a999 Privacy Policy — How We Protect and Handle Your Personal Data

This Privacy Policy applies to a999, which operates the online gaming platform accessible at a999-bangla.com. a999 is the data controller responsible for the personal information of all registered players and visitors to our platform.

When this Policy refers to "a999", "we", "our", or "us", it means the a999 platform and the team that operates it. When it refers to "you" or "your", it means any person who registers an account on a999, visits the platform, or uses any of our services — including cricket betting, Teen Patti, Ludo Games, Slots, Virtual Sports, Football Betting, and the Refer a Friend programme.

By using a999, you acknowledge that you have read this Privacy Policy and that you understand how your personal data is collected, used, and protected. If you have any questions at any time, you can reach our data team at support@a999-bangla.com and we will respond in Urdu or English, whichever you prefer.

a999 collects personal data that is necessary and proportionate to the services we provide. We do not collect data speculatively. The specific categories of data we hold about you are:

• Identity data: Full name, date of birth, CNIC number (where required for verification), and any government-issued identification documents you provide during the verification process.
• Contact data: Mobile phone number, email address, and any communication preferences you set within your a999 account.
• Financial data: Deposit amounts, withdrawal amounts, transaction dates and references, payment method identifiers (e.g., Easypaisa wallet reference, JazzCash number). Full payment credentials — such as card numbers — are never stored on a999 servers; they are handled entirely by certified payment processors.
• Account activity data: Betting history, game session records, bonus claims, and referral activity within the a999 platform.
• Technical data: IP address, device type, operating system, browser type, session duration, pages visited, and clickstream data collected automatically when you use a999.
• Communications data: Records of your interactions with a999 customer support, including chat transcripts and email correspondence.
• Responsible gaming data: Any deposit limits, session limits, or self-exclusion settings you apply to your a999 account, and any information you provide in the context of responsible gaming support.

a999 collects your personal data through three primary methods:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, respond to a promotion, or update your account settings — all information you provide goes directly to a999 and is stored securely.
• Automatically through platform use: When you use a999, our systems automatically collect technical data about your device, session, and interaction with the platform. This is standard practice for all online platforms and is used for security monitoring, fraud prevention, and service improvement.
• From payment processors: When you deposit or withdraw funds, our integrated payment partners — including Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors — share transaction confirmation data with a999 to allow us to credit or debit your account correctly. We receive only what is necessary to verify and record the transaction.

a999 uses your personal data for the following specific purposes only:

• Account operation: To create and manage your a999 account, process your deposits and withdrawals in PKR, record your betting and gaming activity, and maintain your account balance accurately.
• Identity verification: To verify your identity as required before processing large withdrawals, to comply with our obligations to prevent underage gambling, and to comply with anti-money laundering (AML) requirements.
• Security and fraud prevention: To monitor for suspicious account activity, detect and prevent fraud, protect the a999 platform from abuse, and investigate potential terms violations.
• Customer support: To respond to your enquiries, resolve account issues, process responsible gaming requests such as self-exclusion, and maintain records of our communications with you.
• Platform improvement: To analyse how Pakistani players use a999 in aggregate — which games are most popular, where navigation is confusing, what features are requested most — to make the platform better for everyone.
• Legal compliance: To maintain transaction records as required by applicable law, to respond to lawful information requests from authorities, and to enforce our Terms and Conditions.
• Marketing communications: To send you promotional messages about a999 offers, bonuses, and new features — but only if you have opted in to receive them, and only about a999's own products. You can opt out at any time.

a999 processes your personal data on the following legal grounds, depending on the purpose:

• Contract performance: Most data processing by a999 is necessary to fulfil our agreement with you — i.e., to operate your account, process your bets, pay out your winnings, and provide the services you registered for. Without this processing, a999 cannot provide its services to you.
• Legal obligation: Certain processing — particularly identity verification, transaction record-keeping, and AML compliance — is required by applicable laws and regulations. a999 must process this data to comply with these obligations regardless of consent.
• Legitimate interests: Security monitoring, fraud detection, platform analytics, and abuse prevention are processed on the basis of a999's legitimate interest in operating a secure, fair, and well-functioning platform for all players.
• Consent: Marketing communications and certain optional analytics are processed only on the basis of your freely given, informed consent. You can withdraw consent at any time without affecting your ability to use a999.

a999 does not sell, rent, or trade your personal data. We share it only in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors receive only the data necessary to process your specific transaction — typically your registered phone number or account reference and the transaction amount.
• Identity verification services: Where required for KYC (Know Your Customer) compliance, a999 may share identity documents with a certified identity verification provider. These providers are contractually bound to use your data only for the verification purpose and to delete it after the check is complete.
• IT infrastructure providers: a999 uses third-party hosting, database, and security services. These providers access only the data needed to perform their technical function and are bound by strict data processing agreements that prohibit any independent use of your information.
• Legal authorities: Where a999 receives a lawful, documented request from a relevant authority — such as a court order or formal law enforcement request — we may be obligated to disclose specific data. We will always challenge requests that we believe are not lawful or proportionate.

a999 maintains a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or alteration. Key measures include:

• TLS 1.3 encryption for all data in transit between your device and the a999 platform.
• AES-256 encryption for all sensitive data stored on a999 servers.
• Multi-factor authentication required for all a999 staff accounts with access to player data.
• Regular penetration testing and security audits by independent security professionals.
• Automated anomaly detection systems that flag unusual access patterns for immediate review.
• Strict access controls ensuring that only staff with a demonstrated need to access specific data can do so, with all access logged and regularly reviewed.

Despite these measures, no online platform can guarantee absolute security. In the event of a breach that affects your personal data, a999 will notify you within 72 hours of discovery and take all necessary steps to contain and remediate the incident.

a999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any minimum retention periods required by applicable law. The following general retention principles apply:

• Active account data: Retained for the full duration of your a999 account and for 5 years following account closure, to comply with financial record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, as required for AML compliance and general financial record-keeping obligations.
• Identity verification documents: Retained for 5 years after the end of the business relationship, unless a longer retention period is required by applicable law.
• Support communications: Retained for 2 years from the date of each interaction, unless the matter remains unresolved or is subject to ongoing legal proceedings.
• Marketing consent records: Retained for as long as the consent is active, plus 1 year after withdrawal to demonstrate compliance.

When data is no longer required and the retention period has expired, a999 destroys it securely using certified data destruction methods. We do not hold data "just in case" — if there is no documented reason to hold it, we delete it.

a999 uses cookies and similar tracking technologies to operate the platform, improve your experience, and ensure security. Here is a breakdown of the cookie categories we use:

You can manage your cookie preferences at any time through your browser settings or through the cookie preferences panel in your a999 account. Note that disabling essential cookies will affect your ability to use the platform.

As a player on a999, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@a999-bangla.com. We respond within 30 days and at no charge.

a999 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. All registration processes include an age declaration, and a999 actively verifies age where there is any doubt.

If a999 becomes aware that personal data has been collected from a person under 18, that account will be closed immediately, any balance will be refunded to the payment method used, and all personal data associated with the account will be securely deleted.

If you are a parent or guardian and believe that a minor has registered an a999 account, please contact us immediately at support@a999-bangla.com. We treat such reports as the highest priority and will act within 24 hours.

a999 sends marketing communications — including information about bonuses, promotions, new games, and platform features — only to players who have opted in to receive them. We do not send unsolicited marketing messages.

If you have opted in to marketing communications from a999, you can opt out at any time by:

• Updating your notification preferences in your a999 account settings.
• Clicking the unsubscribe link in any marketing email from a999.
• Replying STOP to any SMS marketing message from a999.
• Contacting our support team at support@a999-bangla.com with a request to be removed from all marketing communications.

Opting out of marketing communications does not affect transactional messages — a999 will continue to send you important account notifications such as deposit confirmations, withdrawal confirmations, and security alerts regardless of your marketing preferences.

a999 reviews this Privacy Policy regularly and updates it when our data practices change, when new legal obligations arise, or when we add new services that affect how player data is handled. The current version of this Policy is Version 2.5, effective 1 January 2025.

When material changes are made — those that meaningfully affect player rights or how data is used — a999 will notify active players via their registered mobile number or email address at least 7 days before the change takes effect. Minor clarifications and corrections may be made without prior notice.

Continuing to use a999 after the effective date of any change to this Policy constitutes acceptance of the updated terms. If you do not agree with any change, you should contact support before the change takes effect to discuss your options.

For any questions, requests, or concerns about how a999 handles your personal data, please get in touch with our dedicated data support team. We respond in both Urdu and English, 24 hours a day, 7 days a week.

Email: support@a999-bangla.com
Subject line: Privacy — [Your Request Type]
Live Chat: Available within your a999 account dashboard, 24/7
Response Time: All privacy-related requests acknowledged within 24 hours; substantive response within 30 days.

When contacting us about a data rights request, please include your registered mobile number and a description of your request. This helps us locate your account and process your request as quickly as possible. We never charge for processing data rights requests.