AR999 Privacy Policy –
How We Handle Your Personal Data

1 Introduction

This Privacy Policy explains how AR999 ("we," "us," "the Platform") collects, uses, stores, and protects the personal information of players who use ar999.bar ("the Site"). By creating an account or using the AR999 platform in any way, you confirm that you have read and understood this Privacy Policy and consent to the data practices it describes.

This policy applies to all personal data collected through the AR999 website, any future mobile applications, and any communications between you and AR999 support staff. It should be read alongside the Terms and Conditions, which form the broader legal agreement governing your use of the platform.

We review and update this policy periodically. The "Last Updated" date at the top of this page reflects when the most recent changes were made. We recommend reviewing this page occasionally if you are an active AR999 user — particularly ahead of any major platform updates.

2 Data We Collect

AR999 collects personal data in the following categories. We only collect what is genuinely required to operate your account and deliver our services effectively.

AR999 does not collect sensitive personal data beyond what is required for identity verification (such as your CNIC). We do not collect biometric data, political opinions, or religious information.

3 How We Use Your Data

Every piece of data AR999 collects has a specific, legitimate purpose. We do not process your data for any purpose beyond those listed below:

• Account management: Creating, maintaining, and securing your AR999 account, including login verification and account recovery.
• Transaction processing: Processing PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer, and compatible mobile wallets. Accurate transaction records are essential to maintaining your account balance correctly.
• Identity verification (KYC): Confirming your identity before releasing withdrawals and during periodic account reviews, in line with responsible platform management practices.
• Fraud prevention and security: Detecting unusual account activity, preventing unauthorised access, and identifying potential misuse of the platform including multi-accounting or payment fraud.
• Customer support: Responding to your queries, resolving disputes, and providing help with account issues. Support communications may be reviewed for quality assurance purposes.
• Platform improvement: Analysing aggregated usage data to understand how players use AR999, which game categories are most popular, and where the platform experience can be made smoother. This analysis uses anonymised data wherever possible.
• Promotional communications: Sending you relevant bonus offers, PSL cricket betting promotions, and platform updates — but only if you have not opted out of marketing communications through your account settings.
• Responsible gaming monitoring: Reviewing account activity patterns to identify signs of problematic play behaviour. Where such patterns are detected, AR999 may reach out with information about responsible gaming tools available in your account.

4 Sharing Your Data

AR999 does not sell, rent, or trade personal data to any outside party. We share data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment processors: When you make a deposit or withdrawal using JazzCash, Easypaisa, Raast, or bank transfer, the relevant transaction data is shared with that payment provider to complete the transfer. Each provider operates under its own privacy and security standards.
• Identity verification partners: If AR999 uses a third-party KYC service to assist with document verification, your identity documents may be passed to that partner for processing. Any such partner is contractually bound to handle your data confidentially and to use it only for verification purposes.
• Game software providers: When you play games from providers such as Pragmatic Play, Evolution Gaming, or similar, the provider's software runs within the AR999 platform. Game session data (including bet amounts and outcomes) may be logged by the provider's systems as part of normal game operation.
• Legal and regulatory obligations: AR999 may disclose personal data if required to do so by a valid legal order, court process, or where disclosure is necessary to prevent fraud, money laundering, or other serious harm.
• Platform infrastructure providers: Hosting, cloud storage, and security service providers that support AR999's technical operations may have limited access to data as part of their contracted services. These providers are bound by confidentiality agreements.

5 Cookies & Tracking Technologies

AR999 uses cookies and similar tracking technologies to make the platform function correctly and to improve your experience. A cookie is a small text file placed on your device when you visit a website. AR999 uses the following categories of cookies:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your preferences, and keep the game lobby loading correctly. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: These help AR999 understand how the platform is used — which pages are visited most, where players spend the most time, and where technical issues might be occurring. Analytics data is aggregated and does not identify individual players.
• Security cookies: These support fraud detection and help AR999 identify suspicious login attempts or unusual account activity patterns based on device and session behaviour.

Most web browsers allow you to manage cookie preferences through their settings. You can choose to block or delete cookies, though doing so may affect your ability to use certain features of the AR999 platform — including staying logged in between sessions.

AR999 does not use third-party advertising cookies or tracking pixels for external ad networks.

6 Data Retention

AR999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our internal data management policies. The general retention periods are as follows:

• Active account data: Retained for the duration of your account being open and active on the platform.
• Transaction records: Financial transaction data including PKR deposit and withdrawal records is retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping practices.
• KYC documents: Identity verification documents are retained for the period required to support account management and are securely deleted when no longer needed.
• Support communications: Chat logs and email records with AR999 support are typically retained for up to two years from the date of the conversation.
• Closed accounts: When an account is closed, most personal data is deleted or anonymised within a reasonable period, except where retention is required for legal, fraud prevention, or financial compliance reasons.

When data is no longer required, AR999 securely deletes or anonymises it so that it can no longer be linked back to you as an individual.

7 Security Measures

Protecting your personal data is a core operational priority for AR999. We implement the following technical and organisational security measures to safeguard the information we hold:

• Encryption in transit: All data transmitted between your device and ar999.bar is encrypted using TLS (Transport Layer Security). This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encrypted storage: Sensitive data stored in AR999's systems — including identity documents and financial records — is encrypted at rest using industry-standard encryption methods.
• Access controls: Access to personal data within AR999's systems is restricted to staff who genuinely need it to perform their role. Access is logged and reviewed periodically.
• Fraud monitoring: AR999's security systems monitor for unusual login patterns, multiple account activity, and suspicious transaction behaviour. Accounts flagged by these systems may be temporarily restricted pending review.
• Regular security reviews: AR999 conducts periodic reviews of its data security practices and updates its systems in response to emerging threats and industry best practices.

8 Your Rights Over Your Data

As an AR999 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact AR999 support through the platform's live chat or the email address listed in Section 11.

• Right to access: You can request a copy of the personal data AR999 holds about you. We will provide this in a clear format within a reasonable timeframe.
• Right to correction: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. For name or date of birth corrections, verification documents will be required.
• Right to deletion: You can request that AR999 delete your personal data. We will fulfil deletion requests where there is no overriding legal or operational reason to retain the data — for example, transaction records that must be kept for financial compliance purposes may not be immediately deletable.
• Right to restrict processing: In certain circumstances, you can ask AR999 to limit how your data is used — for example, during a dispute about the accuracy of the data.
• Right to withdraw consent: Where AR999's use of your data is based on your consent (such as marketing communications), you can withdraw that consent at any time through your account settings or by contacting support.
• Right to data portability: You may request your personal data in a structured, commonly used format if you wish to transfer it to another service.

9 Minors & Under-18 Protection

AR999 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. The registration process requires players to confirm their date of birth and agree that they are 18 or older. Identity verification checks are used to confirm age where required.

If AR999 discovers or is informed that a player under 18 has created an account — whether by providing false date of birth information or any other means — that account will be immediately closed. Any deposits made will be returned through the original payment method after review, and no winnings will be released.

If you are a parent or guardian and believe a minor has been using AR999, please contact support immediately so we can investigate and take appropriate action.

10 Changes to This Privacy Policy

AR999 may update this Privacy Policy from time to time to reflect changes in how we operate, updates to data handling practices, or in response to platform developments. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

For material changes — those that significantly affect how your data is collected or used — AR999 will make reasonable efforts to notify active players via account notification or email before the changes take effect. Continued use of the AR999 platform after a policy update constitutes your acceptance of the revised terms.

If you do not agree with any changes to this policy, you should stop using the platform and may request account closure through AR999 support. We will handle any such requests in accordance with the data retention guidelines described in Section 6.

11 Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how AR999 has handled your personal information, you can reach us through the following channels:

• Live chat: Available 24/7 directly within the AR999 platform. This is the fastest way to reach our support team for most queries.
• Email: [email protected] — for detailed data requests or formal privacy-related enquiries, email is the most appropriate channel. Include your registered account details so we can identify your account.

For formal data access or deletion requests, please include your full name, the email address registered to your AR999 account, and a clear description of your request. This helps us process your request accurately and without unnecessary delays.