99ba Privacy Policy
At 99ba, we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect when you use the 99ba platform, why we collect it, how we use and protect it, who we share it with, and what rights you have over your own data. We encourage you to read this document carefully before registering your account.
How 99ba Approaches Your Privacy
Six core principles guide every decision 99ba makes about how your personal data is collected, stored, and used. These are not abstract statements — they are engineering and operational requirements built into the platform.
Purpose Limitation
99ba collects your personal data only for specific, clearly defined purposes — account management, payment processing, regulatory compliance, and platform security. We do not collect data speculatively or for purposes unrelated to your experience on the platform.
Data Minimisation
We collect only the minimum data necessary to deliver the 99ba service. If a piece of information is not required to operate your account, process a transaction, or comply with a regulatory obligation, we do not collect it.
Security by Design
All personal data held by 99ba is protected using industry-standard encryption at rest and in transit. Access to personal data within the organisation is restricted to personnel with a legitimate operational need.
No Unauthorised Disclosure
99ba does not sell, rent, or trade your personal data to third parties for marketing purposes. Data shared with third parties is limited to what is strictly necessary and governed by contractual data protection obligations.
Your Rights Are Real
You have meaningful rights over your personal data at 99ba — including the right to access, correct, restrict, and request deletion of your information. These rights are exercisable by contacting our support team and will be actioned within applicable timeframes.
Defined Retention Periods
Personal data is not kept indefinitely. 99ba applies defined retention periods to all categories of player data, after which data is securely deleted or anonymised in accordance with our retention schedule and applicable law.
- 1. Who We Are
- 2. Data We Collect
- 3. How We Collect Data
- 4. How We Use Your Data
- 5. Legal Basis
- 6. Sharing Your Data
- 7. International Transfers
- 8. Data Security
- 9. Data Retention
- 10. Cookies & Tracking
- 11. Your Rights
- 12. Children's Privacy
- 13. Marketing
- 14. Policy Updates
- 15. Contact Us
Who We Are
99ba (hereinafter "the Company," "we," "us," or "99ba") operates the online casino and sports betting platform accessible at 99ba.vu and any associated subdomains or mobile applications (collectively, "the Platform"). 99ba is licensed and regulated under international gaming standards and operates as the data controller with respect to the personal data of all registered players and visitors to the Platform.
This Privacy Policy applies to all personal data processed by 99ba in connection with the operation of the Platform, including data collected at account registration, during ongoing use of the Platform, in the course of payment processing, and through any communications between you and the 99ba support team.
By registering an account with 99ba or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
Categories of Personal Data We Collect
99ba collects and processes the following categories of personal data in connection with your account and use of the Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | Account registration, KYC verification, age verification |
| Contact Data | Mobile number, email address, residential address | Account communication, support, regulatory notices |
| Financial Data | JazzCash/EasyPaisa account details, bank account details, transaction history | Deposit and withdrawal processing, fraud prevention, AML compliance |
| KYC Documents | CNIC scan, passport copy, proof of address, selfie verification | Identity verification, regulatory compliance |
| Technical Data | IP address, device type, browser, operating system, session logs | Platform security, fraud detection, service optimisation |
| Behavioural Data | Games played, betting history, deposit/withdrawal patterns, session duration | Responsible gaming monitoring, personalisation, bonus management |
| Communication Data | Support chat transcripts, email correspondence, complaint records | Customer service, dispute resolution, quality assurance |
| Marketing Preferences | Communication opt-in/opt-out status, promotional interaction history | Direct marketing (where consented), preference management |
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data unless specifically required by responsible gaming obligations (for example, in connection with a self-exclusion or problem gambling support request).
How We Collect Your Data
99ba collects personal data through the following channels:
3.1 Directly From You
The majority of personal data we hold is provided directly by you when you: register a 99ba account; complete KYC verification; make a deposit or request a withdrawal; contact our customer support team; opt into or out of marketing communications; or use any interactive feature of the Platform such as live chat.
3.2 Automatically Through Platform Use
When you access and use the 99ba Platform, certain technical and behavioural data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser type and version, pages visited, games played, session timestamps, and betting activity. This data is collected to ensure the security, stability, and fair operation of the Platform.
3.3 From Third Parties
In certain circumstances, 99ba may receive personal data about you from third parties, including:
- Payment service providers (JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank) in connection with transaction processing;
- Identity verification and KYC service providers during the account verification process;
- Fraud prevention and anti-money laundering screening services;
- Responsible gaming self-exclusion databases, where you have registered with such a scheme.
How We Use Your Personal Data
99ba uses the personal data it collects for the following purposes:
- Account Management: Creating, maintaining, verifying, and securing your 99ba player account;
- Service Delivery: Enabling you to access sports betting markets, casino games, live dealer tables, and all other features of the 99ba Platform;
- Payment Processing: Processing deposits made via JazzCash, EasyPaisa, bank transfer, Raast, and 1LINK; processing withdrawal requests back to your nominated method; maintaining accurate financial records;
- KYC and Age Verification: Verifying that you meet the 21+ age requirement and that your identity matches the details provided at registration, in compliance with our licensing obligations;
- Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multiple account registrations, money laundering, and other prohibited conduct on the Platform;
- Responsible Gaming: Monitoring betting behaviour to identify indicators of problem gambling; facilitating deposit limits, self-exclusion, and other player protection tools; actioning responsible gaming requests from players;
- Regulatory Compliance: Meeting obligations under international gaming licensing requirements, anti-money laundering (AML) regulations, and law enforcement requests where legally mandated;
- Customer Support: Responding to enquiries, complaints, and disputes; maintaining records of support interactions;
- Platform Improvement: Analysing aggregated, anonymised usage data to improve the design, performance, and content of the 99ba Platform;
- Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have provided consent to receive such communications. You may withdraw this consent at any time.
Legal Basis for Processing
99ba relies on the following legal bases for processing your personal data:
- Contract Performance: Processing necessary to provide the services you have requested by registering a 99ba account and using the Platform;
- Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations under our gaming licence and responses to lawful requests from regulatory authorities or law enforcement;
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights;
- Consent: Processing for direct marketing communications and non-essential cookies, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Sharing Your Personal Data
99ba does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and with the following categories of recipients:
6.1 Payment Service Providers
Personal and financial data is shared with payment processors including JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank solely for the purpose of processing your deposit and withdrawal transactions. Each provider is subject to its own privacy policy and contractual data protection obligations.
6.2 KYC and Identity Verification Providers
Identity documents and personal data may be shared with licensed third-party KYC verification service providers to fulfil our age and identity verification obligations. These providers process data on our behalf under strict contractual terms.
6.3 Game Technology Suppliers
When you play casino games or live dealer titles on the 99ba Platform, certain technical data (such as player session identifiers and game round results) is processed by our game suppliers including Evolution Gaming, Pragmatic Play, NetEnt, and Play'n GO. These suppliers process data as independent data controllers under their own licensing and privacy obligations.
6.4 Regulatory and Law Enforcement Authorities
99ba will disclose personal data to regulatory bodies, gaming authorities, financial intelligence units, or law enforcement agencies where legally required to do so or where we have a good-faith belief that disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
6.5 Fraud Prevention and AML Services
Data may be shared with fraud prevention databases and AML screening services to fulfil our obligations under applicable financial crime regulations. Such sharing is conducted under strict data sharing agreements and in accordance with applicable law.
In all cases where 99ba shares your personal data with a third party, we require that third party to implement appropriate technical and organisational safeguards to protect your data and to use it only for the specific purposes for which it was shared.
International Data Transfers
As an internationally operated platform, 99ba and its technology and service partners may process your personal data in countries outside of Pakistan. Where personal data is transferred internationally, 99ba ensures that appropriate safeguards are in place to protect the data — including standard contractual clauses, data processing agreements, and transfers to jurisdictions recognised as providing an adequate level of data protection under applicable frameworks.
You acknowledge that by using the 99ba Platform and consenting to this Privacy Policy, your personal data may be transferred to and processed in countries outside of Pakistan for the purposes described in this Policy.
Data Security
99ba implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- TLS (Transport Layer Security) encryption for all data transmitted between your device and the 99ba Platform;
- AES-256 encryption for sensitive data stored at rest, including identity documents and financial records;
- Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need;
- Regular penetration testing and security audits of the Platform infrastructure;
- Multi-factor authentication requirements for administrative access to systems holding personal data;
- Incident response procedures for detecting, reporting, and responding to data security breaches.
While 99ba employs robust security measures, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the security of your own login credentials and for notifying 99ba immediately if you suspect any unauthorised access to your account.
Data Retention
99ba retains personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. General retention periods applied by 99ba are as follows:
- Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with AML and gaming licence retention requirements;
- Transaction records: Retained for a minimum of 5 years from the date of the transaction;
- KYC documentation: Retained for the duration of the account relationship and for a minimum of 5 years following account closure;
- Support communications: Retained for up to 3 years from the date of the last interaction, unless a longer period is required for dispute resolution;
- Technical and log data: Retained for up to 12 months for security and fraud detection purposes;
- Marketing preference records: Retained for as long as necessary to honour your opt-in or opt-out status.
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
Cookies & Tracking Technologies
The 99ba Platform uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience, maintain session security, and analyse Platform usage. Cookies used by 99ba fall into the following categories:
- Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, login authentication, and security features. These cannot be disabled without affecting your ability to use the Platform;
- Functional Cookies: Remember your preferences (such as language settings and game favourites) to provide a personalised experience;
- Analytical Cookies: Collect anonymised data about how you use the Platform to help us understand usage patterns and improve service quality;
- Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns — placed only with your prior consent.
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 99ba Platform. Withdrawing consent for marketing cookies does not affect your ability to use core platform features.
Your Data Rights
As a 99ba player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the 99ba support team. We will respond to all legitimate requests within 30 days.
Right of Access
Request a copy of all personal data 99ba holds about you, together with information about how it is used.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your 99ba account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Right to Restriction
Request that 99ba restrict processing of your data in certain circumstances, such as while a dispute is being investigated.
Right to Portability
Request your personal data in a structured, machine-readable format where processing is based on contract or consent.
Right to Object
Object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Please note that some rights are subject to limitations where we have an overriding legal obligation to retain or process certain data — for example, AML and KYC records which must be retained for a minimum period under gaming licensing requirements. We will always explain clearly when such limitations apply to your request.
Children's Privacy
The 99ba Platform is strictly intended for persons aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we discover or are notified that a registered account belongs to a person under 21, we will immediately close the account, void all associated wagers, and securely delete the personal data of the underage individual in accordance with applicable law.
If you are a parent or guardian and believe that your child has registered an account with 99ba, please contact our support team immediately so that the account can be closed and data deleted without delay.
Marketing Communications
Where you have provided consent at registration or thereafter, 99ba may contact you with promotional offers, bonus notifications, new game announcements, and platform updates via SMS, email, or push notification. Marketing communications are sent only to players who have opted in.
You may withdraw your consent to receive marketing communications at any time by: updating your communication preferences in your 99ba account settings; clicking the unsubscribe link in any marketing email; or contacting our support team directly. Withdrawal of marketing consent does not affect your ability to continue using the Platform or your account status.
We do not engage in unsolicited marketing to individuals who have not registered a 99ba account or who have not provided consent to receive such communications.
Updates to This Privacy Policy
99ba reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — we will notify you via email to your registered address or via an on-platform notification prior to the changes taking effect.
The effective date at the top of this document reflects the date of the most recent revision. Your continued use of the 99ba Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, please discontinue use of the Platform and contact our support team to discuss your account closure options.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 99ba processes your personal data, please contact our Data Privacy team via the 24/7 live chat facility available on the Platform, or by email at the address listed in the footer of this page.
We are committed to addressing all legitimate privacy enquiries promptly and transparently. Where your enquiry relates to the exercise of a data subject right, we will acknowledge your request within 5 business days and provide a substantive response within 30 days, or notify you if additional time is required.
For all privacy-related enquiries, please include your registered 99ba username and the nature of your request in your message so that we can respond efficiently and accurately.
Your Privacy Matters at 99ba
Now that you understand how 99ba protects and manages your personal data, you can play with confidence. Join thousands of Pakistani players enjoying secure betting on PSL cricket, slots, and live casino games with full data protection.