AR999Game Privacy Policy — Your Data, Clearly Explained

AR999Game operates the online gaming and sports betting platform accessible at ar999game.biz. In the context of this Privacy Policy, "AR999Game", "we", "us" and "our" refer to the operating entity behind the ar999game platform. "You" and "your" refer to any person who visits, registers with or uses the ar999game website or any associated services.

AR999Game is the data controller for personal information collected through the platform. This means we are responsible for determining how and why your data is processed. We take this responsibility seriously and have built our data practices around the principle that your data belongs to you — we are only ever temporary custodians of it, using it for the specific purposes set out in this Policy.

This Privacy Policy applies to all services provided by ar999game including the live casino, esports betting, sports betting, Aviator Game, Teen Patti, Andar Bahar, the VIP Club programme and all customer support communications. It applies whether you access ar999game via a web browser on a desktop, a mobile browser or any other supported device.

AR999Game collects personal data in three ways: information you provide directly, information generated automatically through your use of the platform, and information we receive from third-party service providers. Here is a full breakdown:

Information you provide directly:

• Full legal name
• Date of birth
• Mobile phone number (used as your primary account identifier)
• Email address
• Residential address
• Government-issued identity document details (CNIC number and scan, where required for KYC verification)
• Payment account details including Easypaisa / JazzCash mobile wallet numbers, NayaPay / SadaPay account identifiers, bank account details for IBFT, and Visa/Mastercard details
• Any information you share with our support team via live chat or email

Information generated automatically:

• IP address and approximate geographic location derived from it
• Device type, operating system and browser version
• Session timestamps — when you log in, how long you remain active, when you log out
• Pages visited within the ar999game platform and the sequence of navigation
• Games played, bet amounts, win/loss outcomes and session duration by game
• Deposit and withdrawal transaction history
• Bonus interactions — which offers were displayed, accepted or declined
• Responsible gaming tool usage — whether you set deposit limits, initiated cooling-off periods or requested self-exclusion

Information from third parties:

• Identity verification results from KYC/AML service providers used to confirm your identity against your submitted documents
• Payment transaction status and confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card processing networks
• Fraud risk scores from anti-fraud service providers where applicable

AR999Game does not collect data for its own sake. Every category of personal data we hold serves a specific operational or regulatory purpose. Below is a straightforward explanation of each purpose.

AR999Game processes your personal data on the following legal bases:

• Contract performance: Most data processing is necessary to deliver the services you signed up for — operating your account, processing PKR deposits and withdrawals, and settling bets. Without this data, ar999game cannot provide its core service.
• Legal obligation: Identity verification, transaction record-keeping and cooperation with regulatory or law enforcement bodies are required by the gaming licence under which ar999game operates and by applicable anti-money laundering regulations.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring and aggregate analytics are processed on the basis of ar999game's legitimate interest in operating a safe and sustainable platform, balanced against your privacy interests.
• Consent: Marketing communications — including promotional emails and SMS messages about offers available on ar999game — are only sent where you have explicitly opted in. You can withdraw this consent at any time via your account settings or by contacting support.

Personal data collected by ar999game is stored on servers operated by or contracted to ar999game. Servers are protected by multiple layers of physical and logical security controls including access management, firewall protection, intrusion detection systems and regular security audits.

Data is encrypted both in transit and at rest. In transit, all communication between your device and ar999game uses TLS 1.2 or higher encryption. At rest, sensitive data fields including identity document data, payment account identifiers and password hashes are stored with application-level encryption in addition to standard database security.

Password hashes are stored using industry-standard one-way hashing algorithms. AR999Game staff cannot read your password — only you know it. If you forget your password, we reset it rather than retrieve it.

AR999Game does not sell your personal data to any third party. Full stop. We do, however, share certain data with specific categories of trusted service providers and regulatory bodies where this is necessary to operate the platform or comply with our obligations. Below is a transparent breakdown of every category of third-party data sharing:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard acquiring banks receive the transaction data necessary to process your deposits and withdrawals. They operate under their own privacy policies and are independently regulated.
• Identity verification providers: Where KYC checks are required, we share relevant portions of your identity information with certified verification service providers. These providers confirm your identity against official databases and return only a pass/fail result to ar999game — they do not retain your documents beyond the verification period.
• Anti-fraud and security providers: Aggregate transaction patterns and device fingerprint data may be shared with fraud detection service providers to identify suspicious behaviour. These providers do not receive your full personal profile.
• Cloud infrastructure providers: Our hosting and database providers have technical access to stored data as part of providing infrastructure services. They operate under strict data processing agreements that prohibit them from using your data for any purpose other than hosting.
• Regulatory and law enforcement bodies: AR999Game is required by its gaming licence and applicable law to respond to lawful requests from regulatory bodies and law enforcement. We will disclose data where legally required and will inform you of such disclosures where we are legally permitted to do so.
• Professional advisers: Lawyers, auditors and other professional advisers may have access to personal data in the context of specific legal or compliance matters, under strict confidentiality obligations.

No other categories of third parties receive your personal data from ar999game. We do not share data with advertisers, data brokers, or unrelated commercial entities.

Given that AR999Game handles real PKR transactions via Pakistani payment methods, we want to be especially clear about how payment data is handled.

AR999Game does not store full card numbers on its own servers. Card payments are processed through a certified payment gateway that handles card data under PCI-DSS compliance standards. AR999Game receives only a tokenised reference to your card that can be used for future transactions — the actual card number is never stored at ar999game.

For mobile wallet transactions via Easypaisa, JazzCash, NayaPay or SadaPay, ar999game stores your registered mobile wallet number linked to your account. This number is used only to process your withdrawals to the correct wallet and to verify that deposits originate from your own payment accounts. It is not shared with any third party other than the relevant payment provider during transaction processing.

IBFT bank transfer details — account title, bank name and IBAN where provided — are stored for the same purpose: to process your withdrawal to the correct account and to verify deposit origins. This data is encrypted at rest and accessible only to the ar999game payments team on a need-to-know basis.

AR999Game uses cookies and similar tracking technologies on the ar999game.biz website. Here is a plain-English explanation of the types we use and what they do:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your language preference and ensure the bet slip retains your selections between pages. You cannot opt out of essential cookies without breaking core platform functionality.
• Performance cookies: These track how the platform is used in aggregate — which pages are most visited, where users spend the most time, and where errors occur. This data is used to improve ar999game's interface and performance. Performance data is collected in aggregated, anonymised form wherever possible.
• Functional cookies: These remember preferences you have set — for example, which game view or table type you last used in the live casino. They improve your experience without affecting platform security.
• Responsible gaming cookies: AR999Game uses a specific category of session tracking to support responsible gaming monitoring, including session duration reminders and cooling-off enforcement. These cannot be disabled without disabling responsible gaming protections.

AR999Game does not use third-party advertising cookies or retargeting pixels. We do not share cookie data with advertising networks.

You can manage cookie preferences in your browser settings. Note that disabling essential cookies will prevent you from logging in to ar999game.

As a registered player on ar999game, you have the following rights with respect to your personal data. These rights can be exercised by contacting us at support@ar999game.biz:

AR999Game retains personal data only for as long as necessary for the purposes described in this Policy or as required by applicable regulations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your ar999game account plus a standard post-closure period.
• Transaction records: Financial transaction data is retained for a minimum of 5 years from the date of each transaction to comply with anti-money laundering and gaming regulatory requirements.
• KYC / identity verification records: Retained for a minimum of 5 years from account closure or from the date of the last transaction, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction, to support future dispute resolution if required.
• Marketing consent records: Retained for 3 years from the date consent was last confirmed, to demonstrate compliance with marketing obligations.
• Responsible gaming records: Self-exclusion records and responsible gaming tool usage history are retained for the duration of the exclusion plus 5 years, to prevent re-registration during exclusion periods.

After applicable retention periods expire, data is securely deleted or anonymised such that it can no longer be attributed to you.

AR999Game does not knowingly collect personal data from persons under the age of 18. The platform is strictly for adults. Age verification is performed during the registration process and as part of KYC verification where applicable.

Where ar999game discovers that an account has been registered by or on behalf of a minor, we will immediately close the account, delete all personal data collected in connection with that account (except where retention is required by law), and void all associated balances and transactions.

Parents or guardians who believe a minor has registered on ar999game should contact us immediately at support@ar999game.biz. We will investigate and take action within 48 hours of a verified report.

AR999Game implements a layered security architecture to protect your personal data. This is not a theoretical commitment — these are the actual controls in place:

• TLS encryption in transit: All data moving between your device and ar999game servers is encrypted using TLS 1.2 or 1.3.
• At-rest encryption: Sensitive data fields are encrypted at the database level, not just at the server perimeter.
• Access controls: Employee access to personal data is restricted on a strict need-to-know basis. Database access is logged and monitored. No employee has unrestricted access to the full player data set.
• Two-factor authentication: Available to all players for account login. Available to ar999game staff for all internal system access. Mandatory for payment operations staff.
• Intrusion detection: Automated systems monitor for unusual access patterns, brute-force attempts and anomalous transaction volumes in real time.
• Regular security audits: AR999Game conducts periodic security assessments including penetration testing by qualified independent security professionals.
• Incident response: In the event of a confirmed data breach affecting your personal data, ar999game will notify affected players promptly and take all steps necessary to contain the incident and prevent recurrence.

AR999Game may update this Privacy Policy from time to time to reflect changes in our data practices, changes to the services we offer or changes in applicable law. The "Last Updated" date at the top of this page reflects when the current version came into effect.

Where changes are material — meaning they significantly affect how we use your data or reduce your rights — we will notify registered players via the mobile number or email address on file at least 7 days before the changes take effect. For minor clarifications or formatting updates that do not affect the substance of the Policy, notification may not be provided.

The current version of this Privacy Policy is always available at ar999game.biz/privacy-policy. We recommend reviewing it periodically, particularly after receiving a notification of changes.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how ar999game has handled your personal data, you can reach us through the following channels:

• Email: support@ar999game.biz — include "Privacy Request" in the subject line for fastest routing. We respond to privacy requests within 5 business days.
• Live Chat: Available 24/7 within the ar999game platform when logged in. Use live chat for urgent matters including suspected data breaches or unauthorised access to your account.

When submitting a data access or erasure request, please provide enough information for us to verify your identity — typically your registered mobile number and full name. We cannot process requests from persons we cannot verify as the account holder.