at999 Privacy Policy — Your Data, Explained Clearly

This Privacy Policy applies to the at999 online casino platform, accessible at at999.fun. at999 is the data controller responsible for the personal information collected through the at999 website, account system, games platform, and customer support channels.

For the purposes of this Privacy Policy, "at999", "we", "us", and "our" all refer to the operator of the at999 platform. "You" and "your" refer to any individual who accesses at999, registers an account, or otherwise interacts with the platform. This policy covers all at999 services including slots, live casino, card games, poker, jackpot slots, and Ludo Games.

If you have questions about who holds your data or how to exercise your rights, the at999 Data Protection contact is available through the support team. Details are in Section 13 of this policy.

at999 collects personal data in several ways — directly from you when you register or interact with the platform, automatically as you use the site, and in some cases from third-party verification services. Here is a clear breakdown of what is collected and why it is needed:

Information You Provide Directly

• Registration details: Your full name, date of birth, mobile number, and email address, provided when you create your at999 account.
• Identity documents: A copy of your CNIC or other identity documentation provided during at999's standard KYC (Know Your Customer) verification process.
• Payment details: Your registered Easypaisa number, JazzCash number, NayaPay account, SadaPay account, bank account details for IBFT, or Visa/Mastercard information used to deposit and withdraw PKR on at999. Specific card numbers and payment credentials are tokenised — at999 does not store raw card data.
• Support communications: Any messages, documents, or information you share with the at999 support team via Live Chat, WhatsApp, Telegram, or email.

Data Collected Automatically

• Device and browser information: Your device type, operating system, browser version, and screen resolution, collected to ensure the at999 platform functions correctly on your device.
• IP address and approximate location: Your IP address, which may be used to derive your approximate geographic location for compliance and fraud prevention purposes.
• Session and usage data: Pages visited on at999, game sessions played, time spent on each section, click patterns, and navigation paths — used to improve platform performance and detect unusual behaviour.
• Transaction records: A complete record of all deposits, withdrawals, bonus claims, and game transactions on your at999 account. This is required for financial record-keeping and regulatory compliance.

Data Collected from Third Parties

at999 may receive identity verification results from third-party KYC service providers who cross-reference the information you submit against official records. at999 may also receive fraud risk indicators from payment processing partners. This data supplements your at999 account record and is held under the same data protection standards as all other personal data on the platform.

at999 uses the personal data it holds for the following specific purposes. We do not use your data for any purpose not listed here:

• Account creation and management: Creating your at999 account, verifying your identity, maintaining your account settings, and managing your wallet balance in PKR.
• Processing financial transactions: Executing your deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card methods — all in PKR. Maintaining an accurate transaction record for your account history on at999.
• Game delivery: Serving game sessions, maintaining game history records, and ensuring accurate prize crediting on your at999 account.
• Compliance and verification: Conducting age verification and KYC checks as required. Monitoring for money laundering red flags. Responding to requests from regulatory or law enforcement authorities where legally required.
• Fraud and security: Detecting unusual account activity, investigating potential Terms breaches, and protecting your at999 account from unauthorised access.
• Customer support: Responding to your support queries, resolving disputes, and maintaining communication records related to your at999 account.
• Responsible gaming: Monitoring usage patterns to identify potential problem gambling indicators, and facilitating the use of at999's responsible gaming tools — deposit limits, session reminders, cool-off periods, and self-exclusion.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the at999 platform — identifying performance issues, improving navigation, and informing decisions about new features or game categories.
• Direct communications: Sending you important account-related notifications — deposit confirmations, withdrawal approvals, security alerts, and updates to at999's Terms or Privacy Policy. at999 does not send unsolicited promotional messages unless you have opted in to receive them, and you can opt out at any time.

at999 processes your personal data under the following legal bases, depending on the specific use:

• Contract performance: Processing your deposits, withdrawals, and game sessions is necessary to provide the at999 service you have signed up for. Without this processing, at999 cannot operate your account.
• Legal obligation: KYC verification, age checks, transaction record-keeping, and anti-money laundering monitoring are all legally required activities. at999 must carry out this processing regardless of individual consent.
• Legitimate interests: Fraud detection, platform security, internal analytics for platform improvement, and maintaining support communication records are carried out on the basis of at999's legitimate interests in operating a secure and functional platform.
• Consent: Where at999 sends you promotional communications, this is done only on the basis of your explicit opt-in consent. You may withdraw this consent at any time by contacting at999 support or using the unsubscribe option in any communication you receive.

at999 does not sell your personal data. The following explains the specific circumstances in which your data may be shared with third parties, and the protections that apply in each case:

Payment Processors

When you make a deposit or request a withdrawal on at999, the transaction data required to process the payment is shared with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank for IBFT, or the card processor. These providers receive only the data necessary to execute the transaction and are bound by their own regulatory obligations under Pakistani financial services law.

Identity Verification Services

at999 uses third-party KYC providers to assist with identity verification. These providers receive the identity documents and personal details you submit for verification purposes. They are contractually bound to use this data only for at999's verification request and to maintain appropriate security standards.

Game Providers

Some at999 games are provided by third-party game studios. These studios may receive limited technical data — such as a player session token and game round data — necessary to deliver the game. They do not receive your full personal profile, payment details, or identity documents. at999 reviews the data handling practices of all game providers before listing their content.

Legal and Regulatory Disclosure

at999 may be required to disclose your personal data in response to a valid legal request, court order, or regulatory authority enquiry. at999 will comply with applicable law in any such situation. Where legally permitted and where doing so would not compromise an investigation, at999 will notify you of any such disclosure.

at999 takes the security of your financial data particularly seriously, given that all transactions are in PKR and involve integration with widely used Pakistani payment platforms. Here is how at999 handles financial data specifically:

• Easypaisa and JazzCash: Your mobile wallet number is stored securely on at999 to facilitate deposits and withdrawals. The actual transaction authorisation occurs through the payment provider's own security infrastructure. at999 does not store your Easypaisa or JazzCash PIN.
• Bank accounts for IBFT: Your bank account number and bank name are stored on at999 to process outgoing IBFT transfers. This data is encrypted at rest and accessible only to at999 finance staff with the appropriate authorisation.
• Visa and Mastercard: Raw card numbers are never stored on the at999 platform. Card payments are processed through a PCI DSS compliant payment gateway. at999 stores only a tokenised reference linked to your registered card, which cannot be used to initiate a transaction independently.
• Transaction history: A complete record of all at999 account transactions — deposits, withdrawals, wagers, and bonus credits — is maintained on your account. This record is available to you in your account history section at any time. at999 is required to retain these records for a minimum period for financial compliance purposes.

at999 uses cookies and similar technologies on the platform. This section explains what types of cookies are used and what they do. at999 does not use third-party advertising cookies that track your browsing behaviour across other websites.

Essential Cookies

These are required for the at999 platform to function. They maintain your login session, keep your wallet balance accurate as you navigate between sections, and remember your language and display preferences. You cannot opt out of essential cookies without preventing the at999 platform from working correctly.

Performance and Analytics Cookies

at999 uses first-party analytics cookies to understand how players use the platform — which pages load slowly, which sections are most visited, and where players encounter friction. This data is aggregated and anonymised. It is used only to improve the at999 platform. at999 does not use Google Analytics or similar third-party analytics services that send your data to external platforms.

Security Cookies

at999 uses security cookies to identify your device across sessions for fraud detection and suspicious activity monitoring. If an at999 account is accessed from a new device or a significantly different location, these cookies help at999 detect that change and apply additional verification.

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Instructions for the most commonly used browsers in Pakistan — Chrome on Android, Firefox, and Safari on iOS — are available through those browsers' help documentation. Disabling essential cookies will affect your ability to log in and use at999.

at999 does not keep your data longer than necessary. The retention periods below apply to each main category of personal data held on the at999 platform:

• Account and identity data: Retained for the duration of your active at999 account plus a minimum of five years after account closure. This is required for KYC and anti-money laundering compliance obligations.
• Financial transaction records: Retained for a minimum of six years from the date of each transaction, as required by standard financial record-keeping obligations.
• Support communications: Retained for three years from the date of each communication, to allow dispute resolution for historic account issues.
• Usage and session data: Aggregated and anonymised after 24 months. Identifiable session data is not retained beyond this period.
• Marketing consent records: Retained for as long as you remain opted in to at999 communications, plus one year after any opt-out, to maintain proof of consent status.

When data reaches the end of its retention period, it is deleted securely or irreversibly anonymised. at999 runs periodic retention reviews to ensure data is not held beyond the periods above.

at999 maintains a layered approach to data security. The following measures are in place across the platform at all times:

• TLS encryption in transit: All data passed between your device and at999 — including login credentials, payment data, and personal details — is encrypted using current TLS protocols. The at999 platform does not serve over unencrypted HTTP.
• Encryption at rest: Personal data and financial records stored on at999 infrastructure are encrypted using current standards. Database access requires authenticated, authorised credentials.
• Access control and audit logging: Internal at999 systems apply role-based access controls, meaning staff can only access data relevant to their specific function. All access to sensitive data is logged and reviewed periodically.
• Anomaly detection: at999 operates automated monitoring for unusual account activity — unexpected login locations, atypical transaction volumes, or patterns associated with account takeover attempts. Anomalies trigger alerts and may result in temporary account holds pending verification.
• Incident response: at999 maintains an incident response process. In the event of a confirmed security incident affecting player data, affected accounts will be notified promptly with clear details of what occurred and what steps are being taken.

As an at999 player, you have the following rights in relation to the personal data at999 holds about you. These rights can be exercised by contacting the at999 support team at any time:

To exercise any of these rights, contact the at999 support team with your request and account details. at999 may need to verify your identity before processing a data rights request, particularly for access and deletion requests.

The at999 platform is strictly for adults aged 18 and over. at999 does not knowingly collect personal data from anyone under the age of 18. If at999 becomes aware that personal data has been collected from a person under 18, that account will be suspended immediately, the data will be deleted, and any deposits made will be returned via the original payment method after the situation has been verified.

If you believe a minor may have created an at999 account, please contact at999 support immediately at support@at999.fun. at999 takes underage access seriously and will act promptly on any report of this kind.

at999 may update this Privacy Policy from time to time as the platform evolves, as legal requirements change, or as at999's data processing activities change. When material updates are made, at999 will notify registered players via the mobile number or email address associated with their account. The "Last Updated" date at the top of this page will reflect the date of the most recent changes.

Minor updates — such as clarifications that do not change the substance of how at999 handles your data — may be made without individual notification, but will always be reflected in the Last Updated date. at999 recommends reviewing this Privacy Policy periodically, particularly when you receive an update notification.

Your continued use of the at999 platform following notification of material changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any change, you should stop using at999 and contact support to close your account and withdraw your balance.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to raise a concern about how at999 has handled your personal data, please get in touch through any of the following channels:

• Email: support@at999.fun — use the subject line "Privacy Query" for data-related questions so they are directed to the right team.
• Live Chat: Available on the at999 platform 24 hours a day, 7 days a week.
• WhatsApp & Telegram: Contact details available on the at999 support section after login.

at999 aims to respond to privacy-related queries within five working days. For formal data rights requests — such as a Subject Access Request or a deletion request — at999 will provide a substantive response within 30 days, which is the standard timeframe for data rights fulfilment.

If you are not satisfied with at999's response to a privacy concern, you have the right to raise the matter with the relevant data protection authority in your jurisdiction. at999 takes all privacy complaints seriously and will cooperate fully with any regulatory process.