Privacy Policy – 99ap Sports Betting Pakistan

99ap ("we", "us", "the Platform") is an online sports betting and casino platform accessible at https://99ap.pro, designed and operated for players in Pakistan. We offer sports betting markets covering Cricket, Pakistan Super League (PSL), T20 internationals, Football, Esports and more, alongside a Live Casino section with real dealer games — all transacted in PKR.

As the operator of this platform, 99ap is the data controller for the personal information collected from registered players and visitors to the website. This Privacy Policy sets out how that data is collected, processed, stored and protected.

If you have any questions about this policy or wish to exercise any of your data rights, you can reach us at the contact details provided in Section 13.

We collect personal data in a few different ways — information you provide directly, information generated through your use of the platform, and in some cases, information from third-party payment or verification providers. The categories of data we may hold about you include:

Information You Provide Directly

• Registration details: Full name, date of birth, email address, username and chosen password.
• Contact information: Mobile number and any address details submitted for verification purposes.
• Identity documents: CNIC, passport or driving licence details provided during identity verification checks.
• Account preferences: Communication preferences, language settings and responsible gaming limits you set yourself.

Information Generated by Your Activity

• Betting and gaming history: Details of bets placed, markets selected, stakes, odds, settlements and Live Casino activity.
• Transaction records: Deposit and withdrawal history including amounts in PKR, dates, payment methods used (JazzCash, Easypaisa, Raast, Bank Transfer, cards and mobile wallets) and transaction reference numbers.
• Login and session data: IP address, device type, browser, operating system and session timestamps recorded each time you access your account.
• Communications: Records of messages exchanged with our customer support team via chat or email.

Information From Third Parties

• Identity verification services may return confirmation of your identity check status.
• Payment processors may share transaction confirmation data to reconcile deposits and withdrawals.
• Fraud prevention services may flag risk indicators associated with an account or transaction.

The table below summarises the main purposes for which 99ap uses your personal data and the reason we are entitled to do so.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. If responsible gaming monitoring flags a concern, it is reviewed by a member of the support team before any action is taken on your account.

99ap processes personal data on one or more of the following legal bases depending on the specific activity:

• Contract performance: Processing necessary to register your account, accept bets, process PKR deposits and withdrawals and provide the services you signed up for.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-fraud obligations and financial record-keeping requirements.
• Legitimate interests: Processing carried out to protect the platform and its players from fraud, to improve platform performance, to provide customer support and to conduct responsible gaming monitoring — provided these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific and informed agreement — primarily for marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

When you deposit or withdraw funds using JazzCash, Easypaisa, Raast, Bank Transfer, debit or credit cards or any other supported mobile wallet, your payment data is handled through encrypted connections with our approved payment processing partners.

• Full wallet credentials, card numbers or bank account details are never stored on 99ap servers.
• Payment processors are contractually required to handle your data securely and only for the purpose of completing the relevant transaction.
• Transaction reference numbers, amounts in PKR, method types and timestamps are retained in our records for the purpose of account management, withdrawal reconciliation and financial compliance.
• All deposits must originate from a payment account registered in your own name. Third-party payment methods are not accepted and any such transactions may be reversed.

99ap uses cookies and similar technologies to keep the platform working correctly and to understand how players use the site. We keep our use of tracking technologies as minimal and transparent as possible.

Types of Cookies We Use

• Essential cookies: Required for the platform to function — including keeping you logged in during a session, maintaining your betting slip and applying your security settings. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand aggregate usage patterns such as which pages are visited most and where players encounter issues. Data is anonymised and used solely to improve the platform.
• Preference cookies: Store settings you have chosen — such as odds format preferences and responsible gaming limit configurations — so they persist between sessions.

What We Do Not Use

We do not use third-party advertising cookies, cross-site tracking pixels or social media tracking scripts on the 99ap platform. Our analytics data is not shared with advertising networks.

Managing Cookies

You can manage or delete cookies through your browser settings at any time. Blocking essential cookies will prevent certain platform features from working correctly. Blocking analytics or preference cookies will not affect your ability to place bets, deposit funds or access your account.

99ap does not sell your personal data. We share data with third parties only where necessary to operate the platform, meet legal obligations or protect against fraud. The categories of third parties who may receive your data are as follows:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners and card networks — to process deposits and withdrawals in PKR.
• Identity verification providers: Services used to verify your identity documents (CNIC, passport, etc.) when required for account approval or withdrawal processing.
• Fraud prevention services: Platforms that help identify suspicious account activity, duplicate registrations or unusual transaction patterns.
• Customer support tooling: Where we use third-party software to manage support tickets or live chat, your communications may be stored within those systems subject to their own security standards.
• Legal and regulatory authorities: Where we are legally required to disclose information — for example in response to a valid court order or regulatory investigation — we will comply with our legal obligations.

All third-party service providers are subject to contractual obligations regarding the confidentiality and security of your data. They are permitted to use your data only for the specific purpose for which it was shared.

We retain your personal data for as long as your account is active and for a reasonable period thereafter, in line with the following guidelines:

• Active accounts: All account data is retained for the duration your account remains open and active.
• Closed accounts: Following account closure, we retain core account and transaction records for a period necessary to satisfy financial record-keeping obligations, resolve outstanding disputes and respond to any regulatory enquiries.
• Identity documents: Retained for the period required to meet verification and compliance obligations. Documents are securely deleted once the retention period has passed.
• Support communications: Retained for a reasonable period following resolution of the relevant query to allow follow-up if needed.
• Anonymised analytics data: Aggregated, non-identifiable usage data may be retained indefinitely for platform improvement purposes.

When data is no longer required, it is securely deleted or permanently anonymised so that it can no longer be associated with you.

As a registered player, you have a number of rights in relation to the personal data 99ap holds about you. These rights are set out below.

To exercise any of these rights, contact our support team using the details in Section 13. We will verify your identity before acting on any request and respond as promptly as possible. There is no fee for submitting a data rights request.

Protecting your personal data is a core operational responsibility at 99ap. We implement a range of technical and organisational measures to safeguard the information we hold, including:

• TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage for sensitive account and identity data at rest.
• Role-based access controls that limit staff access to personal data to only those with a genuine operational need.
• Regular security reviews of systems, integrations and third-party service providers.
• Monitoring for unusual login activity or suspicious account behaviour, with automated alerts for investigation.
• Secure deletion protocols for data that has reached the end of its retention period.

While we take every reasonable precaution, no system is completely immune to risk. In the event of a data breach that is likely to affect your rights or interests, we will notify you as promptly as circumstances allow.

You also play an important role in keeping your account secure — using a strong, unique password and logging out of shared devices goes a long way. See the security section of our Terms and Conditions for more detail.

99ap is strictly an adult platform. Registration and use of any part of the platform is permitted only to individuals who are 18 years of age or older.

We do not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been registered by or on behalf of an underage individual, the account will be closed immediately, all data associated with that account will be handled in accordance with this policy and any deposits will be returned.

If you believe an underage person has accessed or registered on 99ap, please contact us immediately using the details in Section 13 so we can investigate and take appropriate action.

99ap may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law or improvements to our data handling practices. When updates are made, the revised policy will be published on this page with an updated "Last Updated" date.

We encourage you to review this page periodically. For changes that materially affect how your data is used, we will make reasonable efforts to notify registered players through in-platform messages or to the email address associated with your account.

Your continued use of the 99ap platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with changes to the policy, you should stop using the platform and may request account closure.

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how your personal information has been handled, please get in touch with our support team.

We aim to acknowledge all data-related enquiries promptly and to resolve them as quickly as circumstances allow. When contacting us about a data rights request, please include your registered username or account reference to help us locate your records efficiently.

You can also find answers to common account and privacy questions on our FAQ page.