af999 Privacy
Policy

1 Introduction

This Privacy Policy ("Policy") describes how af999 ("the Platform", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the af999 website at af999.io, including its casino games, sports betting markets, account services, payment processing features, and customer support channels.

af999 operates as an online casino and cricket betting platform purpose-built for the Bangladesh market. Our platform is available in English and all financial transactions are denominated in Bangladeshi Taka (BDT). We process personal data from players located in Bangladesh and are committed to handling that data responsibly, transparently, and in accordance with applicable data protection principles.

This Policy should be read alongside the af999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Where this Policy conflicts with any other document, this Policy shall govern with respect to privacy and data protection matters.

By registering an af999 account, making a deposit, placing a wager, or otherwise using any feature of the af999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not use the af999 platform.

2 Data We Collect

af999 collects personal data in several categories. The data collected depends on how you interact with the platform — a registered account holder who has completed KYC verification will have more data on record than an unregistered visitor browsing the site. The categories of personal data we collect are as follows:

2.1 Identity Data

Information that identifies you as an individual, collected primarily during account registration and KYC verification:

• Full legal name (as it appears on your National Identity Card or passport)
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• Government-issued ID number (National ID Card, passport, or BRTA driver's licence number)
• Scanned or photographed copies of identity documents submitted during KYC

2.2 Contact Data

• Email address (primary account communication channel)
• Mobile phone number (used for SMS verification and 2FA)
• Residential address in Bangladesh, including division, district, and postal code

2.3 Financial Data

• Mobile banking wallet identifiers (bKash, Nagad, Rocket, Upay account numbers/phone numbers linked to your af999 account)
• Bank account details where bank transfer is the chosen payment method (account number, bank name, branch)
• Transaction history: deposit amounts, withdrawal amounts, timestamps, and payment method used per transaction
• Account balance and bonus balance at any given point in time

2.4 Gaming & Betting Data

• Game session records including game title, provider, session start/end time, wager amount, and outcome
• Sports betting records including event, market, stake, odds, and settlement result
• Responsible gaming tool settings (deposit limits, loss limits, session time limits, self-exclusion status)
• Bonus opt-in records and wagering requirement progress

2.5 Technical & Device Data

• IP address at time of registration, login, and transaction
• Device type, operating system, and browser version
• Geolocation data (country/region level only, derived from IP address)
• Cookie identifiers and session tokens (see Section 7)
• Login timestamps and failed login attempt records

2.6 Communication Data

• Content of support tickets, live chat transcripts, and email correspondence with the af999 support team
• Responses to any voluntary player surveys or feedback forms
• Records of promotional communications sent to you and whether they were opened

3 How We Collect Data

af999 collects personal data through the following channels and mechanisms:

3.1 Direct Collection

Data you provide directly to af999 during account registration (name, email, mobile number, date of birth, address), KYC verification (identity documents), payment processing (mobile wallet numbers, bank details), support interactions (chat and email), and participation in surveys or promotions.

3.2 Automated Collection

When you access the af999 platform, our servers automatically record technical data including your IP address, browser type, device identifiers, and session activity. This data is collected passively through server logs and cookies (see Section 7) and does not require any active input from you.

3.3 Third-Party Sources

af999 may receive data about you from third-party sources in specific limited circumstances:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank): transaction confirmation data and mobile wallet status to verify deposit and withdrawal processing
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): session outcome data and RTP audit records necessary for account balance reconciliation and dispute resolution
• Identity verification services: confirmation of identity document authenticity where third-party document verification is used as part of the KYC process
• Fraud prevention partners: risk signals, device fingerprint data, and behavioural anomaly flags used to protect the platform and its players

4 Purpose of Processing

af999 processes personal data only for defined, legitimate purposes. The table below sets out the primary purposes for which each category of data is used:

5 Legal Basis for Processing

af999 processes personal data on one or more of the following legal bases depending on the specific purpose:

• Contractual necessity — processing required to perform the contract between you and af999, including account registration, payment processing, game delivery, and withdrawal services. Without this processing, af999 cannot provide its services to you.
• Legitimate interests — processing carried out for the legitimate business interests of af999 where those interests are not overridden by your rights. This includes fraud prevention, platform security, technical performance monitoring, and responsible gaming oversight.
• Consent — processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications. You may withdraw consent at any time by contacting support or using the opt-out mechanism in any marketing email.
• Legal obligation — processing necessary for af999 to comply with applicable legal and regulatory obligations, including responding to lawful requests from law enforcement or other competent authorities, and retaining transaction records for audit purposes.

6 Data Sharing & Disclosure

af999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data is shared only where strictly necessary for the delivery of our services or where required by law. The categories of recipients with whom af999 may share your data are:

6.1 Payment Service Providers

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the minimum data necessary to process deposit and withdrawal instructions. This typically includes your name, mobile number or bank account number, and transaction amount. af999 does not share gaming history or identity document copies with payment providers.

6.2 Game Providers

Certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier (not your real name or contact details) to enable game session delivery and result reconciliation. No identity data is shared with game providers beyond what is technically required.

6.3 Identity Verification & Fraud Prevention

Where af999 uses third-party services to assist with KYC document verification or fraud risk scoring, the relevant data (identity document images, IP address, device fingerprint) is shared with those providers under strict data processing agreements that prohibit any secondary use of the data.

6.4 Legal & Regulatory Disclosure

af999 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by a lawful order, subpoena, or legal obligation. af999 will, where permitted by law, notify the affected player of any such disclosure request prior to compliance.

6.5 Business Transfers

In the event that af999 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified via the registered email address prior to any such transfer and will be provided with the opportunity to request account closure.

7 Cookies & Tracking Technologies

The af999 website uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience. A cookie is a small text file stored on your device by your browser when you visit a website. The cookies used on af999 fall into the following categories:

7.1 Strictly Necessary Cookies

These cookies are essential for the af999 platform to function. They enable core features including user authentication (keeping you logged in during a session), session security tokens, and load-balancing between servers. These cookies cannot be disabled without breaking core platform functionality.

7.2 Performance & Analytics Cookies

af999 uses aggregated, anonymised analytics to understand how players navigate the platform — which game categories are most popular, where users drop off in the deposit flow, and how page load times vary by device type. This data helps af999 continuously improve the user experience. Analytics cookies do not identify individual players.

7.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred language setting (English), your last selected game category, and responsible gaming tool configurations — so you do not need to re-enter them on every visit.

7.4 Managing Cookies

You may control or delete cookies through your browser settings. Disabling strictly necessary cookies will impair or prevent access to your af999 account. Disabling analytics or functional cookies will not prevent platform access but may reduce the quality of the user experience. For guidance on managing cookies in your specific browser, consult the help documentation for Chrome, Firefox, Safari, or your preferred browser.

8 Data Retention

af999 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player. Where anonymisation is not technically feasible, data is securely destroyed using industry-standard methods.

9 Security Measures

af999 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, alteration, and disclosure. The key technical and organisational measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between player devices and af999 servers, including account login, deposit flows, withdrawal requests, and support chat sessions
• Encryption at rest for sensitive data fields including identity document files, payment account identifiers, and account passwords (stored as salted cryptographic hashes — never in plain text)
• Two-factor authentication (2FA) available to all players via SMS to protect against unauthorised account access
• Role-based access controls ensuring that only authorised af999 personnel can access personal data, and only to the extent required by their specific role
• Intrusion detection systems monitoring for anomalous login patterns, unusual transaction volumes, and other indicators of potential compromise
• Regular security assessments of platform infrastructure, including vulnerability scanning and penetration testing by qualified security professionals
• Incident response procedures including a defined process for identifying, containing, and notifying affected players of any data breach that poses a risk to their personal data

10 Your Privacy Rights

As a player on the af999 platform, you hold a number of rights with respect to your personal data. af999 is committed to honouring these rights promptly and without undue barriers. Your rights include:

• Right of access — you may request a copy of all personal data af999 holds about you. af999 will provide this within a reasonable timeframe upon verification of your identity.
• Right to rectification — if any personal data held by af999 is inaccurate or incomplete, you have the right to request correction. Minor account details (email address, mobile number) can be updated directly through your account settings. Changes to identity documents require submission through the KYC process.
• Right to erasure — you may request deletion of your personal data subject to certain limitations. af999 cannot erase data that it is legally required to retain (such as transaction records and KYC documents). Where erasure is not possible, af999 will explain why and outline the applicable retention period.
• Right to restriction of processing — in certain circumstances (such as while a dispute is being resolved), you may request that af999 restrict processing of your data to storage only.
• Right to data portability — you may request that af999 provide your account data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to object — you may object to processing based on af999's legitimate interests, including direct marketing. af999 will honour such objections unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, please contact the af999 support team via live chat or email at [email protected]. af999 aims to respond to all privacy rights requests within 30 calendar days of receipt. Complex requests may require additional time, in which case af999 will notify you of the extension and provide a reason.

11 Children's Privacy

The af999 platform is strictly intended for adults aged 21 years and above. af999 does not knowingly collect, process, or store personal data relating to any person under the age of 21. The platform's registration process includes age verification steps specifically designed to prevent underage access.

If af999 becomes aware that personal data has been collected from a person under the age of 21 — through age misrepresentation or any other means — the affected account will be immediately suspended, the data will be deleted from af999's records, and any funds in the account will be handled in accordance with the procedures set out in the Terms & Conditions.

Parents and guardians in Bangladesh who are concerned about underage access to online gambling services are encouraged to use parental control and internet filtering software to restrict access to gambling websites on shared or family devices. If you believe that a minor may have accessed af999, please contact our support team immediately at [email protected].

12 Third-Party Links

The af999 website does not contain links to third-party websites outside the af999 domain, with the exception of payment partner portals accessed during the deposit and withdrawal flow. af999 is not responsible for the privacy practices, security measures, or content of any external website or service, including the mobile banking platforms of bKash, Nagad, Rocket, and Upay.

When you leave the af999 platform to complete a payment transaction with a third-party payment provider, that provider's own privacy policy governs the data you provide to them directly. af999 recommends that you review the privacy policies of any third-party services you use in connection with your af999 account.

Game provider software (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) is delivered within the af999 platform environment. While the game logic runs on provider servers, the data exchange between af999 and these providers is governed by data processing agreements described in Section 6.2 of this Policy.

13 Policy Updates

af999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, af999 will notify registered players through one or more of the following methods: a notification displayed upon login to the af999 platform, an email sent to the registered account address, or a prominent notice on the af999 homepage.

The effective date at the top of this Policy will always reflect the date on which the current version came into force. Your continued use of the af999 platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree with the revised Policy, you should cease using the platform and contact support to request account closure.

af999 recommends that all players review this Privacy Policy periodically — at minimum once per year, and whenever af999 notifies you of an update. Previous versions of this Policy are available upon written request to the support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way af999 handles your personal data, please contact our dedicated support team. All privacy-related enquiries are treated as a priority and handled by trained staff with knowledge of data protection obligations.

• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing
• Live Chat: Available 24/7 directly through the af999 platform — response time under 5 minutes
• Response Time: af999 aims to acknowledge all privacy enquiries within 24 hours and to provide a full response within 30 calendar days
• Operating Hours: Support team operates on Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week including public holidays

When contacting af999 regarding a privacy matter, please provide your registered username or email address, a clear description of your request or concern, and — where you are exercising a specific right (access, erasure, portability, etc.) — an indication of which right you wish to exercise. This information allows af999 to locate your records and process your request efficiently.

af999 may need to verify your identity before processing certain privacy rights requests, particularly requests for data access, erasure, or portability. This verification step is a security measure designed to prevent unauthorised persons from accessing or deleting another player's data. Identity verification for privacy requests follows the same KYC standards applied during account registration.