99sb Privacy Policy

99sb is the operator of the online sports betting and casino platform accessible at https://99sb.app and all associated subdomains and mobile interfaces (the "Platform"). For the purposes of this Privacy Policy, 99sb acts as the data controller in respect of all personal data collected from users who register accounts and use the Platform.

As data controller, 99sb is responsible for determining the purposes and means of processing your personal data. Any questions relating to this Privacy Policy, or to the exercise of your data rights, should be directed to the 99sb Data Protection contact at support@99sb.app.

99sb collects the following categories of personal data from its registered users and Platform visitors:

99sb collects personal data through the following means:

• Direct Collection: Data you actively provide during account registration, KYC document submission, deposit and withdrawal requests, and support communications.
• Automated Collection: Technical and usage data collected automatically when you visit or interact with the 99sb Platform, including via cookies, server logs, and session tracking technologies.
• Third-Party Sources: Identity and fraud verification data received from KYC verification providers, payment processors (such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank), and anti-money laundering screening services. Data from these sources is used solely to supplement 99sb's own verification processes.
• Device and Browser Data: Information automatically transmitted by your browser or mobile device when you access the Platform, including IP address, device identifiers, and browser configuration data.

99sb processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between 99sb and you as a registered user — including operating your account, processing PKR deposits and withdrawals, settling bets, and providing customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification mandates, and responses to lawful requests from public authorities.
• Legitimate Interests: Processing necessary for 99sb's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where 99sb relies on your consent as the legal basis for processing (for example, for direct marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

99sb uses the personal data it collects for the following specific purposes:

• Account Management: Creating, operating, and maintaining your 99sb account, including processing logins, managing your Balance, and applying account-level settings such as deposit limits and responsible gaming tools.
• Identity and Age Verification: Verifying that you are who you say you are, and that you meet the minimum age requirement of 21 years, in accordance with our KYC obligations.
• Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard, and processing withdrawal requests to your verified payment method.
• Fraud and AML Compliance: Detecting, investigating, and preventing fraudulent activity, money laundering, match fixing, and other prohibited conduct on the Platform.
• Customer Support: Responding to account enquiries, resolving disputes, and providing technical assistance through the 99sb support team.
• Platform Improvement: Analysing aggregated usage data to improve the performance, features, and user experience of the 99sb Platform.
• Responsible Gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, and to enforce self-exclusion, deposit limits, or cooling-off periods activated by you or mandated by our responsible gaming obligations.
• Marketing Communications: Sending you promotional offers, bonus announcements, and PSL cricket betting updates — only where you have given explicit consent or where we have a legitimate interest and you have not opted out.
• Legal and Regulatory Compliance: Maintaining records required by applicable laws, responding to regulatory enquiries, and fulfilling our obligations as a licensed gaming operator.

99sb does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment networks receive the financial data necessary to process your PKR transactions. These providers are contractually bound to use your data only for payment processing purposes.
• KYC and Identity Verification Providers: Specialist third-party services that assist 99sb in verifying your identity and age, and in screening against sanctions and politically exposed persons (PEP) lists.
• Game Content Providers: Licensed third-party casino game developers receive session and outcome data necessary to deliver their game content on the 99sb Platform. Game providers do not receive your full identity or financial data.
• Fraud Detection and Security Services: Third-party fraud prevention platforms that help 99sb identify suspicious betting patterns, account takeover attempts, and other security threats. Data shared with these providers is used exclusively for security purposes.
• Regulatory and Law Enforcement Authorities: 99sb may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where required to do so by law or in response to a valid legal order. 99sb will notify affected users of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of 99sb's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

The 99sb Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to enhance your experience, and to gather analytics data. The following categories of cookies are used:

• Essential Cookies: Required for core Platform functionality, including session management, authentication, and security. These cookies cannot be disabled without affecting the basic operation of your 99sb account.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and previously viewed markets, to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, features used, and session duration. This data helps 99sb improve the Platform. No personally identifiable information is included in analytics reports.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts by analysing session behaviour and device fingerprints.

You may manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the 99sb Platform. 99sb does not use third-party advertising or behavioural retargeting cookies.

99sb retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required by applicable anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations.
• Support and Complaints Correspondence: Retained for three (3) years from the date of closure of the relevant support case, to facilitate the resolution of any future disputes or regulatory enquiries.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years after withdrawal, as evidence of valid consent at the time marketing was sent.
• Technical and Usage Logs: Retained for up to twelve (12) months from the date of collection, unless retained for longer in connection with an active fraud investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 99sb's data destruction procedures.

99sb implements robust technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 99sb Platform;
• AES-256 encryption for sensitive personal data stored at rest on 99sb servers;
• Passwords stored exclusively as salted cryptographic hashes — plain-text passwords are never stored;
• Two-factor authentication (2FA) available for all 99sb accounts, with OTP verification via registered Pakistani mobile number;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified security professionals;
• Automated anomaly detection systems monitoring for unusual login patterns, access attempts, and data export activities.

In the event of a personal data breach that poses a risk to your rights and freedoms, 99sb will notify affected users without undue delay and in accordance with applicable regulatory notification requirements.

As a 99sb user, you hold the following rights in respect of your personal data. To exercise any of these rights, contact 99sb at support@99sb.app with your registered account username and a description of your request. 99sb will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data 99sb holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data 99sb holds about you. Where data accuracy affects your account or transaction history, corrections will be made promptly.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Note that this right is subject to 99sb's legal obligation to retain certain data for regulatory compliance purposes.
• Right to Restrict Processing: You have the right to request that 99sb restricts the processing of your personal data in certain circumstances, such as where you contest its accuracy or have objected to its processing.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, subject to 99sb demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

99sb may send you promotional communications about bonuses, PSL cricket betting offers, new casino games, and other platform features. The following terms govern all 99sb marketing activity:

• Marketing communications are sent only where you have provided explicit consent during registration, or where 99sb has a legitimate interest and you have not opted out.
• You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting 99sb support at support@99sb.app.
• Opt-out requests for email marketing are processed within 5 business days. You may continue to receive transactional communications (such as account statements, withdrawal confirmations, and security alerts) after opting out of marketing.
• 99sb does not send marketing communications via SMS without explicit consent. Where SMS marketing consent has been given, it may be withdrawn at any time by replying STOP to any 99sb marketing SMS.
• 99sb does not share your contact details with third-party marketers or advertisers for their own promotional use under any circumstances.

99sb processes certain account and behavioural data specifically in order to fulfil its responsible gaming obligations. This processing is carried out in the legitimate interests of player protection and in compliance with our gaming licence conditions. It includes:

• Automated monitoring of betting patterns, session lengths, deposit frequency, and loss levels to identify indicators of potential problem gambling behaviour;
• Applying deposit limits, session alerts, and cooling-off periods as set by you through your Account settings;
• Enforcing self-exclusion periods and ensuring that self-excluded accounts cannot be reactivated before the elected exclusion period expires;
• Retaining records of all responsible gaming tool activations and communications as required by our gaming licence obligations;
• Where required, sharing information with responsible gaming registries or regulatory bodies to enforce cross-platform self-exclusion.

Your responsible gaming data is treated with the highest level of confidentiality within 99sb. It is never used for marketing profiling or shared with third parties for commercial purposes. For more information, please visit our Responsible Gaming page.

The 99sb Platform is strictly intended for adults aged 21 and above. 99sb does not knowingly collect, process, or store personal data from any individual under the age of 21. If we become aware that personal data has been collected from a user who is under 21 years of age, we will immediately suspend the relevant account, delete or securely destroy the collected data, and take appropriate action in accordance with our age verification procedures.

Parents and guardians who believe that a minor under their care has registered a 99sb account or submitted personal data to the Platform are requested to contact 99sb support immediately at support@99sb.app so that the matter can be addressed promptly.

99sb reserves the right to update or amend this Privacy Policy at any time. All changes will be published on this page with a revised "Last Updated" date at the top of the document. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — 99sb will notify registered account holders via their registered email address at least 14 days before the changes take effect.

Your continued use of the 99sb Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you must cease using the Platform and contact support to request account closure and deletion of your personal data, subject to our regulatory retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 99sb, please contact us using the details below. All data-related enquiries are handled by the 99sb Data Protection team.

• Email: support@99sb.app
• Subject Line: Please include "Privacy Request" or "Data Rights Request" in the subject line of your email for fastest routing.
• Response Time: Acknowledgement within 48 hours; full response within 30 calendar days.
• Language: All formal data rights correspondence should be submitted in English.

For urgent matters such as suspected unauthorised access to your account, data breach notifications, or immediate self-exclusion requests, please contact the 99sb support team — these matters are given priority handling around the clock, 7 days a week.