Privacy & Data Protection

AR999 Privacy Policy – How Your Data Is Handled With Care

At AR999, your personal information is treated with the same seriousness as your money. This Privacy Policy explains in plain, clear English exactly what data we collect, why we collect it, who we share it with and how you can control it.

Last Updated: July 2025 Applies to: Pakistan (PKR accounts) 256-bit Encryption No Data Selling — Ever

AR999 does not sell, rent or trade your personal data with any third party for marketing purposes — full stop.

Last updated: July 2025

Estimated reading time: 12 minutes

1Who We Are

AR999 ("we," "us," "our," "AR999") operates the online gaming platform accessible at ar999.online. We provide casino games, live dealer tables, Teen Patti, poker, slots and esports betting services to players in Pakistan. All transactions on the AR999 platform are conducted in Pakistani Rupees (PKR).

This Privacy Policy explains how AR999 collects, processes, stores and protects the personal data of individuals who visit ar999.online or register as players ("you," "your," "player"). By using the AR999 platform, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions about how AR999 handles your data, please contact the AR999 Data Protection team directly at support@ar999.online at any time.

Our commitment: AR999 will never sell, rent or trade your personal data to any third party for their own marketing purposes. Your data is used only to operate your account, process your transactions and comply with legal requirements.

ar999

2What Data We Collect

AR999 collects only the data that is necessary to provide you with a safe, legal and functional gaming experience. The categories of personal data collected include:

Data Category Specific Examples Type
Identity Data Full name, date of birth, CNIC number, selfie/photo ID Required
Contact Data Mobile number, email address, city/province Required
Financial Data Easypaisa/JazzCash account number, bank IBAN, deposit and withdrawal history Required
Gaming Data Game session history, bets placed, winnings, losses, bonus usage Required
Technical Data IP address, device type, browser, operating system, session timestamps Automatic
Communications Data Support chat transcripts, email correspondence, survey responses As provided
Preferences Data Responsible gaming tool settings, marketing opt-in/out status, language preference As provided

AR999 does not collect sensitive data categories such as racial or ethnic origin, religious beliefs, political opinions or biometric data beyond what is strictly required for identity verification (CNIC photo and selfie match).

3How We Collect Your Data

AR999 collects your personal data through the following means:

  • Direct submission: When you fill in the registration form, complete identity verification, make a deposit or withdrawal, contact customer support or participate in a promotion, you provide data directly to AR999.
  • Automatic collection: When you visit ar999.online, our systems automatically log technical data including your IP address, device type, browser, and session activity. This happens whether or not you are logged in to your account.
  • Cookies and tracking technologies: AR999 uses cookies and similar technologies to improve your experience, maintain your login session and analyse platform usage. Full details are in Section 7 (Cookies & Tracking).
  • Third-party services: If you verify your identity through a third-party verification provider, that provider shares the outcome of the verification process (confirmed / not confirmed) with AR999. AR999 does not receive raw data directly from government identity databases.
  • Payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay or another provider, that provider shares transaction reference data with AR999 to confirm the payment. Payment providers operate under their own privacy policies.
ar999

4Why We Use Your Data

AR999 uses your personal data only for the purposes described below. For each purpose, we identify the legal basis on which we rely:

  • Account creation and management — To register your account, verify your identity, process your deposits and withdrawals and maintain your gaming wallet in PKR. Legal basis: contract performance.
  • Identity and age verification — To confirm you are 18 years of age or older and that your identity matches the payment method you are using. Legal basis: legal obligation and contract performance.
  • Game provision and fairness — To deliver games, record your session activity and ensure fair play on all AR999 tables. Legal basis: contract performance.
  • Bonus and promotion management — To credit bonuses accurately, track wagering progress and apply promotional offers to eligible accounts. Legal basis: contract performance.
  • Fraud prevention and AML compliance — To detect and investigate unusual account activity, prevent money laundering and comply with applicable financial crime prevention obligations. Legal basis: legal obligation and legitimate interest.
  • Customer support — To respond to your queries, resolve disputes and improve service quality. Legal basis: contract performance and legitimate interest.
  • Responsible gaming — To monitor gaming patterns, apply the responsible gaming tools you activate and reach out proactively when patterns suggest potential harm. Legal basis: legal obligation and legitimate interest.
  • Marketing communications — To send you promotional offers and updates, but only if you have opted in to receive them. You can opt out at any time. Legal basis: consent.
  • Platform improvement — To analyse aggregate usage patterns and improve the AR999 product. This analysis uses anonymised or aggregated data that cannot be linked back to individual players. Legal basis: legitimate interest.

Marketing opt-out: You can opt out of AR999 marketing messages at any time by updating your communication preferences in your account settings or by contacting support@ar999.online. Opting out of marketing does not affect your ability to use the AR999 platform.

5Who We Share Your Data With

AR999 shares your personal data only with the third parties listed below, and only to the extent necessary for the stated purpose. No personal data is sold, rented or traded to any external party for their own commercial use.

  • Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, bank partners, Visa/Mastercard networks) — Shared data: name, payment account reference, transaction amount. Purpose: to process your deposits and withdrawals.
  • Identity verification providers — Shared data: CNIC image, selfie image. Purpose: to verify your age and identity as required by law. These providers operate under strict data processing agreements with AR999.
  • Game studios and providers — Shared data: anonymised session identifier. Purpose: to deliver game content and record fair play outcomes. Game providers do not receive your name, CNIC or payment details.
  • Customer support platform — Shared data: your contact details and support interaction history. Purpose: to manage support tickets and maintain service quality records.
  • Regulatory and law enforcement authorities — Shared data: as required by applicable law. Purpose: to comply with anti-money laundering (AML) regulations, tax obligations and any lawfully issued orders. AR999 will notify you when legally permitted to do so before making any such disclosure.
  • Fraud prevention and security services — Shared data: IP address, device fingerprint, login patterns. Purpose: to detect and prevent fraud and security threats on the platform.

All third parties that process personal data on behalf of AR999 are required to operate under a data processing agreement that obligates them to protect your data to the same standard that AR999 applies internally.

6How We Protect Your Data

AR999 applies a layered technical and organisational security framework to protect your personal data. The measures in place include:

  • TLS 1.3 encryption in transit: All data transmitted between your device and ar999.online is encrypted using TLS 1.3 — the same standard used by major banking applications.
  • AES-256 encryption at rest: Stored personal data including identity documents and payment information is encrypted at rest using AES-256 encryption.
  • Access controls: Access to personal data within AR999 is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific function.
  • Two-factor authentication (2FA): Players are encouraged to enable 2FA on their AR999 accounts. Internal staff access to data systems requires 2FA.
  • Regular security audits: AR999 conducts regular internal and third-party security audits of its platform and data handling processes.
  • Data minimisation: AR999 collects only the data that is necessary. Data that is no longer required for its stated purpose is deleted or anonymised in accordance with the retention schedule in Section 8.

Breach notification: In the event of a personal data breach that poses a risk to your rights and freedoms, AR999 will notify you within 72 hours of becoming aware of the breach via the contact details on your account, and will take immediate steps to contain and remediate the situation.

ar999

7Cookies and Tracking Technologies

AR999 uses cookies and similar technologies on ar999.online. A cookie is a small text file that is stored on your device when you visit a website. Cookies serve several purposes:

Strictly Necessary Cookies

These cookies are essential to operate the AR999 platform. They maintain your login session, handle your game state and process your transactions. You cannot opt out of these cookies while using AR999, as doing so would prevent the platform from functioning.

Analytics Cookies

These cookies help AR999 understand how players use the platform — which pages are visited most, where players exit and how long sessions last. Data is aggregated and anonymised. You can opt out of analytics cookies via your browser settings.

Security and Fraud Prevention Cookies

These cookies help AR999 identify suspicious login patterns, detect account takeover attempts and flag potentially fraudulent transactions. They are necessary for the security of your account and cannot be disabled.

Preference Cookies

These cookies remember your settings and preferences such as language, responsible gaming tool configuration and notification preferences, so you do not have to reconfigure them on every visit. You can manage these through your account settings.

AR999 does not use third-party advertising cookies. We do not allow external ad networks to place tracking cookies on ar999.online that would track you across other websites.

8Data Retention

AR999 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention schedule is as follows:

  • Active account data (identity, contact, financial and gaming data): Retained for the duration of your account plus 5 years after account closure, to satisfy anti-money laundering record-keeping obligations.
  • Identity verification documents (CNIC copy, selfie): Retained for 5 years after account closure, in compliance with applicable financial regulations.
  • Transaction records (deposit, withdrawal and bonus history): Retained for 5 years after the transaction date.
  • Customer support communications: Retained for 3 years after the last interaction, for dispute resolution and quality assurance purposes.
  • Technical/log data (IP address, device logs): Retained for 12 months, then deleted or anonymised.
  • Marketing preferences and opt-in records: Retained for the duration of your account plus 3 years, to demonstrate consent compliance.

Upon expiry of the relevant retention period, your data is securely deleted or irreversibly anonymised. Anonymised aggregate data (which cannot be linked back to any individual) may be retained indefinitely for internal analysis.

9Your Privacy Rights

As an AR999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact AR999 at support@ar999.online. AR999 will respond to all privacy rights requests within 30 days.

Right to Access

Request a copy of all personal data AR999 holds about you. We will provide this in a readable format within 30 days of your request.

Right to Rectification

Request correction of any inaccurate or incomplete personal data AR999 holds about you. Updates take effect within 5 business days.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for its original purpose and there is no legal obligation requiring us to retain it.

Right to Restriction

Request that AR999 restrict the processing of your data while a dispute or investigation is being resolved, without your data being deleted.

Right to Portability

Request your personal data in a structured, machine-readable format so that it can be transferred to another service provider of your choosing.

Right to Object

Object to AR999 processing your personal data for marketing purposes or where processing is based on legitimate interest. Marketing objections are actioned immediately upon receipt.

10Children's Privacy

AR999 does not knowingly collect or process personal data from any person under the age of 18. The AR999 platform is strictly for adult players only. If AR999 discovers that an account has been registered by or on behalf of a person under 18, that account will be immediately closed, all collected data will be deleted and any funds held will be returned to the verified payment method where legally permissible.

If you believe that a person under 18 has registered on AR999 using false information, please contact support@ar999.online immediately with as much detail as you can provide so that the account can be investigated and closed promptly.

11Changes to This Privacy Policy

AR999 may update this Privacy Policy from time to time to reflect changes in legal requirements, data processing practices or the features available on the platform. When material changes are made, AR999 will:

  • Update the "Last Updated" date at the top of this page
  • Notify all active players via their registered mobile number or email address at least 7 days before the changes take effect
  • Maintain a summary of the key changes made in the most recent update at the bottom of this page

For minor, non-material changes (such as correcting typos or adding clarifying language without changing the substance of any clause), AR999 may update the policy without advance notice. In all cases, the version of the Privacy Policy accessible on this page is the current operative version.

Continued use of AR999 after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not accept the updated policy, you should stop using the platform and contact support@ar999.online to close your account.

12Contact AR999 – Data & Privacy

For any privacy-related enquiry, request to exercise a data right, or concern about how AR999 handles your personal data, please contact the AR999 Data Protection team:

  • Email: support@ar999.online
  • Subject line: "Privacy Request – [Your Account Username]"
  • Live Chat: Available 24/7 at ar999.online — ask to be connected to the Data Protection team
  • Response time: All privacy requests are acknowledged within 24 hours and fully responded to within 30 calendar days

AR999 support operates in both Urdu and English, 24 hours a day, 7 days a week. Pakistani public holidays are fully covered.

Six Reasons Pakistani Players Trust AR999 With Their Data

Privacy commitments that are built into the platform, not added as an afterthought.

Zero Data Selling – Guaranteed

AR999 has never sold, rented or traded any player's personal data to external parties for marketing purposes, and will never do so. Your data is used only to run your account and comply with law. This is a hard commitment — not a policy that can be quietly changed.

Bank-Grade Encryption

Every piece of data you transmit to and from ar999.online is protected by TLS 1.3 encryption in transit and AES-256 encryption at rest — the same standards used by Pakistan's major banks and financial institutions. Your CNIC, payment details and account credentials are never stored in plain text.

Privacy Support in Urdu & English

The AR999 privacy support team communicates in both Urdu and English around the clock. Pakistani players should never have to navigate a language barrier when asking questions about their personal data or exercising their privacy rights.

Simple Data Deletion Process

Requesting deletion of your personal data at AR999 is straightforward — a single email to support@ar999.online with your account details. AR999 will process the request within 30 days and confirm deletion in writing, subject to any legal retention obligations.

Marketing Opt-Out in One Click

If you no longer want to receive promotional messages from AR999, you can opt out in one step through your account preferences — no need to contact support or go through a multi-step process. The opt-out takes effect immediately for all future communications.

Breach Notification Within 72 Hours

If a data breach occurs that could affect your personal information, AR999 is committed to notifying you within 72 hours of becoming aware of it — well ahead of standard industry response times — so you can take steps to protect your accounts if needed.

Common Privacy Questions from Pakistani Players

Straightforward answers to the questions AR999 players ask most often about their data.

Yes. Your CNIC image is transmitted to AR999 over a TLS 1.3 encrypted connection and stored using AES-256 encryption. It is used solely for age and identity verification — to confirm you are 18 or older and that your name matches your payment method. AR999 does not share your CNIC with any third party other than the certified identity verification provider used to process the check. Your CNIC is never used for marketing, profiling or any purpose beyond account verification and legal compliance.

When you make a deposit or withdrawal via Easypaisa or JazzCash, AR999 shares the minimum data required to process the transaction — typically your account identifier and the transaction amount. AR999 does not proactively share your full personal profile, gaming history or CNIC with these payment processors. The flow of information is essentially: you authorise a payment on your Easypaisa or JazzCash app, the provider confirms receipt to AR999, and AR999 credits your wallet. Easypaisa and JazzCash operate under their own privacy policies for the data they hold.

Yes, you can request deletion of your personal data by emailing support@ar999.online. AR999 will process the request within 30 days. However, please note that some data must be retained for up to 5 years after account closure under anti-money laundering regulations — specifically identity documents and financial transaction records. This is a legal requirement that AR999 cannot waive. Once the legal retention period expires, all retained data is permanently deleted. AR999 will confirm in writing exactly which data has been deleted and which is being retained under legal obligation, and for how long.

Log in to your AR999 account, go to Account Settings, then Communication Preferences, and toggle off all marketing categories. The opt-out takes effect immediately. Alternatively, email support@ar999.online with "Opt-out request" in the subject line and include your account username — the support team will action it within 24 hours. Note that opting out of marketing does not stop transactional communications such as deposit confirmations, withdrawal notifications or important account security alerts, which are sent regardless of marketing preferences.

Privacy at AR999 – What It Really Means for Pakistani Players

When most people hear the phrase "Privacy Policy," the instinct is to scroll past it. Long, dense documents full of legal language that nobody actually reads — that is the reputation these pages have earned, and honestly it is not entirely undeserved. AR999 wrote this policy differently, and for a specific reason: Pakistani players deserve to actually understand what happens to their data, not just have a document exist that technically covers it.

Let us talk about what matters most. When you register at AR999, you provide your name, your date of birth, your mobile number and eventually a copy of your CNIC. For a lot of Pakistani internet users, sharing a CNIC with an online platform is something that rightfully deserves careful thought. The question is: does this platform actually need this information, and will it be kept secure? The answer at AR999 is yes and yes. The CNIC is collected because age verification is a legal and ethical requirement — AR999 does not allow players under 18, and a CNIC is the most reliable way to confirm age for Pakistani users. The data is encrypted, access is restricted, and it is not shared with anyone who does not absolutely need it to complete the verification process.

The Pakistan-Specific Context

Privacy considerations in Pakistan have some specific dimensions that international privacy policies often do not address properly. Mobile wallets like Easypaisa and JazzCash are primary financial tools for millions of Pakistani users — not secondary payment methods. The connection between your mobile number, your wallet and your identity is tighter in Pakistan than in many other markets. AR999 takes this seriously. The data shared with Easypaisa and JazzCash to process your transactions is limited to what the transaction strictly requires. Your gaming history, your CNIC and your personal profile are not shared with these providers.

Similarly, the question of what happens to your CNIC scan after your account is closed is a fair one. AR999 retains identity documents for 5 years after account closure because this is required by anti-money laundering regulations that apply to all financial services operating in this space. After that period, the documents are permanently deleted. AR999 will confirm in writing which data is being retained and for exactly how long if you submit a data rights request.

Data and Responsible Gaming

One of the less obvious uses of your gaming data at AR999 is responsible gaming monitoring. Your session history, frequency of play and betting patterns are analysed — not to sell you products, but to identify early indicators of problem gambling. If your patterns match established markers of harmful play, the AR999 responsible gaming team may reach out proactively. This is one of the few situations where using your personal data is genuinely in your interest. The Responsible Gaming page has full details of the tools available and how to use them.

If at any point you have a question about your data at AR999 that is not answered on this page, please reach out to support@ar999.online. Privacy support operates 24/7 in both Urdu and English. No question is too small — if something is unclear, AR999 wants to explain it properly.

Your Data Is Safe – Now Play

Register at AR999 – Your Privacy Is Protected From the First Click

Join AR999 with confidence knowing your personal data is encrypted, never sold and protected under a clear, plain-English privacy policy. Register free, deposit via Easypaisa or JazzCash and claim your 200% welcome bonus up to Rs 40,000.

No data selling
256-bit encryption
PKR payments
24/7 Urdu support
Create Free Account Already a Member? Login