aar999 Privacy Policy

01 Who We Are

aar999 is Pakistan's premier online gaming and sports betting platform, operating at aar999.net. References to "aar999", "we", "us", or "our" in this Privacy Policy refer to the aar999 platform and its operating entity, which holds an internationally recognised gaming licence authorising the provision of online betting and casino services.

aar999 acts as the data controller in respect of the personal data of its registered players and website visitors. As data controller, aar999 determines the purposes and means by which your personal data is collected and processed. aar999 takes this responsibility seriously and has appointed an internal data compliance function to oversee all data protection matters.

This Privacy Policy applies to all users of the aar999 Platform, including registered players, prospective players who have submitted a registration enquiry, and visitors to the aar999.net website. It covers data collected through the website, any associated mobile-optimised interfaces, and through direct communications with the aar999 support team.

02 Data We Collect

aar999 collects personal data from you in the following circumstances: when you register an account, when you make a deposit or withdrawal, when you interact with aar999 customer support, when you use the Platform, and through automated data collection technologies such as cookies during your browsing session.

The categories of personal data aar999 may collect include:

aar999 does not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) unless explicitly required by a legal or regulatory obligation, in which case you will be separately informed and your explicit consent will be obtained.

03 How We Use Your Data

aar999 uses the personal data it collects for the following defined purposes only. We do not use your data for any purpose beyond those listed here without first obtaining your explicit consent or identifying a valid legal basis for such use.

• Account Management: To create, maintain, and administer your aar999 player account, including processing your registration, managing your profile, and communicating account-related updates to you.
• Identity & Age Verification: To confirm that you are at least 21 years of age and that the identity information provided during registration is accurate, in compliance with our licensing obligations and responsible gaming commitments.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard in a secure and accurate manner.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes, as required by our licensing authority and applicable regulations.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical and account assistance through our 24/7 support channels.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling behaviour, apply deposit limits and self-exclusion requests, and provide personalised responsible gaming interventions where appropriate.
• Service Improvement: To analyse aggregated usage patterns across the Platform in order to improve the product, fix bugs, and optimise the user experience — using anonymised or pseudonymised data where possible.
• Legal & Regulatory Compliance: To meet our obligations under our gaming licence, including record-keeping, reporting to our licensing authority, and cooperating with law enforcement when legally required to do so.
• Marketing Communications: To send you promotional offers, bonus notifications, and PSL betting tips via email or in-platform notifications — only where you have given your prior consent and not opted out.

04 Legal Basis for Processing

aar999 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and aar999 — i.e., to provide the gaming and betting services you have registered to use, including account management and payment processing.
• Legal Obligation: Processing is necessary for aar999 to comply with its legal and regulatory obligations, including anti-money laundering (AML) obligations, age verification requirements, and reporting obligations imposed by our licensing authority.
• Legitimate Interests: Processing is necessary for the legitimate interests of aar999, including fraud detection, security monitoring, service improvement, and responsible gaming monitoring — where these interests are not overridden by your privacy rights.
• Consent: For processing that is not covered by the above grounds — principally direct marketing communications — aar999 relies on your freely given, specific, and informed consent, which you may withdraw at any time.

05 Cookies & Tracking Technologies

aar999 uses cookies and similar tracking technologies on the aar999.net website to provide core platform functionality, remember your preferences, analyse aggregate traffic patterns, and improve your overall experience on the site.

What are cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over a period of time, so you do not have to re-enter them every time you return or navigate between pages.

aar999 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for core Platform functionality including maintaining your logged-in session, processing transactions, and applying security measures. These cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limit configurations.
• Analytical Cookies: Collect anonymised data on how players use the Platform — which pages are visited most, how long sessions last, and where navigation drop-off occurs — to help aar999 improve the service.
• Session Identification Cookies: Used to link your active session to your player account to ensure accurate bet and transaction attribution.

You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the aar999 Platform. aar999 does not use third-party advertising cookies or cross-site tracking cookies.

06 Data Sharing & Disclosure

aar999 does not sell your personal data. We share your data only in the limited circumstances set out below, and only to the extent necessary for the stated purpose. All third parties with whom aar999 shares data are bound by contractual obligations to process that data securely and only for the specified purpose.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard processing partners receive only the financial data necessary to process your deposit or withdrawal transaction.
• Identity Verification Services: aar999 uses licensed KYC (Know Your Customer) service providers to verify the identity documents you submit during account verification. These providers process identity data under strict contractual and regulatory controls.
• Game Software Providers: Third-party game providers whose titles are hosted on aar999 may receive a pseudonymous player identifier and session token to facilitate game loading and result recording. They do not receive your full identity or financial details.
• Regulatory & Licensing Authorities: aar999 may be required to disclose player data to its licensing authority or to regulatory bodies as part of its licence compliance obligations.
• Law Enforcement: aar999 will disclose personal data to law enforcement agencies when legally compelled to do so by a valid court order, warrant, or equivalent legal instrument.
• Fraud Prevention Networks: In cases of suspected fraud or money laundering, aar999 may share relevant data with licensed fraud prevention organisations and financial intelligence networks.

07 Data Retention

aar999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your active aar999 account relationship, plus a minimum period following account closure as required by our licensing authority for audit purposes.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with anti-money laundering record-keeping obligations.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by our licensing authority.
• Customer Support Communications: Retained for a minimum of three (3) years from the date of the last communication, to support complaint resolution and regulatory review.
• Marketing Consent Records: Retained for the duration of your marketing consent plus a reasonable period thereafter to demonstrate compliance.
• Anonymised Analytics Data: Retained indefinitely in anonymised form for service improvement purposes, as it no longer constitutes personal data once de-identified.

Upon expiry of the applicable retention period, aar999 will securely delete or irreversibly anonymise your personal data. You may request early deletion of your data subject to the conditions described in the "Your Rights" section below.

08 Data Security

aar999 takes the security of your personal data seriously and has implemented a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and aar999 servers.
• Encryption at rest for all sensitive stored data, including identity documents and financial records.
• Role-based access controls ensuring that only authorised aar999 staff with a documented operational need can access player personal data.
• Regular security audits and penetration testing of the aar999 Platform and supporting infrastructure.
• Multi-factor authentication (MFA) requirements for all aar999 administrative access to player data systems.
• Automated fraud and anomaly detection monitoring operating 24/7 across all transaction and login activity.

Despite these measures, no system is completely immune to security threats. In the event of a data breach that poses a risk to your rights and freedoms, aar999 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

09 Your Rights

As a data subject whose personal data is processed by aar999, you hold a set of rights in respect of that data. aar999 is committed to facilitating the exercise of these rights promptly and without unnecessary friction. The following rights are available to all aar999 players:

• Right of Access: You may request a copy of the personal data aar999 holds about you, along with information about how it is being processed. aar999 will respond to access requests within 30 days.
• Right to Rectification: If any personal data aar999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your player profile settings.
• Right to Erasure: You may request that aar999 delete your personal data. Note that this right is subject to limitations where aar999 has a legal obligation to retain the data (e.g., AML record-keeping requirements). aar999 will inform you of any such limitations when responding to your erasure request.
• Right to Restrict Processing: In certain circumstances, you may request that aar999 restrict the processing of your data while a dispute regarding accuracy or lawfulness is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of the personal data you provided to aar999 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests at any time, including objecting to direct marketing communications. aar999 will cease such processing upon receipt of a valid objection unless compelling legitimate grounds exist to continue.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, contact the aar999 support team through the 24/7 live chat or by email. aar999 will acknowledge your request within 72 hours and respond in full within 30 calendar days. In complex cases, this period may be extended by a further 30 days, of which you will be notified.

10 Children & Minors

The aar999 Platform is strictly intended for adults aged 21 years and over. aar999 does not knowingly collect or process personal data from any individual under the age of 21. The collection of personal data from minors is expressly prohibited under aar999's Terms & Conditions and its operating licence.

All new account registrations are subject to mandatory age verification. Where aar999 has reason to believe that an account has been registered by, or is being used by, a person under 21 years of age, that account will be immediately suspended and all associated data reviewed. If confirmed, the account will be permanently closed and any personal data processed will be deleted in accordance with applicable legal requirements.

11 Third-Party Services

The aar999 Platform integrates with a number of third-party service providers to deliver a complete gaming experience. These include payment gateways (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard processors), game software providers, KYC verification services, and platform analytics tools.

Each third-party service provider with whom aar999 shares personal data is required to process that data only for the specified purpose, maintain appropriate security standards, and not further disclose or use the data for their own commercial purposes. aar999 conducts due diligence on all data processors prior to engagement and reviews these relationships periodically.

aar999.net does not contain third-party advertising links or affiliate tracking pixels. The aar999 website is a self-contained platform with no outbound data leakage to external advertising networks.

12 Changes to This Policy

aar999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes to our services, or changes in applicable legal and regulatory requirements. When material changes are made, the updated Privacy Policy will be published on this page with a revised "Last Updated" date.

aar999 may also notify registered players of significant changes via the email address associated with their account, though this does not substitute your obligation to review this Privacy Policy periodically. Continued use of the aar999 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes to this Privacy Policy, you should cease using the aar999 Platform and contact the support team to arrange account closure and to exercise your data rights as described in Section 9 above.

13 Contact & Data Requests

For all privacy-related enquiries, data subject rights requests, or questions about this Privacy Policy, please contact the aar999 data compliance team through the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 within the aar999 Platform after logging into your player account. State "Data Privacy Request" at the start of your chat to be routed to the appropriate team member.
• WhatsApp Support: Available 24/7. Contact details are provided in the support section of the aar999 Platform upon login.

When submitting a data rights request, please include your registered email address and a description of your request. aar999 may ask for proof of identity before processing your request to ensure that personal data is not disclosed to, or modified by, an unauthorised party.

aar999 aims to handle all privacy enquiries with the same standard of service you would expect from any interaction with our platform — promptly, professionally, and with genuine respect for your rights as a player.