at999 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how at999 ("at999", "we", "us", "our") collects, processes, stores and shares personal data when you visit, register on, or use the at999 platform at at999.lat (the "Platform"), including all casino games, sports betting, live dealer products, the VIP loyalty programme and related services.

By registering an at999 account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into at999's Terms & Conditions.

at999 is committed to handling personal data responsibly in accordance with applicable data protection principles, including the principle of data minimisation – we collect only what we genuinely need to provide you with a secure, personalised and legally compliant gaming experience.

2. Data Controller

For the purposes of applicable data protection law, at999 is the data controller responsible for the personal data of Players using the Platform. All data-related enquiries, including requests to exercise your data rights, should be directed to at999's Data Protection contact. Contact details are set out in Section 13 of this Policy.

3. Data We Collect

at999 collects personal data in the following categories, depending on how you interact with the Platform:

at999 does not collect sensitive personal data such as biometric data or information relating to racial or ethnic origin except where expressly required for identity verification purposes and consented to by you.

4. How We Use Your Data

at999 processes your personal data for the following purposes:

• Account Management: Creating, maintaining and securing your at999 account; processing at999 login authentication and session management.
• Payment Processing: Facilitating deposits via JazzCash, Easypaisa, HBL, UBL, Meezan Bank and Bank Alfalah; verifying withdrawal requests; maintaining transaction records.
• KYC & Fraud Prevention: Verifying player identity and age (18+); detecting and preventing money laundering, fraud and collusion; complying with anti-money laundering obligations.
• Platform Personalisation: Tailoring game recommendations, bonus offers and at999 VIP tier communications to your activity and preferences.
• Responsible Gaming: Monitoring gaming patterns that may indicate problem gambling; enforcing deposit limits, self-exclusion and cooling-off periods.
• Legal Compliance: Fulfilling obligations under applicable law, responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: Analysing aggregated usage data to improve the at999 Platform, fix technical issues and optimise user experience.

5. Legal Basis for Processing

at999 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to perform the at999 Player Account Agreement, including registration, payment processing and game provision.
• Legal Obligation: Processing required to comply with applicable anti-money laundering, KYC and data retention laws.
• Legitimate Interests: Fraud detection, platform security, responsible gaming monitoring and aggregate analytics, where these interests are not overridden by your rights.
• Consent: Where at999 relies on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing

6.1 Service Providers. at999 shares personal data with trusted third-party service providers who process data on at999's behalf under binding data processing agreements. These include payment processors (JazzCash, Easypaisa, partner banks), game software providers, KYC verification services, fraud detection vendors and cloud infrastructure providers. These parties are only permitted to process your data for the purposes specified by at999 and are contractually required to maintain appropriate security standards.

6.2 Regulatory Authorities. at999 may disclose personal data to regulatory bodies, law enforcement agencies or courts where required by applicable law, legal process or governmental request. at999 will notify you of such disclosure where legally permitted to do so.

6.3 No Sale of Data. at999 does not sell, rent or trade your personal data to third parties for their own marketing purposes. Any sharing of data is strictly limited to the purposes described in this Policy.

7. Cookies & Tracking Technologies

at999 uses cookies and similar tracking technologies to operate the Platform and improve your experience. The following types of cookies are used:

• Essential Cookies: Required for at999 login session management, security tokens and core Platform functionality. These cannot be disabled without impairing Platform use.
• Performance Cookies: Anonymised analytics data used to understand how Players navigate the at999 Platform and identify areas for improvement. No personally identifiable information is collected through these cookies.
• Functional Cookies: Remember your at999 preferences such as language settings, game lobby filters and responsible gaming limit configurations.

Most web browsers allow you to control cookie settings. Disabling essential cookies will impair your ability to log in to at999 and use core Platform features. at999 does not use third-party advertising cookies or retargeting pixels.

8. Data Retention

at999 retains personal data for as long as your account remains active and for such additional periods as required by applicable law or legitimate operational needs. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and gaming activity records are retained for a minimum of five (5) years.
• Support and communications records are retained for three (3) years following resolution.
• Technical and session logs are retained for up to twelve (12) months.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with at999's data destruction procedures.

9. Data Security

at999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and at999's servers.
• Encrypted storage of passwords and sensitive account credentials – at999 staff cannot view your password in plain text.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security assessments and penetration testing of at999's infrastructure.
• Multi-factor authentication options for Player accounts to prevent unauthorised at999 login access.

While at999 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. In the event of a data breach that affects your rights and freedoms, at999 will notify affected players and relevant authorities as required by applicable law.

10. Your Rights

As a Player on the at999 Platform, you hold the following rights in respect of your personal data, subject to applicable legal limitations:

• Right of Access: Request a copy of the personal data at999 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where at999 no longer has a lawful basis to retain it, subject to legal retention obligations.
• Right to Restriction: Request that at999 restrict processing of your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: Object to processing based on at999's legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of the above rights, contact at999 support using the details in Section 13. at999 will respond to verified requests within thirty (30) days. Identity verification may be required before at999 processes a data rights request.

11. Children's Privacy

at999 is strictly an 18+ platform. at999 does not knowingly collect personal data from individuals under the age of 18. If at999 becomes aware that personal data has been collected from a minor, that account will be immediately suspended and the data deleted. If you are a parent or guardian and believe your child has registered on at999, please contact at999 support immediately.

12. Policy Changes

at999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, at999's data practices, or the services provided on the Platform. Material changes will be communicated to registered Players via the contact information on their account. The "Last updated" date at the top of this Policy reflects the most recent revision. Continued use of the at999 Platform following a Policy update constitutes acceptance of the revised Policy.

13. Contact Us

For all data protection enquiries, rights requests, or questions about this Privacy Policy, please contact at999's Data Protection team. The contact email address for data and privacy matters is: [email protected] (plain text only – not a clickable link). Please include "Privacy" in the subject line of your message to ensure prompt routing to the correct team.

at999 aims to acknowledge all data-related enquiries within five (5) business days and to respond substantively within thirty (30) days.