Your Privacy Matters

99z777 (referred to in this Policy as "we", "us", "our" or "the Platform") is an English-language online casino and sports betting platform designed primarily to serve players across Pakistan, including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar, as well as players accessing the platform internationally.

We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection standards under our international licensing framework. This Privacy Policy ("Policy") explains what personal information we collect from you, why we collect it, how we use and protect it, with whom we may share it, and the rights you have regarding your data.

This Policy forms part of the overall agreement between you and 99z777 and must be read in conjunction with our Terms & Conditions. Where there is any conflict between this Policy and the Terms & Conditions regarding data processing matters, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, either on its own or in combination with other data. This includes name, email address, date of birth, national identity number, payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration or deletion.
• "Controller" means 99z777, as the entity that determines the purposes and means of Processing your Personal Data.
• "Data Subject" means the individual (you, the player) whose Personal Data is being processed.
• "Third Party" means any entity other than you or 99z777, including payment processors, KYC verification providers, game software suppliers and fraud prevention services.
• "Cookies" means small text files placed on your device by the 99z777 platform to facilitate session management, analytics and personalisation.
• "KYC" (Know Your Customer) means the identity and age verification process required under our licensing obligations.

99z777 collects several categories of personal data from you depending on the nature of your interaction with the platform. The categories and specific data points are set out in the table below:

References to payment method identifiers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are collected solely as transaction references associated with your account. Their mention here does not imply endorsement of gambling services by those institutions.

We collect your personal data through the following means:

• Directly from you: When you register an account, complete a KYC submission, make a deposit or withdrawal, contact our support team, respond to a survey, or update your account profile.
• Automatically: When you access the 99z777 platform, our servers automatically log technical data including your IP address, device identifiers and session activity. This collection occurs regardless of whether you are logged in.
• Via cookies and tracking technologies: Our platform uses first-party cookies and, in limited cases, third-party analytics tools to understand how players interact with the site. See Section 09 for full details.
• From third-party verification providers: During KYC verification, our identity verification partner may return enriched data (for example, document authenticity scores or politically exposed person (PEP) screening results) which is associated with your account record.
• From payment processors: When you transact, our payment processing partners provide us with transaction confirmation data, reference identifiers and fraud signals related to the payment.

99z777 processes your personal data on one or more of the following legal bases, consistent with the data protection requirements of our applicable licensing jurisdiction:

• Contractual necessity: Processing required to perform our agreement with you — for example, creating and managing your account, processing deposits and withdrawals, and recording gameplay activity.
• Legal obligation: Processing required to comply with our licensing conditions, including KYC and anti-money laundering (AML) obligations, record-keeping requirements and regulatory reporting.
• Legitimate interests: Processing that serves our genuine business interests where those interests are not overridden by your rights — including fraud detection, platform security, responsible gambling monitoring and service improvement analytics.
• Consent: Processing based on your freely given, specific and informed consent — primarily for marketing communications. You may withdraw consent at any time through your account settings without affecting any prior processing carried out on the basis of that consent.

We use your personal data for the following purposes:

• Account management: Creating, maintaining and securing your 99z777 account, including processing login sessions and enabling account recovery.
• Transaction processing: Facilitating deposits and withdrawals, reconciling account balances in PKR, and maintaining financial records as required by our licensing obligations.
• Identity and age verification: Confirming that you are aged 18 or above (or the higher minimum required by the operator/license jurisdiction) and that your identity matches the account registration data.
• Fraud prevention and AML compliance: Detecting and preventing fraudulent activity, money laundering, multiple account creation, bonus abuse and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gambling: Monitoring gameplay patterns to identify potential signs of problem gambling and enabling self-exclusion, deposit limits, loss limits and session time limit tools on your account.
• Customer support: Responding to account enquiries, resolving disputes and maintaining records of communications for quality assurance and compliance purposes.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform features, game selection (including cricket, PSL and ICC tournament betting markets), and the overall user experience for players across Pakistan.
• Marketing communications: Sending you promotional offers, bonus notifications and relevant content where you have provided consent to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: Fulfilling our obligations under the laws and regulations of our licensing jurisdiction, including responding to lawful requests from regulators or law enforcement authorities.

99z777 does not sell, rent or trade your personal data to third-party advertisers or data brokers. We may share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• KYC and identity verification providers: We share identity documents and personal details with our contracted verification partner to complete the mandatory KYC process. These providers are bound by confidentiality obligations and data processing agreements.
• Payment processors: We share transaction-relevant data with payment processing partners to facilitate your deposits and withdrawals. This may include your name, account reference and transaction amount. Payment providers are not granted access to your gameplay history or other account data.
• Game software suppliers: Certain third-party game providers receive session tokens and anonymised player identifiers to deliver their games via the 99z777 platform. These providers do not receive your full registration profile.
• Fraud prevention and AML services: We may share data with fraud detection and anti-money laundering screening services to fulfil our compliance obligations under our licensing framework.
• Regulatory and law enforcement authorities: We will disclose personal data to regulators, licensing bodies or law enforcement agencies where required to do so by applicable law, court order or regulatory direction.
• Corporate transactions: In the event of a merger, acquisition, restructuring or sale of assets involving 99z777, player data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations, whichever is longer. The general retention periods are as follows:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in line with standard AML record-keeping requirements under our licensing framework.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or from account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gameplay and session records: Retained for a minimum of three (3) years for dispute resolution and responsible gambling compliance purposes.
• Support communications: Retained for a minimum of two (2) years from the date of the last communication in a support thread.
• Marketing consent records: Retained for as long as the consent remains active plus two (2) years following withdrawal of consent, as evidence of the consent lifecycle.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification, unless an overriding legal obligation requires continued retention.

99z777 uses cookies and similar technologies (including local storage and session tokens) to operate the platform, remember your preferences and analyse how the platform is used. The types of cookies we use are described below:

• Strictly necessary cookies: Required for the platform to function. These enable session management, login authentication and security features. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display currency (PKR) and responsible gambling tool configurations, so you do not need to re-enter them on each visit.
• Analytics cookies: Collect aggregated data about how players navigate and use the platform, which pages are visited most frequently and where errors occur. This data is used to improve platform performance and is not linked to individual player identities in analytics reports.
• Marketing and personalisation cookies: Used where you have consented to receive personalised content and promotional communications. These cookies may track your browsing behaviour across sessions to tailor promotional offers relevant to your gameplay preferences.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the platform. For most browsers, cookie management settings are found under Settings > Privacy or Settings > Security.

Subject to the data protection laws applicable under our licensing jurisdiction and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in respect of your personal data held by 99z777:

• Right of access: You may request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format within a reasonable timeframe following identity verification.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Note that changes to identity-critical fields (name, date of birth) require documentary verification.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent was the legal basis). This right does not apply where retention is required by our licensing obligations or applicable law.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on contract or consent and carried out by automated means, you may request that we provide your data in a machine-readable format for transfer to another controller.
• Right to object: You may object to processing carried out on the basis of legitimate interests or for marketing purposes. Objections to marketing communications will be actioned immediately. Objections to other processing will be assessed against our legitimate interests and legal obligations.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, contact our support team via the details in Section 14. We will respond within 30 days of receipt of a verified request, or notify you if a longer period is required due to complexity.

99z777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS encryption in transit: All data transmitted between your device and our platform is encrypted using Transport Layer Security (TLS). HTTPS is enforced across every page and API endpoint.
• Encryption at rest: Personal data stored on our servers, including KYC documents and financial records, is encrypted at rest using current industry-standard algorithms.
• Password hashing: Account passwords are never stored in plain text. We use one-way cryptographic hashing with salting to store password credentials.
• Access controls: Access to player personal data within 99z777's internal systems is restricted to authorised personnel on a documented need-to-know basis. Access logs are maintained and reviewed.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of access security.
• Penetration testing and vulnerability management: Our platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: We maintain a data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected players and relevant authorities as required by our licensing obligations.

While we take significant steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password, enable 2FA, and never share your login credentials with anyone. 99z777 will never ask for your password.

99z777 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the operator/license jurisdiction. Age verification is a mandatory step in our KYC process.

If we discover or are notified that personal data has been submitted by or on behalf of an individual who does not meet the minimum age requirement, we will:

• Immediately suspend the associated account pending investigation.
• Delete or securely destroy the personal data collected from the underage individual, except where retention is required for regulatory reporting purposes.
• Void any associated wagers, bonuses and account balances in accordance with applicable licensing regulations.
• Report the matter to our licensing authority where required to do so.

If you are a parent or guardian and believe that a minor has created an account on 99z777 using your details or independently, please contact our support team immediately so that we can investigate and act without delay.

99z777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or our licensing framework. We will notify you of material changes — meaning changes that significantly affect how we handle your personal data — by:

• Displaying a prominent notice on the 99z777 platform homepage or login screen.
• Sending a notification to your registered email address no less than fourteen (14) days before the revised Policy takes effect.

Non-material changes — such as corrections to typographical errors, formatting adjustments, or clarifications that do not alter the substance of our data processing activities — will take effect upon publication without prior notice.

The date displayed at the top of this Policy reflects when it was last meaningfully updated. Your continued use of the platform after the effective date of an amended Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you must stop using the platform and may request account closure.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact our support team. We handle all privacy-related enquiries as priority communications.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via your account dashboard after login.
• Response Times: Privacy and data rights requests are typically acknowledged within 48 hours and resolved within 30 days. Complex requests may take longer; we will inform you if an extension is required.
• Languages: Support is available in English and Urdu.