At 99as, your privacy is not an afterthought — it is built into how we operate. This Privacy Policy explains in clear terms exactly what personal data 99as collects from Pakistani players, why we collect it, how we use and protect it, and what rights you hold over your own information. By registering and using a 99as account, you acknowledge that you have read and understood this Policy.
Six core privacy principles that govern how 99as handles every piece of data you share with us
99as only collects personal data that is strictly necessary to operate your account, process transactions, verify your identity, and comply with our legal obligations under AML and KYC regulations. We do not collect data for the sake of it.
99as does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to deliver the 99as service, protect account security, and comply with applicable law.
All data transmitted between your device and the 99as Platform is encrypted using TLS 1.2 or higher. Sensitive data including passwords and CNIC information is stored using industry-standard cryptographic hashing — never in plain text.
You have the right to request access to, correction of, or deletion of the personal data 99as holds about you. You may also request a portable copy of your data. All such requests are handled by our support team within 30 days of receipt.
Where 99as engages trusted third-party service providers — such as payment processors and fraud detection partners — those providers are contractually bound to process your data only for the specific purpose authorised and to maintain equivalent security standards.
In the unlikely event of a data security incident affecting your personal information, 99as will notify affected players via registered email within 72 hours of becoming aware of the breach, in accordance with internationally recognised data protection standards.
This Privacy Policy is issued by 99as, the operator of the online gaming platform accessible at https://99as.org (the "Platform"). Throughout this Policy, references to "99as", "we", "us", or "our" refer to the 99as operating entity. References to "you" or "your" refer to any individual who visits, registers on, or uses the Platform.
99as is committed to protecting the personal data of all its users, particularly players based in Pakistan. This Policy describes our practices in relation to the collection, use, storage, disclosure, and protection of personal data in a manner consistent with internationally recognised data protection standards, including principles drawn from the EU General Data Protection Regulation (GDPR) and Pakistan's Prevention of Electronic Crimes Act (PECA) framework.
Scope of This Policy: This Privacy Policy applies to all personal data collected through the 99as website, mobile-optimised web interface, customer support channels, and any other touchpoints through which you interact with 99as. It does not apply to third-party websites or services that may be linked from the Platform.
99as collects personal data through several channels. The categories of data we collect, and the context in which each category is collected, are set out below.
When you create a 99as account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, Pakistani CNIC number, residential address (city, province), email address, and mobile phone number. This data is mandatory — without it, we cannot create or maintain a registered account for you.
Before processing withdrawals, 99as conducts Know Your Customer (KYC) verification. KYC data collected includes a scan or photograph of both sides of your Pakistani CNIC, a live selfie or photo for facial comparison, and — where applicable — documentation evidencing the source of funds deposited into your account. This data is required by our AML compliance obligations and is handled with the highest level of security and confidentiality.
When you make a deposit or withdrawal, 99as records transaction details including the amount, currency (PKR), date and time, payment method used (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or bank transfer), and the transaction reference number assigned by your payment provider. We do not store full bank account numbers or JazzCash/EasyPaisa PINs on our servers.
99as records your gaming and betting activity on the Platform, including games played, bet amounts, game outcomes, session durations, and the dates and times of all activity. This data is used to settle bets accurately, detect unusual patterns indicative of fraud or problem gambling, and generate personalised responsible gaming alerts where appropriate.
When you access the 99as Platform, our systems automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This data helps us detect unauthorised access, prevent fraud, and optimise the Platform's performance across different devices commonly used in Pakistan.
When you contact 99as customer support via email or live chat, we retain records of those communications — including the content of messages, timestamps, and any attachments you submit — for quality assurance, training, and dispute resolution purposes.
Data Minimisation: 99as applies a data minimisation principle throughout its operations. We do not request or retain personal data beyond what is necessary for the specific, legitimate purpose for which it was collected.
| Data Category | Examples | Collection Trigger |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number | Account registration & KYC |
| Contact Data | Email address, mobile number, city | Account registration |
| Financial Data | Transaction amounts, payment method, reference IDs | Deposit / withdrawal |
| Gaming Data | Bets placed, games played, session duration | Platform usage |
| Technical Data | IP address, device type, browser, OS | Automatic — on access |
| Communications Data | Support chat transcripts, email correspondence | Customer support interactions |
| KYC / Verification Data | CNIC scans, selfie photos, source of funds docs | Pre-withdrawal verification |
99as uses the personal data we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary uses are as follows:
99as processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are:
Processing your registration data, KYC data, and transaction data is necessary to perform our contract with you — namely, operating your 99as account and delivering the gaming services you have signed up for. Without this processing, we could not provide the Platform to you.
Processing for KYC identity verification, AML transaction monitoring, and responding to lawful requests from law enforcement is required by applicable legal and regulatory obligations. This processing is mandatory and cannot be waived by individual players.
Certain processing activities — such as fraud detection, responsible gaming monitoring, security log maintenance, and Platform analytics — are carried out on the basis of 99as's legitimate interests in operating a safe, fair, and legally compliant gaming environment. We conduct a legitimate interests assessment before relying on this basis to ensure your rights are not overridden.
Where 99as processes your data for optional marketing communications, we do so on the basis of your consent, which you provide at registration or subsequently through your account communications preferences. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
99as does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited and controlled circumstances:
To process deposits and withdrawals in PKR, 99as shares necessary transaction data with your chosen payment service provider — such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK. These providers act as independent data controllers subject to their own privacy policies and regulatory obligations.
99as may engage regulated third-party KYC service providers to assist with identity document verification and facial comparison. These partners are contractually bound to process your data only for the purpose of KYC verification and to delete it upon completion of the verification process or upon our instruction.
Technical and gaming activity data may be shared with specialist fraud detection and cybersecurity service providers for the purpose of protecting the integrity of the 99as Platform and its player community. All such providers operate under strict data processing agreements.
99as will disclose personal data to law enforcement, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 99as, its players, or the public.
No Commercial Data Sharing: 99as does not share your personal data with advertisers, marketing agencies, data analytics companies, or any other commercial third parties for their own marketing or profiling purposes. Your data is never monetised.
Cookies are small text files placed on your device when you visit a website. 99as uses cookies and similar tracking technologies (such as session tokens and local storage) to operate the Platform, remember your preferences, maintain your logged-in session, and collect anonymised analytics data.
You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the 99as Platform. Disabling other cookies may reduce the quality of your experience but will not prevent basic access to the Platform.
99as retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML / regulatory compliance |
| KYC Documents | Duration of account + 5 years after closure | Legal obligation |
| Transaction Records | 7 years from transaction date | Financial regulatory requirements |
| Gaming Activity Logs | 3 years from date of activity | Dispute resolution & responsible gaming |
| Customer Support Records | 3 years from last interaction | Quality assurance & dispute resolution |
| Technical / Security Logs | 12 months from creation | Security monitoring |
| Marketing Consent Records | Until consent withdrawn + 1 year | Proof of consent |
Upon expiry of the applicable retention period, 99as will securely delete or anonymise your personal data so that it can no longer be associated with you.
99as implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key technical and organisational security measures include:
Security Incident Response: 99as maintains a formal data breach response plan. In the event of a confirmed breach affecting your personal data, we will notify you via your registered email address within 72 hours, describe what happened, what data was involved, and what steps we have taken to contain and remediate the incident.
You have a number of rights over the personal data 99as holds about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within 30 days.
You have the right to request a copy of all personal data 99as holds about you, together with information about why we hold it, how long we will retain it, and with whom it has been shared.
If any personal data 99as holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic contact information directly through your account settings. For corrections to identity or KYC data, please contact support.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that 99as may be legally required to retain certain data — such as AML and transaction records — even after you close your account, in which case your erasure request will be fulfilled to the maximum extent permitted by law.
Where processing is based on your consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
You may request that 99as temporarily suspend processing of your personal data — for example, while you contest the accuracy of data we hold about you, or while a legitimate interests assessment is pending.
You have the right to object to processing carried out on the basis of 99as's legitimate interests, including profiling for responsible gaming purposes. You also have an absolute right to object to processing for direct marketing purposes at any time, with no need to provide justification.
The 99as Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect, store, or process personal data relating to persons under the age of 21. If you believe that a minor has registered an account on 99as or submitted personal data to us, please notify us immediately at [email protected]. Upon verification, we will promptly suspend the account, delete the associated personal data, and cancel any pending transactions.
21+ Only: 99as uses age verification at registration and KYC verification prior to withdrawal to enforce this restriction. Parents and guardians in Pakistan are encouraged to use parental control software to prevent minors from accessing online gaming platforms.
With your consent, 99as may send you promotional communications via email and SMS about new games, deposit bonuses, PSL cricket betting promotions, jackpot events, and other offers relevant to Pakistani players. You provide this consent at registration by opting in to marketing communications. You may change your preferences at any time through your account settings.
You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any 99as marketing email, by updating your communication preferences in your account settings, or by contacting our support team directly. Opting out of marketing does not affect transactional communications — we will continue to send you account notifications, deposit confirmations, withdrawal updates, and security alerts regardless of your marketing preferences, as these are necessary for the operation of your account.
99as does not share your contact information with third-party companies for their own marketing purposes. All promotional communications you receive from 99as are sent directly by 99as or by an authorised communications service provider acting strictly on our behalf.
99as reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will notify registered players via the email address associated with their 99as account at least seven (7) days before the updated Policy takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the 99as Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 99as holds about you, please contact our Data Privacy team using the details below. Please note that the contact address is displayed as plain text — it is not a clickable link.
For urgent security concerns — such as suspected unauthorised access to your account — please contact support immediately and change your password without delay.
Now that you know exactly how 99as handles your personal data, you can focus on what matters — enjoying PSL cricket betting, live casino, jackpot slots, Super Wheel, and Limbo in PKR with complete peace of mind.
21+ only. Please play responsibly. For entertainment purposes only.