ar999 Privacy
Policy

ar999 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every individual who interacts with our platform at ar999.cam. This Privacy Policy ("Policy") describes in clear terms how we collect, use, store, share, and safeguard personal data belonging to registered account holders, prospective users, and visitors to our Platform, particularly those located in Pakistan.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your relationship with ar999. By registering an account on ar999 or continuing to use our Platform after this Policy has been made available to you, you acknowledge that you have read, understood, and consented to the practices described herein.

If you have questions about anything in this Policy, please reach out to our support team at [email protected] before proceeding. We are always happy to clarify our data practices in plain language.

ar999 collects personal data that falls into the following categories. We only collect data that is necessary for the specific purposes described in this Policy and in our Terms and Conditions.

2.1 Identity and Contact Data

• Full legal name as it appears on your national identity document
• Date of birth (used for mandatory age verification — players must be 21 or older)
• National identity number (CNIC or NICOP for Pakistani players)
• Residential address (city, province, Pakistan postal code)
• Email address used at registration
• Pakistani mobile phone number

2.2 Financial Data

• JazzCash or EasyPaisa wallet number associated with your account
• Bank account details for HBL, UBL, Meezan Bank, or Raast-enabled accounts used for deposits or withdrawals
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references
• Account balance and wagering history on the ar999 Platform

2.3 Technical and Usage Data

• IP address and approximate geolocation at time of login
• Device type, operating system version, and browser identifier
• Session duration, pages visited, and in-platform navigation patterns
• Login timestamps and session activity logs

2.4 Communications Data

• Content of support enquiries, complaints, and feedback submitted to ar999
• Records of notifications sent to you (promotional, transactional, or regulatory)
• Preference settings for marketing communications

ar999 collects personal data through the following means:

• Direct provision: Data you actively submit when creating an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, and session activity, collected via server logs, cookies, and similar technologies.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast when you initiate a financial transaction on the ar999 Platform.
• Identity verification partners: Where ar999 uses a third-party KYC service to verify documents submitted during account verification, data is shared with and received from that partner as part of the verification workflow.
• Responsible gaming monitoring: Behavioural data patterns generated through your use of the Platform that may trigger responsible gaming interventions under ar999's internal protocols.

ar999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

Where ar999 relies on your consent as the legal basis for processing (for example, for sending you promotional communications), you have the right to withdraw that consent at any time by updating your account notification preferences or contacting our support team. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.

ar999 uses the personal data collected for the following specific purposes:

• Account operations: Creating, maintaining, and securing your ar999 player account; processing logins; enabling deposits, withdrawals, and wagering activity.
• Identity verification: Confirming that you meet the minimum age requirement of 21 years and that the identity you have provided is genuine, as required under our responsible gaming and anti-fraud obligations.
• Financial transaction processing: Executing PKR deposits and withdrawals through your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast) accurately and securely.
• Fraud prevention and platform security: Detecting and preventing fraudulent activity, multi-accounting, money laundering, bonus abuse, and other prohibited activities described in our Terms and Conditions.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour; applying and enforcing deposit limits, session limits, self-exclusion, and cooling-off periods requested by or applied to account holders.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the ar999 Platform and to improve navigation, game availability, and overall user experience.
• Legal compliance: Fulfilling ar999's obligations under applicable anti-money laundering regulations, data protection obligations, and the requirements of relevant gaming licensing frameworks.
• Marketing communications (with consent): Sending promotional offers, bonus announcements, and ar999 product updates to players who have opted in to receive such communications.

ar999 does not sell your personal data. We share your data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast receive transaction data necessary to process your deposit and withdrawal requests. Each processor operates under its own privacy and data security framework.
• Identity verification providers: Where third-party KYC services are used to authenticate documents submitted during account verification, the minimum necessary identity data is shared with those providers under contractual data processing agreements.
• Technology service providers: Cloud hosting, platform infrastructure, and security monitoring partners who process data on ar999's behalf under strict contractual data processing terms, limiting their use of your data exclusively to providing services to ar999.
• Regulatory and law enforcement authorities: Where ar999 is legally required to disclose personal data to a government authority, financial intelligence unit, or law enforcement body — for example, pursuant to an anti-money laundering investigation — such disclosure will be made in compliance with ar999's legal obligations. ar999 will not notify affected account holders of such disclosures where legally prohibited from doing so.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of ar999's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer where required and where practically possible.

ar999 requires all third parties to whom it discloses personal data to maintain appropriate technical and organisational security measures and to use the data only for the specific, limited purpose for which it was disclosed.

ar999 uses cookies and similar technologies on the Platform to support essential functionality, maintain session security, and gather anonymous usage analytics. The types of cookies used are as follows:

• Strictly necessary cookies: These cookies are essential for the operation of the ar999 Platform. They enable secure login sessions, maintain your account state during a session, and support core platform functions. These cookies cannot be disabled without preventing normal Platform use.
• Analytics cookies: ar999 uses aggregated, anonymised analytics data to understand how players navigate the Platform, which game categories are most visited, and where technical performance issues arise. This data is processed in aggregate form and cannot be used to identify individual players.
• Functional cookies: These cookies remember your language preferences, notification settings, and other personalisation choices to improve your experience on subsequent visits.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats targeting the Platform.

You may manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features.

ar999 retains personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, or for as long as is required by applicable legal, regulatory, or licensing obligations. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account's active status on the ar999 Platform.
• Transaction and financial records: Retained for a minimum of five years following the relevant transaction date, in line with standard anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years from the date of verification, or from the date of account closure, whichever is later.
• Support interaction records: Retained for three years from the date of the interaction.
• Closed account data: Upon account closure, ar999 will anonymise or securely delete personal data that is no longer required, subject to mandatory retention obligations described above.
• Self-excluded account data: The record of a self-exclusion is retained for the full duration of the exclusion period and for a reasonable period thereafter, to prevent inadvertent re-registration.

Where data is retained beyond the period of active account use solely to fulfil legal obligations, it will be held in a restricted, access-controlled data environment and will not be used for any other purpose.

ar999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ar999 Platform, including login sessions, financial transactions, and KYC document uploads.
• Encrypted data storage for all personal data and financial records held in ar999's database infrastructure.
• Role-based access controls limiting staff access to personal data strictly to those who require it for their specific job function.
• Two-factor authentication (2FA) available for all ar999 account holders via their registered Pakistani mobile number, strongly recommended for all active accounts.
• Regular security audits and penetration testing of the ar999 Platform infrastructure conducted by independent security professionals.
• Incident response procedures designed to detect, contain, and notify affected individuals of any personal data breach in a timely manner.

While ar999 takes all reasonable measures to protect your personal data, no online system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your own account credentials and for notifying ar999 promptly if you suspect your account has been compromised.

As a data subject, you hold the following rights with respect to the personal data ar999 holds about you. To exercise any of these rights, contact our support team at [email protected] with your account details and a clear description of your request.

• Right of Access: You have the right to request a copy of the personal data ar999 holds about you and information about how it is being used.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. For basic account details, you may also update this information directly within your ar999 account settings.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that ar999 may be unable to fully comply with erasure requests where retention is required by legal or regulatory obligations, such as anti-money laundering record-keeping requirements.
• Right to Restriction: You may request that ar999 restricts processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where it is based on ar999's legitimate interests, including any profiling based on those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

ar999 will respond to all valid data rights requests within a reasonable timeframe. In certain cases, ar999 may require verification of your identity before processing a data rights request to protect against fraudulent claims.

The ar999 Platform is strictly intended for adults aged 21 and over. ar999 does not knowingly collect personal data from individuals under the age of 21. If ar999 becomes aware that it has inadvertently collected personal data from a person under this age threshold, that data will be permanently deleted and the associated account will be closed immediately.

If you are a parent or guardian and believe that a minor under your care has registered on the ar999 Platform or has submitted personal data to ar999, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

ar999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where material changes are made to this Policy, ar999 will notify active account holders via their registered email address or through a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Policy will be updated to reflect when the most recent revision was made. ar999 recommends reviewing this Policy periodically. Your continued use of the ar999 Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

Historical versions of this Privacy Policy are available upon request by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ar999 handles your personal data, please contact us using the details below. Our support team handles all data-related enquiries and will respond within a reasonable timeframe.

Email: [email protected]

Please include your registered account username or registered email address in all data-related enquiries so that we can locate your account records efficiently. For formal data rights requests, ar999 may require additional identity verification before processing your request.

ar999 also encourages players to review our related policies — the Terms & Conditions and Responsible Gaming Policy — for a complete picture of how we operate and how we protect our players across all aspects of the Platform.