Privacy Policy
as999 Online Gaming Platform

as999 ("we", "us", "our", "the Platform") operates the online gaming and entertainment website accessible at https://as999.cam. This Privacy Policy ("Policy") explains how as999 collects, uses, stores, discloses and protects the personal data of individuals ("Users", "you", "your") who access or use the Platform.

This Policy applies to all Users, including registered Account Holders and visitors who browse the Platform without creating an account. It covers all data collected through the website, live chat, email correspondence and any other channel through which you interact with as999.

as999 is an English-language platform serving Pakistani players and other English-speaking markets. We are committed to handling your personal data responsibly, transparently and in accordance with the data protection principles applicable under our operating jurisdiction. While we serve a significant number of users from Pakistan — including players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — this Policy does not represent a claim that as999 is subject to Pakistani data protection law or regulation.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

as999 collects the following categories of personal data from Users, depending on the nature and extent of their interaction with the Platform:

3.1 Registration Data

• Full legal name
• Date of birth (for age verification)
• Email address
• Residential address
• Username and password (encrypted)
• Preferred currency (e.g., PKR)

3.2 KYC & Identity Verification Data

• Government-issued identity document (e.g., Pakistani CNIC, passport)
• Proof of address (e.g., utility bill, bank statement)
• Selfie or video verification (where required by the operator's KYC process)
• Source of funds documentation (where required for AML compliance)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., partial card numbers, mobile wallet references — not full financial account credentials)
• Transaction amounts and timestamps
• Bonus and promotional credit records

3.4 Gaming Activity Data

• Game play history, wager amounts and outcomes
• Sports betting selections and settlement records
• Session duration and frequency data
• Responsible gambling tool usage (e.g., limits set, self-exclusion periods)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system and browser information
• Cookie identifiers and session tokens
• Platform interaction logs (pages visited, features used, error events)

3.6 Communications Data

• Content of support enquiries submitted by email or live chat
• Complaint and dispute correspondence
• Records of consent or preference settings (e.g., marketing opt-in/opt-out)

as999 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support or responding to surveys.
• Automated collection: Technical and device data collected automatically when you access the Platform, via cookies, server logs and analytics tools.
• Third-party KYC providers: Identity and document verification data may be processed by authorised third-party KYC service providers acting as Data Processors on behalf of as999.
• Payment processors: Transaction data is collected via payment processing intermediaries. as999 does not store full payment credentials; these are handled by PCI-DSS-compliant payment processors.
• Fraud detection tools: Behavioural and device-level data may be processed by automated fraud detection systems to identify and prevent abusive activity.

as999 processes your personal data for the following specific and legitimate purposes:

as999 processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between as999 and the User — including account registration, payment processing and game participation.
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, age verification and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, analytics and product improvement, where these interests are not overridden by User rights and freedoms.
• Consent: Processing for optional purposes, such as marketing communications, where explicit User consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

as999 does not sell, rent or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the circumstances described below:

7.1 Service Providers & Data Processors

as999 engages authorised third-party service providers to assist in delivering the Platform's services. These providers act as Data Processors and are bound by contractual obligations to process data only on our instruction and in accordance with applicable data protection standards. Categories of service providers include: KYC and identity verification providers, payment processing gateways, fraud detection and security services, cloud infrastructure and hosting providers, and customer support tools.

7.2 Regulatory Authorities & Law Enforcement

as999 may be required by applicable law, court order or regulatory authority to disclose User data. We will notify affected Users of such requirements to the extent legally permissible before making any disclosure.

7.3 AML & Compliance Reporting

Where as999 identifies or suspects activity consistent with money laundering, terrorist financing or other financial crime, we are obligated under applicable AML frameworks to report such activity to the relevant financial intelligence authorities without notifying the User (a process known as "tipping off" restriction).

7.4 Business Transfers

In the event of a merger, acquisition, asset sale or restructuring of as999's business, personal data may be transferred to the acquiring entity as part of that transaction. Affected Users will be notified in advance, and the acquiring entity will be required to honour the commitments made in this Policy.

as999 uses cookies and similar tracking technologies to operate the Platform effectively, improve User experience and gather analytical data. By continuing to use the Platform after being presented with our cookie notice, you consent to the use of cookies as described in this section.

8.1 Types of Cookies Used

8.2 Managing Cookie Preferences

You may manage or withdraw consent for non-essential cookies through your browser settings. Most browsers allow you to block, delete or receive warnings before cookies are stored. Please note that disabling strictly necessary cookies may impair core Platform functionality, including login and session management.

as999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory and operational obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of the Account and for a minimum of five (5) years following account closure, to meet AML and audit obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with AML compliance requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity data: Retained for up to three (3) years from the date of the activity, except where required for longer periods to support dispute resolution or regulatory investigation.
• Support correspondence: Retained for up to three (3) years from the date of the final communication.
• Marketing consent records: Retained until consent is withdrawn, and for one (1) year thereafter as a record of the consent withdrawal.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

as999 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include the following:

• Encryption in transit: All data transmitted between your browser and the as999 Platform is encrypted using TLS (Transport Layer Security) / HTTPS protocols.
• Encryption at rest: Sensitive personal data, including passwords (hashed and salted) and identity documents, is encrypted in our database infrastructure.
• Access controls: Access to personal data is restricted to authorised personnel on a need-to-know basis, governed by role-based access controls and multi-factor authentication for administrative systems.
• Security monitoring: Automated intrusion detection, anomaly monitoring and security logging are in operation across the Platform infrastructure.
• Third-party security assessments: Key service providers handling personal data on our behalf are subject to contractual security requirements and periodic compliance reviews.

Subject to applicable data protection law and any overriding legal obligations (such as AML record-keeping requirements), as999 Users have the following rights in relation to their personal data:

To exercise any of the above rights, please contact us at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We will respond within a reasonable timeframe, and in any event within the period required by applicable law. We may require identity verification before processing your request to protect against fraudulent submissions.

as999 operates on infrastructure that may be hosted in jurisdictions outside your country of residence, including Pakistan. Your personal data may be transferred to and processed in countries that do not provide the same level of data protection as the laws of your home jurisdiction.

Where such transfers occur, as999 ensures appropriate safeguards are in place, including standard contractual clauses with data processors, contractual security obligations binding third-party recipients, and limitations on the use of transferred data to the specific purposes described in this Policy.

By using the as999 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan or your country of residence, as described in this section.

The as999 Platform is strictly for adults aged 18 years and over — or the higher minimum age required by the operator or applicable license jurisdiction. as999 does not knowingly collect personal data from minors. If we become aware that a User under the minimum age has registered an account, we will immediately close that account and securely delete the associated personal data.

Age verification is a mandatory component of the KYC process. Users who cannot provide satisfactory proof of age will not be permitted to make withdrawals and may have their accounts suspended pending documentation.

as999 reserves the right to update or revise this Privacy Policy at any time. Material changes — such as new categories of data collected, new third-party sharing arrangements or changes to User rights — will be communicated to registered Users via account notification, email or an in-platform banner, where reasonably practicable.

The updated Policy will be published at https://as999.cam/privacy-policy with a revised "Last Updated" date at the top of the document. Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically. If you disagree with any update to this Policy and do not wish to accept the revised terms, you should stop using the Platform and close your Account.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the as999 data team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Response time: We aim to acknowledge all privacy-related enquiries within 5 business days and resolve them within 30 days.
• Support hours: 24 hours a day, 7 days a week
• Primary language: English (Urdu assistance available on request)

Users from all regions of Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — are equally welcome to raise privacy enquiries with our team.