At ar99, your privacy is treated with the same seriousness as your account security and the fairness of our games. This Privacy Policy explains precisely what personal data ar99 collects from players in Pakistan and elsewhere, why we collect it, how we use it, who we may share it with, and what rights you hold over your own information. Please read this document carefully before registering an ar99 account.
Our Privacy Commitments
ar99 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your mobile number, name, and transaction history remain entirely within the ar99 ecosystem, period.
Every page, every login, every transaction on ar99 is encrypted using bank-grade 256-bit SSL. Your personal data is never transmitted in plain text. This applies across mobile browsers on Jazz, Zong, Telenor, and Ufone networks throughout Pakistan.
ar99 stores player data on secure, access-controlled servers with strict internal permission structures. Only authorised personnel with a legitimate operational reason can access personal data, under strict logging and audit trail requirements.
Your ar99 login password is hashed using a one-way cryptographic algorithm before storage. This means no ar99 employee or system can ever read your actual password — not even our own engineering team. If you forget it, it must be reset, not retrieved.
ar99 players have the right to request a copy of all personal data held about them, to request corrections to inaccurate data, and — subject to legal retention obligations — to request deletion of their personal data entirely by contacting support.
ar99's international gaming license imposes binding obligations on how player data is collected, stored, and processed. These are not voluntary commitments — they are license conditions. Non-compliance would jeopardise ar99's right to operate. Your data protection has regulatory force behind it.
How Your Data Flows Through ar99
Effective: 1 Jan 2026
Summary: ar99 collects only the data necessary to operate your account, process your PKR transactions via JazzCash and EasyPaisa, comply with our licensing obligations, and protect the platform from fraud. We do not sell your data. We do not use it for unrelated advertising. You can request access, correction, or deletion of your data at any time by contacting support.
This Privacy Policy ("Policy") is issued by the ar99 platform ("ar99", "we", "us", "our") and applies to all individuals who visit, register an account on, or interact with the ar99 website accessible at ar99.bid ("Platform"). This Policy forms part of the ar99 Terms & Conditions and should be read alongside that document.
ar99 is committed to protecting the privacy and personal data of its players, particularly those accessing the platform from Pakistan. This Policy is written in plain English so that players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan can clearly understand how their information is handled — without requiring a legal background to make sense of it.
By registering an ar99 account or using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to any part of this Policy, you must not create an account or use the ar99 platform.
For the purposes of applicable data protection law, ar99 acts as the data controller in respect of the personal data it collects and processes in connection with the operation of the platform. As data controller, ar99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.
ar99 is an internationally licensed online gaming operator. Our licensing framework imposes binding data protection obligations that supplement and reinforce the commitments set out in this Policy.
To contact ar99's data protection team directly, write to: [email protected] (plain text — not a clickable link) with the subject line "Data Protection Enquiry".
ar99 collects the following categories of personal data in connection with the registration and operation of player accounts:
When you create an ar99 account, we collect:
Where ar99 requests verification under its KYC (Know Your Customer) or AML (Anti-Money Laundering) obligations, we may additionally collect:
For every deposit and withdrawal processed through your ar99 account, we record:
ar99 maintains a full record of all gaming activity conducted on your account, including:
This data is used for account management, dispute resolution, regulatory reporting, and responsible gaming monitoring.
When you access ar99, our servers automatically receive:
ar99 does not collect payment card numbers. All PKR payment processing for JazzCash, EasyPaisa, and bank transfers is handled directly through the respective payment provider's secure system. ar99 receives confirmation of payment but never handles raw card or wallet credentials.
If you contact ar99 via live chat, email, or other support channels, we retain records of that communication — including the content of messages — for customer service, quality assurance, and dispute resolution purposes.
Summary Table — Data Categories:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, mobile number, date of birth | Account creation, age verification, 2FA |
| KYC / AML Data | CNIC, passport, proof of address | Identity verification, fraud prevention |
| Transaction Data | JazzCash deposits, PKR withdrawals | Payment processing, financial records |
| Gaming Activity | Bet history, slot sessions, casino hands | Account management, RG monitoring, disputes |
| Technical Data | IP address, device type, browser | Security, fraud detection, platform optimisation |
| Communications | Live chat transcripts, support emails | Customer service, dispute resolution |
ar99 uses the personal data described in Section 3 for the following purposes:
ar99 does not use your personal data for unrelated third-party advertising or for profiling you for purposes unconnected to the operation of your ar99 account and our licensing obligations.
ar99 processes personal data on the following legal bases:
ar99 uses cookies and similar tracking technologies on the platform to deliver a functional and secure experience. Cookies used by ar99 fall into the following categories:
ar99 does not use third-party advertising or tracking cookies. No player browsing data from ar99 is shared with advertising networks or data brokers. You may manage or disable non-essential cookies through your browser settings, though this may affect some platform functionality.
ar99 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited and controlled circumstances:
Every third party that receives ar99 player data is subject to a contractual data processing agreement that restricts their use of that data to the specific purpose for which it was shared.
ar99 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following considerations:
Upon expiry of the applicable retention period, ar99 will securely delete or anonymise the relevant personal data. Where a player submits a deletion request under Section 10, ar99 will action this within the retention framework above — meaning data subject to mandatory regulatory retention periods cannot be deleted ahead of those periods regardless of a player's request.
ar99 implements the following technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss:
While ar99 takes these measures seriously, no digital system can be guaranteed 100% secure. Players are encouraged to use strong, unique passwords for their ar99 account and to enable two-factor authentication from account settings.
As an ar99 player, you hold the following rights in relation to your personal data:
Request a copy of all personal data ar99 holds about you. We will provide this within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data. Contact support to update your registered details.
Request deletion of your personal data. Subject to mandatory regulatory retention periods (see Section 8), ar99 will delete your data upon account closure.
Request that ar99 limits the use of your data to storage only, while a correction or objection is being resolved.
Request your data in a structured, machine-readable format (e.g., CSV) for transfer to another service, where technically feasible.
Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.
To exercise any of the rights listed above, contact ar99 via live chat on the platform or email [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". ar99 will verify your identity before processing any data rights request. Responses will be provided within thirty (30) calendar days of receipt of a verified request. Complex or multiple requests may take up to sixty (60) days, with notification provided within the first 30 days.
ar99 is strictly for adults aged 21 and above. ar99 does not knowingly collect personal data from individuals under the age of 21. If ar99 discovers or has reason to believe that a registered account belongs to a person under 21, the account will be immediately suspended, any funds withheld pending investigation, and the account permanently closed upon confirmation of underage access.
If a parent or guardian believes their child may have accessed ar99 and provided personal data, they should contact ar99 support immediately at [email protected] (plain text — not a clickable link). ar99 will take prompt action to investigate and remove any data associated with a confirmed underage user.
21+ Requirement: Registration on ar99 requires confirmation that the player is 21 or older. Providing a false date of birth to circumvent this requirement is a breach of the ar99 Terms & Conditions and may constitute fraud.
The ar99 platform does not contain links to external third-party websites for commercial or advertising purposes. Any references to payment providers (JazzCash, EasyPaisa, HBL, etc.) are operational integrations, not endorsements, and those providers operate under their own privacy policies which ar99 does not control.
Game software on ar99 is provided by licensed third-party studios. While ar99 has contractual data protection obligations with these providers, players should be aware that certain game interaction data (game round ID, stake, outcome) may be processed on systems operated by the game provider to power the game mechanics and fulfil RNG certification requirements.
As an internationally licensed operator, ar99's data processing infrastructure may involve systems hosted in multiple jurisdictions. Where personal data is transferred outside of the country in which it was collected, ar99 ensures that appropriate safeguards are in place — including contractual data transfer agreements, adequacy decisions where applicable, and binding corporate rules within our operational group.
ar99 does not transfer personal data of Pakistani players to countries or entities that do not meet the data protection standards required under our international gaming license, without implementing the safeguards described above.
ar99 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform operations. Updated versions of this Policy will be published at ar99.bid/privacy-policy with a revised effective date at the top of the document.
For material changes — those that meaningfully affect how your data is collected or used — ar99 will notify registered players via the platform's notification system or via the registered mobile number where practicable. Your continued use of ar99 following the publication of a revised Policy constitutes your acknowledgement of the updated terms.
It is your responsibility to review this Policy periodically. If you disagree with any change, you may close your ar99 account in accordance with Section 12.3 of the Terms & Conditions.
For any questions, concerns, or formal requests related to this Privacy Policy or the handling of your personal data by ar99, please contact us through the following channels:
ar99 aims to respond to all privacy-related communications within 48 hours of receipt. Formal data rights requests (see Section 10) will receive a substantive response within 30 calendar days of identity verification.
This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all prior versions of the ar99 Privacy Policy.
Your data is encrypted, secured, and never sold. Pakistan's most trusted gaming platform handles your PKR with the same care as your personal information.
Log In to ar99 Responsible GamingRelated Documents