Introduction
This Privacy Policy ("Policy") is published by air999 ("the Platform", "we", "us", "our") and applies to all personal data collected, processed and stored in connection with the air999 website at https://air999.cam and all related services, features and functionality provided through it.
air999 is an English-language online gaming information platform serving Pakistani users with educational content, guides and platform information covering sports betting, live casino and responsible gambling. We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles.
This Policy describes the types of personal data we collect, the purposes for which we process it, the legal bases for that processing, how long we retain it, who we share it with, and the rights you hold as a data subject. It applies to all users of the platform, regardless of their location, including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.
By using the air999 platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue your use of the platform immediately.
Definitions
The following definitions apply throughout this Privacy Policy:
Any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifier or factors specific to the physical, economic or social identity of that person.
Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure or destruction.
The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, air999 acts as the Data Controller in respect of personal data collected through the platform.
A natural or legal person that processes personal data on behalf of and under the instruction of the Data Controller. Third-party service providers engaged by air999 act as Data Processors where applicable.
The identified or identifiable natural person to whom the personal data relates — in the context of this Policy, this is you, the platform User.
Small text files placed on your device by the platform when you visit, used to store preferences, session information and analytics data to improve the platform experience.
The identity and age verification process under which air999 may require Users to provide documentation such as CNIC, proof of address and payment method verification to comply with anti-fraud, anti-money-laundering and responsible gambling obligations.
Personal Data We Collect
air999 collects the following categories of personal data, depending on your level of interaction with the platform:
| Category | Types of Data | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, CNIC number, username | Registration & KYC verification |
| Contact Data | Email address, phone number, city of residence | Registration & account updates |
| Financial Data | Payment method details (masked), transaction history, deposit and withdrawal records in PKR | Deposits, withdrawals & KYC |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, time zone | Automatic collection on site visit |
| Usage Data | Pages visited, session duration, bet history, game activity, clicks and navigation patterns | During platform use |
| Communication Data | Support chat transcripts, email correspondence, feedback submissions | When contacting support |
| Verification Documents | Copies of CNIC, proof of address, payment method evidence | KYC verification process |
| Responsible Gambling Data | Self-exclusion requests, deposit limits set, cooling-off periods, session limit preferences | When tools are activated |
We do not collect or process special category personal data (such as health data, biometric data, racial or ethnic origin, religious beliefs or political opinions) except where strictly required by applicable law or responsible gambling obligations and only with your explicit consent.
How We Collect Your Data
air999 collects personal data through the following means:
- Direct Interaction: Data you provide when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team or update your account preferences;
- Automated Technologies: Technical and usage data collected automatically as you interact with the platform, including via cookies, web beacons, pixel tags and server log files;
- Third-Party Sources: Identity verification data obtained from third-party KYC service providers; fraud-prevention data from anti-fraud agencies; technical data from analytics providers operating on our behalf;
- Payment Processors: Transaction confirmation data received from payment processors when you deposit or withdraw funds using supported payment methods. Payment provider names referenced on air999 — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as familiar context for Pakistani users; they do not endorse or support gambling services;
- Marketing Channels: If you engage with air999 through promotional campaigns or affiliate referral programmes, basic engagement data (such as the referral source) may be recorded.
Data Processing Purposes
air999 processes your personal data only for the following specified, explicit and legitimate purposes:
- Account Management: To create, maintain and administer your registered user account, including processing login, session management and account security;
- KYC & Age Verification: To verify your identity, age and eligibility to use the platform in compliance with our responsible gambling obligations and applicable regulatory requirements;
- Transaction Processing: To process PKR deposits, withdrawals and related financial transactions accurately and securely;
- Responsible Gambling Compliance: To monitor your gambling activity, apply self-imposed limits and exclusions, identify potential problem gambling indicators, and fulfil our duty of care obligations;
- Customer Support: To respond to enquiries, resolve disputes, handle complaints and provide technical assistance through our live chat and email support channels;
- Platform Improvement: To analyse usage patterns, test new features, monitor platform performance and improve the overall user experience;
- Security & Fraud Prevention: To detect, investigate and prevent fraudulent activity, money laundering, multi-accounting and other prohibited conduct;
- Legal & Regulatory Compliance: To comply with applicable legal obligations, respond to regulatory enquiries, and maintain records as required by our operating licence;
- Marketing Communications: To send you promotional offers, platform updates and relevant content — subject to your marketing consent preferences, which you may update at any time.
Legal Basis for Processing
air999 processes your personal data under the following legal bases, as applicable:
- Performance of a Contract: Processing that is necessary to provide the platform services you have registered for, including account management, transaction processing and support;
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, anti-money-laundering requirements and responsible gambling obligations imposed by the platform's operating licence;
- Legitimate Interests: Processing carried out in pursuit of air999's legitimate business interests — including fraud prevention, security monitoring and platform analytics — where those interests are not overridden by your fundamental rights;
- Consent: Processing that relies on your freely given, specific and informed consent — principally in respect of marketing communications. You have the right to withdraw this consent at any time without affecting the lawfulness of prior processing.
Data Sharing & Third Parties
air999 does not sell, rent or trade your personal data to third parties for their own commercial or marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection agreements:
- KYC & Identity Verification Providers: Third-party services used to verify your identity and age as part of our registration and ongoing compliance processes;
- Payment Processors: To facilitate deposits and withdrawals using your chosen payment method. Data shared is limited to what is necessary to complete the transaction;
- Fraud Prevention & Security Services: Agencies and tools used to detect and prevent fraudulent activity, money laundering and account misuse;
- Platform Analytics Providers: Services that help us understand how the platform is used so we can improve performance and user experience. These providers process data on our behalf and under our instructions only;
- Responsible Gambling Services: Where required by our licence obligations, data may be shared with responsible gambling registers or exclusion schemes to enforce self-exclusion requests across participating operators;
- Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies or courts where required by law or valid legal process;
- Corporate Transactions: In the event of a merger, acquisition or sale of assets, your personal data may be transferred to a successor entity as part of the business transfer, subject to equivalent privacy protections.
All third-party data processors engaged by air999 are contractually required to implement appropriate technical and organisational security measures, to process personal data solely in accordance with our documented instructions, and to assist us in fulfilling your data subject rights.
International Data Transfers
air999 may transfer your personal data to countries outside of Pakistan and, where applicable, outside of the European Economic Area. Such transfers may occur in connection with the use of cloud-based hosting services, payment processors or KYC providers whose infrastructure is located in multiple jurisdictions.
Where personal data is transferred internationally, air999 ensures that appropriate safeguards are in place, which may include:
- Standard contractual clauses approved by a relevant supervisory authority;
- Binding corporate rules where the recipient is part of the same corporate group;
- Transfers to countries that have been determined by a relevant authority to provide an adequate level of data protection;
- Your explicit consent to the transfer where no other safeguard is available and the transfer is necessary to perform our contract with you.
You may request details of the specific safeguards applied to international transfers of your personal data by contacting our support team using the contact details provided in Section 16.
Data Retention
air999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or licence obligations. The following general retention principles apply:
- Active Account Data: Retained throughout the period your account is active and for a minimum of 5 years following account closure, in accordance with standard anti-money-laundering record-keeping requirements;
- Transaction Records: Financial transaction records are retained for a minimum of 5 years from the date of the transaction, in line with standard regulatory expectations;
- KYC Documentation: Identity verification documents are retained for a minimum of 5 years from the date of verification or account closure, whichever is later;
- Support Communications: Customer service records are retained for a minimum of 2 years following the resolution of the relevant matter;
- Marketing Data: Data held solely for marketing purposes is deleted or anonymised upon withdrawal of your consent or within a reasonable period of inactivity;
- Technical & Usage Data: Aggregated and anonymised analytics data may be retained indefinitely for platform improvement purposes once it can no longer be attributed to you personally.
When personal data is no longer required, it is securely deleted or anonymised in accordance with our data destruction policy.
Cookies & Tracking Technologies
air999 uses cookies and similar technologies (including web beacons, pixel tags and local storage) to operate the platform effectively and improve your experience. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the operation of the platform. These cookies enable you to log in, navigate between pages and use core features. They cannot be disabled without affecting platform functionality;
- Performance & Analytics Cookies: Used to collect information about how visitors use the platform — such as which pages are visited most frequently and how users navigate the site. This data is used in aggregate to improve platform performance;
- Functional Cookies: Allow the platform to remember your preferences and settings (such as language, display preferences and session state) to provide a more personalised experience;
- Marketing & Targeting Cookies: Used to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These cookies are only activated with your consent.
You may manage or disable non-essential cookies at any time through your browser settings or, where available, through the platform's cookie preference centre. Please note that disabling cookies may affect the functionality and performance of the platform. For more information on how to manage cookies, refer to your browser's help documentation.
User Rights & Data Subject Requests
Subject to applicable law and the legal basis for processing, you have the following rights in relation to your personal data held by air999:
You may request a copy of all personal data we hold about you, together with information about how and why it is processed.
You may request correction of any inaccurate or incomplete personal data held about you, including updating your contact details or account information.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding retention obligations.
You may request that processing of your data be restricted in certain circumstances — for example, while the accuracy of your data is being verified.
Where processing is based on consent or contract, you may request a structured, machine-readable copy of your personal data for transfer to another service provider.
You may object to processing based on legitimate interests, including profiling for direct marketing purposes. We will cease that processing unless we can demonstrate compelling grounds.
To exercise any of these rights, please contact our support team at [email protected] or via live chat, quoting your registered username or email address and the specific right you wish to exercise. We will respond to verified requests within 30 calendar days. We may need to verify your identity before processing your request.
Note for Pakistani Users: Pakistan does not currently have a comprehensive data protection law equivalent to the GDPR. air999 nevertheless applies data protection principles consistent with international best practice to all users, regardless of jurisdiction. This Policy does not constitute legal advice, and you are encouraged to seek independent guidance if you have concerns about your data rights under applicable Pakistani law.
Children's Privacy & Age Restrictions
The air999 platform is strictly for adults. We do not knowingly collect, process or retain personal data from persons under the age of 18 — or the higher minimum age required by the operator or applicable licence jurisdiction.
As part of our registration process, all users are required to confirm that they meet the minimum age requirement. KYC verification, including CNIC submission, is required to confirm eligibility before accessing gambling features. If we become aware or have reason to suspect that a user is under the required minimum age, we will:
- Immediately suspend the account pending full age verification;
- Freeze any funds held in the account pending investigation;
- Delete all personal data relating to the under-age user upon confirmation of age ineligibility, subject to any data retention obligations arising from the investigation;
- Where appropriate, report the matter to relevant regulatory authorities.
If you are a parent or guardian and believe that your child has registered on air999 without your knowledge, please contact our support team immediately at [email protected].
Security Measures
air999 implements and maintains appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:
- Encryption: Data in transit is protected using TLS (Transport Layer Security) encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using industry-standard algorithms;
- Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and audit logging;
- Two-Factor Authentication: Available for user accounts and mandatory for internal staff access to administrative systems;
- Regular Security Testing: The platform undergoes regular vulnerability assessments and penetration testing to identify and remediate potential weaknesses;
- Incident Response: We maintain a documented data breach response procedure, including notification protocols where a breach is likely to result in risk to your rights and freedoms.
Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You use the platform at your own risk and are encouraged to use strong, unique passwords and to enable two-factor authentication on your account.
Third-Party Links & External Services
The air999 platform may contain references to third-party services, payment providers and informational resources. This Privacy Policy applies solely to data collected and processed by air999 directly. It does not extend to the privacy practices of any third-party website, service or application that may be linked to or referenced within our content.
air999 is not responsible for the privacy practices or content of any third-party sites or services. We encourage you to review the privacy policies of any third-party service you access independently. This applies specifically to payment method providers referenced on our platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — which operate under their own independent privacy frameworks.
Policy Amendments
air999 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will:
- Update the "Last Updated" date at the top of this document;
- Where practicable, provide advance notice to registered users via email or in-platform notification before the changes take effect;
- Where required by applicable law, seek fresh consent for processing activities that are materially different from those previously disclosed.
Your continued use of the platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to stay informed of how we protect your data.
Contact Us
For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Support team using the following channels:
[email protected] — Please use the subject line "Privacy Request" and include your registered username or email address and a description of your enquiry. We aim to respond within 30 calendar days.
Available 24 hours a day, 7 days a week via the in-platform chat widget. Suitable for general privacy questions. For formal data subject requests, email is preferred to ensure a complete written record.
For formal data subject rights requests — including access, erasure, portability or objection — please submit your request in writing by email to [email protected], including proof of identity. We may request additional verification before processing your request.
You also have the right to lodge a complaint with a competent supervisory authority or data protection regulator in the jurisdiction where you reside or where the alleged infringement occurred. air999 encourages users to contact us directly in the first instance so that we can attempt to resolve any concerns informally before escalation.