af99 Privacy Policy

1 Introduction

af99 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use the af99 website at https://af99.onl and all associated services. This Privacy Policy describes in detail the categories of personal data we collect, the purposes for which that data is used, the circumstances in which it may be shared, how long it is retained, and the rights available to you in connection with your personal data.

This Privacy Policy applies to all users of the af99 platform, including registered players, visitors who browse the website without registering, and individuals who contact our customer support team. By accessing af99 or creating an account, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

2 Data We Collect

af99 collects personal data through several channels: directly from you when you register or contact us, automatically when you interact with the platform, and from trusted third-party service providers. The specific categories of data collected are described below.

2.1 Registration & Account Data

When you create an af99 account, we collect:

• Full legal name;
• Date of birth (for age verification);
• Residential address;
• Mobile phone number;
• Email address;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

As required for responsible gaming compliance and fraud prevention, we may collect copies of:

• National Identity Card (NID) or passport;
• Proof of address documentation (utility bill, bank statement);
• Selfie or live facial verification image where required.

2.3 Financial & Transaction Data

To process deposits and withdrawals, we collect:

• Payment method details (bKash account number, Nagad number, Rocket number, Upay number, bank account details, card details where applicable);
• Transaction history including amounts, dates, and payment references;
• Wallet balance and wagering activity records.

af99 does not store full card numbers. Card transactions are tokenised by the relevant payment gateway and stored in encrypted form in compliance with payment security standards.

2.4 Technical & Usage Data

When you use the af99 platform, we automatically collect certain technical information:

Data Type	Examples	Purpose
Device Information	Device model, OS version, browser type	Platform optimisation, fraud detection
IP Address	IPv4/IPv6 address	Geolocation, security monitoring, duplicate account detection
Log Data	Login timestamps, pages visited, session duration	Security auditing, support investigations
Cookies	Session tokens, preference cookies	Authentication, personalisation, analytics
Betting Activity	Games played, bet amounts, outcomes	Account management, responsible gaming monitoring

2.5 Communications Data

If you contact af99 via live chat, email, or WhatsApp, we retain records of those communications including the content of messages, timestamps, and any attachments provided. This data is used to resolve your enquiry and to improve our support services.

3 How We Use Your Data

af99 uses personal data for the following purposes:

• Account Administration: Creating and maintaining your player account, processing login requests, and providing access to games and services;
• Payment Processing: Facilitating deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, DBBL, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, Mastercard);
• Identity Verification: Confirming your age and identity to comply with responsible gaming requirements and to prevent underage gambling;
• Fraud & Security: Detecting and preventing fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct;
• Responsible Gaming: Monitoring play patterns and intervening where necessary to support responsible gaming commitments, including enforcing self-exclusion and deposit limits;
• Customer Support: Responding to enquiries, resolving disputes, and improving our service based on feedback;
• Legal Compliance: Meeting obligations under applicable law, including anti-money-laundering (AML) and know-your-customer (KYC) requirements;
• Marketing Communications: Sending promotional offers, bonus notifications, and news updates to players who have opted in to receive such communications;
• Platform Improvement: Analysing aggregated usage data to improve game offerings, platform performance, and user experience.

4 Legal Basis for Processing

af99 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to create and administer your account, process transactions, and provide the services you have requested;
• Legal Obligation: Processing required for compliance with AML, KYC, and responsible gaming obligations;
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing for optional marketing communications, where you have explicitly opted in. You may withdraw consent at any time.

5 Data Sharing

af99 does not sell your personal data. We may share data with the following categories of trusted third parties, strictly on a need-to-know basis:

5.1 Payment Service Providers

To process deposits and withdrawals, af99 shares relevant payment and identity data with authorised payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers operate under their own privacy policies and security frameworks.

5.2 Identity Verification Providers

For KYC compliance, af99 may share identification documents and biometric verification data with authorised third-party identity verification services. These providers are contractually bound to use your data solely for the purpose of completing the verification task assigned to them.

5.3 Game Software Providers

Game studios and software suppliers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive session tokens and anonymised game-play data necessary to operate their games within the af99 platform. These providers do not receive your full personal profile.

5.4 Fraud Prevention & Analytics

af99 may share technical data (IP addresses, device fingerprints, session logs) with fraud prevention and analytics services to protect the integrity of the platform. This data is shared in an aggregated or pseudonymised form wherever possible.

5.5 Legal & Regulatory Disclosure

af99 will disclose personal data to law enforcement authorities, regulators, or other government bodies when required to do so by applicable law, court order, or other binding legal process. We will notify you of such disclosure to the extent permitted by law.

6 Cookies & Tracking Technologies

af99 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and gather analytics data. The types of cookies we use are as follows:

• Essential Cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing core functionality.
• Preference Cookies: Remember your language, display settings, and other personalisation choices between sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the platform to help us improve performance and user experience.
• Security Cookies: Assist in detecting and preventing fraudulent activity, including duplicate account creation and bot activity.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the af99 platform, including the ability to remain logged in during a session.

7 Data Retention

af99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guideline:

• Active Account Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with AML record-keeping requirements;
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later;
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction;
• Support Communications: Retained for up to 3 years from the date of the most recent interaction;
• Technical Logs: Retained for up to 12 months unless required for longer periods in connection with a security investigation or legal matter;
• Marketing Consent Records: Retained for the duration of your consent and for 1 year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

8 Your Privacy Rights

Subject to applicable law, you have the following rights in respect of the personal data held about you by af99. You may exercise any of these rights by contacting our support team at [email protected]. af99 will respond to valid requests within 30 days.

9 Data Security

af99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your browser and our servers;
• Encryption at rest for sensitive data categories including identity documents and payment information;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular security audits and vulnerability assessments of platform infrastructure;
• Two-factor authentication options for player accounts;
• Automated monitoring for unusual login activity, including logins from unrecognised devices or locations.

While af99 takes all reasonable steps to protect your data, no platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, af99 will notify affected players within a reasonable timeframe and take all necessary remediation steps.

10 Third-Party Links

The af99 platform may contain references or links to third-party payment providers and game software partners. These third parties have their own privacy policies, and af99 accepts no responsibility or liability for the content or practices of those third-party services. We recommend that you review the privacy policy of any third-party service provider before submitting personal data to them directly.

11 Children's Privacy

12 Policy Updates

af99 reserves the right to update this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new sharing arrangement — we will provide reasonable advance notice via a prominent banner on the platform or by email to your registered address at least 14 days before the change takes effect.

Where changes are non-material (such as clarifications of existing language or minor formatting corrections), the updated policy will be published on this page with a revised effective date and no separate notification will be issued. Your continued use of the af99 platform following any update constitutes your acceptance of the revised Privacy Policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data af99 holds about you, please contact our Data Support Team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
• WhatsApp: Available 08:00–24:00 BST

af99 aims to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days of receipt. For complex requests requiring additional verification, we will notify you if additional time is needed.