g99com Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Who We Are

g99com is an online gaming and sports betting platform available at g99com.com, operated for the benefit of players across Pakistan. For the purposes of this Privacy Policy, g99com is the data controller responsible for the personal data of registered players and platform visitors. g99com is accessible in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar, and all other locations across Pakistan. Questions about this Privacy Policy may be directed to g99com's support team using the contact details in Section 13.

2 Personal Data We Collect

g99com collects the following categories of personal data from players and platform visitors:

2.1 Registration Data

• Full legal name as shown on your Pakistan CNIC (Computerised National Identity Card)
• Date of birth (for age verification — players must be 18 or over)
• Pakistan mobile number (primary contact and OTP verification channel)
• Username chosen at registration
• Password (stored in hashed, non-reversible form — never stored in plain text)

2.2 Identity Verification (KYC) Data

• CNIC number and scan or photograph of your CNIC document
• Proof of address where required for enhanced due diligence
• Selfie or photograph for biometric matching against CNIC where required
• Source of funds declaration for accounts exceeding specified PKR thresholds

2.3 Transaction Data

• Deposit amounts, dates, and Easypaisa / JazzCash / bank reference numbers
• Withdrawal amounts, dates, and recipient payment details
• Game wager history, bet amounts in PKR, and game session timestamps
• Bonus and promotion redemption records

2.4 Technical Data

• IP address and general geographic location (city-level, not GPS-precise)
• Device type, browser type, and operating system
• Session duration and navigation patterns within the g99com platform
• Cookie identifiers (see Section 9)

2.5 Communication Data

• Records of communications between you and g99com's support team
• Feedback, survey responses, and complaint records
• Marketing preference settings

3 How g99com Uses Your Personal Data

g99com processes your personal data for the following specific purposes:

4 Legal Basis for Processing

g99com processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to operate your account, process PKR transactions, and deliver the gaming services you have signed up for.
• Legal obligation: Processing required to comply with KYC, anti-money laundering, and responsible gaming obligations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and aggregated analytics — where these interests do not override your privacy rights.
• Consent: Processing for optional marketing communications, where you have provided explicit consent. You may withdraw marketing consent at any time from your account settings.

5 Data Sharing

g99com does not sell your personal data. We share your data only in the following circumstances and only with parties who are subject to appropriate data protection obligations:

• Payment providers: Easypaisa, JazzCash, HBL, UBL, MCB Bank, SadaPay, and Raast receive the minimum transaction data required to process your PKR deposits and withdrawals.
• KYC verification providers: g99com uses third-party identity verification services to authenticate CNIC documents. These providers are bound by strict confidentiality and data processing agreements.
• Game content providers: Game studios and live casino providers whose content appears on g99com receive anonymised or pseudonymised session and wagering data for fairness auditing purposes.
• Regulatory and law enforcement authorities: g99com will disclose personal data in response to lawful requests from competent authorities where required by applicable law — including disclosures required under anti-money laundering legislation.
• Professional advisors: Legal advisors, auditors, and technical security consultants who have signed confidentiality agreements may access limited personal data in the course of providing services to g99com.

6 PKR Transaction Privacy

All deposit and withdrawal transactions on g99com are denominated in Pakistani Rupees (PKR) and processed through Pakistan's domestic payment infrastructure — Easypaisa, JazzCash, and approved Pakistani bank transfer networks. Because g99com does not route PKR transactions through international payment gateways, your transaction data does not leave Pakistan's payment ecosystem in the normal course of business.

g99com retains PKR transaction records — including deposit amounts, withdrawal amounts, game wager values, and associated timestamps — for a minimum of five years from the date of the transaction, as required for anti-money laundering compliance. These records are stored securely and accessed only by authorised g99com personnel on a need-to-know basis or in response to lawful regulatory requests.

Your Easypaisa PIN, JazzCash account password, or internet banking credentials are never entered within the g99com platform and are never accessible to g99com at any point in the payment process.

7 Data Security

g99com implements the following technical and organisational measures to protect your personal data:

• TLS/SSL encryption: All data transmitted between your device and g99com's servers is encrypted using TLS 1.2 or higher. Older, insecure protocols are disabled.
• Encryption at rest: Sensitive data fields — including CNIC numbers, payment references, and identity documents — are encrypted at rest in g99com's secure database systems.
• Password hashing: Account passwords are stored using a one-way cryptographic hashing function. g99com's systems cannot reverse a stored password hash — if you forget your password, a reset is required; retrieval is not possible.
• Two-factor authentication: OTP-based two-factor authentication is used for login verification and withdrawal authorisation, reducing the risk of unauthorised account access.
• Access controls: Access to personal data within g99com's systems is restricted on a role-based, need-to-know basis. Personnel who do not require access to personal data for their role do not have it.
• Security monitoring: g99com monitors its systems continuously for anomalous access patterns, intrusion attempts, and data exfiltration indicators.
• Breach notification: In the event of a personal data breach that creates a material risk to affected individuals, g99com will notify affected players as promptly as practicable and take immediate remedial action.

8 Data Retention

g99com retains personal data for the following periods:

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

9 Cookies and Tracking Technologies

g99com uses cookies and similar technologies to operate and improve the platform. Cookies are small data files placed on your device when you visit g99com.com. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality. The cookies g99com uses fall into the following categories — see the full breakdown in the section below.

10 Your Data Rights

As a player in Pakistan whose personal data is processed by g99com, you hold the following rights in relation to your information. To exercise any of these rights, contact g99com's support team using the details in Section 13:

• Right to access: You may request a copy of the personal data g99com holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your g99com account.
• Right to erasure: You may request deletion of personal data that g99com no longer has a legal basis to retain. Note that certain data must be retained for the statutory periods described in Section 8 and cannot be deleted before those periods expire.
• Right to restrict processing: You may request that g99com temporarily suspend its processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to object: You may object to the processing of your personal data where g99com relies on legitimate interests as the legal basis, or where your data is used for direct marketing.
• Right to data portability: You may request a copy of the personal data you have provided to g99com in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time from your account settings without affecting any prior processing.

g99com will respond to data rights requests within 30 days. Complex requests may require up to 60 days with prior notification of the extension.

11 Children and Minors

g99com is strictly an 18+ platform. The collection and processing of personal data from individuals under the age of 18 is not permitted. g99com requires all players to confirm their age during registration and to complete KYC identity verification using CNIC details before any withdrawal is processed. Age verification is not optional — it is a mandatory step in the g99com account activation process. If g99com discovers that an account has been registered by or on behalf of a person under the age of 18, the account will be immediately closed, all deposits refunded to the original payment source where practicable, and all associated personal data deleted from g99com's systems within 30 days of discovery.

12 Policy Updates

g99com reserves the right to update this Privacy Policy at any time to reflect changes in its data practices, platform features, or applicable legal requirements. When material changes are made, g99com will publish the updated policy on g99com.com with a revised effective date, and will notify registered players via a platform notification or — for significant changes — a message to your registered Pakistan mobile number. Continued use of the g99com platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept a material update to this policy, you may request account closure as described in g99com's Terms & Conditions.

13 Contact — Data Enquiries

For any questions, requests, or complaints relating to g99com's handling of your personal data — including the exercise of any rights described in Section 10 — please contact g99com's support team via the live chat function available inside your g99com account, or by email at the address below (displayed as plain text, not a clickable link):

support@g99com.com

g99com's support team is available 24 hours a day, 7 days a week. Data rights requests and privacy complaints are escalated to g99com's designated data handling team and are treated with priority.