a2game Privacy Policy

This Privacy Policy ("Policy") is issued by a2game ("we", "us", "our") and applies to all personal data collected and processed in connection with the operation of the online gaming platform available at a2game.ws ("the Platform"). It covers all players who register an account, visit the Platform without registering, or interact with a2game through any channel including live chat, email, and in-platform support.

This Policy should be read alongside the a2game Terms & Conditions and the a2game Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with a2game as a player on the Platform.

By registering an account on a2game.ws or by using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

a2game is committed to processing personal data lawfully, fairly, and transparently in accordance with applicable data protection legislation and the requirements of its international online gaming operating licence. This Policy reflects those obligations and is reviewed and updated whenever material changes to our data practices occur.

For the purposes of this Privacy Policy, a2game is the data controller — meaning a2game is the entity that determines the purposes and means of processing your personal data. a2game operates the Platform at a2game.ws and is responsible for ensuring that personal data is handled in compliance with this Policy and applicable data protection law.

If you have any questions about how a2game processes your personal data, or if you wish to exercise any of your rights described in Section 11 of this Policy, you may contact the a2game Data Protection contact point directly:

• Email: [email protected] (mark the subject line: "Data Protection Request")
• Live Chat: Available 24/7 from within your a2game account dashboard
• Response Time: All data protection enquiries are acknowledged within 72 hours and substantively addressed within 30 calendar days

a2game collects the following categories of personal data from players. The specific data collected in each category depends on the services you use and the verification stage your account has reached.

a2game does not collect sensitive personal data — such as health information, religious beliefs, or biometric data used for unique identification — unless this is strictly required for responsible gaming assessments or regulatory compliance, in which case explicit consent will be obtained.

a2game collects personal data through the following channels:

• Direct collection at registration: When you create your a2game account, you provide your name, email address, mobile number, date of birth, and city of residence directly through the registration form.
• Identity verification submissions: When you submit your CNIC, address documentation, or selfie as part of the Know Your Customer (KYC) verification process required before your first withdrawal is processed.
• Payment transactions: When you make a deposit or withdrawal via EasyPaisa, JazzCash, HBL, UBL, or Meezan Bank, transaction reference data and payment account identifiers are recorded to your account ledger.
• Platform usage: Automatically, as you navigate the Platform — including pages visited, games played, bets placed, session durations, and device and IP information logged by our servers and analytics systems.
• Support interactions: When you contact a2game via live chat or email, the content of those interactions is recorded to your account profile for quality assurance and dispute resolution purposes.
• Third-party verification services: Where a2game uses third-party identity verification or AML screening providers, those providers may return additional data points about you (such as PEP status or sanctions list hits) which are then associated with your compliance record.

a2game processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contract performance: Processing necessary to create and operate your account, process your PKR deposits and withdrawals, settle bets, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) laws, know-your-customer (KYC) regulations, gaming licence conditions, tax reporting requirements, and law enforcement requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, product analytics, and improving the overall quality of the a2game platform — where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications (SMS, email promotions, bonus notifications) where you have actively opted in. Consent can be withdrawn at any time.

The specific purposes for which a2game processes your data include: account registration and management; age and identity verification; payment processing and fraud prevention; responsible gaming limit enforcement and problem gambling detection; customer support and dispute resolution; regulatory compliance and AML reporting; platform security and abuse prevention; and — where consent has been given — personalised promotions and marketing communications.

a2game does not sell, rent, or trade your personal data to third parties. We share your data only where it is necessary to operate the Platform, comply with legal obligations, or protect the rights and safety of a2game, its players, and the public. The categories of third parties with whom a2game may share your data are as follows:

• Identity verification providers: Third-party KYC and AML screening services used to verify your CNIC, confirm your age and identity, and screen against sanctions lists and PEP databases. These providers process your data solely for verification purposes under binding data processing agreements.
• Payment processors: EasyPaisa, JazzCash, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposits and withdrawals in PKR. Each payment provider operates under its own privacy policy and is independently responsible for data it processes as a data controller.
• Game content providers: Third-party casino game suppliers and live casino studios may receive your anonymised player session data (game round IDs, bet amounts, outcomes) for game integrity and RNG certification purposes. These providers do not receive your identity data.
• Regulatory authorities and law enforcement: a2game may be required to disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required by applicable law or by the conditions of a2game's operating licence.
• Fraud prevention networks: In cases of suspected fraud, bonus abuse, or money laundering, a2game may share data with industry fraud prevention networks to protect the integrity of the broader online gaming ecosystem.
• Professional advisers: Legal, accounting, and auditing firms engaged by a2game may access personal data to the extent necessary for their professional services, subject to strict confidentiality obligations.

Given the importance of EasyPaisa and JazzCash as the primary deposit and withdrawal methods for Pakistani players on a2game, this section provides additional clarity on how payment-related personal data is handled.

When you initiate a deposit via EasyPaisa or JazzCash, you are redirected to or interact with that provider's own payment interface. The mobile wallet PIN, MPIN, or OTP you enter to authorise the transaction is entered directly into EasyPaisa's or JazzCash's own secure environment — a2game never receives, stores, or processes your mobile wallet PIN or MPIN.

What a2game does receive from the payment provider is a transaction confirmation containing: the transaction reference number, the mobile number associated with the payment account (partially masked), the amount in PKR, and the transaction timestamp. This information is recorded against your a2game account to confirm the deposit, update your PKR balance, and maintain an accurate transaction ledger for regulatory compliance.

For withdrawals, a2game transmits your registered EasyPaisa or JazzCash mobile number and the withdrawal amount in PKR to the payment provider to initiate the transfer. a2game verifies that the mobile number receiving the withdrawal matches the mobile number associated with the payment method used for the most recent qualifying deposit, in line with our AML obligations.

Bank transfer data (IBAN details for HBL, UBL, and Meezan Bank) is stored in encrypted form and used exclusively for processing withdrawal requests to those accounts. a2game does not store full payment card numbers — card-based payments, if offered, are processed by PCI-DSS certified payment gateways that tokenise card data before it reaches a2game's systems.

a2game uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device when you visit a2game.ws. They serve several important functions:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery (CSRF), and cookies that remember your language and currency preferences. Essential cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to understand how players navigate and use the Platform — for example, which game categories are most visited, where players drop off during the registration flow, and how long sessions typically last. This data is aggregated and used to improve the Platform. Analytics cookies are subject to your consent preferences.
• Functional cookies: Store preferences you have set, such as your responsible gaming session time limit reminders or notification preferences, so that these settings persist across sessions.
• Fraud prevention cookies: Used by a2game's fraud detection systems to identify unusual patterns of behaviour that may indicate account sharing, bot activity, or other prohibited conduct.

a2game does not use third-party advertising cookies or behavioural retargeting cookies. We do not allow third-party advertising networks to place cookies on a2game.ws.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will impair your ability to log in and use the Platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

a2game retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

a2game implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• TLS encryption in transit: All data transmitted between your browser or app and a2game.ws is encrypted using TLS 1.2 or higher. The a2game.ws domain enforces HTTPS at all times.
• Encryption at rest: Personal data stored in a2game's databases is encrypted at rest using AES-256 encryption. This includes identity documents, payment account references, and account credentials.
• Password hashing: Player passwords are never stored in plaintext. They are hashed using a strong one-way cryptographic algorithm with per-user salting, meaning even a2game personnel cannot retrieve your actual password.
• Access controls: Access to personal data within a2game's internal systems is restricted to personnel who require it to perform their specific job function. All internal access is logged and subject to regular audit review.
• Two-factor authentication (2FA): Available to all players on their accounts. Players who enable 2FA significantly reduce the risk of unauthorised account access.
• Penetration testing: a2game's platform undergoes regular third-party security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, a2game will notify affected players and relevant authorities within the timeframes required by applicable data protection law.

As a player on the a2game Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Protection Request", including your account username and a description of your request:

• Right of Access: You may request a copy of all personal data a2game holds about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Basic profile information (such as email address or phone number) can be updated directly through your account settings dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Note that this right is subject to overriding legal obligations — a2game is required to retain certain data (such as KYC records and transaction history) for five years following account closure in compliance with AML regulations. Where erasure is possible, we will carry it out promptly.
• Right to Restriction of Processing: In certain circumstances (such as where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction to deletion), you may request that we restrict processing of your data while the matter is resolved.
• Right to Data Portability: For data processed on the basis of your consent or contract performance, you may request a machine-readable export of your data, which you can then transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests (including profiling for responsible gaming purposes) where you believe your individual rights and freedoms override a2game's legitimate interest. You may also withdraw marketing consent at any time.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

All data protection requests will be acknowledged within 72 hours. We may ask you to verify your identity before processing your request to ensure we are responding to the correct individual. Where requests are complex or numerous, the 30-day response period may be extended by up to an additional 60 days, in which case we will notify you promptly.

The a2game Platform is strictly restricted to individuals aged 21 years and above. a2game does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step in the account registration and withdrawal process — all players are required to submit a valid Pakistani CNIC confirming their date of birth before their first withdrawal is processed.

Where a2game discovers or has reasonable grounds to believe that a player's account belongs to an individual under 21 years of age, the account will be immediately suspended, all gaming activity will be reversed where possible, and the account balance will be forfeited in accordance with applicable regulations and a2game's Terms & Conditions. Any personal data collected in connection with an under-age account will be retained only for the minimum period necessary to investigate and report the incident, after which it will be securely deleted.

Parents and guardians who believe that a minor has accessed or registered on the a2game Platform should contact a2game support immediately at [email protected]. a2game will investigate and take appropriate action within 24 hours of notification.

a2game may send you marketing communications — including promotional bonus offers, PSL cricket betting promotions, slot tournament announcements, and deposit incentive notifications — via email and SMS, but only where you have actively opted in to receive such communications during registration or at a later point through your account settings.

a2game will never send unsolicited marketing communications to players who have not opted in. All marketing emails and SMS messages from a2game include a clear opt-out mechanism. You can unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any a2game marketing email
• Updating your communication preferences in your a2game account settings dashboard
• Contacting a2game support via live chat or email with an opt-out request

Opting out of marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and identity verification requests — which are sent on the basis of contract performance and cannot be disabled while your account remains active.

a2game does not share your contact information with third-party marketers for the purpose of sending you independent marketing from those third parties.

As an internationally licensed online gaming operator, a2game's platform infrastructure, third-party service providers, and regulatory reporting obligations may involve the transfer of personal data to jurisdictions outside Pakistan. Where such transfers occur, a2game implements appropriate safeguards to ensure that your personal data receives a level of protection consistent with this Privacy Policy and applicable data protection standards.

Safeguards used for international data transfers include:

• Standard contractual clauses (SCCs) or equivalent binding data transfer agreements incorporated into contracts with third-party processors located in third countries
• Transfer to processors in jurisdictions that maintain adequate data protection frameworks as recognised by relevant regulatory guidance
• Binding corporate rules where applicable within a2game's corporate group

You may request details of the specific safeguards applied to international transfers of your personal data by contacting [email protected] with the subject line "International Transfer Enquiry".

a2game reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to applicable data protection legislation, changes to a2game's data processing practices, new services or features introduced on the Platform, or feedback received from players or regulators.

When material changes are made to this Policy — meaning changes that affect your rights or the way a2game processes your personal data in a significant way — a2game will notify registered players via email and by posting a prominent notice on the Platform homepage. The "Last Updated" date at the top of this Policy will be revised with every update.

For minor or non-material changes (such as typographical corrections or clarifications that do not affect the substance of how data is processed), a2game will update the Policy without individual notification but will still revise the "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed of how a2game is protecting your information.

Your continued use of the a2game Platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any changes to this Policy, you should stop using the Platform and close your account.

If you have any questions, concerns, or complaints about this Privacy Policy or about how a2game processes your personal data, please reach out to our support team using the contact details below. We take all privacy enquiries seriously and are committed to resolving your concerns promptly and transparently.

• Support Email: [email protected] (subject: "Privacy Policy Enquiry" or "Data Protection Request")
• Live Chat: Available 24/7 in English and Urdu from within your a2game account dashboard
• Response Time: All enquiries acknowledged within 72 hours; substantive responses within 30 calendar days

If you have submitted a data protection complaint to a2game and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to the regulatory body that oversees a2game's operating licence. a2game's licensing authority contact details are available upon request.