ar99 Privacy Policy

01 Who We Are

ar99 is an internationally licensed online casino and sports betting platform operating at ar99.biz. Our platform is designed for and marketed to adult players in Pakistan and provides a range of services including cricket and PSL betting, live casino games, slot games, fishing games, and other online gaming products.

For the purposes of this Privacy Policy, ar99 acts as the data controller in respect of all personal information collected from registered users and visitors to ar99.biz. This means ar99 determines the purposes for which, and the means by which, your personal data is processed.

If you have any questions about how your data is handled, you can reach our data protection point of contact at [email protected]. Our Karachi-based support team handles all data-related enquiries in both English and Urdu and aims to respond within two business days.

02 Data We Collect

ar99 collects personal data in several categories depending on the nature of your interaction with the platform. The table below summarises what we collect and why.

03 How We Collect Data

ar99 collects personal data through the following channels and mechanisms:

Direct Collection

• When you complete the account registration form on ar99.biz;
• When you submit KYC verification documents through the account portal or via email;
• When you make a deposit or request a withdrawal using any supported payment method;
• When you contact our customer support team via live chat or email;
• When you respond to surveys, promotions, or opt-in marketing campaigns;
• When you set responsible gaming limits or request self-exclusion from your account settings.

Automated Collection

• Through cookies and similar tracking technologies placed on your browser when you visit ar99.biz — see Section 7 for full details;
• Through server logs that automatically record your IP address, browser type, pages visited, and timestamps when you access the platform;
• Through our anti-fraud and security monitoring systems that analyse betting patterns, login behaviour, and transaction activity in real time;
• Through our responsible gaming monitoring tools that track gameplay frequency, session duration, and deposit velocity.

Third-Party Sources

• Identity verification service providers engaged by ar99 to validate CNIC and passport documents;
• Payment processors who confirm transaction status and account ownership details;
• Fraud intelligence databases that provide risk scoring for new account registrations.

04 How We Use Your Data

ar99 uses your personal data for the following purposes. Where a specific legal basis applies, it is referenced in Section 5.

• Account Management: Creating and maintaining your ar99 player account, including authentication, password resets, and account settings management;
• Identity Verification & KYC: Verifying your identity and age (21+) in compliance with our international gaming licence requirements, including ongoing re-verification as required;
• Payment Processing: Processing your deposits and withdrawal requests through your chosen payment method, including reconciliation and dispute handling with payment providers;
• Fraud Prevention & Security: Monitoring for suspicious account activity, detecting multi-accounting, investigating potential breaches of our Terms and Conditions, and protecting the security of all users on the platform;
• Anti-Money Laundering (AML): Monitoring financial transactions for patterns consistent with money laundering or terrorist financing as required by our licensing obligations;
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes;
• Responsible Gaming: Monitoring gameplay and deposit patterns for signs of problem gambling, delivering proactive responsible gaming interventions where appropriate, and administering self-exclusion and deposit limit tools;
• Personalisation: Tailoring bonus offers, game recommendations, and promotional communications to your activity profile — only where you have opted in to marketing;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the ar99 platform, fix bugs, and develop new features;
• Legal Compliance: Retaining records as required by our gaming licence, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms and Conditions.

05 Legal Basis for Processing

ar99 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your ar99 account, process your bets and transactions, and deliver the gaming services you have signed up for. Without this processing, we cannot provide you with the ar99 service;
• Legal Obligation: Processing that is required to comply with our gaming licence conditions, including KYC verification, AML monitoring, age verification (21+), and the retention of records for regulatory audit purposes;
• Legitimate Interests: Processing carried out for ar99's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud detection, platform security, responsible gaming monitoring, and internal analytics. We conduct a balancing test before relying on this basis;
• Consent: Processing activities for which we have obtained your explicit opt-in consent, primarily marketing communications (promotional emails, bonus SMS alerts). You may withdraw consent at any time from your account settings without affecting the lawfulness of prior processing.

06 Data Sharing & Third Parties

ar99 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following limited circumstances:

Service Providers

We engage carefully vetted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• KYC and identity verification platforms that validate your CNIC, passport, and proof-of-address documents;
• Payment processors facilitating JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 transactions;
• Cloud infrastructure and hosting providers that store the ar99 platform and its databases in secure, access-controlled environments;
• Customer support software providers that host our live chat platform and support ticketing system;
• Anti-fraud and security analytics vendors who provide real-time risk scoring for transactions and account activity.

Regulatory & Legal Disclosure

ar99 may disclose your personal data to government authorities, regulators, or law enforcement agencies where we are legally required to do so, including in response to a court order, a regulatory instruction from our licensing authority, or a lawful request from Pakistani or international law enforcement.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of ar99's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address on your account prior to any such transfer and given the opportunity to close your account if you do not consent.

07 Cookies & Tracking Technologies

ar99 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform correctly, maintain your login session, detect fraud, and — where you have consented — personalise your experience and analyse platform usage.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for the ar99 platform to function. These include session authentication cookies that keep you logged in, security tokens, and fraud detection identifiers. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming reminder configurations.
• Analytics Cookies: Collect anonymised data about how visitors use ar99.biz — which pages are visited most, how long sessions last, and which games are most popular. This data is aggregated and does not identify individuals.
• Marketing Cookies: Used only where you have opted in to personalised promotions. These cookies help ar99 show relevant bonus offers based on your gaming activity. You may opt out of marketing cookies at any time from your account settings.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the ar99 platform. Disabling other cookie categories will not affect your access to core gaming services.

08 Data Retention

ar99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with our legal, regulatory, and licensing obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account and for a minimum of five (5) years after account closure, as required by our gaming licence for audit and AML compliance purposes;
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction on your account, in line with international anti-money laundering standards;
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction;
• Support Communications: Retained for three (3) years from the date of the last communication to support dispute resolution and quality assurance;
• Marketing Consent Records: Retained for three (3) years from the date consent was granted or withdrawn, as evidence of your consent status;
• Technical & Security Logs: Retained for ninety (90) days in active systems, then archived for up to twelve (12) months for security incident investigation purposes.

When data is no longer required and the applicable retention period has expired, ar99 securely deletes or anonymises the data in accordance with our internal data disposal procedures.

09 Your Rights

As an ar99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered username and a clear description of your request.

• Right of Access: You may request a copy of the personal data ar99 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You can update most information directly in your account settings panel.
• Right to Erasure: You may request that ar99 delete your personal data. This right is subject to our legal retention obligations — we cannot delete data that we are legally required to retain under our gaming licence or AML obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format to transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. Objections to marketing are actioned immediately via your account settings or by contacting support.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

10 Data Security

ar99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• TLS 1.2+ encryption for all data transmitted between your browser and ar99.biz;
• AES-256 encryption at rest for sensitive data stored in our databases;
• Role-based access controls ensuring that ar99 staff can only access personal data relevant to their specific job function;
• Multi-factor authentication required for all internal ar99 system access;
• Regular third-party penetration testing and vulnerability assessments of the ar99 platform;
• 24/7 security monitoring with automated alerting for anomalous access patterns;
• Regular staff training on data protection obligations and security best practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, ar99 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach. Notifications will be sent to the email address registered on your account.

While ar99 maintains robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for taking reasonable precautions when accessing your ar99 account on public or shared networks.

11 Children & Minors

ar99 takes the protection of minors extremely seriously. Our registration process requires all users to confirm they are 21 years of age or older, and we enforce mandatory KYC identity verification to validate this claim. Where ar99 discovers that personal data has been collected from a person under 21 years of age, we will:

• Immediately suspend the account and freeze all associated balances;
• Permanently delete all personal data collected from the minor as soon as practicable, subject to any overriding legal obligation;
• Refund any deposits made, net of any winnings generated, following investigation;
• Where appropriate, refer the matter to the relevant authorities.

If you believe a minor has registered on ar99 using false information, please contact us immediately at [email protected] with any relevant details and we will investigate as a matter of priority.

12 Changes to This Policy

ar99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. When material changes are made, we will notify registered players by email to the address on their account and by posting a prominent notice on the ar99.biz homepage, with a minimum of seven (7) days' notice before the updated policy takes effect.

The "Last updated" date at the top of this page will always reflect the date of the most recent revision. The version number is also updated with each substantive change. We encourage you to review this Privacy Policy periodically to stay informed about how ar99 protects your data.

Continued use of the ar99 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the changes, you must cease using the platform and contact support to request account closure and withdrawal of any remaining balance.

13 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ar99 handles your personal data, please contact us through any of the following channels:

• Email: [email protected] — plain text, not a clickable link
• Live Chat: Available 24/7 via the platform's chat widget — average response time 3–5 minutes
• Language: Support available in English and Urdu — our Karachi-based team handles all data enquiries

When contacting us regarding a data rights request or privacy complaint, please include your registered username, the email address on your account, and a clear description of your request or concern so that we can assist you efficiently.

If you are not satisfied with ar99's response to your privacy complaint, you may escalate the matter to ar99's licensing authority. Details of the relevant authority are available on request from our compliance team at [email protected].

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. The current version is always available at ar99.biz/privacy-policy.