ar999f Privacy Policy

ar999f is an internationally licensed online casino and sports betting platform operated specifically for players in Pakistan and accessible via ar999f.org. For the purposes of this Privacy Policy, ar999f is the data controller responsible for the personal information collected through the ar999f Platform, including the website, mobile-optimised interface, casino lobby, sportsbook, live dealer tables, and all associated account and wallet services.

ar999f is committed to handling personal data in accordance with applicable international data protection principles, the requirements of our gaming licence, and our own internal data governance standards. This Privacy Policy applies to all current and former ar999f account holders, registered players, and any individual who visits the ar999f Platform — whether or not they complete a registration.

ar999f collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the principal categories of personal data we collect, together with examples of the specific data points involved:

ar999f does not collect sensitive personal data such as biometric data (beyond liveness photos used solely for KYC identity matching), racial or ethnic origin, religious beliefs, or health data except where strictly required by our responsible gaming obligations — for example, recording a self-exclusion request or a player-reported gambling problem for the purpose of enforcing account restrictions.

ar999f collects personal data through the following methods:

• Direct provision by you: Data you actively submit when creating your ar999f account, completing the KYC verification process, making a deposit or withdrawal, contacting customer support, or updating your account profile settings.
• Automated collection: Technical and usage data collected automatically when you access the ar999f Platform, including through cookies, web beacons, pixel tags, server logs, and similar tracking technologies as described in Section 9.
• Payment processors: Reference data and transaction confirmation information received from JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and USDT network processors when you complete a deposit or withdrawal transaction.
• Identity verification providers: Confirmation data returned by third-party KYC and document verification services engaged by ar999f to validate your identity documents and conduct age and address verification.
• Fraud prevention services: Risk signals and device fingerprint data from third-party fraud detection providers used to identify potentially fraudulent account registrations or transaction patterns.
• Game providers: Game session outcome and bet settlement data from third-party game providers including Evolution Gaming, Pragmatic Play, PG Soft, and others, which is passed to ar999f's platform systems for wallet and account management purposes.

ar999f uses the personal data collected for the following specific purposes:

• Account creation and management: To register your ar999f account, verify your identity, manage your profile, and maintain the security of your login credentials.
• Service delivery: To operate the casino, sportsbook, live dealer tables, and all other Platform features; to process bets, settle winnings, and manage your PKR wallet balance.
• Payment processing: To process deposits and withdrawals via your chosen Pakistani payment method; to verify that payment accounts are held in your own name; to maintain accurate transaction records.
• KYC and compliance: To meet our obligations under anti-money laundering (AML) regulations, our international gaming licence conditions, and responsible gaming requirements, including age verification and source-of-funds checks.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, collusion, and other prohibited conduct on the ar999f Platform.
• Customer support: To respond to your support queries via Live Chat, email, Messenger, or Viber; to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: To monitor your gaming behaviour for indicators of problem gambling; to enforce deposit limits, session limits, self-exclusion requests, and cooling-off periods in accordance with our Responsible Gaming policy.
• Marketing communications: To send you promotional offers, bonus notifications, and personalised game recommendations by SMS or email — but only where you have opted in to receive such communications. You may withdraw consent at any time through your account settings.
• Platform improvement: To analyse aggregated usage data to understand how the Platform is used, identify technical issues, improve game selection, and enhance the overall player experience — using data that is anonymised or pseudonymised wherever possible.
• Legal obligations: To comply with applicable law, regulatory requirements, court orders, or binding requests from competent governmental or law enforcement authorities.

ar999f processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual necessity: The majority of ar999f's data processing is necessary to perform the contract between you and ar999f — that is, to deliver the gaming services you have registered to use, including account management, bet settlement, and payment processing.
• Legal obligation: Certain processing activities — particularly KYC identity verification, AML transaction monitoring, and age verification — are required by the conditions of ar999f's international gaming licence and applicable financial crime prevention obligations. ar999f cannot operate legally without conducting these activities.
• Legitimate interests: ar999f processes certain data on the basis of its legitimate interests in operating a safe, secure, and commercially viable platform — including fraud detection, security monitoring, and internal analytics. These interests are balanced against your privacy rights and will not override them where your interests are stronger.
• Consent: Where ar999f sends you marketing communications by SMS, email, or push notification, this is done on the basis of your explicit opt-in consent provided at registration or updated in your account settings. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ar999f does not sell your personal data. ar999f shares personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment service providers: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and USDT network operators receive transaction reference data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party KYC service providers receive your identity document images and biographic data to perform document authentication and identity matching on ar999f's behalf.
• Game providers: Third-party game studios and live casino operators receive the minimum account and session data necessary to deliver game content and settle bet outcomes within the ar999f Platform.
• Fraud and security providers: Specialist fraud detection and cybersecurity service providers receive technical and behavioural signals to identify and prevent fraudulent activity on the Platform.
• Regulatory and law enforcement authorities: ar999f will disclose personal data to competent regulatory authorities, gaming commissions, financial intelligence units, police, or courts where required to do so by law or by binding legal process, including suspicious activity reporting obligations under applicable AML frameworks.
• Professional advisers: Legal, accounting, and audit professionals engaged by ar999f may access personal data to the minimum extent necessary for the provision of professional services, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, sale of assets, or corporate restructuring involving ar999f, player account data may be transferred to the acquiring or successor entity as part of that transaction, subject to equivalent privacy protections being maintained.

All third-party service providers with whom ar999f shares personal data are required to process that data only on ar999f's documented instructions, to maintain appropriate technical and organisational security measures, and to return or delete the data upon conclusion of the engagement.

ar999f operates under an international gaming licence and engages service providers located in various jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries whose data protection laws differ from those applicable in Pakistan.

Where ar999f transfers personal data internationally, we ensure that appropriate safeguards are in place to protect that data, including:

• Contractual data protection clauses binding the recipient to equivalent privacy standards as those described in this Policy.
• Technical and organisational security measures appropriate to the sensitivity of the data transferred and the risk profile of the receiving jurisdiction.
• Restriction of transfers to jurisdictions with a demonstrably adequate level of data protection or to recipients certified under equivalent frameworks.

By creating an ar999f account and using the Platform, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described in this section.

ar999f retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulatory obligation. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active ar999f account and for a minimum of five years following account closure, in accordance with standard AML record-keeping requirements applicable to licensed gaming operators.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping obligations under applicable AML and gaming licence conditions.
• KYC documentation: Retained for a minimum of five years following the completion of the KYC process or the closure of the account, whichever is later.
• Customer support communications: Retained for three years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and usage data: Aggregated and anonymised usage analytics are retained indefinitely for Platform improvement purposes. Personally identifiable technical data (e.g. server logs containing IP addresses) is retained for a maximum of 12 months.
• Marketing preferences: Opt-in records are retained for the duration of your account and for two years following account closure, as evidence of your consent to receive marketing communications.

Upon expiry of the applicable retention period, ar999f securely deletes or irreversibly anonymises your personal data. Where deletion is not immediately practicable due to technical constraints, the data is restricted from active use pending scheduled deletion.

ar999f uses cookies and similar tracking technologies on the Platform to ensure correct functionality, maintain login sessions, analyse Platform usage, and support fraud prevention. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences — such as your language setting (English or Urdu), preferred payment method, and last viewed game category — to personalise your ar999f experience across sessions.
• Analytics cookies: Collect anonymised data about how players navigate and use the ar999f Platform, including page views, session durations, and feature engagement rates. This data is used in aggregate form to improve the Platform.
• Security and fraud prevention cookies: Collect device fingerprinting signals used by ar999f's fraud detection systems to identify suspicious login patterns, automated access attempts, and potential account takeover activity.

ar999f does not use third-party advertising or retargeting cookies. You will not see ar999f advertisements following you around the web based on cookies placed during your Platform session.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the ar999f Platform, including the ability to log in or place bets.

ar999f respects your rights over your personal data. The following rights are available to you and can be exercised by contacting ar999f's support team:

ar999f will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or voluminous, this period may be extended by a further 60 days with notification to you. ar999f will not charge a fee for data rights requests unless they are manifestly unfounded or excessive.

The ar999f Platform is strictly intended for individuals aged 21 years and above. ar999f does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the ar999f KYC process, and accounts opened with false age declarations are subject to immediate closure and forfeiture of balance.

If ar999f becomes aware that personal data has been collected from an individual under 21 years of age, all such data will be deleted immediately and the associated account will be permanently closed. Parents and guardians who believe their child may have registered on ar999f are encouraged to contact ar999f support immediately via Live Chat so that the matter can be investigated and resolved without delay.

ar999f implements responsible gaming controls specifically designed to prevent underage access, including CNIC-based age verification and industry-standard device checks for accounts showing usage patterns inconsistent with adult players.

ar999f implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport encryption: All data in transit between your device and ar999f's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Data at rest encryption: Sensitive personal data stored in ar999f's databases — including identity documents, financial records, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within ar999f's internal systems is restricted on a strict need-to-know basis. Employee access is logged, audited, and subject to regular review. No employee has unrestricted access to player payment instrument details.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their ar999f accounts. 2FA is mandatory for withdrawal requests above defined PKR thresholds.
• Security monitoring: ar999f operates continuous network and application security monitoring to detect intrusion attempts, anomalous access patterns, and data exfiltration signals in real time.
• Penetration testing: The ar999f Platform is subject to regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.

In the event of a personal data breach that poses a risk to player rights and freedoms, ar999f will notify affected players without undue delay and will report the breach to the relevant regulatory authority within the timeframe required by applicable law.

The ar999f Platform does not contain links to third-party websites, applications, or services. ar999f's privacy commitments apply solely to the ar999f Platform and services operated directly by ar999f. Any interactions you have with third-party payment service providers such as JazzCash or EasyPaisa through their own native applications or websites are governed by those providers' separate privacy policies, over which ar999f has no control and for which ar999f accepts no responsibility.

ar999f recommends that you review the privacy policies of any third-party service provider you use in connection with your ar999f account, including mobile wallet providers and banking applications used for deposits and withdrawals.

ar999f reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. The effective date of the current version is stated at the top of this page.

Material changes to this Policy — particularly changes that affect the legal basis for processing, the categories of data collected, or your privacy rights — will be communicated to registered players via SMS notification to their registered Pakistani mobile number or via an on-screen notification upon their next ar999f Login session.

Your continued use of the ar999f Platform following notification of a material Policy update constitutes your acknowledgement of the updated Policy. If you do not accept the updated terms, you should contact ar999f to close your account before the updated Policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ar999f handles your personal data, you may contact ar999f's Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the ar999f Platform. Live Chat is the fastest way to reach our support team for urgent privacy concerns.
• Support Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line of your email so that it is directed to the correct team.
• Languages: ar999f's support team can handle privacy queries in both English and Urdu to best serve our Pakistani player base.

ar999f aims to acknowledge all privacy-related contact within 2 business days and to provide a substantive response within 30 calendar days. For data subject rights requests, the timelines described in Section 10 of this Policy apply.