Privacy Policy — nn99 Platform

1 Introduction

This Privacy Policy ("Policy") describes how nn99 ("nn99", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("Player", "User", "you") who access or use the nn99 online gaming and sports betting platform at nn99.today and its associated mobile interfaces.

nn99 is committed to handling your personal data responsibly and in accordance with applicable international data protection standards. By registering an account on nn99 or by continuing to use the nn99 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the agreement between you and nn99. Where this Policy uses a term defined in the Terms & Conditions, that definition applies here too unless stated otherwise.

2 Data Controller

For the purposes of applicable data protection law, nn99 is the data controller in respect of personal data collected through the nn99 platform. nn99 operates under an international gaming licence and its data processing activities are subject to the data protection requirements of that licensing jurisdiction.

All data-related queries, access requests, erasure requests, and formal complaints may be directed to our Data Protection contact point:

3 Data We Collect

nn99 collects personal data across several categories. The table below summarises the types of data we hold about registered players:

4 How We Collect Your Data

nn99 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when registering an nn99 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotional offer. This is the primary source of personal data nn99 holds about you.

4.2 Automated Collection

When you use the nn99 platform — whether on a mobile browser in Lahore or via a desktop connection in Islamabad — we automatically collect certain technical data including your IP address, device identifiers, session timestamps, and browsing behaviour within the platform. This data is collected via cookies, server logs, and similar tracking technologies (see Section 9).

4.3 Third-Party Sources

nn99 may receive data about you from third-party sources in the following circumstances:

• Identity Verification Providers: We use accredited KYC service providers to cross-check identity documents and confirm CNIC validity;
• Payment Processors: JazzCash, EasyPaisa, Raast, 1LINK, and affiliated banking partners may share transaction confirmation data with nn99 to reconcile deposit and withdrawal records;
• Fraud Prevention Services: Third-party fraud and AML screening tools may flag accounts based on watchlist data or cross-platform risk signals;
• Game Studio Providers: Live dealer studio operators such as Ezugi may share game session data with nn99 for dispute resolution and audit purposes.

5 Purpose & Legal Basis for Processing

nn99 processes your personal data only where we have a lawful basis to do so. The table below maps our processing purposes to their corresponding legal bases:

6 Data Sharing & Disclosure

nn99 does not sell your personal data to any third party. We share personal data only in the following limited circumstances:

6.1 Service Providers

nn99 engages trusted third-party service providers who process data on our behalf under strict data processing agreements. These include KYC verification vendors, payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), cloud hosting providers, customer support software operators, and fraud prevention services. All service providers are contractually bound to handle your data securely and solely for the purposes nn99 specifies.

6.2 Licensing & Regulatory Authorities

As a holder of an international gaming licence, nn99 is obligated to share certain player data with our licensing authority upon request. This may include account history, financial transaction records, and identity verification documents. Such disclosures are made only to the extent required by law or licence conditions.

6.3 Law Enforcement

nn99 will disclose personal data to law enforcement agencies, courts, or government bodies where required by a valid legal order, court order, or where disclosure is necessary to prevent or report suspected financial crime, fraud, or money laundering activity. nn99 will notify affected players of such disclosures where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of nn99's business assets, player personal data may be transferred to the successor entity. Affected players will be notified prior to any such transfer and given the opportunity to close their accounts if they do not consent to the transfer of their data to the new operator.

7 Data Retention

nn99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of 5 years after account closure, in compliance with AML record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction;
• Gaming Activity Logs: Retained for 3 years from the date of each session, or longer if required for an open dispute or regulatory investigation;
• Customer Support Records: Retained for 2 years from the date of the last interaction;
• Marketing Preference Records: Retained until you withdraw consent or close your account, plus 12 months as evidence of your consent status.

When personal data is no longer required and its retention period has expired, nn99 will securely delete or anonymise it in accordance with our internal data destruction procedures.

8 Data Security

nn99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• TLS / SSL Encryption: All data transmitted between your device and the nn99 platform is encrypted using 256-bit TLS protocols;
• Password Hashing: Account passwords are stored using industry-standard one-way cryptographic hashing. nn99 staff cannot view your password in plain text;
• Two-Factor Authentication (2FA): nn99 offers optional 2FA on player accounts as an additional layer of login security;
• Access Controls: Access to personal data within nn99's internal systems is restricted on a strict need-to-know basis with role-based access controls;
• Regular Security Audits: nn99 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform;
• Incident Response: In the event of a data breach that poses a risk to player rights, nn99 will notify affected players and the relevant regulatory authority within the timeframe required by applicable law.

9 Cookies & Tracking Technologies

nn99 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit nn99. We use the following categories of cookies:

9.1 Strictly Necessary Cookies

These cookies are essential for the nn99 platform to function. They maintain your login session, remember your language preference, and enable secure transactions. These cookies cannot be disabled without impairing platform functionality.

9.2 Performance & Analytics Cookies

These cookies collect anonymised data about how players use nn99 — for example, which game categories are visited most frequently, how long players spend on each page, and which features generate the most engagement. This data helps nn99 optimise the platform experience for Pakistani mobile users. No personally identifiable information is included in analytics cookie data.

9.3 Functional Cookies

These cookies remember your preferences — such as your preferred payment method (JazzCash vs EasyPaisa), favourite game categories, and notification settings — so that you do not need to re-enter them on each visit.

9.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain nn99 features. Your cookie preferences can also be updated at any time via the Cookie Preferences panel accessible in the nn99 platform footer.

10 Your Privacy Rights

As an nn99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with "Privacy Request" in the subject line:

• Right of Access: You may request a copy of all personal data nn99 holds about you. We will respond within 30 calendar days;
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (e.g., contact number updates) can be made directly within your nn99 account settings;
• Right to Erasure: Subject to our legal retention obligations, you may request the deletion of your personal data after closing your nn99 account;
• Right to Restrict Processing: In certain circumstances, you may request that nn99 restrict (but not delete) the processing of your personal data — for example, while a data accuracy dispute is being resolved;
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to nn99, for transfer to another service provider;
• Right to Object: You may object to the processing of your personal data where that processing is based on nn99's legitimate interests. You also have an unconditional right to object to direct marketing at any time;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Minors & Our 21+ Policy

The nn99 platform is strictly intended for adults aged 21 years and over. nn99 does not knowingly collect personal data from individuals under the age of 21. All registration attempts are subject to age verification as part of our KYC process, and any account found to belong to a person under 21 will be immediately closed with all data securely deleted (except where retention is required by AML law).

If you are a parent or guardian and believe that a minor has registered on nn99 using false age information, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete the associated data.

12 International Data Transfers

nn99 is an internationally licensed operator. As a result, your personal data may be stored on and processed by servers located outside Pakistan. Where such transfers occur, nn99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards include contractual data processing agreements with all international service providers that impose data protection obligations consistent with nn99's own standards.

nn99 will not transfer personal data to countries or organisations that do not provide an adequate level of data protection without putting in place the additional safeguards described above.

13 Changes to This Privacy Policy

nn99 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties we share it with — nn99 will provide registered players with at least 7 days' advance notice by email before the changes take effect.

The "Effective Date" at the top of this Policy will always reflect the date on which the current version came into force. Your continued use of the nn99 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must close your nn99 account before the effective date.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a privacy-related complaint, please contact nn99's Data Protection team:

If you are not satisfied with nn99's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority designated under nn99's international gaming licence jurisdiction, or to the independent dispute resolution body specified in our Terms & Conditions.