Last updated: 1 January 2026
This Privacy Policy applies to all users of the p99com platform accessible at p99com.net and any associated mobile applications. By registering a p99com account or continuing to use the platform, you acknowledge that you have read and understood this policy. Please read it carefully before proceeding.
01 Introduction
p99com ("we," "us," "our," or "the Company") is the operator of the online casino and sports betting platform available at p99com.net. We are committed to protecting the personal data of every player who registers on our platform, with particular care given to Pakistani users whose data is processed in connection with PKR-denominated transactions, KYC verification, and account management activities.
This Privacy Policy ("Policy") describes in plain, legally accurate terms how p99com collects, uses, stores, shares, and protects your personal data. It also sets out the rights you have in relation to your personal information and how you can exercise those rights.
Who is the Data Controller? p99com acts as the data controller in respect of all personal data it collects directly from registered players through the p99com.net platform. As data controller, p99com determines the purposes and means of processing your personal data and bears full responsibility for its lawful handling.
This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are available on the p99com platform and form part of the agreement between you and p99com.
02 Data We Collect
p99com collects personal data from you in the following ways: directly from you when you register an account or interact with our platform; automatically through the technical operation of our platform; and from trusted third-party sources such as payment processors and identity verification providers.
The categories of personal data we collect include:
- Identity & KYC Data: Your full legal name as it appears on your CNIC, date of birth, CNIC number, a photograph of your CNIC (front and back), and a recent selfie photograph for facial matching purposes. This information is mandatory for all Pakistani players to satisfy age verification (21+) and anti-money-laundering (AML) obligations.
- Contact Data: Your registered mobile number (including JazzCash / EasyPaisa registered numbers), email address, and city of residence (e.g., Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi).
- Financial & Payment Data: Details of the payment methods you use to deposit and withdraw funds, including JazzCash wallet numbers, EasyPaisa account identifiers, bank account details for HBL, UBL, Meezan Bank, and other supported Pakistani banks, Raast payment IDs, and USDT TRC20 wallet addresses. We do not store full payment credentials — these are tokenised and handled by our PCI-DSS compliant payment processing partners.
- Transaction Records: A complete history of all deposits, withdrawals, bets placed, games played, bonuses claimed, and PKR amounts associated with your account activity. These records are required for regulatory and dispute-resolution purposes.
- Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time-zone settings collected automatically when you access the p99com platform.
- Behavioural & Usage Data: Information about how you use the platform, including which games you play (cricket betting, PSL markets, slots, fishing games), how long you spend per session, which features you interact with, and your navigation patterns across the site.
- Communications Data: Records of your interactions with our customer support team via live chat and email, including the content of those communications and any attachments you provide.
Sensitive Data: p99com does not intentionally collect sensitive categories of personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) through the platform. If you choose to share any such information voluntarily with our support team, it will be treated with the highest level of confidentiality.
03 How We Use Your Data
p99com uses the personal data it collects only for specific, documented, and lawful purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal data are:
- Account Registration & Management: To create and maintain your p99com account, authenticate your identity at login, and manage your account preferences and settings.
- Age Verification & KYC Compliance: To verify that you are at least 21 years of age before granting access to real-money gaming features, in compliance with our licensing obligations.
- Payment Processing: To process PKR deposits via JazzCash, EasyPaisa, and Pakistani bank transfers, and to process withdrawal requests to your registered payment method in a timely and accurate manner.
- AML & Fraud Prevention: To monitor transactions for signs of money laundering, fraud, or other suspicious activity, and to fulfil our mandatory reporting obligations under applicable anti-financial-crime regulations.
- Platform Personalisation: To customise your gaming experience on p99com, including recommending relevant games (such as PSL cricket betting during the Pakistan Super League season) and tailoring promotional offers to your activity profile.
- Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through our 24/7 live chat and email support channels.
- Responsible Gaming: To monitor your gaming behaviour for indicators of potential problem gambling and to apply or suggest responsible gaming tools — including deposit limits, session limits, and self-exclusion — where appropriate.
- Security & Fraud Detection: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, and other forms of platform misuse through IP monitoring and behavioural analysis.
- Marketing Communications: To send you promotional emails and platform notifications about bonuses, new games, and special offers — but only where you have given explicit prior consent. You may withdraw this consent at any time.
- Legal & Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and enforce our Terms & Conditions.
04 Legal Bases for Processing
p99com processes your personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are:
- Contractual Necessity: Processing required to perform our contract with you — i.e., to provide the p99com gaming platform, process your transactions, and manage your account.
- Legal Obligation: Processing required to comply with legal and regulatory obligations, including KYC verification, AML reporting, age verification, and record-keeping requirements imposed by our licensing authority.
- Legitimate Interests: Processing carried out for p99com's legitimate business interests, such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily applicable to marketing communications and the use of non-essential cookies. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
Withdrawing Consent: Where our processing is based on your consent, you may withdraw that consent at any time by contacting our support team or by adjusting your account communication preferences. Withdrawal of consent will not affect the lawfulness of any processing carried out before withdrawal, nor will it affect processing carried out on other legal bases.
05 Data Sharing & Disclosure
p99com does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following limited and controlled circumstances:
- Payment Processing Partners: We share the minimum necessary payment and identity data with our PCI-DSS compliant payment processing partners (including JazzCash, EasyPaisa, and banking partners) solely to execute your deposit and withdrawal transactions.
- Identity Verification Providers: We share KYC documents with licensed identity verification service providers to authenticate your CNIC and confirm your age and identity in compliance with our regulatory obligations.
- Game Content Providers: Aggregated, anonymised usage data may be shared with third-party game content providers (such as providers of the slot, fishing, and casino games on our platform) for the purpose of game performance analytics. No personally identifiable information is shared with game providers.
- Regulatory Authorities & Law Enforcement: We may be legally required to disclose your personal data to our licensing authority, financial intelligence units, law enforcement agencies, or courts when required to do so by applicable law or a valid legal order. We will always seek to verify the legality of such requests before complying.
- Group Companies: Your data may be shared within the p99com group of companies for internal administrative, compliance, and operational purposes, always subject to the same data protection standards described in this Policy.
- Professional Advisers: We may share limited personal data with our legal, accounting, and auditing advisers where strictly necessary for them to provide professional services to p99com.
Data Processing Agreements: p99com maintains formal data processing agreements with all third-party service providers who process personal data on our behalf. These agreements contractually require those providers to handle your data only in accordance with our instructions and to implement appropriate technical and organisational security measures.
06 International Data Transfers
p99com operates as an internationally licensed gaming platform. As a result, personal data collected from Pakistani players may be processed and stored on servers located outside of Pakistan, including in jurisdictions where data protection laws may differ from those applicable in Pakistan.
Where personal data is transferred internationally, p99com ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan. These safeguards include:
- Contractual clauses (standard data protection clauses) binding the recipient to appropriate data protection standards.
- Transfer only to jurisdictions that our licensing authority has assessed as providing an adequate level of data protection.
- Technical security measures including encryption of data in transit (TLS 1.2+) and at rest (AES-256).
Data Sovereignty: p99com is committed to ensuring that your data is treated with the same level of protection regardless of where it is physically stored or processed. If you wish to obtain further information about the specific safeguards applied to international transfers of your personal data, please contact our support team.
07 Data Retention
p99com retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual retention obligations. Our standard data retention periods are as follows:
- Account & KYC Data: Retained for the duration of your active account plus a minimum of 5 years following permanent account closure, in compliance with AML regulatory requirements.
- Transaction Records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial record-keeping obligations.
- Communications & Support Records: Retained for 3 years from the date of the communication, unless related to an unresolved dispute in which case they are retained until final resolution.
- Technical & Log Data: Retained for up to 12 months for security monitoring purposes, after which it is either anonymised or deleted.
- Marketing Preference Data: Retained until you withdraw your consent or for a period of 3 years from your last active engagement with a marketing communication, whichever is earlier.
Post-Closure Retention: Following the closure of your p99com account — whether voluntary or as a result of enforcement action — we are legally required to retain certain records (particularly KYC, transaction, and AML-related data) for a minimum statutory period. During this retention period your data will not be used for any commercial purpose and will be stored in a restricted-access archive.
08 Cookies & Tracking Technologies
p99com uses cookies and similar tracking technologies on its platform to enable core functionality, improve performance, and — where you have given consent — to enhance personalisation. The types of cookies we use are:
- Strictly Necessary Cookies: Essential cookies required for the platform to function — including session authentication cookies that keep you logged in during your p99com gaming session. These cookies cannot be disabled without impairing core platform functionality.
- Functional Cookies: Cookies that remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — to provide a more consistent experience across sessions.
- Analytics Cookies: Cookies that collect anonymised, aggregated information about how players use the p99com platform. This data helps us identify and fix usability issues and improve the overall player experience. These cookies are only placed with your consent.
- Security Cookies: Cookies used for fraud detection and the prevention of unauthorised access, including cookies that help us identify suspicious login attempts or unusual device behaviour.
Managing Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your p99com account and using the platform. p99com does not use third-party advertising or retargeting cookies.
09 Your Privacy Rights
As a registered p99com player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at the email address provided in Section 14:
- Right of Access: You have the right to request a copy of all personal data that p99com holds about you, along with information about how it is being processed.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For changes to core KYC data (such as your registered name or date of birth), additional verification documentation will be required.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations. Note that p99com's AML and regulatory obligations may require us to retain certain data even following an erasure request.
- Right to Restriction of Processing: You have the right to request that we temporarily restrict the processing of your personal data while a query or dispute is being resolved.
- Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to request that it be transferred to another controller where technically feasible.
- Right to Object: You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. We will stop processing your data for marketing purposes immediately upon receiving your objection.
- Rights Related to Automated Decision-Making: Where p99com uses automated processing (for example, automated fraud detection systems) in ways that produce legal or similarly significant effects on you, you have the right to request human review of that decision.
Response Timeframe: p99com will respond to all valid privacy rights requests within 30 calendar days of receipt. Where a request is complex or where a large volume of requests has been received, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.
10 Children & Minors
The p99com platform is strictly intended for individuals who are 21 years of age or older. p99com does not knowingly collect personal data from any person under the age of 21, and it is a material breach of our Terms & Conditions for any person under 21 to register an account or access real-money gaming features on the platform.
p99com applies mandatory KYC age verification to all newly registered accounts. Where our verification process identifies, or where we receive a credible report, that an account holder is under 21 years of age, we will:
- Immediately suspend the relevant account and freeze all associated balances;
- Delete all personal data associated with the underage account to the extent permitted by law;
- Return any deposited funds to the originating payment method following completion of an age-verification investigation;
- Void all gameplay conducted during the period of underage access.
Parental Awareness: If you are a parent or guardian and believe that a minor in your household has registered a p99com account, please contact our support team immediately via the 24/7 live chat or by emailing
[email protected]. We will take urgent action to investigate and close the relevant account.
11 Security Measures
p99com implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.
Our security measures include:
- Encryption in Transit: All data transmitted between your device and the p99com platform is encrypted using TLS 1.2 or higher, preventing interception during transmission.
- Encryption at Rest: Personal data stored on p99com servers is encrypted using AES-256 encryption, the same standard used by major international financial institutions.
- Access Controls: Access to personal data within p99com's internal systems is restricted on a strict need-to-know basis. All staff who handle personal data undergo regular data protection training.
- Two-Factor Authentication: p99com offers and strongly encourages two-factor authentication (2FA) on all player accounts to prevent unauthorised access even in the event of a password compromise.
- Penetration Testing: Our platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
- Data Breach Procedures: p99com maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframes required by applicable law.
Your Responsibility: While p99com takes extensive measures to protect your data, you also play an important role in keeping your account secure. Please use a strong, unique password for your p99com account, enable 2FA, and never share your login credentials with any other person. p99com will never ask you for your password via email, live chat, or any other communication channel.
12 Third-Party Links
The p99com platform may from time to time contain references to or integrations with third-party services — such as payment processing gateways and game content providers. While p99com carefully selects its service partners, we do not control the privacy practices of third-party websites or services and this Privacy Policy does not apply to them.
We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the p99com platform. p99com accepts no responsibility or liability for the privacy practices or content of any third-party service.
13 Policy Amendments
p99com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will:
- Post the updated Policy on the p99com platform with a revised "Last Updated" date prominently displayed at the top of the document;
- Send a notification to your registered email address summarising the key changes at least 14 days before the changes take effect;
- Display an in-platform banner notification alerting active users to the policy update.
Your continued use of the p99com platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes to this Policy, you should discontinue your use of the platform and may request closure of your account by contacting our support team.
14 Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how p99com has handled your personal data, please get in touch with us through any of the following channels:
- Live Chat: 24/7 live chat support is available directly on the p99com platform — the fastest way to reach our team.
- Email: [email protected] — please include "Privacy Request" or "Data Rights" in your subject line so that your enquiry is routed to the correct team promptly.
Complaints: If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. p99com takes all privacy complaints seriously and is committed to resolving them in a fair, transparent, and timely manner.
We aim to acknowledge all privacy-related communications within 2 business days and to provide a substantive response within 30 calendar days of receipt.