Privacy Policy — afa999

When you interact with the afa999 platform — whether by registering an account, making a deposit, placing a bet, contacting our support team, or simply browsing the website — we may collect and process certain categories of personal data about you. The data we collect depends on the nature of your interaction with the platform and is limited to what is necessary for the stated purposes described in this Privacy Policy.

Registration and Identity Data

When you create a player account on afa999, we collect the following information that you provide directly:

• Full legal name as it appears on your government-issued identification document;
• Date of birth (used to verify that you meet the minimum age requirement of 18 years);
• Email address (used for account communications, verification, and support);
• Mobile phone number (used for two-factor authentication and account security alerts);
• Residential address (used for identity verification and KYC compliance);
• Preferred language and time zone settings.

Identity Verification (KYC) Data

To comply with our legal obligations under applicable anti-money-laundering regulations, we require players to submit identity verification documents before processing withdrawals. This may include:

• A copy of a valid government-issued photo ID (National ID Card, passport, or driving licence);
• Proof of address (utility bill or bank statement dated within 3 months);
• Payment method verification (screenshot or confirmation of mobile financial services account ownership);
• Source of funds documentation in cases flagged by our compliance team for enhanced due diligence.

Financial Transaction Data

afa999 records all financial transactions associated with your account, including:

• Deposit amounts, dates, and payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard);
• Withdrawal requests, amounts, destination payment method references, and processing status;
• Bonus credits, wagering activity, and bonus forfeitures;
• Account balance history.

We do not store complete card numbers or full mobile financial services credentials. Payment data is tokenised and processed through our third-party payment providers' secure systems.

Gameplay and Betting Data

We record all betting and gaming activity on your account, including game titles played, bet amounts, outcomes, session durations, and responsible gaming tool usage. This data is used to resolve disputes, detect problem gambling patterns, and improve our service offering.

Technical and Device Data

When you access afa999, our servers and analytics systems automatically collect the following technical data:

• IP address and approximate geographic location (country and city level);
• Device type, operating system, and browser version;
• Pages visited, features used, and time spent on platform sections;
• Referring URL (the website or search engine that directed you to afa999);
• Session identifiers and login timestamps.

Communications Data

If you contact afa999 via email, live chat, or any other support channel, we retain records of your communications including the content of your messages, attachments, and the date and time of each interaction. This data is used to resolve your query and to improve our support quality.

afa999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose. All third parties with whom we share data are contractually bound by confidentiality and data protection obligations.

Payment Service Providers

To process your deposits and withdrawals, afa999 shares necessary transaction data with our approved payment service providers, including the operators of bKash, Nagad, Rocket, Upay, and the international card networks Visa and Mastercard. These providers receive only the transaction data required to execute the payment and are prohibited from using your information for any other purpose.

Game Providers

Games on the afa999 platform are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, certain session data (including your player ID, account currency, and session token) is passed to the game provider's servers to facilitate gameplay. Game providers are not provided with your full name, contact details, or payment information.

Identity Verification Partners

afa999 uses third-party KYC verification partners to assist with identity document checks and anti-money-laundering screening. These partners process your identity documents under strict contractual terms and may not retain or use your data beyond the purposes of the verification check.

Regulatory and Law Enforcement Disclosure

afa999 may be required to disclose personal data to government authorities, regulatory bodies, or law enforcement agencies where such disclosure is required by law or is necessary to protect the rights, property, or safety of afa999, its players, or third parties. Such disclosures will be made strictly in accordance with applicable legal requirements.

Business Transfers

In the event that afa999 undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email of any such transfer and of any material changes to this Privacy Policy that result from it, with a minimum of 30 days' notice before the transfer takes effect.

International Data Transfers

Some of our third-party service providers (particularly game providers and analytics platforms) may process data outside of Bangladesh. Where such international transfers occur, afa999 ensures that appropriate safeguards are in place — including standard contractual clauses and data processing agreements — to ensure that your data receives a level of protection equivalent to that provided under this Privacy Policy.

afa999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. No system can guarantee absolute security, but we maintain a high standard of data protection practice across all areas of the platform.

Technical Security Measures

• TLS/SSL Encryption: All data in transit between your browser or mobile device and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher). Our SSL certificate is always current and valid.
• Data Encryption at Rest: Sensitive data fields — including identity document references and payment method tokens — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to player data within our internal systems is governed by strict role-based access controls. Only authorised personnel with a documented operational need are permitted to view personal data.
• Two-Factor Authentication (2FA): afa999 supports 2FA on all player accounts. We strongly encourage all players to enable 2FA to add an extra layer of protection against unauthorised login attempts.
• Firewall and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for anomalous activity around the clock.

Organisational Security Measures

• All employees and contractors with access to player data are subject to confidentiality agreements and receive regular training on data protection responsibilities;
• Security incident response procedures are documented and tested on a regular basis;
• Third-party service providers are evaluated for security compliance before engagement and are subject to ongoing auditing;
• Access logs are retained and reviewed to detect any unauthorised access attempts.

What You Can Do to Stay Secure

While afa999 takes every reasonable step to protect your data, account security also depends on the precautions you take as a player. We recommend:

• Using a strong, unique password for your afa999 account that you do not use on any other website;
• Enabling two-factor authentication in your account security settings;
• Never sharing your password or one-time verification codes with anyone, including individuals claiming to be afa999 staff;
• Logging out of your account on shared or public devices;
• Contacting support immediately if you suspect your account has been accessed without your authorisation.

Security Breach Notification

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, afa999 will notify affected individuals by email within 72 hours of becoming aware of the breach, where it is feasible to do so. The notification will describe the nature of the breach, the data affected, the likely consequences, and the steps we are taking to address it.

As a player on the afa999 platform, you hold a number of rights in relation to the personal data we hold about you. afa999 is committed to honouring these rights promptly and transparently. All requests are handled free of charge and are responded to within 30 calendar days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Right of Access

You have the right to request a copy of all personal data that afa999 holds about you. This includes your registration data, account history, transaction records, gameplay data, and any communications we hold on file. To submit a data access request, email [email protected] with the subject line "Data Access Request" from the email address registered to your afa999 account.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your email address or phone number) directly within your account settings. For corrections to identity or KYC data, please contact our support team, as these changes require verification.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where you believe the data has been processed unlawfully. As noted in Section 6, some data categories must be retained for defined periods under legal obligations and cannot be erased early on request alone.

Right to Restrict Processing

You have the right to request that afa999 restrict the processing of your personal data while a dispute about its accuracy or lawfulness is being resolved. During a restriction, we will continue to store your data but will not actively process it for any other purpose.

Right to Data Portability

Where we process your personal data on the basis of your consent or on the basis of a contract with you, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that we transmit it directly to another service provider where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims. You may also object at any time to the processing of your data for direct marketing purposes, with no justification required.

Right to Withdraw Consent

Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, email [email protected] or update your preferences within your account settings.

How to Exercise Your Rights

To exercise any of the rights described above, please contact our privacy team by emailing [email protected]. Please include your full name, the email address registered to your afa999 account, and a clear description of the right you wish to exercise. We may ask for additional verification to confirm your identity before processing your request, in order to protect your data from unauthorised access by third parties.