arr999 Privacy Policy

1. Overview

arr999 ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access or interact with the arr999 platform (the "Platform"). This Privacy Policy ("Policy") sets out in clear, detailed terms what personal data arr999 collects from Pakistani users and other visitors, how that data is used, who it may be shared with, how long it is retained, and what rights you have in relation to that data.

This Policy applies to all data processed in connection with your use of the arr999 website, mobile interface, account registration, deposits and withdrawals, betting and gaming activity, and customer support interactions. It should be read alongside the arr999 Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

arr999 collects the following categories of personal data from registered users and, in some cases, from visitors who have not completed registration:

• Identity Data: Full legal name, date of birth, CNIC number (where required for KYC), scanned copies of identity documents submitted during verification.
• Contact Data: Pakistani mobile number, email address (if provided), city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad).
• Account Data: Username, account creation date, account status, login history, session timestamps.
• Financial Data: Deposit and withdrawal transaction records, payment method references (e.g., JazzCash wallet ID, Easypaisa number, bank account reference number), PKR balance history. Raw payment credentials such as full bank account numbers or full card numbers are not stored by arr999.
• Betting & Gaming Data: Game history, bet records, wagering activity, bonus usage, win and loss history.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and session duration data collected automatically through the Platform.
• Communications Data: Records of your interactions with arr999 customer support, including live chat transcripts and support ticket content.

3. How We Collect Your Data

arr999 collects personal data through the following mechanisms:

• Direct provision: Data you voluntarily provide during account registration, KYC verification, payment setup, or when contacting support.
• Automated collection: Technical data collected automatically when you access the Platform through your browser or device, including via cookies and similar tracking technologies (see Section 8).
• Third-party providers: Payment confirmation data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other approved payment partners as part of processing deposit and withdrawal transactions.
• Identity verification services: Where arr999 uses third-party KYC verification providers to validate identity documents, those providers may supply additional data to complete the verification process.

4. Use of Personal Data

arr999 uses personal data for the following purposes:

• To create, maintain, and manage your arr999 account;
• To process deposits and withdrawals in PKR through your chosen payment methods;
• To verify your identity and age as part of KYC compliance obligations;
• To operate and maintain the betting, casino, and gaming services offered on the Platform;
• To detect, investigate, and prevent fraud, money laundering, and other unlawful activity;
• To provide customer support and respond to queries submitted via live chat or email;
• To send transactional communications including deposit confirmations, withdrawal notifications, and security alerts (these communications are necessary for account operation and cannot be opted out of while your account is active);
• To send promotional communications, including bonus offers and platform updates, where you have not opted out of receiving such communications;
• To improve Platform functionality and user experience through analysis of aggregated, anonymised usage data;
• To comply with legal and regulatory obligations applicable to arr999's operations.

5. Legal Basis for Processing

arr999 processes personal data on the following legal bases:

• Contractual necessity: Processing required to operate your arr999 account, process transactions, and deliver the services you have contracted for under the Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) requirements, KYC obligations, and fraud prevention.
• Legitimate interests: Processing carried out for arr999's legitimate business interests, including fraud detection, platform security, and service improvement, where those interests are not overridden by your rights.
• Consent: Processing of data for marketing communications where you have given consent, which may be withdrawn at any time.

6. Data Sharing & Third-Party Disclosure

arr999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data may be shared with third parties only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, and USDT TRC20 infrastructure providers, as necessary to process financial transactions on your account.
• KYC verification providers: Identity verification service providers engaged by arr999 to validate user identity and age documentation.
• Game software providers: Third-party game providers (such as Pragmatic Play, PG Soft, and Evolution Gaming) receive the minimum data necessary to operate game sessions on the Platform.
• Legal authorities: Where arr999 is required by applicable law, court order, or regulatory authority to disclose user data, it will do so to the extent legally required.
• Business transfers: In the event of a merger, acquisition, or sale of arr999 assets, user data may be transferred as part of that transaction, subject to appropriate confidentiality obligations.

7. Payment Data & Financial Privacy

arr999 treats financial data with a heightened level of care. Deposit and withdrawal transactions are processed through the APIs of each approved payment provider. arr999 stores transaction reference numbers, amounts, timestamps, and payment method identifiers (e.g., the last four digits of a card or the first/last digits of a mobile wallet number) for accounting, fraud prevention, and dispute resolution purposes. Full payment credentials — complete card numbers, full bank account numbers, or complete mobile wallet PINs — are never stored on arr999 servers.

All financial data transmitted between your device and the arr999 Platform, and between the Platform and payment providers, is encrypted using SSL/TLS protocols. Withdrawal requests are subject to identity verification to prevent financial fraud and ensure compliance with AML obligations.

8. Cookies & Tracking Technologies

arr999 uses cookies and similar browser-based technologies to operate essential Platform functions and to understand how the Platform is used. The following categories of cookies may be set when you visit arr999:

• Essential cookies: Required for Platform operation, including session authentication, login persistence, and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings and game history display options.
• Analytics cookies: Collect anonymised data about Platform usage patterns to help arr999 improve performance and user experience. This data does not identify individual users.

You may configure your browser to refuse or delete cookies. Note that disabling essential cookies will prevent you from logging in to your arr999 account and using core Platform features.

9. Data Retention

arr999 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Specifically:

• Account data and transaction records are retained for a minimum period required under applicable AML and financial record-keeping regulations, typically a minimum of five years from the date of the last transaction or account closure.
• KYC documentation is retained for the duration of the account relationship and for the legally required period thereafter.
• Support communications are retained for a period sufficient to resolve any ongoing queries or disputes, and for general record-keeping purposes.
• Technical and log data is retained for a shorter period determined by operational necessity, typically not exceeding twelve months.

On expiry of applicable retention periods, personal data is securely deleted or anonymised.

10. Data Security

arr999 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit, access controls limiting data access to authorised personnel on a need-to-know basis, secure credential storage using industry-standard hashing protocols, and regular security reviews of Platform infrastructure.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. Users are responsible for maintaining the confidentiality of their own login credentials and for notifying arr999 promptly in the event of suspected unauthorised account access.

11. Your Rights in Relation to Personal Data

Subject to applicable law, you have the following rights in relation to the personal data arr999 holds about you:

• Right of access: You may request a copy of the personal data arr999 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where arr999 no longer has a lawful basis for processing it, subject to retention obligations described in Section 9.
• Right to restrict processing: You may request that arr999 restrict the processing of your data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact arr999 via live chat or at [email protected]. Requests will be acknowledged and processed within a reasonable timeframe consistent with applicable requirements.

12. Minors

The arr999 Platform is strictly for individuals aged 18 years and above. arr999 does not knowingly collect personal data from persons under 18 years of age. If arr999 becomes aware that personal data has been collected from a person under 18, that data will be deleted and the associated account will be closed immediately. If you believe a minor has registered on arr999, please notify support promptly at [email protected].

13. Changes to This Privacy Policy

arr999 reserves the right to update this Privacy Policy at any time. Where material changes are made, arr999 will take reasonable steps to notify registered users via the Platform or through contact details on file. The date of the most recent revision is displayed at the top of this Policy. Your continued use of the arr999 Platform following publication of any revision constitutes your acceptance of the updated Policy.

14. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by arr999, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the arr999 Platform
• Response time: typically under 2 hours

This Privacy Policy was last reviewed and updated in June 2026.