a999a Privacy Policy — Your Data, Your Rights

This Privacy Policy applies to all personal data collected through the a999a website (https://a999a.org), the a999a mobile web platform, customer support interactions, and any other channels through which you provide information to us. By registering an account or using the a999a platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

We process personal data in accordance with applicable data protection principles, including the principles of data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality. We collect only the data that is necessary for the stated purposes and retain it only for as long as required by those purposes or applicable law. Players in Bangladesh should note that by using the a999a platform you consent to the processing of your data as described in this policy, including processing carried out by our technology and payment service providers operating in or outside of Bangladesh.

We collect personal data across the following categories. The specific data points collected depend on how you interact with the a999a platform — a registered player will have more data categories held than an anonymous visitor.

a999a uses personal data only for the purposes for which it was collected or for purposes that are compatible with those original purposes. The primary purposes for which we process your data are as follows:

• Account creation and management: registering your account, verifying your identity, maintaining account records, and providing access to platform features and services.
• Payment processing: facilitating deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), verifying payment method ownership, and maintaining financial transaction records.
• Fraud prevention and security: detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited activities; protecting the integrity of the platform and the security of all players.
• Responsible gaming compliance: monitoring gaming activity to identify indicators of problem gambling, applying responsible gaming tools where requested or required, and maintaining records for regulatory purposes.
• Customer support: responding to your queries, complaints, and requests; maintaining records of support interactions to ensure continuity of service and quality assurance.
• Marketing and promotions (with consent): where you have expressly opted in to receive promotional communications, sending you information about bonuses, seasonal promotions, and new games or features. You may withdraw consent at any time by contacting support.

We do not use your personal data for automated individual decision-making or profiling that produces legal or similarly significant effects without human oversight. Where automated checks are used in fraud prevention or KYC processes, these are reviewed by a human team member before any action is taken that materially affects your account.

a999a processes personal data on one or more of the following legal bases, depending on the nature of the data and the specific processing activity:

• Contractual necessity: processing required to enter into or perform the contract with you as a registered player, including account management, payment processing, and game operation.
• Legal obligation: processing necessary to comply with applicable law, including anti-money laundering obligations, age verification requirements, and record-keeping obligations imposed by financial regulations.
• Legitimate interests: processing necessary for the legitimate interests of a999a or a third party, provided those interests are not overridden by your own interests or fundamental rights — for example, fraud prevention, platform security, and analytics.
• Consent: where you have given explicit consent to a specific processing activity — for example, opting in to receive promotional emails. Consent may be withdrawn at any time without detriment to your account or the services available to you.

a999a does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may share your data only in the following limited circumstances, and always subject to appropriate confidentiality and data protection obligations on the part of the recipient:

• Payment service providers: we share the minimum necessary financial data with our payment partners (including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks) to facilitate deposits and withdrawals. These partners operate under their own privacy policies and security standards.
• Technology and infrastructure providers: we use trusted third-party technology partners to operate the platform, host data, and deliver game content. These providers act as data processors under contractual arrangements that restrict their use of your data to the specified service purposes only.
• Legal and regulatory authorities: we may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by applicable law, court order, or binding regulatory direction.
• Fraud prevention and identity verification services: we may share limited data with third-party fraud prevention and identity verification service providers as part of our KYC and anti-money laundering compliance obligations.

a999a uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, and analyse platform performance. We use three categories of cookies:

You can manage or disable non-essential cookies through your browser settings. Please note that disabling analytics or functional cookies may affect the quality of your experience on the a999a platform but will not prevent you from accessing core gaming features. We do not use third-party advertising cookies or cross-site tracking cookies of any kind.

a999a implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit between your device and our servers; encrypted storage of sensitive data at rest; strict access controls limiting data access to authorised personnel on a need-to-know basis; regular security assessments and penetration testing of our platform infrastructure; and secure, audited procedures for data backup and recovery.

While we take all reasonable steps to protect your data, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights or interests, we will notify affected players as promptly as practicable and take all reasonable steps to mitigate the impact of the breach. We encourage all players to use a strong, unique password for their a999a account and to enable two-factor authentication where available.

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply: account data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements; gaming activity logs are retained for a minimum of three (3) years; marketing consent records are retained for as long as you remain opted in, plus one (1) year after opt-out; KYC documents are retained for five (5) years following the end of the business relationship.

After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes. Requests for early deletion are handled in accordance with the Your Rights section of this policy.

Subject to applicable law and our legal obligations, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line 'Data Rights Request' and your registered username.

• Right of access: you may request a copy of the personal data we hold about you, along with information about how it is processed and to whom it has been disclosed.
• Right to rectification: you may request correction of any inaccurate or incomplete personal data we hold about you. Where a correction is made, we will notify any third parties to whom the data has been disclosed where this is practicable.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed — subject to our legal retention obligations.
• Right to restriction: you may request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to data portability: where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.

We will respond to all data rights requests within 30 days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act on the request.

The a999a platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person below this age threshold, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a person under 21 in your care has registered an account on the a999a platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

a999a reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, data processing practices, or platform features. When we make material changes to this policy, we will post the updated version on this page with a revised effective date and, where the changes are significant, we will endeavour to notify registered players by email or via an in-platform notification.

Your continued use of the a999a platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically so that you are always aware of the current version of our data practices. The date at the top of this page indicates when this version came into effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how a999a handles your personal data, please contact our support team. We are committed to resolving privacy queries promptly and transparently.

Support Email: [email protected] (plain text — not a clickable link). Please include your registered username and a brief description of your query in all correspondence. For data rights requests, please include 'Data Rights Request' in your message subject. We aim to respond to all privacy-related queries within 24 hours during normal operating hours (Bangladesh Standard Time, UTC+6).