999ar Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 999ar ("we," "us," "our") collects, processes, stores, and protects personal data relating to users of the 999ar online casino and sports betting platform accessible at https://999ar.app ("Platform"). This Policy applies to all individuals who visit the 999ar website, register an account, place real-money wagers, or otherwise interact with our services.

999ar is committed to handling personal data with transparency, integrity, and security. We process personal data in accordance with applicable data protection principles, and we take seriously our obligation to give Pakistani users meaningful control over their personal information.

By registering an account or using the 999ar Platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions about any aspect of this Policy, please contact us through the channels described in Section 14 before using the Platform.

2. Data Controller Information

For the purposes of this Privacy Policy, 999ar acts as the data controller in respect of the personal data collected through the Platform. As data controller, 999ar determines the purposes and means of processing personal data submitted by users and visitors.

For all privacy-related enquiries, requests, and complaints, users may contact the 999ar Data Protection contact at [email protected] (displayed as plain text — not a clickable link) or via 24/7 live chat from any 999ar page.

3. Personal Data We Collect

999ar collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties where required for identity verification and payment processing.

3.1 Registration Data

When you create a 999ar Account, we collect: full name, date of birth, email address, mobile number, and country of residence. This information is mandatory for account creation and cannot be omitted.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance obligations, 999ar may request and collect: copies of your Pakistani CNIC (Computerised National Identity Card) or valid passport, a recent utility bill or bank statement as proof of address, and in some cases a selfie photograph for liveness verification. KYC documentation is processed by 999ar's compliance team and, where applicable, by accredited third-party identity verification partners.

3.3 Financial Data

To process deposits and withdrawals, 999ar collects: your preferred payment method (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, USDT TRC20, Skrill, or Neteller), your mobile wallet number or bank account details as applicable, and PKR transaction records including deposits, withdrawals, wagers, and bonus credits. 999ar does not store full credit or debit card numbers on its servers.

3.4 Usage and Behavioural Data

We automatically collect data about how you interact with 999ar, including: device type, operating system, browser type and version, IP address and approximate geolocation, session duration, pages visited, games played, bets placed, and feature interactions. This data is used to improve the Platform, detect fraud, and ensure responsible gaming obligations are met.

3.5 Communications Data

When you contact 999ar support via live chat or email, we retain records of those communications including the content of messages, timestamps, and any attachments. These records are retained for service quality assurance and dispute resolution purposes.

4. How We Use Your Personal Data

999ar processes personal data for the following specific purposes:

• Account creation and management: To create, verify, and maintain your 999ar Account and authenticate your identity at login
• Payment processing: To process PKR deposits via JazzCash, Easypaisa, and bank transfers, and to process withdrawal requests to your registered payment method
• KYC and compliance: To verify your identity and age in accordance with applicable regulatory requirements, and to conduct ongoing enhanced due diligence where required
• Platform delivery: To provide access to cricket betting markets, live casino games, slots, crash games, and all other 999ar features
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions
• Responsible gaming: To monitor gaming behaviour, identify signs of potentially problematic gambling, apply self-imposed limits and self-exclusions, and fulfil our responsible gaming obligations
• Customer support: To respond to queries, complaints, and dispute resolution requests submitted via live chat or email
• Platform improvement: To analyse aggregated usage data and improve the 999ar user experience, game selection, and technical performance
• Legal compliance: To fulfil any legal obligations to which 999ar is subject, including anti-money laundering requirements and responses to lawful regulatory requests

5. Legal Basis for Processing

999ar processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 999ar — including account creation, payment processing, and service delivery
• Legal obligation: Processing required to comply with applicable laws — including KYC, anti-money laundering, and responsible gaming regulations
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and ensuring the integrity of 999ar's services — where such interests are not overridden by your rights
• Consent: Where 999ar sends you optional marketing communications or uses non-essential cookies, we rely on your consent, which may be withdrawn at any time

6. Data Sharing and Third Parties

999ar does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment infrastructure providers receive the data necessary to execute your requested transactions
• Identity verification partners: Accredited KYC and AML verification service providers receive identity documents and verification data as part of our compliance obligations
• Game providers: Third-party casino game providers including Evolution Gaming, Pragmatic Play, and Ezugi receive pseudonymised session identifiers necessary to deliver live game sessions
• Security and fraud prevention: Fraud detection and cybersecurity service providers may receive technical data (IP addresses, device fingerprints) to identify and prevent platform abuse
• Legal authorities: 999ar will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or valid legal process

All third-party service providers engaged by 999ar are required to implement appropriate data protection safeguards contractually and may only process personal data on 999ar's documented instructions.

7. Cookies and Tracking Technologies

999ar uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used by 999ar include:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your 999ar experience across sessions.
• Analytical cookies: Collect anonymised usage data to help us understand how users navigate 999ar and identify areas for technical improvement.
• Security cookies: Support fraud detection, bot prevention, and account security features including login anomaly detection.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the 999ar Platform.

8. Data Retention

999ar retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any applicable legal retention requirements. As a general guide:

• Account and identity data is retained for the duration of your active 999ar Account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations
• Transaction records are retained for a minimum of five (5) years from the date of the transaction
• KYC documents are retained for five (5) years following the end of the customer relationship
• Support communication records are retained for three (3) years from the date of the communication
• Technical and usage logs are retained for a maximum of twelve (12) months unless required longer for ongoing fraud investigations

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 999ar's data disposal procedures.

9. International Data Transfers

Your personal data may be processed outside Pakistan, including in jurisdictions where 999ar's infrastructure and third-party service providers operate. Where such transfers occur, 999ar implements appropriate safeguards — including contractual data processing agreements — to ensure that your personal data receives a level of protection consistent with the standards described in this Policy.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 999ar:

• Right of access: You may request a copy of the personal data 999ar holds about you
• Right to rectification: You may request correction of inaccurate or incomplete personal data
• Right to erasure: You may request deletion of your personal data, subject to overriding legal obligations to retain certain records
• Right to restriction: You may request that 999ar restrict processing of your personal data in certain circumstances
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact 999ar's support team via live chat or at [email protected]. 999ar will respond to rights requests within thirty (30) days. Some requests may require identity verification before processing.

11. Children's Privacy

999ar is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18 years of age. If 999ar becomes aware that personal data has been collected from a person under 18, we will take immediate steps to delete such data and close the associated account. If you have reason to believe a minor has registered with 999ar, please contact us immediately via live chat.

12. Security Measures

999ar implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed, including:

• SSL/TLS encryption for all data in transit across the 999ar Platform
• Encryption of sensitive personal data at rest in 999ar's databases
• Access controls limiting personal data access to authorised personnel with a documented need
• Two-factor authentication availability for user accounts
• Intrusion detection systems and continuous security monitoring
• Regular security assessments and penetration testing of Platform infrastructure

While 999ar takes data security seriously and implements industry-standard measures, no system is entirely immune to breach. In the event of a personal data breach that poses a material risk to affected users, 999ar will notify affected individuals in accordance with its breach notification obligations.

13. Changes to This Policy

999ar reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email or via a prominent notice on the 999ar Platform prior to the changes taking effect. The "Last Updated" date at the top of this page reflects when this Policy was most recently revised. Continued use of the 999ar Platform following notification of a policy change constitutes acceptance of the revised Policy.

14. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or 999ar's data processing practices, please contact the 999ar team via:

• Live Chat: Available 24/7 directly within the 999ar Platform — fastest response channel
• Email: [email protected] (plain text — not a clickable link)

If you are not satisfied with 999ar's response to your privacy concern, you have the right to escalate the matter through the dispute resolution process described in the Terms & Conditions.