minimum data necessary to process your transactions.
• Identity verification providers: Third-party KYC service providers receive identity documents and photographs solely for the purpose of verifying identity and age in compliance with licensing requirements.
• Regulatory authorities: We are legally required to disclose certain information to our licensing authority and, where applicable, to law enforcement agencies in connection with AML/CTF investigations or court orders.
• Technology service providers: Hosting, security, analytics, and fraud prevention service providers who operate under binding data processing agreements requiring them to protect your data and use it only for the purposes specified by 999ab.

6.2 All third parties with whom 999ab shares personal data are contractually required to process that data lawfully and securely, and to use it only for the specific purpose for which it was shared.

7. Cookies & Tracking Technologies

7.1 The 999ab platform uses cookies and similar tracking technologies to operate the platform, maintain user sessions, prevent fraud, and analyse usage patterns. The categories of cookies used include:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Functional cookies: Store your preferences (such as language settings) to improve your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players use the platform to help us improve performance and game offerings.

7.2 You may manage non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair the functionality of the 999ab platform and may prevent you from logging in or using core features.

8. Data Retention

8.1 999ab retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. Specifically:

• Account data and KYC documentation are retained for a minimum of five (5) years following account closure, as required under standard AML/CTF compliance frameworks.
• Transaction records are retained for a minimum of five (5) years following the date of each transaction.
• Customer support communications are retained for up to three (3) years to support dispute resolution.
• Technical and usage data may be retained in anonymised form for longer periods for platform improvement purposes.

8.2 Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction procedures.

9. Security Measures

9.1 999ab implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 999ab platform;
• Encrypted storage for sensitive data including identity documents and payment information;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Two-factor authentication options available to all account holders;
• Regular security assessments and penetration testing of platform infrastructure;
• Staff training on data protection and information security obligations.

9.2 No data transmission over the internet or electronic storage method is 100% secure. While 999ab implements robust security measures, we cannot guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for immediately notifying 999ab if you suspect any unauthorised access to your account.

10. Your Privacy Rights

10.1 Subject to applicable law and the terms of our licensing obligations, you have the following rights in respect of your personal data held by 999ab:

• Right of access: You may request a copy of the personal data 999ab holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to our overriding legal obligations to retain certain data.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10.2 To exercise any of the above rights, please contact 999ab support at [email protected]. We will respond to all valid requests within a reasonable timeframe. We may require you to verify your identity before processing any data rights request.

10.3 Please note that certain data rights are subject to limitations where processing is required for AML/CTF compliance, fraud prevention, or other overriding legal obligations. 999ab will explain any applicable limitations at the time of responding to a request.

11. Children's Privacy

11.1 The 999ab platform is strictly intended for adults aged 18 years and over. We do not knowingly collect personal data from individuals under the age of 18. If 999ab discovers or is notified that personal data has been collected from a minor, that data will be deleted promptly and the associated account will be closed. Parents or guardians who believe their child has registered on the 999ab platform should contact support immediately at [email protected].

12. Changes to This Privacy Policy

12.1 999ab reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or on-platform notification prior to the changes taking effect. The updated policy will be posted on this page with a revised effective date. Continued use of the 999ab platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

13. Contact & Data Enquiries

13.1 For all privacy-related enquiries, data rights requests, or concerns regarding 999ab's data practices, please contact us at: Email: [email protected]. Live chat is available on the 999ab platform during extended Pakistan Standard Time hours for general support queries. For formal data rights requests, written correspondence via email is preferred to ensure a proper audit trail.