99ef Privacy Policy

01 Overview

This Privacy Policy covers the 99ef website at 99ef.onl and the 99ef mobile app for Android and iOS. It applies to all registered players and visitors to the platform, regardless of where they are located.

99ef takes privacy seriously because it directly affects the trust players place in the platform. When you register an account, deposit PKR via JazzCash or Easypaisa, place a bet or contact support, data is generated. This policy explains what happens with that data — nothing more, nothing less.

We do not sell your personal data to third-party advertisers. We do not share it with unrelated commercial partners. The data we collect is used to run your account, process your transactions, keep the platform secure and comply with the legal obligations that any financial service platform must meet.

This policy should be read alongside the Terms and Conditions and Responsible Gaming policy, both of which reference how data intersects with account management and player protection.

02 What We Collect

We collect data in three main ways: information you provide directly, information generated automatically through your use of the platform, and information we receive from third-party service providers involved in payment processing or identity verification.

Data you provide directly

• Registration information: Full name, date of birth, email address, phone number and any other details required during account creation
• Identity verification documents: CNIC, passport or other government-issued identification submitted during KYC (Know Your Customer) verification
• Payment information: Payment method details — JazzCash mobile number, Easypaisa wallet details, Raast ID, bank account numbers or card details — as required to process deposits and withdrawals in PKR
• Support communications: Messages, emails and chat transcripts from interactions with the 99ef support team
• Responsible gaming preferences: Deposit limits, session reminders, cooling-off settings and self-exclusion instructions you configure in your account

Data collected automatically

• Device and browser information: IP address, device type, operating system, browser version and screen resolution
• Session data: Login times, session duration, pages visited, game rounds played and betting history
• App usage data: For the Android APK and iOS app — app version, crash reports and performance data
• Cookies and similar technologies: As described in the Cookies section below

Data from third parties

• Confirmation of payment transactions from JazzCash, Easypaisa, Raast and bank payment processors
• Identity verification results from KYC service providers where external verification is used
• Fraud prevention signals from transaction monitoring services

03 How We Use Your Data

We use the data described above for the following purposes:

We do not use your personal data for profiling or automated decision-making that produces significant legal effects on your account, except where fraud prevention systems flag activity for manual review.

If you have opted in to promotional communications, you can withdraw consent at any time by updating your communication preferences in account settings or contacting support.

04 Payment Data and PKR Transactions

Given that 99ef is a real-money platform operating exclusively in PKR, payment data deserves specific attention. When you deposit or withdraw using JazzCash, Easypaisa, Raast, bank transfer or card, the following applies:

• Payment transactions are processed through third-party payment providers. Your payment credentials (JazzCash number, Easypaisa account, bank account details) are transmitted to those providers under secure encryption. 99ef does not store complete card numbers or mobile wallet PINs on its own servers.
• Transaction records — amounts, dates, payment method used, transaction status — are retained in your account history and in our records for the period required under applicable record-keeping obligations.
• Withdrawal requests are subject to identity verification to confirm that the payment method belongs to the registered account holder. This prevents unauthorised withdrawals and money laundering.
• Chargeback requests initiated through your payment provider may trigger an account review, during which additional documentation may be requested.

05 Data Sharing

99ef does not sell your personal data. We share data only in the following circumstances and only to the extent necessary for each purpose:

• Payment processors: JazzCash, Easypaisa, Raast, bank payment rails and card processors receive only the transaction data necessary to process your deposit or withdrawal.
• Identity verification providers: Where third-party KYC services are used, relevant identification documents and personal details are shared for the purpose of verifying your identity and age.
• Fraud prevention services: Transaction data and device signals may be shared with anti-fraud service providers to identify and prevent financial crime.
• Game software providers: When you play a game, the relevant software provider may receive your player session data (a non-personal player ID, bet amounts, game outcomes) for the purposes of game operation and dispute resolution. Providers do not receive your full personal profile.
• Legal and regulatory requests: If 99ef receives a valid legal request requiring disclosure of player data — for example, a court order or a lawful demand from a regulatory authority — we will comply to the extent legally required and, where permitted, notify the affected player.

All third-party service providers with whom we share data are required to handle that data securely and to use it only for the specified purpose. We do not allow our service providers to use your data for their own marketing or commercial purposes.

06 Cookies and Tracking Technologies

The 99ef website uses cookies and similar technologies. These are small files stored by your browser that help the platform function correctly and help us understand how the platform is being used.

Types of cookies used

• Essential cookies: Required for the platform to function. These handle session management, login state, security tokens and cashier functionality. The platform cannot operate without them and they cannot be disabled.
• Functional cookies: Remember your preferences — language, game lobby filters, display settings — between sessions so you don't have to reconfigure them each time.
• Analytics cookies: Collect anonymised data about how players use the platform — which pages are visited, how long sessions last, which games are opened. This data is used in aggregate to improve the platform experience.
• Security cookies: Help identify and prevent fraudulent sessions, bot activity and unauthorised access attempts.

You can manage or delete cookies through your browser settings. Disabling non-essential cookies will not prevent you from using the platform, though some preference features may not persist between visits. Disabling essential cookies will break platform functionality.

07 Data Retention

We retain personal data for as long as it is needed for the purpose it was collected, subject to any legal obligations that require retention for a specified minimum period.

• Active account data: Retained for as long as your account is active and for a period following account closure, as required by anti-money laundering and financial record-keeping obligations.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction to comply with standard financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account plus the post-closure retention period required by applicable regulations.
• Support communications: Retained for up to three years from the date of the interaction unless a longer period is required in connection with a formal dispute.
• Marketing preferences and opt-out records: Retained indefinitely to ensure we honour your communication preferences and do not contact you after an opt-out.

When data reaches the end of its required retention period and there is no other legal basis for keeping it, it is securely deleted or anonymised.

08 Security Measures

Protecting your account and personal data is a core operational priority for 99ef. The platform uses a combination of technical and organisational measures to keep your information secure:

• Encryption in transit: All data transmitted between your device and the 99ef servers is encrypted using TLS. This applies to the website, the mobile app and all API communications.
• Password security: Account passwords are stored using cryptographic hashing — we do not store your password in readable form. If you forget your password, it must be reset rather than retrieved.
• Session security: Login sessions are time-limited. The platform automatically logs out inactive sessions to prevent unauthorised access on shared devices.
• Payment data handling: Payment credentials are transmitted directly to payment processors under encryption. Full card numbers and mobile wallet PINs are not stored on 99ef servers.
• Fraud monitoring: Automated systems monitor transaction patterns and login behaviour for signs of unauthorised access or financial fraud. Unusual activity triggers review and may result in temporary account holds pending verification.
• Internal access controls: Access to player data within the 99ef team is restricted on a need-to-know basis. Support agents see only the data necessary to handle your query.

No security system is completely foolproof, and 99ef cannot guarantee absolute protection against all possible threats. If you suspect your account has been compromised, contact support immediately and change your password.

09 Your Rights Over Your Data

As a registered player, you have rights in relation to the personal data 99ef holds about you. These rights can be exercised by contacting support.

We aim to respond to data rights requests within 30 days. If a request is complex or if we receive a high volume of requests simultaneously, we may take up to 60 days and will notify you accordingly.

10 Minors and Age Verification

The 99ef platform is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. Age verification is part of our standard account registration and KYC process.

If we discover or have reasonable grounds to believe that a player is under 18, we will immediately suspend the account, conduct a review, return any deposited funds and delete the account data to the extent permitted by applicable obligations. Winnings generated by a minor's account will not be paid out.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable requirements. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date.

For material changes that significantly affect how we collect or use your data, we will notify registered players through the platform or via their registered contact details, giving reasonable advance notice before the changes take effect.

Continued use of the 99ef platform after the effective date of a revised policy constitutes your acceptance of those changes. If you do not agree with a revised policy, you should stop using the platform and close your account. Funds held in your account will be returned in accordance with standard withdrawal procedures.

We recommend revisiting this page periodically if you are a regular user of the platform.

12 Contact Us About Privacy

If you have a question about this Privacy Policy, want to exercise a data right or need to report a privacy concern, please contact the 99ef support team:

For data rights requests specifically, please include your registered account username and a clear description of the request. We will ask for identity verification before actioning any request that involves access to or deletion of account data.

Our support team responds to privacy queries within 5 business days. For formal data rights requests, we aim to provide a substantive response within 30 days.