This Privacy Policy explains how ar999 collects, uses, stores, shares, and protects your personal information when you use the ar999 Platform. We are committed to handling your data with transparency, security, and respect — because trust is the foundation of everything ar999 does.
Summary for Pakistani Players: ar999 collects only the data necessary to provide you with a secure, personalised gaming experience. We do not sell your personal data to third parties. Your Pakistani Rupee transactions, JazzCash / EasyPaisa details, CNIC information, and gaming history are protected by 256-bit SSL encryption and stored on secured, access-controlled servers. This Policy tells you exactly what we collect, why, and what rights you have.
1.1 This Privacy Policy ("Policy") applies to all personal data collected and processed by ar999 in connection with your use of the ar999 Platform, available at ar999.biz, including all associated subdomains, mobile-optimised interfaces, live chat services, email communications, and any other services offered by ar999.
1.2 By registering an Account on ar999 or by using any ar999 service, you acknowledge that you have read, understood, and accepted the practices described in this Policy. This Policy should be read alongside the ar999 Terms & Conditions and Responsible Gaming Policy.
1.3 ar999 processes personal data as a Data Controller as defined under applicable international data protection standards. Where ar999 engages third-party processors to handle data on its behalf — such as payment processors, identity verification providers, and game studios — those processors are bound by appropriate data processing agreements requiring equivalent standards of data protection.
1.4 This Policy is written in English and, where translations are provided for convenience, the English version shall be the authoritative legal text in all matters of interpretation or dispute.
2.1 The Data Controller responsible for your personal data is ar999, operating the Platform at ar999.biz. ar999 determines the purposes and means of processing your personal data and is accountable for ensuring that this processing complies with applicable data protection obligations under ar999's operating licence and international best practice standards.
2.2 For all data protection enquiries, access requests, or complaints, please contact ar999 using the details provided in Section 16 of this Policy. ar999 acknowledges data subject requests within 5 business days and aims to resolve them within 30 calendar days.
ar999 collects the following categories of personal data. We collect only the minimum data necessary for the stated purpose — no more.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, photograph | KYC verification, age confirmation (21+), fraud prevention |
| Contact Data | Mobile number, email address, city of residence | Account communication, OTP delivery, support |
| Financial Data | JazzCash / EasyPaisa number, bank account details, transaction history | Deposits, withdrawals, fraud detection, AML compliance |
| Gaming Data | Bet history, game session records, win/loss records, stake amounts | Game settlement, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser version, operating system, session logs | Security, fraud detection, platform optimisation |
| Usage Data | Pages visited, features used, time on Platform, click-through paths | Platform improvement, personalisation, analytics |
| Communications Data | Live chat transcripts, email correspondence, support ticket records | Support quality, dispute resolution, training |
| Marketing Preferences | Email opt-in status, promotional response history, notification preferences | Direct marketing (where consented), promotion targeting |
3.1 ar999 does not collect or store biometric data beyond what is voluntarily submitted for identity verification purposes (e.g., a CNIC photograph). ar999 does not collect sensitive personal data relating to health, religion, or political views, and has no legitimate purpose requiring such data.
ar999 collects personal data through the following methods:
ar999 processes your personal data for the following specific purposes:
6.1 ar999 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:
ar999 does not sell your personal data to any third party for commercial or marketing purposes. Data sharing is limited to what is operationally necessary and legally required.
7.1 ar999 may share your personal data with the following categories of third parties, strictly limited to the purpose described:
7.2 All third-party processors engaged by ar999 are subject to written data processing agreements that require them to process personal data only for the specified purpose, implement appropriate security measures, and comply with applicable data protection standards.
8.1 ar999 operates an international platform, and some of your personal data may be processed by ar999's service providers in countries outside Pakistan. Where data is transferred internationally, ar999 ensures that appropriate safeguards are in place — including standard contractual clauses, binding corporate rules, or transfer to jurisdictions with adequate data protection frameworks — to protect your data to an equivalent standard regardless of where it is processed.
8.2 ar999's primary data infrastructure is hosted on servers that meet international ISO 27001 security standards. Access to personal data is restricted on a need-to-know basis and subject to multi-factor authentication requirements for all ar999 personnel.
9.1 ar999 retains your personal data for as long as your Account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specific retention periods are as follows:
9.2 At the end of the applicable retention period, ar999 will securely delete or irreversibly anonymise your personal data. Where anonymisation is technically feasible, ar999 may retain anonymised usage and analytics data indefinitely for platform development purposes.
10.1 ar999 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate and improve the Platform, deliver a personalised experience, and analyse Platform usage. The following table describes the categories of cookies used on ar999:
10.2 You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect the functionality of the ar999 Platform, including the ability to log in and access your Account. ar999 does not use cookies to track your activity on websites outside of ar999.biz.
11.1 ar999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
11.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ar999 will notify you without undue delay via your registered contact details and take immediate remedial action to contain the breach and minimise harm.
11.3 While ar999 takes every reasonable precaution to secure your data, no internet transmission is 100% secure. You are responsible for keeping your ar999 login credentials confidential and for notifying ar999 Support immediately if you suspect unauthorised access to your Account.
As a data subject, you have the following rights with respect to your personal data held by ar999. To exercise any of these rights, contact ar999 Support as described in Section 16.
You have the right to request a copy of the personal data ar999 holds about you, including the categories of data collected, the purposes of processing, and how long it will be retained. ar999 will provide this information in a readable format within 30 days of your request.
If any personal data ar999 holds about you is inaccurate or incomplete, you have the right to request correction. Most Account details — such as contact information — can be updated directly through your ar999 Account settings.
You may request deletion of your personal data where ar999 no longer has a legal basis to retain it. Note that ar999 is required by its regulatory obligations to retain certain data (such as financial transaction records) for minimum periods even after Account closure.
You may request that ar999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified following a rectification request.
Where ar999 processes your data on the basis of your consent or a contract with you, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transfer it to another service provider.
You have the right to object to ar999's processing of your personal data where ar999 relies on legitimate interests as the legal basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
Where ar999 processes your data on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal. Consent withdrawal can be done through your ar999 Account preferences or by contacting ar999 Support.
21+ Strictly Enforced: The ar999 Platform is not directed at individuals under the age of 21. ar999 does not knowingly collect personal data from anyone under 21 years of age. If ar999 discovers that it has collected data from a minor, that data will be deleted immediately and the Account permanently closed.
13.1 ar999 employs age verification as a mandatory step in the Account registration process and reserves the right to request documentary evidence of age — such as a Pakistani CNIC — at any stage of the Member relationship. Any account found to be held by an individual under 21 years of age will be immediately and permanently suspended and all associated funds forfeited in accordance with the ar999 Terms & Conditions.
13.2 Parents and guardians who believe their child may have accessed ar999 are encouraged to contact ar999 Support immediately. ar999 will investigate and take appropriate action, including data deletion, without delay.
14.1 ar999 may send you marketing communications about promotions, bonuses, new games, and platform updates where you have explicitly opted in to receive such communications at Account registration or subsequently through your Account preferences.
14.2 You may opt out of marketing communications at any time by: (a) updating your notification preferences in your ar999 Account settings; or (b) contacting ar999 Support via live chat or email. Opt-out requests will be processed within 5 business days.
14.3 Opting out of marketing communications does not affect the delivery of transactional and operational communications — such as deposit confirmations, security alerts, and Account notifications — which ar999 is required to send as part of its contractual obligations to you as a Member.
15.1 ar999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or Platform functionality. Where changes are material, ar999 will notify registered Members via the Platform or their registered email address with no less than 7 days' advance notice before the revised Policy takes effect.
15.2 The effective date at the top of this Policy indicates when it was last revised. Your continued use of the ar999 Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept material changes to this Policy, you should close your Account before the revised Policy takes effect.
15.3 ar999 maintains an archive of previous versions of this Privacy Policy, available upon request from ar999 Support, so that Members may compare current and historical data processing practices.
16.1 For all privacy-related enquiries, data subject access requests, or complaints regarding ar999's handling of your personal data, please contact the ar999 Data Protection team through the following channels:
16.2 If you are dissatisfied with ar999's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the relevant jurisdiction under ar999's operating licence. ar999 Support can provide the appropriate contact details upon request.
16.3 ar999 takes all privacy complaints seriously. Every complaint is logged, investigated impartially, and responded to in writing with a clear explanation of any remedial action taken or the reasons why ar999 considers its practices to be compliant.
Six key commitments that define ar999's approach to Member data — plain language, real action.
Every data transmission between your device and ar999's servers is protected by the same 256-bit SSL encryption standard used by Pakistan's major commercial banks including HBL and Meezan Bank. Your CNIC data, JazzCash number, and gaming history travel encrypted at all times.
ar999 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing is strictly limited to operational necessities — payment processing, identity verification, and regulatory compliance — under binding data processing agreements.
ar999 follows a data minimisation principle — we collect only what is genuinely necessary for your account, your transactions, and our regulatory obligations. We do not collect data on your religion, health status, political views, or any other sensitive category not relevant to gaming.
You have the right to access, correct, delete, and export your ar999 data at any time. Most preferences — including marketing opt-outs and cookie settings — can be managed directly through your ar999 Account without needing to contact support.
ar999 does not hold your data indefinitely. We publish specific retention periods for every category of data we collect, and we delete or anonymise data securely when those periods expire. No data is kept "just in case" without a documented legal justification.
If ar999 ever suffers a personal data breach that poses a risk to your rights and freedoms, we are committed to notifying you directly — via your registered mobile number or email — without undue delay, alongside immediate remedial action to contain and resolve the incident.
Our 24/7 support team handles data requests in English and Urdu. Contact us through live chat for the fastest response — average reply time under 2 minutes.