Privacy Policy — 999ab Casino

1. Introduction & Scope

1.1 This Privacy Policy ("Policy") describes how 999ab Casino ("999ab", "we", "us", "our"), operating the website at 999ab.vip, collects, processes, stores, and protects the personal data of individuals who access or use our platform ("you", "your", "User").

1.2 This Policy applies to all personal data collected through the 999ab website at 999ab.vip, including account registration, deposits and withdrawals, gameplay activity, customer support interactions, and any other use of the Platform.

1.3 999ab is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only what we need, use it only for the purposes described in this Policy, and protect it with appropriate technical and organisational measures.

1.4 This Policy should be read alongside the 999ab Terms & Conditions and the Responsible Gaming Policy.

2. Data We Collect

2.1 999ab collects personal data through various interactions with the Platform. The categories of data we collect are set out below:

Registration & Identity Data

• Full legal name
• Date of birth
• Pakistani mobile number
• Email address (where provided)
• CNIC number and copies of identity documents (for KYC verification)
• Residential address

Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (JazzCash account reference, Easypaisa number, bank account details)
• Account balance history
• Bonus and promotional activity

Gameplay & Betting Data

• Game session records, bet history, and wager amounts
• Sports betting selections and accumulator history
• Win/loss records and responsible gaming self-assessment responses

Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Login timestamps and session duration
• Pages visited and features interacted with on the Platform

Communications Data

• Content of live chat and email support interactions
• Complaint and dispute records
• Marketing preference settings

2.2 You are not required to provide all categories of data, but failure to provide data marked as mandatory during registration (name, date of birth, mobile number) will prevent account creation. Failure to complete KYC verification may result in restricted account functionality.

3. How We Use Your Data

3.1 999ab uses personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration & identity data
Processing deposits and withdrawals	Financial & transaction data
KYC identity verification and fraud prevention	Identity documents, financial data, IP data
Providing casino games and sports betting services	Gameplay & betting data
Customer support and complaint resolution	Communications data, account data
Responsible gaming monitoring and intervention	Gameplay data, betting history, account data
Platform security and fraud detection	Technical & usage data, financial data
Marketing communications (where consented)	Contact details, marketing preferences
Legal compliance and regulatory reporting	All categories as required

3.2 999ab does not use automated decision-making processes that produce legal or similarly significant effects on you without human oversight, except where required by applicable anti-fraud or regulatory systems.

4. Legal Basis for Processing

4.1 999ab processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have requested — account management, payment processing, and gameplay.
• Legal obligation: Processing required to comply with applicable laws — including KYC/AML requirements, responsible gaming obligations, and financial record-keeping.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improving the 999ab service, where these interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time via your account marketing preferences.

5. Data Sharing & Disclosure

5.1 999ab does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. This is an absolute commitment, not a conditional one.

5.2 999ab may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah — solely for the purpose of processing your deposits and withdrawals.
• Game providers: Certified third-party casino game developers — minimal technical data shared to facilitate game sessions and RNG auditing.
• Identity verification services: KYC and AML compliance providers engaged to verify account holder identity and prevent financial crime.
• Legal and regulatory authorities: Where 999ab is required to disclose data by law, court order, or regulatory mandate.
• Fraud prevention agencies: Where disclosure is necessary to prevent, detect, or investigate fraud or financial crime.

5.3 Any third party receiving personal data from 999ab is required to process that data in accordance with applicable data protection standards and solely for the purpose for which it was shared.

6. Cookies & Tracking Technologies

6.1 999ab uses cookies and similar tracking technologies to operate the Platform, maintain your logged-in session, and improve your user experience. Cookies are small text files stored on your device.

6.2 The categories of cookies used by 999ab include:

• Strictly necessary cookies: Required for the Platform to function — session management, authentication, and security. These cannot be disabled without impacting Platform functionality.
• Functional cookies: Store your preferences (language, display settings) to personalise your experience.
• Analytics cookies: Used to understand how players use the Platform, allowing us to improve performance and navigation. Data is aggregated and anonymised where possible.

6.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect Platform functionality, including your ability to remain logged in.

7. Data Security

7.1 999ab implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 999ab Platform
• Hashed and salted password storage — your password is never stored in readable form
• Device recognition and SMS verification for logins from unfamiliar devices
• Access controls restricting internal staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing

7.2 While 999ab takes data security seriously, no system is entirely immune to breach. In the event of a data security incident affecting your personal data, 999ab will notify affected users in accordance with applicable legal requirements.

7.3 You are responsible for maintaining the security of your own 999ab login credentials. 999ab will never ask you to provide your password via chat, email, or any other channel.

8. Data Retention

8.1 999ab retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

8.2 Account data is retained for the duration of your account's active status and for a minimum period following account closure, as required by financial and anti-money laundering regulations.

8.3 Transaction records and KYC documentation are retained for the minimum period prescribed by applicable financial regulations, which may extend beyond account closure.

8.4 Following the expiry of applicable retention periods, personal data is securely deleted or anonymised.

9. Your Data Rights

9.1 Subject to applicable law, you have the following rights in relation to the personal data 999ab holds about you:

• Right of access: Request a copy of the personal data 999ab holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations that may override this right in certain circumstances.
• Right to restrict processing: Request that 999ab restricts processing of your data in certain circumstances.
• Right to data portability: Request a structured, machine-readable copy of personal data you have provided to 999ab.
• Right to object: Object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of these rights, contact the 999ab support team via the 24/7 live chat on the Platform. 999ab will respond to valid requests within a reasonable period and in accordance with applicable legal requirements.

10. Children's Privacy

10.1 The 999ab Platform is strictly intended for individuals aged 18 years and above. 999ab does not knowingly collect personal data from anyone under the age of 18.

10.2 If 999ab becomes aware that personal data has been collected from a person under 18, that account will be closed immediately and all associated data deleted, subject to any legal retention obligations. Any funds in the account will be handled in accordance with applicable regulatory requirements.

10.3 If you have reason to believe that a minor has registered an account on 999ab, please contact our support team immediately via the live chat function on the Platform.

11. Changes to This Privacy Policy

11.1 999ab reserves the right to update or amend this Privacy Policy at any time. Where changes are material — affecting how we collect, use, or share your personal data in a significantly different way — we will notify you via your registered contact information or via a prominent notice on the Platform prior to the changes taking effect.

11.2 The date at the top of this Policy indicates when it was most recently updated. Continued use of the 999ab Platform following notification of changes constitutes acceptance of the updated Policy.

12. Contact Us

12.1 If you have any questions, concerns, or requests regarding this Privacy Policy or 999ab's data processing practices, please contact our support team via the 24/7 live chat available on the Platform.

12.2 Support email (plain text — not a clickable link): [email protected]

12.3 999ab will acknowledge privacy-related enquiries promptly and provide a substantive response within a reasonable period, consistent with the nature and complexity of the request.