At ar999, every Pakistani player who entrusts us with their personal information deserves to know exactly how that data is collected, why it is used, who it is shared with, and how long it is kept. This Privacy Policy is our transparent, binding commitment to protecting your data in line with international data protection standards — no hidden clauses, no vague language.
ar999 ("we", "us", "our") operates the online gaming and sports betting platform available at ar999.ws. In the course of providing our services to players in Pakistan and other permitted jurisdictions, ar999 collects and processes personal data about you. We take this responsibility seriously.
This Privacy Policy explains in plain, accurate language what personal data ar999 collects, the purposes for which it is processed, the lawful basis for that processing, how long we retain it, with whom we share it, and what rights you hold as a data subject. These principles apply consistently across every ar999 service — the web platform, any mobile-optimised interface, live chat, email communications, and customer support interactions.
This Privacy Policy must be read alongside the ar999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Where any conflict arises between this Privacy Policy and the Terms & Conditions on a data protection matter, this Privacy Policy governs.
ar999 is the data controller for all personal data processed in connection with the ar999 platform. As data controller, ar999 is responsible for deciding how and why your personal data is processed and for ensuring that processing is carried out lawfully, fairly, and transparently.
ar999 collects the following categories of personal data from players and platform visitors:
| Category | Data Types | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport number, photograph | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, province) | Registration & account updates |
| Financial Data | Payment method type, mobile wallet numbers (JazzCash/EasyPaisa), bank account identifiers, transaction history, deposit and withdrawal records | Deposits, withdrawals, KYC |
| Gaming Activity | Wager history, game session logs, bet amounts, win/loss records, bonus usage, VIP tier progression | Ongoing platform usage |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, login timestamps | Automatic collection on access |
| Communications Data | Live chat transcripts, support email content, complaint records, feedback submissions | Customer support interactions |
| Preference Data | Responsible gaming settings, notification preferences, language preferences, marketing opt-in/opt-out status | Account settings updates |
ar999 does not collect or store full payment card numbers. Where USDT TRC20 cryptocurrency transactions are used, ar999 records the wallet address and transaction hash for AML compliance purposes only.
ar999 collects personal data through the following methods:
ar999 processes your personal data for the following specific, legitimate purposes:
ar999 processes your personal data only where a valid lawful basis exists. The lawful bases ar999 relies upon are as follows:
ar999 does not sell, rent, or trade your personal data to any third party for commercial purposes. This is an absolute commitment. ar999 shares your personal data only in the following limited, controlled circumstances:
All third parties with whom ar999 shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection laws. ar999 does not permit third-party service providers to use your data for their own marketing or commercial purposes.
ar999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal retention obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | AML legal obligation |
| Financial transaction records | 5 years after transaction date | AML & audit legal obligation |
| Gaming activity logs | 3 years after last activity | Licensing & dispute resolution |
| Customer support records | 2 years after case closure | Legitimate interest |
| Marketing preferences | Until consent withdrawn + 1 year | Consent |
| Self-exclusion records | Permanently retained | Responsible gaming obligation |
| Technical / access logs | 12 months from creation | Security & fraud prevention |
When personal data is no longer required and no legal retention obligation applies, ar999 securely deletes or anonymises it so that it can no longer be associated with any individual. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and platform improvement purposes.
ar999 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security measures include:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, ar999 will notify affected players without undue delay and will report the breach to the relevant supervisory authority as required under applicable law.
ar999 uses cookies and similar tracking technologies on the ar999.ws platform. A cookie is a small text file placed on your device by the ar999 website. Cookies allow ar999 to recognise your device, maintain your session, remember your preferences, and collect analytical data about how the platform is used.
ar999 uses the following categories of cookies:
ar999 does not use third-party advertising or retargeting cookies. ar999 does not allow advertising networks to place cookies on the ar999 platform.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your ar999 account. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
As a data subject whose personal data is processed by ar999, you hold the following rights. ar999 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers:
You have the right to request a copy of the personal data ar999 holds about you, along with information about how it is used and who it is shared with. ar999 will respond to access requests within 30 days of receipt.
You have the right to request correction of any inaccurate personal data ar999 holds about you. You may update most account information directly through your ar999 account settings. For identity data corrections, contact support with supporting documentation.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that ar999 may be unable to fulfil erasure requests where retention is required by law (for example, AML record-keeping obligations override erasure requests for identity and financial data).
You may request that ar999 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while a complaint about unlawful processing is under investigation.
Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transferred to another data controller where technically feasible.
You have the right to object to processing based on legitimate interests (including profiling for responsible gaming monitoring) and to object to direct marketing communications at any time. Objections to direct marketing will be honoured immediately.
Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, contact ar999 via live chat or by emailing [email protected]. ar999 will respond within 30 days. In complex cases, this period may be extended by a further 30 days, in which case ar999 will notify you of the extension and the reason for it.
The ar999 platform is strictly intended for adults aged 21 years or older. ar999 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the ar999 account registration and KYC process.
If ar999 discovers that personal data has been collected from a person under the age of 21, the following actions will be taken immediately:
Parents and guardians who believe a minor may have accessed the ar999 platform using their payment methods or personal details are encouraged to contact ar999 immediately via live chat so the matter can be investigated and resolved promptly.
As ar999 operates under an international gaming licence, your personal data may be transferred to and processed in countries outside Pakistan. This may occur when ar999 uses cloud-based infrastructure, licensed KYC/AML service providers, or game platform technology providers that are based or operate servers in other jurisdictions.
Where such transfers occur, ar999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy. Safeguards used by ar999 include:
ar999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our platform services. When material changes are made, ar999 will notify registered players via email at least seven (7) days before the changes take effect.
The most current version of this Privacy Policy is always published at ar999.ws/privacy-policy. The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how ar999 protects your personal data.
Continued use of the ar999 platform after any changes to this Privacy Policy take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you must stop using the ar999 platform and may request account closure by contacting support.
If you have any questions, concerns, or requests relating to this Privacy Policy or ar999's processing of your personal data, please contact us through any of the following channels:
If you believe ar999 has failed to handle your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint. ar999 asks that you contact us directly in the first instance so we have the opportunity to address your concern. If you remain dissatisfied after ar999 has responded, you may escalate your complaint to the relevant supervisory authority or the dispute resolution body under ar999's international gaming licence.
Six core commitments that govern every data decision ar999 makes on behalf of Pakistani players.
Every byte of data transmitted between your device and ar999.ws travels over 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information are never exposed in transit — whether you are depositing via JazzCash in Karachi or checking your VIP tier in Lahore.
ar999 has a permanent, unconditional policy of never selling, renting, or trading your personal data to third parties for commercial purposes. Your information is used exclusively for the purposes described in this Privacy Policy — nothing more, nothing else, full stop.
Access requests, rectification requests, erasure requests, and marketing opt-outs are treated as high-priority tasks at ar999. Our data protection team responds within 30 days for all formal requests. Withdrawing marketing consent is instant — one toggle in your account settings and it is done.
ar999 collects only what is genuinely necessary. We do not build advertising profiles. We do not collect sensitive categories like health data or political views. Every data field collected by ar999 serves a specific, documented purpose tied directly to operating a safe and licensed gaming platform for Pakistani players.
ar999 does not hoard your data indefinitely. Retention periods are defined in writing, tied to specific legal obligations, and enforced through our data lifecycle management processes. When the retention period expires and no legal obligation exists, your data is securely deleted or irreversibly anonymised.
Every third-party service provider that receives your data — from JazzCash and EasyPaisa to KYC verification platforms — is contractually bound by data processing agreements. They may only use your data for the specific purpose ar999 has authorised. ar999 audits key partners regularly to verify compliance with these obligations.
Your personal data is protected, your rights are respected, and your PKR account is secured by industry-leading encryption. Explore Pakistan's most trusted VIP gaming platform today.