at999 Privacy Policy — How We Collect, Use, and Protect Your Data

1. Scope of This Policy

This Privacy Policy applies to all personal data processed by at999 in connection with the operation of the at999 Platform, accessible at at999.site, and any related services, applications, or communications channels operated by or on behalf of at999. It covers data processed about registered players, prospective players who browse the Platform without registering, and any individual who contacts at999 for support or other purposes.

This Policy should be read alongside the at999 Terms & Conditions, which govern the overall legal relationship between at999 and its users. By registering for an at999 Account or otherwise using the at999 Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

For the purposes of applicable data protection law, at999 — operating through its licensed entity responsible for the at999 Platform — acts as the data controller in respect of all personal data collected through the at999 Platform. As data controller, at999 determines the purposes for which your personal data is processed and the means by which that processing takes place.

at999 operates under an internationally recognised gaming license, which imposes binding data handling obligations as part of its licensing conditions. Compliance with these obligations is monitored on a periodic basis by the licensing authority.

3. Data We Collect

at999 collects the following categories of personal data in connection with the registration and operation of player accounts:

at999 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, or health data beyond what is strictly necessary for responsible gaming compliance purposes (for example, self-exclusion records and player-provided information about gambling-related difficulties).

4. How We Use Your Data

at999 uses the personal data described in Section 3 for the following purposes:

• Account registration and management: Creating and maintaining your at999 Account, verifying your identity, and processing your at999 Login credentials securely.
• Payment processing: Facilitating deposits and withdrawals through supported PKR payment channels including JazzCash, EasyPaisa, and major Pakistani banks.
• Regulatory compliance: Fulfilling Anti-Money Laundering (AML), Know Your Customer (KYC), and gaming license obligations, including age verification to enforce the 21+ access restriction.
• Responsible gaming: Monitoring gaming activity to identify potential signs of problem gambling and ensuring that self-exclusion and limit settings are correctly applied.
• Platform security: Detecting and preventing fraud, unauthorised account access, and prohibited activity as described in the at999 Terms & Conditions.
• Customer support: Responding to player queries, complaints, and requests submitted through at999's support channels.
• Service improvement: Analysing aggregated, anonymised usage data to improve the at999 Platform's performance, design, and game offering.
• Marketing communications: Sending promotional offers, bonus notifications, and product updates to players who have not opted out of marketing, where permitted.

5. Legal Bases for Processing

at999 processes personal data on the following legal bases, as applicable to each purpose described in Section 4:

• Contractual necessity: Processing required to perform the agreement between at999 and the player, including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, licensing conditions, and other applicable legal obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, and service improvement, where these interests are not overridden by the player's data protection rights.
• Consent: Processing for direct marketing communications, where at999 has obtained valid prior consent, which may be withdrawn at any time by the player.

6. Sharing Your Data

at999 does not sell, rent, or trade personal data to third parties for their own commercial purposes. at999 may, however, share player data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card network processors require transaction data to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC services engaged to verify player identity and age documents during registration and withdrawal processing.
• Gaming software providers: Game studio partners who supply live dealer, slot, and RNG game technology to the at999 Platform may receive anonymised session data for technical integration purposes.
• Regulatory and licensing authorities: at999's gaming license authority and applicable law enforcement agencies may receive player data where required by law, regulation, or a valid legal process.
• IT and infrastructure providers: Cloud hosting, data security, and platform support services engaged by at999 under strict data processing agreements.

Where data is transferred to service providers outside of Pakistan, at999 takes appropriate steps to ensure that such transfers comply with applicable data protection requirements, including the use of contractual data protection clauses.

7. Cookies & Tracking Technologies

The at999 Platform uses cookies and similar tracking technologies to operate and improve its services. Cookies are small text files placed on your device when you visit the at999 Platform. The following types of cookies are used:

• Essential cookies: Required for the at999 Platform to function, including maintaining your login session and remembering account preferences. These cannot be disabled without impacting core functionality.
• Performance cookies: Used to collect anonymised data about how players navigate and use the at999 Platform, helping at999 identify areas for improvement. No personally identifiable information is captured through performance cookies.
• Functional cookies: Used to remember optional player preferences such as language settings and last-visited game categories.
• Marketing cookies: Used, where player consent has been given, to deliver relevant promotional content relating to at999 games, bonuses, and events. Players may opt out of marketing cookies through their browser settings or the at999 account preferences panel.

Players may manage or disable non-essential cookies through their browser settings at any time. Note that disabling essential cookies may affect the ability to access certain at999 Platform features, including the at999 Login function.

8. Data Retention

at999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of the player's at999 Account and for a minimum of five (5) years following account closure, in accordance with AML and gaming license record-keeping requirements.
• Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven (7) years for AML compliance purposes.
• Support communications: Customer support correspondence is retained for three (3) years from the date of the interaction, or longer if the communication relates to a dispute that remains unresolved.
• Marketing data: Where marketing consent has been given and later withdrawn, marketing records are retained for twelve (12) months following opt-out to evidence compliance with the withdrawal request.

Upon expiry of the applicable retention period, at999 will securely delete or anonymise personal data so that it can no longer be attributed to an identifiable individual.

9. Your Rights

Subject to applicable law, at999 players hold the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data at999 holds about you at any time.
• Right to rectification: You may request correction of inaccurate or incomplete personal data associated with your at999 Account.
• Right to erasure: You may request deletion of your personal data where at999 no longer has a legal basis for retaining it. Note that certain data must be retained for regulatory compliance and cannot be deleted on request.
• Right to restrict processing: You may request that at999 limits the processing of your personal data in certain circumstances, such as where you dispute the accuracy of the data or object to a specific processing purpose.
• Right to data portability: Where technically feasible, you may request that at999 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where at999 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the rights listed above, please contact the at999 support team at [email protected]. Requests will be responded to within thirty (30) calendar days. at999 may request identity verification before fulfilling a data rights request.

10. Children's Privacy

The at999 Platform is strictly intended for adults aged 21 years and older. at999 does not knowingly collect personal data from any individual under the age of 21. If at999 becomes aware that personal data has been collected from an individual under this age, the associated account will be suspended immediately and the data will be deleted after any legally required retention period has been observed.

Parents and guardians who believe that an underage individual may have registered on the at999 Platform are encouraged to contact at999 immediately at [email protected] so that the situation can be investigated and remedied without delay.

11. Security Measures

at999 implements a range of technical and organisational security measures designed to protect player data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between player devices and at999 servers.
• Encrypted storage of sensitive data fields, including financial information and identity documents.
• Strict internal access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments of at999 Platform infrastructure.
• Incident response procedures for the prompt detection, investigation, and reporting of any suspected personal data breach.

While at999 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. Players are encouraged to protect their own at999 Login credentials and to report any suspected unauthorised account access to at999 support immediately.

12. Third-Party Services

The at999 Platform may reference or be integrated with third-party services that operate under their own privacy policies. at999 is not responsible for the privacy practices of third-party service providers beyond the data processing agreements described in Section 6. Players are encouraged to review the privacy notices of any third-party payment provider — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — whose services they use in connection with their at999 account.

at999 does not include third-party advertising networks on its Platform and does not permit third parties to place advertising trackers on at999 pages without player consent.

13. Policy Amendments

at999 may revise this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Material changes to this Policy will be communicated to registered players via the mobile number or email address associated with their at999 Account, or by a prominent notice on the at999 Platform, no less than fourteen (14) days prior to the change taking effect.

The most current version of this Privacy Policy will always be accessible at at999.site/privacy-policy. Continued use of the at999 Platform following notification of a material amendment constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which at999 handles your personal data, please contact the at999 Data Protection team through the following channel:

• Email: [email protected]
• Live Chat: Available 24/7 via the at999 Platform once logged in.

at999 aims to acknowledge all data-related correspondence within 48 hours and to resolve requests within thirty (30) calendar days. For complaints that cannot be resolved directly with at999, players may refer the matter to the data protection supervisory authority relevant to the jurisdiction of at999's operating license.