ab999 Privacy Policy — How We Collect, Use, and Protect Your Data

ab999 operates the online casino and sports betting platform accessible at https://ab999.buzz, providing Pakistani players with access to cricket betting, live dealer casino games, video slots, crash games, lottery draws, and related gaming services. In the course of providing these services, ab999 necessarily collects and processes certain personal information about its users.

This Privacy Policy has been prepared to inform all users — particularly Pakistani players accessing the ab999 platform from Karachi, Lahore, Faisalabad, Islamabad, and other cities across Pakistan — of the nature, scope, and purpose of the personal data processing activities conducted by ab999. ab999 is committed to handling all personal data in accordance with applicable international data protection standards and the requirements of its gaming licence.

ab999 acts as the data controller for all personal data collected through the platform. This means that ab999 determines the purposes for which your personal data is collected and the manner in which it is processed. ab999 does not sell personal data to third parties for advertising or marketing purposes unrelated to the platform.

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — an identifiable person being one who can be identified, directly or indirectly, by reference to an identifier such as a name, mobile number, CNIC number, location data, or one or more factors specific to that individual.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction — whether automated or manual.
• "Data Controller" means ab999, the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by ab999 — in practice, any registered user of the ab999 platform.
• "Consent" means any freely given, specific, informed, and unambiguous indication by the Data Subject that they agree to the processing of their personal data for one or more specified purposes.
• "Third Party" means any natural or legal person, public authority, agency, or body other than the Data Subject and ab999, including game providers, payment processors, and regulatory bodies.

ab999 collects personal data that is necessary to operate the platform, comply with its legal and regulatory obligations, and deliver a safe and personalised gaming experience to Pakistani players. The categories of personal data collected include the following:

ab999 collects personal data through the following channels and methods:

• Account Registration: When you create an ab999 account, you provide your mobile number, chosen username, and other required registration information directly to the platform.
• KYC Verification: When ab999 requests identity verification, you upload copies of your CNIC, passport, or other documentation directly through the platform's secure verification portal.
• Deposit and Withdrawal Transactions: Your financial data — including JazzCash and EasyPaisa wallet identifiers and bank account details — is collected when you initiate a deposit or withdrawal through the ab999 cashier.
• Gaming Activity: Data about your gaming activity — including bets, wins, losses, and session duration — is automatically recorded by the platform's gaming systems as part of normal platform operation.
• Customer Support Interactions: Information you provide during live chat, email, or any other communication with the ab999 support team is collected and stored as part of the support record.
• Automated Technical Collection: Technical data including IP addresses, device identifiers, browser information, and session logs are collected automatically through cookies and server logs when you access the ab999 platform.

ab999 processes personal data only where there is a lawful basis to do so. The following table sets out the primary purposes for which ab999 processes personal data and the corresponding legal basis for each:

ab999 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in the course of operating the platform, ab999 may share your personal data with the following categories of recipients on a need-to-know basis:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard processing networks receive the financial data necessary to process your deposits and withdrawals. These parties are bound by their own privacy and security obligations.
• Game Providers: Certified game providers such as Pragmatic Play, NetEnt, and Red Tiger may receive limited technical data (such as session tokens and stake values) necessary to deliver their games within the ab999 platform environment. These providers are contractually prohibited from using this data for any purpose other than game delivery.
• Identity Verification Services: Third-party KYC and AML compliance service providers may process identity documents and related data to assist ab999 in meeting its age verification and anti-money laundering obligations.
• Regulatory and Law Enforcement Authorities: ab999 may be required to disclose personal data to its gaming licence regulator, financial intelligence authorities, or law enforcement agencies pursuant to lawful requests, court orders, or regulatory obligations. ab999 will comply with all such obligations as required by applicable law.
• Platform Technology Providers: Hosting, infrastructure, and cybersecurity service providers who support the technical operation of the ab999 platform may have access to personal data as part of their service delivery, subject to strict data processing agreements.

The ab999 platform uses cookies and similar tracking technologies to support platform functionality, improve user experience, and maintain session security. A cookie is a small text file placed on your device by a web server. Cookies used by ab999 are not used to identify you personally in isolation but may constitute personal data when combined with other information held by the platform.

The following categories of cookies are used on the ab999 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as secure login sessions, remembering your language preferences, and maintaining your account state during a gaming session. These cookies cannot be disabled without impairing platform functionality.
• Analytical Cookies: These cookies collect aggregated, anonymised information about how players interact with the ab999 platform — such as which game categories receive the most visits and where technical errors occur. This data is used exclusively for platform improvement purposes.
• Functional Cookies: These cookies remember your preferences — such as your preferred deposit method or display settings — to provide a more personalised experience when you return to the ab999 platform.
• Security Cookies: These cookies assist in fraud detection and prevention by identifying unusual login patterns, multiple account attempts, and other suspicious behaviour indicative of account compromise or fraud.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the ab999 platform, including the ability to maintain a login session.

ab999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active ab999 account is retained for the duration of the account relationship and remains accessible to the Player through their account dashboard.
• Transaction and Gaming Records: Financial transaction records and gaming history are retained for a minimum of five (5) years following the date of each transaction or gaming session, in accordance with anti-money laundering regulatory requirements applicable to the platform's gaming licence.
• KYC and Identity Documents: Copies of identity verification documents — including CNIC and passport copies — are retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later, in compliance with AML obligations.
• Support Communications: Records of customer support interactions are retained for a minimum of two (2) years following the closure of each support ticket or complaint.
• Closed Account Data: Following voluntary account closure, ab999 will retain the minimum personal data necessary to comply with its legal and regulatory obligations. Data that is no longer required for any lawful purpose will be securely deleted or anonymised.

ab999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the ab999 platform is encrypted using SSL/TLS technology — the same standard used by Pakistani banks for their internet banking services.
• Password Security: Account passwords are stored using industry-standard cryptographic hashing algorithms. ab999 does not store passwords in plain text and no employee has access to your actual password.
• Access Controls: Access to personal data within ab999's internal systems is restricted on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations and background screening.
• Two-Factor Authentication: ab999 supports and encourages the use of SMS-based two-factor authentication linked to your Pakistani mobile number to add an additional layer of protection to your account login.
• Regular Security Assessments: ab999 conducts periodic reviews of its information security practices and infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a personal data breach that poses a material risk to affected Players, ab999 will notify affected individuals and, where required, relevant regulatory authorities, in accordance with applicable data breach notification obligations.

Despite these measures, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their ab999 account and to enable two-factor authentication to maximise account security.

As a Data Subject whose personal information is processed by ab999, you hold the following rights with respect to your personal data. ab999 is committed to honouring these rights promptly and without unnecessary obstruction:

To exercise any of these rights, please contact the ab999 Data Protection team through the support channel. ab999 will acknowledge data rights requests within 48 hours and respond substantively within 30 calendar days. In complex cases, the response period may be extended by a further 60 days, in which case ab999 will notify you of the extension and the reasons for it.

The ab999 platform integrates services provided by third-party partners — including certified game providers, payment processing services, and identity verification systems — that are necessary for the operation of the platform. These third-party services process limited personal data as required to deliver their specific function within ab999's infrastructure.

All third-party service providers used by ab999 are selected on the basis of their compliance with applicable data protection and security standards. They are contractually prohibited from processing the personal data they receive from ab999 for any purpose other than the specific service they provide. ab999 remains responsible for ensuring that personal data shared with these providers is handled appropriately.

ab999 is not responsible for the privacy practices of any external websites or services that are entirely independent of the ab999 platform. This Privacy Policy applies exclusively to the personal data processing activities of ab999 through https://ab999.buzz.

The ab999 platform is strictly for adults aged 21 years and above. ab999 does not knowingly collect personal data from individuals under the age of 21. The platform's age verification processes are designed to prevent underage registration and to identify accounts where the registered player may not satisfy the minimum age requirement.

If ab999 becomes aware — through its KYC process, responsible gaming monitoring, or any other means — that it has collected personal data from an individual under the age of 21, it will take immediate action to suspend the associated account, forfeit any winnings accrued, process the return of any real-money deposits where applicable, and securely delete the personal data of the underage individual from its systems as soon as reasonably practicable.

If a parent or guardian becomes aware that a minor under their care has registered an account with ab999, they should contact the ab999 support team immediately so that the account can be closed and the situation addressed appropriately.

ab999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in the platform's data processing activities, updates to applicable legal or regulatory requirements, or improvements to privacy practices. The revised Privacy Policy will be published on this page with an updated effective date displayed at the top of the document.

Players are responsible for reviewing this Privacy Policy periodically. Continued use of the ab999 platform following the publication of an updated Privacy Policy constitutes acknowledgement of the revised document. If you do not accept the revised Policy, you should cease using the ab999 platform and contact support to initiate account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ab999, please contact the support and data protection team using the details below. All data rights requests must be submitted in writing (via email or live chat message) and will be acknowledged within 48 hours.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the ab999 platform — average response time 3–5 minutes
• Languages: English and Urdu
• Response Commitment: Data rights requests acknowledged within 48 hours; substantive response within 30 days

When submitting a data rights request, please include your registered Pakistani mobile number, your ab999 account username, a clear description of the right you wish to exercise, and any additional information that will help ab999 locate and process your request efficiently. ab999 may need to verify your identity before processing certain types of data rights requests to ensure that personal data is not disclosed to an unauthorised person.