ar99o Privacy
Policy

ar99o ("the Company", "we", "us", "our") operates the online casino and sports betting platform available at ar99o.net ("the Platform"). We understand that players sharing their personal information with ar99o are placing trust in us to handle that information responsibly. This Privacy Policy sets out, in full and plain language, how ar99o meets that responsibility.

This Policy applies to all personal data processed in connection with the ar99o Platform — including data provided during registration, data generated through your use of games and betting services, data submitted for KYC verification, and data collected automatically through cookies and analytics tools. It applies to all current and former registered players, as well as to individuals who browse ar99o.net without registering.

This Privacy Policy should be read alongside the ar99o Terms and Conditions. Where you have questions about how ar99o handles your personal data, Section 16 of this Policy explains how to reach our data team.

For the purposes of applicable data protection law, ar99o is the data controller in respect of the personal data it processes about registered players and platform users. As data controller, ar99o determines the purposes for which personal data is processed and the means by which processing is carried out.

Where ar99o engages third-party service providers to process personal data on its behalf — for example, payment processors or KYC verification partners — those providers act as data processors under contractual arrangements that require them to process data solely on ar99o's instructions and to maintain appropriate security standards. ar99o remains responsible for the lawfulness of processing carried out by its processors.

ar99o collects the following categories of personal data. The specific data collected depends on your level of engagement with the Platform — more detailed data is required for account verification and withdrawal processing than for basic browsing.

ar99o collects personal data through the following means:

• Direct provision by you: Data you submit when registering, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically via cookies, log files, and analytics tools when you access and navigate the ar99o Platform. See Section 9 for full details of cookie usage.
• Payment providers: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 payment gateways in connection with your deposits and withdrawals.
• KYC verification partners: Identity verification results and risk scores returned by third-party KYC service providers after you submit verification documents.
• Fraud prevention services: Risk signals and fraud indicators from third-party fraud detection services used to protect the Platform and its players.

ar99o processes personal data only where there is a lawful basis for doing so. The table below sets out the principal purposes for which ar99o processes personal data and the corresponding legal basis.

ar99o does not sell your personal data to third parties. ar99o may share your personal data with the following categories of recipients where it is necessary for the stated purposes:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors receive the payment data necessary to execute your deposit and withdrawal transactions.
• KYC verification providers: Third-party identity verification services receive your identity documents and personal data for the purpose of conducting legally required verification checks. These providers are bound by strict data processing agreements.
• Game content providers: Licensed game suppliers (such as Pragmatic Play, Evolution, and similar providers) may receive anonymised or pseudonymised session data necessary to deliver their games within the ar99o platform environment.
• Fraud and risk management services: Third-party fraud detection platforms receive technical data (IP addresses, device fingerprints, session data) for the purpose of identifying fraudulent or suspicious activity.
• Regulatory and law enforcement authorities: ar99o is required by its international gaming licence and applicable law to report certain information to regulatory bodies and, where applicable, to law enforcement agencies. ar99o will comply with lawful requests without prior notice to the affected player where disclosure obligations require it.
• Dispute resolution bodies: Where a player raises a formal dispute, relevant account records may be shared with licensed alternative dispute resolution bodies as part of the complaints process.
• Professional advisers: Legal, financial, and compliance advisers engaged by ar99o may access personal data on a strictly need-to-know basis under confidentiality obligations.

ar99o operates internationally and some of its service providers are located outside Pakistan. Your personal data may therefore be transferred to and processed in countries other than Pakistan. Where such transfers occur, ar99o ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles.

Safeguards employed by ar99o for international transfers include contractual clauses with data recipients that impose equivalent data protection obligations, and selection of processors located in jurisdictions with adequate data protection frameworks. ar99o does not transfer personal data internationally except where necessary for the stated processing purposes outlined in Section 5.

ar99o retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law and licensing obligations. The following general retention periods apply:

• Account data and gaming history: Retained for the duration of your active account plus a minimum of five years following account closure, as required for AML and licensing compliance.
• KYC verification documents: Retained for the duration of the account plus five years following closure, in accordance with anti-money laundering regulatory requirements.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for three years from the date of the communication, or longer where required for ongoing dispute resolution.
• Marketing data: Retained until you withdraw your marketing consent or for two years from your last interaction with ar99o marketing, whichever is sooner.
• Technical and analytics data: Retained for up to 24 months in identifiable form; thereafter anonymised and retained for aggregate statistical purposes.

Upon expiry of the applicable retention period, ar99o will securely delete or anonymise your personal data. Where deletion is not immediately practicable for technical reasons, ar99o will isolate the data from further processing until deletion can be completed.

ar99o uses cookies and similar tracking technologies to enable core Platform functionality, maintain your session while you are logged in, and collect anonymised analytics data to help improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These cookies maintain your login session, remember your account preferences, and enable secure transactions. They cannot be disabled without preventing you from using the Platform.
• Analytical and performance cookies: Used to understand how players navigate and use the Platform — which pages are most visited, where players experience difficulties, and how the Platform performs across different devices and connection speeds. Data collected via analytical cookies is aggregated and anonymised.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming configuration, so that these do not need to be reconfigured on each visit.

You can control non-essential cookies through your browser settings. Disabling analytical or functional cookies will not prevent you from using the Platform, but may affect the quality of your experience. Disabling strictly necessary cookies will prevent you from logging in or completing transactions.

As a player whose personal data is processed by ar99o, you have the following rights. These rights are genuine and exercisable — not just stated for legal compliance purposes. To exercise any of the rights below, contact ar99o at [email protected] with your account identifier and a description of your request.

ar99o implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ar99o's servers.
• Encryption at rest for sensitive stored data including identity documents, payment details, and authentication credentials.
• Two-factor authentication (2FA) available to all registered players as an additional account security layer.
• Access controls: ar99o staff access to personal data is restricted on a strict need-to-know basis. All data access by ar99o personnel is logged and subject to audit.
• Intrusion detection and monitoring: ar99o's infrastructure is subject to continuous monitoring for unauthorised access attempts and suspicious activity.
• Regular security assessments: ar99o conducts periodic security reviews and vulnerability assessments of its Platform and data infrastructure.

In the event of a personal data breach that poses a risk to your rights and freedoms, ar99o will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate its effects.

The ar99o Platform is strictly for individuals aged 21 and over. ar99o does not knowingly collect, store, or process personal data relating to persons under the age of 21. If ar99o discovers that personal data has been submitted by a person under 21, the account will be immediately closed, the data will be deleted, and any funds associated with the account will be handled in accordance with ar99o's underage gambling policy as set out in the Terms and Conditions.

If you believe a person under the age of 21 has registered an ar99o account, please contact ar99o support immediately via live chat or at [email protected] so that the matter can be investigated and resolved promptly.

ar99o may send you promotional communications — including emails and SMS messages — about bonuses, new games, cricket betting promotions, and other ar99o offers. ar99o will only send marketing communications where you have opted in to receive them at the time of registration or subsequently through your account settings.

You may withdraw your marketing consent at any time by updating your communication preferences in your ar99o account dashboard, by clicking the unsubscribe link in any marketing email, or by contacting ar99o support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal. ar99o will process your opt-out request within five business days.

The ar99o Platform may contain links to third-party websites or services — for example, information resources referenced in the Responsible Gaming section. ar99o is not responsible for the privacy practices of third-party sites and recommends that you review the privacy policy of any third-party site you visit. This Privacy Policy applies only to personal data processed directly by ar99o.

ar99o reserves the right to update this Privacy Policy from time to time to reflect changes in legal requirements, data processing practices, or Platform functionality. Where changes materially affect your rights or the way your data is processed, ar99o will notify registered players by email at least 14 days before the amended policy takes effect.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. ar99o encourages players to review this Privacy Policy periodically. Continued use of the ar99o Platform following notice of an amended Privacy Policy constitutes acceptance of the revised terms.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how ar99o has handled your personal data, please contact ar99o through any of the following channels:

• Email: [email protected] — please include "Data Privacy" in the subject line
• Live Chat: Available 24/7 directly from the ar99o Platform — select the "Privacy & Data" category when starting your chat
• WhatsApp Support: Available to registered players — details accessible from your account dashboard after login

ar99o will acknowledge your data privacy request within 48 hours and will respond substantively within 30 days. Where a request is complex or ar99o has received multiple requests from you, ar99o may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it.