aj999 Casino takes the privacy of Pakistani players seriously. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you hold over your own information. We have written this document in plain, readable English — not legal obfuscation.
This Privacy Policy ("Policy") sets out the data protection practices of aj999 Casino ("aj999," "we," "us," "our") in relation to the personal information of registered players and website visitors ("you," "your," "the Player," "the User"). It applies to all personal data collected through the aj999 website at aj999.asia, all associated subdomains, and any mobile-optimised interfaces or applications used to access aj999 services.
aj999 is committed to processing personal data responsibly, lawfully, and transparently, in accordance with the data protection obligations attached to its international gaming license and in a manner consistent with the spirit of internationally recognised data protection frameworks. We recognise that Pakistani players place significant trust in us when they create an account and share their personal information, and we treat that trust as a fundamental obligation — not a regulatory checkbox.
This Policy uses plain English throughout. Where legal terms are unavoidable, we have explained them in ordinary language. If you have any questions about how aj999 handles your data that are not answered in this document, please contact our Data Protection team using the contact details in Section 17.
For the purposes of this Privacy Policy, aj999 Casino acts as the data controller in respect of personal data collected from players and website visitors. As data controller, aj999 determines the purposes for which personal data is processed and the manner in which it is processed. All data protection queries, access requests, and complaints should be directed to aj999 using the contact details provided in Section 17 of this Policy.
Where aj999 engages third-party service providers to process personal data on its behalf — such as payment processors, game software providers, or identity verification services — those third parties act as data processors under written agreements that restrict their use of your data to the specific purposes for which it was shared. aj999 remains responsible for ensuring that all data processors handle your information in accordance with this Policy and applicable data protection law.
aj999 collects personal data that is necessary for the provision of online casino and sports betting services, the fulfilment of regulatory obligations, and the improvement of the player experience. We do not collect data beyond what is required for these purposes. The categories of personal data we collect include:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC/passport number, photograph (from KYC documents) | Account registration, age verification, KYC compliance, AML checks |
| Contact Data | Email address, Pakistani mobile number, residential address | Account communications, support, responsible gaming alerts, promotional opt-ins |
| Financial Data | Payment method type and last 4 digits, JazzCash/EasyPaisa account reference, transaction history, deposit and withdrawal amounts in PKR | Payment processing, withdrawal verification, AML compliance, fraud prevention |
| Technical Data | IP address, device type and identifier, browser type and version, operating system, session timestamps, login history | Platform security, fraud detection, responsible gaming monitoring, service optimisation |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions | Responsible gaming monitoring, product improvement, personalisation, bonus eligibility |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support, dispute resolution, quality assurance, legal defence |
| Responsible Gaming Data | Deposit limits set, self-exclusion status, cool-off period history, session time alert settings | Regulatory compliance, player protection, enforcement of self-exclusion |
aj999 does not collect or process special category data (as defined under international data protection frameworks) unless specifically required for identity verification purposes, in which case such data is handled with enhanced security measures and processed strictly for the stated verification purpose only.
aj999 collects personal data through the following channels:
aj999 processes personal data only where a valid legal basis exists for doing so. The applicable legal bases under which aj999 processes player data are:
The personal data collected by aj999 is used for the following purposes:
aj999 uses cookies and similar tracking technologies on its platform to ensure functionality, improve security, and understand how players interact with the site. A cookie is a small text file placed on your device by the aj999 web server when you visit the platform. Cookies do not contain executable code and cannot carry viruses.
The types of cookies used by aj999 include:
aj999 does not use third-party advertising cookies or retargeting pixels from external advertising networks on its platform. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in and using the aj999 platform.
aj999 does not share personal data with third parties except in the specific, limited circumstances described in this section. All third parties who receive personal data from aj999 do so under contractual obligations that restrict their use of that data to the stated purpose only.
The third parties with whom aj999 may share personal data are:
In the event that aj999 undergoes a corporate transaction — including a merger, acquisition, or sale of assets — player data may be transferred to the acquiring entity subject to equivalent data protection obligations. Players will be notified of any such transfer that materially affects the processing of their personal data.
As an internationally licensed online casino, aj999 operates infrastructure and engages service providers across multiple jurisdictions. As a result, personal data relating to Pakistani players may be transferred to, stored in, or processed in countries outside Pakistan. These countries may have data protection laws that differ from those applicable in Pakistan.
Where personal data is transferred internationally, aj999 ensures that appropriate safeguards are in place to protect that data. These safeguards may include:
Players who wish to obtain information about the specific safeguards applied to international transfers of their personal data may contact aj999 using the details in Section 17.
aj999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our gaming license regulatory obligations — whichever is the longer period.
| Data Category | Standard Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Regulatory obligation, legal defence |
| KYC / identity documents | Duration of account + 5 years post-closure | AML regulatory requirement |
| Transaction / financial records | Duration of account + 7 years post-closure | Financial records obligation, AML |
| Responsible gaming records | Duration of account + 5 years post-closure | Regulatory compliance, self-exclusion enforcement |
| Support communications | 3 years from last interaction | Dispute resolution, legal defence |
| Technical / session logs | 13 months from collection | Security, fraud detection, analytics |
| Marketing preferences | Until opt-out + 1 year | Consent compliance, suppression list |
Where personal data is no longer required for any lawful purpose, it is securely deleted or anonymised so that it can no longer be attributed to an individual. Anonymised aggregated data — from which no individual can be identified — may be retained indefinitely for statistical and product improvement purposes.
aj999 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:
While aj999 takes all reasonable and practicable steps to secure your personal data, no online system is completely immune from security risks. Players can help protect their own accounts by choosing a strong, unique password for aj999, never sharing their credentials with anyone, and enabling any two-factor authentication options available on their account. If you suspect unauthorised access to your aj999 account, please contact support immediately.
As a Player whose personal data is processed by aj999, you hold the following rights in relation to your personal information. These rights can be exercised by contacting aj999 using the details provided in Section 17. aj999 will respond to all valid rights requests within 30 days.
You have the right to request a copy of all personal data aj999 holds about you. This is sometimes called a "Subject Access Request" or SAR. aj999 will provide this information free of charge within 30 days.
If any personal data aj999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For name or date of birth changes, identity document verification may be required.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to regulatory retention obligations — aj999 cannot delete transaction or KYC data before its mandatory retention period expires.
You may request that aj999 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being evaluated.
Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request its transfer to another data controller.
You may object at any time to the processing of your personal data where that processing is based on legitimate interests — including for direct marketing purposes. Objections to marketing processing will be actioned immediately upon receipt.
If you believe aj999 has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. You may also contact aj999's Data Protection team directly in the first instance — we will always endeavour to resolve data protection concerns through direct dialogue before any formal escalation becomes necessary.
aj999 Casino is strictly restricted to individuals who are 21 years of age or older. The platform does not knowingly collect personal data from individuals under the age of 21, and the registration system includes age verification steps specifically designed to prevent underage registration.
Where aj999 becomes aware, through any means, that personal data has been collected from an individual under the age of 21, that data will be deleted without delay, the associated account will be permanently closed, and any deposited funds will be returned via the original payment method where permitted by applicable anti-money laundering regulations.
Parents or guardians who believe their child may have created an account on aj999 without authorisation should contact our support team immediately using the details in Section 17. We will investigate and close the account promptly upon confirmation.
aj999 may send marketing communications — including emails, SMS messages, and in-platform notifications — about bonuses, promotions, new game releases, PSL cricket betting offers, and other services that may be of interest to Pakistani players. Marketing communications are sent only where:
You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, adjusting your notification preferences in your aj999 account settings, or contacting customer support. Opt-out requests are processed within 10 business days. Opting out of marketing communications does not affect aj999's ability to send you service-related communications (such as withdrawal confirmations, account security alerts, or responsible gaming notifications) which are required for the provision of the service.
aj999 does not engage in cold marketing — we do not purchase third-party marketing lists or send unsolicited communications to individuals who have not interacted with the aj999 platform. If you receive a communication purporting to be from aj999 that you did not expect, please contact our support team to report it, as it may indicate a phishing attempt.
The aj999 platform may contain links to third-party websites or services — for example, links to game providers' information pages or payment method support resources. This Privacy Policy applies only to data processed by aj999 and does not cover the data practices of any third-party websites to which links may be provided.
aj999 does not control the content or data handling practices of third-party websites and accepts no responsibility for their privacy policies or procedures. Players who follow links to third-party sites from the aj999 platform should review the relevant third-party privacy policy before submitting any personal information to that site.
aj999 reserves the right to amend this Privacy Policy at any time to reflect changes in data protection law, regulatory requirements, or our data processing practices. Where a material amendment is made — one that significantly affects how we collect, use, or share your personal data — we will notify registered Players by email to their registered address and/or by displaying a prominent notification on the aj999 platform, providing a minimum of 14 days' notice before the amended Policy takes effect.
Minor amendments — such as clarifications to existing provisions, formatting corrections, or updates to contact details — may be made without prior notification. The "Last Updated" date at the top of this Policy will always reflect the most recent revision date.
Continued use of the aj999 platform after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and contact support to arrange account closure. The most current version of this Policy is always available at aj999.asia/privacy-policy.
For any questions, concerns, subject access requests, or formal data protection complaints relating to this Privacy Policy or aj999's handling of your personal data, please contact us through the following channels:
If your data protection concern is not resolved to your satisfaction through direct contact with aj999, you have the right to escalate your complaint to the data protection supervisory authority or the dispute resolution body specified under aj999's gaming license. Contact details for the applicable adjudicator are available from our support team upon request.
Six core data protection principles that define how aj999 handles your personal information every single day
aj999 does not sell, rent, or trade personal data to third-party marketers, data brokers, or advertising networks — full stop. Your information is used exclusively to provide you with the aj999 Casino experience and to meet our regulatory obligations. This commitment has no asterisks or exceptions.
All data transmitted between your device and aj999's servers is protected by 256-bit SSL/TLS encryption — the same standard used by international banks. Data stored in aj999's databases is encrypted at rest. Your personal and financial information is never transmitted in plain text under any circumstances.
aj999 gives you full rights over your personal information — access, correction, deletion, portability, and objection. Submit a Subject Access Request and receive a complete copy of your data within 30 days. Opt out of marketing communications instantly from your account settings at any time.
aj999 collects only the personal data that is genuinely necessary to provide our services, meet regulatory KYC and AML requirements, and protect the security of our platform. We do not collect data speculatively or for purposes beyond those stated in this Privacy Policy — a principle known as data minimisation.
In the unlikely event of a data security incident affecting your personal information, aj999 will notify you promptly — without undue delay — and will take immediate containment action. We will also report the incident to the relevant regulatory authority as required by our gaming license obligations.
aj999's responsible gaming tools — deposit limits, loss limits, cool-off periods, and self-exclusion — depend on accurate, private data handling. Your responsible gaming preferences and self-exclusion status are treated with the highest level of confidentiality and are never shared with third parties beyond what is required by regulatory obligations.
We built aj999's privacy framework around one principle: Pakistani players deserve to know exactly how their data is used and to feel completely confident that their personal information is protected. Explore the full aj999 experience — or read our Terms & Conditions and Responsible Gaming pages for a complete picture of how we operate.
21+ only · Internationally licensed · Gambling involves risk — please play responsibly