Privacy Policy – ab999

1. Scope & Data Controller

1.1  This Policy applies to all personal data processed by ab999 in connection with the operation of ab999.im, including data collected during registration, during gameplay, through the cashier, and through any communications you have with our support team.

1.2  ab999 acts as the data controller in respect of personal data collected directly from players through the Platform. Where we engage third-party service providers who process data on our behalf, those parties act as data processors under our instruction.

2. Data We Collect

We collect personal data in the following categories:

• Identity Data: Full legal name, date of birth, gender, and copies of identity documents where verification is required.
• Contact Data: Pakistani mobile number (required for registration and OTP verification), email address where provided.
• Financial Data: Payment method details sufficient to process deposits and withdrawals — such as JazzCash mobile account number, Easypaisa account number, or bank account details for HBL, UBL, Meezan Bank, or Bank Alfalah. We do not store full payment credentials in plain text.
• Usage Data: Login timestamps, IP addresses, device identifiers, browser type, operating system, pages visited, games played, bet history, and session duration.
• Transaction Data: Deposit amounts, withdrawal requests, bet amounts, winnings, and bonus transactions, all denominated in PKR.
• Communications Data: Records of live chat conversations, support tickets, and any other correspondence with the ab999 support team.
• Responsible Gaming Data: Any deposit limits, self-exclusion requests, or cool-off periods set by or for a Player, which are retained as safeguarding records.

3. How We Use Your Data

ab999 processes personal data for the following purposes:

• To create, maintain, and administer your ab999 Account and verify your identity and age (18+ requirement).
• To process deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other supported Pakistani payment methods.
• To operate, personalise, and improve the Platform's gaming and betting services.
• To detect and prevent fraud, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• To comply with legal and regulatory obligations applicable to online gaming operations.
• To provide customer support and resolve disputes.
• To enforce our Terms & Conditions and other Platform policies.
• To operate responsible gaming safeguards, including monitoring for signs of problem gambling behaviour and administering self-exclusion requests.
• To send transactional communications (deposit confirmations, withdrawal notifications, security alerts) to your registered mobile number.

4. Legal Basis for Processing

4.1  Contractual necessity: Processing of identity, contact, financial, and transaction data is necessary to fulfil our contractual obligations to you under the Terms & Conditions — including operating your Account, processing payments in PKR, and settling bets.

4.2  Legitimate interests: We process usage data and communications data to operate and improve the Platform, detect fraud, and maintain Platform security.

4.3  Legal obligation: We may process and retain certain data to comply with anti-money laundering obligations, age verification requirements, and other applicable legal obligations.

4.4  Consent: Where we rely on consent for any specific processing activity, we will make this clear at the point of collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

5.1  ab999 does not sell your personal data to third parties. We do not share your data with marketing companies or data brokers.

5.2  We share personal data only with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: JazzCash, Easypaisa, and banking partners in Pakistan require transaction data to process deposits and withdrawals.
• Game providers: Certified game suppliers may receive a session token and anonymised player identifier to launch games. They do not receive your full name, mobile number, or PKR balance.
• Identity verification providers: Where regulatory or risk-based verification is required, we may engage third-party KYC service providers.
• IT and infrastructure providers: Cloud hosting, security, and analytics providers who process data under our instruction and under appropriate data protection agreements.
• Legal and regulatory authorities: Where we are required by law, court order, or regulatory direction to disclose data.

5.3  Any third party that processes personal data on behalf of ab999 is bound by contractual data protection obligations consistent with this Policy.

6. Payment Data & Pakistani Payment Methods

6.1  When you make a deposit or request a withdrawal using JazzCash, Easypaisa, or a Pakistani bank account (HBL, UBL, Meezan Bank, Bank Alfalah), you provide payment details through the cashier section of the Platform.

6.2  ab999 does not store full JazzCash PINs, Easypaisa authorisation codes, or bank login credentials. Payment authorisation occurs through the relevant payment provider's secure infrastructure. ab999 retains only the information required to identify the transaction — such as a partial account reference and PKR amount — for audit and dispute resolution purposes.

6.3  All deposits and withdrawals are processed in Pakistani Rupees (PKR). No currency conversion data is generated or stored. Transaction records are retained for a minimum of five years to meet financial record-keeping obligations.

7. Cookies & Tracking Technologies

7.1  ab999 uses cookies and similar technologies (local storage, session tokens) on the Platform. These are used to:

• Maintain your login session after authentication so you don't need to re-enter credentials on every page.
• Remember your language, currency (PKR), and display preferences.
• Analyse aggregate usage patterns to improve Platform performance and navigation.
• Detect suspicious login activity and protect Account security.

7.2  We do not use third-party advertising or social media tracking cookies on the Platform. You may configure your browser to block or delete cookies, but doing so may affect Platform functionality, including your ability to remain logged in.

8. Data Retention

8.1  We retain personal data for as long as your ab999 Account is active and for a period thereafter as required to meet our legal and contractual obligations.

8.2  Financial transaction records (deposits, withdrawals, bet history in PKR) are retained for a minimum of five years following the transaction date.

8.3  Responsible gaming records — including self-exclusion requests and deposit limit settings — are retained for the duration of the exclusion period plus a minimum of five years, to ensure compliance and to prevent circumvention of safeguards through re-registration.

8.4  Following account closure, we may retain anonymised, aggregated data that cannot identify you individually for statistical and analytical purposes without time limit.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by ab999:

• Access: The right to request a copy of the personal data we hold about you.
• Rectification: The right to request correction of inaccurate or incomplete personal data.
• Erasure: The right to request deletion of your personal data, subject to our legal obligation to retain certain records.
• Restriction: The right to request that we restrict processing of your data in certain circumstances.
• Objection: The right to object to processing based on legitimate interests.
• Portability: The right to receive your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact ab999 support. We will respond to verified requests within a reasonable timeframe. Note that certain retention obligations (particularly financial and responsible gaming records) may limit erasure rights.

10. Children's Privacy

ab999 does not knowingly collect personal data from individuals under the age of 18. The Platform and all its services are strictly intended for adults aged 18 and above. If we discover or are notified that an Account has been registered by a minor, that Account will be immediately closed, all balances forfeited, and all associated personal data deleted as far as legally permissible.

If you believe a minor has registered on the Platform, please contact our support team immediately at the email address provided below.

11. Security Measures

11.1  ab999 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, loss, or disclosure. These include 256-bit SSL/TLS encryption for all data in transit, access controls limiting staff data access to those with a legitimate operational need, and regular security reviews.

11.2  Despite these measures, no online system is completely immune from security incidents. In the event of a data breach that poses a risk to affected players, ab999 will notify impacted individuals and take remediation steps promptly.

12. Policy Updates

ab999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. The current version will always be available at ab999.im/privacy-policy with the effective date noted at the top. Material changes will be communicated to registered players via the Platform or via SMS to their registered Pakistani mobile number.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the ab999 data team through our 24/7 live chat support, or by email.

Email: [email protected]

Please include your registered mobile number and a brief description of your query. We aim to acknowledge all privacy-related requests within 48 hours.