Privacy Policy — aa9999 Online Gaming Platform

1. Introduction

aa9999 ("we", "us", "our") operates the online gaming platform accessible at aa9999.club and all associated interfaces (collectively, the "Platform"). This Privacy Policy explains how aa9999 collects, uses, stores, discloses, and protects personal data relating to individuals who visit or register on the Platform ("you", "Player", "User").

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are published on the Platform.

2. Data Controller

aa9999 acts as the data controller for personal data collected and processed through the Platform. As data controller, aa9999 determines the purposes and means by which your personal data is processed. For all data protection enquiries, including requests to exercise your rights under this Policy, you may contact us directly:

• Email: [email protected]
• Platform: aa9999.club
• Response time: Within 48 hours during Bangladesh Standard Time (BST, UTC+6) business hours

3. Data We Collect

aa9999 collects personal data that falls into the following categories. We collect only what is necessary for the specific purpose identified at the time of collection.

Category	Examples	Purpose
Identity Data	Full name, date of birth, National ID number, passport number	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, residential address	Account communication, OTP delivery, support responses
Financial Data	bKash/Nagad/Rocket account numbers, bank account details, transaction history	Deposit and withdrawal processing, AML compliance
Technical Data	IP address, device type, browser type, operating system, session tokens	Platform security, fraud detection, session management
Usage Data	Pages visited, games played, bet amounts, session durations, login times	Platform improvement, responsible gaming monitoring, personalisation
Communications Data	Support chat logs, email correspondence, complaint records	Customer service, dispute resolution, quality assurance
Verification Documents	Scanned or photographed ID documents, proof of address, payment method confirmation	KYC compliance, withdrawal verification

4. How We Collect Your Data

aa9999 collects personal data through the following channels:

4.1 Direct Interactions

You provide personal data directly when you register an account, complete identity verification, make deposits or withdrawal requests, contact customer support, or respond to surveys or promotional communications from aa9999. This represents the primary source of your personal data on the Platform.

4.2 Automated Technologies

When you access the aa9999 Platform, we automatically collect certain technical and usage data through server logs, session cookies, and analytics tools. This includes your IP address, browser type, device identifiers, pages visited, time spent on the Platform, and interaction events such as game launches and bet placements. This data is used to maintain Platform security, detect anomalous behaviour, and improve the overall user experience.

4.3 Third-Party Sources

aa9999 may receive supplementary data about you from third-party partners in specific, limited circumstances, including:

• KYC verification providers who confirm the validity of identity documents you submit.
• Payment processors (bKash, Nagad, Rocket, Upay, and banking partners) who confirm the status and ownership of payment instruments used on your account.
• Fraud detection and AML screening services that cross-reference your details against sanctions lists and known fraud databases.

5. How We Use Your Data

aa9999 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your aa9999 account, verify your identity, and maintain your account profile throughout its active lifetime.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka (BDT / ৳) through your chosen payment method and to maintain accurate transaction records.
• Legal and regulatory compliance: To fulfil KYC, AML, and responsible gaming obligations, including age verification (18+ only), source-of-funds checks, and mandatory record-keeping requirements.
• Platform security and fraud prevention: To detect and investigate suspicious login activity, multi-accounting, bonus abuse, and financial fraud that may affect the integrity of the Platform or harm other players.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of communications for dispute resolution purposes.
• Responsible gaming: To monitor gameplay patterns that may indicate problematic gambling behaviour and to administer deposit limits, loss limits, time-out periods, and self-exclusion where requested or required.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the features, design, performance, and game selection offered on aa9999.
• Direct communications: To send you account notifications, transaction confirmations, security alerts, and — where you have consented — promotional communications about relevant bonuses or offers.

6. Legal Basis for Processing

aa9999 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to perform the contract between you and aa9999, including account registration, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and age verification obligations.
• Legitimate interests: Processing carried out in the legitimate interests of aa9999, such as fraud detection, Platform security, and analytics, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, informed consent, such as the receipt of promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Third Parties

aa9999 does not sell your personal data. We share personal data with third parties only in the following limited circumstances and only to the extent necessary for each stated purpose:

7.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under binding data processing agreements. These include KYC and identity verification services, payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), cloud hosting and infrastructure providers, and game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). These providers are contractually prohibited from using your data for any purpose beyond delivering the specified service to aa9999.

7.2 Legal and Regulatory Disclosure

aa9999 may disclose personal data to government authorities, law enforcement agencies, courts, or regulatory bodies where we are required to do so by applicable law, court order, or binding regulatory direction. We will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of the assets of aa9999, personal data held by aa9999 may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from the transaction before your data is transferred or becomes subject to a different privacy policy.

8. Data Retention

aa9999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with aa9999 and for a minimum of five (5) years following account closure, to meet AML and financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulation.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last interaction, for dispute resolution purposes.
• Technical and log data: Retained for up to twelve (12) months, after which it is anonymised or deleted.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to evidence the prior consent.

Where data is no longer required for any of the above purposes, aa9999 will securely delete or anonymise it in accordance with our internal data disposal procedures.

9. Cookies & Tracking Technologies

The aa9999 Platform uses cookies and similar technologies to deliver a functional and secure experience. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They manage your login session, maintain authentication state, and enable secure navigation between pages. These cookies cannot be disabled without rendering the Platform non-functional.

9.2 Performance and Analytics Cookies

These cookies collect anonymised information about how visitors use the Platform, including pages visited, time on page, and error events. This data is used in aggregate form to improve Platform performance and identify usability issues. No individually identifiable data is collected through analytics cookies.

9.3 Functionality Cookies

These cookies remember your preferences such as language settings, preferred game categories, and display options, enabling a more personalised experience on return visits.

10. Data Security

aa9999 implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the aa9999 Platform.
• Encryption of sensitive data fields (including financial data and identity documents) at rest within our database infrastructure.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication requirements for all aa9999 administrative system access.
• Automated monitoring and alerting for anomalous access patterns, failed authentication attempts, and potential data exfiltration events.

In the event of a personal data breach that poses a risk to your rights and freedoms, aa9999 will notify affected players and, where required, the relevant authorities, within 72 hours of becoming aware of the breach, consistent with good practice data breach notification standards.

11. Your Data Rights

As an aa9999 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your registered email address and a description of your request. We will respond within 30 days.

• Right of access: You may request a copy of the personal data aa9999 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held on your account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that aa9999 limit processing of your data in specific circumstances, such as where you contest the accuracy of the data or object to a particular processing activity.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to aa9999, where technically feasible.
• Right to object: You may object to processing based on aa9999's legitimate interests, including profiling for responsible gaming purposes, subject to applicable legal overrides.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12. Minors

The aa9999 Platform is strictly intended for adults aged 18 years and above. aa9999 does not knowingly collect, process, or store personal data relating to individuals under the age of 18. Age verification is conducted on all new accounts as part of the KYC process. If aa9999 becomes aware that personal data has been collected from a person under 18 years of age, that account will be closed immediately, all associated personal data will be deleted (subject to any legal retention requirements), and any funds held will be handled in accordance with applicable procedures. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

13. International Data Transfers

The aa9999 Platform serves players in Bangladesh. Some of our third-party service providers — including cloud infrastructure providers and game software providers — may process data in data centres located outside Bangladesh. Where personal data is transferred internationally, aa9999 takes appropriate steps to ensure that the transfer is protected by adequate safeguards, including contractual data protection clauses with the receiving party that impose equivalent protections to those described in this Policy. aa9999 does not transfer personal data to any jurisdiction known to have inadequate data protection standards without appropriate contractual safeguards in place.

14. Changes to This Privacy Policy

aa9999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform operations. Where changes are material, we will provide notice by publishing the updated Policy on the Platform and, where practicable, by notifying registered players via the email address on record. The date of the most recent revision is displayed at the top of this document. Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not accept a revised Policy, you should cease using the Platform and close your account in accordance with the account closure process described in our Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way aa9999 handles your personal data, please contact our data protection team:

• Email: [email protected]
• Subject line: Privacy Policy Enquiry
• Response time: Within 48 hours during Bangladesh Standard Time (BST, UTC+6) business hours

For formal data subject rights requests (access, erasure, portability, etc.), please include your registered email address, the specific right you wish to exercise, and any relevant details to help us locate and process your request efficiently. aa9999 will acknowledge formal requests within 5 business days and provide a substantive response within 30 days. This Privacy Policy was last reviewed and updated in January 2026.