afa999 Privacy Policy

1. Who We Are

afa999 is an online casino and sports betting platform operating at afa999.pro, serving players based in Bangladesh. When this Policy refers to "afa999", "we", "us", or "our", it refers to the operator of the afa999 platform. When this Policy refers to "you" or "your", it refers to any individual who accesses, registers on, or uses the afa999 platform in any capacity.

afa999 acts as the data controller in respect of all personal information collected from registered players and visitors to the platform. If you have any questions or concerns about how your data is processed, you may contact us directly at the email address provided in Section 13 of this Policy.

2. Information We Collect

afa999 collects personal information from you in several ways during the course of your relationship with the platform. The categories of personal data we collect include:

3. How We Collect Your Information

We collect personal information through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your profile.
• Automated technologies: Technical and usage data collected automatically when you visit or use the platform, via cookies, web beacons, server logs, and similar tracking technologies.
• Payment providers: Transaction confirmation data shared by your payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) when you initiate a deposit or withdrawal.
• Identity verification services: Data returned by third-party KYC and fraud-prevention services when we verify your identity documents.
• Publicly available sources: In limited fraud-prevention scenarios, we may cross-reference information against publicly available records or sanctions screening databases.

4. How We Use Your Information

afa999 processes your personal information only for clearly defined, legitimate purposes. The primary purposes for which we use your data are as follows:

• Account management: Creating, maintaining, and securing your afa999 account, including processing login authentication and password reset requests.
• Service delivery: Enabling you to place wagers, play casino games, participate in promotions, and access all features of the afa999 platform.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method and maintaining accurate financial records of all transactions.
• Identity verification (KYC): Confirming your identity, age (21+), and payment method ownership as required by our responsible gaming and anti-fraud obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other illegal or prohibited activities.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling, enforcing self-exclusion and deposit limit requests, and providing appropriate support resources.
• Customer support: Responding to your enquiries, resolving complaints, and improving our support processes based on interaction history.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the platform and to develop new features and improve existing ones.
• Legal compliance: Meeting our obligations under applicable anti-money laundering, data protection, and financial regulation frameworks.

5. Legal Basis for Processing

Every instance of data processing by afa999 is grounded in one of the following lawful bases:

• Contractual necessity: Processing required to deliver the services you have requested under the afa999 Terms & Conditions — including account creation, payment processing, and game access.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including age verification, anti-money laundering checks, and fraud reporting obligations.
• Legitimate interests: Processing carried out for afa999's legitimate business interests — such as fraud detection, platform security, and service improvement — provided that those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed consent — primarily for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Cookies & Tracking Technologies

afa999 uses cookies and similar technologies to ensure the platform functions correctly and to understand how it is used. The types of cookies we deploy are:

• Essential cookies: Required for the platform to operate. These cookies manage your session state, authentication token, and security preferences. They cannot be disabled without preventing access to the platform.
• Functional cookies: Remember your preferences such as language settings and last-visited game category so that you do not need to re-enter them on each visit.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform — including page visit counts, session durations, and navigation paths — to help us improve the user experience.
• Fraud-prevention cookies: Assist in identifying suspicious access patterns, duplicate account attempts, and unusual session behaviour to protect your account and the integrity of the platform.

afa999 does not deploy third-party behavioural advertising cookies that track your activity across external websites. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to log in or use core platform features.

7. Sharing Your Information

afa999 does not sell or rent your personal data to third parties. We share your information only in the following limited circumstances:

• Payment processors: Your payment identifiers and transaction data are shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to process your deposit or withdrawal request.
• Game software providers: Pseudonymised session data (player ID, wager amounts, game outcome) is transmitted to our game software partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to render game results and calculate payouts. These providers do not receive your identity data.
• KYC and fraud-prevention partners: Your identity documents and verification data are shared with accredited third-party KYC service providers under strict data processing agreements.
• Technology and hosting providers: Our platform infrastructure providers who host and maintain the afa999 platform process personal data on our behalf under binding confidentiality and data security obligations.
• Legal authorities: Where required by applicable law, court order, or regulatory direction, afa999 may disclose personal data to law enforcement, regulatory bodies, or other competent authorities. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the afa999 business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8. Data Retention

afa999 retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal and regulatory obligations. Specific retention periods are as follows:

• Active account data: Retained for the full duration of your account's active status and for a period of five (5) years following permanent account closure.
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, in line with standard financial record-keeping requirements.
• KYC verification documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Support correspondence: Retained for three (3) years from the date of the last interaction in a given support case.
• Marketing consent records: Retained for the duration of the consent and for one (1) year following its withdrawal as evidence of prior consent.
• Technical and usage logs: Retained in anonymised or pseudonymised form for up to two (2) years for analytics and fraud-prevention purposes.

Where data is no longer required and no legal obligation mandates its retention, afa999 will securely delete or anonymise it in a manner that prevents recovery or re-identification.

9. Your Data Rights

As a user of the afa999 platform, you have the following rights in respect of your personal data, which you may exercise at any time by contacting our support team:

• Right of access: You may request a copy of all personal data we hold about you, along with details of how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by afa999.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format, or that we transmit it directly to another controller where technically feasible.
• Right to object: You may object to processing based on our legitimate interests, or to the use of your data for direct marketing purposes. Objections to direct marketing will be honoured immediately and without condition.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact the afa999 support team using the details provided in Section 13. We will respond to all verified requests within 30 days. In some cases — for example, where a request is complex or we receive a high volume of requests — we may extend this period by a further 30 days and will notify you accordingly.

10. Security Measures

afa999 takes the security of your personal data seriously and implements a layered security architecture to protect against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and our platform.
• AES-256 encryption for sensitive data fields stored in our database, including payment identifiers and identity document references.
• Bcrypt hashing with salt for all stored account passwords — we never store your password in plain text and our support team cannot retrieve it.
• Multi-factor authentication options available for account login at your request.
• Continuous automated monitoring of platform access logs for anomalous activity patterns, including brute-force login attempts and unusual transaction volumes.
• Strict role-based access controls limiting which members of the afa999 team can access personal data, on a need-to-know basis only.
• Regular internal security reviews and third-party penetration testing of the platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, afa999 will notify you without undue delay via your registered email address, along with details of the nature of the breach and the steps we are taking to mitigate it.

11. Children's Privacy

The afa999 platform is strictly for adults aged 21 and above. We do not knowingly collect personal information from any individual under the age of 21. All registration applications are subject to age verification, and accounts found to belong to minors will be closed immediately with all associated funds returned to the originating payment method following verification of the rightful account holder.

If you believe that a minor has registered an account on the afa999 platform or that their personal data has been collected without appropriate parental consent, please contact our support team immediately so that we can investigate and take appropriate action.

12. Changes to This Policy

afa999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will endeavour to notify you via your registered email address or through a prominent notice on the platform.

Your continued use of the afa999 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. We recommend reviewing this Policy periodically to stay informed about how we protect your information.

13. Contact & Data Requests

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data, please contact the afa999 team through the following channel:

When submitting a data rights request, please include your registered username or account email address and a brief description of your request. Where identity verification is required, our support team will guide you through the process securely.