99xo Privacy Policy
— Your Data, Handled With Care

1. Who We Are

99xo is an online gaming platform serving players in Pakistan, offering sports betting, casino games, slot games, bingo, and a VIP loyalty programme. All services on the platform are operated under the 99xo brand and accessible via the website at https://99xo.st.

For the purposes of this Privacy Policy, "99xo", "we", "us" and "our" refer to the operators of the 99xo platform. When we refer to "you" or "your", we mean any person who accesses, registers on, or uses the 99xo website in any capacity.

If you have any questions about who controls your data or how to exercise your rights, contact our support team — details are in Section 13 of this policy.

2. Data We Collect

We collect different categories of personal information depending on how you interact with the platform. The main categories are set out below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless you voluntarily disclose such information through a support interaction, in which case it is used solely to assist with your query.

3. How We Collect Your Data

We collect your personal information through the following channels:

• Direct input: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, or contacting our support team.
• Automated technology: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you visit or use the platform. See Section 7 for more detail on cookies.
• Payment providers: When you deposit or withdraw using JazzCash, Easypaisa, Raast, bank transfer, or cards, limited transaction confirmation data is passed back to us by your payment provider to reconcile your account balance. We do not receive your full payment credentials.
• Third-party verification services: Where identity verification is required, we may use a third-party KYC service to cross-reference the documents you submit. These services return a verification status — they do not store your documents on our behalf.

4. How We Use Your Data

We use your personal information only for legitimate purposes directly connected to operating the 99xo platform and providing you with a good experience. Specifically, we use your data to:

• Create and manage your 99xo account, including maintaining your PKR balance, VIP tier status, betting history, and casino game records.
• Process deposits and withdrawals via your chosen payment method — JazzCash, Easypaisa, Raast, bank transfer, debit/credit cards, or other supported mobile wallets.
• Verify your identity in accordance with our account verification procedures. This is required before your first withdrawal can be processed.
• Detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other violations of our Terms and Conditions.
• Send you account-related communications including transaction confirmations, security alerts, and important updates about changes to our policies or platform.
• Send promotional communications about bonuses, new games, PSL betting markets, and other platform features — but only where you have opted in to receive marketing messages. You can opt out at any time through your account settings.
• Improve the platform through analysis of aggregated usage data. Any analytics we conduct for product improvement purposes uses anonymised or aggregated data wherever possible.
• Provide customer support and resolve disputes related to your account, bet settlement, or payment transactions.

5. Who We Share Your Data With

We do not sell your personal data. We share it only with the limited set of third parties necessary to operate the platform, and only to the extent required for the specific purpose. These parties include:

• Payment processors: JazzCash, Easypaisa, Raast, and card/banking partners receive the transaction data necessary to execute your deposits and withdrawals in PKR. They process this data under their own privacy policies and are not permitted to use it for any purpose other than completing your transaction.
• Identity verification providers: Third-party KYC services receive the identity documents you submit to us during account verification. They return only a pass/fail status to 99xo and operate under strict data processing agreements.
• Cloud infrastructure providers: Our platform is hosted on cloud servers. The hosting provider has access to infrastructure but is contractually prohibited from accessing or using our data for any purpose beyond providing hosting services.
• Fraud detection services: We may use specialist tools to flag unusual account activity or suspicious transactions. These tools process technical and behavioural data but do not receive your full identity details unless escalation is required.
• Legal and regulatory authorities: We may disclose your data where required by applicable law, a valid court order, or in connection with a formal investigation into fraud or financial crime. We will notify you of such disclosure where legally permitted to do so.

All third parties with whom we share personal data are required to handle it securely, use it only for the stated purpose, and comply with applicable data protection standards. We do not permit third-party service providers to use your data for their own marketing or any other secondary purpose.

6. Payment Data

All financial transactions on 99xo are conducted in PKR. When you make a deposit or request a withdrawal via JazzCash, Easypaisa, Raast, bank transfer, or card, the actual payment credentials — such as your mobile wallet PIN, card number, or bank account password — are never transmitted to or stored by 99xo. These are handled entirely by your payment provider within their own secure environment.

What 99xo does receive and store is:

• A reference to the payment method you used (for example, a masked mobile number associated with your JazzCash account, or a bank account reference).
• The transaction amount in PKR, the timestamp, and a transaction reference number for reconciliation purposes.
• The transaction status (success, pending, failed) returned by the payment provider.

This payment reference data is retained for the period required by our internal financial and fraud control procedures. It is used solely to process your transactions, investigate any payment disputes, and fulfil our anti-money-laundering monitoring obligations.

As stated in our Terms and Conditions, all deposits and withdrawals must be made using a payment account registered in your own name. Deposits from third-party accounts cannot be accepted.

7. Cookies & Tracking Technologies

99xo uses cookies and similar browser-based technologies to make the platform function correctly and to understand how players use it. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Essential cookies: These are required for the platform to function. They keep you logged in during your session, maintain your game state, and ensure your PKR balance is displayed correctly. You cannot opt out of essential cookies without also losing access to the platform.
• Functional cookies: These remember your preferences — such as your preferred language or recently viewed game categories — to improve your experience on return visits.
• Analytics cookies: These help us understand aggregate usage patterns — for example, which game sections receive the most visits, or how players navigate through the platform. Analytics data is processed in aggregated, anonymised form.
• Security cookies: These help us identify and flag suspicious activity, such as login attempts from unrecognised devices or locations, and are an important part of our fraud prevention system.

You can manage cookie preferences through your browser settings. Disabling all cookies will affect platform functionality — in particular, session management and account security features rely on essential cookies. We recommend leaving essential and security cookies enabled.

8. Data Retention

We retain your personal data for as long as is necessary for the purpose for which it was collected, or as required by our internal compliance procedures. The general retention framework we apply is as follows:

• Account data (name, contact details, VIP tier history): Retained for the duration of your account and for a defined period after account closure to handle any post-closure queries or disputes.
• Transaction records (deposit and withdrawal history in PKR): Retained for the period required by our financial control and anti-money-laundering procedures. This is typically longer than account data due to the nature of financial record-keeping.
• Identity verification documents: Retained for the period required by our KYC procedures and then securely deleted. We do not keep CNIC copies or other identity documents longer than necessary.
• Support communications: Retained for a reasonable period to allow us to reference prior interactions when handling follow-up queries or disputes.
• Marketing preferences and opt-out records: Retained indefinitely to ensure we respect your stated communication preferences even if you later reactivate your account.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. Your Rights Over Your Data

You have meaningful rights over the personal data that 99xo holds about you. These rights include:

• Right of access: You can request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe after verifying your identity.
• Right to correction: If any of the data we hold is inaccurate or out of date, you can ask us to correct it. For example, if your registered mobile number has changed, contact support to update it — this is particularly important for withdrawal processing.
• Right to deletion: You can request that we delete your personal data. We will honour this request where we are not legally or operationally required to retain it. Note that certain data — such as transaction records — may need to be retained for a defined period regardless of a deletion request.
• Right to restrict processing: In certain circumstances, you can ask us to limit how we use your data while a query or dispute is being resolved.
• Right to withdraw consent: Where we process your data based on your consent — for example, marketing communications — you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, contact our support team via live chat within your account or by email at [email protected]. We will verify your identity before acting on any data rights request to protect against unauthorised access.

10. How We Keep Your Data Secure

Data security is taken seriously at 99xo. We implement a layered approach to protecting your personal information, including the following measures:

• All data transmitted between your device and the 99xo platform is encrypted using TLS (Transport Layer Security), the same standard used by banks and major financial platforms.
• Sensitive data stored on our servers — including identity verification records and payment references — is encrypted at rest.
• Access to personal data within our organisation is restricted on a need-to-know basis. Team members can only access the data necessary to perform their specific role.
• We conduct periodic reviews of our security practices and update them in response to emerging threats.
• Login sessions are time-limited and automatically expire after a period of inactivity to reduce the risk of unauthorised access to your account.

While we take robust measures to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password, do not share your credentials with anyone, and contact us immediately if you suspect your account has been accessed without your authorisation.

11. Minors

The 99xo platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has registered an account and provided personal data, we will close the account immediately and delete all associated personal data as promptly as possible.

If you believe a minor has registered on the platform, please contact our support team so we can investigate and take the appropriate action. For guidance on protecting young people from accessing online gaming content, visit our Responsible Gaming page.

12. Updates to This Policy

We may update this Privacy Policy from time to time as our platform evolves, new payment methods are added, or our data practices change. When we make material changes — for example, a change to how we use your data for marketing, or the introduction of a new third-party service provider — we will notify active players via an in-platform notification or by email to the address registered on your account.

The "Last updated" date at the top of this page will always reflect the most recent revision. We recommend reviewing this page periodically, particularly if you have been away from the platform for a while. Continued use of 99xo after a policy update constitutes acceptance of the revised terms.

Previous versions of this Privacy Policy are available on request by contacting our support team.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, please get in touch with our support team:

• Live Chat: Available 24/7 within your logged-in 99xo account. This is the fastest way to reach us for urgent privacy or account security concerns.
• Email: [email protected] — for formal data access requests or written queries. We aim to respond within 48 hours on business days.

When contacting us about a data rights request, please include your registered mobile number and a description of your request so we can verify your identity and process it efficiently. You can also find answers to common questions about your account and data in our FAQ section.