po99 Privacy Policy — How We Protect Your Data

1.Introduction & Scope

1.1 This Privacy Policy ("Policy") is published by po99 ("po99", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal data relating to all individuals ("you", "your", "Player") who access or use the po99 online gaming platform available at po99.bio and all associated services, mobile interfaces, and communications channels.

1.2 po99 is committed to protecting the privacy and personal data of all registered players, including the large and growing community of Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. This Policy is written in plain, accessible English and reflects our obligations under internationally recognised data protection principles.

1.3 By registering an account, accessing the po99 platform, or interacting with any po99 service, you acknowledge that you have read, understood, and accepted the practices described in this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the po99 platform immediately.

1.4 This Policy should be read in conjunction with po99's Terms & Conditions and Responsible Gaming policy, all of which together govern your relationship with the po99 platform.

2.Data Controller

2.1 For the purposes of this Privacy Policy, po99 acts as the data controller in respect of personal data collected from players who register and use the po99 platform. As data controller, po99 determines the purposes and means by which personal data is processed.

2.2 po99 operates under international gaming licence standards and processes personal data in accordance with those regulatory frameworks, which include data protection requirements broadly consistent with internationally recognised privacy principles.

2.3 Where po99 engages third-party service providers to process personal data on its behalf — for example, payment processing partners handling JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or USDT TRC20 transactions — those providers act as data processors and are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide to po99.

2.4 For all data protection queries, requests, or complaints, you may contact po99's designated data protection contact via email at support@po99.bio. Please include "Data Privacy Request" in the subject line of your email to ensure prompt routing to the appropriate team.

3.Data We Collect

3.1 po99 collects personal data through several means: directly from you when you register an account or interact with our services; automatically as you use the platform; and, in limited circumstances, from third-party verification providers.

3.2 Registration & Account Data

When you create a po99 account, we collect the following information:

• Full legal name (as it appears on your CNIC, passport, or driver's licence);
• Date of birth (for age verification — 21+ requirement strictly enforced);
• Email address and mobile phone number;
• Residential address (city, province, Pakistan);
• Username and encrypted password;
• Preferred currency (PKR) and language (English).

3.3 Identity Verification (KYC) Data

To comply with our obligations under international gaming licence standards and anti-money laundering requirements, po99 may request:

• A copy of your National Identity Card (CNIC), passport, or driver's licence;
• A selfie or live photograph for facial match verification;
• Proof of address (utility bill, bank statement dated within 3 months);
• Source of funds documentation where deposits exceed defined thresholds.

3.4 Financial & Transaction Data

All financial interactions on po99 generate transaction records including:

3.5 Technical & Usage Data

po99 automatically collects certain technical data when you access the platform, including:

• IP address and approximate geographic location (city/region level);
• Device type, operating system, and browser version;
• Session timestamps, pages visited, and in-platform navigation patterns;
• Referral source (how you first arrived at po99.bio).

4.How We Use Your Data

4.1 po99 processes your personal data strictly for the following purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent.

• Account creation and management — to register, maintain, and administer your po99 account throughout its lifecycle;
• Identity and age verification — to confirm that you are 21 years of age or older and that your identity matches the information provided at registration, as required under our KYC obligations;
• Payment processing — to process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT TRC20, and to administer PKR withdrawals to your registered payment methods;
• Platform operation and gaming services — to deliver cricket betting, live casino, slot games, fishing games, crash games, and all other po99 platform features;
• Fraud detection and prevention — to identify, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct;
• Customer support — to respond to your queries, complaints, and requests submitted via Live Chat (08:00–02:00 PKT) or email;
• Bonus and promotion administration — to track wagering requirements, validate bonus eligibility, and administer loyalty rewards;
• Responsible gaming compliance — to monitor gameplay patterns, enforce self-exclusion requests, apply deposit and loss limits, and fulfil our obligations under our gaming licence's responsible gaming requirements;
• Legal and regulatory compliance — to comply with anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable legal obligations;
• Platform improvement — to analyse aggregated, anonymised usage data to improve the po99 user experience for Pakistani players.

4.2 po99 does not use your personal data for automated profiling that produces legal or similarly significant effects without providing you with the ability to request human review of any such decision.

5.Legal Basis for Processing

5.1 po99 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity — processing required to fulfil our contractual obligations to you under the po99 Terms & Conditions, including account management, payment processing, and gaming service delivery;
• Legal obligation — processing necessary to comply with applicable legal and regulatory requirements, including KYC/AML obligations imposed by our gaming licence conditions;
• Legitimate interests — processing carried out for po99's legitimate business interests where those interests are not overridden by your data protection rights, including fraud prevention, platform security, and service improvement;
• Consent — where po99 sends you optional marketing communications regarding promotions, bonuses, or new features, we do so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting support or using the unsubscribe mechanism in any marketing email.

6.Data Sharing & Disclosure

6.1 po99 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes under any circumstances.

6.2 Authorised Third-Party Processors. po99 may share your personal data with carefully selected third-party service providers who assist in delivering the po99 platform, including but not limited to:

• Payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT TRC20 gateway providers) — for the purpose of processing your financial transactions only;
• KYC and identity verification providers — who assist in verifying your CNIC, passport, or other identity documents against official databases;
• Game content providers — third-party certified studios whose RNG-based slot and casino games are made available through the po99 platform;
• Platform hosting and cloud infrastructure providers — who store and process data on po99's behalf under contractual data processing agreements;
• Fraud prevention and cybersecurity partners — who assist in protecting the platform and player accounts from unauthorised access and financial crime.

6.3 Regulatory & Law Enforcement Disclosure. po99 may disclose your personal data to regulators, licensing authorities, law enforcement agencies, or courts where we are required to do so by law or where disclosure is necessary to protect the safety of players or the integrity of the platform. po99 will notify you of any such disclosure where legally permitted to do so.

6.4 Business Transfers. In the event of a merger, acquisition, or transfer of all or substantially all of po99's assets, your personal data may be transferred as part of that transaction. po99 will notify you in advance of any such transfer and the applicable privacy policy of the acquiring entity.

7.Cookies & Tracking Technologies

7.1 po99 uses cookies and similar tracking technologies (local storage, session tokens) on the po99.bio platform. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot directly access other data on your device.

7.2 po99 uses the following categories of cookies:

7.3 po99 does not use advertising or cross-site tracking cookies. We do not share cookie data with advertising networks or social media platforms.

7.4 You may manage or disable optional cookies at any time through your browser's cookie settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the po99 platform.

8.Data Retention

8.1 po99 retains your personal data for as long as your account remains active and for a further period as required by our legal and regulatory obligations. The following retention periods apply:

• Account and registration data — retained for the duration of your account plus a minimum of 5 years following account closure, in line with AML and gaming licence record-keeping requirements;
• KYC documents (CNIC, passport, proof of address) — retained for 5 years from the date of submission or account closure, whichever is later;
• Transaction and betting records — retained for a minimum of 5 years for financial compliance and audit purposes;
• Customer support communications — retained for 2 years from the date of the last interaction;
• Technical and session data (IP logs, device data) — retained for 12 months for fraud detection and security purposes;
• Marketing consent records — retained for the duration of your consent or until you withdraw it, plus 1 year for audit evidence purposes.

8.2 Upon the expiry of the applicable retention period, po99 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.

9.Your Data Rights

9.1 po99 recognises and respects the following data subject rights in respect of your personal information held by us:

• Right of Access — you may request a copy of the personal data po99 holds about you, free of charge, within 30 days of your request;
• Right to Rectification — you may request correction of inaccurate or incomplete personal data held by po99. Minor corrections (e.g., address updates) can be made directly within your Account settings;
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to po99's legal and regulatory retention obligations;
• Right to Data Portability — you may request that po99 provide your personal data in a structured, commonly used, machine-readable format for transfer to another provider where technically feasible;
• Right to Restrict Processing — you may request that po99 limit the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data;
• Right to Object — you may object to po99's processing of your data where that processing is based on legitimate interests, including direct marketing communications;
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the above rights, please contact po99's support team by email at support@po99.bio with the subject line "Data Rights Request". Please include your Account username and a description of the right you wish to exercise. po99 will respond within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you accordingly.

10.Security Measures

10.1 po99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• TLS Encryption in Transit — all data transmitted between your browser or device and po99's servers is encrypted using current TLS (Transport Layer Security) protocols;
• AES-256 Encryption at Rest — sensitive stored data including KYC documents, payment records, and identity information is encrypted at rest using AES-256 standard encryption;
• Access Controls — personal data is accessible only to authorised po99 personnel whose job function requires access. All access is logged and subject to regular audit;
• Two-Factor Authentication — po99 offers two-factor authentication (2FA) for Player accounts as an additional layer of login security, and strongly recommends its use;
• Penetration Testing — po99's platform undergoes regular security assessments and penetration testing by qualified cybersecurity professionals;
• Incident Response Procedures — po99 maintains a documented data breach response plan with defined roles, escalation paths, and player notification obligations.

10.2 Notwithstanding these measures, no internet-based platform can guarantee absolute security. po99 strongly recommends that players use a strong, unique password for their po99 account, enable 2FA, and report any suspected unauthorised access to support immediately.

11.International Data Transfers

11.1 As an internationally licensed gaming platform, po99 may process or store your personal data on servers or through service providers located outside of Pakistan. Where such transfers occur, po99 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

11.2 Appropriate safeguards for international transfers employed by po99 include: contractual data processing agreements incorporating standard data protection clauses; data processing only by providers operating in jurisdictions with recognised data protection frameworks; and ongoing monitoring of third-party provider compliance.

11.3 For further information about the specific safeguards in place for any international transfer of your personal data, please contact po99 at support@po99.bio.

12.Minors & Age Protection

12.1 The po99 platform is strictly for individuals aged 21 years or older. po99 does not knowingly collect personal data from anyone under the age of 21. The collection of personal data from minors is explicitly prohibited.

12.2 If po99 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted promptly, the associated Account will be closed, and any deposits made will be returned where practicable in accordance with our underage gambling procedures.

12.3 If you are a parent or guardian and believe that a minor has registered an account on po99 using your or their personal data, please contact us immediately at support@po99.bio with the subject line "Underage Account Report". We will investigate and respond within 24 hours.

13.Policy Updates

13.1 po99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulations, or platform features. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.

13.2 Where a proposed amendment materially affects your rights or the way we process your personal data, po99 will provide at least 14 days' advance notice via email to your registered address before the updated Policy takes effect.

13.3 Minor amendments — such as clarifications, typographical corrections, or updates to reflect new payment methods (e.g., additional PKR payment options) — may be made without prior notice. Your continued use of the po99 platform following the posting of an updated Policy constitutes your acceptance of the revised terms.

13.4 Archived versions of prior Privacy Policies are available upon written request to our support team.

14.Contact Us

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way po99 handles your personal data, please contact us through one of the following channels:

• Email: support@po99.bio — please include "Privacy Policy Query" or "Data Rights Request" in the subject line;
• Live Chat: Available daily 08:00–02:00 PKT via the po99 platform — for general queries and immediate assistance;
• Response target: po99 aims to respond to all data protection-related email queries within 2 hours during business hours, and within 30 days for formal data rights requests.