ah999 Privacy Policy

1. Introduction

1.1 ah999 ("the Platform", "we", "us", "our") is committed to protecting and respecting the privacy of every player who uses the ah999 online casino and sports betting platform at ah999.lat ("the Platform"). This Privacy Policy ("Policy") describes the personal data we collect, the purposes for which we process it, the parties with whom we share it, and the rights available to you as a data subject.

1.2 This Policy applies to all personal data collected by ah999 in connection with your use of the Platform, including data collected during account registration, identity verification, deposits, wagers, withdrawals, customer support interactions, and use of the ah999 website and associated mobile interfaces.

1.3 By creating an account on ah999 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy. If you do not agree with the way ah999 processes personal data, you should cease using the Platform and contact support to close your account.

1.4 This Policy should be read together with the ah999 Terms & Conditions, which govern the overall relationship between ah999 and its players.

2. Data Controller

2.1 For the purposes of applicable data protection legislation, ah999 acts as the data controller in respect of personal data collected from players through the Platform. The data controller is responsible for determining the purposes and means of processing personal data.

2.2 ah999 operates the Platform under international gaming authority licensing. Our licensing framework mandates compliance with internationally recognised data protection principles, including data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality.

2.3 If you have any questions regarding this Policy or wish to exercise any of your data subject rights, please contact our Data Protection team at:

3. Personal Data We Collect

3.1 ah999 collects personal data in the following categories. We collect only the data that is necessary for the specific purpose described, consistent with the principle of data minimisation.

3.2 Sensitive Data. ah999 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, health data, or religious beliefs) unless specifically required by applicable law or regulatory obligation. Where any sensitive data is inadvertently provided, ah999 will delete it unless a specific legal basis for processing exists.

4. Legal Basis for Processing

4.1 ah999 processes personal data only where a valid legal basis exists. The primary legal bases on which ah999 relies are:

• Performance of a Contract: Processing necessary to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with our gaming licence conditions, anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and financial crime reporting duties;
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming enforcement, and improving our services — where these interests are not overridden by your fundamental rights;
• Consent: For optional marketing communications and non-essential cookies, where we seek your express consent and you may withdraw it at any time.

5. How We Use Your Personal Data

5.1 ah999 uses collected personal data for the following specific purposes:

Account & Platform Management

Creating and maintaining your player account; verifying your identity; providing access to casino games, sports betting markets, and promotional features; processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, and other supported payment channels; and delivering account-related communications.

Regulatory Compliance

Fulfilling our KYC and AML obligations under our gaming licence; age verification (21+ requirement enforcement); sanctions screening; suspicious transaction reporting; maintaining audit trails as required by regulatory authorities; and retaining records for the legally mandated retention periods.

Security & Fraud Prevention

Detecting and preventing fraud, money laundering, multi-accounting, bonus abuse, match-fixing related activity, and other prohibited conduct. Technical data including IP addresses and device fingerprints is used to identify suspicious access patterns and protect both ah999 and its players.

Responsible Gaming

Monitoring gaming activity to identify patterns that may indicate problem gambling behaviour; enforcing deposit limits, session limits, and self-exclusion instructions; and providing mandatory responsible gaming interventions where required under our licence conditions.

Customer Support

Responding to support requests via live chat and email; resolving account disputes; processing complaints through the formal complaints procedure; and maintaining communication records for quality assurance and training purposes.

Platform Improvement

Analysing anonymised and aggregated usage data to improve platform performance, game selection, user experience, and payment infrastructure for our Pakistani player base.

Marketing (Consent-Based)

Sending promotional offers, bonus notifications, and gaming-related updates to players who have provided express consent. All marketing communications include a clear unsubscribe mechanism.

6. Data Sharing & Third-Party Disclosure

6.1 We do not sell your personal data. ah999 will never sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. Full stop.

6.2 ah999 may share personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Identity Verification Providers: Third-party KYC and age-verification services that process identity documents to confirm player eligibility;
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, 1LINK, Visa/Mastercard network processors, and intermediary payment service providers required to execute deposits and withdrawals;
• Game Providers: Licensed game software suppliers (such as those providing live dealer and slot content) may receive minimum necessary session data to deliver game content;
• Fraud Prevention Services: Specialist fraud detection and AML screening services that help protect the Platform and its players;
• Regulatory Authorities: Gaming licensing bodies, financial intelligence units, and law enforcement agencies where disclosure is required by applicable law or licence condition;
• Professional Advisers: Legal counsel, auditors, and compliance consultants where required for legitimate business purposes, subject to strict confidentiality obligations;
• Technology Infrastructure: Cloud hosting providers and IT infrastructure partners who process data only on our documented instructions and under binding data processing agreements.

6.3 All third parties who process ah999 player data are required to maintain appropriate technical and organisational security measures and are prohibited from using the data for any purpose other than the specific purpose for which it was shared.

7. Data Retention Periods

7.1 ah999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and our gaming licence conditions. The following general retention principles apply:

7.2 Where retention beyond these standard periods is required for ongoing legal proceedings, regulatory investigations, or dispute resolution, ah999 will retain the relevant data until the matter is concluded.

8. Security Measures

8.1 ah999 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and ah999 servers is protected by SSL/TLS encryption (minimum 256-bit). The padlock icon in your browser confirms this protection is active;
• Encryption at Rest: Sensitive personal data including financial details and identity documents is encrypted in our database infrastructure;
• Access Controls: Internal access to player personal data is restricted on a strict need-to-know basis. All staff with data access undergo background screening and receive regular data protection training;
• Two-Factor Authentication: Player accounts support SMS-based two-factor authentication (2FA) to prevent unauthorised login;
• Penetration Testing: The ah999 platform undergoes regular independent security assessments and vulnerability testing;
• Incident Response: ah999 maintains a formal data breach response procedure. In the event of a breach affecting your rights, ah999 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

8.2 While ah999 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your account credentials confidential and for notifying ah999 promptly if you suspect unauthorised access.

9. Cookies & Tracking Technologies

9.1 ah999 uses cookies and similar technologies on the Platform to ensure functionality, improve user experience, and — with your consent — deliver relevant promotional content.

Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable login session management, security features, and core platform functionality. These cookies cannot be disabled without breaking Platform functionality.

Analytics Cookies

We use privacy-compliant analytics tools to understand how players navigate the Platform — which pages are visited, where players exit, and how features are used. This data is aggregated and anonymised. These cookies help us improve the Platform experience.

Preference Cookies

These cookies remember your settings and preferences, such as your selected language and display preferences, to personalise your experience on return visits.

Marketing Cookies (Consent Required)

Where you have provided consent, marketing cookies may be used to deliver targeted promotional content relevant to your gaming interests on the Platform. You may withdraw consent at any time through your account privacy settings.

9.2 You can manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may impact Platform functionality.

10. International Data Transfers

10.1 As an internationally licensed gaming platform, ah999 may process or transfer personal data in countries outside Pakistan, including the jurisdiction in which ah999 holds its gaming licence and the locations of our third-party service providers.

10.2 Where data is transferred internationally, ah999 ensures that appropriate safeguards are in place, including contractual data protection clauses, to protect the personal data in a manner consistent with the standards described in this Policy.

10.3 Payment data processed through JazzCash, EasyPaisa, and local Pakistani bank networks is handled subject to the privacy and security policies of those local payment providers, which are regulated by the State Bank of Pakistan and applicable Pakistani financial regulations.

11. Your Data Subject Rights

11.1 Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by ah999:

• Right of Access: You may request a copy of all personal data ah999 holds about you (a "Subject Access Request");
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while the accuracy of the data is disputed;
• Right to Data Portability: Where processing is based on consent or contract, you may request that we provide your data in a commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of these rights, contact the ah999 Data Protection team at [email protected] with the subject line "Privacy Request". We will respond within 30 days of receiving your request. Where requests are complex or numerous, the response period may be extended to 60 days with notification.

11.3 Limitations. Certain data subject rights are subject to limitations where data retention is required by legal obligation (for example, AML and gaming licence record-keeping requirements). In such cases, ah999 will inform you of the applicable limitation.

12. Minors & Age Restriction

12.1 The ah999 Platform is strictly for persons aged 21 years and above. ah999 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

12.2 Where ah999 discovers or has reasonable grounds to believe that personal data has been provided by a person under 21, the account will be immediately suspended, the data will be reviewed, and appropriate steps will be taken including deletion of data not required for regulatory purposes and notification where required by law.

12.3 If you believe a minor may have accessed the ah999 Platform, please contact [email protected] immediately.

13. Marketing Communications

13.1 ah999 will only send direct marketing communications — including promotional emails, SMS notifications, and push notifications regarding bonuses and offers — where you have provided express opt-in consent or where we have a legitimate interest basis as an existing customer receiving communications about directly related products.

13.2 How to Opt Out. You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email;
• Updating your communication preferences in your ah999 account settings;
• Contacting [email protected] with the subject line "Marketing Opt-Out".

13.3 Opting out of marketing communications does not affect the delivery of transactional communications related to your account (such as deposit confirmations, withdrawal notifications, and security alerts), which are necessary for account management.

14. Changes to This Privacy Policy

14.1 ah999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our licensing requirements, our data practices, or the services we offer.

14.2 Where changes are material, ah999 will notify registered players via email to their registered address and/or via a notice on the Platform prior to the changes taking effect. The effective date at the top of this Policy will be updated accordingly.

14.3 We encourage you to review this Policy periodically. Your continued use of the Platform after any update to this Policy constitutes acceptance of the revised terms.

15. Contact & Complaints

15.1 For all privacy-related queries, data subject requests, or to report a suspected data breach, contact the ah999 Data Protection team:

15.2 Complaints. If you are dissatisfied with how ah999 has handled your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority or through the dispute resolution mechanism prescribed under ah999's gaming licence.