Privacy

Privacy Policy – by99 Pakistan Gaming Platform

Your data belongs to you. This Privacy Policy explains clearly what information by99 collects, how it is used, who can access it and what choices you have — all in plain language written for Pakistani players.

Last Updated: June 2026

By registering an account or continuing to use by99, you confirm that you have read and understood this Privacy Policy. If you have questions about how your data is handled, contact our support team at any time.

1 Overview

by99 operates an online gaming and sports betting platform for players based in Pakistan. This Privacy Policy describes how by99 collects, stores, uses and protects personal data submitted by users of the platform — including data provided during registration, during gameplay, through transactions and through any interaction with our support team.

by99 takes the privacy of its players seriously. The platform is designed to collect only the information that is genuinely needed to operate accounts, process PKR payments through services like JazzCash, Easypaisa and Raast, and provide a secure, functional gaming environment. We do not sell personal data to third parties for advertising purposes, and we do not share data beyond what is described in this policy.

This policy applies to all users of the by99 website and mobile platform, regardless of whether you are a registered player or a visitor browsing without an account. If you are a registered player, additional data-handling provisions apply as described in the relevant sections below.

by99 does not sell, rent or trade your personal information to third-party advertisers or data brokers. Your data is used solely to operate your account and improve your experience on the platform.

2 Data We Collect

by99 collects personal data in several ways — directly from you when you register or interact with the platform, automatically through your device and browser, and from third parties such as payment processors when you make a transaction.

Registration Data

When you create an account on by99, you are required to provide:

  • Your full legal name
  • Date of birth (to confirm you are 18 years of age or older)
  • A valid Pakistani mobile number
  • A username and password of your choice

Verification Data

Before processing your first withdrawal, or if flagged for identity verification, by99 may ask you to provide:

  • A copy of your National Identity Card (CNIC)
  • A selfie or photo for liveness verification
  • Proof of your registered payment method (e.g. screenshot of your JazzCash or Easypaisa account)

Transaction Data

Every deposit, withdrawal, bonus claim and bet placed on by99 generates a transaction record. This includes the amount in PKR, the method used (JazzCash, Easypaisa, Raast, bank transfer etc.), timestamp and account reference numbers.

Usage and Device Data

by99 automatically collects the following when you use the platform:

  • IP address and approximate geographic location
  • Device type, operating system and browser version
  • Session timestamps (login time, session duration, logout time)
  • Pages visited, games played and features interacted with
  • Referral source (how you arrived at the by99 platform)

Communication Data

If you contact the by99 support team — by email or through any chat system — the contents of those communications are recorded and stored. This helps us maintain consistency in support responses and resolve disputes accurately.

You are responsible for ensuring the accuracy of the information you provide. Providing false registration data — including a false name, date of birth or CNIC — is a breach of the by99 Terms and Conditions and may result in account closure and forfeiture of funds.

3 How We Use Your Data

by99 uses your personal data only for the purposes listed below. We do not use your data for purposes beyond those stated here without first updating this policy and notifying you.

Purpose Data Used
Account creation and management Name, mobile number, username, password
Age and identity verification Date of birth, CNIC, selfie
Processing PKR deposits and withdrawals Payment method details, transaction records
Fraud detection and prevention IP address, device data, transaction patterns
Providing customer support Account data, communication records
Administering bonuses and VIP rewards Bet history, deposit history, account tier
Improving platform performance Usage data, session data, device data
Sending account notifications Mobile number, communication preferences

by99 does not use your data to build advertising profiles, sell leads or engage in any form of data brokering. Platform notifications related to bonuses, promotions or account status are operational in nature — they are not third-party advertising.

4 Payment Data and PKR Transactions

All financial transactions on by99 are conducted in Pakistani Rupees (PKR) through domestic payment channels. by99 supports JazzCash, Easypaisa, Raast, bank transfers and other payment methods available to Pakistani users.

What Payment Data by99 Holds

by99 stores transaction references, deposit and withdrawal amounts, payment method identifiers (e .g. JazzCash account number last digits) and timestamps. Full payment credentials such as complete mobile wallet PINs, card numbers or bank account details are never stored directly on by99 servers — these are handled by the respective payment processors.

Third-Party Payment Processors

When you initiate a deposit or withdrawal via JazzCash, Easypaisa or Raast, the transaction is processed by that service's own infrastructure. by99 receives a confirmation and reference number from the processor. The privacy practices of those payment services are governed by their own policies, which are separate from this one.

Transaction Records

A complete record of your PKR deposit and withdrawal history is maintained in your account and is accessible to you at any time from your account dashboard. These records are also retained by by99 for internal audit and dispute resolution purposes.

by99 will never ask you to share your full JazzCash PIN, Easypaisa PIN, bank account password or any payment credential through email, chat or any other channel. If you receive such a request claiming to be from by99, do not comply and report it to our support team immediately.

5 Data Sharing and Disclosure

by99 does not sell your personal data. Data is shared only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers

by99 works with a small number of trusted third-party service providers who assist in operating the platform. These may include identity verification services, payment processing partners and platform infrastructure providers. These parties are contractually required to handle your data securely and only for the purpose for which it was shared.

Game Providers

Some games available on by99 — including Live Casino tables, Slots and Fish Games — are powered by third-party game studios. These providers may receive limited session data (such as a session token or game round ID) in order to deliver the game experience. They do not receive your full personal profile, CNIC or payment details.

Legal and Regulatory Disclosure

by99 may disclose personal data if required to do so by a valid legal process, court order or obligation under applicable law. In such cases, by99 will disclose only the minimum information required to satisfy the obligation and will not volunteer data beyond what is legally compelled.

Business Transfers

In the event of a merger, acquisition or sale of assets involving by99, user data may form part of the transferred assets. Any successor entity would be required to honour the commitments made in this Privacy Policy or notify users of material changes before applying them.

What We Do Not Do

  • We do not sell personal data to advertisers or data brokers.
  • We do not share your betting or gaming history with employers, insurers or other unrelated parties.
  • We do not share your CNIC or identity documents with any third party except where required by law or by a contracted identity verification provider.

6 Cookies and Tracking Technologies

by99 uses cookies and similar technologies to operate the platform, maintain your login session and understand how users interact with the site. Below is a summary of the types of cookies used.

Cookie Type Purpose Can Be Disabled?
Essential Keep you logged in, maintain your session and enable core platform functions No — required for the platform to work
Functional Remember your preferences such as language settings and game view options Yes
Analytics Understand which features are used most and how to improve the platform Yes
Security Detect unusual login patterns and protect against unauthorised access attempts No — required for account security

by99 does not use third-party advertising cookies or allow external ad networks to place tracking cookies on the platform. You can manage cookie preferences through your browser settings. Disabling essential or security cookies may affect your ability to use the platform normally.

7 Data Security

by99 takes reasonable and appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, alteration or disclosure. Key security practices include:

  • Encrypted data transmission using HTTPS across the entire platform
  • Passwords stored using industry-standard hashing — by99 staff cannot see your raw password
  • Access to personal data restricted to authorised staff on a need-to-know basis
  • Regular security assessments of platform infrastructure
  • Two-factor verification options for account access
  • Automated monitoring for unusual login attempts or suspicious transaction patterns

Despite these measures, no system connected to the internet can guarantee absolute security. If you have reason to believe your account has been compromised, contact by99 support immediately and change your password as soon as possible.

You also play a role in keeping your account secure. Use a strong, unique password for your by99 account. Do not share your login credentials with anyone — including friends or family. by99 support will never ask for your password.

If by99 becomes aware of a data breach that is likely to put your personal data at risk, we will notify affected users as promptly as practically possible and take immediate steps to contain the incident.

8 Data Retention

by99 retains personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable law and financial record-keeping obligations.

  • Active account data — retained for the lifetime of your account and for a period after closure to allow for dispute resolution and audit.
  • Transaction records (PKR deposits/withdrawals) — retained for a minimum of five years after the transaction date to meet financial record-keeping requirements.
  • Identity verification documents (CNIC, selfie) — retained for the duration of your account and for a defined period after closure. Originals are not stored beyond what is required for the verification process.
  • Support communications — retained for up to two years after the last interaction, or longer if the subject matter involves an unresolved dispute or legal matter.
  • Usage and device data — typically retained for 12 to 24 months after collection, after which it is anonymised or deleted.

When data is no longer required, by99 deletes or anonymises it in a secure manner. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for platform analytics and reporting purposes.

9 Your Rights Over Your Data

As a registered user of by99, you have the following rights in relation to your personal data. To exercise any of these rights, contact the by99 support team using the details in Section 12.

Right to Access

You can request a copy of the personal data that by99 holds about you. This includes your registration data, transaction history and any communications records. by99 will respond to verified access requests within a reasonable timeframe.

Right to Correction

If any personal data held by by99 is inaccurate or out of date — for example, a change to your registered mobile number — you can request that it be corrected. Some corrections may require re-verification of your identity.

Right to Deletion

You can request that by99 delete your personal data. This right is subject to exceptions: by99 may be required to retain certain data (such as transaction records) under applicable law even after account closure. Where deletion is possible, by99 will act on your request promptly.

Right to Restrict Processing

In certain circumstances you can ask by99 to restrict how your data is used — for example, while a dispute about its accuracy is being resolved — without requesting full deletion.

Right to Withdraw Consent

Where data processing is based on your consent (for example, receiving promotional notifications), you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the above rights, contact by99 support. Your identity will be verified before any action is taken on your account data, to ensure your information is not released or altered by a third party acting without your knowledge.

10 Minors and Under-18 Protection

by99 is strictly an adults-only platform. The platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 18.

Age verification is enforced at registration and at the point of first withdrawal. If by99 identifies or is notified that an account belongs to a person under 18, the account will be closed immediately and any remaining balance handled in accordance with the by99 Terms and Conditions.

If you are a parent or guardian and believe that a minor has registered on by99 using your device or payment method, contact support immediately. by99 will investigate and take appropriate action as quickly as possible.

We also encourage parents and guardians to use device-level parental controls to prevent minors from accessing online gaming platforms. Securing your login credentials and mobile wallet PINs is an important step in keeping minors away from platforms like by99.

11 Updates to This Policy

by99 may revise this Privacy Policy from time to time. When changes are made, the updated policy will be published on this page with a new "Last Updated" date at the top. For material changes — those that significantly affect how your data is collected or used — by99 will provide a more prominent notice, such as a notification within your account or a direct message to your registered mobile number.

Continuing to use the by99 platform after a policy update constitutes acceptance of the revised terms. If you do not agree with changes to this policy, you should stop using the platform and contact support to request account closure.

We recommend checking this page periodically — particularly after any major platform update — to stay informed about how your data is handled.

12 Contact Information

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information has been handled, our support team is available 24 hours a day, 7 days a week.

Availability
24 hours, 7 days a week
FAQ
Common questions answered at the FAQ page

How by99 Protects Your Data

Six ways the by99 platform keeps your personal information secure and handles it with respect.

Encrypted Connections

Every page and transaction on by99 is served over HTTPS. Your login credentials, PKR deposits and personal details travel over an encrypted connection at all times.

No Data Sales

by99 does not sell your personal data to advertisers, data brokers or any third party for commercial gain. Your name, CNIC, phone number and gaming history stay within the platform.

PKR Payment Safety

Full JazzCash, Easypaisa and Raast credentials are never stored on by99 servers. Only transaction references and confirmation data are retained for your account records.

Minimal Data Collection

by99 collects only what is needed to operate your account and process payments. There is no profiling for advertising, no unnecessary data harvesting and no sharing beyond stated purposes.

Your Rights, Respected

You can access, correct or request deletion of your personal data at any time by contacting support. Data requests are handled with identity verification to protect against unauthorised access.

18+ Verified Platform

Age verification is mandatory before withdrawals are processed. by99 actively prevents minors from accessing the platform and acts immediately on any report of underage account usage.

Join by99

Start Playing with Confidence

You know how your data is handled. Now create your by99 account, deposit in PKR via JazzCash or Easypaisa, and enjoy Cricket betting, PSL markets, Slots, Fish Games and Live Casino — safely and securely.