aph99 Privacy Policy

2. Information We Collect

Aph99 collects information from various sources and for various purposes. In all cases, we collect only information that is legally required and essential to provide our services.

2.1 Information provided during registration

When you create an account at aph99, we collect the following information:

• Personal Identity: Full name, date of birth, gender, nationality
• Contact information: Email address, mobile number, postal address
• Account credentials: Username, password (encrypted), security questions
• Payment information: Bank account details, mobile wallet numbers (bKash/Nagad/Rocket), crypto wallet addresses

2.2 Verification Documents

For regulatory requirements and anti-money laundering prevention, we may request verification documents:

• National ID card or passport copy
• Proof of address (utility bill, bank statement)
• Payment method verification (credit card front copy, bank letter)
• Selfie photo with ID document (in some cases)

2.3 Transaction and Gaming History

Records of your account activity are kept:

• All bets and wagers (amount, date, time, game, result)
• Deposit and withdrawal history
• Bonus and promotion usage
• Login and session information
• Account balance and changes

2.4 Technical and Device Information

When you use aph99, we automatically collect certain technical information:

• IP address and geographic location
• Device information (model, operating system, browser type)
• Website and app usage data (page views, clicks, navigation paths)
• Data from cookies and similar tracking technologies
• Log files and error reports

2.5 Communication and Support

When you contact us, we keep records of:

• Email, chat, and phone conversations
• Customer support tickets and inquiries
• Your feedback, reviews, and survey responses
• Social media interactions (if applicable)

3. How We Use Your Information

Aph99 uses your personal information only for specific, legitimate and transparent purposes. We never process data without your consent or legal basis.

3.1 Providing Services

• To create and manage accounts
• To verify your identity and confirm age
• To process bets, deposits and withdrawals
• To provide bonuses and promotions
• To provide customer support and assistance
• To maintain transaction records and account statements

3.2 Regulatory and Legal Compliance

• To meet Know Your Customer (KYC) requirements
• To implement Anti-Money Laundering (AML) policies
• To comply with licensing requirements
• To prevent fraud, money laundering, and criminal activity
• To respond to legal inquiries and regulatory requests

3.3 Security and Fraud Prevention

• To detect suspicious activity and unusual patterns
• To detect multiple accounts and bonus abuse
• To protect against hacking and unauthorized access
• To keep your account and funds secure
• To maintain platform integrity

3.4 Communication and Marketing

• To send transaction confirmations and account updates
• To inform you about promotional offers and new games (if you've opted in)
• To provide VIP rewards and exclusive deals
• To send important policy changes and notifications
• To provide personalized betting recommendations

3.5 Platform Improvement and Analytics

• To optimize website and app performance
• To improve user experience
• To design new features and games
• To analyze trends and player behavior
• To conduct A/B testing and research

4. Cookies and Tracking Technologies

Aph99 uses cookies and similar technologies to enhance your browsing experience, provide site functionality, and for analytics purposes.

4.1 What Are Cookies

Cookies are small text files stored on your device when you visit aph99. They help recognize you, remember your preferences, and track site usage.

4.2 Cookies We Use

• Essential cookies: Essential for basic site functionality — login, account access, security. These cannot be disabled.
• Performance cookies: Collects information on how the site is used — page views, click rates, error messages. Google Analytics is used.
• Functionality Cookies: Remembers your preferences — language, currency, bet preferences, layout settings.
• Marketing/Targeting Cookies: Used to show relevant ads and promotions. May be set by third-party advertisers.

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers accept cookies automatically, but you can change settings to reject all or some cookies. However, please note that disabling cookies may prevent some features of aph99 from working properly.

4.4 Other Tracking Technologies

• Pixel Tags/Web Beacons: Small graphics that track email opens and clicks.
• Local storage: HTML5 local storage is used to store some data.
• Device Fingerprinting: Unique device identification for fraud prevention.
• Session Replay: Some sessions may be recorded to improve user experience (personal information is masked).

5. Information Sharing and Third Parties

Aph99 does not sell your personal information to third parties. However, in certain circumstances we may share limited data with trusted partners.

5.1 Service Providers

We work with third-party service providers who perform tasks on our behalf:

• Payment Processors: Deposit and withdrawal processing (bKash, Nagad, bank, crypto gateways)
• Game Providers: Evolution Gaming, Pragmatic Play, NetEnt — casino game providers
• Verification Services: KYC and identity verification services
• Cloud Hosting: Servers and data storage (AWS, Google Cloud)
• Analytics Platforms: Google Analytics, Mixpanel
• Customer support software: Live chat and ticketing system
• Email Service: Sending promotional and transactional emails

5.2 Legal and Regulatory Authorities

We may disclose your information if legally required:

• In response to court orders, subpoenas, or legal proceedings
• At the request of regulatory authorities (Curacao eGaming, financial regulators)
• In money laundering or fraud investigations
• For national security or law enforcement requests
• To protect our legal rights and property

5.3 Business Transfers

If aph99 undergoes a merger, acquisition, or asset sale, your personal data may be part of the transferred assets. In such cases, we will provide you with advance notice and the new entity will adhere to the same privacy standards.

5.4 With Your Consent

We may share information in other circumstances with your explicit consent. Example: if you want to share your wins on social media or connect with third-party services (social login).

6. Data Protection and Security Measures

Aph99 uses industry-leading technology and organizational measures to protect your personal information. We take your data security extremely seriously.

6.1 Technical Security

• SSL/TLS Encryption: All data transmission is protected by 256-bit SSL encryption
• Database encryption: Sensitive information stored encrypted
• Firewall: Advanced firewall and intrusion detection systems
• DDoS protection: Protection from Distributed Denial of Service attacks
• Regular penetration testing: Regular testing by independent security experts
• Secure coding: Software development following OWASP guidelines

6.2 Access Control

• Only authorized personnel can access personal data
• Role-Based Access Control (RBAC) system
• Multi-factor authentication (MFA) for all system access
• Staff access logs and audit trails
• Regular access reviews and revocation

6.3 Organizational measures

• All staff receive privacy and data protection training
• Strict Non-Disclosure Agreements (NDA)
• Data Protection Officer (DPO) appointed
• Incident response plan and data breach procedures
• Annual security audits and ISO 27001 certification

6.4 Payment Security

• PCI DSS compliant payment processing
• Credit card information is not stored directly
• Tokenization and cryptographic security
• Fraud detection and prevention systems

6.5 Your Role

Data security is a shared responsibility. You can help by:

• Use strong, unique passwords
• Never share your login credentials
• Enable Two-Factor Authentication (2FA)
• Avoid logging in on public Wi-Fi or shared computers
• Report suspicious emails or phishing attempts
• Always log out when you finish your session

7. Your Data Rights

Under GDPR and other data protection laws, you have specific rights regarding your personal information. aph99 respects these rights and makes them easy to exercise.

7.1 Right of access

You have the right to request a copy of your personal data that we hold. You can do this by emailing [email protected] or using the "Download My Data" option in your account settings. We will provide your data in a machine-readable format (CSV or JSON) within 30 days.

7.2 Right to Rectification

If your personal information is incorrect or incomplete, you can request to have it corrected. Most information can be updated directly in your account settings. Changes to verified information (such as name, date of birth) may require supporting documents.

7.3 Right to Erasure

You can request deletion of your personal data (also known as the "Right to be Forgotten"). However, we may be required to retain data in certain circumstances:

• Legal or regulatory requirements (AML, KYC records must be kept for 5 years)
• Ongoing disputes or legal claims
• Fraud prevention and security purposes
• To fulfill contractual obligations

7.4 Right to restrict processing

You may request to restrict the processing of your data under certain circumstances — for example, if you dispute the accuracy of the information or object to the lawfulness of processing. During restriction, we will store the data but not process it.

7.5 Right to Data Portability

You have the right to receive your data in a structured, commonly used, and machine-readable format and to transfer it to another service provider. aph99 supports data export in CSV and JSON formats.

7.6 Right to Object

You can object to certain types of processing:

• Direct marketing: You can opt out of marketing communications at any time
• Processing based on legitimate interests: You can object and we must demonstrate compelling reasons that override your interests
• Profiling: You can object to fully automated decision-making

7.7 Right not to be subject to automated decisions

You have the right not to be subject to decisions based solely on automated processing (including profiling) that have legal or significant effects on you. aph99 uses some automated systems (fraud detection, risk assessment), but important decisions always include human review.

7.8 Exercising Rights

To exercise your rights:

1. Email [email protected] or check your account settings
2. Clearly state which right you wish to exercise
3. Provide verification of your identity (for security)
4. We will respond within 30 days (may extend up to 60 days for complex requests)

8. Data Retention and Deletion

Aph99 retains your personal data only for as long as necessary. Our retention periods are based on legal requirements and business purposes.

8.1 Active Accounts

We will retain your information for as long as your aph99 account remains active. Active means you have logged in, placed bets, or performed any activity within the past 12 months.

8.2 Inactive accounts

If your account remains inactive for 12 months (no login or activity), we will send a reminder email. After 24 months, the account will be marked as dormant and some data may be archived. After 36 months (if no balance remains), the account may be closed and non-essential data deleted.

8.3 Closed Accounts

If you close your account, we will:

• Immediately suspend your login access
• Stop marketing communications
• We delete non-essential data within 90 days
• Retain data required for legal obligations (see below)

8.4 Legal retention periods

8.5 Backups and Archives

Data may temporarily remain in backups and archives even after deletion from our production systems. Backups are automatically overwritten after 90 days.

9. Children's Privacy

Aph99 is for adults only. We do not knowingly collect personal information from children under 18 (or 21 in some jurisdictions).

9.1 Age Verification

During registration you must provide your date of birth. We conduct age verification checks and request ID in suspicious cases. If we discover that a minor has created an account, we will immediately close the account and delete all personal information.

9.2 Parental Responsibility

If you are a parent and believe your child has provided us with personal information, please contact [email protected] immediately. We will take priority action to verify and delete the account.

9.3 Third-party websites

Aph99 may contain links to third-party websites (payment processors, game providers). We are not responsible for their privacy practices. We recommend reviewing their privacy policies before visiting third-party sites.

10. Contact and Updates

Aph99 is committed to hearing your privacy questions and concerns. We are always working to improve our practices and maintain compliance with new regulations.

10.1 Contact information

For privacy-related questions, requests, or complaints:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7
• Postal Address: aph99 Data Protection, [Address]

10.2 Policy Updates

We may update this Privacy Policy from time to time to reflect new features, technology, or regulatory changes. In the event of significant changes, we will:

• We will send email notification at least 30 days before changes
• Display a prominent banner on the website
• Send push notifications in the app
• Will update the "Last Updated" date

Continued use of aph99 after changes constitutes your acceptance of the new policy.

10.3 Language

This Privacy Policy is available in multiple languages. In case of any discrepancy, the English version shall prevail.

10.4 Applicable Law

This Privacy Policy is governed by Curacao law and complies with applicable international data protection regulations including GDPR.