999ar Privacy Policy

1 Who We Are

999ar operates the online casino and sports betting platform accessible at 999ar.net (the "Platform"). 999ar is the data controller in respect of personal data collected through the Platform. References in this Policy to "999ar", "we", "us", or "our" refer to the Platform operator. If you have questions about how your data is handled, contact us at [email protected].

This Policy applies to all users of 999ar, including registered account holders, visitors who browse the Platform without registering, and any person who communicates with us by any channel. It covers data processed in connection with account registration, gameplay, financial transactions, customer support, and marketing communications.

2 Personal Data We Collect

999ar collects personal data in the categories set out in the table below. We collect only data that is necessary for the stated purposes and do not request unnecessary information from our players.

3 How 999ar Uses Your Personal Data

999ar processes your personal data for the following purposes:

• Account management: Creating and maintaining your 999ar account, verifying your identity, communicating account-related notices, and providing access to Platform features.
• Payment processing: Facilitating PKR deposits via JazzCash, Easypaisa, or bank transfer; processing withdrawal requests; reconciling financial transactions; and maintaining accurate financial records.
• Game delivery & sportsbook operation: Running casino games, live dealer tables, and cricket betting markets; recording game outcomes; calculating and crediting winnings; and resolving disputes.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problematic gambling behaviour; administering deposit limits, self-exclusion arrangements, and cooling-off periods; and fulfilling related obligations.
• Fraud prevention & security: Detecting, investigating, and preventing fraudulent transactions, money laundering, underage gambling, multi-accounting, and other prohibited activities.
• Legal and regulatory compliance: Fulfilling any verification, reporting, or record-keeping obligations imposed by applicable financial crime, anti-money laundering, or other regulatory requirements.
• Service improvement: Analysing aggregated, anonymised usage data to understand how players interact with 999ar and to improve Platform features, game selection, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and PSL cricket specials to players who have opted in to receive such communications. You may opt out at any time.

4 Legal Basis for Processing

999ar processes personal data on the following legal bases:

• Contract performance: Processing is necessary to provide the services you requested when registering with 999ar, including account operation, game delivery, and payment processing.
• Legal obligation: Processing is required to comply with applicable anti-money laundering, financial crime, and age verification obligations.
• Legitimate interests: 999ar has a legitimate interest in fraud prevention, Platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights.
• Consent: Marketing communications and certain non-essential cookies are processed only where you have given specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Sharing Your Personal Data

999ar does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly for the purposes described:

• Payment processors: JazzCash, Easypaisa, and partner banks in Pakistan receive only the data necessary to execute your specific transaction (mobile number, transaction amount, reference). They are bound by their own privacy and security obligations.
• Game technology providers: Evolution Gaming, Pragmatic Play, PG Soft, and other game software suppliers receive technical session data necessary to deliver game content. They act as data processors under agreements with 999ar.
• Identity verification services: Where KYC verification is triggered, limited identity data may be shared with licensed verification service providers.
• Regulatory and law enforcement authorities: 999ar will disclose personal data to competent authorities where required by applicable law, court order, or to protect the rights, safety, or security of 999ar, its players, or third parties.
• Professional advisers: Lawyers, auditors, and consultants who process data in connection with their professional services to 999ar, subject to confidentiality obligations.

All third-party data processors engaged by 999ar are required to implement appropriate technical and organisational security measures and to process data only on 999ar's documented instructions.

6 Payment Data & Financial Information

Given that 999ar operates exclusively in Pakistani Rupees and primarily through mobile wallet services, the handling of payment data deserves specific attention. When you make a JazzCash or Easypaisa deposit, your mobile wallet number and transaction reference are captured and stored in association with your 999ar account for the following purposes:

• Matching incoming payments to your 999ar account balance.
• Routing withdrawal proceeds to the correct mobile wallet.
• Fulfilling the "same-source return" requirement for withdrawals, which is an anti-money laundering control.
• Providing a transaction history accessible via your account dashboard.
• Responding to payment disputes or support queries.

999ar does not store your JazzCash or Easypaisa MPIN at any point. MPIN entry occurs within your mobile wallet application and is never transmitted to or received by 999ar servers.

7 Data Retention

999ar retains personal data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory, audit, and dispute resolution obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account plus a minimum of five years following account closure, as required for anti-money laundering compliance.
• Financial transaction records: Retained for a minimum of five years from the date of transaction.
• Gaming activity records: Retained for a minimum of three years from the date of the activity.
• Customer support records: Retained for two years from the date of the interaction, or longer if the matter relates to an unresolved dispute.
• Marketing consent records: Retained until you withdraw consent and for a reasonable period thereafter as evidence of your consent decision.

When retention periods expire, 999ar will securely delete or anonymise the relevant data in accordance with our data disposal procedures.

8 Cookies & Tracking Technologies

999ar uses cookies and similar technologies (including session tokens and local storage) to operate the Platform effectively. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged into your 999ar account. These cannot be disabled without breaking Platform functionality.
• Functional cookies: Remember your preferences such as language settings, last-viewed game categories, and display options.
• Analytics cookies: Collect anonymised data about how visitors navigate the 999ar Platform, which pages load most frequently, and where technical errors occur. This data is used in aggregate to improve the service.
• Marketing cookies: Used only where you have consented, to track whether you have engaged with promotional communications and to avoid showing you the same offer repeatedly.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. Players accessing 999ar from Pakistani mobile browsers (Chrome on Android is the most common) can manage cookie settings via the browser's site settings menu.

9 Security Measures

999ar implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and 999ar servers.
• Encryption of sensitive data fields at rest in our database systems.
• Access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security reviews and vulnerability assessments of Platform infrastructure.
• Incident response procedures for identifying, containing, and notifying affected parties in the event of a data breach.

While 999ar takes reasonable steps to protect your data, no online platform can guarantee absolute security. You should take steps to protect your own account — including using a unique, strong password for your 999ar account that is not shared with any other service.

10 Your Privacy Rights

Subject to applicable law and 999ar's legal obligations, you have the following rights in respect of personal data we hold about you:

• Right of access: You may request a copy of the personal data 999ar holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where 999ar no longer has a legal basis to retain it. Note that we may be required to retain certain data for regulatory compliance purposes even following an erasure request.
• Right to restrict processing: You may request that 999ar limits how it uses your data while an objection or accuracy dispute is being resolved.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Marketing opt-outs take immediate effect.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting processing that occurred prior to withdrawal.

To exercise any of these rights, contact 999ar at [email protected]. Please include your registered mobile number or username so we can identify your account. We aim to respond to all valid requests within 30 days.

11 Minors — Under-18 Data Policy

999ar is strictly an adult platform for players aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If you are under 18, you must not register for or use the 999ar Platform.

If 999ar discovers or is notified that an account belongs to a person under 18, the account will be closed immediately, all associated funds will be handled in accordance with applicable law, and all personal data held in connection with that account will be deleted or retained only to the minimum extent required to fulfil legal obligations relating to the underage access incident.

If you are a parent or guardian and believe your child has accessed 999ar, please contact us immediately at [email protected] so we can investigate and take appropriate action.

12 Changes to This Privacy Policy

999ar reviews and updates this Privacy Policy periodically to reflect changes in our data practices, Platform features, or applicable legal requirements. Material changes will be communicated to registered players via the mobile number or email address on their account prior to taking effect. The "Last reviewed" date at the top of this Policy indicates when it was most recently updated.

Continued use of 999ar following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept an updated Policy, you should cease using the Platform and contact us to close your account.

13 Contact 999ar About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or 999ar's handling of your personal data, please contact our support team: