as999 Privacy Policy

This Privacy Policy ("Policy") describes how as999 ("the Company", "we", "us", "our"), operating the online platform accessible at as999.one, collects, uses, stores, and protects the personal data of individuals who register for or use the as999 platform ("Players", "you", "your").

as999 takes data privacy seriously. We recognise that Pakistani players entrust us with sensitive personal and financial information, and we are committed to handling that data responsibly, transparently, and in accordance with internationally recognised data protection standards. This Policy is designed to give you a clear and complete picture of our data practices.

This Policy should be read alongside the as999 Terms & Conditions and Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with as999.

as999 acts as the Data Controller for all personal data collected through the as999.one platform. This means as999 determines the purposes for which your personal data is processed and the manner in which it is processed. Where as999 engages third-party service providers to process data on its behalf, those providers act as Data Processors subject to binding data processing agreements that restrict their use of your data to the specific services they are contracted to provide.

All enquiries regarding the processing of your personal data, the exercise of your data rights, or any data protection concerns should be directed to the as999 data protection contact via the support channels described in Section 14 of this Policy.

as999 collects personal data through a number of channels, including account registration, identity verification, payment processing, platform usage, and communications with our support team. The categories of data we collect are set out in the table below:

as999 does not collect special category data (such as health, religious, or political information) except where voluntarily provided by a player for the purpose of activating responsible gaming tools such as self-exclusion.

as999 uses your personal data only for purposes that are necessary, proportionate, and consistent with the reason it was collected. The primary uses of your personal data are:

• Account Management — creating and administering your as999 account, including login authentication and account security;
• Payment Processing — processing deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard;
• Identity Verification (KYC) — verifying your identity and age in compliance with our licensing obligations;
• Platform Delivery — providing access to casino games, sportsbook, live dealer tables, and all associated as999 platform features;
• Responsible Gaming — monitoring gaming patterns to identify potentially problematic behaviour and administering player-requested restrictions;
• Fraud Prevention — detecting, investigating, and preventing fraudulent transactions, money laundering, and other illegal activity;
• Customer Support — responding to queries, resolving disputes, and processing complaints through 24/7 live chat and email;
• Legal Compliance — fulfilling our obligations under our international gaming licence, applicable anti-money laundering laws, and data protection regulations;
• Marketing Communications — sending you promotional offers and updates about as999, where you have consented to receive such communications.

as999 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

as999 processes your personal data under one or more of the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity — processing is required to perform the contract between you and as999 (e.g., processing payments, providing platform access);
• Legal Obligation — processing is required to comply with applicable laws, licensing conditions, and regulatory requirements (e.g., KYC, AML, record-keeping);
• Legitimate Interests — processing is necessary for the legitimate interests of as999, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights;
• Consent — processing is based on your freely given consent, for example for marketing communications. You may withdraw this consent at any time by updating your preferences or contacting as999 support.

as999 does not sell your personal data. We may share your personal data with third parties only in the following circumstances:

• Payment Processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive transaction data necessary to process deposits and withdrawals;
• Identity Verification Providers — third-party KYC and AML screening services who verify the accuracy of the identity documents you submit;
• Game Providers — licensed game studios whose titles are integrated into the as999 casino receive session and wagering data necessary to run game rounds;
• IT Infrastructure Providers — cloud hosting, database, and platform security providers who support the operation of as999's technical infrastructure;
• Regulatory Authorities — our licensing authority and any other competent regulatory or law enforcement body may receive data where required by applicable law or court order;
• Professional Advisers — legal, accounting, and audit professionals may receive limited data as required to provide their services to as999.

All third-party service providers with whom as999 shares personal data are required to process that data only for the specific purpose for which it was shared and in accordance with appropriate data protection safeguards.

as999 operates as an internationally licensed platform. As a result, your personal data may be transferred to and stored in countries outside Pakistan. Where such transfers occur, as999 ensures that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses and binding data processing agreements with recipient entities.

as999 only transfers personal data to jurisdictions that offer an adequate level of data protection, or where appropriate contractual and technical safeguards have been implemented to compensate for any differences in local data protection standards.

as999 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for the duration required by our licensing and legal obligations. The key retention principles applied by as999 are:

• Active Accounts — all data related to an active as999 account is retained for the lifetime of that account plus a minimum post-closure period required by our licence;
• Transaction Records — financial transaction records are retained for a minimum of five (5) years from the date of the transaction, in line with standard anti-money laundering regulatory requirements;
• KYC Documentation — identity verification records are retained for a minimum of five (5) years following account closure;
• Marketing Data — consent records and marketing preference data are retained until consent is withdrawn, after which they are deleted or anonymised.

Following the applicable retention period, as999 will securely delete or anonymise your personal data so that it can no longer be associated with your identity.

as999 uses cookies and similar tracking technologies on the as999.one platform to deliver a functional, personalised, and secure experience. The types of cookies used by as999 are:

• Essential Cookies — required for the platform to function. These include session management cookies, authentication tokens, and security cookies. They cannot be disabled without breaking core platform functionality;
• Analytics Cookies — used to collect aggregated, anonymised data about how players navigate and interact with the as999 platform, helping us improve the user experience;
• Functional Cookies — used to remember your preferences, language settings, and login state to provide a more personalised experience on return visits.

You may control cookie preferences through your browser settings. Note that disabling essential cookies may prevent certain features of the as999 platform from operating correctly.

As a player on the as999 platform, you hold a number of rights in respect of the personal data we hold about you. These rights are detailed below. To exercise any of these rights, please contact as999 support via the live chat available after login or by email.

If you have reason to believe that as999 has inadvertently collected personal data from an individual under 21 years of age, please notify us immediately through the support contact details set out in Section 14. as999 will investigate and take prompt remedial action.

as999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the as999 platform;
• Encrypted storage of sensitive data including passwords and payment credentials at rest;
• Multi-factor authentication options for player accounts;
• Intrusion detection and prevention systems monitoring the as999 platform infrastructure;
• Strict role-based access controls limiting access to personal data to authorised personnel only;
• Regular security audits and penetration testing by independent security specialists;
• Incident response procedures for the detection, containment, and reporting of data breaches.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is guaranteed to be 100% secure. You play an important role in your own account security: use a strong, unique password for your as999 account, enable two-factor authentication, and do not share your credentials with any third party.

as999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide notice to registered players via the platform or by email to the address on file. The "Effective Date" shown at the top of this Policy reflects the date of the most recent revision.

Your continued use of the as999 platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed about how as999 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by as999, please contact us through any of the following channels:

• 24/7 Live Chat — available within your as999 account after login; our preferred channel for urgent data requests;
• Email — [email protected] (plain text — not a clickable link)

as999 aims to respond to all privacy and data protection enquiries within two (2) business days. For requests that require identity verification or extensive data retrieval, the response timeframe may be extended, but you will be informed of any delay and the expected resolution date.