Privacy Policy — ar999d

This Privacy Policy (the "Policy") is issued by ar999d (referred to herein as "ar999d", "the Platform", "we", "us" or "our") and applies to all personal data collected, processed and stored in connection with the operation of the ar999d website at https://ar999d.cam and all associated services, features and products (collectively, the "Services").

ar999d is an English-language online gaming platform designed for adult users, including users located in Pakistan. We understand that users in Pakistan place significant trust in us when they share their personal data, and we take that responsibility seriously. This Policy has been written in plain, professional English so that Pakistani users — whether based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — can understand exactly how their data is handled.

By accessing the Platform or using any of the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the Platform immediately.

This Policy should be read in conjunction with the Terms & Conditions, which govern your use of the Platform generally. In the event of any conflict between this Policy and the Terms & Conditions with respect to data protection matters, this Policy shall prevail.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including but not limited to name, email address, date of birth, CNIC number, IP address, payment details and account activity data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means ar999d in its capacity as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of ar999d in accordance with documented instructions.
• "User" / "you" means any individual who accesses, registers on or uses the Platform.
• "Cookies" means small text files placed on your device by the Platform for session management, analytics and security purposes.
• "KYC" means Know Your Customer — the identity and age verification procedures required by the Platform in accordance with Section 6 of the Terms & Conditions.
• "AML" means Anti-Money Laundering controls and obligations applicable to the Platform's operations.

ar999d collects the following categories of personal data, depending on how you interact with the Platform:

We do not intentionally collect sensitive personal data beyond what is necessary for KYC and AML compliance. Special categories of sensitive data (such as health information or religious beliefs) are not requested or processed by ar999d.

ar999d collects personal data through the following means:

4.1 Directly From You

You provide data directly when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, respond to surveys or participate in promotions. All registration and verification forms on the Platform use HTTPS-secured connections.

4.2 Automatically Through Platform Use

When you access the Platform, we automatically collect certain technical and usage data through server logs, cookies, web beacons and similar technologies. This includes your IP address, device identifiers, browser type and the pages or games you interact with during each session.

4.3 From Third-Party Service Providers

We may receive data from third-party processors that assist with payment processing, identity verification, fraud detection and analytics. Any data received from these providers is processed in accordance with this Policy and applicable data-sharing agreements.

4.4 From Payment References

When you use a payment method — such as those familiar to Pakistani users including Easypaisa, JazzCash, Raast or bank transfers from institutions such as HBL, UBL, Meezan Bank or Bank Alfalah — your transaction details are processed by the relevant payment provider under that provider's own privacy terms. ar999d receives only the transactional information necessary to credit your account or process a withdrawal. The Platform does not imply endorsement or partnership with any payment provider.

Where applicable data protection law requires ar999d to identify a legal basis for processing personal data, we rely on the following bases:

• Contractual Necessity: Processing is necessary to perform the contract between ar999d and the User — including account management, payment processing and delivery of gaming services;
• Legal Obligation: Processing is necessary for compliance with applicable legal and regulatory requirements, including KYC identity verification and AML obligations;
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fraud-resistant Platform, improving our services and ensuring responsible gambling compliance, provided those interests are not overridden by the User's rights;
• Consent: Where we send optional marketing communications or deploy non-essential cookies, we do so on the basis of your freely given, specific and informed consent. You may withdraw consent at any time as described in Section 12.

ar999d uses personal data for the following purposes:

• To create, manage and maintain your Account and verify your identity and age;
• To process deposits and withdrawals and manage your account balance in PKR;
• To deliver the gaming and betting services you request, including cricket and PSL markets, live casino, slots and other products;
• To conduct KYC and AML checks as required by the Platform's operational and licensing obligations;
• To detect and prevent fraud, cheating, money laundering and other prohibited conduct as defined in the Terms & Conditions;
• To enforce the Platform's responsible gambling tools — including deposit limits, loss limits, session controls and self-exclusion;
• To provide customer support, resolve disputes and respond to complaints;
• To send transactional communications (account confirmations, withdrawal notifications, security alerts) and, where consent has been obtained, marketing communications;
• To analyze Platform usage patterns in order to improve the user experience, fix technical issues and develop new features;
• To comply with applicable legal obligations, court orders and regulatory requirements.

We do not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you without human oversight, except where required to perform AML screening or fraud checks.

ar999d does not sell, rent or commercially trade your personal data. We may share your data in the following circumstances:

7.1 Service Providers and Data Processors

We engage third-party processors to provide services essential to Platform operations, including payment processing, identity verification, cloud hosting, analytics and customer support tooling. These processors are authorized to use your data only as necessary to provide the contracted services and are bound by data-processing agreements that require them to protect your data in accordance with applicable standards.

7.2 Regulatory and Legal Disclosure

ar999d may disclose personal data to regulatory bodies, law enforcement agencies, courts or other governmental authorities where required to do so by applicable law, a valid legal order or a regulatory requirement. This includes disclosure in connection with AML investigations or court-ordered disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or substantially all of ar999d's assets, personal data may be transferred to the acquiring entity as part of that transaction. We will endeavor to notify affected users in advance of such a transfer where practicable.

7.4 Protection of Rights

We may disclose personal data where we reasonably believe disclosure is necessary to protect the rights, property or safety of ar999d, its users or the public — for example, in response to credible reports of fraud or threats to personal safety.

ar999d uses cookies and similar technologies (such as web beacons and local storage) to operate the Platform, maintain your session, protect account security and analyze usage patterns. The following cookie categories are used:

You may manage or disable cookies through your browser's settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. ar999d does not use third-party advertising networks or retargeting cookies that track your activity across external websites.

ar999d retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention principles apply:

• Account Data: Retained for the duration of an active Account and for a period thereafter as required by the Platform's legal and regulatory obligations, typically ranging from three to seven years following account closure;
• KYC and Identity Documents: Retained for the period required by applicable AML and record-keeping obligations;
• Transaction Records: Retained for the period required by financial record-keeping obligations;
• Support Communications: Retained for a reasonable period to support dispute resolution and service improvement purposes;
• Responsible Gambling Records: Self-exclusion and limit records are retained in accordance with the Platform's responsible gambling obligations, which may require retention beyond account closure to prevent re-registration during an exclusion period;
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period to demonstrate compliance.

When data is no longer required, it is securely deleted or anonymized in accordance with applicable data-handling procedures.

ar999d implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the Platform;
• Encryption of sensitive data at rest, including stored identity document data and financial records;
• Password hashing — your account password is never stored in plain text;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and vulnerability reviews of Platform infrastructure;
• Logging and monitoring systems to detect unusual access patterns or potential security incidents.

While ar999d takes these measures seriously, no electronic transmission or data storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact support immediately.

In the event of a data security incident that materially affects your personal data, ar999d will notify affected users and, where required, relevant regulatory authorities in accordance with applicable breach notification obligations.

ar999d operates as an international online platform. Your personal data may be transferred to, stored in or processed in countries other than your country of residence, including countries where data protection laws may differ from those in Pakistan.

Where personal data is transferred internationally, ar999d takes steps to ensure that appropriate safeguards are in place — including contractual data-processing agreements with service providers that require them to protect data to a standard consistent with this Policy. If you have questions about international data transfers applicable to your personal data, you may contact us at the address in Section 16.

Depending on the data protection laws applicable in your jurisdiction, you may have some or all of the following rights with respect to your personal data held by ar999d. These rights are not absolute and are subject to applicable legal limitations and exemptions:

To exercise any of these rights, please contact the ar999d support team at the address in Section 16. We will respond to verifiable requests within a reasonable time, subject to identity verification. We may need to confirm your identity before processing a data rights request to prevent unauthorized disclosure of another person's data.

The ar999d Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from any person below the applicable minimum age.

If we become aware that personal data has been collected from an individual below the minimum age without appropriate parental or guardian consent (where applicable), we will take immediate steps to delete that data and close the associated Account.

If you believe a minor has registered on the Platform or that their data has been collected without appropriate authorization, please contact us immediately at the address in Section 16.

The ar999d Platform does not include links to third-party websites or external services beyond those referenced in the Platform's own navigation and service infrastructure. Where third-party services are engaged as data processors (for example, payment processing services), those processors operate under their own privacy terms in addition to our data-processing agreements.

ar999d is not responsible for the privacy practices of any third-party services you access independently. The payment providers referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — maintain their own privacy policies that govern how they handle the data associated with transactions you initiate through their services. ar999d does not control, and is not responsible for, those policies.

ar999d reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this page will be revised. Where a change is particularly significant — such as a new purpose for processing personal data or a change in how data is shared — we will provide additional notice through the Platform interface or via registered email where practicable.

Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically, particularly if you are a regular user of the Platform.

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data, please contact the ar999d data team using the details below. All contact details are provided as plain text and are not clickable links.

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Languages: English and Urdu support available

When submitting a data rights request (Section 12), please include sufficient information to allow us to identify your account and verify your identity. We may request additional verification before processing a data access, correction or deletion request.

Please do not send identity documents or sensitive personal data via email. Document submissions for KYC verification must be made only through the Platform's official HTTPS-secured verification portal.