AV999 Privacy Policy — How We Protect Your Data in Pakistan

1Who We Are — About AV999

av999 operates the online gaming platform available at av999.im. We offer Pakistani players a range of games including Slots, Baccarat, Aviator, Ludo, Fishing Games, Virtual Sports and Esports Betting, all transacted in Pakistani Rupees (PKR).

When this Privacy Policy refers to "av999", "we", "us" or "our", it means the entity operating the av999 platform. When it refers to "you" or "your", it means any person who visits, registers on or uses av999.im in any capacity — whether as a registered player, a visitor who browses without registering, or anyone who contacts our support team.

av999 is the data controller for the personal information processed under this policy. This means we are responsible for deciding how and why your data is used. Our data contact is reachable at support@av999.im for any privacy-related queries.

2Personal Data We Collect

av999 collects different categories of personal data depending on how you interact with the platform. Here is a full breakdown of what we collect and why:

av999 does not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs or health data except where directly relevant to responsible gaming obligations (for example, where a player has flagged a gambling problem and requested support).

3How We Collect Your Data

av999 collects personal data through three main channels:

Data You Give Us Directly

This is information you enter voluntarily — when registering an account, completing identity verification (KYC), making a deposit or withdrawal, contacting our support team, submitting feedback or participating in a promotion. This includes your name, contact details, CNIC information and payment details.

Data Collected Automatically

When you visit av999.im, our systems automatically log technical information — your IP address, the device and browser you're using, your operating system and the actions you take on the platform. This happens through standard web server logs, cookies and similar technologies. You don't have to do anything for this data to be collected — it happens as a normal part of how websites function.

Data from Third Parties

In some cases av999 receives data from third parties — for example, payment providers like Easypaisa or JazzCash may confirm transaction details to help us verify deposits and process withdrawals. Identity verification services may provide results of document checks. Fraud prevention providers may share risk signals associated with an IP address or device.

4Why We Use Your Data — Our Purposes

av999 only uses your personal data for specific, legitimate purposes. Here is a complete list of why we process your data and what we actually use each category for:

• Account creation and management: We use your identity and contact data to create, maintain and secure your av999 account. Without this we cannot provide you with an account at all.
• Identity verification (KYC): Verifying your identity is a legal and operational requirement. av999 uses your CNIC and related documents to confirm you are who you say you are, that you meet the minimum age requirement of 18, and that your account details are accurate.
• Processing deposits and withdrawals: Your financial data is used to process payments via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card — to put money into your av999 account and to return winnings to you when you request a withdrawal.
• Fraud prevention and security: Technical data including IP addresses, device fingerprints and login patterns is analysed to detect and prevent fraud, account takeover, money laundering and other suspicious activity. This is in your interest as much as ours.
• Improving the platform: Usage data helps av999 understand how players use the platform, which features are popular, where there are problems and how we can make things better for Pakistani players specifically.
• Customer support: Communications data from your interactions with our support team is kept so we can provide consistent help and follow up on open issues effectively.
• Responsible gaming: Responsible gaming data — your deposit limits, session settings and self-exclusion status — is used to enforce the controls you've set and to support your wellbeing as a player.
• Legal and regulatory compliance: Certain data must be retained to comply with anti-money laundering obligations, tax requirements and platform audit standards.
• Marketing communications: With your explicit consent, av999 may use your contact details to send you information about promotions, bonuses and new game launches. You can opt out of marketing communications at any time by contacting support or updating your notification preferences.

5Legal Basis for Processing

av999 relies on the following legal bases to process your personal data:

• Contract performance: Processing your data is necessary to provide you with an av999 account and the gaming services you've signed up for. This covers account management, payment processing and game delivery.
• Legal obligation: Some processing is required to comply with applicable laws — such as identity verification under anti-money laundering obligations and record-keeping requirements.
• Legitimate interests: av999 has legitimate interests in preventing fraud, maintaining platform security, improving our service and understanding how the platform is used. We only rely on this basis where our interests are not overridden by your rights.
• Consent: For marketing communications and certain non-essential cookies, av999 relies on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

6Data Sharing — Who Sees Your Information

av999 does not sell your personal data to third parties under any circumstances. We share data only in the following limited, necessary situations:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the minimum data necessary to process your transactions — typically your mobile number or account reference and the transaction amount.
• Identity verification providers: Third-party KYC services receive your identity documents and check them against relevant databases. They do not retain data beyond their contractual obligation to av999.
• Fraud prevention and security partners: Risk and fraud detection providers receive technical signals (IP addresses, device data) to help identify suspicious activity. They do not receive your full identity or payment details.
• Game providers: Where games are supplied by third-party studios, those providers may receive session data (your account identifier and bet amounts) to run the game. They operate under data processing agreements with av999.
• Law enforcement and regulators: av999 will disclose data to law enforcement agencies, courts or regulators where legally required to do so — for example, in response to a valid court order or regulatory investigation.
• Business transfers: In the event of a merger, acquisition or sale of av999, your personal data may be transferred as part of that transaction. You would be notified before your data is transferred and becomes subject to a different privacy policy.

Every third party that handles data on av999's behalf is required to process it securely, use it only for the specified purpose and comply with applicable data protection standards. av999 does not permit third-party service providers to use your data for their own marketing purposes.

7Payment Data — How Your Financial Information Is Handled

Because av999 handles real PKR transactions, payment data deserves specific attention. Here is exactly how financial information is managed on the platform:

• Payment card details (Visa/Mastercard) are processed through PCI-DSS compliant payment gateways. Raw card numbers are never stored on av999 servers.
• Easypaisa and JazzCash mobile wallet references are stored in encrypted form. The full mobile wallet number is masked in account displays after the transaction is confirmed.
• IBFT bank account details submitted for withdrawals are used solely for processing that specific transaction and are not retained in plain text.
• Transaction history — amounts, dates, payment methods used, reference numbers — is retained on av999 systems for audit and dispute resolution purposes for a period consistent with applicable legal requirements.
• av999 support staff can see your transaction history for the purpose of helping you with account questions, but they cannot see raw payment credentials.

8Cookies and Tracking Technologies

av999 uses cookies and similar technologies to make the platform work properly and to understand how it is used. Here is what each type does:

Essential Cookies

These are required for the platform to function at all. They keep you logged in during a session, remember your language preferences and maintain the security of your connection. You cannot opt out of essential cookies — without them, av999 cannot work.

Analytics Cookies

av999 uses analytics to understand which parts of the platform are used most, how players navigate between games and where technical problems occur. This data is aggregated and does not identify you personally. Analytics cookies can be declined without affecting your use of the platform.

Marketing Cookies

With your consent, av999 may use cookies to show you relevant promotional content about new games and bonuses on the platform. These cookies are only set after you have given explicit consent via the cookie consent tool presented when you first visit av999.im. You can withdraw this consent at any time.

Most modern browsers allow you to control cookies through browser settings — you can delete existing cookies, block new ones or configure which types you accept. Note that blocking essential cookies will prevent av999 from functioning normally.

9Data Security — How We Protect Your Information

av999 takes the security of your personal data seriously. We have put in place a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure:

• SSL/TLS Encryption: All data transmitted between your device and av999.im is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this encryption is active.
• Encrypted Data Storage: Sensitive data — including passwords (stored as hashed values, never plain text), payment references and identity documents — is encrypted at rest in av999's systems.
• Access Controls: Internal access to personal data at av999 is restricted to staff members who need it to do their jobs. Access is logged, monitored and reviewed regularly.
• Two-Factor Authentication: av999 supports and encourages two-factor authentication (2FA) for all player accounts. This adds a second layer of protection in addition to your password.
• Regular Security Reviews: av999 conducts regular security assessments of its infrastructure and works with security partners to identify and address vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, av999 will notify affected users as soon as reasonably possible and take immediate steps to contain and remediate the incident.

10How Long We Keep Your Data

av999 does not keep your personal data longer than necessary for the purpose it was collected. Here are our standard retention periods:

• Active account data (profile, transaction history, game records) is retained for as long as your av999 account remains open.
• Identity verification documents (CNIC copies, photos) are retained for a minimum of 5 years after your last transaction, in line with anti-money laundering requirements.
• Financial transaction records are retained for a minimum of 5 years for audit, tax and regulatory purposes.
• Support communications are retained for 3 years from the date of the interaction.
• Marketing preferences and consent records are retained until you withdraw consent or close your account, plus 1 year for compliance evidence purposes.
• Technical logs (IP addresses, session data) are typically retained for 90 days unless flagged as part of a security investigation.

When data is no longer required for its stated purpose and there is no legal obligation to retain it, av999 securely deletes or anonymises it. Anonymised data (from which you cannot be identified) may be retained indefinitely for analytical purposes.

11Your Privacy Rights

As an av999 player in Pakistan, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting av999 at support@av999.im with a clear description of your request.

12Children's Privacy — Under-18 Players Not Permitted

av999 is strictly an adult platform. Only individuals aged 18 years or over are permitted to register, deposit or play. We do not knowingly collect personal data from anyone under the age of 18.

During registration, all users are required to confirm they are 18 or older. av999 also conducts age verification as part of the KYC process — if a player's identity documents indicate they are under 18, the account will be immediately suspended, all balances returned and the account permanently closed.

If you believe an under-18 individual has registered on av999, please contact us immediately at support@av999.im. We take underage access extremely seriously and will act on any credible report without delay.

13Changes to This Privacy Policy

av999 may update this Privacy Policy from time to time — as the platform evolves, regulations change or we introduce new features that affect how data is handled. When material changes are made, av999 will notify registered users via the platform or to their registered mobile number before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this policy periodically so you are always aware of how av999 handles your information. If the changes are significant and you do not agree with them, you may close your account — any qualifying balance will be returned without additional conditions.

Continued use of av999.im after the effective date of any revision to this policy constitutes your acceptance of the updated terms. Minor changes — such as clarifications of existing practices or corrections of typographical errors — may be made without formal notice.

14Contact Us — Privacy Queries & Complaints

If you have any questions about how av999 handles your personal data, want to exercise your privacy rights or want to raise a concern about our data practices, please get in touch:

• Email: support@av999.im (subject: "Privacy Query" or "Privacy Rights Request")
• Response time: We aim to respond to all privacy queries within 48 hours and to formal rights requests within 30 days.
• Identity verification: For rights requests we may ask you to verify your identity before processing — to protect you against someone else exercising rights in your name.

If you are not satisfied with av999's response to a privacy concern, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction. We take all privacy complaints seriously and encourage you to contact us first — most issues can be resolved directly and quickly without involving a regulator.