ar99999 Privacy Policy – How We Handle Your Data in Pakistan

1. Introduction

This Privacy Policy describes how ar99999 ("ar99999", "we", "us", "our") collects, uses, stores, and protects the personal data of players and visitors ("you", "your") who access the ar99999 website and services at ar99999.bet.

ar99999 is committed to protecting the privacy of every Pakistani player on our platform. We understand that sharing personal information — your name, mobile number, payment details — requires trust, and we take that trust seriously. This policy is designed to tell you plainly what we do with your data, not to bury important facts in legal language.

By registering an account or using any part of the ar99999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described within it. If you do not agree, please do not use the platform.

2. Data We Collect

ar99999 collects personal data in the following categories:

2.1 Account Registration Data

When you create an ar99999 account, we collect:

• Full legal name as it appears on your CNIC or passport
• Date of birth (used to verify you are 18 or older)
• Pakistani mobile number
• Email address (optional but recommended for account recovery)
• Username and password (password stored in hashed, non-reversible form)
• Residential address in Pakistan

2.2 Identity Verification Data

When identity verification is required — for example, before processing a withdrawal above Rs 50,000 — ar99999 may collect:

• A copy of your CNIC (Computerised National Identity Card), passport, or driving licence
• A selfie or live photo for liveness verification
• Proof of payment method (e.g., screenshot of your Easypaisa account showing your name and number)

2.3 Financial and Payment Data

When you make a deposit or withdrawal, ar99999 records transaction information including the payment method used, transaction reference numbers, amounts, and timestamps. Full card numbers and wallet PINs are never stored by ar99999 — these are processed directly by our certified payment processors.

2.4 Platform Usage Data

ar99999 automatically collects data about how you use the platform, including:

• Pages visited, games played, and bets placed (with stake, odds, and outcome)
• Session start and end times
• Device type, operating system, and browser version
• IP address and approximate geographic location (city level)
• Referral source if you arrived at ar99999 via a link

2.5 Support Interaction Data

When you contact ar99999 customer support via live chat or email, we retain records of those conversations. This includes the content of your messages, the issue raised, and the resolution outcome. These records allow us to provide consistent support and track recurring issues.

2.6 Cookies and Tracking Data

ar99999 uses cookies and similar tracking technologies. These are described in detail in Section 7 of this policy.

3. How We Use Your Data

ar99999 uses the personal data we collect for the following purposes:

ar99999 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human review.

4. Legal Basis for Processing

ar99999 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our agreement with you — running your account, processing payments, settling bets.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate Interest: Processing for purposes that are in ar99999's or your interest and do not override your privacy rights — fraud prevention, platform security, responsible gaming monitoring, and service improvement.
• Consent: For optional processing such as marketing communications. You can withdraw consent at any time.

5. Data Sharing with Third Parties

ar99999 does not sell your personal data. We share data with third parties only in the following circumstances:

5.1 Service Providers

ar99999 works with third-party service providers who process data on our behalf under strict contractual data processing agreements. These include:

• Payment processors (Easypaisa, JazzCash partner infrastructure, card processing networks)
• Identity verification providers
• Fraud detection and anti-money laundering screening services
• Cloud hosting and IT infrastructure providers
• Customer support platform operators
• Game software providers (game history data may be passed to studios for technical resolution of disputes)

5.2 Legal and Regulatory Obligations

ar99999 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so — for example, as part of an anti-money laundering investigation, in response to a court order, or in compliance with our gaming licence conditions. We disclose only the minimum data necessary to comply.

5.3 Business Transactions

In the event of a merger, acquisition, or transfer of ar99999's business, player data may be transferred to the acquiring entity as part of the transaction. We will notify affected players before their data is subject to a different privacy policy.

6. Payment Data and PKR Transactions

Because ar99999 operates exclusively in Pakistani Rupees (PKR) and works with local payment infrastructure, it is worth explaining specifically how payment data is handled on the platform.

When you make a deposit using Easypaisa or JazzCash, the transaction is initiated through the respective payment network's own secure API. ar99999 receives confirmation of the transaction and the amount credited — we do not receive or store your Easypaisa PIN, JazzCash PIN, or mobile banking password at any point. These credentials never pass through ar99999's systems.

For bank IBFT transfers, ar99999 receives your bank account number and transfer reference from the transaction confirmation. This information is retained for reconciliation and anti-money laundering purposes only.

For Visa and Mastercard card payments, card processing is handled by a PCI-DSS certified payment gateway. ar99999 stores only the last four digits of your card number, your card type, and the expiry month/year — sufficient for you to identify your payment method in your account, but not sufficient for the card to be misused if our records were ever compromised.

All payment data is subject to ar99999's five-year minimum retention period in line with anti-money laundering regulations, even if your account is closed earlier.

7. Cookies and Tracking Technologies

ar99999 uses cookies — small text files stored on your device — and similar tracking technologies to make the platform work properly and to understand how players use it. Here is a breakdown of the cookies we use:

ar99999 does not use third-party advertising cookies or tracking pixels from social media platforms. Analytics are conducted using anonymised, aggregated data only — individual player browsing is not profiled for advertising purposes.

You can manage optional cookies through your browser settings. Disabling essential cookies will prevent the ar99999 platform from functioning correctly.

8. Data Retention

ar99999 retains different categories of data for different periods, depending on why it was collected and what legal obligations apply:

• Active account data: Retained for the full duration your account is open, plus a minimum of five years after closure.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in compliance with anti-money laundering and financial record-keeping regulations.
• Identity verification documents: Retained for five years after your account is closed. Copies are stored in encrypted, access-controlled storage.
• Customer support records: Retained for three years from the date of each interaction.
• Marketing consent records: Retained for the duration of your consent and for two years after it is withdrawn, as evidence of compliance.
• Anonymised analytics data: May be retained indefinitely as it does not contain any personally identifying information.

After the applicable retention period, personal data is either securely deleted or irreversibly anonymised so it can no longer be attributed to you.

9. How We Protect Your Data

ar99999 implements industry-standard security measures to protect your personal data against unauthorised access, loss, or disclosure:

• SSL/TLS Encryption: All data transmitted between your device and ar99999's servers is encrypted in transit using current TLS protocols.
• Encrypted Storage: Sensitive data — including identity documents and payment records — is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to player personal data is restricted to employees and systems that require it for their specific function. All access is logged and audited.
• Regular Security Audits: ar99999 conducts regular penetration testing and security reviews of the platform.
• Two-Factor Authentication: Available for player accounts to add an additional layer of login security.
• Incident Response: ar99999 maintains a data breach response plan. In the event of a breach affecting your data, we will notify you and relevant authorities within the timeframes required by applicable law.

10. Your Data Rights

As an ar99999 player, you have the following rights over the personal data we hold about you. These rights can be exercised by contacting ar99999 support:

To exercise any of these rights, contact ar99999 support at support@ar99999.bet with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and respond fully within 30 days.

11. Children and Minors

ar99999 is strictly for adults aged 18 and over. We do not knowingly collect or process personal data from anyone under 18 years of age. If ar99999 discovers or has reason to believe that a registered account belongs to a person under 18, we will immediately suspend the account, conduct an investigation, and if confirmed, permanently close the account and delete all associated data, subject to any legal retention requirements.

If you are a parent or guardian and believe that a minor in your care has registered with ar99999, please contact us immediately at support@ar99999.bet so we can investigate and take appropriate action.

12. Marketing Communications

ar99999 may send you promotional communications — bonus offers, new game announcements, sports betting previews — via SMS or email if you have opted in to receive them during registration or through your account settings.

You can withdraw your consent to marketing communications at any time by:

• Clicking "Unsubscribe" in any marketing email from ar99999
• Replying STOP to any marketing SMS
• Updating your communication preferences in your ar99999 account settings
• Contacting ar99999 support directly

Withdrawing marketing consent does not affect your ability to use the platform or receive service-essential communications — such as transaction confirmations, account security alerts, or support responses — which are sent regardless of marketing preference.

13. Changes to This Privacy Policy

ar99999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make changes:

• The revised policy will be published on this page with an updated effective date.
• For significant changes — those that materially affect how we collect or use your personal data — we will notify registered players via SMS or email at least 14 days before the changes take effect.
• Minor administrative changes that do not affect your rights or the way we handle your data may be made without separate notification.

We encourage Pakistani players to review this Privacy Policy periodically. The effective date at the top of this page tells you when it was last updated. Continued use of ar99999 after any revision constitutes acceptance of the updated policy.

14. How to Contact ar99999 About Privacy

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact ar99999 using the details below:

ar99999 takes privacy complaints seriously. If you raise a concern with us and you are not satisfied with our response, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction.