air999 Privacy Policy
How We Collect, Use, and Protect Your Personal Data

1Introduction

Air999 ("air999", "we", "us", "our") operates an online casino and sports betting platform accessible at air999.vip, serving players across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and beyond. Air999 is committed to protecting the privacy and personal data of all registered players and visitors to the platform.

This Privacy Policy ("Policy") describes how air999 collects, uses, stores, shares, and protects personal information in connection with your use of the air999 website, mobile platform, and all related services. This Policy applies to all users of the air999 platform, including registered players, prospective players who browse the site without registering, and any individual who contacts air999 support.

By registering an account on air999, depositing PKR funds, or otherwise using the air999 platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this Policy, you must not use the air999 platform.

This Policy should be read alongside the air999 Terms & Conditions, which govern the overall relationship between air999 and its players, and the air999 Responsible Gaming policy.

2Data Controller

Air999 is the data controller responsible for personal data collected through the air999 platform. As data controller, air999 determines the purposes and means by which your personal data is processed. Air999 operates under an international gaming licence, and its data processing obligations are governed by the applicable data protection requirements of the licensing jurisdiction as well as the privacy expectations owed to Pakistani players.

For all privacy-related queries, data subject access requests, or complaints relating to the handling of your personal data, you may contact the air999 Data Protection team directly at [email protected] with the subject line "DATA PRIVACY REQUEST".

3Personal Data We Collect

Air999 collects the following categories of personal data from players on the platform. The specific data collected depends on how you interact with air999 — a visitor who simply browses the site without registering will have far less data collected than a fully verified, active depositing player.

3.1 Identity and Registration Data

• Full legal name as it appears on your Pakistani CNIC
• Pakistani CNIC number and CNIC document images (front and back) where KYC is required
• Date of birth (used to verify 21+ age eligibility)
• Residential address in Pakistan
• Gender
• Username and encrypted password

3.2 Contact Data

• Pakistani mobile number (Jazz, Telenor, Zong, Ufone, or Warid) — required for OTP-based two-factor authentication
• Email address
• City and province of residence in Pakistan

3.3 Financial and Payment Data

• JazzCash account number or mobile number
• EasyPaisa account number or mobile number
• Bank account details (HBL, UBL, Meezan Bank, or other Pakistani bank) where bank transfers are used
• Raast or 1LINK account identifiers where applicable
• PKR deposit amounts, withdrawal amounts, and transaction history
• Source of funds documentation where required for enhanced due diligence

3.4 Gaming Activity Data

• Game history, bet history, and session records
• Bonus and promotion activity records
• Responsible gaming settings including deposit limits, session timers, and self-exclusion records
• PSL and cricket betting activity and wager data
• Live casino and slot game session logs

3.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Device fingerprint identifiers used for fraud and duplicate account detection
• Login timestamps and session duration data
• Cookies and similar tracking technology data (see Section 9)

3.6 Communications Data

• Live chat transcripts with air999 support agents
• Email correspondence with air999 support and compliance teams
• Records of promotional communications sent to you and your opt-in/opt-out preferences
• Complaint and dispute records

4How We Collect Your Data

Air999 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a PKR deposit or withdrawal, contact support, or update your account profile.
• Automatically: When you browse or use the air999 platform, we automatically collect device, technical, and session data through cookies and server logs.
• From payment providers: When you make a JazzCash or EasyPaisa transaction, air999 receives confirmation data from those payment processors including transaction references and account identifiers.
• From KYC verification partners: Where air999 uses third-party identity verification services to validate your CNIC or other identity documents, those services may return verification results and data flags to air999.
• From fraud detection services: Air999 uses third-party fraud detection and risk management tools that may cross-reference your data against industry-shared fraud databases.

5Legal Basis for Processing

Air999 processes your personal data under one or more of the following legal bases depending on the specific processing activity:

6How We Use Your Personal Data

Air999 uses the personal data we collect for the following purposes:

6.1 Account Management and Verification

Your identity data, contact data, and CNIC information are used to create and maintain your air999 account, verify your identity in accordance with our KYC obligations, enforce the 21+ age restriction, and prevent the creation of duplicate accounts. Air999 employs automated duplicate-account detection systems that cross-reference device fingerprints, IP addresses, and payment method identifiers against all existing registered accounts.

6.2 Processing Transactions

Your payment data is used exclusively to process your PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK. Air999 does not store your full JazzCash or EasyPaisa credentials on its own servers — payment processing is handled by certified payment gateway partners who maintain their own PCI-compliant security environments.

6.3 Gaming and Platform Delivery

Your gaming activity data is used to deliver the air999 platform to you, calculate bet outcomes, manage bonuses and promotions, and provide personalised game recommendations. This data is also used to identify and investigate unusual betting patterns that may indicate terms violations, bonus abuse, or match-fixing activity.

6.4 Anti-Money Laundering and Regulatory Compliance

As an operator under an international gaming licence, air999 is obligated to maintain transaction monitoring, conduct source-of-funds investigations where triggered, file suspicious activity reports where required by law, and retain complete player records for the periods required by the applicable regulatory framework. Your financial and identity data is central to these legal obligations.

6.5 Responsible Gaming

Air999 uses gaming activity data and account behaviour patterns to identify players who may be exhibiting signs of problem gambling. This may result in proactive outreach from air999's responsible gaming team, automatic application of protective limits, or in extreme cases, mandatory self-exclusion to protect the player's welfare. All responsible gaming interventions are conducted in accordance with air999's gaming licence conditions.

6.6 Marketing and Promotions

With your consent, air999 may use your contact data to send you promotional offers, bonus notifications, PSL betting tips, and platform updates via email or SMS to your registered Pakistani mobile number. You can withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

6.7 Customer Support

Communications data including live chat transcripts and email correspondence is used to resolve your support queries, investigate complaints, and improve the quality of air999's customer support service.

7Sharing Your Personal Data

Air999 does not sell your personal data to any third party for commercial marketing purposes. Air999 may share your personal data with third parties only in the following circumstances:

7.1 Service Providers

Air999 engages third-party service providers to support the operation of the platform, including KYC identity verification partners, payment gateway operators (JazzCash, EasyPaisa, and banking partners), fraud detection and risk management services, cloud hosting and data storage providers, and customer support platform operators. All such service providers are contractually bound to process your personal data only as instructed by air999 and in accordance with applicable data protection standards.

7.2 Regulatory and Law Enforcement Authorities

Air999 may disclose your personal data to its gaming licence regulator, anti-money laundering authorities, tax authorities, or law enforcement agencies where required to do so by law, court order, or regulatory direction. Air999 will not notify you of such disclosures where doing so would compromise an active investigation or would be prohibited by the applicable legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of air999's assets, your personal data may be transferred to the acquiring entity as part of that transaction. Air999 will provide reasonable prior notice of any such transfer and the new entity will be required to honour the terms of this Privacy Policy with respect to your personal data.

8Payment Data & PKR Transactions

Given that air999 operates a PKR-native cashier serving Pakistani players primarily through JazzCash and EasyPaisa, the handling of payment data deserves specific attention in this Policy.

8.1 JazzCash and EasyPaisa Data

When you initiate a JazzCash or EasyPaisa transaction on air999, you are redirected to or interact with the respective mobile wallet provider's secure payment interface. Air999 receives a transaction reference, confirmation status, and the mobile number associated with the transaction from the wallet provider. Air999 does not receive or store your JazzCash or EasyPaisa PIN or full wallet credentials.

8.2 Bank Transfer Data

For HBL, UBL, and Meezan Bank transfers, air999 collects and stores your bank account number, account title, and transaction reference numbers sufficient to process deposits and withdrawals and to maintain the transaction records required by its AML compliance obligations.

8.3 Transaction Records

All PKR transaction records — including deposit timestamps, amounts, payment methods, and withdrawal records — are retained for a minimum of five years from the date of the transaction in accordance with air999's international gaming licence AML requirements. These records cannot be deleted upon player account closure request where they are required for ongoing regulatory compliance.

9Cookies & Tracking Technologies

Air999 uses cookies and similar tracking technologies on the air999 platform to support essential site functionality, analyse platform usage, and deliver a personalised gaming experience. By using the air999 platform, you consent to the use of cookies in accordance with this section.

9.1 Types of Cookies Used

9.2 Managing Cookies

You can manage non-essential cookie preferences through the air999 cookie preference centre accessible from the site footer. You may also configure your browser to block or delete cookies; however, disabling essential cookies will prevent you from logging in or using core platform features. Note that disabling fraud-detection cookies is not permitted as these are required to fulfil air999's security and compliance obligations under its gaming licence.

10Data Retention

Air999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following retention periods apply:

Please note that self-exclusion records are retained permanently. This is a condition of air999's gaming licence and is specifically required to prevent a self-excluded player from re-registering on the platform in the future — a critical player protection measure that air999 takes very seriously.

11Data Security

Air999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS 1.2+) encryption for all data transmitted between your device and the air999 platform
• Encryption of sensitive data fields at rest in air999's database infrastructure
• Bcrypt hashing for all player passwords — air999 staff cannot view your password in plain text
• OTP-based two-factor authentication (2FA) via your registered Pakistani mobile number
• Role-based access controls limiting air999 staff access to player data on a strict need-to-know basis
• Regular penetration testing and security audits of the air999 platform infrastructure
• Fraud detection and anomaly-monitoring systems operating 24/7

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, air999 will notify affected players and the applicable regulatory authority in accordance with its legal obligations.

12Your Privacy Rights

As a player on the air999 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact air999 at [email protected] with the subject line "DATA PRIVACY REQUEST" and specify which right you wish to exercise along with sufficient information to verify your identity.

12.1 Right of Access

You have the right to request a copy of the personal data air999 holds about you, information about how it is being processed, and the categories of third parties with whom it has been shared. Air999 will provide this information within 30 calendar days of a verified request.

12.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data air999 holds about you. Please note that certain identity data (such as your CNIC name and number) can only be corrected upon provision of supporting documentation demonstrating the correct information.

12.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires its retention. Please note that air999's AML, KYC, and gaming licence obligations require the retention of certain categories of data (particularly transaction records and KYC documents) for the mandatory periods set out in Section 10, regardless of an erasure request.

12.4 Right to Restrict Processing

You have the right to request that air999 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending.

12.5 Right to Data Portability

Where air999 processes your personal data on the basis of your consent or for the performance of your account contract, and that processing is carried out by automated means, you have the right to receive the relevant data in a structured, commonly used, machine-readable format.

12.6 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. You can exercise this right by updating your communication preferences in your air999 account settings, or by contacting [email protected]. Marketing communications will cease within 48 hours of a verified opt-out request.

13Protection of Minors

The air999 platform is strictly intended for players aged 21 and above. Air999 does not knowingly collect personal data from individuals under the age of 21, and the collection of such data is entirely contrary to air999's licensing conditions and responsible gaming obligations.

Air999 employs mandatory age verification at the registration stage and reserves the right to conduct additional age verification checks at any time, including before processing a player's first withdrawal. Any account found to belong to a player under 21 will be immediately and permanently closed, and all account data will be handled in accordance with the applicable data protection requirements for data collected from minors.

If you are a parent or guardian and believe that a minor in your care has registered on the air999 platform or that their personal data has been collected without appropriate consent, please contact air999 immediately at [email protected]. Air999 will investigate the matter promptly and delete any data confirmed to belong to a minor, subject to any overriding legal obligation to retain specific records.

14International Data Transfers

Air999 operates under an international gaming licence and may use service providers and infrastructure located outside Pakistan. As a result, your personal data may be transferred to, stored in, or processed in countries other than Pakistan. Where such international transfers occur, air999 takes appropriate steps to ensure that your personal data receives an adequate level of protection consistent with the principles of this Privacy Policy.

These steps may include: entering into standard contractual data protection clauses with recipient service providers; ensuring that recipient countries or organisations maintain an adequate level of data protection as assessed by the applicable regulatory framework; and conducting transfer impact assessments where required.

By using the air999 platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions for the purposes described in this Privacy Policy, subject to the protective measures described above.

15Changes to This Privacy Policy

Air999 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, data processing practices, or the features offered on the air999 platform. The "Last Updated" date at the top of this page will reflect the most recent revision.

Where a material change is made to this Policy that significantly affects how your personal data is processed, air999 will provide reasonable prior notice to registered players via email to the address associated with their account or through a prominent notification on the platform. For non-material updates (such as clarifications of existing practices or corrections of typographical errors), the revised Policy will be published without advance notice.

Your continued use of the air999 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised practices described therein. If you do not accept any revision to this Policy, you must cease using the platform and may request voluntary account closure in accordance with the air999 Terms & Conditions.

16Contact Us

For all privacy-related matters, data subject rights requests, or questions about how air999 handles your personal data, please contact us using the details below. Do not share sensitive personal data such as your CNIC number or payment credentials in your initial message — air999 will guide you through a secure verification process.