99com Privacy Policy — How We Protect Your Data

01 About This Privacy Policy

This Privacy Policy describes how 99com ("we", "us", "our") collects, uses and protects personal information when you use the 99com platform at 99com.fun. It applies to all users of the platform, including registered players, visitors to the website and anyone who contacts 99com support.

By registering an account on 99com and using the platform — whether for sports betting on cricket, PSL or football, playing slots and live casino games, depositing PKR or any other activity — you acknowledge that you have read and understood this Privacy Policy.

This policy should be read alongside the Terms and Conditions, which govern the use of the platform as a whole. Where the Terms and this policy address the same topic, both documents apply and should be read together.

We will update this policy from time to time as the platform evolves and as privacy best practices change. The "Last Updated" date at the top of the page reflects the current version. We recommend reviewing this page periodically, especially if you are about to share additional personal information with us or make a large deposit.

02 What Data We Collect

We collect personal data in several ways: directly from you when you register and use the platform, automatically as you interact with the site, and in some cases from third-party payment processors when you make a PKR deposit or withdrawal.

Information you provide directly:

• Registration data: Your name, date of birth, mobile number and email address when you create your account.
• Verification documents: If required for identity verification, a copy of a valid identity document and proof of payment method ownership.
• Communication data: Messages you send to support via live chat, email or any other channel, including the content of your queries and our responses.
• Preference settings: Deposit limits, responsible gaming settings, notification preferences and any other account customisation you apply.

Information collected automatically:

• Device and browser data: IP address, browser type and version, operating system, device type and screen resolution.
• Usage data: Pages visited, games played, bets placed, session duration, deposit and withdrawal history and other platform interactions.
• Cookie data: Information stored by cookies and similar tracking technologies as described in Section 5.

The table below summarises the main categories of data collected and the primary reason for collecting each:

03 How We Use Your Data

99com uses personal data for the purposes listed below. We only process data where we have a legitimate reason to do so — typically because it is necessary to operate your account, fulfil a transaction, prevent harm or because you have given your consent.

• Account management: Creating, maintaining and securing your account; sending security alerts and password reset notifications to your registered mobile number or email.
• Payment processing: Processing PKR deposits through JazzCash, Easypaisa, Raast and bank transfer; processing withdrawal requests to your verified payment account.
• Identity and age verification: Confirming that you are aged 18 or over and that your account details match your payment account, as required by responsible gaming standards.
• Fraud and security monitoring: Detecting and preventing suspicious activity, unauthorised access, bonus abuse, multiple account registrations and money laundering. Automated systems and human review are both used for this purpose.
• Customer support: Responding to your queries, resolving disputes about bet settlements, withdrawal timelines or account issues, and maintaining records of those interactions.
• Platform improvement: Analysing usage patterns to understand which games, sports markets (especially cricket and PSL) and features are most popular, so we can improve the experience for all players.
• Responsible gaming: Monitoring your betting and deposit behaviour against the limits and preferences you have set; identifying patterns that may indicate problem gambling so we can prompt you to use responsible gaming tools.
• Marketing communications: Sending you information about bonuses, promotions, new games and PSL betting offers — but only if you have not opted out of such communications. You can update your preferences at any time in your account settings.
• Legal and compliance obligations: Retaining records as required by applicable obligations and responding to lawful requests from relevant authorities.

We do not use your personal data to make fully automated decisions that have a significant legal or similarly serious effect on you without human review being available.

04 Payment Data and PKR Transactions

Handling payment data carefully is particularly important to us because deposits and withdrawals involve real PKR. Here is exactly how payment data is handled on 99com:

• We do not store full payment credentials. When you make a JazzCash or Easypaisa deposit, the transaction is processed through the payment provider's own secure system. 99com receives a transaction reference and confirmation — not your full wallet PIN or account password.
• Bank transfer and Raast payments are recorded by transaction reference, date, amount in PKR and the account name. Full bank account numbers are not retained in our player-facing systems beyond what is needed to process and match the transaction.
• Withdrawal processing requires us to hold your verified payment account details (JazzCash number, Easypaisa number or bank account details) so we can send funds to the correct destination. This information is stored securely and used only for processing your withdrawal requests.
• Chargeback and dispute data: If you raise a payment dispute, relevant transaction records are retained until the dispute is resolved. This may involve sharing transaction details with your payment provider as part of the resolution process.

All connections between your browser and the 99com platform are encrypted. Payment processor connections use the payment provider's own security standards, which are maintained and certified by those providers independently of 99com.

05 Cookies and Tracking Technologies

99com uses cookies and similar tracking technologies to make the platform work correctly, keep you logged in between pages, remember your preferences and understand how players interact with the site so we can improve it.

Types of cookies we use:

• Essential cookies: Required for the platform to function. These include your session authentication token (so you stay logged in), security tokens and basic preference storage. The platform cannot work without these cookies and they cannot be disabled without breaking your session.
• Analytics cookies: Used to understand which pages are visited most, how long players spend on different sections and which games or sports markets (such as PSL T20 betting) attract the most interest. This data is aggregated and used to improve the platform — individual players are not targeted based on analytics data alone.
• Functionality cookies: Used to remember your display preferences, language setting and other optional customisations you have applied to your account interface.
• Security cookies: Used to detect and prevent fraudulent activity, including login attempts from unusual locations or devices.

Managing cookies: You can control cookies through your browser settings. Blocking essential cookies will prevent you from logging in and using the platform. Blocking analytics or functionality cookies will not prevent you from using the platform but may affect personalisation features. Instructions for managing cookies in your specific browser are available in your browser's help documentation.

99com does not use third-party advertising cookies or allow advertising networks to place tracking cookies on the platform.

06 Sharing Your Data

99com does not sell your personal data. We do not share it with third parties for their own marketing purposes. We share your data only in the following specific circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and participating banks receive the transaction information necessary to process your PKR deposits and withdrawals. Each payment processor operates under its own privacy policy.
• Identity verification providers: If third-party verification services are used to confirm your identity or age, the minimum required data is shared under strict confidentiality and data processing agreements.
• Technology and hosting providers: Companies that provide server infrastructure, platform software, security services and analytics tools may process data on our behalf. These providers are contractually required to protect the data and to use it only for the purpose of providing services to 99com.
• Customer support tools: Live chat and ticketing systems used to manage support interactions may store conversation data. These tools are operated under data processing agreements with 99com.
• Fraud prevention networks: In cases of suspected fraud, bonus abuse or money laundering, relevant data may be shared with fraud prevention services or other gaming platforms within appropriate information-sharing arrangements.
• Legal requests: If required by a lawful order, court direction or other legal obligation, 99com may disclose personal data to the relevant authority. We will notify you of such a request where we are legally permitted to do so.

In all cases where data is shared with third parties, we take reasonable steps to ensure those parties maintain appropriate security standards and do not use the data beyond the purpose for which it was shared.

07 How Long We Keep Your Data

99com retains personal data for as long as your account is active and for a period after account closure, as described below. Retention periods are set based on operational necessity and applicable obligations.

• Active account data: Kept for the full duration of your account, updated as your details change.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years after the transaction date. This allows us to resolve any long-running disputes and maintain accurate financial records.
• Betting and gaming history: Retained for a minimum of three years after the activity date. Used for dispute resolution, responsible gaming review and platform improvement.
• Support communications: Retained for two years after the conversation is closed. Longer retention applies if the conversation relates to an unresolved dispute or fraud investigation.
• Verification documents: Retained for the duration of account activity and for five years after account closure.
• Closed accounts — general data: A summary record of the account (name, registration date, closure date and reason) is retained for five years after closure for fraud prevention and dispute resolution purposes.

When personal data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised, aggregated data may be retained indefinitely for platform analytics purposes.

08 How We Keep Your Data Secure

Security is not an afterthought at 99com — it is built into how the platform operates. We use a combination of technical and operational measures to protect your personal data from unauthorised access, loss or misuse.

• Encryption in transit: All data transmitted between your device and the 99com platform is encrypted using TLS (Transport Layer Security). This applies to your login, your betting activity and your deposit and withdrawal requests.
• Access controls: Access to personal data within 99com's systems is restricted to staff who need it to perform their role. Access rights are reviewed regularly and revoked when no longer needed.
• Password security: Account passwords are stored using one-way hashing. 99com staff cannot see your password — if you forget it, a reset process is used rather than retrieval.
• Fraud monitoring: Automated systems monitor account activity for patterns associated with unauthorised access, including unusual login locations, rapid successive login attempts and suspicious betting activity.
• Regular security reviews: The platform undergoes periodic security assessments to identify and address vulnerabilities before they can be exploited.

In the event of a data breach that poses a material risk to players, 99com will take immediate steps to contain the breach and will notify affected players as quickly as practicable, including information about what data was involved and what steps are being taken.

09 Your Rights Over Your Personal Data

You have meaningful rights over the personal data that 99com holds about you. These rights can be exercised by contacting 99com support via live chat, available 24 hours a day, seven days a week.

• Right to access: You can request a copy of the personal data we hold about you. We will provide this in a clear, readable format within a reasonable timeframe.
• Right to correction: If your personal data is inaccurate or out of date — for example if you have changed your mobile number — you can ask us to correct it. Some corrections may require verification before they are applied.
• Right to deletion: You can request deletion of your personal data. Where we are not required to retain data for legal, fraud prevention or dispute resolution reasons, we will delete it within a reasonable period. Note that data subject to mandatory retention periods cannot be deleted ahead of those periods.
• Right to restrict processing: You can ask us to stop using your data for certain purposes — for example, for marketing — while retaining your account for gaming purposes.
• Right to data portability: You can request your account data in a commonly used format so you can transfer it elsewhere if you wish.
• Right to object to marketing: You can opt out of marketing communications at any time via your account notification settings or by asking support to apply the opt-out to your account.

We aim to respond to all data requests within 30 days. Complex requests may take longer and we will notify you if this is the case. There is no charge for exercising your rights under normal circumstances.

For data requests, please contact support via live chat and include your registered mobile number or email so we can verify your identity before processing the request. We cannot process data requests for accounts we cannot verify.

10 Children and Underage Users

99com is strictly an adult platform. You must be 18 years of age or older to register an account, deposit PKR, place bets or play any game on the platform. This policy and the platform as a whole are not directed at, and are not intended for, anyone under the age of 18.

We do not knowingly collect personal data from anyone under 18. If a registration is found to have been made by someone under 18, the account will be closed immediately, all funds will be returned and any personal data collected will be deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe your child has registered an account on 99com, please contact support immediately so we can investigate and act promptly. See the Responsible Gaming page for more information about protecting younger members of your household.

11 Changes to This Privacy Policy

99com may update this Privacy Policy from time to time to reflect changes in how the platform operates, updates to our security practices, new payment methods being added or other operational changes. We may also update the policy in response to evolving privacy best practices.

When we make material changes to this policy — meaning changes that significantly affect how we use your data or the rights available to you — we will notify registered players via the contact details on their account before the updated policy takes effect.

The "Last Updated" date at the top of this page always reflects the current version. We encourage you to check this page periodically, especially if you plan to share additional personal information with us or if you have specific concerns about how your data is handled.

Continued use of the 99com platform after an updated policy has been published constitutes your acceptance of the changes. If you do not agree with an updated policy, you should stop using the platform and contact support to discuss your options, including account closure.

12 Contact Us About Privacy

If you have any questions about this Privacy Policy, about how your personal data is used, or if you want to exercise any of your data rights, the best way to reach us is through the 99com live chat support, available 24/7 directly from the platform.

For privacy-related enquiries you can also reach our support team by email. Our general contact address is shown below — please include "Privacy Request" in the subject line so your message is directed to the right team:

[email protected]

We aim to acknowledge all privacy enquiries within 48 hours and to provide a full response within 30 days. For urgent matters — such as a suspected data breach affecting your account — please use live chat for the fastest response.