ar999com Privacy Policy — Your Data, Your Rights

ar999com is an online gaming platform operated specifically for Pakistani players, accessible at ar999com.app. When this Privacy Policy refers to "ar999com", "we", "us", or "our", it refers to the operator of the ar999com platform and all services provided through it.

As the data controller for your personal information, ar999com is responsible for determining how and why your data is processed. This Privacy Policy explains those decisions in full, and describes the steps we take to protect your information throughout every stage of your relationship with ar999com — from the moment you register an account to the day you decide to close it.

This policy applies to all Pakistani players who access ar999com through any device — mobile, tablet, or desktop — and covers all services provided by ar999com including gaming, promotions, payment processing, and customer support interactions.

ar999com collects personal data in three ways: information you provide directly, information generated by your use of the platform, and — in limited circumstances — information from third-party verification services. Here is a complete breakdown of each category:

Information you provide directly:

• Registration data: Your full name, date of birth, mobile number, and the password you create
• Identity verification: When required for high-value withdrawals or regulatory compliance, we may request a government-issued CNIC copy or equivalent document
• Payment information: Your Easypaisa or JazzCash mobile number, NayaPay or SadaPay account details, bank account number for IBFT, or masked card details for Visa/Mastercard transactions. ar999com does not store full card numbers.
• Support communications: The content of messages you send to the ar999com support team, including any attachments you voluntarily share
• Promotional participation: Information you provide when claiming bonuses, participating in competitions, or using the Refer a Friend programme

Information generated automatically:

• Device and technical data: IP address, device type, operating system version, browser type, and mobile network information
• Game and transaction history: Records of every game played on ar999com, bets placed, outcomes, deposits, and withdrawals — kept as required by regulatory and audit obligations
• Session data: Login times, session duration, pages visited within the ar999com platform, and navigation patterns
• Cookie and tracking data: As detailed in the Cookies section below

ar999com uses the personal data it collects for specific, defined purposes. We do not use your data for purposes beyond what is described here without obtaining fresh consent or notifying you in advance:

• Account operation: Processing your registration, maintaining your playing balance, processing deposits and withdrawals to your Easypaisa or JazzCash wallet, and providing customer support
• Age and identity verification: Confirming that all players meet the 18+ age requirement and that withdrawal requests are made by the verified account holder
• Fraud and security monitoring: Detecting unusual login patterns, payment anomalies, multi-accounting attempts, and other prohibited activities that could harm ar999com or other players
• Regulatory compliance: Meeting anti-money laundering (AML) obligations, including maintaining transaction records and reporting requirements as applicable
• Responsible gaming: Using session and wagering data to identify patterns that may indicate problem gambling and proactively reach out with support information where appropriate
• Service improvement: Analysing aggregated, anonymised usage patterns to improve the ar999com platform, game selection, and user experience — this analysis does not identify individual players
• Marketing communications: Sending you information about ar999com promotions, bonuses, and new games — only if you have not opted out and subject to your marketing preferences

ar999com processes your personal data under the following legal bases, depending on the purpose of the processing:

ar999com does not sell your personal data. We share it only in the following limited circumstances, and only to the extent necessary for each stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors, and Visa/Mastercard acquiring banks receive only the data needed to execute your specific transaction. They operate under their own privacy policies and are bound by confidentiality obligations.
• Identity verification services: Where CNIC or document verification is required, documents are shared with our verified identity verification partner solely for the purpose of confirming your identity. Verification results are returned to ar999com; document copies are not retained by the verification provider beyond their stated retention period.
• Game software providers: Our game providers such as JILI Games receive aggregated game performance data but do not receive your personal identifiable information. Your playing history is held by ar999com, not by game providers.
• Regulatory and legal authorities: ar999com will share data with law enforcement, regulatory bodies, or courts when legally required to do so by a valid legal instrument. We will notify you of such disclosure where we are legally permitted to do so.
• Internal group companies: ar999com may share data with closely related group entities that provide platform infrastructure services, subject to equivalent data protection obligations.

ar999com retains your personal data for as long as your account is active, plus an additional period following account closure as required by applicable regulations. Specific retention guidelines are as follows:

• Account and identity data: Retained for the duration of account activity plus a minimum of 5 years following account closure, as required by standard anti-money laundering record-keeping obligations
• Financial transaction records: Retained for a minimum of 5 years following the transaction date for audit and regulatory compliance purposes
• Game history: Retained for a minimum of 3 years to support dispute resolution and responsible gaming monitoring functions
• Support communications: Retained for 2 years following the resolution of the relevant query or complaint
• Marketing consent records: Retained for 3 years following the last marketing interaction or consent update

After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual. ar999com conducts regular data audits to ensure that personal data is not retained beyond its justified retention period.

As an ar999com player, you have meaningful rights over your personal data. Each of these rights can be exercised by contacting the support team as described in Section 13:

ar999com has implemented a multi-layer security architecture to protect your personal data from unauthorised access, accidental loss, and deliberate breach:

• Transport encryption: All data transmitted between your device and ar999com's servers uses TLS 1.3 (256-bit SSL). The ar999com website enforces HTTPS on every page with HSTS headers preventing protocol downgrade attacks.
• At-rest encryption: Sensitive data stored on ar999com's servers — including payment details and identity information — is encrypted at rest using industry-standard algorithms with keys managed under strict access control policies.
• Access controls: ar999com employee access to personal data is strictly limited by role. Support agents can access only what is needed to resolve your query. Access logs are maintained and reviewed regularly.
• Fraud detection: Real-time monitoring systems analyse login patterns, payment behaviour, and game activity to detect anomalies that may indicate account compromise or fraudulent activity.
• Penetration testing: ar999com's systems undergo regular security assessments by qualified third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: ar999com maintains a documented data breach response procedure. In the event of a breach that affects your personal data, you will be notified promptly where required by applicable law.

ar999com uses cookies and similar tracking technologies to provide a functional, secure, and personalised gaming experience. Here is a complete breakdown of the cookie categories in use on ar999com:

You can manage optional cookie preferences through the cookie settings panel accessible from the bottom of any ar999com page. Disabling optional cookies will not affect your ability to play games, make deposits, or withdraw winnings.

ar999com is strictly an 18+ platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 18. Age verification is part of the registration process and may be reinforced at key points such as first withdrawal.

If ar999com becomes aware that personal data has been collected from someone under 18 — through a complaint, a verification failure, or any other means — that account will be immediately closed, the data will be deleted, and any funds will be returned to the payment source. ar999com does not retain data from under-18 account closures beyond what is necessary for the return of funds.

The ar999com platform integrates with a small number of third-party services to deliver payment processing, identity verification, and game content. ar999com selects these partners carefully and requires them to maintain data protection standards equivalent to our own.

These third-party integrations include:

• Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors: Process PKR transactions. Receive only the payment data necessary for each transaction.
• JILI Games and other game providers: Deliver game content. Do not receive personal identifiable information about individual ar999com players.
• Identity verification partner: Processes CNIC documents when required. Operates under strict confidentiality obligations and does not retain document images beyond the verification process.
• Platform infrastructure provider: Provides server hosting and CDN services. Processes data under a data processing agreement with ar999com that prohibits any independent use of player data.

ar999com is not responsible for the privacy practices of third-party websites that may be linked to from general internet searches for the brand. The ar999com Privacy Policy applies only to ar999com.app and the services operated directly by ar999com.

ar999com reviews this Privacy Policy regularly and updates it when our practices change, when new services are introduced, or when applicable regulations are updated. The effective date at the top of this page always reflects the most recent version.

When changes are made that materially affect how your data is used or your privacy rights, ar999com will notify you directly via your registered mobile number or email address at least 7 days before the changes take effect. For minor clarifications that do not affect the substance of data processing, the policy may be updated without advance individual notification — though the updated version will always be published here promptly.

Continued use of ar999com after the effective date of any Privacy Policy update constitutes acceptance of the revised terms. If you do not accept the changes, you should close your account and request data deletion before the effective date.

For all privacy-related queries, data rights requests, or concerns about how ar999com handles your personal information, please contact us using the details below:

• Email: support@ar999com.app — use subject line "Privacy Request" for data rights enquiries
• Live Chat: Available 24/7 from within your ar999com account dashboard — for urgent account security matters

ar999com aims to acknowledge all privacy requests within 24 hours and to resolve them fully within 30 days. For complex requests — such as full data export or cross-system deletion — we may require additional time, but we will always communicate the expected timeline upfront.

For general questions about these terms, you can also visit our FAQ page or review the Terms and Conditions which cover related platform rules in detail.