Privacy Policy – 99ah Online Casino Pakistan Players

1 Introduction

This Privacy Policy describes how 99ah ("we", "us", "our") collects, processes, stores and protects the personal information of players and visitors who use the 99ah platform at 99ah.win, including the mobile app available for Android and iOS.

When you create an account on 99ah, you trust us with personal information — your name, contact details, payment method details and activity on the platform. We take that trust seriously. This policy is written to give you a clear, honest picture of what we do with that information, not to confuse you with legal language.

This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming page. By registering an account on 99ah, you confirm that you have read and understood this policy.

2 What We Collect

We collect two types of information: information you provide directly to us, and information collected automatically when you use the platform.

Information You Provide

When you register or use the 99ah platform, you provide:

• Identity information: Full name, date of birth, CNIC or other identification documents (required for verification)
• Contact information: Email address, Pakistan mobile number
• Payment information: JazzCash account number, Easypaisa mobile number, Raast ID, bank account number, card details — as applicable to your chosen deposit and withdrawal method
• Account preferences: Responsible gaming settings, notification preferences, language settings
• Support communications: Messages and records from your contact with our support team

Information Collected Automatically

When you access the 99ah website or app, we automatically collect:

• Device type, operating system and browser version
• IP address and approximate geographic location
• Pages and features accessed, session duration and navigation paths
• Games played, bets placed, deposit and withdrawal history
• App performance data and crash logs (anonymised)

3 How We Use Your Data

The data we collect is used for the following specific purposes. We do not use your data for anything outside this list without informing you.

• Running your account: Creating, maintaining and securing your 99ah account, including login authentication and account settings
• Processing transactions: Handling deposits and withdrawals in PKR through your chosen payment methods (JazzCash, Easypaisa, Raast, bank transfer, cards)
• Verification: Confirming your identity and age (18+) as required to operate a gaming account
• Security and fraud prevention: Detecting suspicious activity, protecting your account from unauthorised access and monitoring for abuse of the platform
• Customer support: Resolving queries, disputes and technical issues related to your account or gameplay
• Responsible gaming: Monitoring for signs of problematic gambling patterns and giving you access to the tools to manage your activity
• Platform improvement: Using anonymised usage data to understand how players use 99ah so we can improve features and fix problems
• Communications: Sending you transaction confirmations, security alerts and (if you've opted in) promotional offers

4 Payment Information

Because 99ah processes real-money transactions in PKR, payment data requires particular care. Here's how we handle it:

Deposits and withdrawals are processed through integration with JazzCash, Easypaisa, Raast, and banking partners. When you initiate a deposit or withdrawal, only the information necessary to complete that transaction is shared with the relevant payment provider. This means your JazzCash mobile number goes to JazzCash, your bank account number to the bank — and only the specific details needed.

99ah does not store your full payment credentials in our primary database. We retain a reference to your payment method (such as a partial account number or wallet ID) to match future withdrawals back to the correct method, but we do not hold full wallet PINs, complete card numbers or internet banking passwords at any point.

• Card payments are processed through PCI-DSS compliant payment processors
• We do not store CVV codes or full 16-digit card numbers
• Payment data in transit is protected by TLS encryption
• Third-party deposits are not permitted — your payment method must be registered in your own name

5 Sharing Your Data

We do not sell, rent or trade your personal information. We share data with third parties only in the following specific situations:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the transaction details required to process your deposits and withdrawals. Nothing more.
• Game providers: When you play a slot or live casino game, the game provider's software is involved in delivering the game. Providers may receive anonymised session data for game performance purposes. They do not receive your name, payment details or contact information.
• Fraud prevention and security services: We may use third-party security tools to detect fraud, verify identity documents or screen for suspicious activity. These services operate under confidentiality agreements.
• Legal obligations: If we are required by law or a legitimate legal process to disclose certain information, we will comply with that obligation. We will notify you where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction. We would notify affected players before any such transfer occurs.

6 How Long We Keep Your Data

We keep your personal data for as long as your 99ah account is active, and for a period after account closure as required to comply with our legal obligations and to handle any post-closure disputes.

• Active accounts: All data is retained for the life of the account
• After account closure: Core identity, transaction records and account history are retained for a minimum of five years. This is standard practice for financial services to allow dispute resolution and fraud investigation.
• Communications and support records: Retained for three years after the last interaction
• Device and session data: Typically retained for 12 months on a rolling basis

After the applicable retention period, data is securely deleted or irreversibly anonymised. If you want your data deleted sooner and your account has been closed, contact our support team and we will review what can be actioned within our legal obligations.

7 Cookies

The 99ah website and app use cookies and similar tracking technologies. Here's what we use them for:

• Essential cookies: These keep you logged in and maintain your session as you navigate the platform. Without them the site doesn't function. They cannot be disabled.
• Analytics cookies: We use anonymised analytics to understand which parts of 99ah are being used and how, so we can improve the experience. No personal identifiers are included in this data.
• Preference cookies: These remember your settings such as language preferences and responsible gaming configurations.
• Security cookies: Used to detect suspicious or fraudulent sessions and protect your account.

We do not use advertising cookies or allow third-party advertising networks to place cookies through the 99ah platform.

8 Security

Protecting your account and personal data from unauthorised access is a core responsibility. The measures we have in place include:

• TLS encryption for all data transmitted between your device and the 99ah platform
• Encrypted storage for sensitive account and identity data
• Two-factor authentication (2FA) available for account login
• Automated monitoring for unusual login locations, transaction patterns and account activity
• Regular internal security reviews
• Access controls that limit which staff can access player data, and for what purposes

No system is completely immune to security incidents. If a breach occurs that affects your personal data, we will notify you as quickly as possible and explain what happened and what steps you should take.

You also have a role in keeping your account secure: use a strong, unique password for 99ah, enable 2FA if available, and never share your login credentials with anyone. 99ah support staff will never ask for your password.

9 Your Rights Over Your Data

You have meaningful rights over the personal information we hold about you. These rights are listed below — click each one for details on how to exercise it.

To exercise any of these rights, contact our support team at [email protected]. We'll respond within 30 days. If we're unable to fulfil a request, we'll explain why.

10 Minors and Under-18 Access

99ah is an adult platform for players aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you register an account and we determine through verification that you are under 18, your account will be closed immediately and any funds forfeited in line with our Terms and Conditions.

If you are a parent or guardian and you believe a minor has created an account on 99ah using your payment details or personal information, contact our support team immediately. We will investigate and close the account as a priority.

11 Changes to This Policy

We may update this Privacy Policy from time to time — to reflect changes in how we operate, new features on the platform, or updated legal requirements. When we make changes, we'll update the "last updated" date at the top of this page.

For significant changes that materially affect how we handle your data, we'll send a notification to your registered email address before the changes come into effect. Continuing to use 99ah after updated terms are in place means you accept the new policy.

We encourage you to check back on this page occasionally, especially before making deposits or withdrawals after a period of inactivity on your account.

12 Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have concerns about how your information is being handled, you can contact us through:

• Live chat: Available inside the 99ah app and on the website — fastest response
• Email: [email protected] — we aim to respond within 24 hours

When contacting us about data rights, please include your registered email address or mobile number so we can identify your account. Data requests will be actioned within 30 days of receiving sufficient information to process them.