Privacy Policy — 99pkr Data Protection

01 Introduction

99pkr ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every user who accesses or registers on the website located at 99pkr.pro. This Privacy Policy ("Policy") sets out in clear, plain English how we collect, use, store, share, and safeguard your personal information when you use our platform, including all casino games, sports betting markets, live dealer products, and associated services.

This Policy applies to all personal data collected through the 99pkr website, whether you access it via desktop browser, mobile browser, or any future application. It applies equally to registered account holders and to visitors who browse the site without registering.

This Policy should be read alongside the 99pkr Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall take precedence.

02 Data We Collect

99pkr collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the platform, and in limited cases from third-party service providers. Below is a full breakdown of the categories of personal data we collect:

03 How We Use Your Data

99pkr processes your personal data for specific, legitimate purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below outlines each processing purpose alongside the data categories involved:

• Account Creation and Management: Identity and contact data is used to create and administer your 99pkr account, verify your eligibility, and enable login access.
• Payment Processing: Financial data is used to process deposits, verify payment method ownership, execute withdrawal requests, and maintain transaction records as required by our gaming license.
• KYC and Anti-Money Laundering (AML) Compliance: Identity documents and financial data are used to fulfil our legal obligation to verify player identity and prevent money laundering and fraud in accordance with international gaming license requirements.
• Gameplay and Platform Delivery: Gameplay data and technical data are used to deliver game sessions, resolve disputes, detect technical errors, and ensure fair play across all games and betting markets.
• Responsible Gaming: Gameplay data, session duration, and betting patterns are monitored by our responsible gaming systems to identify signs of potentially harmful gambling behaviour and to enable the self-exclusion, deposit limit, and cooling-off tools available to all players.
• Fraud Prevention and Security: Technical data, IP address history, and device fingerprints are used to detect and prevent unauthorised account access, multi-account abuse, and bonus exploitation.
• Customer Support: Communications data and account data are used by our support team to respond to queries, investigate complaints, and resolve disputes.
• Marketing Communications (opt-in only): Contact data and gameplay data may be used to send promotional emails, SMS notifications, or on-platform messages about bonuses, new games, and special offers — but only where you have explicitly opted in to receive such communications.
• Platform Analytics and Improvement: Aggregated, anonymised technical and gameplay data is used to analyse platform performance, improve user experience, and inform product development decisions.

04 Legal Basis for Processing

Every instance of personal data processing at 99pkr is grounded in one of the following legal bases, consistent with international data protection principles applicable under our gaming license jurisdiction:

• Contractual Necessity: Processing required to deliver the services you have signed up for — including account management, game delivery, and payment processing — is necessary for the performance of the contract between you and 99pkr.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, AML record-keeping, and responsible gaming monitoring — are required to comply with legal and regulatory obligations imposed on 99pkr as a licensed gaming operator.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, abuse detection, and aggregated analytics is justified on the basis of our legitimate interests as a platform operator, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications is based on your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

05 Data Sharing & Disclosure

99pkr does not sell, rent, or trade your personal data to any third party for commercial purposes. However, we do share personal data with a limited set of carefully selected third-party partners where such sharing is necessary to operate the platform, comply with legal obligations, or protect our users. All third parties with whom we share data are bound by contractual data protection obligations.

The categories of third parties who may receive your personal data are as follows:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processing services receive financial and identity data strictly as required to process your transactions. Each payment partner operates under its own regulated data handling framework.
• Identity Verification Providers: Third-party KYC and AML verification service providers may receive identity document data and personal details to conduct automated or manual identity checks as required under our gaming license obligations.
• Game Providers: Certified third-party game studios providing live dealer tables, slot games, and RNG games may receive limited session and gameplay data necessary to deliver those game experiences. Game providers are themselves licensed and regulated operators.
• Customer Support Tools: Secure third-party customer support platforms used to manage live chat and email tickets may process communications data on our behalf under strict data processing agreements.
• Regulatory Authorities: 99pkr may be required to disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required by law, court order, or regulatory direction. Such disclosures are made only to the extent legally required.
• Fraud Prevention Networks: In cases of suspected fraud, money laundering, or multi-account abuse, limited data may be shared with industry-wide fraud prevention databases to protect the platform and its legitimate users.

06 Cookies & Tracking Technologies

99pkr uses cookies and similar tracking technologies on the 99pkr.pro website to deliver core platform functionality, remember your preferences, analyse site usage, and — where you have consented — deliver personalised content and relevant promotional messaging.

The following categories of cookies are used on the 99pkr platform:

• Strictly Necessary Cookies: These cookies are essential for the website to function correctly. They enable secure login sessions, maintain your authenticated state while you play, and support core security mechanisms. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings, display preferences, and last-visited game categories — to provide a more personalised experience on return visits.
• Analytics Cookies: Anonymised analytics cookies help us understand how players navigate the platform, which games are most popular, where users encounter difficulties, and how page performance can be improved. Data collected through analytics cookies is aggregated and does not identify individual users.
• Marketing Cookies (consent-based): Where you have provided consent, marketing cookies allow us to deliver relevant promotional content based on your gameplay interests and betting history. You can withdraw this consent at any time via your cookie preference settings.

07 Data Retention

99pkr retains personal data for only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or gaming license obligations. The following retention periods apply as a general framework:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that permanently prevents re-identification. Where data is required for ongoing legal proceedings or regulatory investigations, retention is extended until the matter is fully resolved.

08 Your Privacy Rights

As a 99pkr user, you have a number of rights in relation to your personal data. These rights are exercisable by contacting our support team at support@99pkr.pro or via live chat. 99pkr will respond to all valid rights requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that 99pkr holds about you, along with information about how it is being processed. This is known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly from your account settings page.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that 99pkr delete your personal data. Please note that this right is limited where retention is required by legal or regulatory obligation — for example, AML record-keeping requirements will take precedence over erasure requests for financial transaction data during the applicable retention window.
• Right to Restrict Processing: You may request that 99pkr limits the way your data is processed in certain circumstances — for example, while you contest the accuracy of data we hold, or pending a response to an erasure request.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes. Objections will be assessed on a case-by-case basis, balancing your rights against our legal obligations as a gaming operator.
• Right to Withdraw Consent: Where processing is based on your consent — primarily marketing communications — you may withdraw consent at any time without penalty, except that withdrawal does not retroactively affect processing that occurred before withdrawal.

09 Data Security

99pkr implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• SSL/TLS Encryption: All data in transit between your browser or device and 99pkr servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser's address bar confirms this protection is active at all times on 99pkr.pro.
• Encrypted Data Storage: Sensitive personal data — including identity documents, financial records, and account credentials — is stored in encrypted form at rest using AES-256 encryption or equivalent standards.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Only personnel whose job functions require access to specific data categories are granted that access, and all internal data access is logged and audited.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing algorithms. 99pkr staff cannot retrieve your plaintext password — this is why password resets require a new password to be set rather than an old one to be sent.
• Intrusion Detection: 99pkr operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Regular Security Audits: The platform undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities proactively.

While 99pkr takes every reasonable technical precaution, no digital system is entirely immune to risk. You also play a part in keeping your account secure — please use a strong, unique password for your 99pkr account and never share your login credentials with anyone.

10 Children's Privacy

The 99pkr platform is strictly intended for adults aged 21 years and above. 99pkr does not knowingly collect, process, or retain personal data from individuals under the age of 21 under any circumstances.

During registration, all users are required to confirm their date of birth. Users who declare an age below 21 are prevented from completing registration. Additionally, 99pkr's KYC verification process requires submission of a government-issued identity document (CNIC or passport) which confirms age, providing a secondary layer of age verification beyond the self-declaration made at registration.

If 99pkr becomes aware — through any means — that personal data belonging to a person under the age of 21 has been collected, that account will be immediately suspended, all related data will be securely deleted, and any associated funds will be reviewed in accordance with applicable regulatory procedures.

11 Third-Party Services & Links

The 99pkr platform may contain references to or integrations with third-party service providers — including certified game studios, payment gateways, and customer support tools — as described in Section 5 of this Policy. Each of these providers operates under its own privacy policy and data protection framework, which governs how they handle any personal data shared with them in connection with their services to 99pkr.

99pkr does not control the privacy practices of third-party providers and is not responsible for the content or data handling practices of any third-party platform or service accessed through or in connection with 99pkr.pro. We strongly encourage you to review the privacy policies of any third-party services you interact with.

All game providers integrated into the 99pkr platform are certified operators subject to their own gaming licenses and regulatory data protection obligations. We select game partners based in part on their demonstrated commitment to data security and player privacy standards.

12 Changes to This Privacy Policy

99pkr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational structure. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes that materially affect how your personal data is processed, 99pkr will make reasonable efforts to notify active account holders via their registered email address or through an in-platform notification prior to the changes taking effect. Minor clarifications or non-material updates may be made without direct notification, though the updated Policy will always be accessible at 99pkr.pro/privacy-policy.

Your continued use of the 99pkr platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any updated version of this Policy, you have the right to close your account and request erasure of your data (subject to legally required retention obligations) by contacting our support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 99pkr handles your personal data, please do not hesitate to get in touch with our team through any of the following channels:

• Email: support@99pkr.pro — for formal privacy requests, Subject Access Requests, data erasure requests, or any written query related to this Policy. Please include "Privacy Policy Query" or "Privacy Rights Request" in the subject line for fastest routing.
• Live Chat: Available 24 hours a day, 7 days a week, directly on the 99pkr website. Our support team is trained to handle privacy-related enquiries and will escalate complex requests to the appropriate internal team if needed.
• Response Time: 99pkr aims to respond to all privacy-related queries within 48 hours of receipt, and to fulfil formal rights requests (Subject Access Requests, erasure requests, etc.) within 30 calendar days as required under applicable data protection standards.