Privacy Policy — How as999 Handles Your Personal Data

01 Who We Are

as999 is an internationally licensed online casino and sports betting platform operating at as999.biz. The platform is operated by as999's parent entity, which holds a valid international gaming licence authorising the provision of online casino, sports betting, virtual sports, and related gaming services to eligible players worldwide, including Pakistani users who access the platform on a personal-responsibility basis.

For the purposes of this Privacy Policy, as999 is the data controller — meaning we determine the purposes and means by which your personal data is collected and processed. When we engage third-party service providers to process data on our behalf (such as payment processors, KYC verification providers, or game studios), those parties act as data processors under written agreements with as999 that require them to maintain equivalent data protection standards.

If you have any questions about this Privacy Policy or how as999 handles your personal data, please contact our Data Protection team at [email protected]. We are accessible 24/7 via live chat for urgent data-related queries.

02 Data We Collect

as999 collects personal data through several channels: directly from you when you register and use the platform, automatically through the technical operation of the website, and occasionally from third-party verification services during the KYC process. The categories of data we collect are set out below.

03 How We Use Your Data

as999 uses the personal data we collect for the following purposes. Each purpose is tied to a specific legal basis described in Section 4 of this policy.

• Account creation and management: Processing your registration, maintaining your account profile, enabling login and session management, and communicating account-related updates to you.
• Identity verification (KYC): Confirming that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your payment methods belong to you — in compliance with as999's licensing obligations.
• Payment processing: Facilitating PKR deposits via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank, as well as USDT deposits and withdrawals. Matching payment sources to account holders for fraud prevention.
• Platform delivery: Serving the correct game content, sportsbook markets, odds, and promotional offers relevant to your account status and location.
• Responsible gaming: Monitoring account activity to identify problem gambling indicators, applying limits and self-exclusions you have requested, and proactively reaching out where our algorithms flag patterns of concern.
• Fraud prevention and security: Detecting and preventing account takeovers, bonus abuse, money laundering, collusion, and other prohibited conduct as described in the as999 Terms & Conditions.
• Regulatory compliance: Retaining records required by as999's licensing authority, responding to lawful requests from regulatory bodies or law enforcement, and maintaining audit trails.
• Customer support: Reviewing your communications history to resolve disputes, answer queries, and improve the quality of our support service.
• Service improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, betting market coverage, and user experience — particularly for Pakistani players in cities like Karachi, Lahore, Faisalabad, Rawalpindi, and Islamabad.
• Marketing communications: Sending you relevant promotional offers, bonus notifications, and cricket betting alerts via email or SMS — but only where you have given your explicit consent and have not subsequently opted out.

04 Legal Basis for Processing

as999 processes your personal data only where a valid legal basis exists. The legal bases we rely on are:

• Contractual necessity: Processing required to create and manage your as999 account, process your deposits and withdrawals, and fulfil the services you have signed up for. Without this processing, we cannot provide the platform to you.
• Legal obligation: Processing required to comply with as999's international gaming licence conditions, anti-money-laundering obligations, and lawful directions from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out to protect as999's platform from fraud, abuse, and technical attack; to maintain platform security; and to conduct aggregated analytics that improve the platform without identifying individual users. as999 has conducted legitimate interest assessments to confirm this processing does not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications, placement of non-essential cookies, and any other processing activity for which we have specifically asked for and received your permission. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 Cookies & Tracking Technologies

as999 uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to remember your session, and — with your consent — to analyse how players navigate the site. The categories of cookies used are:

• Strictly Necessary Cookies: These cookies are essential for the as999 platform to function and cannot be switched off. They include session tokens, login authentication cookies, and fraud-detection cookies. These are placed without requiring your consent as they are operationally required.
• Functional Cookies: These cookies remember your preferences such as preferred language, display settings, and responsible gaming reminder configurations. They improve your experience but are not strictly essential.
• Analytics Cookies: With your consent, as999 may use analytics cookies to collect anonymised data about how users navigate the platform — pages visited, session duration, game categories browsed. This data is used in aggregate form only to improve the platform.
• Marketing Cookies: as999 does not deploy third-party advertising or retargeting cookies on its platform. No external advertising network has access to your as999 browsing data.

You can manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair your ability to use the as999 platform. Disabling functional or analytics cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

06 Payment Data

as999 accepts deposits and processes withdrawals via multiple payment channels popular with Pakistani players, including JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and USDT (TRC-20 and ERC-20). The handling of payment data follows these specific principles:

• as999 does not store full mobile wallet PINs, bank account passwords, or complete card numbers on its own servers. Payment authentication is handled directly by the payment service provider's own secure environment.
• as999 retains transaction reference numbers, deposit/withdrawal amounts in PKR or USDT, timestamps, and the last few digits or partial identifier of the payment method used — solely for the purposes of transaction reconciliation, dispute resolution, and regulatory audit trail maintenance.
• USDT wallet addresses associated with your account deposits and withdrawals are retained as part of your transaction history to fulfil anti-money-laundering record-keeping requirements.
• Payment data is shared with the relevant payment processor (e.g. JazzCash, EasyPaisa, or the USDT network) only to the extent necessary to execute the transaction you have requested.

07 Sharing Your Data

as999 does not sell, rent, or trade your personal data. We share data only in the following defined circumstances, and only to the minimum extent necessary:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and USDT network operators receive the data required to process your specific transaction.
• KYC and identity verification providers: as999 uses third-party identity verification services to validate CNIC, passport, and address documents submitted during KYC. These providers are bound by confidentiality agreements and may not use your data for any other purpose.
• Game content providers: Third-party casino game studios whose games appear in the as999 casino lobby may receive a session token and anonymous player identifier to operate the game. They do not receive your name, CNIC, contact details, or payment information.
• Regulatory and law enforcement authorities: as999 will disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or a lawful regulatory direction — without prior notice to you in cases where such notice would compromise an investigation.
• Professional advisers: as999's legal counsel, auditors, and compliance advisers may access limited personal data to the extent required to provide professional services to as999, subject to professional confidentiality obligations.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of as999's business, your personal data may be transferred to the acquiring entity. You will be notified via your registered email address in advance of such a transfer, and your data rights will be preserved under the new entity's privacy policy.

08 International Data Transfers

as999 operates under an international gaming licence and may process or store your personal data on servers located outside Pakistan. When your data is transferred internationally, as999 ensures that appropriate safeguards are in place to protect it. These safeguards include:

• Contractual clauses requiring recipient entities to maintain data protection standards equivalent to those applied by as999.
• Use of service providers operating in jurisdictions that maintain adequate data protection frameworks recognised by international standards bodies.
• Encryption of data in transit and at rest for all international transfers.

By registering an as999 account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan. If you have questions about specific international transfer mechanisms used by as999, contact us at [email protected].

09 Data Retention

as999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with legal, regulatory, and licensing obligations. The general retention periods applied are:

• Account and identity data: Retained for the lifetime of your active as999 account plus a minimum of five years following account closure, in line with standard anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, as required by as999's licensing authority and applicable financial compliance standards.
• KYC documents: Retained for five years following account closure or the date the document was submitted, whichever is later.
• Customer support communications: Retained for three years from the date of the last communication in a support thread, unless the communication relates to a dispute or investigation that requires longer retention.
• Marketing consent records: Retained for the period of your active marketing consent plus three years, to demonstrate compliance with consent-based processing obligations.
• Technical and usage logs: Retained for thirteen months on a rolling basis, after which they are anonymised or deleted.

When retention periods expire, as999 securely deletes or anonymises personal data so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

10 Your Rights

As an as999 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact as999 support via live chat or email us at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data as999 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to Rectification: If any personal data held by as999 is inaccurate or incomplete, you have the right to request that we correct it. Corrections to identity data may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Note that this right is not absolute — as999 may be required to retain certain data to comply with legal obligations, even after account closure. We will inform you of what data must be retained and why.
• Right to Restriction of Processing: You may request that as999 restrict the processing of your data — for example, while a correction request is being assessed or while you contest the legitimacy of a processing activity.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format (e.g. CSV) to transfer to another service provider, where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of as999's legitimate interests, including profiling for fraud prevention. as999 will assess the objection and cease processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time with effect from the point of withdrawal.

11 Children & Minors

as999 enforces a strict minimum age of 21 years for all registered users and for all real-money gaming activity on the platform. as999 does not knowingly collect personal data from individuals under the age of 21.

During registration, as999 requires you to confirm your date of birth, and we verify age as part of the KYC process using government-issued identity documents. If as999 discovers that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all real-money balances will be frozen pending investigation, and the matter may be escalated to relevant authorities depending on the circumstances.

If you are a parent or guardian and believe that a person under 21 has registered on as999 using falsified identity information, please contact us immediately at [email protected]. as999 takes underage gambling extremely seriously and will act on all such reports on a priority basis.

12 Security Measures

as999 implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key technical and organisational measures in place include:

• 256-bit SSL/TLS encryption on all data transmissions between your browser or app and as999 servers.
• At-rest encryption for stored personal data, KYC documents, and financial records on as999 database infrastructure.
• Access controls: as999 staff access to personal data is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular data protection training.
• Two-factor authentication (2FA): Available and encouraged for all as999 user accounts to protect against unauthorised login from compromised passwords.
• Intrusion detection and monitoring: as999 systems are continuously monitored for unusual access patterns, attempted breaches, and anomalous transaction activity.
• Regular security audits: as999 conducts periodic third-party penetration testing and security reviews of its platform infrastructure.
• Data breach response: In the event of a personal data breach that poses a risk to your rights, as999 will notify affected users and the relevant regulatory authority within the timeframes required by applicable law.

While as999 takes all reasonable technical steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong unique password for your as999 account, enable 2FA, and never share your login credentials with anyone.

13 Changes to This Policy

as999 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our platform's data processing practices, changes in our licensing obligations, or developments in applicable data protection law.

When material changes are made to this Privacy Policy, as999 will notify registered users via the email address on file and will display a prominent notice on the as999 platform for a reasonable period following the update. The revised policy will be published on this page with an updated effective date.

Your continued use of the as999 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you should cease using the platform and close your account before the revised policy comes into effect. We encourage you to review this page periodically to stay informed of the current version governing your account.

14 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how as999 processes your personal data, please contact our Data Protection team using the following channels:

• Live Chat: Available 24/7 inside the as999 platform following login. Ask to speak with the Data Protection team for privacy-related queries.
• Email: [email protected] — use the subject line "Privacy Query" or "Data Rights Request" for fastest routing. Responses within 24 hours on business days.

as999 will acknowledge privacy complaints within 5 business days and provide a substantive response within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to as999's licensing authority's player protection division, in accordance with the procedures published by that authority.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous as999 privacy statements and data protection notices. as999 — serving players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all of Pakistan.