a999 Privacy Policy

1. Introduction

a999 ("we", "us", "our") operates the online betting and gaming platform available at a999.bz and through the a999 mobile application. We are committed to protecting the personal information of every player who uses our services, particularly players based in Pakistan who trust us with their data and their PKR transactions.

This Privacy Policy sets out what personal data we collect, the purposes for which we use it, how long we keep it and who we may share it with. It also explains your rights as an individual whose data we hold and how you can exercise those rights by contacting us directly.

a999 only processes personal data where we have a legitimate reason to do so — for example, to verify your identity and age before you can use our platform, to process your deposits and withdrawals in PKR, to provide customer support and to keep the platform secure. We do not sell personal data to third parties for their own marketing purposes under any circumstances.

2. Personal Data We Collect

The categories of personal data a999 may collect about you include the following:

We only collect data that is genuinely necessary for the purposes listed above. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions or health data unless it is directly relevant to a responsible gaming intervention and you have provided it voluntarily to our support team.

3. How We Collect Your Data

a999 collects personal information through the following channels:

• Direct registration: When you create an a999 account, you provide your name, date of birth, contact details and set your login credentials.
• KYC verification: When we request identity documents — such as a CNIC or utility bill — as part of the account verification or withdrawal process.
• Deposits and transactions: When you make a PKR deposit or withdrawal via JazzCash, Easypaisa, Raast or bank transfer, the transaction generates financial records linked to your account.
• Platform usage: Automatically, as you browse and use the a999 website or app — page views, bet placements, game sessions and device information are logged by our systems.
• Customer support interactions: When you contact our support team via live chat or email, the content of those communications is recorded to help resolve your query and for quality assurance.
• Cookies and similar technologies: As described in Section 7, we use cookies and similar tracking tools when you use the a999 website or app.

4. How We Use Your Personal Data

a999 uses your personal data for the following specific purposes:

• Account management: To create, maintain and manage your a999 player account, including processing login sessions and account settings changes.
• Identity and age verification: To confirm that you are aged 18 or above before granting access to real-money gaming features, as required by our 18+ policy.
• Processing PKR transactions: To handle deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfers and cards accurately and securely.
• Customer support: To respond to your queries, resolve disputes, process complaints and provide assistance with account or transaction issues.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account sharing, bonus abuse and other prohibited activities on the platform.
• Responsible gaming: To monitor gaming patterns and identify signs of problem gambling, enabling us to prompt players to use responsible gaming tools or reach out to support.
• Platform improvement: To understand how players use a999 — which sports markets, games and features are most popular — so we can continue improving the experience for Pakistan players.
• Marketing communications: To send you information about promotions, Cricket PSL special odds, bonus offers and new features — but only if you have opted in to receive such communications and only via the channels you have agreed to.
• Legal and compliance obligations: To maintain records required for anti-money laundering compliance and to respond to lawful requests from relevant authorities.

We will never use your personal data for purposes that are incompatible with those listed above. If we wish to use your data for a materially different purpose, we will notify you in advance and obtain fresh consent where required.

5. Payment Information and PKR Transactions

Because a999 handles real-money PKR transactions, the security of your payment information is something we treat with particular care. Here is how we handle your financial data:

• Full payment card numbers are never stored on a999 servers. Payments via cards are processed through encrypted third-party payment gateways that are responsible for handling and storing card data securely.
• JazzCash and Easypaisa mobile wallet transactions are processed through the official APIs of those payment providers. We store a reference to the transaction and your wallet account identifier (not your full wallet credentials).
• Bank account details provided for Raast or bank transfer withdrawals are stored in encrypted form and only accessed for the purposes of processing your withdrawal request.
• All PKR transaction records — deposits, withdrawals, bonus credits, bet settlements — are retained as part of your account history. You can view your own transaction history in your a999 account settings at any time.
• We conduct source-of-funds checks as part of our anti-money laundering obligations. If such a check is required on your account, we will contact you through your registered contact details to explain what documents or information are needed.

6. Sharing Your Personal Data

a999 does not sell, rent or trade your personal data to third parties for their own commercial purposes. We only share your data in the following limited and necessary circumstances:

• Payment processors: JazzCash, Easypaisa, Raast partner banks and card processing gateways receive the minimum data necessary to process your PKR deposits and withdrawals.
• Identity verification providers: Third-party KYC services may receive your identity documents and personal details for the purpose of verifying your age and identity. These providers are bound by strict data processing agreements.
• Game software providers: Third-party game developers whose Casino, Bingo, Fish Games and Slots titles are hosted on a999 may receive your player ID and session data as technically required to deliver the game. They do not receive your full personal profile.
• Fraud and security services: We use specialist fraud detection tools that process device fingerprints, IP data and behavioural signals to identify suspicious activity on the platform.
• Legal and regulatory requirements: We may disclose personal data to authorities when required to do so by law, a valid court order or a legitimate regulatory investigation. We will notify you of such a disclosure if we are legally permitted to do so.
• Business transfers: In the event that a999's business or platform is acquired by or merged with another entity, player data may be transferred as part of that transaction. You will be notified in advance if this affects how your data is processed.

All third parties with whom we share data are required to handle it in accordance with applicable data protection standards and are only permitted to use it for the specific purposes for which it was shared.

7. Cookies and Tracking Technologies

a999 uses cookies and similar technologies — such as local storage and session tokens — when you visit our website or use our mobile app. Cookies are small data files stored on your device that help us deliver a better, more personalised experience and keep the platform secure.

The types of cookies we use include:

• Essential cookies are required for the platform to function correctly — for example, keeping you logged in during a session and maintaining your account security tokens. You cannot opt out of these cookies while using a999.
• Analytics cookies help us understand how players navigate the platform — which pages are visited most, how long sessions last and where players encounter issues. This information is used in aggregate and is not tied to your personal identity.
• Security cookies help us detect and prevent fraud, bot activity and unauthorised account access attempts.
• Preference cookies remember your settings — such as language preference or display options — so you do not have to reset them each time you visit.
• Marketing cookies are used only if you have opted in to receive promotional communications. They help us understand which promotions you have engaged with so we can avoid sending you irrelevant offers.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent some features of the a999 platform from functioning correctly. The a999 mobile app uses equivalent persistent storage mechanisms that serve the same purposes as cookies on the web.

8. How We Protect Your Data

a999 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information from unauthorised access, loss, misuse or disclosure:

• All data transmitted between your device and a999 servers is encrypted using TLS (Transport Layer Security) protocols.
• Passwords are stored using strong one-way cryptographic hashing — we cannot see your password, and neither can any a999 employee.
• Player databases are stored on secured servers with strict access controls; only authorised personnel with a specific operational need can access player personal data.
• We conduct regular internal security reviews and vulnerability assessments of the a999 platform.
• Our payment processing integrations with JazzCash, Easypaisa and banking partners use official encrypted API channels.
• Account activity is monitored continuously for unusual patterns that may indicate a security breach or unauthorised access.

Despite our best efforts, no online system can guarantee absolute security. If you have any reason to believe your a999 account has been compromised, please contact our support team immediately so we can investigate and, if necessary, lock the account to protect your remaining balance.

9. Data Retention

a999 retains your personal data for as long as your account is active and for a period thereafter as required for legal, compliance and operational purposes. The specific retention periods we apply are:

• Active account data: Retained for the full duration that your a999 account remains open and active.
• Transaction records: PKR deposit and withdrawal records, bet history and bonus transaction records are retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping practices.
• KYC / identity documents: Retained for a minimum of five years from account closure or from the date they were submitted, whichever is later.
• Support communications: Chat transcripts and email records are retained for up to three years from the date of the interaction, unless they are relevant to an ongoing dispute or legal matter, in which case they are retained until that matter is resolved.
• Marketing preferences: Opt-in and opt-out records for marketing communications are retained indefinitely so we can respect your preferences accurately over time.
• Closed accounts: When an account is closed, personal data is archived and access is restricted. Data is deleted or anonymised once the applicable retention period has expired.

Once retention periods have passed and there is no other legal basis for us to keep your data, we securely delete or irreversibly anonymise it so it can no longer be linked to you as an individual.

10. Your Rights Over Your Personal Data

As a user of the a999 platform, you have the following rights in relation to the personal data we hold about you:

• Right of access: You can request a copy of the personal data a999 holds about you at any time. We will provide this within a reasonable timeframe.
• Right to correction: If any personal data we hold is inaccurate or out of date, you have the right to ask us to correct it. For basic account details such as your contact number or email, you can update these directly in your account settings.
• Right to deletion: You can ask us to delete your personal data where we no longer have a legitimate reason to hold it. Please note that we may be required to retain certain data — such as transaction records — for the retention periods described in Section 9, and deletion requests cannot override these obligations.
• Right to restrict processing: You can ask us to pause the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to withdraw consent: Where we are processing your data on the basis of your consent — for example, for marketing communications — you can withdraw that consent at any time by updating your account notification preferences or contacting support.
• Right to object: You can object to processing of your personal data where we are relying on legitimate interests as our legal basis, and you believe those interests are outweighed by your own rights and interests.

To exercise any of these rights, please contact the a999 support team as described in Section 13. We will respond to all valid requests promptly. We may need to verify your identity before actioning a data request to ensure we are responding to the correct person.

11. Minors and Age Policy

The a999 platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. Age verification is carried out during the registration process and may be repeated at any point during a player's time on the platform.

If we discover or have reasonable grounds to believe that a player is under 18, we will immediately suspend their account, cease all processing of their personal data for gaming purposes, and take steps to return any real-money deposits to the payment method used — subject to satisfactory verification of the account holder's identity.

If you are a parent or guardian and believe your child may have accessed or registered on a999, please contact our support team immediately. We will investigate promptly and take appropriate action to close the account and handle any associated data in a way that prioritises the protection of the minor.

12. Changes to This Privacy Policy

a999 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer or applicable legal requirements. When we make material changes to this policy, we will notify active players by posting a prominent notice on the a999 website and, where possible, by sending a notification to your registered contact details.

The updated Privacy Policy will take effect from the date it is published on the a999 website. The "Last updated" date at the top of this page will always reflect when the most recent revision was made. Your continued use of the a999 platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. We recommend reviewing this page periodically so you are always aware of how your data is being handled.

13. Contact Us About Your Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights or have a concern about how a999 has handled your personal information, please get in touch with our support team. We are available 24/7 and will do our best to respond to all privacy-related queries promptly.

When contacting us about a data request, please include your registered account email address or mobile number so we can locate your account and verify your identity before processing your request. For self-exclusion or responsible gaming concerns, please visit our Responsible Gaming page.