arr999 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by arr999 ("arr999", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal information relating to individuals ("you", "Player", "User") who access or use the arr999 website, mobile web platform, and associated services including casino gaming, sports betting, the arr999 Loyalty Program, and customer support.

arr999 is committed to processing personal data lawfully, fairly, and transparently. This Policy is intended to inform you in clear, plain English — accessible to Pakistani players across Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad — exactly how your information is handled from the moment you visit arr999 through the lifecycle of your registered account.

By accessing arr999, registering an account, or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Policy. If you do not accept the terms of this Policy, please discontinue use of arr999 immediately.

2. Data Controller

arr999 acts as the data controller in respect of personal data collected through the arr999 platform. As data controller, arr999 determines the purposes and means by which your personal data is processed.

For all privacy-related enquiries, data access requests, or complaints regarding arr999's handling of your personal information, please contact the arr999 Data Privacy team at: [email protected]

arr999 will respond to all substantive privacy enquiries within a reasonable timeframe and in any event within 30 days of receipt.

3. Data We Collect

arr999 collects the following categories of personal data in the course of operating the platform:

Registration Data: When you create an arr999 account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is necessary to establish your identity and verify your eligibility to use the platform.

Identity Verification (KYC) Data: To comply with applicable anti-money laundering and know-your-customer requirements, arr999 may request copies of government-issued identification (such as a Pakistani CNIC or passport) and proof of address. This data is processed solely for verification purposes.

Financial Data: arr999 collects information relating to deposits and withdrawals, including the payment method used (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah), transaction amounts in PKR, and transaction timestamps. Full payment instrument credentials (such as mobile wallet PINs or bank account passwords) are never stored by arr999.

Gaming Activity Data: arr999 records gameplay data including games played, wagers placed, bet outcomes, bonus usage, and Loyalty Points earned and redeemed. This data is used to manage your account, calculate balances, and apply responsible gaming controls.

Technical Data: arr999 automatically collects certain technical information when you access the platform, including your IP address, device type, browser type and version, operating system, session duration, and pages visited. This data is used for platform security, fraud prevention, and performance optimisation.

Communications Data: If you contact arr999 support, we retain records of the communication including the content of messages, the date and time of contact, and any resolutions provided.

4. How We Use Your Data

arr999 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and manage your arr999 account, including processing deposits and withdrawals in PKR, tracking your balance, and administering the Loyalty Program.
• Identity & Age Verification: To verify that you meet the minimum age requirement of 18 years and to confirm your identity as required by applicable regulations.
• Platform Security & Fraud Prevention: To detect and prevent fraudulent activity, unauthorised account access, money laundering, and abuse of promotional offers.
• Customer Support: To respond to your enquiries, resolve complaints, and provide assistance with account-related matters.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling and to administer responsible gaming tools including deposit limits, loss limits, and self-exclusion requests.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance and functionality of the arr999 platform.
• Marketing Communications: Where you have provided consent, to send promotional communications about arr999 offers, bonuses, and events. You may withdraw consent to marketing communications at any time.

5. Legal Basis for Processing

arr999 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between arr999 and you as a registered player, including account management, payment processing, and gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations and age verification requirements.
• Legitimate Interests: Processing carried out in pursuit of arr999's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including marketing communications and optional cookie categories. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing

arr999 does not sell, rent, or trade your personal data to third parties. arr999 may share personal data with the following categories of third parties in strictly limited circumstances:

• Payment Processors: arr999 shares necessary transaction data with payment service providers (including JazzCash, Easypaisa, and banking partners) solely to process deposits and withdrawals.
• Game Providers: arr999 may share technical identifiers (not full personal profiles) with licensed game software providers to facilitate gameplay and resolve technical disputes.
• Identity Verification Providers: Third-party KYC verification services may receive identity documents as necessary to complete the verification process.
• Regulatory & Law Enforcement Authorities: arr999 will disclose personal data to competent authorities when legally required to do so by applicable law, court order, or regulatory directive.
• Professional Advisers: arr999's legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential, need-to-know basis.

All third-party service providers processing personal data on arr999's behalf are bound by appropriate data processing agreements and are prohibited from using your data for any purpose other than those specified by arr999.

7. Payment Data & Financial Information

arr999 takes the security of financial information particularly seriously given that players entrust the platform with real PKR funds. The following principles govern arr999's handling of payment data:

• arr999 does not store full mobile wallet credentials, bank account passwords, or payment card numbers on its servers.
• Payment transaction records (amounts, dates, payment method identifiers) are retained for the period required by applicable financial regulations.
• All payment data in transit is protected by 256-bit SSL encryption.
• JazzCash, Easypaisa, and banking partners process payments via their own secure infrastructure subject to their respective privacy policies.

In the event of a suspected security incident affecting financial data, arr999 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

8. Cookies & Tracking Technologies

arr999 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help arr999 recognise returning visitors, maintain login sessions, and improve platform performance.

arr999 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Performance Cookies: Used to collect anonymised information about how visitors use arr999, which pages are most visited, and where errors occur. This data helps arr999 improve platform performance.
• Functional Cookies: Remember your preferences such as language settings and game lobby filters to personalise your arr999 experience.

You may configure your browser to block or delete cookies. Note that disabling certain cookies may affect the functionality of the arr999 platform, including the ability to maintain login sessions.

9. Data Retention

arr999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law.

• Active Account Data: Retained for the duration of your registered arr999 account and for a minimum of five years following account closure, as required by applicable financial and anti-money laundering regulations.
• KYC Documents: Retained for a minimum of five years following account closure or the end of the business relationship, whichever is later.
• Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Support Communications: Retained for a period of three years from the date of the communication unless a longer period is required in connection with an ongoing dispute or legal matter.
• Technical Logs: Retained for a period of twelve months for security and fraud prevention purposes.

At the end of the applicable retention period, arr999 will securely delete or anonymise personal data so that it can no longer be associated with an individual.

10. Your Data Rights

As a registered arr999 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact arr999 at [email protected].

• Right of Access: You may request a copy of the personal data arr999 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by arr999.
• Right to Erasure: In certain circumstances you may request deletion of your personal data. Note that arr999 may be required by law to retain certain data (e.g. KYC documents and transaction records) notwithstanding a deletion request.
• Right to Restriction: You may request that arr999 restrict processing of your personal data in certain circumstances, for example while the accuracy of data is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that arr999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where arr999 relies on legitimate interests as the legal basis for processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

11. Security Measures

arr999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and arr999 servers.
• Encryption of sensitive data at rest within arr999 databases.
• Role-based access controls ensuring that arr999 staff can only access personal data strictly necessary for their job functions.
• Regular security audits and penetration testing of the arr999 platform.
• Two-factor authentication available and recommended for all player accounts.
• Automated suspicious activity detection and real-time alerting systems.

While arr999 applies rigorous security standards, no internet-based system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their arr999 accounts and to enable two-factor authentication to protect their accounts from unauthorised access.

12. Children's Privacy

arr999 is strictly an adults-only platform. Access to arr999 is prohibited for any person under the age of 18. arr999 does not knowingly collect personal data from individuals under the age of 18.

If arr999 becomes aware that it has collected personal data from a person under 18, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on arr999, please contact us immediately at [email protected].

13. International Data Transfers

arr999 may process personal data on servers located outside Pakistan. Where personal data is transferred internationally, arr999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law, including the use of standard contractual clauses, data processing agreements, and adequacy assessments where applicable.

14. Changes to This Privacy Policy

arr999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, arr999 will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the arr999 website prior to the changes taking effect.

The effective date of the current version of this Policy is stated at the top of this page. Your continued use of arr999 following notification of changes to this Policy constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, please close your account and cease using the platform.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or arr999's handling of your personal data, please contact the arr999 privacy team:

Email: [email protected]

arr999 will acknowledge receipt of all privacy-related communications promptly and aim to provide a substantive response within 30 days.

Last updated: June 2026. This Policy supersedes all previous versions of the arr999 Privacy Policy.