mj99 Privacy Policy

This Privacy Policy ("Policy") describes how mj99 ("mj99", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "Player") who access or use the mj99 online casino and sports betting platform available at https://mj99.pro (the "Platform").

mj99 is built primarily for Pakistani players who enjoy cricket betting, live casino, slots, crash games, and lottery products. We understand the sensitivity of financial and identity data in the Pakistani context — including the use of JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and crypto wallets — and we have designed our data practices accordingly.

By registering on the Platform, making a deposit, or simply browsing our pages, you acknowledge that you have read and understood this Policy. This Policy forms an integral part of our Terms & Conditions and should be read alongside them.

For the purposes of applicable data protection legislation, mj99 acts as the data controller in respect of all personal data collected through the Platform. As data controller, mj99 determines the purposes for which and the means by which your personal data is processed.

Where mj99 engages third-party service providers — such as KYC verification vendors, payment processors, or analytics providers — those providers act as data processors operating under contractual obligations that restrict their use of your data strictly to the purposes for which it was shared. mj99 remains accountable for ensuring such processors maintain adequate data protection standards.

All data protection enquiries, access requests, and complaints may be directed to our support team at [email protected]. We will acknowledge your contact within 5 business days and provide a substantive response within 30 calendar days.

mj99 collects and processes the following categories of personal data, depending on how you interact with the Platform:

mj99 collects your personal data through several channels. Understanding these sources helps you make informed choices about your interaction with the Platform:

• Direct Submission: Information you actively provide during registration, KYC document upload, deposit/withdrawal forms, live chat, and email correspondence.
• Automated Technologies: Technical and usage data collected automatically when you visit the Platform, including via cookies, session tracking, and server logs. See the Cookies & Tracking section for full details.
• Payment Providers: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or crypto processors, those providers share transaction confirmation data with mj99 solely to reconcile your account credits and debits.
• KYC Verification Partners: mj99 may use third-party identity verification services that cross-reference the documents you submit against national registry data or document authenticity databases. These checks are performed on mj99's behalf under strict data processing agreements.
• Fraud Prevention Systems: Automated risk-scoring systems analyse transaction patterns and login behaviour to detect suspicious activity. This analysis is based on data already held by mj99 and does not involve acquiring new external data sources without your knowledge.

mj99 processes your personal data for the following specific purposes. Each purpose is matched to a lawful basis described in Section 6:

• Account Creation & Management: To register your account, verify your identity, maintain your player profile, and enable access to all Platform features.
• Age Verification: To confirm that you are 21 years of age or older before allowing participation in real-money gaming. This is a strict regulatory and ethical requirement — no exceptions.
• Payment Processing: To process PKR deposits and withdrawals via your chosen payment method, reconcile your account balance, and issue receipts.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, multi-account abuse, bot usage, and other prohibited conduct as defined in the Terms & Conditions.
• Regulatory Compliance: To fulfil obligations under anti-money laundering (AML) regulations, gaming licence conditions, and any lawful requests from competent authorities.
• Customer Support: To respond to your enquiries, investigate complaints, resolve disputes, and improve the quality of our support interactions.
• Responsible Gaming: To monitor gaming behaviour, apply self-imposed limits, trigger responsible gaming alerts, and process self-exclusion requests effectively.
• Platform Improvement: To analyse aggregated usage data and improve game offerings, interface design, and overall Platform performance. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing Communications: To send promotional offers, PSL season bonuses, USDT deposit promotions, and platform updates — only where you have provided explicit opt-in consent.

mj99 relies on the following legal bases to process your personal data. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal:

mj99 uses cookies and similar tracking technologies to operate the Platform and improve your experience. Cookies are small data files stored in your browser. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in during your visit. You cannot opt out of these without rendering the Platform unusable.
• Functional Cookies: Remember your preferences such as language, game display settings, and last-used payment method (e.g. JazzCash vs USDT). Stored only for the duration of your session unless you choose to save preferences.
• Analytics Cookies: Used to understand how players navigate the Platform — which game categories are most popular, where players drop off, and which deposit flows are most effective. All analytics data is aggregated and does not identify individual users.
• Security Cookies: Used by our fraud detection systems to assign risk scores to sessions, detect unusual login patterns, and flag potential account takeover attempts in real time.

You may manage cookie preferences through your browser settings at any time. Blocking strictly necessary cookies will prevent you from logging in and using real-money features of the Platform. For analytics and functional cookies, your browser's cookie management settings provide granular control.

mj99 does not sell, rent, or trade your personal data to any third party for their independent use. Data is shared only in the following limited circumstances, and always under contractual safeguards:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and cryptocurrency payment gateways receive only the transaction data necessary to process your deposit or withdrawal. No gaming history or identity documents are shared with payment partners.
• KYC & Identity Verification Partners: Third-party verification services receive your submitted identity documents solely to confirm authenticity. These providers operate under binding data processing agreements and may not retain your documents beyond the verification period.
• Fraud Prevention Services: Aggregated risk signals and hashed device identifiers may be shared with industry fraud prevention networks to protect against known threats. No plain-text personal data is shared in this context.
• Legal & Regulatory Authorities: mj99 will disclose personal data to law enforcement agencies, gaming regulators, or financial intelligence units where legally required to do so by a valid court order, regulatory instruction, or statutory obligation. mj99 will notify you of such disclosures where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. You will be notified at least 30 days prior to any such transfer and given the opportunity to request account closure and data deletion before the transfer takes effect.

mj99 operates as an internationally licensed platform and some of the third-party processors we engage may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, mj99 ensures that appropriate safeguards are in place, including:

• Standard Contractual Clauses: Binding data transfer agreements that require the recipient to protect your data to a standard equivalent to or exceeding the protections outlined in this Policy.
• Adequacy Assessments: Before any new international processor is engaged, mj99 conducts an adequacy assessment of the data protection laws applicable in the processor's jurisdiction.
• Encryption in Transit: All data transferred across international network boundaries is encrypted using TLS 1.2 or higher. Data at rest on third-party infrastructure is subject to AES-256 encryption requirements in our processor agreements.

You may request details of the specific safeguards in place for any particular international transfer by contacting [email protected].

mj99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion requests submitted before the end of a mandatory retention period will be honoured to the maximum extent possible — data required to be retained by law will be flagged as restricted and isolated from active processing systems.

As a player on the mj99 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your account username and a description of your request. mj99 will respond within 30 calendar days:

• Right of Access: Request a copy of all personal data mj99 holds about you. We will provide this in a structured, commonly used format.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data. Corrections to identity data will require re-submission of relevant KYC documents.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations described in Section 10.
• Right to Restrict Processing: Request that mj99 suspends active use of your data in certain circumstances, such as while a rectification request is being investigated.
• Right to Data Portability: Request your personal data in a machine-readable format (JSON or CSV) suitable for transfer to another service provider.
• Right to Object: Object to processing based on legitimate interests, including direct marketing and analytics profiling. Marketing objections take effect within 48 hours.
• Right to Withdraw Consent: Where processing is based on consent — such as marketing communications — withdraw that consent at any time without affecting prior lawful processing.

mj99 operates a strict 21+ age policy. The Platform is not intended for, and must not be used by, any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

During registration, all players are required to confirm they are 21 or older. Where mj99 has reasonable grounds to suspect that a player may be under 21, the account will be immediately suspended pending full KYC age verification. If verification confirms the player is underage, the account will be permanently closed and any remaining balance returned via the original deposit method, minus any bonuses claimed.

mj99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or app and our servers is encrypted. Our certificates are maintained with zero-downtime renewal processes.
• AES-256 Encryption at Rest: Sensitive data fields in our databases — including identity data and KYC documents — are encrypted at the field level using AES-256. Even in the event of a storage breach, raw data is unreadable without the corresponding decryption keys.
• Multi-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. All administrative access to player data systems requires 2FA without exception.
• Access Controls: Player data is accessible only to authorised mj99 personnel whose role requires it. Access is logged, audited quarterly, and revoked immediately upon role changes or staff departures.
• Penetration Testing: mj99 undergoes regular independent penetration testing of its web infrastructure. Critical findings are remediated within defined SLA windows.
• Incident Response: In the event of a data breach that is likely to result in risk to your rights, mj99 will notify affected players within 72 hours of becoming aware of the breach, providing details of the nature of the incident and the steps taken to mitigate harm.

Despite these measures, no online platform can guarantee absolute security. You play an important role in protecting your own data — choose a strong, unique password, enable 2FA, and never share your login credentials with anyone, including individuals claiming to represent mj99 support.

The mj99 Platform may contain references to third-party services such as payment processors or gaming software providers. mj99 does not control the privacy practices of these external entities and this Policy does not apply to their websites or services.

We encourage you to review the privacy policies of any third-party service before providing your personal data to them directly. mj99 accepts no liability for the data handling practices of third parties, even where those parties are named in this Policy as our service providers, once you interact with their platforms independently of the mj99 Platform.

mj99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will:

• Post the updated Policy on this page with a revised "Last Updated" date at the top of the document.
• Send an email notification to all registered players at their verified email address at least 14 days before the changes take effect.
• Display a prominent in-platform banner for 14 days after publication, directing players to review the updated Policy.
• For changes that materially reduce your privacy rights, provide an opportunity to close your account and withdraw your balance before the changes take effect.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of those changes. If you do not agree with any updated terms, you must cease using the Platform and may request account closure and data deletion as described in Section 11.

For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your personal data, please contact the mj99 data protection team using the details below. All communications should include your registered username and a clear description of your enquiry:

• Email: [email protected] — please include "Privacy Request" in the subject line for fastest routing.
• Live Chat: Available 24/7 on the Platform for general privacy enquiries. Formal data rights requests must be submitted via email for documentation purposes.
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days. Complex requests may require up to 60 days — you will be notified if an extension is needed.

If you are unsatisfied with mj99's response to your privacy concern, you have the right to escalate your complaint to the relevant gaming regulatory authority under whose licence mj99 operates, or to a competent data protection supervisory authority in your jurisdiction. mj99 will always cooperate fully with any such regulatory investigation.