Privacy Policy — AJ999

AJ999 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual ("User", "Player", "you") who visits, registers on or interacts with the AJ999 website at https://aj999.cam and any associated subdomains, mobile interfaces or applications.

This Privacy Policy is a binding legal document. It sets out in plain terms exactly what personal data we collect, why we collect it, how it is processed, who it may be shared with, how long we keep it, and what rights you hold in relation to your data. This Policy must be read in conjunction with our Terms & Conditions.

By registering an account, making a deposit, accepting any promotion or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein, to the extent that consent forms the lawful basis of processing in your jurisdiction.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

AJ999 collects personal data that is necessary and proportionate for the operation of the Platform, the fulfilment of legal obligations and the provision of a safe, compliant gambling environment. The categories of personal data we may collect include but are not limited to:

We do not collect sensitive personal data (such as biometric data, health data, political opinions or religious beliefs) unless expressly required by applicable law or regulatory obligation.

4.1 Directly from You

The majority of personal data we hold is provided directly by you — during account registration, identity verification, deposit or withdrawal requests, support interactions, promotional opt-ins and survey responses.

4.2 Automatically via Technology

When you visit or use the Platform, certain technical and usage data is collected automatically through cookies, web beacons, pixel tags, server logs and similar tracking technologies. This data helps us operate the Platform securely, detect fraud, monitor performance and understand how Users navigate the interface.

4.3 From Third Parties

We may receive personal data about you from third parties in specific circumstances, including:

• Identity verification service providers (KYC/AML bureaus).
• Payment processing partners, to the extent required to complete transactions and comply with AML obligations.
• Fraud detection and risk management service providers.
• Responsible gambling organisations, in cases involving self-exclusion registry checks.
• Law enforcement or regulatory bodies, pursuant to a lawful request or obligation.

AJ999 processes your personal data for the following purposes:

• Account Management: Creating, maintaining and operating your registered account, including authentication, profile settings and communication preferences.
• KYC and Age Verification: Verifying your identity and age before processing withdrawals and at intervals required by applicable compliance obligations.
• Payment Processing: Facilitating deposits and withdrawals, reconciling transactions and investigating payment disputes.
• AML Compliance: Monitoring transactions for suspicious activity, maintaining transaction records and reporting to relevant authorities as required by law.
• Responsible Gambling: Monitoring wagering patterns to identify signs of problem gambling and applying self-imposed limits, cooling-off periods or self-exclusions requested by Users.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse and other integrity violations.
• Legal Compliance: Meeting obligations imposed by applicable law, responding to lawful regulatory requests and maintaining records required for audit purposes.
• Platform Improvement: Analysing usage patterns to optimise the Platform's features, navigation, game library and performance on mobile devices and Pakistani network infrastructure.
• Customer Support: Handling complaints, disputes and general enquiries submitted through live chat or email.
• Marketing Communications: Sending promotional offers and Platform updates to Users who have opted in to receiving such communications. You may withdraw consent at any time.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by applicable law or AML obligations.

Where applicable law requires a documented legal basis for the processing of personal data, AJ999 relies on one or more of the following grounds:

7.1 We Do Not Sell Your Data

AJ999 does not sell, rent or trade your personal data to third parties for their own marketing purposes. Any sharing of personal data is limited to what is strictly necessary for the purposes described in this Policy.

7.2 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf under binding data processing agreements. These may include:

• Identity verification and KYC service providers.
• Payment processing and transaction gateway providers.
• Cloud hosting and infrastructure providers.
• Fraud detection and risk management systems.
• Customer support platform providers.
• Analytics and platform performance monitoring services.

7.3 Legal and Regulatory Disclosure

We may disclose personal data to competent authorities, regulators, law enforcement agencies or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property or safety of the Platform, its users or third parties.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of the Platform's operator, personal data held by AJ999 may be transferred to the successor entity as part of that transaction. Users will be notified of any material change in data controller identity.

8.1 What We Use

The Platform uses cookies and similar technologies (including local storage, session tokens and web beacons) to operate correctly, maintain session state, detect fraud and understand how Users interact with the interface.

8.2 Cookie Categories

8.3 Managing Cookies

You may control non-essential cookies through your browser settings or through any cookie preference centre provided on the Platform. Disabling strictly necessary cookies will impair the Platform's ability to function correctly. Disabling analytics or marketing cookies will not affect your ability to play or transact, but may result in less relevant promotional communications.

AJ999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention approach is as follows:

• Active Accounts: Personal data is retained for the full duration of the account relationship.
• Closed Accounts: Following account closure, personal data is retained for a minimum period required by applicable AML, financial services and regulatory record-keeping obligations — typically five (5) years from the date of closure, though longer periods may apply depending on jurisdiction.
• KYC Documents: Retained for the duration of the account and for no less than five (5) years after the last transaction date, in accordance with AML requirements.
• Support Communications: Retained for up to three (3) years from the date of the last interaction, for dispute-resolution and quality-assurance purposes.
• Technical / Log Data: Retained for up to twelve (12) months in an identifiable form, after which it may be aggregated and anonymised for analytics purposes.
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period to demonstrate compliance with consent obligations.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

AJ999 implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data in transit between your device and the Platform.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Two-factor authentication options for User accounts.
• Regular security assessments and vulnerability management procedures.
• Incident response procedures to detect, contain and notify affected parties in the event of a data breach, in accordance with applicable notification obligations.

While we employ industry-standard security practices, no system is entirely impenetrable. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

Depending on the data protection law applicable in your jurisdiction, you may hold some or all of the following rights in relation to your personal data. AJ999 will respond to verified rights requests within a reasonable timeframe, subject to any applicable legal exemptions.

To exercise any of these rights, contact our Data Privacy team at the email address provided in Section 15. We may need to verify your identity before processing a request. Certain rights may be limited or overridden by applicable legal obligations — for example, AML record-keeping requirements may prevent immediate deletion of transaction-related data.

The AJ999 Platform is strictly intended for adults. We do not knowingly collect, process or store personal data relating to individuals under the age of 18 — or the higher minimum age required by the applicable operator/license jurisdiction.

Age verification is conducted as part of the KYC process. If we become aware that personal data has been collected from or on behalf of a minor, we will take immediate steps to close the associated account, delete the data and, where required by law, notify relevant authorities.

As an internationally operated platform, AJ999 may transfer personal data to, and process it in, countries outside your country of residence. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with the requirements of applicable data protection law.

Safeguards for international transfers may include contractual obligations (such as standard contractual clauses or equivalent instruments), binding corporate rules, adequacy decisions by competent data protection authorities, or other legally recognised transfer mechanisms.

Users in Pakistan should be aware that data transferred internationally will be processed under the data protection frameworks of the recipient jurisdiction, which may differ from any applicable Pakistani data protection standards. By using the Platform, you acknowledge this international processing.

AJ999 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will notify registered Users via an on-platform notice, an email to the registered address or a prominent announcement on the homepage, prior to the changes taking effect.

The version number and effective date shown at the top of this document indicate the current version in force. You are encouraged to review this Policy periodically. Your continued use of the Platform following notification of material changes constitutes acceptance of the revised Policy.

If you do not accept the updated Privacy Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

For any questions, requests or complaints relating to this Privacy Policy or the processing of your personal data, please contact the AJ999 Data Privacy team through the following channels. All contact details are provided as plain text — do not send sensitive personal data via unencrypted email.

We aim to acknowledge all data rights requests within 72 hours and to resolve them within 30 days, subject to verification requirements and any applicable legal exemptions.