Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ah999 ("ah999", "we", "us", "our") collects, processes, stores, and protects personal information relating to users ("you", "your", "Player") of the ah999 online casino and sports betting platform, accessible at ah999.bio.

ah999 is committed to protecting your privacy and handling your personal data with transparency, integrity, and respect. This Policy is written in compliance with internationally recognised data protection principles and reflects ah999's obligations under the licensing framework under which it operates.

By registering an account on ah999, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and processing of your personal data as described herein. If you do not agree, you must discontinue use of the platform.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which form part of the agreement between you and ah999.

2 Data Controller

ah999 acts as the data controller in respect of all personal data collected from players using the ah999 platform. As data controller, ah999 determines the purposes and means by which your personal data is processed.

For all data protection enquiries, requests to exercise your rights, or concerns regarding this Policy, you may contact our Data Protection team directly:

3 Personal Data We Collect

ah999 collects various categories of personal data depending on your interaction with the platform. The categories are as follows:

4 How We Collect Your Data

ah999 collects personal data through the following means:

• Direct Collection: Data you provide when creating an account, completing KYC, depositing or withdrawing funds, contacting support, or responding to surveys and promotions.
• Automated Collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, browser fingerprint, session activity logs, and cookie data.
• Third-Party Sources: Identity verification data returned by our KYC service provider; fraud screening scores from our risk management partner; payment confirmation data from JazzCash, EasyPaisa, and banking partners.
• Publicly Available Sources: In limited cases, we may verify information against publicly available records (for example, sanctions lists or politically exposed person databases) as part of our AML compliance obligations.

5 Purpose & Legal Basis for Processing

ah999 processes your personal data only where a valid legal basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:

6 Sharing Your Personal Data

ah999 does not sell your personal data. We share data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• KYC & Identity Verification Providers: To verify your identity and age as required by our licensing obligations.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processing partners to facilitate deposits and withdrawals.
• Fraud Prevention & Risk Management: Third-party risk scoring and AML screening services that help us detect and prevent financial crime.
• Cloud Infrastructure Providers: Hosting and data storage services that operate under strict data processing agreements with ah999.
• Customer Support Platforms: Live chat and ticketing systems used to manage player support interactions.
• Regulatory and Law Enforcement Authorities: Where we are legally required to disclose information — for example, in response to a court order, regulatory investigation, or AML reporting obligation.
• Game Software Providers: In limited cases, game providers may receive session data necessary to operate their games on the ah999 platform.

7 Data Retention

ah999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account and KYC Data: Retained for a minimum of 5 years following account closure, in compliance with standard AML record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming History: Retained for a minimum of 3 years following account closure.
• Support Communications: Retained for 3 years from the date of the most recent interaction.
• Marketing Data: Retained until you withdraw consent or for a maximum of 2 years following your last marketing interaction, whichever is earlier.
• Technical / Log Data: Typically retained for 12 months, after which it is aggregated or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ah999's data deletion procedures.

8 Security Measures

ah999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These include:

• Encryption: All data transmitted between your device and ah999 servers is encrypted using TLS 1.2 or higher. Sensitive data at rest (including KYC documents and financial records) is encrypted using AES-256.
• Access Controls: Access to personal data within ah999's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security awareness training.
• Two-Factor Authentication: ah999's internal systems use multi-factor authentication to prevent unauthorised access by employees or contractors.
• Penetration Testing: ah999 engages independent security specialists to conduct regular penetration tests and vulnerability assessments of its platform and infrastructure.
• Incident Response: ah999 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, ah999 will notify affected individuals without undue delay.

While ah999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact ah999 support immediately at [email protected].

9 Cookies & Tracking Technologies

ah999 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) on the platform. These serve the following purposes:

• Strictly Necessary Cookies: Required for the platform to function — including session management, authentication tokens, and security checks. These cannot be disabled.
• Analytics Cookies: Help ah999 understand how players use the platform — such as which pages are visited most frequently and where users encounter difficulties. Data collected is aggregated and pseudonymised.
• Preference Cookies: Remember your platform settings such as language preference, preferred currency display, and notification preferences.
• Marketing Cookies: Used only where you have provided explicit consent. These help us measure the effectiveness of promotional campaigns and avoid showing you irrelevant offers.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ah999 platform. To opt out of analytics tracking, you may also use standard browser privacy settings.

10 Your Data Rights

Depending on your jurisdiction and the applicable data protection framework, you may have the following rights in relation to your personal data held by ah999:

• Right of Access: You may request a copy of the personal data ah999 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that ah999 delete your personal data. Note that this right is subject to our legal obligations to retain certain records.
• Right to Restrict Processing: You may request that ah999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

11 Marketing Communications

ah999 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new game launches, PSL cricket betting promotions, and other ah999 offers — but only where you have given your explicit consent to receive such communications during registration or subsequently through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email from ah999.
• Updating your communication preferences in your ah999 account settings.
• Contacting our support team directly via live chat or at [email protected].

Opting out of marketing communications will not affect transactional messages — you will still receive important account notifications such as deposit confirmations, withdrawal approvals, and security alerts.

ah999 will never send marketing communications to players who have applied a self-exclusion or cooling-off period to their account.

12 Minors & Age Restriction

The ah999 platform is strictly intended for persons aged 21 years and above. ah999 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

If ah999 discovers or is notified that an account has been created by or for a person under the age of 21, the account will be immediately suspended, all balances will be forfeited in accordance with our Terms and Conditions, and all personal data associated with that account will be deleted to the extent not required to be retained for legal or regulatory purposes.

13 International Data Transfers

ah999 operates internationally and may transfer your personal data to countries outside Pakistan for processing by our service providers — including KYC partners, cloud hosting providers, and payment processors. Where such transfers occur, ah999 ensures that adequate safeguards are in place to protect your data to a standard equivalent to that required under the applicable data protection framework.

Safeguards used by ah999 for international transfers include:

• Standard contractual data processing clauses with all data processors and sub-processors located outside Pakistan.
• Transfers only to countries or organisations that provide an adequate level of data protection as assessed by ah999's data protection team.
• Encryption of all data in transit, regardless of the destination jurisdiction.

14 Changes to This Privacy Policy

ah999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The "Last Updated" date at the top of this document always reflects the most recent revision.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — ah999 will notify you via a prominent notice on the platform and/or by email to your registered address at least 14 days before the change takes effect.

Your continued use of the ah999 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you must stop using the platform and may request account closure in accordance with our Terms and Conditions.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or ah999's data protection practices, please contact us through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" for faster routing.
• Live Chat: Available 24/7 directly on the ah999 platform. Average response time: 3–5 minutes.

For formal data rights requests (access, deletion, portability, rectification), please use the subject line "Data Rights Request" and include your registered email address and a description of your request. We will acknowledge within 48 hours and respond fully within 30 calendar days.

We encourage all players from Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan to reach out without hesitation. Your privacy matters to us and we are committed to resolving any concern promptly and transparently.