ar99 Privacy Policy — Your Data, Protected

1 Introduction

ar99 is Pakistan's premier online casino and sports betting platform, offering cricket betting, PSL markets, live dealer games, slots, poker, and Dragon Tiger among other products. In operating these services, ar99 processes personal data belonging to registered players and visitors to the ar99.ws website.

ar99 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles under its international gaming licence obligations. This Policy applies to all personal data processed by ar99 in connection with the ar99 platform, regardless of the device or method used to access it — whether from Karachi, Lahore, Islamabad, Faisalabad, or anywhere else in Pakistan.

2 Data We Collect

ar99 collects personal data through several channels: directly from you when you register or use the platform, automatically as you interact with the ar99 website or app, and occasionally from trusted third-party sources such as payment processors and identity verification providers.

2.1 Registration & Account Data

• Full legal name (as on your CNIC or passport)
• Date of birth (to verify 21+ age requirement)
• Pakistani mobile number and email address
• Username and encrypted password
• City / province of residence

2.2 Identity Verification (KYC) Data

• Scanned copy of National Identity Card (CNIC) or valid passport
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie photograph for liveness verification where required
• Source of funds documentation for large transactions

2.3 Financial & Transaction Data

• JazzCash and EasyPaisa account numbers used for deposits or withdrawals
• HBL, UBL, Meezan Bank, SadaPay, or Raast account references
• USDT TRC20 wallet addresses where applicable
• Deposit and withdrawal amounts in PKR, transaction timestamps, and reference numbers

2.4 Gaming Activity Data

• Betting history, game logs, win/loss records, and session durations
• Bonus claims, wagering progress, and promotional participation history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

2.5 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Platform usage logs including page visits, clicks, and feature interactions

2.6 Communications Data

• Live chat transcripts and email correspondence with ar99 support
• Feedback, survey responses, and complaint records
• Marketing preference selections

3 How We Use Your Data

ar99 uses the personal data it collects for the following specific purposes:

ar99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing an alternative lawful basis for the new processing activity.

4 Legal Basis for Processing

ar99 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the ar99 Terms & Conditions you entered into upon registration — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, identity verification obligations, and reporting requirements under ar99's international gaming licence.
• Legitimate interests: Processing necessary for ar99's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your own rights.
• Consent: Processing for direct marketing, optional personalisation features, and non-essential cookies, where you have provided freely given, specific, and informed consent. You may withdraw consent at any time.

5 Data Sharing & Disclosure

ar99 does not sell your personal data. We share your data only in the following limited circumstances:

5.1 Service Providers

ar99 engages carefully selected third-party service providers who process data on ar99's behalf and under ar99's instructions. These include identity verification (KYC) providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast), gaming software licensors, fraud detection vendors, and cloud infrastructure providers. All such processors are bound by data processing agreements requiring them to protect your data to the same standard ar99 applies.

5.2 Legal & Regulatory Disclosure

ar99 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, valid legal process, or in connection with ar99's obligations under its international gaming licence. ar99 will provide only the minimum data necessary to satisfy the legal requirement.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ar99's assets, your personal data may be transferred to the successor entity as part of that transaction. ar99 will provide notice before your data is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

ar99 may share your data with third parties not described above where you have given your explicit prior consent to such sharing. You may withdraw this consent at any time by contacting ar99 support.

6 International Data Transfers

ar99 operates under an international gaming licence and uses cloud infrastructure and service providers whose servers may be located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where such transfers occur, ar99 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under ar99's licence obligations. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions that maintain adequate data protection standards.

By using the ar99 platform, you acknowledge and consent to the transfer of your personal data to international locations as described in this section, subject to the protections described above.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit the ar99 website. ar99 also uses similar technologies including local storage tokens and session identifiers. These technologies help ar99 deliver a functional, secure, and personalised experience on both desktop and mobile browsers across Pakistan.

7.2 Types of Cookies ar99 Uses

• Essential cookies: Required for core platform functionality including login sessions, security tokens, and game state management. These cannot be disabled without breaking the ar99 platform.
• Functional cookies: Remember your preferences such as language settings, preferred sports markets (e.g., PSL cricket), and responsible gaming tool configurations.
• Analytics cookies: Help ar99 understand how players navigate the platform so we can identify performance issues and improve the user experience. ar99 uses only privacy-respecting analytics tools — no cross-site advertising trackers.
• Security cookies: Detect and prevent fraudulent login attempts, account takeover attacks, and bot activity.

7.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Note that disabling essential cookies will impair or prevent your ability to log in to or use the ar99 platform. ar99 does not currently respond to "Do Not Track" browser signals, as no universal standard for such signals has been adopted.

8 Data Retention

ar99 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, including to satisfy legal, accounting, and regulatory obligations. Specific retention periods include:

• Active account data: Retained for the duration of your ar99 account and for a minimum of five years after account closure, in accordance with AML and gaming licence record-keeping requirements.
• KYC documentation: Retained for a minimum of five years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the interaction.
• Marketing data: Retained until you withdraw consent or for two years of account inactivity, whichever comes first.
• Technical logs: Retained for up to 12 months from the date of generation, unless required for longer in connection with a security investigation.

At the end of the applicable retention period, ar99 will securely delete or anonymise your personal data so that it can no longer be associated with you.

9 Security Measures

ar99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ar99's servers
• AES-256 encryption for sensitive data at rest in ar99's databases
• Multi-factor authentication (MFA) available to all players and mandatory for ar99 staff accessing player data
• Regular third-party penetration testing and security audits of the ar99 platform
• Strict role-based access controls limiting ar99 staff access to player data on a need-to-know basis
• Automated fraud detection and anomaly monitoring systems operating 24/7
• Incident response procedures including mandatory breach notification timelines

10 Your Rights

As an ar99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact ar99 via live chat or email support. ar99 will respond to verified requests within 30 calendar days.