ar999h Privacy Policy

1. Who We Are

ar999h is an internationally licensed online casino and sports betting platform operating at ar999h.org and serving players across Pakistan. When this Privacy Policy refers to "ar999h", "we", "us", or "our", it refers to the operating entity behind the ar999h platform acting as the data controller in respect of all personal information collected through the website and its associated services.

As the data controller, ar999h determines the purposes and means by which your personal data is processed. We are committed to handling that data responsibly, securely, and in strict accordance with the obligations imposed by our international gaming licence and applicable data protection frameworks.

2. Data We Collect

ar999h collects the minimum data necessary to operate a licensed gaming platform, verify player identity, process payments, and provide customer support. The categories of personal data we may hold about you are set out below.

2.1 Identity & Registration Data

• Full legal name as it appears on your national identity document
• Date of birth (required to verify the 21+ age requirement)
• Gender (where provided voluntarily)
• CNIC number or passport number for KYC verification
• Photograph of identity document submitted during KYC
• Proof of address documentation where requested

2.2 Contact Data

• Email address registered to your account
• Pakistani mobile number (where provided for account verification or JazzCash / EasyPaisa transactions)
• City or region of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad)

2.3 Financial & Transaction Data

• Payment method details — mobile wallet identifiers (JazzCash, EasyPaisa) or bank account references (HBL, UBL, Meezan Bank, MCB)
• Deposit and withdrawal history including amounts in PKR, timestamps, and transaction references
• Bonus and promotional credit history
• Account balance at any given time

2.4 Gaming & Behavioural Data

• Wagering history across casino games, slots, live dealer tables, and sportsbook markets
• Game session durations and frequency of play
• Preferred game categories and betting patterns
• Responsible gaming tool usage (deposit limits set, cool-off periods activated, self-exclusion requests)

2.5 Technical & Device Data

• IP address at time of registration and each subsequent login
• Device type, operating system, and browser details
• Unique device identifiers where applicable
• Geolocation data (country and city level) derived from IP address

2.6 Communications Data

• Live chat transcripts with our support team
• Email correspondence with ar999h support
• Complaint and dispute records
• Survey or feedback responses where you choose to participate

3. How We Collect Your Data

ar999h collects personal data through the following channels:

• Direct registration: Information you provide when creating your ar999h account, including name, email, date of birth, and contact details.
• KYC submission: Identity and address documents you upload in response to a verification request.
• Payment processing: Transaction details shared by payment processors including JazzCash, EasyPaisa, and the banking partners listed above when you make a deposit or withdrawal.
• Platform usage: Automatically collected data as you navigate the site, place bets, and interact with games — including session logs, clickstreams, and device fingerprints.
• Cookies and tracking technologies: As described in Section 9 of this Policy.
• Customer support interactions: Information shared during live chat sessions or email exchanges with our support team.
• Third-party game providers: Aggregated game session data returned by certified game engine providers whose titles are hosted on the ar999h platform.

4. How We Use Your Data

ar999h uses the personal data it collects for the specific purposes set out in the table below. We do not use your data for any purpose not listed here without first notifying you and, where required, obtaining your consent.

5. Legal Basis for Processing

ar999h processes personal data under one or more of the following legal bases, as indicated in the table in Section 4:

• Contract performance: Processing that is necessary to deliver the services you have signed up for on ar999h, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with the conditions of our international gaming licence, including KYC verification, anti-money laundering checks, responsible gaming obligations, and regulatory reporting.
• Legitimate interests: Processing that serves ar999h's legitimate business interests — such as fraud prevention, platform security, and analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing that depends on your freely given, specific, and informed agreement — principally the sending of marketing communications. You may withdraw your consent at any time by updating your account preferences or contacting support.

6. Data Sharing & Disclosure

ar999h does not sell your personal data to any third party under any circumstances. We may share your data with the categories of recipients listed below, strictly on a need-to-know basis and subject to contractual data protection obligations:

6.1 Payment Processors

When you make a deposit or withdrawal, necessary transaction data is shared with the relevant payment service provider — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or MCB — to execute the transfer. These providers process data under their own privacy policies and applicable Pakistani financial regulations.

6.2 Game Providers

Third-party game engine providers whose titles are featured on ar999h may receive a player session token and game-specific data for the purpose of delivering and logging the game round. No personally identifiable information beyond an anonymised session identifier is shared with game providers without necessity.

6.3 Regulatory and Licensing Authorities

ar999h may be required under its international gaming licence to disclose player account data, transaction records, or gaming history to its licensing authority or any duly authorised regulatory body conducting an audit or investigation. Such disclosures are made only to the extent legally required.

6.4 Fraud Prevention and Security Services

ar999h uses certified fraud detection and identity verification service providers. These providers may process IP address data, device identifiers, and behavioural signals under strict contractual confidentiality and security requirements.

6.5 Legal Requirements

ar999h may disclose personal data where required to do so by a court order, regulatory directive, or other legally binding obligation. We will notify you of such a disclosure where we are legally permitted to do so.

7. Data Retention

ar999h retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law or our licensing obligations. The general retention periods applicable to different categories of data are as follows:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years following account closure, as required under our international gaming licence for anti-money laundering compliance.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping obligations.
• Gaming history: Retained for the duration of account activity and for two years following account closure.
• Customer support communications: Retained for two years following resolution of the relevant query or complaint.
• Technical and device data: Retained for up to twelve months for security and fraud analytics purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained until consent is withdrawn, plus one year for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data has been shared with a third-party processor, ar999h will instruct that processor to delete or return the data in accordance with the terms of our data processing agreement.

8. Security Measures

ar999h implements a layered approach to data security, combining technical controls with operational policies and staff training. The security measures we apply include:

• TLS/SSL encryption: All data transmitted between your device and the ar999h platform is encrypted in transit using industry-standard TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data fields — including identity document copies and payment references — are encrypted in our databases using AES-256 encryption.
• Access controls: Access to personal data within ar999h's systems is restricted on a strict need-to-know basis. All staff with data access are subject to background checks, confidentiality obligations, and regular data protection training.
• Two-factor authentication: Available for all player accounts and mandatory for internal staff access to systems holding personal data.
• Intrusion detection and monitoring: ar999h's platform is monitored 24/7 for suspicious access patterns, anomalous transactions, and potential security incidents.
• Penetration testing: Regular third-party security assessments are conducted to identify and remediate vulnerabilities before they can be exploited.

In the event of a personal data breach that poses a risk to your rights and freedoms, ar999h will notify affected players without undue delay and will take all steps necessary to contain, investigate, and remediate the incident. ar999h will also report such incidents to the relevant authority in accordance with our licensing obligations.

9. Cookies & Tracking Technologies

ar999h uses cookies and similar tracking technologies on the ar999h.org website to ensure core functionality, improve your experience, and support security and analytics. The categories of cookies we use are as follows:

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. ar999h does not use third-party advertising cookies or share cookie data with social media platforms.

10. Your Data Rights

As a player on ar999h, you hold the following rights in respect of your personal data. These rights are available at no charge and ar999h will respond to all valid requests within 30 days of receipt.

To exercise any of the rights above, contact ar999h via live chat or at [email protected]. We may ask you to verify your identity before processing the request to protect against unauthorised access to your data.

11. Minors & Age Verification

If ar999h discovers or has reasonable grounds to believe that personal data has been collected from a player who was under 21 at the time of registration, we will immediately suspend the account, delete the data collected during that period to the extent not required for regulatory reporting purposes, and refund any deposited funds held at the time of discovery where permitted by our compliance obligations.

If you are a parent or guardian and believe that your child has registered an account on ar999h, please contact us immediately at [email protected] and we will investigate and act promptly.

12. International Data Transfers

As an internationally licensed platform, ar999h may process or store personal data on servers located outside Pakistan. Where data is transferred to a jurisdiction that does not offer equivalent data protection standards, ar999h ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by the relevant data protection authority incorporated into agreements with receiving parties.
• Binding corporate rules where applicable for intra-group transfers.
• Certification schemes or adequacy decisions recognised by the applicable regulatory framework.

Payment data shared with JazzCash and EasyPaisa is processed within Pakistan in accordance with the State Bank of Pakistan's applicable regulations and the respective providers' privacy frameworks. Bank transfer data shared with HBL, UBL, Meezan Bank, and MCB is similarly processed under Pakistani financial regulation.

13. Changes to This Privacy Policy

ar999h reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the scope of the Platform's services. Where changes are material — such as a new category of data being collected, a new purpose being introduced, or a new category of third-party recipient being added — we will notify you by email to your registered address and by a prominent notice on the Platform at least 14 days before the changes take effect.

For minor or non-material amendments — such as typographical corrections or clarifications that do not change the substance of how your data is handled — we will update the version number and effective date at the top of this document without prior individual notice.

Your continued use of ar999h after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. We encourage you to review this page periodically to stay informed of how your data is protected.

14. Contact & Data Requests

For all privacy-related queries, data subject access requests, or concerns about how ar999h processes your personal data, please contact us using the details below. Our team handles all data-related enquiries with care and will respond within 30 days of receiving a complete and verified request.

When submitting a data request, please include your registered email address and a brief description of the request type (e.g., access, rectification, erasure). We will ask you to verify your identity before proceeding, to ensure your data is protected from unauthorised requests.