at999 Privacy Policy

1. Overview & Scope

This Privacy Policy ("Policy") is issued by at999 ("at999", "we", "us", "our") and applies to all personal data collected from individuals ("you", "player", "user") who access or use the at999 online casino and sports betting platform at https://at999.onl, including any associated web or mobile interfaces (collectively, the "Platform").

at999 is committed to protecting the privacy of every player who registers or browses on our Platform. We handle personal data in a responsible manner, consistent with internationally recognised data protection principles. This Policy describes in plain terms exactly what data we hold about you, why we hold it, and how you can exercise control over it.

By registering an account or using the at999 Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of your agreement with at999.

2. Data We Collect

at999 collects the following categories of personal data from users of the Platform:

2.1 Identity & Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth (used for mandatory 21+ age verification)
• Pakistani CNIC number, passport number, or other government-issued ID number
• Residential address, city (e.g., Karachi, Lahore, Islamabad, Faisalabad), and postal code
• Nationality and country of residence

2.2 Contact Data

• Email address (primary communication channel)
• Mobile phone number (used for account security and verification)

2.3 Financial & Payment Data

• JazzCash or EasyPaisa mobile wallet number
• HBL, UBL, Meezan Bank, or SadaPay account details (where used for transactions)
• USDT wallet address (where applicable)
• Transaction history: deposit amounts, withdrawal requests, bonus credits in PKR
• Source-of-funds documentation where required for AML compliance

2.4 Account & Gaming Activity Data

• at999 account username and encrypted password hash
• Betting history, game session records, wager amounts, win/loss outcomes
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Customer support communications (live chat transcripts, email exchanges)

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps, page views, and navigation data
• Cookies and similar tracking technologies (see section 7)

3. How We Collect Your Data

at999 collects personal data through the following channels:

• Direct registration: When you create an at999 account, you voluntarily provide identity, contact, and financial details through our registration and KYC (Know Your Customer) process.
• Account usage: Your gaming activity, betting history, session data, and account preferences are recorded automatically as you interact with the at999 Platform.
• Deposits and withdrawals: When you initiate a financial transaction via JazzCash, EasyPaisa, or any other accepted payment method, transactional data is generated and recorded.
• Customer support interactions: When you contact at999's support team via live chat or email, the content and metadata of those communications is stored.
• Cookies and tracking technologies: Our Platform uses cookies, web beacons, and similar technologies to collect technical and behavioural data as described in section 7.
• Third-party verification providers: For identity verification and AML screening, at999 may receive confirmation data from regulated KYC and compliance service providers.
• Publicly available sources: In limited circumstances related to fraud prevention or AML compliance, at999 may cross-reference information from publicly available databases or sanctions lists.

4. How We Use Your Personal Data

at999 processes your personal data only for defined, legitimate purposes. The primary purposes for which we use your data are set out in the table below:

at999 does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where required to do so by our licensing authority or applicable AML regulations — in which case you have the right to request human review of any such decision.

5. Legal Basis for Processing

at999 processes your personal data on one or more of the following legal bases, as applicable to the specific processing activity:

• Contract performance: Processing is necessary to deliver the services you have contracted for when registering an at999 account, including game access, bet settlement, and payment processing.
• Legal obligation: Processing is required to comply with applicable laws and our international gaming licence obligations, including KYC, AML screening, age verification, and responsible gaming requirements.
• Legitimate interest: Processing is necessary for at999's legitimate business interests — such as fraud prevention, Platform security, and service improvement — where these interests are not overridden by your privacy rights.
• Consent: For specific optional processing activities, such as receiving promotional emails or push notifications about bonuses, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time via your account settings.

6. Data Sharing & Disclosure

at999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data only in the following limited circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processing partners receive only the minimum data necessary to process your transactions securely.
• KYC and identity verification providers: Regulated third-party identity verification services may process your identity documents and CNIC details to fulfil our age and identity verification obligations.
• AML and fraud screening services: We use licensed compliance technology providers to screen transactions and player activity against sanctions lists and fraud indicators.
• Gaming software providers: Game studios and live casino operators whose games are featured on the at999 Platform may receive session and wager data necessary to facilitate gameplay and resolve disputes.
• Regulatory and licensing authorities: at999 may be required to disclose player data to its international gaming licensing authority or to competent regulatory bodies in response to lawful requests or audits.
• Law enforcement: Where required by law or a valid court order, at999 may disclose personal data to Pakistani law enforcement or other competent authorities.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all at999 assets, player data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Cookies & Tracking Technologies

at999 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow us to recognise your browser, remember your preferences, maintain your session, and collect analytical data.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytical cookies: Collect anonymised data about how visitors use the at999 Platform (pages visited, session duration, navigation paths) to help us improve the user experience.
• Security cookies: Used to detect suspicious activity, prevent account takeover, and enforce our fraud prevention policies.

7.2 Managing Cookies

You can manage or disable non-essential cookies via your browser settings. Please note that disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled as they are essential to the operation of the at999 Platform. Your cookie preferences can be updated at any time via the cookie management link in the footer of the at999 Platform.

8. Data Retention

at999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our gaming licence obligations. The following retention periods apply as a baseline:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by AML and gaming licence regulations.
• Transaction and financial records: Retained for a minimum of five (5) years following each transaction in accordance with applicable financial regulation requirements.
• Gaming activity records: Retained for a minimum of three (3) years following account closure or the last gaming session, whichever is later.
• Customer support communications: Retained for two (2) years following resolution of the relevant support case.
• Technical and device data: Retained for up to twelve (12) months for security and fraud prevention purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent plus one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, at999 will securely delete or irreversibly anonymise your personal data.

9. Data Security

at999 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our data security practices include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the at999 Platform
• AES-256 encryption for sensitive data stored in at999 databases
• Password hashing using industry-standard one-way algorithms — at999 staff cannot view your plaintext password
• Two-factor authentication (2FA) available for all player accounts
• Regular security audits and penetration testing of Platform infrastructure
• Strict internal access controls — at999 staff access to personal data is limited on a need-to-know basis
• Dedicated security incident response procedures with notification protocols

10. Your Privacy Rights

Subject to applicable data protection law and the limitations imposed by at999's legal obligations (including AML and gaming licence requirements), you have the following rights in relation to your personal data held by at999:

• Right of access: You may request a copy of the personal data at999 holds about you, along with information about how it is processed.
• Right to rectification: You may request that at999 correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to at999's legal obligations to retain data for AML, KYC, and gaming licence compliance purposes.
• Right to restrict processing: You may request that at999 limit the ways in which we process your data in specific circumstances (e.g., while the accuracy of data is being contested).
• Right to data portability: Where processing is based on your consent or a contract, you may request that at999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to at999's processing of your personal data where that processing is based on legitimate interest, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional emails), you may withdraw that consent at any time via your at999 account settings without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact at999's privacy team using the contact details in section 14. at999 will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case at999 will notify you of the extension and its reason.

11. Minors & Age Policy

at999 is a 21+ platform. The at999 Platform is strictly not intended for, and must not be used by, any individual under the age of 21. at999 does not knowingly collect personal data from individuals under 21 years of age.

As part of our mandatory KYC process, at999 requires all players to verify their age using a valid Pakistani CNIC, passport, or other government-issued identification before any withdrawal is processed. Where at999 reasonably believes that a registered user is under 21, the relevant account will be suspended pending age verification and the player's data will be processed only to the extent necessary to verify age and close the account in compliance with our legal obligations.

12. International Data Transfers

at999 operates under an international gaming licence and uses technology infrastructure and service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. at999 ensures that any such international transfer of personal data is subject to appropriate safeguards, which may include:

• Standard contractual clauses approved by relevant data protection authorities
• Binding corporate rules where data is transferred to affiliated entities within the at999 group
• Adequacy decisions or equivalent recognised safeguards applicable to the recipient country

Where you would like further information about the specific safeguards in place for any particular international transfer of your data, please contact at999's privacy team using the details in section 14.

13. Changes to This Privacy Policy

at999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes to this Policy will be communicated to registered players via email notification to the address held on record, or by prominent notice on the at999 Platform prior to the changes taking effect.

The effective date shown at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the at999 Platform following the posting of any revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how at999 protects your personal data.

14. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or at999's handling of your personal data, please contact our privacy team through the following channels:

• Email: support at999.onl
• Live Chat: Available 24/7 via the at999 Platform after login
• Response Time: Privacy requests — within 30 calendar days of receipt

at999 takes all privacy complaints seriously. If you submit a privacy complaint to at999 and are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction, or to the regulatory body overseeing at999's international gaming licence.

Note: at999's privacy communications are conducted in English. at999 does not provide legal advice. For privacy-related legal matters, please seek independent legal counsel.