Privacy Policy — How aj999 Collects, Uses & Protects Your Personal Data

aj999 is an online gaming and sports betting platform operating at aj999.ws, offering Pakistani players access to sports betting (including cricket and PSL markets), live casino, slots, fishing games, and virtual casino products. The platform is operated by a company holding an internationally recognised gaming licence (the "Operator").

For the purposes of this Privacy Policy, aj999 (the Operator) acts as the data controller — meaning we determine the purposes and means by which your personal data is collected and processed. When third-party service providers process data on our behalf (such as payment processors or game providers), they act as data processors operating under contractual data protection obligations.

This Privacy Policy applies to all personal data collected through the aj999 website, mobile-optimised platform, customer support channels, and any related promotional communications. It applies to all registered players and prospective players who interact with our platform, regardless of their location within Pakistan.

aj999 collects personal data through several channels — directly from you during registration and account activity, automatically as you use the platform, and from third parties such as payment providers and identity verification services where necessary. The categories of personal data we collect are detailed below.

aj999 uses your personal data only for clearly defined, legitimate purposes directly related to operating the platform and serving Pakistani players. We do not use your data for purposes that are incompatible with the reasons it was originally collected. The primary purposes for which we use your personal data are as follows:

• Account Registration & Management: Creating and maintaining your aj999 player account, verifying your identity, and managing your account preferences and settings.
• Transaction Processing: Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20; processing withdrawal requests; maintaining accurate financial records of all account activity.
• KYC & Age Verification: Verifying that all players are 21 years of age or older, as required by our gaming licence. This is a non-negotiable compliance requirement — accounts cannot be fully activated without successful age verification.
• AML Compliance: Monitoring transactions and account behaviour to detect and prevent money laundering, terrorist financing, and other financial crimes in accordance with our international gaming licence obligations.
• Responsible Gaming: Monitoring player activity to identify patterns indicative of problematic gambling behaviour and, where necessary, proactively reaching out to players who may need support or intervention.
• Customer Support: Responding to your queries, resolving complaints, processing account disputes, and maintaining records of communications for quality assurance and regulatory purposes.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game offering, and user experience for Pakistani players.
• Marketing Communications: Sending promotional emails, bonus notifications, and relevant gaming news — but only where you have given explicit consent to receive such communications. You may withdraw this consent at any time.
• Fraud Prevention: Detecting and preventing fraudulent activity, including multi-accounting, bonus abuse, payment fraud, and account takeover attempts.
• Legal & Regulatory Compliance: Fulfilling our obligations under applicable laws and our international gaming licence, including responding to lawful requests from regulatory authorities and law enforcement agencies.

aj999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to fulfil the contract between you and aj999 — i.e., to operate your player account, process deposits and withdrawals, and provide access to all platform games and services. Without this processing, aj999 cannot deliver its services to you.
• Legal Obligation: Processing required to comply with laws and regulatory obligations applicable to aj999 under its international gaming licence — including KYC identity verification, AML transaction monitoring, age verification, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in aj999's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, responsible gaming monitoring, and improving the overall player experience. In all cases, aj999 has assessed that these legitimate interests are proportionate and do not unduly impact your privacy.
• Consent: Where processing is based on your freely given, specific, and informed consent — most notably for marketing communications (promotional emails, bonus offers, and SMS notifications). You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

aj999 does not sell or rent your personal data to any third party. We share your data only where it is strictly necessary to deliver the platform's services or to comply with legal obligations. The categories of third parties with whom we may share your data are listed below, together with the basis for each sharing arrangement.

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processors receive the minimum financial data necessary to process your deposits and withdrawals. These providers are independently regulated and bound by their own data protection obligations.
• Identity Verification & KYC Providers: Third-party KYC and AML screening services may process your identity documents and personal data to verify your identity and screen against regulatory watchlists. These providers operate under strict data processing agreements with aj999.
• Game Content Providers: Third-party game studios and live casino providers whose games are available on the aj999 platform may receive limited technical data (such as session tokens and player identifiers) to enable game functionality. They do not receive your full identity or financial data.
• Customer Support Platforms: Our live chat and email support infrastructure may be provided by third-party platforms. Any data processed through these tools is governed by data processing agreements that require compliance with applicable data protection standards.
• Regulatory & Law Enforcement Authorities: aj999 will disclose personal data to relevant regulatory authorities, licensing bodies, financial intelligence units, or law enforcement agencies where we are legally required or compelled to do so — including in the context of AML investigations or gaming licence compliance reviews.
• Group Companies: Where the Operator operates multiple platforms or subsidiaries under the same group structure, limited data sharing may occur within the group for consolidated AML compliance and responsible gaming monitoring purposes.

aj999 uses cookies and similar tracking technologies (such as local storage and session storage) on the aj999.ws platform to ensure core functionality, improve performance, and deliver a more personalised experience to Pakistani players. Below is a plain-language explanation of the types of cookies we use.

• Strictly Necessary Cookies: These are essential for the platform to function. They enable you to log in, maintain your session while navigating between games, and process transactions. These cookies cannot be disabled without severely impacting platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the platform — which games are most popular, how long sessions typically last, and which pages are visited most frequently. This data helps aj999 improve the platform experience over time. No personally identifiable information is collected through these cookies.
• Functionality Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming limit configurations — so that you do not need to reset them on every visit.
• Security & Fraud Prevention Cookies: These cookies assist aj999 in identifying suspicious login patterns, detecting bot activity, and preventing unauthorised account access. They are an integral part of our platform security infrastructure.

aj999 does not use advertising or retargeting cookies that track your activity across third-party websites. Our cookies are limited to what is necessary for platform operation, security, and first-party analytics.

aj999 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by our international gaming licence and applicable regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Personal data associated with an active player account is retained for the full duration of the account's existence on the platform, plus a period of at least five years following account closure, to meet AML record-keeping and regulatory reporting obligations.
• KYC & Identity Documents: Identity documents and KYC verification records are retained for a minimum of five years from the date of verification or account closure, whichever is later, in accordance with our gaming licence compliance requirements.
• Financial Transaction Records: Records of all deposits, withdrawals, bonus transactions, and associated financial activity are retained for a minimum of five years for AML compliance and dispute resolution purposes.
• Customer Support Communications: Live chat transcripts and email correspondence with our support team are retained for up to three years from the date of the last interaction, to support quality assurance, compliance auditing, and dispute resolution.
• Marketing Data: Data used for marketing communications is retained until you withdraw your consent to receive such communications, after which it is removed from our active marketing databases within 30 days.
• Inactive Account Data: If your account has been inactive for 12 consecutive months, aj999 may begin the process of archiving and ultimately deleting your personal data in accordance with this policy, provided there are no outstanding compliance obligations requiring its retention.

When personal data is no longer required for any legitimate purpose and no regulatory retention obligation applies, aj999 will securely delete or anonymise the data so that it can no longer be associated with any identifiable individual.

aj999 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to, the following:

• TLS Encryption in Transit: All data transmitted between your browser or device and aj999 servers is encrypted using Transport Layer Security (TLS). This ensures that your personal and financial data cannot be intercepted during transmission.
• Encryption at Rest: Sensitive data stored in aj999's databases — including identity documents, financial records, and hashed authentication credentials — is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within aj999's systems is restricted on a strict need-to-know basis. Staff members and service providers can only access the data that is necessary for their specific role and are bound by confidentiality obligations.
• Two-Factor Authentication: aj999 supports and strongly encourages two-factor authentication (2FA) for all player accounts, providing an additional layer of protection against unauthorised account access.
• Regular Security Audits: aj999's platform and data systems are subject to regular internal and third-party security reviews and penetration testing to identify and remediate potential vulnerabilities.
• Incident Response: aj999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, aj999 will notify the relevant supervisory authority and affected players in accordance with applicable regulatory timelines.

As aj999 operates under an international gaming licence, your personal data may be transferred to and processed in countries outside of Pakistan. This may occur where our servers, data processors, or service providers are located in other jurisdictions.

Whenever personal data is transferred internationally, aj999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or higher than that which applies under our gaming licence framework. These safeguards may include:

• Binding contractual clauses in data processing agreements with service providers, incorporating data protection obligations consistent with our licensing requirements.
• Transferring data only to jurisdictions that maintain adequate data protection standards, as assessed by our compliance team on an ongoing basis.
• Applying technical and organisational security measures appropriate to the sensitivity of the data being transferred.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact us at [email protected].

As an aj999 player, you have a number of rights with respect to your personal data. aj999 is committed to facilitating the exercise of these rights in a straightforward and timely manner. The rights available to you are described below.

Please note that some rights are subject to limitations — for example, the right to erasure cannot override aj999's legal obligation to retain certain data for a minimum of five years under our AML and gaming licence compliance requirements. Where a limitation applies, aj999 will explain the reason clearly in our response to your request.

The aj999 platform is strictly intended for adults aged 21 years and above. aj999 does not knowingly collect personal data from any individual under the age of 21, and the platform takes active steps to prevent access by underage individuals.

If aj999 becomes aware that personal data has been collected from a player who was under 21 years of age at the time of registration, we will take immediate steps to delete that data from our records and close the associated account. If you are a parent or guardian and believe your child has registered on the aj999 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

aj999 may send you promotional emails, bonus offer notifications, and platform news where you have given your explicit consent to receive such communications during the registration process or subsequently through your account communication preferences.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in every promotional email we send.
• Updating your communication preferences in your aj999 account settings dashboard.
• Contacting our customer support team via live chat or email at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent will take effect within 30 days. Please note that withdrawing consent for marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and important policy update notices — which are sent as part of the core account service and are not subject to marketing opt-out.

aj999 reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — aj999 will provide advance notice to registered players via email or through a prominent in-platform notification before the changes take effect.

For minor, non-material changes (such as clarifications of existing language or updates to contact details), aj999 will update this page and revise the "Last Updated" date at the top of the document without issuing a separate notification. It remains the player's responsibility to review this Privacy Policy periodically to stay informed of how their data is being handled.

Continued use of the aj999 platform after the effective date of any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this policy, you should discontin ue using the platform and contact our support team to discuss your options, including account closure.

If you have any questions, concerns, or complaints about how aj999 handles your personal data, or if you wish to exercise any of your data rights, please get in touch with our team using the contact details below.

• Email: [email protected] (please use subject line "Privacy Request" or "Data Rights Request" as appropriate)
• Live Chat: Available 24 hours a day, 7 days a week via the aj999.ws platform — average response time is 3–5 minutes

aj999 aims to resolve all privacy-related queries and complaints promptly and fairly. If you submit a formal complaint, we will acknowledge it within 72 hours and provide a substantive response within 30 days. If we require additional time to investigate, we will inform you of the extension and its reasons.

We take every privacy complaint seriously. Our goal is to ensure that every aj999 player — whether based in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan — can trust that their personal data is in safe hands.