Privacy Policy – arr999 Data Protection & Your Rights

1 About This Privacy Policy

This Privacy Policy describes how arr999 ("the Platform", "we", "us") collects, uses, stores and protects the personal information of players who register and use arr999 at arr999.pro and through the arr999 mobile application. It applies to all Pakistan players and anyone else who accesses the platform from any location.

arr999 is committed to handling your personal data with care, transparency and respect. We collect only the information we genuinely need to operate the platform, process your PKR transactions, keep your account secure and comply with our obligations. We do not collect data for its own sake, and we do not monetise your personal information by selling it to advertisers or data brokers.

This policy is written in plain English for Pakistan (en-PK) players. If there is any term or section you are unsure about, please contact arr999 support before continuing to use the platform. Legal jargon has been kept to a minimum deliberately — we want you to actually understand what we do with your data, not just scroll past a wall of text.

2 Personal Data We Collect

arr999 collects personal data through several channels — registration, account usage, payment transactions and your device's interaction with the platform. Here is a clear breakdown of what we collect and when:

Data You Provide Voluntarily

Most of the personal data arr999 holds about you is information you provide directly — when you fill in the registration form, complete a deposit via JazzCash or Easypaisa, contact our support team or respond to a verification request. You choose what you share, but certain information (such as your name, mobile number and a valid payment method) is required to operate your account and process PKR transactions.

Data Collected Automatically

When you visit arr999.pro or use the mobile app, our systems automatically log certain technical information — your IP address, device type, browser version and the pages you visit within the platform. This data is used for security monitoring, fraud detection and improving the overall platform experience. It is not used to build advertising profiles.

3 How We Use Your Personal Data

arr999 uses the personal data we collect for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The main purposes are:

• Account management: Creating and maintaining your arr999 account, verifying your identity and age, and keeping your account details up to date.
• Processing transactions: Handling your PKR deposits via JazzCash, Easypaisa, Raast and bank transfer, processing withdrawal requests and maintaining your transaction history.
• Platform security: Detecting and preventing fraud, unauthorised account access, money laundering and any other activity that breaches our Terms and Conditions.
• Customer support: Responding to your queries, resolving disputes, processing complaints and handling account-related requests.
• Bonuses and promotions: Administering bonus credits, tracking wagering requirements and ensuring that promotional offers are used in accordance with their terms.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gaming behaviour and providing responsible gaming tools when needed.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game selection, navigation, deposit flows and the overall arr999 experience for Pakistan players.
• Communications: Sending you account-related notifications, deposit confirmations, withdrawal updates and, where you have opted in, promotional messages about offers on arr999.

4 Legal Basis for Processing

arr999 processes your personal data on the following legal grounds, depending on the specific purpose:

• Contract performance: Processing your data is necessary to provide you with the arr999 service — operating your account, processing PKR deposits and withdrawals and delivering the gaming experience you registered for.
• Legitimate interests: Some processing — such as fraud detection, security monitoring and platform analytics — is carried out on the basis of arr999's legitimate interests in maintaining a safe, fair and functional platform for all players.
• Legal obligation: Certain data processing — particularly identity verification and transaction record-keeping — is carried out to comply with applicable legal and regulatory requirements.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we do so only on the basis of your explicit consent. You can withdraw this consent at any time by contacting arr999 support or adjusting your cookie preferences.

5 Data Sharing and Third Parties

arr999 does not sell, rent or trade your personal data to third parties. However, to operate the platform effectively, we do share certain data with trusted third-party service providers who assist us in delivering our services. In every case, these partners are required to handle your data securely and use it only for the specific purpose for which it was shared.

Categories of Third Parties We Work With

• Payment processors: JazzCash, Easypaisa, Raast and banking partners who process your PKR deposits and withdrawals. These providers receive only the payment data necessary to complete your transactions.
• Identity verification providers: Third-party services that assist with verifying player identity and age when required. These providers operate under strict data handling agreements.
• Game studios: The game developers whose titles appear in the arr999 lobby. Game studios may receive anonymised session data for the purpose of game performance monitoring. They do not receive your personal identity or payment details.
• IT and infrastructure providers: Cloud hosting and technical infrastructure partners who store and process platform data on our behalf under strict contractual data protection obligations.
• Fraud and security services: Third-party tools that assist arr999 in detecting fraudulent activity, bot usage and other security threats to the platform.

arr999 may also disclose personal data where required to do so by applicable law or in response to a valid legal request from an authority with jurisdiction over the matter.

6 Payment Data and Financial Information

Given that arr999 handles real-money PKR transactions, we apply particularly stringent controls to payment-related data. Here is how your financial information is handled:

• Your JazzCash mobile number, Easypaisa wallet details, Raast ID and bank account information are collected and used solely to process your deposits and withdrawals in PKR. This data is never used for any other purpose.
• arr999 does not store complete card numbers or full bank account credentials in a readable format. Payment details are stored using tokenisation or equivalent security measures provided by our payment processing partners.
• All payment transactions are conducted over encrypted connections. The amount you deposit via any supported payment method is the exact amount that appears in your arr999 account balance — there are no hidden conversion steps.
• Withdrawal requests are processed only to the same payment method used for deposits. This one-source rule is a core anti-fraud and anti-money-laundering control and cannot be waived.
• Full transaction records in PKR are maintained for the period required by applicable financial record-keeping obligations. These records may be reviewed internally for fraud investigations or provided to relevant authorities when legally required.

7 Cookies and Tracking Technologies

arr999 uses cookies and similar technologies to make the platform work properly, remember your preferences and understand how players use the site. A cookie is a small text file placed on your device when you visit arr999.pro. Here is how we use them:

arr999 does not use advertising or retargeting cookies. We do not share cookie data with social media networks or ad platforms. You can manage cookie preferences through your browser settings, but please note that disabling essential or security cookies will affect your ability to use the platform normally.

8 How Long We Keep Your Data

arr999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and financial record-keeping obligations. The general retention periods that apply are:

• Account data: Retained for the duration of your active account. If you close your account, core identity and transaction records are retained for a further period to meet legal obligations before being securely deleted or anonymised.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction to satisfy financial record-keeping requirements.
• Verification documents: Identity documents submitted during the verification process are retained for a minimum of five years from the date of submission or account closure, whichever is later.
• Support communications: Customer support chat logs and email records are retained for up to two years from the date of the last interaction in the relevant case.
• Gameplay data: Individual game round records are retained for a period sufficient to resolve disputes and comply with audit requirements, after which they are anonymised or deleted.
• Inactive accounts: Where an account has had no login or transaction activity for an extended period and we are unable to contact the registered player, the account data will be retained in accordance with our legal obligations and then securely deleted.

9 Your Privacy Rights

As an arr999 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact arr999 support with your account username and a clear description of your request:

• Right of access: You can request a copy of the personal data arr999 holds about you. We will provide this within a reasonable timeframe, subject to identity verification to protect against fraudulent data requests.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details, you can update these directly within your arr999 account settings.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected — you can request that your personal data be deleted. Note that this right is subject to our legal data retention obligations; we cannot delete records that we are legally required to keep.
• Right to restrict processing: You can ask arr999 to restrict how we use your data in specific situations, for example while the accuracy of data is being contested.
• Right to withdraw consent: Where arr999 processes your data on the basis of your consent — for example, for optional marketing communications — you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of arr999's legitimate interests. We will assess your objection and respond accordingly.

10 How We Protect Your Data

arr999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS encryption: All data in transit between your device and arr999 servers is protected by Transport Layer Security (TLS) encryption. Look for the padlock icon in your browser address bar when using arr999.pro.
• Encrypted storage: Sensitive data — including passwords and payment tokens — is stored in encrypted form. Passwords are hashed using a strong one-way algorithm and cannot be retrieved or read by arr999 staff.
• Access controls: Access to personal data within arr999's systems is restricted on a strict need-to-know basis. Staff with access to player data undergo security training and are bound by confidentiality obligations.
• Fraud monitoring: Automated systems continuously monitor account activity for patterns indicative of fraud, identity theft or unauthorised access. Suspicious activity triggers an immediate review process.
• Security updates: arr999's platform and infrastructure are kept up to date with security patches. Penetration testing and security audits are conducted periodically.

Despite these measures, no online platform can guarantee absolute security. If you become aware of any security issue affecting your arr999 account — such as an unexpected login notification or a transaction you did not authorise — please contact support immediately so your account can be secured without delay.

11 Children's Privacy

arr999 is strictly an adult platform for players aged 18 and above. We do not knowingly collect, store or process personal data from anyone under the age of 18. Age is verified as part of the account registration process and may be verified again through identity document checks at any point.

If arr999 discovers or is notified that personal data belonging to a person under 18 has been collected — for example, because a minor created an account using false information — the account will be closed immediately, any balance forfeited in accordance with our Terms and Conditions, and all associated personal data will be deleted from our systems as soon as our legal obligations permit.

If you are a parent or guardian and you believe that your child has registered on arr999, please contact support immediately with details so the matter can be addressed without delay.

12 Updates to This Privacy Policy

arr999 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer or applicable legal requirements. When we make changes, the updated policy will be published on this page with a revised "Last updated" date.

For significant changes — particularly those that affect how we use your personal data in a materially different way — arr999 will notify registered players through the contact details held on their accounts, giving you the opportunity to review the changes before continuing to use the platform.

We recommend bookmarking this page and checking it periodically. If you continue to use arr999 after an updated Privacy Policy has been published, your continued use constitutes acceptance of the updated terms. If you do not agree with any changes, you should stop using the platform and contact support to close your account.

13 Contact Us About Privacy

If you have any question about this Privacy Policy, want to exercise a data right, or have a concern about how arr999 handles your personal information, our support team is available around the clock and ready to assist Pakistan players with any privacy-related matter.

Please include your arr999 account username in any privacy-related communication so we can locate your records and respond accurately. For data access or deletion requests, we will need to verify your identity before processing.

You can also visit our FAQ page for answers to common privacy questions, or review our Terms and Conditions for the full platform rules that sit alongside this policy.