At a999, we take your privacy as seriously as we take your gaming experience. This Privacy Policy tells you exactly what personal data we collect, how we use it, who we share it with, and what rights you have over it. We've kept the language clear and direct — no legal jargon where plain English works better.
Before you read the full policy, here is a summary of our six core privacy commitments to every Pakistani member of a999.
This Privacy Policy applies to all personal data collected and processed by a999 in connection with your use of the a999 website, games, payment services and customer support. It applies to all members, registered or otherwise, who visit or interact with a999. By using a999, you agree to the practices described in this policy. This policy is effective from January 2025 and supersedes all previous a999 privacy policies.
a999 collects personal data from you directly when you register an account, make a deposit, contact support or use any feature of the platform. We also collect certain technical data automatically when you visit the a999 website. Here is a full breakdown of what we collect and why.
When you create an a999 account, we collect:
When you request your first withdrawal or when a999's security systems trigger a verification requirement, we collect:
KYC documents are processed by a999's compliance team and, where necessary, by a licensed third-party identity verification service. They are not shared with any other party.
When you make a deposit or withdrawal at a999, we process:
a999 does not store full payment card numbers on its own servers. Card payments are tokenised through our PCI-DSS compliant payment processor.
As you use a999, we automatically record:
When you visit a999, our systems automatically collect:
| Data Category | When Collected | Why We Need It |
|---|---|---|
| Registration details | Account creation | Account setup & identification |
| CNIC documents | First withdrawal / KYC trigger | Age & identity verification |
| Payment details | Deposit / withdrawal | Payment processing |
| Gaming activity | During platform use | Platform operation & fairness |
| Technical / device data | Every visit | Security & fraud prevention |
a999 uses the personal data we collect for the following specific purposes. We don't use your data for anything beyond what is listed here.
Your registration data is used to create and maintain your a999 account — including managing your login access, communicating with you about your account, and processing your deposit and withdrawal requests. Without this data, a999 cannot operate your account.
a999 uses CNIC data and activity data to verify that you are who you say you are, to confirm you meet the 18+ age requirement, and to detect and prevent fraud, money laundering and account abuse. This is a legal and security obligation — not optional for a999 to fulfil.
a999 uses your gaming activity data to personalise your experience on the platform — for example, showing you games you've played recently, surfacing bonus offers that are relevant to your gaming patterns, and displaying content in the format that suits your device. This personalisation is always to improve your experience at a999; it is never used to target you with offers that exploit your behaviour in a harmful way.
a999 monitors account activity patterns as part of our responsible gaming commitments. If the system detects patterns that may indicate problem gambling — such as unusually frequent deposits, significantly increasing bet sizes or extended session durations — our responsible gaming team may reach out. This monitoring is done to protect members, not to intrude on normal gameplay.
When you contact a999 support, your account data and the details of your query are used to resolve your issue. Support interactions are logged so that a999 can maintain continuity in case you need to follow up, and to improve our support quality over time.
With your consent, a999 uses your email address and phone number to send you information about bonuses, new games and platform updates. You can withdraw consent at any time. See Section 8 for full details on marketing communications and how to opt out.
a999 shares your personal data only with the specific categories of third parties listed below, and only to the extent necessary for the purpose stated. We do not sell your data. We do not share your data for third-party marketing purposes.
To process your deposits and withdrawals, a999 shares necessary transaction data with our payment partners — including Easypaisa, JazzCash, NayaPay, SadaPay and our card processing partners. Each of these providers handles your data under their own privacy policies and applicable financial regulations.
To provide casino and sports games, a999 shares a minimal set of technical data (session tokens, bet data) with licensed game providers including Pragmatic Play, NetEnt, Microgaming and Evolution. This is necessary for the game to run and for game fairness records to be maintained. Game providers do not receive your personal identification details.
For KYC verification, a999 uses a licensed third-party identity verification service that processes your CNIC document. This service operates under strict data protection standards and is contractually prohibited from using your data for any purpose beyond the identity verification task.
a999 uses fraud detection services that analyse technical data (IP addresses, device fingerprints, transaction patterns) to identify suspicious activity. These services process data anonymously or pseudonymously where possible.
In exceptional circumstances, a999 may be legally required to share personal data with regulatory authorities, law enforcement or courts. This would only happen in response to a lawful request — a999 does not voluntarily share data with government bodies beyond what is legally required.
a999 takes the security of your personal data seriously. Here is a breakdown of the technical and organisational measures we have in place to protect your information.
All data transferred between your browser or device and the a999 platform is encrypted using 256-bit SSL (TLS 1.2 or higher). This means that even if someone intercepted the data in transit, it would be unreadable to them. This applies to every page on a999, including the login page, deposit page and account settings.
Personal data stored in a999's databases is encrypted at rest. Passwords are never stored in plain text — they are processed through a one-way cryptographic hash before storage, meaning not even a999's internal team can see your password.
Access to personal data within a999 is restricted to staff who have a genuine operational need for it. Access is controlled through role-based permissions, and all access to sensitive data is logged. a999 conducts regular internal access reviews to ensure no more data access exists than is necessary.
a999 does not store full payment card numbers on its own servers. Card payments are processed through a PCI-DSS Level 1 certified payment processor. a999 only stores a masked version of your card for display purposes (e.g. **** **** **** 1234).
Security is a shared responsibility. Here is what you can do to keep your a999 account secure:
a999 uses cookies and similar tracking technologies to make the platform work properly, remember your preferences and understand how the platform is being used so we can improve it. Here is a breakdown of the types of cookies a999 uses.
You can manage your cookie preferences at any time through your browser settings. Note that disabling Essential Cookies will affect your ability to use a999 properly.
As an a999 member, you have a number of rights in relation to the personal data we hold about you. Here is what each right means and how to exercise it.
To exercise any of these rights, contact a999 support via live chat or email support@a999-win.com. a999 will respond to data rights requests within 30 days. For complex requests, we may need to verify your identity before processing the request — this is to protect you.
a999 retains your personal data for as long as your account is active and for a reasonable period thereafter. Specific retention periods vary by data type:
After the applicable retention period, data is securely deleted or anonymised in a way that means it can no longer be linked back to you personally. If you close your a999 account, we will process the deletion of your data in line with these periods — some data cannot be deleted immediately due to legal obligations, but it will not be used for any purpose other than compliance.
With your explicit consent at registration, a999 may send you promotional emails and SMS messages about new bonuses, game releases, seasonal promotions and platform updates. a999 does not send unsolicited marketing messages — we will only send marketing communications to members who have opted in.
Regardless of your marketing preferences, a999 will send you transactional communications that are necessary for your account — including deposit confirmations, withdrawal notifications, account security alerts and responses to your support queries. These are not marketing messages and cannot be unsubscribed from, as they are part of the service you have signed up for.
You can opt out of a999 marketing communications at any time by:
Opt-out requests are processed within 48 hours. You may continue to receive transactional messages after opting out of marketing, as explained above.
a999 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer or applicable legal requirements. When we make significant changes, we will notify all a999 members by:
Minor clarifications and non-material edits may be made without formal notification. We encourage you to review this policy periodically. The current version of the a999 Privacy Policy is always available at this URL.
Continued use of a999 following notification of changes constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you should close your account and contact support to request deletion of your data in accordance with your rights under Section 6.
If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how a999 handles your personal information, please get in touch:
a999 will respond to privacy-related enquiries within 48 hours and to formal data rights requests within 30 days. For data deletion requests, a999 will acknowledge your request within 48 hours and confirm completion once the applicable retention periods have been observed.
a999 handles your personal data with care, transparency and respect. Register your account, deposit in PKR via Easypaisa or JazzCash, and enjoy 500+ games with full confidence that your privacy is protected.
18+ only. Please play responsibly. Responsible Gaming tools available on every a999 account.