AP999 Privacy Policy — How Your Data Is Protected on Our Platform

This Privacy Policy applies to ap999.online — referred to throughout this document as "AP999", "we", "us" or "the platform". AP999 operates as the data controller for all personal information collected from Pakistani members and visitors who access the platform.

As the data controller, AP999 is responsible for determining the purposes and means by which personal data is processed. We are committed to handling your information responsibly, using it only for the purposes described in this policy and protecting it against unauthorised access, loss or misuse.

If you have any questions about how AP999 handles your personal data — or want to exercise any of the rights described in Section 9 — please contact our support team at support@ap999.online or via live chat on ap999.online.

AP999 collects personal data in two broad categories: information you provide directly when using the platform, and information that is generated automatically through your use of AP999.

AP999 collects personal data through several channels. Understanding these channels helps you know exactly what data flows through when you interact with the platform.

• Direct input at registration: When you create your AP999 account, you provide your name, date of birth, phone number and set your password. This data is submitted through our secure registration form.
• Payment processing: When you deposit or withdraw using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, your payment details are processed. AP999 receives a confirmation reference but does not store raw payment credentials on its own servers — these are handled by our payment processing partners.
• Identity verification (KYC): When AP999 requests identity documents, these are submitted through a secure upload function within your account dashboard and processed by our verification team or third-party KYC provider.
• Automated data collection: Technical data including IP address, device identifiers and browsing behaviour on AP999 is collected automatically using server logs, cookies and similar tracking technologies. See Section 6 for full cookie details.
• Customer support interactions: When you contact AP999 via live chat or email, any personal information you share in the course of that communication is recorded and stored as part of your support history.
• Gameplay activity: AP999's systems automatically record all gaming activity — every bet, result, session start and session end — for account management, dispute resolution and responsible gaming monitoring purposes.

AP999 processes your personal data for specific, defined purposes. For each purpose we rely on a recognised legal basis — either the performance of a contract with you, a legitimate interest of AP999, your explicit consent, or compliance with a legal obligation.

• To operate your AP999 account — contract performance. Without processing your identity and contact data, we cannot create or maintain your account.
• To process deposits and withdrawals in PKR — contract performance. Payment data must be processed to credit your wallet and settle withdrawals to your Easypaisa, JazzCash or bank account.
• To verify your identity (KYC) — legal obligation and legitimate interest. Age verification and identity checks are a fundamental obligation for AP999 to prevent underage gambling and financial crime.
• To prevent fraud, money laundering and bonus abuse — legitimate interest. AP999 monitors account activity to detect patterns associated with fraudulent behaviour, protecting all members and the integrity of the platform.
• To provide customer support — contract performance and legitimate interest. Your communications data is retained to resolve disputes, provide consistent support and maintain a record of prior interactions.
• To monitor for problem gambling — legitimate interest and responsible gaming obligations. AP999 uses gaming data to identify members who may benefit from responsible gaming tools, consistent with its commitment to player welfare.
• To send transactional and account communications — contract performance. Password reset emails, payment confirmations, security alerts and similar messages are sent as a necessary part of operating your AP999 account.
• To send promotional communications — consent. AP999 will only send marketing emails or SMS messages if you have explicitly opted in. You can withdraw consent at any time through your AP999 account settings.
• To improve the AP999 platform — legitimate interest. Aggregated, anonymised technical and gaming data is used to understand how Pakistani members use the platform and where improvements should be made.

AP999 does not sell your personal data. We share it only with third parties where necessary to operate the platform, comply with legal requirements or protect AP999's legitimate interests. The categories of recipients are as follows.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer networks and card processors receive the minimum data necessary to execute your transactions. These providers are bound by their own privacy and security obligations.
• KYC and identity verification providers: When AP999 requests identity documents, these may be processed by a third-party KYC verification service. The provider is engaged under a data processing agreement and cannot use your data for any purpose other than verification on behalf of AP999.
• Fraud prevention and security services: AP999 may use specialised fraud detection tools that analyse account and transaction data. These tools process data under AP999's instruction and are bound by strict data protection agreements.
• Customer support platforms: AP999's live chat and support ticket system may be powered by a third-party customer support platform. Communications you submit through these channels are stored on that platform in accordance with its data protection commitments to AP999.
• Regulatory and law enforcement authorities: AP999 will disclose personal data to Pakistani or other relevant authorities where required by law, court order or other legally compelled process. AP999 will notify affected members where it is legally permitted to do so.
• Business successors: In the event that AP999's business is transferred, merged or acquired, personal data held about Pakistani members may be transferred to the new operator as part of that transaction. Members will be notified of any change in data controller.

AP999 uses cookies and similar tracking technologies to operate the platform, remember your preferences and understand how Pakistani members interact with ap999.online. This section explains what cookies AP999 uses and how you can manage them.

• Strictly Necessary Cookies: These are required for AP999 to function. They maintain your login session, remember your language preference and enable secure payment flows. Without these cookies, AP999 cannot work. You cannot opt out of strictly necessary cookies.
• Functional Cookies: These remember your AP999 account preferences — such as your preferred game view, live casino table filters and notification settings — so you do not have to reset them on each visit.
• Analytics Cookies: AP999 uses analytics to understand how members navigate the platform — which pages are visited, how long sessions last and where members encounter problems. This data is aggregated and anonymised. Analytics cookies can be declined through the cookie consent banner displayed on your first visit to AP999.
• Session Tokens: Encrypted session tokens are used to authenticate your AP999 login across page loads without requiring you to re-enter your password. These expire automatically after a period of inactivity.

You can manage your cookie preferences at any time through your browser settings. Disabling cookies beyond strictly necessary ones may affect certain AP999 features — for example, your game preferences may not be remembered between visits.

AP999 retains personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable legal and regulatory obligations.

When data reaches the end of its retention period, AP999 securely deletes or anonymises it so that it can no longer be linked to your identity.

AP999 implements appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, misuse, disclosure, alteration or destruction. While no system is completely immune to risk, the measures AP999 has in place reflect industry best practice for an online gaming platform serving Pakistani members.

• Encryption in transit: All data passed between your browser or app and AP999 is encrypted using TLS 1.2 or higher. This protects your login credentials, payment details and personal information from interception during transmission.
• Password protection: AP999 stores account passwords using a one-way cryptographic hash function. AP999 staff cannot view your password — only you know it. Always use a strong, unique password for your AP999 account.
• Payment data tokenisation: Raw payment credentials (card numbers, Easypaisa wallet PINs) are never stored on AP999 servers. Payment transactions are tokenised and processed through PCI-compliant payment service providers.
• Access controls: Internal access to AP999 member data is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive data handling training.
• System monitoring: AP999's infrastructure is monitored continuously for unusual activity, unauthorised access attempts and potential security incidents. Alerts trigger immediate investigation by the security team.

AP999 respects your rights over your own personal data. The following rights are available to all registered AP999 members. To exercise any of them, contact AP999 support — we will respond within 30 days.

AP999 is strictly an adults-only platform. No person under the age of 18 is permitted to register an account, deposit funds or participate in any gaming or betting activity on AP999. This is a non-negotiable requirement that AP999 enforces through age declaration at registration and age verification through KYC for withdrawals and high-value activities.

AP999 does not knowingly collect personal data from anyone under the age of 18. If AP999 becomes aware that personal data has been collected from an underage individual, that account will be immediately suspended, the data will be securely deleted to the extent permitted by law, and any funds deposited will be returned to the originating payment method. Parents or guardians who believe an underage person has accessed AP999 should contact us immediately at support@ap999.online.

AP999 may update this Privacy Policy from time to time to reflect changes in how we handle personal data, in the services we offer, or in applicable legal requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and — where the changes significantly affect how your data is processed — notify registered members via their contact details on file.

We encourage you to review this Privacy Policy periodically. The most current version is always available at ap999.online/privacy-policy. Continued use of AP999 after an updated policy has been posted constitutes acceptance of those changes.

If you have any questions about this Privacy Policy, about how AP999 handles your personal data, or if you wish to exercise any of the rights described in Section 9 — please reach out through any of the following channels.

• Email: support@ap999.online — use the subject line "Privacy Request" for the fastest routing to the correct team.
• Live Chat: Available 24/7 directly within the AP999 platform — support agents in both Urdu and English.
• Response time: AP999 commits to acknowledging all privacy-related requests within 5 business days and providing a substantive response within 30 calendar days.