At 999ab, the privacy and security of your personal data is a fundamental obligation — not an afterthought. This Privacy Policy explains precisely what information we collect from Pakistani players, how it is used, who it may be shared with, and what rights you hold over your own data.
The principles that govern every data decision 999ab makes — expanded in the full policy below
999ab collects only the personal information that is genuinely necessary to operate your account, process PKR transactions, satisfy KYC obligations, and deliver the gaming services you have requested. We do not collect data speculatively or for purposes unrelated to platform operations.
All data transmitted between your device and 999ab travels over an encrypted HTTPS connection. Sensitive information — including CNIC details, payment data, and authentication credentials — is stored using industry-standard encryption at rest. No 999ab staff member has unencrypted access to your password.
999ab does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Data sharing with third parties is limited strictly to what is necessary for platform operation, regulatory compliance, and fraud prevention.
Personal data collected by 999ab is used only for the specific purposes described in this Privacy Policy. If 999ab intends to process your data for a materially different purpose than the one for which it was collected, you will be notified and, where required, your consent will be sought before that processing begins.
You have concrete, exercisable rights over your personal data held by 999ab — including the right to access, correct, restrict, and in certain circumstances delete the information we hold about you. Section 10 of this policy explains exactly how to exercise each right without unnecessary friction.
999ab retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and anti-money laundering obligations. Once data is no longer required, it is securely deleted or anonymised.
Your Privacy Matters: This Privacy Policy applies to all personal data processed by 999ab in connection with the platform at 999ab.bio, including all casino games, sports betting markets, account management functions, deposit and withdrawal processing, and customer support interactions. By using 999ab, you acknowledge that you have read and understood this policy.
1.1 For the purposes of this Privacy Policy, "999ab," "we," "us," and "our" refers to the operator of the online gaming and sports betting platform accessible at 999ab.bio, including its affiliated entities and licensed subsidiaries responsible for data processing activities described in this document.
1.2 999ab is the data controller in respect of the personal data it collects and processes from players accessing the platform. As data controller, 999ab determines the purposes for which, and the means by which, your personal information is processed.
1.3 999ab operates under an international gaming licence that imposes mandatory data protection obligations as a condition of licensing. These obligations are externally audited and compliance is verified periodically by the relevant regulatory authority.
1.4 If you have any questions about how your personal data is handled by 999ab, or wish to exercise any of the rights described in Section 10, please contact us using the details set out in Section 14 of this policy.
2.1 Identity and Registration Data: When you register for a 999ab account, we collect your full legal name, date of birth, Pakistani CNIC number (or equivalent government-issued identity document number), nationality, and gender. This information is mandatory for account creation and KYC compliance.
2.2 Contact Data: We collect your registered Pakistani mobile number, email address, and residential address. These are used for account communications, OTP verification, withdrawal processing notifications, and customer support purposes.
2.3 Financial and Transaction Data: We collect details of all financial transactions conducted through your 999ab account, including deposit amounts, withdrawal requests, payment method details (such as JazzCash wallet IDs, EasyPaisa account numbers, and bank account details for HBL, UBL, or Meezan Bank transfers), and transaction timestamps. We do not store full card numbers — only masked card details sufficient to identify the payment method used.
2.4 Verification Documents: As part of our KYC process, we may collect and retain scanned copies or photographs of identity documents including your CNIC, utility bills as proof of address, and documentation verifying the payment method used for deposits and withdrawals.
2.5 Gaming and Betting Activity Data: We retain a record of all bets placed, games played, session durations, wagering amounts, wins and losses, bonus redemptions, and responsible gaming tool activations associated with your 999ab account.
2.6 Technical and Device Data: We automatically collect certain technical information when you access 999ab, including your IP address, device type, operating system, browser type and version, time zone, and device identifiers. This data is used for security, fraud prevention, and platform optimisation purposes.
2.7 Communications Data: Where you contact 999ab support via email, live chat, or any other channel, we retain a record of those communications, including the content of the exchange and associated metadata, for quality assurance and dispute resolution purposes.
Types of data we process:
3.1 Directly from You: The majority of personal data 999ab holds is provided directly by you — during the registration process, when submitting KYC documents, when making deposits or withdrawal requests, when contacting customer support, or when completing responsible gaming forms.
3.2 Automatically During Platform Use: Certain technical data is collected automatically via cookies, log files, and similar technologies when you access and navigate the 999ab platform. See Section 7 for a full explanation of our cookie practices.
3.3 From Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, or a bank transfer, we receive confirmation and transaction reference data from the relevant payment processor in order to match the transaction to your 999ab account and update your balance accordingly.
3.4 From Identity Verification Services: Where 999ab uses a third-party identity verification provider to assist with KYC or age verification, that provider may supply a verification result and associated data points back to 999ab for the sole purpose of confirming your eligibility to hold a 999ab account.
3.5 From Fraud Prevention and Compliance Partners: We may receive information about you from third-party fraud prevention services and regulatory screening databases where this is necessary to protect the integrity of the 999ab platform and comply with anti-money laundering obligations.
4.1 Contractual Necessity: Processing your identity data, contact details, and transaction records is necessary for 999ab to perform its contractual obligations to you as a registered player — including operating your account, processing deposits and withdrawals in PKR, and providing access to gaming and betting services.
4.2 Legal and Regulatory Obligation: Processing KYC documentation, retaining transaction records, and screening against sanctions lists is required by the applicable laws and regulatory conditions under which 999ab's international gaming licence is issued. This includes anti-money laundering and counter-terrorist financing compliance obligations.
4.3 Legitimate Interests: Collecting technical and device data for fraud prevention, security monitoring, and platform optimisation serves the legitimate interests of 999ab and its players — specifically in maintaining a secure, fair, and reliable gaming environment. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your fundamental rights.
4.4 Consent: Where we process your data for marketing communications (such as promotional emails about 999ab bonuses or cricket betting offers), we rely on your explicit consent, which you may withdraw at any time through your account settings or by contacting support.
5.1 999ab uses the personal data it collects for the following specific purposes:
5.2 999ab will not use your personal data for automated decision-making that produces legal or similarly significant effects on you without first notifying you and providing a mechanism to request human review.
6.1 999ab does not sell your personal data to any third party. Data sharing is limited to the following categories of recipients, each of whom is subject to confidentiality obligations and data processing agreements consistent with this Privacy Policy:
6.2 In the event that 999ab undergoes a corporate restructuring, merger, or acquisition, player data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and the identity of the new data controller before the transfer takes effect.
7.1 999ab uses cookies and similar tracking technologies (including local storage and session identifiers) to operate the platform, maintain your login session, personalise your experience, and analyse how the platform is used in aggregate.
7.2 The following categories of cookies are used on 999ab:
7.3 You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 999ab platform, including the ability to log in to your account.
8.1 999ab employs a layered technical and organisational security framework designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
8.2 While 999ab takes all reasonable steps to protect your data, no online system is entirely immune to security risk. You are also responsible for keeping your 999ab login credentials secure and for notifying 999ab immediately if you suspect unauthorised access to your account.
8.3 In the event of a data breach that poses a significant risk to your rights and interests, 999ab will notify affected players without undue delay using the contact details registered on their accounts.
9.1 999ab retains personal data for the periods set out below, or for longer where required by applicable law:
9.2 Once a retention period has expired and there is no ongoing legal or regulatory reason to retain the data, 999ab will securely delete or irreversibly anonymise the relevant personal information.
10.1 Subject to applicable law, you have the following rights in relation to the personal data 999ab holds about you. To exercise any of these rights, please contact 999ab using the details in Section 14.
Right of Access
You may request a copy of the personal data 999ab holds about you. We will provide this within 30 days of a valid request, free of charge in most circumstances.
Right to Rectification
If personal data held by 999ab is inaccurate or incomplete, you have the right to request correction. For account registration details, many fields can be updated directly within your 999ab account settings.
Right to Erasure
In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected — you may request deletion of your personal data. This right is subject to overriding legal retention obligations, particularly in respect of KYC and transaction records.
Right to Restriction
You may request that 999ab restrict processing of your personal data in circumstances where you contest the accuracy of the data, object to its processing, or require it to be preserved for legal proceedings.
Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another controller.
Right to Object
You may object to the processing of your personal data where 999ab relies on legitimate interests as its legal basis. You also have an absolute right to opt out of marketing communications at any time without needing to provide a reason.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
10.2 999ab will respond to all valid rights requests within 30 calendar days. Where the complexity or volume of requests requires additional time, we will notify you of the extension and the reasons for it within the initial 30-day period.
11.1 The 999ab platform is strictly restricted to individuals aged 21 years and above. 999ab does not knowingly collect personal data from, or provide gaming services to, any person under the age of 21.
11.2 During the registration process, players are required to confirm their age. KYC verification — which includes documentary proof of age — is completed before any withdrawal is processed. Any account found to belong to a person under the age of 21 will be immediately closed, all funds will be frozen, and parents or guardians will be notified where practicable.
11.3 If you believe that a minor has registered for or is using a 999ab account, please contact us immediately at [email protected] so that we can take appropriate action without delay.
12.1 As an internationally operated platform, 999ab may transfer your personal data to, and store it in, countries outside Pakistan — including the jurisdiction in which 999ab's international gaming licence is held, and the countries in which 999ab's technology and infrastructure partners operate.
12.2 Where personal data is transferred outside Pakistan to a country that does not provide an equivalent level of data protection, 999ab will implement appropriate safeguards to protect the transferred data, including data processing agreements incorporating standard contractual clauses or equivalent transfer mechanisms.
12.3 By registering for and using 999ab, you acknowledge that your personal data may be transferred internationally in accordance with this section. 999ab takes all reasonable steps to ensure that such transfers are conducted lawfully and with appropriate protections in place.
13.1 999ab reserves the right to update and amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new category of data sharing partner — we will notify registered players via email and/or a prominent in-platform notice at least 14 days before the changes take effect.
13.2 The "Last Updated" date at the top of this page will be revised each time the policy is amended. We encourage you to review this page periodically to remain informed of how 999ab processes your personal data.
13.3 Your continued use of the 999ab platform following the effective date of any policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised policy, you must cease using the platform and may request account closure in accordance with the 999ab Terms and Conditions.
14.1 If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how 999ab has handled your personal information, please contact our support team:
14.2 If you are dissatisfied with 999ab's response to a privacy concern or rights request, you have the right to escalate your complaint to the data protection supervisory authority of the jurisdiction in which 999ab holds its international gaming licence, or to the relevant authority in your own country of residence.
14.3 999ab is committed to resolving all privacy-related complaints promptly and fairly. We will acknowledge all written privacy complaints within 5 business days and will aim to provide a substantive response within 30 calendar days.
Now that you understand how 999ab handles your data, enjoy Pakistan's most complete online gaming platform — cricket betting, live casino, and jackpot slots, all in PKR. For players aged 21 and above.