ba99 Privacy Policy

The data controller responsible for your personal information collected through ba99.bar is ba99, the operator of the ba99 online casino and sports betting platform. When this Privacy Policy refers to "ba99", "we", "us", or "our", it means the ba99 platform operator acting as data controller in respect of your personal data.

If you have any questions or concerns about how ba99 handles your personal data, you can contact our dedicated data privacy support team at any time:

Email: [email protected]
Support Hours: 24 hours a day, 7 days a week
Languages: English and Urdu

ba99 collects personal information from you in several ways: directly when you register or interact with the platform, automatically when you browse or play, and occasionally from third-party verification providers during the KYC process. The categories of personal data ba99 may collect and hold are set out below.

ba99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless it is directly relevant to a responsible gaming matter and provided voluntarily by the player.

ba99 uses the personal data we collect for the following purposes. Each purpose is linked to a lawful basis, which is set out in Section 4 below.

• Account Registration & Administration: Creating and managing your ba99 account, verifying your identity, processing login credentials, and maintaining your account preferences and settings.
• Payment Processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, USDT TRC20, and Retail Cash. Your financial data is shared with the relevant payment provider solely to execute your requested transaction.
• KYC Verification & Fraud Prevention: Verifying that you meet ba99's eligibility requirements (including the 21+ age requirement), detecting and preventing fraudulent activity, money laundering, and other financial crimes, in compliance with anti-money-laundering obligations.
• Game Delivery & Platform Operation: Ensuring the games, sports betting markets, and all other ba99 services function correctly for your device and connection, including personalising your experience based on your game history and preferences.
• Responsible Gaming Monitoring: Monitoring your account activity to identify indicators of problem gambling behaviour, applying limits you have set, and proactively reaching out where ba99's responsible gaming algorithms flag a concern.
• Customer Support: Responding to your queries, complaints, and requests via live chat, email, and any other support channel you use to contact ba99.
• Legal & Regulatory Compliance: Meeting ba99's obligations under its international gaming licence, anti-money-laundering regulations, and any applicable data protection requirements.
• Marketing Communications (with consent only): Sending promotional emails about ba99 bonuses, PSL season offers, new game releases, and other relevant offers — but only if you have explicitly opted in to marketing communications during registration or via your account settings.
• Platform Security & Analytics: Monitoring platform usage patterns, detecting technical errors, preventing abuse of systems, and improving the overall ba99 user experience over time.

ba99 processes your personal data on one or more of the following legal grounds depending on the specific purpose of processing:

• Contractual Necessity: The majority of ba99's data processing — account creation, payment processing, game delivery, and customer support — is necessary to perform the contract between ba99 and you as a registered player. Without this processing, ba99 cannot provide its services to you.
• Legal Obligation: KYC verification, anti-money-laundering monitoring, and certain record-keeping activities are required by the regulations governing ba99's international gaming licence. ba99 is legally obligated to perform this processing regardless of player consent.
• Legitimate Interests: ba99 processes technical and behavioural data for platform security, fraud prevention, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only where you have given clear, specific, and freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ba99 shares your personal data only with third parties where it is necessary for the lawful operation of the platform. ba99 does not sell personal data under any circumstances. The categories of third-party recipients are as follows:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and any other payment provider selected by you to process a transaction. Data shared is limited to the minimum required to execute your payment.
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm your age, identity, and document authenticity during the KYC process. These providers are bound by strict data processing agreements with ba99.
• Game Software Providers: The studios and suppliers whose games are available on ba99 may receive anonymised session data necessary to deliver and certify their games. Where possible, ba99 uses aggregated or pseudonymised data rather than personally identifiable information with game providers.
• Regulatory & Law Enforcement Authorities: ba99 will disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where legally required to do so, or where ba99 has a good-faith belief that disclosure is necessary to prevent criminal activity or protect the safety of any person.
• IT & Cloud Infrastructure Providers: ba99's hosting, database, and security infrastructure providers who process data solely on ba99's instructions and are contractually prohibited from using ba99 player data for their own purposes.

All third-party data processors engaged by ba99 are required to implement appropriate technical and organisational measures to protect your personal data and are permitted to use it only for the specific purpose for which it was shared.

ba99 uses cookies and similar tracking technologies to operate the platform effectively and improve the player experience. A cookie is a small text file placed on your device by ba99's servers when you visit ba99.bar. Cookies allow ba99 to recognise your device, maintain your login session, and understand how the platform is being used.

ba99 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the ba99 platform to function. They maintain your login session, store your currency preference (PKR), remember items in your active game session, and enable security features. These cookies cannot be disabled without breaking the ba99 service.
• Functional Cookies: These cookies remember your preferences such as language settings, responsible gaming limits you have set, and display preferences to provide a more personalised experience on ba99.
• Analytics Cookies: ba99 uses analytics tools to understand how players navigate the platform — which games are most popular, where technical errors occur, and how the registration flow can be improved. These cookies collect data in an aggregated, anonymised form wherever possible.
• Marketing Cookies (Consent Required): If you have opted in to marketing communications, ba99 may use cookies to understand which promotions and game categories interest you most, in order to send more relevant offers. These cookies are only active where you have provided explicit consent.

ba99 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applicable to ba99 player data are as follows:

• Active Account Data: Retained for the full duration of your ba99 account being active, plus a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification or the date of account closure, whichever is later, as required under applicable financial regulations.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of five (5) years following the date of the transaction for regulatory compliance and dispute resolution purposes.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for a period of two (2) years from the date of the last interaction, after which they are securely deleted unless required for an ongoing dispute or investigation.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained indefinitely to demonstrate compliance with your stated preferences, even if the underlying marketing data is deleted.
• Technical & Analytics Data: Server log data and anonymised analytics data are typically retained for periods of between three (3) months and twelve (12) months depending on the specific data type and its operational necessity.

Upon expiry of the applicable retention period, ba99 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical purposes.

ba99 takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction.

• Transport Encryption: All data transmitted between your browser or mobile device and ba99's servers is encrypted using TLS 1.3, the industry standard for secure web communications. ba99.bar operates exclusively over HTTPS.
• Storage Encryption: Personal data, financial records, and identity documents stored on ba99's servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to ba99's systems and player data is restricted to authorised personnel only, on a strict need-to-know basis. All ba99 staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: ba99 offers free two-factor authentication (2FA) via SMS OTP for all registered players. Enabling 2FA significantly reduces the risk of unauthorised account access. Pakistani players can activate 2FA via their account security settings after the ba99 Login.
• Penetration Testing & Security Audits: ba99's systems and infrastructure are subject to regular independent security assessments to identify and address vulnerabilities proactively.
• Incident Response: In the event of a data security incident that poses a risk to your personal data, ba99 will take immediate steps to contain the incident, assess the impact, and notify affected players and relevant authorities as required by applicable law.

As a ba99 player, you have the following rights in relation to your personal data. ba99 is committed to honouring these rights promptly and without undue obstacle.

ba99 is strictly intended for adults aged 21 years and above. ba99 does not knowingly collect personal data from any individual under the age of 21, and will not accept a registration from a person who is under 21 years old under any circumstances.

ba99 uses date-of-birth verification during registration and KYC document checks to confirm that all registered players meet the age requirement. Where ba99 discovers or has reasonable grounds to believe that a player is under 21, the account will be immediately suspended, all pending transactions will be frozen pending investigation, and any funds will be handled in accordance with applicable regulatory guidance.

If you are a parent or guardian and believe that a minor in your care has registered on ba99, please contact [email protected] immediately. ba99 treats all reports of underage access as a priority matter and will act on them without delay.

ba99 operates under international gaming licensing and its infrastructure is hosted across multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries other than Pakistan. ba99 takes appropriate steps to ensure that all international transfers of personal data are carried out with adequate safeguards in place to protect your information.

Where personal data is transferred to third-party processors located outside Pakistan, ba99 ensures that such transfers are governed by contractual data protection clauses that require the recipient to implement a standard of data protection at least equivalent to that applied by ba99 under this Privacy Policy.

In all cases, ba99's data sharing and transfer practices are designed to minimise the amount of personally identifiable information transferred internationally, using pseudonymised or aggregated data wherever technically feasible without compromising the operational purpose of the transfer.

ba99 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, PSL promotions, new game releases, and other marketing content if you have explicitly opted in to receiving such communications. This consent is requested during the registration process and can be updated at any time via your ba99 account notification settings.

If you no longer wish to receive marketing communications from ba99, you can:

• Unsubscribe via the one-click link included in every ba99 marketing email.
• Update your notification preferences directly in your ba99 account settings.
• Contact ba99 support at [email protected] and request immediate removal from all marketing lists.

Opting out of marketing communications will not affect your ability to use ba99 or receive transactional messages about your account, deposits, withdrawals, and security alerts — these communications are a necessary part of your ba99 account and cannot be disabled while your account is active.

ba99.bar may contain links to third-party content or services — for example, game providers whose software is integrated into the ba99 platform. This Privacy Policy applies solely to personal data collected and processed by ba99 as the platform operator. ba99 is not responsible for the privacy practices of third-party game studios, payment providers, or any other external services.

When you interact directly with a third-party service integrated into ba99 — such as a live dealer studio's chat function — the data processed through that direct interaction may be governed by the third party's own privacy policy in addition to ba99's. ba99 recommends that you review the privacy policies of any third-party services you interact with.

ba99 exercises reasonable due diligence in selecting third-party partners and requires all data processors engaged by ba99 to maintain data protection standards consistent with ba99's own obligations. However, ba99 cannot be held liable for the independent data practices of third parties acting outside the scope of their data processing agreement with ba99.

ba99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our services. The effective date at the top of this document will be updated whenever a material change is made.

Where changes are material — meaning they affect how ba99 uses your personal data in a way that could significantly impact your rights — ba99 will notify registered players via email and via an in-platform notice at least fourteen (14) days before the updated policy takes effect. For minor or administrative changes, the updated policy will be published on this page without individual notification.

Continued use of ba99 after the effective date of a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should stop using ba99 and contact support to close your account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how ba99 has handled your personal information, please contact the ba99 privacy support team:

Email: [email protected]
Availability: 24/7, including weekends and public holidays
Response Time: Data rights requests acknowledged within 72 hours; full response within 30 days
Languages: English and Urdu

ba99 is committed to resolving all privacy concerns fairly and transparently. If you submit a complaint and are not satisfied with ba99's response, you may have the right to escalate your complaint to the relevant data protection authority or gaming regulator under whose jurisdiction ba99 operates.