ax999 Privacy Policy — Your Data, Our Responsibility

01 Introduction

ax999 is Pakistan's trusted online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. As a platform that handles real-money PKR transactions and processes identity documents during KYC, ax999 recognises that data privacy is a fundamental concern for every player on our platform.

This Policy has been written in plain, accessible English so that Pakistani players can understand exactly what data ax999 collects, how that data is used, and what choices you have regarding your own personal information. We have structured this Policy to give you a clear, section-by-section account of our data practices — there are no hidden clauses or unclear data-sharing arrangements buried in small print.

ax999 is the data controller in respect of all personal data collected through the ax999 platform. This means ax999 is responsible for determining the purposes for which your data is collected and the manner in which it is processed. Where ax999 engages third-party processors — such as payment service providers JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — those processors handle your data strictly on ax999's instructions and in accordance with their own applicable privacy obligations.

02 Personal Data We Collect

ax999 collects personal data from you in several ways: directly when you register an account or contact support, automatically when you use the platform, and from third-party verification services during KYC. The categories of personal data ax999 may collect include:

2.1 Registration Data

When you create an ax999 account, we collect your full legal name, date of birth, residential address in Pakistan, email address, and Pakistani mobile number. This information is required to create and manage your account and to verify your eligibility to play on ax999.

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering and age verification obligations, ax999 may request copies of your national identity card (CNIC), passport, recent utility bill or bank statement, and documentation confirming ownership of your registered payment method. KYC documents are processed securely and retained only for as long as legally required.

2.3 Financial Data

ax999 collects information related to your deposits and withdrawals, including transaction amounts, dates, payment method identifiers (such as your JazzCash mobile number or EasyPaisa account reference), and transaction history within the ax999 platform. Full card or bank account numbers are never stored by ax999 — payment processing is handled via our payment partners' secure infrastructure.

2.4 Usage and Technical Data

When you use the ax999 platform, we automatically collect technical data including your IP address, device type, operating system, browser type and version, session timestamps, pages visited, games played, bet history, and interaction logs. This data helps ax999 maintain platform security, detect fraud, and improve the user experience.

2.5 Communications Data

If you contact ax999 support via live chat or email, ax999 will retain a record of that communication, including your messages, the support agent's responses, and any attachments you submit. These records are retained for quality assurance, dispute resolution, and compliance purposes.

2.6 Data You Provide Voluntarily

ax999 may from time to time offer optional features such as player surveys, promotional preference settings, or responsible gaming self-assessments. Any data you provide through these optional features is collected only with your voluntary participation and is used solely for the purpose for which it was collected.

03 How ax999 Uses Your Data

ax999 uses the personal data it collects for the following purposes. Each purpose is supported by a corresponding legal basis, which is outlined in Section 4 below.

ax999 does not use your personal data for automated decision-making that produces significant legal effects on you, except where required for fraud detection or age verification — in which case you have the right to request human review of any automated decision that adversely affects you.

04 Legal Basis for Processing

ax999 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and ax999 — for example, creating your account, processing your deposits, and paying out your winnings.
• Legal Obligation: Processing required to comply with applicable law — including KYC/AML obligations, age verification requirements, and data retention mandated by financial regulations.
• Legitimate Interests: Processing carried out in pursuit of ax999's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement.
• Consent: Where ax999 relies on your consent as the legal basis for a specific processing activity (for example, optional marketing communications), you may withdraw that consent at any time by contacting ax999 support. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

05 Data Sharing & Disclosure

ax999 does not sell your personal data. ax999 may share your personal data with third parties only in the following limited circumstances:

5.1 Payment Service Providers

ax999 shares the minimum necessary personal data with payment processors — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to process your PKR deposits and withdrawals. These providers act as data processors on ax999's behalf and are contractually required to process your data only for the purpose of completing your transaction.

5.2 Identity Verification Partners

ax999 may engage third-party KYC verification services to assist in verifying your identity and age. These partners process only the specific data required to complete the verification check and do not retain your data beyond the period required to complete that check.

5.3 Legal and Regulatory Disclosure

ax999 may be required to disclose your personal data to government authorities, regulatory bodies, law enforcement agencies, or courts where such disclosure is required by applicable law, a court order, or a legitimate regulatory request. ax999 will notify you of any such disclosure where it is legally permitted to do so.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of ax999's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. ax999 will notify affected players in advance of any such transfer and will ensure that the acquiring entity is bound by data protection obligations equivalent to those in this Policy.

06 Payment Data & Financial Privacy

Given that all ax999 transactions are conducted in PKR and processed through Pakistani payment infrastructure, ax999 takes particular care in handling financial data. The following practices apply to all payment-related data processed on the ax999 platform:

• Full bank account numbers, full card numbers, and full mobile wallet PINs are never stored by ax999
• Payment method identifiers (such as a JazzCash mobile number) are stored only in encrypted form
• Transaction records are retained for the period required under applicable financial record-keeping obligations
• Withdrawals are processed only to verified payment methods registered in your name, providing an additional layer of financial security
• All payment data transmissions between your device, ax999's servers, and payment partners are protected by industry-standard TLS encryption

ax999 monitors transaction patterns on an ongoing basis as part of its anti-money laundering obligations. Where a transaction triggers an automated alert, ax999's compliance team will review the transaction manually. In cases where ax999 is legally required to file a suspicious transaction report, it will do so without notifying the player, as required by applicable AML law.

07 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. ax999 uses cookies and similar technologies — including local storage and session identifiers — to maintain your login session, remember your platform preferences, and collect anonymised usage analytics that help us improve the ax999 platform.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the ax999 platform to function. These include session cookies that keep you logged in. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your platform preferences such as language settings, preferred game categories, and display options.
• Analytics Cookies: Used to collect anonymised data about how players use the ax999 platform — such as which pages are visited most frequently and where players encounter issues. This data is aggregated and not linked to individual identities.

7.3 No Third-Party Advertising Cookies

ax999 does not use third-party advertising cookies or tracking pixels from external advertising networks. No external party places tracking cookies on the ax999 platform for the purpose of building advertising profiles on ax999 players.

7.4 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use the ax999 platform. Full instructions for managing cookies in major browsers are available in each browser's help documentation.

08 Data Retention

ax999 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual. Where ax999 is required by law to retain data beyond the standard period, it will do so and will update this Policy accordingly.

09 Data Security

ax999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data transmitted between your device and ax999 servers
• Encryption at rest for all sensitive personal data stored in ax999 databases
• Role-based access controls ensuring only authorised ax999 staff can access personal data
• Regular security assessments and penetration testing of the ax999 platform
• Intrusion detection systems monitoring for unauthorised access attempts
• Strict data handling policies and confidentiality obligations for all ax999 staff
• Incident response procedures for detecting, reporting, and managing data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ax999 will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the steps ax999 is taking to address it. ax999 will also notify the relevant regulatory authority where required by applicable law.

10 Your Data Rights

As an ax999 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact ax999 support via live chat or email. ax999 will respond to all valid requests within a reasonable timeframe.

• Right of Access: You may request a copy of the personal data ax999 holds about you, along with information about how that data is used.
• Right to Rectification: If any personal data ax999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances — for example, where ax999 no longer needs your data for the purpose for which it was collected — you may request deletion of your personal data. Note that ax999 may be required to retain certain data for legal or regulatory compliance purposes even following such a request.
• Right to Restrict Processing: You may request that ax999 restrict the processing of your personal data in certain circumstances, for example while a dispute over accuracy is being resolved.
• Right to Data Portability: You may request a copy of the personal data you provided to ax999 in a structured, commonly used, machine-readable format.
• Right to Object: Where ax999 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. ax999 will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where ax999 relies on your consent as the legal basis for any processing activity, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

11 Protection of Minors

ax999 strictly prohibits the use of its platform by individuals under the age of 21. ax999 does not knowingly collect personal data from anyone under the age of 21. Age verification checks are applied at registration and may be applied at any point during a player's account lifecycle.

If ax999 discovers or has reasonable grounds to believe that it has collected personal data from a player who is under the age of 21, ax999 will immediately close the relevant account, delete all associated personal data to the extent permitted by law, and will not process any withdrawals in respect of that account.

If you are a parent or guardian and believe that your child has registered an ax999 account, please contact ax999 support immediately via live chat. ax999 will investigate and act on the report as a matter of priority.

12 Third-Party Links

The ax999 platform may from time to time contain links to third-party resources — for example, links to responsible gaming support organisations. ax999 has no control over the privacy practices of any third-party website and is not responsible for the content or privacy policies of any external site. This Privacy Policy applies only to the ax999 platform at ax999.ws and does not extend to any third-party websites you may access via links on the ax999 platform.

ax999 recommends that you review the privacy policy of any third-party website you visit before providing any personal data to that site.

13 Changes to This Privacy Policy

ax999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where ax999 intends to process your personal data for a new purpose — ax999 will provide advance notice to registered players via the email address associated with their account or via a prominent notice on the ax999 platform, prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the ax999 platform after the updated Policy takes effect constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must cease using the ax999 platform and may request account closure in accordance with the ax999 Terms & Conditions.

ax999 recommends that registered players review this Privacy Policy periodically to stay informed about how their personal data is being handled. Historical versions of this Policy are available on request from ax999 support.

14 Contact & Data Protection Enquiries

If you have any questions, concerns, or complaints about this Privacy Policy or the way ax999 handles your personal data, please contact the ax999 support team. ax999 is committed to resolving all privacy-related enquiries promptly and fairly.

You may contact ax999 via:

• Live Chat: Available 24/7 via the ax999 platform — the fastest way to reach the support team for urgent matters
• Email: [email protected] — please note this address is displayed as plain text and is not a clickable link

When submitting a privacy enquiry, please include your full name, your registered ax999 email address, and a clear description of your query or concern. ax999 aims to respond to all formal privacy enquiries within 5 business days.