This Privacy Policy explains how ar999b collects, uses, stores, shares and protects your personal data. We are committed to handling your information responsibly and transparently — in plain English, so you always know exactly where you stand.
ar999b ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access and use the ar999b Platform at https://ar999b.cam (the "Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
We recognise that users of the Platform — including players located in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and across Pakistan — entrust us with personal information as a condition of account registration and use. We take that responsibility seriously. Our data practices are designed to be lawful, fair, transparent and proportionate to the purpose for which data is collected.
This Policy describes in plain English: what data we collect and why; how it is processed and stored; who may receive it; how long we retain it; and what rights you have over your own information. We do not use complex legal language where plain English will do.
This Policy does not constitute legal advice and does not address the interaction between Pakistani data protection law and the laws of the jurisdiction in which ar999b operates. You should satisfy yourself as to the legal position applicable to you.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
ar999b acts as the Data Controller in respect of personal data collected through the Platform. As Data Controller, ar999b determines why and how your personal data is processed, and is responsible for ensuring that processing is carried out lawfully, fairly and transparently.
ar999b does not claim affiliation with, or endorsement by, any Pakistani government body, financial institution or payment provider. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in the context of payment data processing are made for informational purposes only and do not imply any endorsement of gambling by those providers.
For all data-related enquiries, please contact us using the details set out in Section 17 of this Policy.
ar999b collects the following categories of personal data. Collection is limited to what is necessary for the stated purposes and we do not collect data that is not required for those purposes.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport number, nationality | Account registration & KYC verification |
| Contact Data | Email address, mobile number, city of residence (e.g. Karachi, Lahore) | Account registration & support requests |
| Account Credentials | Username, hashed password (never stored in plain text) | Account registration |
| Financial Data | Deposit/withdrawal transaction records, payment method references, PKR balances | Deposits, withdrawals & account activity |
| KYC Documents | CNIC scan or passport copy, proof of address, selfie/liveness check image | Identity verification (KYC) |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Automatically on Platform access |
| Usage Data | Pages visited, games played, bets placed, session duration, feature interactions | During Platform use |
| Responsible Gambling Data | Deposit limit settings, self-exclusion status, session limit preferences | When responsible gambling tools are activated |
| Communications Data | Support chat transcripts, email correspondence, complaint records | When you contact customer support |
We collect personal data through the following means:
You provide data directly to us when you:
We collect certain technical data automatically when you access the Platform, including your IP address, device information, browser type and session data. This data is collected using cookies, web beacons and similar tracking technologies as described in Section 11.
We may receive data about you from third-party sources including:
We process your personal data only where we have a lawful basis to do so. The purposes and corresponding legal bases are set out in the table below.
| Purpose | Legal Basis |
|---|---|
| Registering and managing your account | Performance of contract; fulfilment of pre-contractual obligations |
| Processing deposits and withdrawals | Performance of contract; legal obligation (AML/financial crime compliance) |
| KYC identity and age verification | Legal obligation; legitimate interests (preventing underage gambling and fraud) |
| Providing customer support and resolving disputes | Performance of contract; legitimate interests |
| Fraud prevention and security monitoring | Legitimate interests; legal obligation |
| Anti-money laundering (AML) compliance | Legal obligation |
| Responsible gambling monitoring and tool operation | Legal obligation; legitimate interests (protecting vulnerable users) |
| Sending account notifications and service communications | Performance of contract; legitimate interests |
| Sending promotional communications (where consented) | Consent (which may be withdrawn at any time) |
| Platform analytics and improvement | Legitimate interests (improving user experience) |
ar999b does not sell personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.
We engage third-party service providers to perform functions on our behalf. These providers process data under contractual obligations and may only use your data for the specific purposes we authorise. Categories of service providers include:
We may disclose personal data to law enforcement agencies, regulators, courts or other government bodies where we are required to do so by law, court order, regulatory direction or where we reasonably believe disclosure is necessary to protect the rights, property or safety of ar999b, its users or the public.
In the event of a merger, acquisition, asset sale or restructuring of ar999b or any part of its business, personal data held by ar999b may be transferred to the relevant successor entity, subject to confidentiality protections consistent with this Policy.
We do not:
ar999b operates internationally and your personal data may be processed in countries outside Pakistan, including the jurisdiction in which ar999b holds its operating licence. Different countries have different data protection standards.
Where personal data is transferred outside the jurisdiction of collection, ar999b takes reasonable steps to ensure that appropriate safeguards are in place — including contractual obligations on data processors, encryption of data in transit and access controls — to provide a level of protection substantially equivalent to the standards applicable in the originating jurisdiction.
By using the Platform, you acknowledge that your personal data may be processed in countries outside Pakistan. If you have concerns about cross-border data transfers, please contact us using the details in Section 17.
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or regulation. The following general principles apply:
Following the expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.
ar999b implements appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure or destruction. Measures in place include:
No data transmission over the internet is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay where we are required to do so.
ar999b uses cookies and similar tracking technologies to operate the Platform, remember your preferences and analyse usage patterns. The categories of cookies we use are:
These cookies are essential for the Platform to function. They enable core features such as account login sessions, security authentication and load balancing. These cookies cannot be disabled without impairing Platform functionality.
These cookies remember your preferences — such as your selected language (English), display settings and responsible gambling tool configurations — so the Platform behaves consistently across sessions.
We use anonymised analytics cookies to understand how users interact with the Platform — which pages are most visited, where users navigate from and how long typical sessions last. This data helps us improve the Platform experience. Analytics data is aggregated and does not personally identify individual users.
You can manage or disable cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent you from accessing core features but may affect your experience. Note that cookie preferences set in your browser apply globally across all websites, not just ar999b.
Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by ar999b. You may exercise any of these rights by contacting us using the details in Section 17.
You have the right to request a copy of the personal data we hold about you. We will provide this within the applicable legal timeframe — typically within 30 days of a valid request.
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. Contact support with the specific correction required and we will update records promptly.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected. This right is subject to legal retention obligations — we may need to retain some data even after deletion requests.
In certain circumstances you may request that we restrict processing of your data — for example, while we investigate a dispute about its accuracy or where you have objected to processing based on legitimate interests.
Where processing is based on your consent or contract performance, and carried out by automated means, you may request your data in a structured, commonly used and machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. You may also withdraw consent at any time where processing is consent-based — for example, for promotional communications.
The Platform is intended for adults only. We do not knowingly collect personal data from any individual who is under 18 years of age — or under the higher minimum age required by the operator's licence jurisdiction.
Age verification is a mandatory part of the KYC process. Where we discover or have reasonable grounds to believe that an account has been created by or on behalf of a minor, we will immediately suspend the account, initiate a review and take appropriate steps including account closure and return of any funds deposited, subject to investigation findings.
If you are a parent or guardian and believe your child has registered on the Platform or provided personal data without your consent, please contact us immediately at the address in Section 17. We take minor protection seriously and will act promptly on all such reports.
In households with children, please ensure that your device is locked and your account credentials are not accessible to minors. The 18+ minimum does not represent a claim that gambling is lawful in Pakistan — local laws govern this independently.
Payment data including transaction amounts in PKR, payment method references and transaction status records are processed for the purpose of facilitating deposits and withdrawals and for AML compliance. The following applies to payment data processing:
Data relating to your responsible gambling settings — including deposit limits, session time limits, cooling-off periods and self-exclusion status — is treated with particular sensitivity. This data is:
If you have self-excluded, your exclusion status will be maintained for the minimum exclusion period even if you request account closure or data deletion during that period, as the exclusion record serves a protective regulatory function.
ar999b reserves the right to amend, update or replace this Privacy Policy at any time. The most recent version will always be published at https://ar999b.cam/privacy-policy, with the "Last Updated" date revised accordingly.
Where changes to this Policy are material — for example, changes that significantly affect your rights or how we use your data — we will endeavour to notify registered users by email or through an in-platform notification prior to the changes taking effect.
Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept any revised version of this Policy, you must cease using the Platform and may request account closure.
We encourage you to review this Policy periodically to remain informed about how we handle your personal data.
If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data we hold about you, please contact the ar999b Data Privacy team:
We aim to acknowledge all privacy-related requests within 72 hours and to resolve them within 30 days. Complex requests involving multiple data categories or legal review may require up to 90 days — we will notify you if this applies to your request.
If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to you.
Six principles that underpin how ar999b handles your personal data
We collect only the personal data that is strictly necessary for account operation, legal compliance and platform improvement. We do not gather information speculatively or for purposes we cannot justify.
256-bit SSL encryption in transit, encrypted storage, password hashing, role-based access controls and regular security reviews are all standard. Your data is never transmitted or stored in a way that leaves it unnecessarily exposed.
Access, rectification, erasure, portability and objection rights are all available to you. We acknowledge rights requests within 72 hours and resolve them within 30 days. No hoops to jump through — just contact support.
We do not sell, rent or trade your personal data to third parties. Payment provider and bank names (Easypaisa, JazzCash, HBL etc.) appear only as familiar Pakistani context — no endorsement of gambling by those providers is claimed.
Data is held only for as long as legally or operationally necessary. After the applicable retention period, data is securely deleted or irreversibly anonymised. We do not keep data indefinitely without justification.
This Policy is written in accessible English because Pakistani users deserve clarity — not impenetrable legal jargon. Support in English is available 24/7, with Urdu available on request.
Our support team is available around the clock to handle data requests, privacy concerns and account inquiries — whether you are in Karachi, Lahore, Islamabad or anywhere else in Pakistan.
18+ only — or the higher minimum required by the operator/licence jurisdiction. ar999b is subject to the Prevention of Gambling Act, 1977 and other applicable laws. Please understand local law before participating.