ab9999 Privacy Policy — How We Collect, Use & Protect Your Data

ab9999 ("ab9999", "we", "us", or "our") operates the online gaming and sports-betting platform accessible at https://ab9999.site and all associated sub-domains and mobile interfaces (collectively, the "Platform"). We understand that the privacy of your personal data is important to you, and we take our obligations as a data controller seriously.

This Privacy Policy ("Policy") describes what personal information ab9999 collects from registered players and visitors in Pakistan and internationally, why we collect it, how it is used and stored, with whom it may be shared, and what rights you have over your own data. This Policy should be read together with the ab9999 Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of applicable data protection law, the data controller responsible for processing your personal information in connection with the ab9999 Platform is:

All data protection queries, subject access requests, and privacy complaints should be directed to ab9999 using the contact details above. We commit to responding to all formal privacy enquiries within a reasonable timeframe, typically within 30 calendar days of receipt.

ab9999 collects personal data that falls into the following categories. The specific data collected at any given time depends on the nature of your interaction with the Platform:

ab9999 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data beyond what may be incidentally disclosed in responsible gaming interactions. Where sensitive data is disclosed in that context, it is processed solely for the purpose of providing appropriate support.

ab9999 collects personal data through the following mechanisms:

• Direct Submission: When you register an ab9999 account, complete KYC verification, make a deposit or withdrawal, contact support, or interact with any input field or form on the Platform, you directly provide us with personal data.
• Automated Technical Collection: When you access the ab9999 Platform, our servers automatically record technical data including your IP address, browser type, device identifiers, and session timestamps. This data is collected via server logs and platform analytics tools.
• Cookies and Similar Technologies: ab9999 uses cookies, web beacons, and local storage technologies on the Platform to maintain your login session, remember preferences, and collect aggregated usage data. See Section 6 for full details.
• Payment Processors: When you use JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank to fund your ab9999 PKR wallet, the relevant payment provider may share limited transaction confirmation data with ab9999 for the purpose of crediting your account.
• Third-Party Verification Services: For KYC compliance, ab9999 may use third-party identity verification services that cross-reference identity documents with authoritative databases. These services return a verification outcome to ab9999 but do not store your documents on our behalf.
• Responsible Gaming Interactions: If you contact ab9999 regarding problem gambling, request a deposit limit, or apply for self-exclusion, additional personal data may be collected in the course of providing you with appropriate support and applying the requested restrictions to your account.

ab9999 processes your personal data only where there is a lawful basis to do so. The table below maps each principal processing purpose to its corresponding legal basis:

Where ab9999 relies on consent as the legal basis for a specific processing activity, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent can be submitted via the ab9999 support team.

ab9999 uses cookies and similar browser-based technologies on the Platform. Cookies are small text files placed on your device by a web server. They enable the Platform to recognise your browser, maintain your login session, and remember certain preferences between visits. The categories of cookies used on ab9999 are as follows:

• Strictly Necessary Cookies: These cookies are required for the ab9999 Platform to function and cannot be disabled. They include session authentication tokens that keep you logged in during an active session and security cookies that support fraud prevention. No consent is required for these cookies.
• Functional Cookies: These cookies remember your preferences on the ab9999 Platform — such as your preferred game lobby view or currency display — to improve your experience across visits. They may be disabled without preventing access to the Platform, though some features may be affected.
• Analytics Cookies: ab9999 uses aggregated analytics cookies to understand how players navigate and use the Platform, which games and sections are most popular, and where technical issues are occurring. Data collected by analytics cookies is anonymised or pseudonymised and is used solely to improve the Platform.
• Marketing and Preference Cookies: Where you have opted in to personalised marketing communications from ab9999, preference cookies may be used to serve relevant bonus offers and game recommendations based on your gaming history on the Platform.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse some or all cookies, or to receive an alert before a cookie is stored. Note that disabling certain cookies may affect the functionality of the ab9999 login session and Platform features.

ab9999 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with the following categories of recipient only where strictly necessary and only to the extent required for the identified purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum financial data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and data processing agreements.
• Identity Verification Providers: Third-party KYC service providers receive identity documentation submitted by players for the sole purpose of completing mandatory age and identity verification. These providers are contractually prohibited from using player data for any other purpose.
• Game Software Providers: Game providers whose titles appear on the ab9999 Platform (such as Pragmatic Play) may receive anonymised player session data necessary for game operation, jackpot tracking, and RTP certification purposes. Personally identifiable information is not transmitted to game providers.
• IT Infrastructure and Security Providers: ab9999 engages third-party cloud infrastructure, cybersecurity, and fraud prevention providers. These providers process data only on ab9999's instructions and under data processing agreements that prohibit independent use.
• Legal and Regulatory Authorities: ab9999 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or in connection with an investigation into fraud, money laundering, or other financial crime. Such disclosure will be limited to the minimum data required to satisfy the legal obligation.

As an internationally operated platform, ab9999 may transfer your personal data to, or process it in, countries outside Pakistan. Where such transfers occur, ab9999 takes appropriate safeguards to ensure that your data receives an equivalent level of protection to that applied within Pakistan, including:

• Transferring data only to countries that provide an adequate level of data protection as recognised by applicable regulatory standards.
• Using contractual clauses in agreements with overseas data processors that require them to apply appropriate data protection standards equivalent to those required by ab9999.
• Limiting the scope of any international data transfer to the minimum data necessary for the identified processing purpose.

If you have questions about the safeguards applied to any specific international data transfer, please contact ab9999 at [email protected].

ab9999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Active Account Data: Identity, contact, and account data is retained for the full duration of your active ab9999 account and for a minimum period following account closure as required by AML/CTF regulations.
• Financial Transaction Records: PKR transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years following the date of the transaction, in compliance with international anti-money laundering record-keeping requirements.
• KYC Verification Documents: Identity documents submitted for KYC purposes are retained for the period required by the applicable AML/CTF regulatory framework, typically five (5) years from the date of verification or account closure, whichever is later.
• Gaming Activity Logs: Bet history, session logs, and gaming activity data are retained for the duration of your account and for five (5) years following account closure for audit, dispute resolution, and regulatory compliance purposes.
• Responsible Gaming Records: Self-exclusion records and responsible gaming intervention data may be retained indefinitely to prevent re-registration by self-excluded players and to comply with responsible gaming obligations.
• Support Communications: Live chat transcripts and support emails are retained for three (3) years from the date of the communication for quality assurance and dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

ab9999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ab9999 Platform is encrypted using 256-bit SSL/TLS protocols. This ensures that your login credentials, financial data, and personal information cannot be intercepted during transmission.
• Password Hashing: ab9999 account passwords are stored using a one-way cryptographic hashing algorithm. ab9999 does not store your password in plain text and cannot retrieve it. If you forget your password, a reset — not a retrieval — process is initiated.
• Access Controls: Access to player personal data within ab9999's internal systems is restricted to authorised personnel who require access to perform their specific job functions. All internal access is logged and auditable.
• Session Security: ab9999 login sessions are protected by secure, time-limited session tokens. Sessions expire automatically after periods of inactivity to reduce the risk of unauthorised access on shared or unattended devices.
• Fraud Monitoring: ab9999 employs automated fraud detection systems that continuously monitor account activity for patterns indicative of unauthorised access, account takeover attempts, or financial crime.

As a data subject, you have a number of rights in relation to the personal data ab9999 holds about you. These rights are set out below along with how to exercise them:

To exercise any of the above rights, please contact ab9999 at [email protected] or via the Platform's 24/7 live chat. We may need to verify your identity before processing a rights request to ensure we do not disclose or alter data belonging to another person.

The ab9999 Platform is strictly for adults aged 21 years and above. ab9999 does not knowingly collect personal data from any person under the age of 21. Age verification is mandatory before any ab9999 account is activated and before any deposit, game, or betting activity is permitted.

ab9999 recommends that parents and guardians use parental control software on devices that minors may access, to prevent access to online gaming platforms including ab9999. For responsible gaming resources, including self-exclusion tools, please visit the Responsible Gaming page.

ab9999 may, where you have provided consent or where we have a legitimate interest as an existing player, send you promotional communications relating to bonuses, new games, PSL cricket betting markets, and other ab9999 Platform features. These communications may be delivered via email, SMS, or in-Platform notification.

• Opt-In: Where consent is required for marketing communications (e.g., for new registrants), ab9999 will present a clear opt-in mechanism during or after the registration process. Opt-in is voluntary and does not affect your ability to use the Platform.
• Opt-Out: You may withdraw consent for marketing communications at any time by contacting ab9999 support via live chat or email. Unsubscribe links are included in all marketing emails sent by ab9999. Opt-outs are processed within 5 business days.
• Transactional Communications: Certain communications — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts — are transactional and are sent regardless of your marketing preferences. These cannot be opted out of as they relate directly to your account and contractual relationship with ab9999.

The ab9999 Platform may contain references to third-party services, including payment providers and game software partners. This Privacy Policy applies only to data processed by ab9999 on the ab9999 Platform. ab9999 is not responsible for the privacy practices of any third-party service provider, payment processor, or software partner. Each third party operates under its own privacy policy, and we encourage you to review those policies before engaging with any third-party service in connection with your use of ab9999.

ab9999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Where material changes are made — that is, changes which significantly affect how we process your personal data or the rights available to you — ab9999 will provide advance notice via email to your registered address or via a prominent on-Platform notification, prior to the changes taking effect.

The "Effective Date" and "Last Updated" date at the top of this Policy will be revised to reflect the date of any material amendment. Your continued use of the ab9999 Platform following the effective date of any revision constitutes acceptance of the updated Policy. We encourage you to review this Privacy Policy periodically to stay informed about how ab9999 protects your data.

If you have questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a complaint about how ab9999 has handled your personal data, please contact our support team through any of the following channels:

ab9999 will acknowledge all formal privacy complaints within 5 business days and aims to resolve them within 30 calendar days. If you are not satisfied with ab9999's response to your complaint, you may refer the matter to the relevant data protection supervisory authority in your jurisdiction.