ar999 Privacy Policy – How We Handle Your Data

1. Who We Are

ar999 operates the online sports betting and casino platform accessible at ar999.club (the "Platform"). ar999 is the data controller responsible for your personal data collected through the Platform. References to "ar999", "we", "us", or "our" throughout this Privacy Policy all refer to the ar999 operating entity.

If you have any questions about this Privacy Policy or how ar999 handles your personal data, you may contact our data privacy team at: [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

ar999 collects personal data from you in the following ways and categories:

Data You Provide Voluntarily: ar999 only collects data that is necessary for the purposes outlined in this Policy. Providing inaccurate data at registration constitutes a breach of ar999's Terms & Conditions.

3. How ar999 Uses Your Personal Data

ar999 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your ar999 account, processing login authentication, and enabling access to all Platform features.
• Payment Processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT. Financial data is shared with payment processors only to the extent necessary to complete transactions.
• KYC & Compliance: Verifying your identity and age (18+), complying with anti-money laundering (AML) obligations, and fulfilling any mandatory regulatory reporting requirements.
• Service Delivery: Providing cricket betting markets, PSL match-centre data, casino and slot games, live dealer services, and customer support.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, account takeovers, and violations of ar999's Terms & Conditions. Technical data (IP, device fingerprint) is used for security monitoring.
• Responsible Gaming: Monitoring account usage patterns to identify problem gambling indicators and to enforce self-exclusion, deposit limits, and cooling-off periods that you have set or that ar999 may apply under its responsible gaming policy.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal processing updates), security alerts, and — where you have opted in — promotional offers and bonus notifications.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the ar999 Platform experience for all Pakistani players.

4. Legal Basis for Processing

ar999 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the agreement between you and ar999 — account creation, payment processing, bet settlement, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC verification requirements, and mandatory record-keeping obligations.
• Legitimate Interests: Processing necessary for ar999's legitimate business interests — fraud prevention, platform security, responsible gaming enforcement, and service improvement — provided those interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, which requires your explicit opt-in consent and which you may withdraw at any time without affecting your account.

5. Data Sharing & Third Parties

5.1 Service Providers. ar999 shares personal data with carefully selected third-party service providers who assist in operating the Platform. These include: payment processors (for JazzCash, Easypaisa, and bank transfer services); identity verification providers (for KYC document review); game content suppliers (Pragmatic Play, Evolution Gaming, etc.); and cloud infrastructure providers for secure data hosting. All service providers are contractually bound to process data only on ar999's instructions and to maintain appropriate security standards.

5.2 Regulatory & Legal Disclosure. ar999 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, a valid legal order, or to protect ar999's legal rights in a dispute.

5.3 No Data Sales. ar999 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or any entity for commercial purposes unrelated to the operation of the ar999 Platform.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of assets involving ar999, your personal data may be transferred to the successor entity. You will be notified of any such transfer that materially affects how your data is handled.

6. KYC & Anti-Money Laundering Data

ar999 is required to collect and retain identity verification data as part of its KYC and AML compliance programme. This includes copies of your CNIC or passport, proof of address, and in certain cases, proof of source of funds.

KYC documents are stored in encrypted form. Access is restricted to ar999 compliance personnel and authorised identity verification service providers. KYC data is retained for the minimum period required by applicable AML regulations, which may extend beyond the closure of your ar999 account.

ar999 may be legally obligated to file Suspicious Transaction Reports (STRs) with relevant financial intelligence authorities. Such reporting obligations override normal data confidentiality — ar999 may not be able to notify you when such a report has been filed.

7. Cookies & Tracking Technologies

ar999 uses the following categories of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies: Required for core Platform functionality including login session management, security tokens, and load balancing. These cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences such as language settings and last-played games. Improves your experience across sessions.
• Analytics Cookies: Collect anonymised information about how players navigate the Platform — pages visited, time on page, errors encountered. This data helps ar999 improve the Platform. No personally identifiable information is included in analytics data.
• Session Security Tokens: Short-lived tokens used to verify that requests originate from your authenticated session. Expire automatically on logout or session timeout.

ar999 does not use advertising cookies or share cookie data with third-party advertisers for retargeting purposes.

8. Data Retention

ar999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by law.

• Active Account Data: Retained for the duration of your account and for a period after closure as required by applicable regulations (typically 5–7 years for financial and AML records).
• KYC Documents: Retained for the minimum period mandated by applicable AML laws, typically 5 years from the date of the last transaction or account closure, whichever is later.
• Support Communications: Retained for up to 3 years from the date of last communication, or longer if relevant to an ongoing dispute or legal matter.
• Technical & Log Data: Typically retained for up to 12 months for security monitoring purposes, then anonymised or deleted.

When retention periods expire, ar999 securely deletes or anonymises your personal data.

9. Data Security

ar999 implements technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• TLS/SSL encryption for all data transmitted between your device and ar999 servers
• AES-256 encryption for sensitive data stored at rest
• Industry-standard password hashing (bcrypt/Argon2) — ar999 staff cannot retrieve or view your plaintext password
• Role-based access controls limiting which staff can access which categories of personal data
• Regular third-party penetration testing and security audits
• Multi-factor authentication available for all ar999 accounts (strongly recommended)
• Continuous anomaly detection monitoring for unusual login and transaction patterns

In the event of a data breach that poses a risk to your rights and freedoms, ar999 will notify affected Players without undue delay and in accordance with applicable data breach notification requirements.

10. Your Data Rights

Depending on applicable law, you may have the following rights in relation to your personal data held by ar999:

To exercise any of these rights, contact ar999 support. ar999 will respond to verified requests within 30 days. Identity verification will be required before processing any data access or deletion request.

11. Children's Privacy

ar999 is strictly an 18+ platform. ar999 does not knowingly collect personal data from individuals under the age of 18. If ar999 becomes aware that personal data has been collected from a minor, the account will be immediately closed, all associated data deleted (subject to mandatory AML retention requirements), and any funds returned to the originating payment method.

If you have reason to believe that a minor has registered an ar999 account, please notify ar999 support immediately.

12. International Data Transfers

ar999's data infrastructure may involve servers or service providers located outside Pakistan. Where personal data is transferred internationally, ar999 ensures appropriate safeguards are in place — including contractual clauses, encryption, and access controls — to protect your data to a standard equivalent to that described in this Policy regardless of where it is processed.

13. Changes to This Privacy Policy

ar999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered Players via email or an on-platform notification before taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Your continued use of the ar999 Platform after any update constitutes your acknowledgement of the revised Policy.

14. Contact Us

For any privacy-related questions, data rights requests, or concerns about how ar999 handles your personal data, please contact the ar999 data privacy team:

Email: [email protected] (plain text — not a clickable link)

ar999 will acknowledge privacy enquiries within 5 business days and aims to resolve all data rights requests within 30 calendar days. If you are not satisfied with ar999's response to a privacy concern, you may have the right to raise a complaint with a relevant data protection supervisory authority in your jurisdiction.