at999 Privacy Policy

1 Introduction and Scope

1.1  This Privacy Policy ("Policy") applies to all personal data processed by at999 ("the Platform," "we," "us," "our") in connection with your use of the at999 website at https://at999.bio and all associated services including sports betting, live casino, table games, slots, account management, and customer support.

1.2  By registering an account with at999 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

1.3  This Policy should be read together with the at999 Terms & Conditions. Definitions used in the Terms & Conditions apply equally to this Policy unless otherwise stated.

1.4  at999 is the data controller in respect of personal data collected through the Platform. Our contact details for data protection matters are set out in Section 13 of this Policy.

2 Personal Data We Collect

2.1  at999 collects the following categories of personal data in connection with your use of the Platform:

2.2  at999 does not collect special category data (as defined under applicable data protection law) such as biometric data, health information, or racial or ethnic origin, except to the extent that age verification and identity documentation submitted during KYC may incidentally contain such information.

3 How at999 Collects Your Data

3.1  at999 collects personal data through the following channels:

• Direct provision by you – data you provide during registration, KYC verification, payment transactions, or when contacting at999 support
• Automated collection – data collected automatically as you use the Platform, including via cookies, server logs, and usage tracking
• Third-party sources – identity verification and fraud prevention services, payment processors (including JazzCash, Easypaisa, and banking partners), and regulatory compliance databases

3.2  at999 does not purchase personal data lists from marketing brokers or other data vendors. Any data received from third parties is limited to what is necessary for identity verification, fraud prevention, or payment processing purposes.

4 How at999 Uses Your Personal Data

4.1  at999 processes personal data for the following purposes and on the following legal bases:

• Account creation and management – to create and maintain your at999 account, verify your identity, and manage your gaming activity. Legal basis: contract performance.
• Payment processing – to process deposits and withdrawals via JazzCash, Easypaisa, bank transfer, card, and cryptocurrency channels. Legal basis: contract performance.
• KYC and regulatory compliance – to verify your age (18+), identity, and source of funds as required by applicable anti-money-laundering and responsible gaming obligations. Legal basis: legal obligation.
• Fraud prevention and security – to detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised account access. Legal basis: legitimate interest.
• Customer support – to respond to your support queries and resolve disputes. Legal basis: contract performance and legitimate interest.
• Platform improvement – to analyse usage patterns and improve the performance, features, and user experience of the at999 platform. Legal basis: legitimate interest.
• Direct marketing – to send you promotional communications about at999 offers, bonuses, and new features, where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Responsible gaming – to monitor gaming activity for signs of problem gambling behaviour and to apply responsible gaming tools and interventions as required. Legal basis: legal obligation and legitimate interest.

5 Sharing Your Personal Data

5.1  at999 does not sell your personal data to third parties. at999 may share your data with the following categories of recipients for the purposes set out in Section 4:

• Payment processors – JazzCash, Easypaisa, affiliated banks (HBL, UBL, Meezan Bank, Bank Alfalah), card networks, and cryptocurrency processing partners, solely to process your transactions
• Identity verification providers – third-party KYC and AML compliance services used to verify your identity and age
• Game providers – software providers whose games are hosted on the at999 platform may receive pseudonymised game play data for reporting and audit purposes
• Regulatory and law enforcement authorities – where at999 is under a legal obligation to disclose data to a regulator, law enforcement body, or court of competent jurisdiction
• Professional advisors – lawyers, auditors, and accountants acting on behalf of at999, subject to professional confidentiality obligations
• Business acquirers – in the event of a merger, acquisition, or sale of the Platform, your data may be transferred to the acquiring entity, provided the same level of protection is maintained

5.2  All third parties with whom at999 shares personal data are required to implement appropriate technical and organisational security measures consistent with their role and with at999's data protection obligations.

6 Data Retention

6.1  at999 retains personal data for as long as your account is active and for a period thereafter as required by applicable legal and regulatory obligations. Specific retention periods are determined by the category of data and the purpose for which it was collected:

• Account and identity data – retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with applicable AML and gaming regulatory requirements
• Transaction and financial data – retained for a minimum of five (5) years from the date of each transaction
• Communications and support records – retained for a minimum of two (2) years from the date of each communication
• Technical and usage data – retained for up to two (2) years from collection, unless retained longer for fraud prevention or regulatory purposes

6.2  Where data is retained beyond the period necessary for the original purpose, it will be stored in a secure, access-restricted environment and will not be used for active processing.

7 Data Security

7.1  at999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption of all data transmitted between your browser and at999 servers
• Encryption of sensitive data at rest, including payment method details and identity documents
• Access controls restricting data access to at999 personnel on a need-to-know basis
• Regular security audits and penetration testing of Platform infrastructure
• Two-factor authentication options for user accounts

7.2  Notwithstanding the foregoing, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe your at999 account has been compromised, you must notify at999 support immediately.

8 Cookies and Tracking Technologies

8.1  at999 uses cookies and similar tracking technologies (including browser local storage and session identifiers) to operate the Platform, remember your preferences, detect fraud, and analyse Platform usage.

8.2  The following categories of cookies are used on at999:

• Strictly necessary cookies – required for login session management, security, and basic Platform functionality. These cannot be disabled without breaking the Platform.
• Functional cookies – store your preferences such as language and display settings across sessions.
• Analytics cookies – collect anonymised usage data to help at999 understand how the Platform is being used and where improvements can be made.
• Fraud prevention cookies – used to identify suspicious access patterns and protect account security.

8.3  You may manage non-essential cookies through your browser settings. Please note that disabling cookies may affect certain Platform functionality, including the ability to stay logged in to your at999 account between sessions.

9 Your Data Rights

9.1  Subject to applicable data protection law, you have the following rights in respect of your personal data held by at999:

• Right of access – you may request a copy of the personal data at999 holds about you
• Right to rectification – you may request correction of inaccurate or incomplete personal data
• Right to erasure – you may request deletion of your personal data where at999 no longer has a legal basis to retain it, subject to our mandatory retention obligations
• Right to restrict processing – you may request that at999 restrict the processing of your data in certain circumstances
• Right to data portability – you may request a machine-readable copy of personal data you have provided to at999
• Right to withdraw consent – where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal
• Right to object – you may object to processing carried out on the basis of legitimate interest, including direct marketing

9.2  To exercise any of these rights, please contact at999 support as described in Section 13. at999 will respond to verifiable data subject requests within the timeframe required by applicable law.

9.3  Please note that at999 may need to retain certain data notwithstanding an erasure request where retention is required by law, including for AML and gaming regulatory compliance purposes.

10 Minors and Age Verification

10.1  at999 strictly prohibits use of the Platform by individuals under the age of 18. at999 does not knowingly collect personal data from minors. Age verification is performed as part of the KYC process and at999 may request documentary proof of age at any time.

10.2  Where at999 discovers that personal data has been collected from an individual who is under the age of 18, such data will be deleted immediately and the associated account will be closed. Any funds deposited by a minor will be returned to the payment source following appropriate verification.

10.3  If you are a parent or guardian and believe that a minor in your care has registered with at999, please contact at999 support immediately. at999 will take prompt action upon receiving a verified report of underage account registration.

11 International Data Transfers

11.1  at999 may store and process your personal data on servers located outside Pakistan. Where personal data is transferred internationally, at999 ensures that appropriate safeguards are in place to protect your data to a standard consistent with applicable data protection requirements, which may include contractual protections with the receiving party.

11.2  By using the at999 Platform, you acknowledge that your personal data may be processed outside Pakistan as described in this section.

12 Updates to This Policy

12.1  at999 reserves the right to update this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the most recent revision. Where changes are material, at999 will notify registered users via email or in-platform notification prior to the changes taking effect.

12.2  Your continued use of the at999 Platform following publication of an updated Privacy Policy constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and close your account.

13 Contact and Data Requests

13.1  For all privacy-related queries, data subject access requests, or complaints regarding at999's handling of your personal data, please contact at999 support. Our support team is available 24 hours a day, 7 days a week in English, with Urdu assistance available on request.

13.2  Email contact for data protection matters: [email protected] (plain text – not a clickable link). Please include "Privacy Request" in your message subject line and provide sufficient detail for at999 to verify your identity and locate the relevant records.

13.3  at999 aims to respond to all data subject requests within 30 days of receipt of a complete and verifiable request.