Privacy Policy – ay999 Pakistan Gaming Platform

01 What Information We Collect

When you register and use ay999, we collect several types of information. Here is a straightforward breakdown of what that includes:

02 How We Collect Your Information

ay999 collects your information through the following channels:

• Direct interactions: Information you provide when you fill in the registration form, contact our support team, or submit verification documents
• Automated technologies: As you navigate the platform, we automatically collect technical and usage data through cookies and similar tracking technologies
• Payment providers: When you make a deposit or withdrawal via JazzCash, Easypaisa, Raast, Bank Transfer or other methods, we receive transaction confirmation and reference data from those providers
• Third-party verification services: In some cases, we use external services to verify identity documents; these services only receive the specific information needed for that check

We do not purchase personal data from third-party data brokers or marketing lists. All data we hold relates directly to your use of ay999.

03 Why We Use Your Information

Everything we collect has a clear purpose. We use your personal information to:

• Create and manage your ay999 account and keep it secure
• Process deposits and withdrawals in PKR and maintain an accurate transaction record
• Verify your identity before processing significant withdrawals or when required for account security
• Settle sports bets on cricket, PSL, football, esports and other markets correctly
• Send you important account notifications — such as deposit confirmations, withdrawal updates, password changes and security alerts
• Personalise your experience on the platform based on the games and sports you engage with most
• Detect and prevent fraud, account abuse, bonus misuse and other prohibited activities described in our Terms and Conditions
• Improve the platform's performance, fix bugs and develop new features based on how players actually use ay999
• Comply with applicable legal and regulatory obligations where required

We do not use your data to make automated decisions that have a significant legal effect on you without human review, and we do not use it to build advertising profiles for sale to third parties.

04 Sharing Your Data With Others

ay999 does not sell your personal data. We do not share it with advertisers, data brokers or unrelated third parties. There are, however, specific situations where sharing data is necessary to operate the platform:

• Payment processors: JazzCash, Easypaisa, Raast and other payment partners receive the transaction data needed to process your deposit or withdrawal. They operate under their own privacy policies and security standards
• Identity verification providers: Where we use external services to verify your CNIC or other documents, those providers receive only the data required for the specific verification task
• Technology infrastructure providers: Hosting, cloud storage and platform infrastructure partners may process data on our behalf under strict data processing agreements
• Legal and regulatory requirements: We may be required to disclose data in response to a lawful request from a competent authority — we will only comply with requests that meet the applicable legal standard

05 Payment Data & PKR Transactions

All financial transactions on ay999 are conducted in Pakistani Rupees (PKR). We maintain a full record of your deposit and withdrawal history as part of standard account management and to ensure accurate PKR balances at all times.

When you pay via JazzCash or Easypaisa, ay999 receives a transaction reference and confirmation — we do not store your mobile wallet PIN or any authentication credential used on those platforms. When you pay by card, ay999 does not store your full card number on its servers; card data is handled by a PCI-DSS-compliant payment processor.

Transaction records are retained for a minimum period as required by applicable financial record-keeping obligations. After that period, records are securely deleted or anonymised.

06 Cookies & Tracking Technologies

ay999 uses cookies and similar technologies to keep the platform running smoothly and to understand how players use it. Here is what that means in practice:

• Essential cookies: These are required for the platform to work — they keep you logged in during a session and maintain your preferences. You cannot opt out of these without stopping use of the platform
• Analytics cookies: These help us understand which pages, games and features are most used, so we can improve the experience. Data collected is aggregated and not tied to your identity for marketing purposes
• Security cookies: Used to detect unusual login patterns and protect your account from unauthorised access

Most browsers allow you to manage cookie settings — you can block or delete cookies through your browser's privacy settings. Note that blocking essential cookies will affect your ability to use ay999 normally.

07 How We Protect Your Information

Keeping your data secure is a core part of how ay999 operates. We apply multiple layers of protection:

• All data transmitted between your device and ay999 is encrypted using TLS (Transport Layer Security)
• Account passwords are stored using strong one-way hashing — ay999 staff cannot read your password
• Access to personal data within ay999 is restricted on a need-to-know basis; only staff with a specific operational need can access player records
• Our systems are monitored for unusual activity and potential intrusions around the clock
• Regular security reviews and vulnerability assessments are carried out on the platform infrastructure

While we take every reasonable precaution, no system is completely immune to risk. We encourage you to protect your own account by using a strong, unique password and not sharing your login details with anyone. If you suspect your account has been compromised, contact support immediately.

08 Data Retention

ay999 keeps your personal information only for as long as it is needed for the purpose it was collected, or as required by applicable obligations. In practical terms:

• Active accounts: Your account data is retained for as long as your account remains open and active on the platform
• Closed accounts: When you close your account, we retain core identity and transaction records for a minimum period to meet financial record-keeping requirements. After that period, data is securely deleted or anonymised
• Verification documents: CNIC copies and other KYC documents are retained for the period required for account verification and thereafter securely disposed of
• Technical and usage logs: System logs and usage data are typically retained for a shorter rolling period and are used only for security monitoring and platform improvement

When data is no longer required and no legal obligation requires us to keep it, we delete it securely from our systems. Anonymised, aggregated data that cannot identify any individual may be retained indefinitely for statistical analysis.

09 Your Rights Over Your Data

As a player on ay999, you have meaningful rights over the personal information we hold about you. These include:

• Access: You can request a copy of the personal data ay999 holds on you at any time by contacting our support team
• Correction: If any information in your account is inaccurate or out of date, you can update it through your account settings or by contacting support
• Deletion: You can request that we delete your personal data. We will action this where there is no legal or operational reason to retain it — for example, an outstanding balance or ongoing investigation would delay deletion
• Restriction: You can ask us to stop actively using your data while a dispute or query is being resolved
• Portability: You can request a copy of your data in a structured, commonly used format
• Objection: You can object to specific uses of your data, including any direct marketing communications from ay999

To exercise any of these rights, contact the ay999 support team through live chat or at the email address shown in the footer. We aim to respond to all data rights requests within 30 days. For complex requests we may need additional time, in which case we will let you know.

10 Children's Privacy

ay999 is strictly an 18+ platform. We do not knowingly collect personal information from individuals under the age of 18. During registration, all players confirm that they are at least 18 years old. If we discover or have reasonable grounds to suspect that a registered account belongs to someone under 18, we will suspend the account immediately, withhold any associated funds pending review, and delete the personal data of the underage user once the review is complete.

If you are a parent or guardian and believe a minor has accessed ay999 using your details or created their own account, please contact our support team straight away so we can act quickly.

11 Updates to This Privacy Policy

ay999 may update this Privacy Policy from time to time — for example, when we introduce new features, change how we process data, or when applicable requirements change. When we make updates, we will revise the "Last updated" date at the top of this page.

For significant changes that materially affect how we use your personal information, we will take steps to inform registered players — such as an in-platform notification or a message to your registered mobile number. For minor or clarifying changes, updating this page is sufficient notice.

We encourage you to review this Policy periodically so you are always up to date. Continued use of ay999 after a Policy update constitutes your acceptance of the revised terms.

12 Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how ay999 has handled your personal information, please get in touch with us. Our support team is available 24 hours a day, 7 days a week through the live chat feature inside the platform.

You can also reach us at the support email address displayed in the footer of this page. When contacting us about a privacy matter, please include your registered mobile number so we can locate your account and respond to you accurately and promptly.

We treat all privacy queries seriously and aim to provide a full response within 10 working days. If your concern is complex or requires investigation, we will acknowledge your message immediately and keep you updated on progress.