Privacy Policy – a999 Pakistan

01 Who We Are

a999 is an online gaming platform accessible at a999.cx, offering sports betting, slots, live casino and related services to players in Pakistan. When this Privacy Policy refers to "a999", "we", "us" or "our", it means the operator of the a999 platform.

For the purposes of this policy, a999 is the data controller – meaning we decide how and why your personal data is processed. If you have any questions about this policy or how your data is handled, please contact the a999 support team using the details in section 12.

This Privacy Policy applies to data collected through a999.cx, the a999 mobile app, and any communication you have with a999 support, including live chat and email.

02 Data We Collect

a999 collects personal data in the following categories. We only collect what is genuinely needed for the purposes described in this policy.

a999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health data except where directly relevant to a responsible gaming self-exclusion request made by you.

03 How We Use Your Data

a999 uses the personal data we collect for the following purposes:

• Account management – to create, maintain and secure your a999 account and to verify your identity in line with our KYC process.
• Payment processing – to process deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer and other supported methods.
• Platform delivery – to provide access to sports betting (including PSL and T20 cricket), slots, live casino, the VIP programme and all other a999 features.
• Customer support – to respond to your queries, resolve complaints and assist with account issues via live chat and email.
• Fraud prevention and security – to detect, investigate and prevent fraudulent activity, bonus abuse, money laundering and other prohibited conduct as described in our Terms and Conditions.
• Responsible gaming – to administer deposit limits, loss limits, self-exclusions and other player protection tools you have activated on your account.
• Platform improvement – to analyse usage patterns in aggregate in order to improve the a999 platform, fix issues and develop new features.
• Marketing communications – to send you information about promotions, bonuses and offers, but only where you have opted in to receive such communications. You can opt out at any time through your account settings.

a999 does not use automated decision-making that produces legal or similarly significant effects on players without human oversight. Where automated systems flag an account for review – for example, for suspected fraud – a human member of the team reviews the case before any action is taken.

04 Legal Basis for Processing

a999 processes your personal data on one or more of the following legal grounds:

• Contract performance – processing is necessary to deliver the services you have signed up for when registering an a999 account. This covers account management, payment processing and platform access.
• Legitimate interests – processing is necessary for a999's legitimate interests in fraud prevention, platform security, responsible gaming administration and platform improvement, provided those interests are not overridden by your rights.
• Legal obligation – a999 may be required to retain or disclose certain data to comply with applicable legal requirements, including identity verification and anti-money-laundering obligations.
• Consent – where you have given explicit consent, for example to receive marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

05 Data Sharing & Third Parties

a999 shares personal data with third parties only where necessary and only to the extent required. We do not sell personal data to any third party for marketing or commercial purposes. The categories of third parties we work with are as follows:

• Payment processors – JazzCash, Easypaisa, Raast and our banking partners receive the transaction data needed to process your deposits and withdrawals in PKR. These providers operate under their own privacy policies and security standards.
• Identity verification providers – where KYC verification is required, we share identity documents and data with specialist verification service providers who confirm the authenticity of your documents and identity.
• Game providers – third-party game studios and live casino providers receive a session token and the minimum data required to deliver their games within the a999 platform. They do not receive your full personal profile.
• IT and infrastructure providers – our hosting, content delivery and platform infrastructure providers process data on our behalf under strict data processing agreements.
• Fraud prevention and security services – specialised services that help a999 detect and prevent fraudulent activity, unauthorised access and abuse receive technical data such as IP addresses and device identifiers.
• Legal and regulatory authorities – a999 will disclose personal data to law enforcement or other competent authorities when required to do so by applicable law or valid legal process.

All third-party service providers that process personal data on behalf of a999 are bound by contractual obligations to keep that data secure and to use it only for the agreed purpose.

06 Cookies & Tracking

a999 uses cookies and similar technologies to make the platform work properly and to improve your experience. Here is a summary of the cookie types used:

• Essential cookies – required for the platform to function. They keep you logged in during your session, maintain your game state and enable secure transactions. These cannot be disabled without breaking core platform functionality.
• Functional cookies – remember your preferences such as language settings, display options and last-used payment method so you do not have to re-enter them on every visit.
• Analytics cookies – collect anonymised, aggregated data about how players use the a999 platform. This helps us understand which features are most used, where errors occur and how to improve the overall experience. No individual player is identified through analytics data.

a999 does not use third-party advertising cookies or cross-site tracking technologies that follow you on other websites after you leave a999.cx.

You can manage or delete cookies through your browser settings. Disabling essential cookies will affect your ability to use the a999 platform, including staying logged in and placing bets. Disabling functional and analytics cookies will not prevent you from using the platform but may reduce convenience.

07 Data Retention

a999 retains personal data for as long as is necessary for the purposes described in this policy and to meet any applicable legal obligations. The following general retention periods apply:

• Active account data – retained for as long as your a999 account remains open and active.
• Closed account data – following account closure, identity and transaction records are retained for a minimum period to satisfy legal record-keeping requirements, after which they are securely deleted or anonymised.
• Support communications – chat transcripts and email correspondence are retained for a reasonable period to allow follow-up on any ongoing issues, then deleted.
• Technical and usage data – server logs and usage data are retained for a shorter period, primarily for security monitoring and platform diagnostics, then automatically purged.

Where data is no longer required and there is no legal obligation to retain it, a999 deletes or anonymises that data in a secure manner. You may request early deletion of your data by contacting support, subject to any legal retention requirements that may prevent full deletion.

08 Data Security

a999 takes data security seriously and has put in place a range of technical and organisational measures to protect your personal data from unauthorised access, loss, alteration or disclosure. These include:

• TLS encryption for all data transmitted between your device and a999 servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Access controls that restrict internal staff access to personal data on a need-to-know basis, with all access logged and regularly audited.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised login.
• Regular security assessments and monitoring of the a999 platform for vulnerabilities and unusual activity.
• Secure disposal of data and devices once they are no longer required.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights or interests, a999 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

09 Your Rights

As a registered player on a999, you have the following rights in relation to your personal data:

• Right of access – you can request a copy of the personal data a999 holds about you. We will respond within a reasonable timeframe.
• Right to rectification – if any of the personal data we hold about you is inaccurate or incomplete, you can ask us to correct it. You can update basic contact details directly in your account settings.
• Right to erasure – you can ask a999 to delete your personal data in certain circumstances, for example where your account has been closed and there is no legal requirement to retain it.
• Right to restrict processing – in certain situations you may ask a999 to pause processing of your data while a dispute or query is being resolved.
• Right to data portability – you can request a copy of the data you have provided to a999 in a structured, commonly used format.
• Right to withdraw consent – where processing is based on consent (for example, marketing emails), you can withdraw that consent at any time through your account settings or by contacting support.
• Right to object – you can object to processing based on legitimate interests, including direct marketing, at any time.

To exercise any of these rights, contact a999 support through live chat or by writing to the support email address in the footer. We may need to verify your identity before processing a rights request. We aim to respond to all valid requests within 30 days. More complex requests may take longer, and we will keep you informed of progress.

10 Children's Privacy

a999 is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register, use the platform or provide any personal data to a999.

If a999 discovers or is informed that a registered player is under 18, the account will be closed immediately, any balance will be reviewed in line with our Terms and Conditions, and all personal data associated with the account will be deleted as soon as reasonably practicable.

If you believe that a person under the age of 18 has registered on a999 or has accessed your account, please contact a999 support immediately. We take underage access extremely seriously and will act promptly on any such report.

11 Changes to This Policy

a999 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When we make changes, the updated policy will be published on this page with a new "Last Updated" date at the top.

Where changes are material – meaning they significantly affect how your data is used or your rights in relation to it – a999 will notify registered players by email or through an in-platform notification before the changes take effect, where reasonably practicable.

Continued use of the a999 platform after any update to this Privacy Policy constitutes acceptance of the revised policy. If you do not agree with any change, you should stop using the platform and contact support to request account closure.

We recommend checking this page periodically to stay informed about how a999 handles your personal data. The date at the top of this page always reflects when the current version was last updated.

12 Contact & Complaints

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a complaint about how a999 has handled your personal data, please get in touch with the a999 support team.

You can reach us through:

• Live chat – available 24/7 directly on the a999 platform. This is the fastest way to get a response.
• Email – write to the support email address displayed in the footer of this page. Include your registered username and a clear description of your query or request.

a999 aims to acknowledge all privacy-related queries within 24 hours and to resolve them within 30 days. Where a request is particularly complex or involves multiple data points, we will keep you informed of progress throughout the process.

If you feel that a999 has not addressed your concern to your satisfaction, you have the right to escalate the matter. We take all data privacy complaints seriously and every complaint is reviewed by a senior team member.