as999 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy ("Policy") is issued by the operator of the as999 platform ("as999," "we," "us," "our") and governs the collection, processing, storage, and use of personal data relating to individuals ("you," "your," "Player") who access or use the as999 website at as999.bid, including all associated subdomains, mobile-optimised interfaces, and services accessible through the Platform.

as999 is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection standards and the requirements of our international gaming license. This Policy applies to all personal data we collect — whether you are a registered as999 account holder, a visitor to the as999 Platform who has not yet registered, or a former as999 Player whose account has been closed.

By registering an as999 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how as999 processes personal data as described herein, you should not use the as999 Platform and should contact our support team to discuss account closure options.

as999 collects the following categories of personal data from Players and Platform visitors. We have structured this information by category for clarity:

as999 does not knowingly collect sensitive personal data beyond what is necessary for KYC compliance and responsible gaming obligations. We do not collect information relating to racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond document verification for identity confirmation purposes.

as999 collects personal data through the following mechanisms:

• Direct Collection: Information you provide directly when registering your as999 account, completing your profile, submitting KYC documentation, making deposits or withdrawal requests, contacting customer support, or responding to surveys and promotions.
• Automated Technical Collection: Technical data including your IP address, device information, browser type, session data, and usage patterns are collected automatically through the Platform's analytics and security infrastructure each time you access as999.bid.
• Cookie and Tracking Technologies: as999 uses cookies, web beacons, and similar technologies to collect data about how you interact with the Platform. A full description of our cookie usage is provided in Section 7 of this Policy.
• Third-Party Sources: as999 may receive personal data about you from third-party sources in limited circumstances, including identity verification service providers (for KYC purposes), payment processors (for transaction confirmation), fraud prevention databases, and responsible gaming databases operated under gaming regulatory frameworks.
• Transaction Processing: When you make a deposit or withdrawal via JazzCash, EasyPaisa, or any other supported payment method, as999 receives confirmation data from the payment processor confirming the transaction, including the amount and the masked identifier of the sending account.

as999 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing your identity, contact, financial, and gaming activity data is necessary for as999 to perform its contractual obligations to you as an account holder — including operating your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal Obligation: as999 is required to collect and retain certain personal data (particularly identity and financial data) to comply with the KYC, anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gaming obligations imposed by our international gaming license and applicable law.
• Legitimate Interests: as999 processes certain technical and usage data on the basis of legitimate business interests, including fraud prevention and detection, platform security, responsible gaming monitoring, product improvement, and dispute resolution. Where we rely on legitimate interests, we have assessed that these interests are not overridden by your individual data protection rights.
• Consent: Where as999 processes your data for marketing communications or optional profiling for personalised promotions, we rely on your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

as999 uses the personal data it collects for the following specific purposes:

• Account Management: Creating and managing your as999 account, authenticating your identity at login, maintaining your account records, processing profile updates, and providing account-related communications.
• Gaming Services: Processing bets and wagers, settling game outcomes, crediting winnings to your account balance, operating live casino tables and slot sessions, and delivering all gaming products available through as999.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and USDT (TRC20); processing withdrawal requests; reconciling transaction records; and investigating payment disputes.
• Identity Verification (KYC): Verifying your identity, age, and address in accordance with as999's obligations under its international gaming license. KYC may be initiated at registration, before your first withdrawal, or at any subsequent point where as999 determines verification is warranted.
• Regulatory Compliance: Meeting our AML and CTF monitoring obligations, including transaction monitoring, suspicious activity reporting where required by law, and maintaining records required by our licensing authority for audit purposes.
• Responsible Gaming: Monitoring your gaming activity against responsible gaming indicators, applying deposit and loss limits where you have set them, processing self-exclusion requests, and fulfilling our obligations to prevent problem gambling under our gaming license.
• Security and Fraud Prevention: Detecting and investigating suspicious login activity, fraudulent transactions, multi-accounting, bonus abuse, and any other prohibited conduct on the as999 Platform.
• Customer Support: Responding to your enquiries, resolving complaints, providing technical assistance, and improving our support quality through communication records review.
• Marketing and Promotions: Where you have consented, sending you promotional offers, bonus notifications, product updates, and event communications via SMS to your registered Pakistani mobile number or by other agreed channels.
• Platform Improvement: Analysing aggregated usage data and session patterns to improve the as999 Platform's performance, game library, user interface, and overall player experience.

as999 does not sell, rent, or trade your personal data to third parties. We share your personal data only in the circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Processors: as999 shares necessary transaction data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing networks to facilitate your deposits and withdrawals. These providers process your data under their own privacy policies and under contractual obligations that protect your information.
• Identity Verification Providers: as999 may share your identity and document data with accredited third-party KYC service providers to conduct identity and age verification as required by our licensing obligations.
• Gaming Software Providers: As part of delivering live casino and slot services, as999 shares limited session data (such as bet amounts and game session identifiers) with certified software providers including Playtech and other licensed gaming content suppliers. These providers do not receive your full personal profile.
• Regulatory and Law Enforcement Authorities: as999 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by law, court order, or regulatory requirement. This includes mandatory disclosures under AML and CTF legislation where as999 is required to file suspicious activity reports.
• Fraud and AML Databases: as999 may share data with shared fraud prevention databases and AML screening services operated under gaming regulatory frameworks to prevent fraud, money laundering, and multi-accounting across the industry.
• Corporate Transactions: In the event of a merger, acquisition, or sale of as999's business or assets, your personal data may be transferred to a successor entity. You will be notified of any such transfer and your rights in relation to it.

as999 uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to maintain your session, to detect fraud, and to improve user experience. The following categories of cookies are in use on as999.bid:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your as999 account, security cookies that protect against CSRF attacks, and cookies that remember your in-session preferences. These cookies cannot be disabled without impairing core Platform functionality.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised information about how visitors use as999.bid — such as which pages are visited most frequently and how players navigate between sections. This data helps as999 improve the Platform experience. No personally identifiable information is collected through these cookies.
• Functional Cookies: These remember your language preference, display settings, and other non-essential preferences to provide a more personalised experience on the as999 Platform across sessions.
• Security and Fraud Detection Cookies: as999 uses specific cookies to detect suspicious activity, including unusual login patterns and indicators of automated bot activity, as part of our platform security and fraud prevention infrastructure.

You may configure your browser to refuse some or all cookies; however, disabling strictly necessary cookies will impair your ability to log in to and use your as999 account. as999 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of displaying targeted advertising on other websites.

as999 retains your personal data only for as long as is necessary for the purposes for which it was collected, and in compliance with the retention requirements imposed by our international gaming license and applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your as999 account and for a period of at least five years following account closure, in accordance with our licensing and AML record-keeping obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five years from the date of the transaction, as required by our AML compliance obligations.
• KYC Documentation: Identity and age verification documents are retained for a minimum of five years following the completion of the KYC process, or longer where required by regulatory instruction.
• Gaming Activity Records: Bet history, session logs, and game records are retained for the duration of your account and for a minimum of three years following account closure, for dispute resolution and regulatory audit purposes.
• Support Communications: Customer support records, live chat transcripts, and complaint documentation are retained for a minimum of three years from the date of the interaction.
• Technical Logs: IP address logs and security event logs are retained for up to 12 months, except where a specific security investigation requires longer retention.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account and for three years following closure, to demonstrate compliance with your stated preferences.

Upon expiry of the applicable retention period, as999 will securely delete or anonymise your personal data in accordance with our data disposal procedures, unless a legal obligation requires further retention.

as999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the as999 servers is protected by 256-bit SSL/TLS encryption, preventing interception over any network — including mobile data connections on Pakistani operators such as Telenor, Jazz, Zong, and Ufone.
• Encryption at Rest: Personal data stored in as999's databases is encrypted at rest using industry-standard encryption protocols, ensuring that data cannot be read even in the event of unauthorised physical access to storage infrastructure.
• Access Controls: Access to personal data within as999's systems is restricted on a strict need-to-know basis. Personnel are granted access only to the data required to perform their specific role, and all data access is logged and audited.
• Two-Factor Authentication: as999 offers and strongly recommends two-factor authentication for all player accounts, adding a second layer of protection against unauthorised account access.
• Intrusion Detection: as999 maintains active intrusion detection and prevention systems that monitor for unusual access patterns, unauthorised access attempts, and other indicators of security compromise.
• Incident Response: as999 maintains a formal data breach response plan. In the event of a personal data breach that poses a risk to your rights, as999 will notify you and the relevant regulatory authority within the timeframes required by our licensing obligations.
• Regular Security Audits: as999's security infrastructure is subject to regular internal review and periodic independent third-party security assessment.

as999 operates under an international gaming license and may, in the course of providing gaming services, transfer your personal data to servers, service providers, or regulatory bodies located outside Pakistan. Such transfers may occur in connection with:

• The hosting of the as999 Platform on internationally located cloud or data centre infrastructure
• The processing of transactions through internationally operating payment networks (Visa, Mastercard, USDT blockchain networks)
• The delivery of game content via software providers such as Playtech and their affiliated server infrastructure
• The processing of KYC verification through internationally operating identity verification service providers
• Regulatory reporting to the authority under which as999's gaming license is issued

Where as999 transfers personal data internationally, we take appropriate steps to ensure that your data receives adequate protection, including through the use of contractual safeguards with recipient service providers and ensuring that any transfer complies with the data transfer requirements applicable under as999's licensing framework.

as999 recognises the following rights in relation to your personal data. These rights may be subject to limitations where as999 has a legal obligation to retain data or where exercising the right would conflict with as999's regulatory requirements.

To exercise any of the above rights, contact as999 customer support via the live chat function available within your logged-in as999 account, or by email to our support address. as999 will verify your identity before processing data rights requests to ensure that your information is not disclosed to an unauthorised third party.

The as999 Platform is strictly prohibited for individuals under the age of 21. as999 does not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted at registration, and as999 may request documentary proof of age at any point during the account lifecycle.

In the event that as999 becomes aware that personal data has been collected from an individual under the age of 21 — whether through fraudulent registration or any other means — we will immediately close the associated account, delete all personal data collected, and handle any deposited balance in accordance with our Terms & Conditions and applicable law.

The as999 Platform integrates third-party services to deliver its gaming products and payment functionality. These include gaming software providers such as Playtech, payment processors including JazzCash and EasyPaisa, and live casino studio operators. These third parties operate under their own privacy policies, and as999 is not responsible for the data practices of these providers beyond the contractual protections we require them to maintain.

as999.bid does not contain links to external websites or third-party platforms. Where as999 refers to third-party payment applications (such as the JazzCash app) in its cashier interface, interactions with those applications are governed by the respective provider's terms and privacy policy, not by this Policy.

as999 does not operate or endorse any third-party sites, forums, or social media pages that may discuss or reference the as999 brand. Information shared on such platforms is outside as999's control and is not subject to this Privacy Policy.

as999 may send promotional communications about bonuses, new games, platform features, and special offers to Players who have consented to receive such communications. Marketing communications from as999 may be delivered via:

• SMS to your registered Pakistani mobile number
• In-Platform notifications within your as999 account dashboard
• Email, if you have provided an email address and consented to email marketing

You may withdraw your consent to receive marketing communications from as999 at any time by updating your notification preferences in your as999 account settings, or by contacting customer support with a clear request to opt out. Withdrawal of marketing consent does not affect your ability to use the as999 Platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, or account security alerts), which are sent on the basis of contractual necessity rather than marketing consent.

as999 does not engage in unsolicited marketing to individuals who have not registered an as999 account. If you receive communications purporting to be from as999 that you did not consent to, please report them to our support team — they may indicate a phishing or impersonation attempt.

as999 reserves the right to update, amend, or replace this Privacy Policy at any time. We may do so in response to changes in applicable law, regulatory requirements, our data processing practices, or the services we offer through the as999 Platform.

Where changes to this Policy are material — meaning they significantly affect how we process your personal data or your rights in relation to it — as999 will notify you in advance of the changes taking effect, by posting a notice on the Platform or by contacting you via your registered mobile number or email address where one has been provided.

The effective date of the current version of this Policy is displayed at the top of this page. We recommend that you review this Policy periodically to stay informed about how as999 handles your personal data. Your continued use of the as999 Platform after the effective date of any amendments constitutes your acknowledgement of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data as999 holds about you, or the exercise of any of your data rights, please contact our team through the following channels:

• Support Email (plain text): [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, via the chat function accessible when logged in to your as999 account
• Response Timeline: as999 aims to acknowledge all privacy-related written enquiries within 5 business days and to provide a substantive response within 30 days. Complex requests may require additional time, in which case we will inform you of the expected timeline.

When contacting as999 regarding a data rights request, please include your registered as999 username or mobile number and a clear description of your request or concern. as999 will verify your identity before processing any request that involves access to or deletion of personal data.