Privacy Policy

1 Introduction

This Privacy Policy (the "Policy") describes how nn99 (the "Platform", "we", "us" or "our"), accessible at https://nn99.cam, collects, processes, stores and protects personal data provided by or relating to individuals who visit or use the Platform ("Users", "you" or "your").

nn99 is an English-language international online entertainment platform designed to serve Pakistani players and others who access it from eligible jurisdictions. All balances and display values are presented in PKR for the convenience of Pakistani users. This Policy applies to all Users regardless of their country of residence.

By registering an account, making a deposit or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform.

2 Definitions

The following terms carry the meanings set out below throughout this Policy:

3 Data Controller

nn99 acts as the Data Controller in respect of all personal data collected through this Platform. As Data Controller, nn99 determines the purposes for which and the means by which your personal data is processed.

Where third-party service providers process data on our behalf — for example, payment processors, KYC verification providers or analytics services — those providers act as Data Processors under written contractual agreements with nn99 that impose obligations consistent with applicable data protection standards.

For any privacy-related queries, requests or complaints, please contact us using the details set out in Section 16 of this Policy.

4 Data We Collect

nn99 collects personal data in several categories depending on your interaction with the Platform:

4.1 Registration Data

• Full legal name
• Date of birth
• Email address
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi)
• Mobile telephone number
• Username and encrypted password
• Currency preference (PKR)

4.2 Identity Verification (KYC) Data

• National Identity Card (CNIC) number or passport number
• Copies of identity documents (front and reverse)
• Proof of address documentation
• Selfie or live facial verification image (where required)

4.3 Financial Data

• Deposit and withdrawal transaction records (amounts in PKR)
• Payment method identifiers (masked card numbers, mobile wallet references)
• Transaction timestamps and reference numbers

4.4 Gaming Activity Data

• Game session history, bet amounts and outcomes
• Sports betting selections, stake values and settlement records
• Bonus activation and wagering records
• Responsible gambling settings and limit history

4.5 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system and browser version
• Session duration and page navigation data
• Log files and error reports

4.6 Communications Data

• Contents of support tickets, live chat transcripts and email correspondence
• Marketing preference records
• Feedback and survey responses

5 How We Collect Data

We collect personal data through the following mechanisms:

• Directly from you — when you register an account, complete KYC verification, make a deposit, contact support or update your account preferences.
• Automatically — through cookies, web beacons and similar tracking technologies when you browse or interact with the Platform.
• From third parties — including KYC and identity verification providers, payment processors, fraud detection services and data analytics providers, to the extent permitted by applicable law.
• From publicly available sources — where necessary for fraud prevention, responsible gambling compliance or legal obligations.

6 Legal Basis for Processing

nn99 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

7 How We Use Your Data

Your personal data is used for the following purposes:

• Account creation and management — establishing, administering and maintaining your nn99 Account in accordance with our Terms & Conditions.
• Identity and age verification — confirming that you meet the minimum age requirement (18+ or the higher age required by our licence jurisdiction) and that your identity matches the details provided at registration.
• Payment processing — facilitating PKR deposits and withdrawals and maintaining accurate financial records.
• Fraud prevention and security — detecting, investigating and preventing fraudulent transactions, money laundering, bonus abuse and other prohibited conduct.
• Responsible gambling compliance — monitoring gaming behaviour to identify potential problem gambling patterns and applying the responsible gambling tools you have activated.
• Customer support — responding to your queries, complaints and account requests through Live Chat, email and the Help Centre.
• Legal and regulatory compliance — meeting our obligations under applicable anti-money laundering, counter-terrorism financing and data retention laws.
• Platform improvement — analysing usage patterns to improve the design, performance and content of the Platform.
• Marketing communications — sending relevant promotional offers by email or in-Platform notification, where you have not opted out.

We do not use your personal data for automated decision-making that produces significant legal effects without human review, except where required by law or where you have explicitly consented.

8 Data Sharing & Disclosure

nn99 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:

• KYC and identity verification providers — to verify your identity and age as required under our compliance obligations.
• Payment processors — to facilitate your deposits and withdrawals. Payment providers operate under their own privacy policies and data security standards.
• Fraud detection and AML screening services — to identify and prevent financial crime and platform abuse.
• Analytics and platform performance providers — to help us understand how the Platform is used and identify areas for improvement.
• Legal and regulatory authorities — where we are under a legal obligation to disclose information, including in response to a valid court order, law enforcement request or regulatory authority requirement.
• Professional advisers — including lawyers, auditors and accountants, where necessary for the conduct of our business and bound by professional confidentiality obligations.

9 International Data Transfers

As an international platform, nn99 and some of its third-party service providers operate in jurisdictions outside Pakistan. Your personal data may therefore be transferred to, stored in or processed in countries outside Pakistan where data protection laws may differ from those in your home jurisdiction.

When transferring personal data internationally, nn99 implements appropriate safeguards including contractual data processing agreements that require recipient parties to protect your data to a standard materially equivalent to that described in this Policy. By using the Platform, you acknowledge and agree to such transfers as necessary for the operation of the service.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to remember certain information about your visit, making subsequent visits more efficient and the experience more personalised.

10.2 Types of Cookies We Use

10.3 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to remain logged in or maintain your display preferences.

11 Data Retention

nn99 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, and thereafter in accordance with applicable legal, regulatory, tax, accounting and audit requirements.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

12 Your Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by nn99:

To exercise any of the above rights, please contact our data protection team using the contact details in Section 16. We will respond to all valid requests within a reasonable timeframe, and in any event within 30 days of receipt. In certain circumstances — such as where complying with a request would conflict with our legal retention obligations — we may be unable to fully comply and will explain our reasons.

13 Children's Privacy

nn99 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 18, or the higher minimum age required by the operator's licence jurisdiction. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated Account.

If you have reason to believe that a minor has registered or is using an Account on this Platform, please contact our support team immediately using the details in Section 16.

14 Security Measures

nn99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Encryption: Sensitive data is encrypted in transit using TLS (Transport Layer Security) and at rest using industry-standard encryption algorithms.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based access permissions and multi-factor authentication for administrative systems.
• Security monitoring: Continuous monitoring of Platform systems for unusual activity, intrusion attempts and potential data breaches.
• Staff training: All staff with access to personal data receive regular data protection and security training.
• Vendor assessment: Third-party processors are assessed for data security compliance before being engaged and on a periodic basis thereafter.

Notwithstanding these measures, no electronic transmission or storage system is entirely secure. You play an important role in protecting your own data by keeping your Account credentials confidential and notifying us promptly of any suspected unauthorised access.

15 Policy Amendments

nn99 reserves the right to amend, update or replace this Privacy Policy at any time to reflect changes in applicable law, Platform operations or data processing practices. Material changes will be communicated to registered Users by a prominent notice on the Platform or by email to the registered address, at least seven (7) days before the revised Policy takes effect where practicable.

The "Effective Date" shown at the top of this page reflects the date on which the current version came into force. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must close your Account before the new version takes effect.

We recommend that you review this Policy periodically to remain informed of any changes to how your data is handled.

16 Contact Us

For any questions, requests or concerns relating to this Privacy Policy, the processing of your personal data, or to exercise any of the rights described in Section 12, please contact us through the following channels:

• Help Centre & FAQ: Visit our FAQ page for answers to common privacy and account queries.
• Live Chat: Available from within your Account dashboard for real-time support during operational hours.
• Support Email: [email protected] — for account-related data requests.
• Privacy / Data Enquiries: [email protected] — for formal data protection requests, including Subject Access Requests and erasure requests.

When submitting a data rights request, please include your registered username or email address, a clear description of your request, and (where relevant) a copy of a valid identity document so we can verify your identity before processing the request. We aim to acknowledge all requests within 5 working days and respond fully within 30 days.