par99 Privacy Policy

Who We Are

par99 operates the online gaming platform accessible at par99.net. par99 holds an international gaming licence and operates the platform in compliance with the requirements of that licence, including obligations relating to player data protection, anti-money laundering, and responsible gaming.

For the purposes of this Privacy Policy, par99 is the data controller in respect of personal data collected from players and visitors to par99.net. All data protection enquiries, subject access requests, and complaints should be directed to the par99 data team at [email protected].

par99 serves English-speaking players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, and beyond. The platform is designed to be used by Pakistani adults aged 21 and over. This Privacy Policy reflects the context of our Pakistani player base, including our use of PKR-denominated transactions and local payment processors such as JazzCash and EasyPaisa.

Scope of This Policy

This Privacy Policy applies to all personal data collected and processed by par99 in connection with:

• Registration and maintenance of a par99 player account;
• Use of any par99 product or service, including the sportsbook, live casino, slots, cashier, and promotions;
• Communications between you and par99 via live chat, email, or any other channel;
• Your visits to par99.net, including pages visited, actions taken, and device and connection data collected automatically.

This Policy should be read alongside the par99 Terms & Conditions and, where applicable, the par99 Responsible Gaming policy, both of which contain additional obligations and context relevant to how par99 handles player information.

This Policy does not apply to third-party websites or services that may be linked from par99.net. par99 is not responsible for the privacy practices of any third-party site, and you should review the privacy policies of those sites independently before providing any personal data to them.

Personal Data We Collect

par99 collects the following categories of personal data from players and platform visitors:

par99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by responsible gaming obligations — for example, where a player discloses a gambling-related health concern in the context of a self-exclusion request. Such disclosures are handled with the highest level of confidentiality.

How We Collect Your Data

par99 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion;
• Automatically — through cookies, server logs, and analytics tools when you access par99.net, regardless of whether you are logged in;
• From third-party service providers — identity verification agencies, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa, Mastercard), and fraud prevention services may provide us with data about you in the course of processing your transactions or verifying your identity;
• From publicly available sources — where required for fraud prevention or AML compliance purposes, par99 may consult publicly available registers, sanctions lists, or adverse media databases.

Why We Use Your Data

par99 uses the personal data it collects for the following purposes:

• Account management: to create, maintain, and manage your par99 account, including processing deposits, withdrawals, and bonus eligibility;
• Identity and age verification: to confirm that you are who you say you are and that you are aged 21 or over, as required under par99's international gaming licence;
• Anti-money laundering and fraud prevention: to detect, investigate, and prevent financial crime, including money laundering, fraud, and misuse of the platform;
• Platform operation and improvement: to deliver gaming and betting services reliably, diagnose technical issues, and improve the par99 platform based on usage patterns;
• Customer support: to respond to your queries, complaints, and requests efficiently and accurately;
• Responsible gaming: to monitor gaming behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our obligations under responsible gaming standards;
• Regulatory compliance: to meet our obligations under the terms of par99's international gaming licence, including record-keeping, reporting, and audit requirements;
• Personalisation: to tailor promotional offers and platform experience to your preferences and gaming history, where you have not opted out of such communications;
• Security: to protect the par99 platform and its players from unauthorised access, abuse, and malicious activity.

par99 does not use your personal data to build profiles for sale to third-party advertisers, and we do not engage in automated decision-making that produces legal or similarly significant effects on you without human review.

Legal Basis for Processing

par99 processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform the contract between you and par99 — including account management, payment processing, and bet settlement;
• Legal obligation: processing required to comply with par99's obligations under its gaming licence, anti-money laundering regulations, and applicable data protection law — including KYC verification and transaction monitoring;
• Legitimate interests: processing carried out for par99's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and improving our services;
• Consent: where par99 relies on your consent for processing — in particular for marketing communications — you may withdraw that consent at any time by contacting support or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Data Sharing & Third Parties

par99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. par99 shares personal data only in the following circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These processors operate under their own privacy and security frameworks and are independently regulated;
• Identity verification providers: par99 uses third-party KYC services to verify the identity and age of players. These providers receive copies of your identity documents and return a verification result to par99. They are contractually restricted from using your data for any other purpose;
• Fraud prevention and AML services: par99 may share transaction and account data with fraud detection and anti-money laundering screening services, including sanctions list databases, where required under our licence obligations;
• Gaming software suppliers: the providers of casino games, live dealer platforms, sportsbook data feeds, and other integrated services may receive gameplay and session data necessary to deliver those services — they do not receive your identity or financial data beyond what is technically required;
• Customer support platforms: par99's 24/7 live chat and support ticket infrastructure is operated with third-party tooling that processes communication records in the course of support delivery;
• Regulatory authorities: par99 may be required to disclose player data to its licensing authority, law enforcement agencies, or other competent authorities in response to a lawful request or in fulfilment of our regulatory obligations. par99 will not notify you of such a disclosure where prohibited from doing so by law.

All third-party service providers engaged by par99 are subject to contractual data processing agreements that restrict how they may use your personal data and require them to implement appropriate technical and organisational security measures.

Cookies & Tracking Technologies

par99 uses cookies and similar tracking technologies on par99.net to support the operation of the platform and to collect the technical and usage data described in Section 3. The following categories of cookies are used:

• Essential cookies: strictly necessary for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core platform functionality;
• Functional cookies: remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more consistent experience across sessions;
• Analytics cookies: collect anonymised or pseudonymised data about how visitors use par99.net — such as pages visited and session duration — to help par99 improve the platform. These do not identify you personally;
• Fraud prevention cookies: help par99 detect and prevent suspicious activity, including account takeover attempts and bot traffic, by analysing device fingerprint patterns across sessions.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing core par99 services, but may affect some functional or personalisation features. As par99 does not use third-party advertising cookies, disabling cookies does not affect your exposure to any external advertising network.

Data Retention

par99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by our licensing and legal obligations:

• Account and transaction records: retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later, in compliance with AML record-keeping requirements under our gaming licence;
• KYC and identity verification documents: retained for a minimum of 5 years following the end of the business relationship;
• Support and communication records: retained for 3 years from the date of the communication, or longer if the communication relates to an unresolved dispute or regulatory matter;
• Technical logs and session data: retained for up to 13 months from the date of collection for security and fraud prevention purposes;
• Self-exclusion records: retained indefinitely to prevent re-registration by self-excluded players — this is a responsible gaming obligation and not something par99 can waive at a player's request.

Upon the expiry of applicable retention periods, par99 will securely delete or anonymise personal data in accordance with our internal data lifecycle procedures.

Data Security

par99 implements the following technical and organisational security measures to protect your personal data:

• Industry-standard 256-bit SSL/TLS encryption on all data in transit between your device and par99 servers;
• Encryption at rest for stored personal data and financial records;
• Role-based access controls limiting staff access to personal data to those with a documented operational need;
• Regular security assessments and penetration testing of the par99 platform and supporting infrastructure;
• Multi-factor authentication requirements for staff accessing systems that process player personal data;
• Formal data breach response procedures, including notification obligations to relevant authorities and affected players where required by applicable law.

Despite these measures, no internet-based platform can guarantee absolute security. par99 strongly encourages you to use a strong, unique password for your par99 account, to enable any available two-factor authentication, and to contact support immediately if you suspect any unauthorised activity on your account.

Your Data Rights

Subject to applicable data protection law and the limitations of our licensing obligations, you hold the following rights in respect of the personal data par99 holds about you:

• Right of access: you may request a copy of the personal data par99 holds about you (a Subject Access Request). par99 will respond within 30 days of receipt of a valid request;
• Right to rectification: you may request correction of inaccurate or incomplete personal data. Some corrections — such as changes to your registered name — may require supporting documentation;
• Right to erasure: you may request deletion of your personal data where there is no longer a legitimate basis for par99 to retain it. Note that par99 cannot erase data that we are legally required to retain under our gaming licence or AML obligations;
• Right to restriction: you may request that par99 restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved;
• Right to data portability: you may request that par99 provides your personal data in a structured, machine-readable format where the processing is based on your consent or contractual necessity;
• Right to object: you may object to processing based on legitimate interests or carried out for direct marketing purposes. par99 will cease processing for direct marketing immediately upon receipt of a valid objection;
• Right to withdraw consent: where par99 relies on consent for any processing activity, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact par99 at [email protected] with the subject line "Data Rights Request" and full details of your request. par99 may request proof of identity before processing any data rights request to ensure we do not disclose personal data to an unauthorised third party.

Children & Minors Under 21

The par99 platform is strictly for adults aged 21 and over. par99 does not knowingly collect personal data from individuals under the age of 21. If par99 discovers or has reason to believe that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be reviewed, and any real-money balance will be returned to the verified payment source after investigation.

If you are a parent or guardian and have reason to believe that a minor in your care has registered a par99 account, please contact us immediately at [email protected]. par99 takes underage gambling extremely seriously and will act promptly on any such report.

par99 uses third-party age verification services as part of the KYC process to help prevent underage access. However, no verification system is entirely infallible, which is why we also ask parents and guardians to make use of parental control software and to monitor their children's online activity.

International Data Transfers

par99 is an internationally licensed platform. Some of the third-party service providers engaged by par99 — including identity verification agencies, gaming software suppliers, and platform infrastructure providers — may process your personal data in jurisdictions outside Pakistan.

Where such international transfers occur, par99 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements with standard data protection clauses;
• Transfer only to jurisdictions that provide an adequate level of data protection as assessed by par99 in the context of our licensing requirements;
• Transfer limited strictly to the data necessary for the specific service being provided by the third party.

By registering a par99 account and accepting these terms, you acknowledge that your personal data may be transferred, stored, and processed in jurisdictions outside Pakistan, subject to the safeguards described above.

Changes to This Privacy Policy

par99 reserves the right to update this Privacy Policy at any time. Where changes are material — for example, where par99 begins processing personal data for a new purpose, or where we engage a new category of third-party processor — par99 will notify registered players by email or via a prominent notice on the par99 platform prior to the change taking effect.

The effective date shown at the top of this document reflects the most recent version in force. Your continued use of par99 following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated Policy, you should cease using par99 and request voluntary account closure.

par99 recommends reviewing this Privacy Policy periodically to stay informed of how we handle your personal data.

Contact & Complaints

For all data protection enquiries, subject access requests, or privacy-related complaints, please contact par99 using the following details:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week via the par99 platform
• Response Time: par99 aims to respond to all privacy-related enquiries within 2 business hours and to resolve formal data rights requests within 30 calendar days

If you are not satisfied with par99's response to a privacy complaint, you may escalate the matter to the data protection supervisory authority under par99's licensing jurisdiction, or to any other competent authority with jurisdiction over your personal data rights.

par99 takes all privacy complaints seriously and commits to handling them fairly, transparently, and within the timeframes described above.