At k99, your personal data is treated with the same seriousness we bring to game fairness and payment security. This Privacy Policy explains precisely what data k99 collects from Pakistani players, why we collect it, how it is stored, who it may be shared with, and what rights you hold over your own information.
Six core commitments underpin how k99 handles every piece of personal information provided by players in Pakistan and beyond. These are not aspirations — they are operational standards enforced across the entire k99 platform.
k99 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your information is used solely in connection with operating the k99 platform and fulfilling our regulatory obligations.
All personal data stored in k99's systems is protected using AES-256 encryption at rest and TLS 1.3 encryption in transit. Data at rest is stored in geographically redundant facilities with restricted access controls and full audit logging.
k99 collects only the personal data strictly necessary for the purposes identified in this Privacy Policy. We do not collect data speculatively or hold data for longer than required by our regulatory and operational obligations.
Pakistani players hold meaningful rights over their k99 data — including the right to access, correct, export, and in certain circumstances delete the personal information k99 holds. Rights requests are processed within 30 days.
k99 sends promotional communications only to players who have opted in to receive them. You may withdraw marketing consent at any time through your account settings or by contacting k99 support, with effect within 48 hours.
In the unlikely event of a data breach affecting player information, k99 will notify affected players promptly and in accordance with the notification obligations under our international licensing framework and applicable data protection standards.
The table below provides a clear overview of every category of personal data k99 collects, the specific purpose for which it is collected, and the legal basis on which that collection occurs.
| Data Category | Specific Data Points | Purpose | Legal Basis |
|---|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, gender | Age verification, KYC compliance, account identity | Legal obligation; Contractual necessity |
| Contact Data | Mobile number (+92), email address, city of residence | Account communication, OTP delivery, support contact | Contractual necessity; Legitimate interest |
| Financial Data | JazzCash / EasyPaisa wallet ID, bank account details, transaction history | Payment processing, withdrawal verification, AML compliance | Legal obligation; Contractual necessity |
| Technical Data | IP address, device type, browser, operating system, session tokens | Security monitoring, fraud prevention, platform optimisation | Legitimate interest; Legal obligation |
| Usage Data | Games played, bets placed, session duration, bet values, win/loss history | Responsible gaming monitoring, platform improvement, bonus management | Legitimate interest; Legal obligation |
| Location Data | General location derived from IP address (city/country level only) | Geographic eligibility verification, fraud detection | Legal obligation; Legitimate interest |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Support delivery, dispute resolution, quality assurance | Contractual necessity; Legal obligation |
| Marketing Preferences | Opt-in status, promotional communication preferences | Delivering marketing communications to consenting players only | Consent |
Every player on k99 holds the following rights with respect to their personal data. These rights can be exercised at any time by contacting k99 support via live chat or email.
Request a full copy of all personal data k99 holds about you. Provided within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data. Corrected immediately upon verification for most fields.
Request deletion of your personal data in circumstances where continued retention is not required by law or regulatory obligation.
Request that k99 restricts processing of your data in certain circumstances while a data dispute or investigation is pending.
Receive a machine-readable export of data you have provided to k99, suitable for transfer to another service provider.
Object to processing of your data for marketing purposes or for purposes based on legitimate interest at any time without giving reason.
Request human review of any significant decision about your k99 account made solely through automated processing systems.
Withdraw consent for marketing communications at any time. Withdrawal takes effect within 48 hours and does not affect service communications.
k99 ("we", "us", "our", "the Platform") is the data controller responsible for the personal data of players registered on https://k99.my. k99 operates as Pakistan's premier online casino and sports betting platform, serving over 850,000 registered players primarily located across Pakistan, including major cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi.
k99 is operated under an international gaming license authority. In that capacity, k99 is subject to the data protection obligations stipulated within the relevant licensing framework, which include standards relating to data minimisation, purpose limitation, security, and player rights.
For all data protection enquiries or to exercise your rights as described in this Policy, contact k99 at: [email protected] or via live chat available 24/7 within the k99 platform. Email responses are provided within 48 business hours.
This Privacy Policy applies to all personal data collected by k99 in connection with your use of the k99 website at https://k99.my and all services, features, games, promotional activities, and communications offered through that platform.
This Policy applies to all current, former, and prospective k99 players, including individuals who:
This Policy does not apply to third-party websites or services linked to from k99 (other than those listed in this document as k99 data processors). Such third-party services operate under their own privacy frameworks, and k99 is not responsible for their data practices.
3.1 Data You Provide Directly. k99 collects the following data that you provide during registration, account management, and direct communications:
3.2 Data Collected Automatically. k99 automatically collects the following technical and usage data when you access the platform:
3.3 Data Received from Third Parties. In certain circumstances, k99 may receive data about you from third parties, including:
k99 uses your personal data for the following specific purposes, each of which is supported by an appropriate legal basis as set out in Section 5:
k99 does not use personal data for purposes beyond those identified in this Policy without first obtaining your consent or establishing an alternative lawful basis as set out in Section 5.
k99 processes personal data only where a valid legal basis for processing exists. The legal bases relied upon by k99 are as follows:
6.1 No Commercial Data Sales. k99 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own commercial purposes under any circumstances.
6.2 Service Providers (Data Processors). k99 shares personal data with carefully selected third-party service providers who act as data processors on k99's behalf and under k99's written instructions. These providers include:
6.3 Regulatory and Legal Disclosures. k99 may disclose personal data to regulatory bodies, licensing authorities, law enforcement agencies, or courts where required to do so by applicable law, by the terms of our gaming license, or by a valid legal order. k99 will, where permitted, notify you of such disclosures.
6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of k99's business, your personal data may be transferred to the acquiring entity as part of the transaction assets. You will be notified in advance of any such transfer and of any resulting changes to this Privacy Policy.
All third-party data processors engaged by k99 are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with k99's documented instructions. k99 conducts due diligence on all data processors prior to engagement.
k99 operates on an internationally hosted infrastructure. Some personal data processed by k99 — particularly data held on cloud servers and data shared with internationally operating service providers — may be transferred to and stored in countries outside Pakistan.
Where personal data is transferred internationally, k99 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to or exceeding the protections described in this Policy. Safeguards employed by k99 for international transfers include:
k99 uses cookies and similar tracking technologies on the k99 platform. The categories of cookies used by k99 are as follows:
You may manage your cookie preferences through your browser settings. Note that disabling certain cookie categories may affect the functionality of the k99 platform.
k99 retains personal data only for as long as necessary to fulfil the purposes identified in this Policy or as required by applicable law and our licensing obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.
k99 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. Measures in place include:
k99 is strictly an adults-only platform. The minimum age requirement for any k99 account or service is 21 years of age. k99 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.
Where k99 identifies, or has reasonable grounds to suspect, that an account has been registered by or on behalf of an individual under 21, k99 will immediately suspend the account, void all transactions, and permanently delete all associated personal data except where retention is required by legal obligation.
Parents and Guardians: If you believe a person under 21 in your household has registered a k99 account or has accessed the k99 platform, please contact k99 support immediately at [email protected]. k99 will act on such reports promptly and confidentially.
k99 encourages parents and guardians of minors to use family-safe internet filtering software to restrict access to online gambling platforms. Such tools are available from a number of organisations and internet service providers in Pakistan.
To exercise any of the rights described in this Policy, please contact k99 by:
k99 will respond to all rights requests within 30 calendar days of receipt of a verified request. We may extend this period by up to two additional months for complex or numerous requests, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.
Identity verification is required before k99 can process any rights request to ensure that personal data is not disclosed to or altered by anyone other than the account holder. The verification process typically involves confirming your registered mobile number and account details.
k99 does not charge a fee for processing rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be applied. k99 will notify you of any applicable fee before proceeding.
k99 processes a specific category of usage data for the purpose of responsible gaming monitoring. This includes analysis of session frequency and duration, bet sizes relative to account history, win and loss patterns, and use of the platform's responsible gaming tools.
This processing is carried out under the dual legal bases of legitimate interest (to identify and support players at risk of gambling-related harm) and legal obligation (as required by k99's international gaming license responsible gaming framework). This processing cannot be objected to without affecting k99's ability to fulfil its responsible gaming obligations.
Responsible gaming data is processed sensitively and is only accessible to k99's responsible gaming team and, where required, to the relevant licensing authority. It is not used for marketing purposes and is not shared with game providers or payment processors.
Where k99's responsible gaming monitoring identifies a player who may be experiencing gambling-related harm, k99 may contact that player proactively, impose account restrictions, or refer the player to independent support resources — all in accordance with k99's responsible gaming policy.
k99 sends promotional communications — including bonus offers, game launch notifications, seasonal promotions, and platform news — only to players who have explicitly opted in to receive such communications during registration or through their account settings.
Marketing communications from k99 are delivered via SMS to your registered +92 mobile number and/or by email where an email address has been provided and consent given for email marketing.
You may withdraw your marketing consent at any time by:
Withdrawal of marketing consent takes effect within 48 hours. Withdrawal of marketing consent does not affect the delivery of service communications (such as deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming communications), which are not marketing in nature and are delivered on the basis of contractual or legal necessity.
k99 reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect developments in applicable law, changes to k99's data processing activities, feedback from players or regulators, or updates to our technical infrastructure.
When changes are material — meaning they significantly affect how we collect, use, or share your data, or meaningfully alter your rights — k99 will notify active players via SMS to their registered mobile number and/or in-platform notification prior to the changes taking effect. The updated Policy will be published at https://k99.my/privacy-policy with a revised "Last Updated" date.
Continued use of the k99 platform following notification of a Policy update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, please contact k99 support to arrange account closure and return of any eligible balance.
If you have any questions, concerns, or requests relating to this Privacy Policy or to k99's handling of your personal data, please contact us:
k99 is committed to resolving all privacy-related enquiries and complaints fairly, thoroughly, and promptly. If you contact us with a privacy concern, we will:
If you are not satisfied with k99's response to a privacy complaint, you may escalate the matter to the relevant supervisory authority under k99's licensing jurisdiction. Details of the applicable supervisory authority are available from k99's compliance team upon request.
This Privacy Policy was last reviewed and updated on 1 January 2026. k99 recommends that all players review this Policy periodically to remain informed about how their data is protected on Pakistan's leading online gaming platform.
k99 protects your personal data with AES-256 encryption, strict access controls, and a no-sell data policy. Login to access cricket betting, live casino, and 500+ slots — all in PKR.
Login to k99 Responsible Gaming