Privacy Policy — 999ar Keeps Your Data Safe

999ar is an online entertainment platform serving players across Pakistan. When you register an account, make a deposit, play a game or simply browse the platform, certain information is collected about you. This Privacy Policy explains exactly what that information is, why we collect it, how it is stored, and what rights you have over it.

We take data privacy seriously — not just because it is the right thing to do, but because our players deserve to know that a platform handling financial transactions in PKR is being careful with their information. We do not sell personal data to third parties, we do not use it for purposes you have not been made aware of, and we give you real control over what we hold.

By registering on 999ar or continuing to use the platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact support to arrange account closure.

We collect different types of information depending on how you use the platform. Below is a clear breakdown:

We only collect information that is necessary for a specific, legitimate purpose. We do not collect data just because we can.

Every piece of data we collect has a defined purpose. Here is how we use the information we hold about you:

• Account management: To create and maintain your player account, verify your identity, and keep your profile accurate.
• Processing transactions: To handle deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer and other supported methods.
• Platform security: To detect and prevent fraud, money laundering, multi-accounting, and any other activity that breaches our Terms and Conditions.
• Customer support: To respond to your queries, resolve disputes, and improve the overall support experience.
• Personalisation: To tailor game recommendations, promotions and platform content based on your activity — for instance, highlighting Cricket or PSL-related content if that is what you engage with most.
• Responsible gaming: To monitor usage patterns and intervene where we detect signs of problem gambling behaviour, in line with our Responsible Gaming commitments.
• Marketing communications: To send you promotional offers, bonus updates and platform news — but only if you have opted in. You can withdraw consent at any time through your account settings.
• Legal compliance: To meet applicable legal and regulatory obligations, including record-keeping and responding to lawful information requests.

We do not share your personal data with third parties except in the following limited and necessary circumstances:

• Payment processors: When you make a deposit or withdrawal, your financial details are shared with the relevant payment provider (for example, JazzCash or Easypaisa) solely to process that transaction. These providers have their own privacy policies and are independently responsible for how they handle your data.
• Game providers: Some game data — such as bet amounts and session identifiers — is shared with the third-party game studios that supply games on our platform. This is necessary to deliver the games and record outcomes correctly.
• Technology service providers: We use third-party services for hosting, analytics, fraud detection, and customer support tools. These providers are contractually required to process your data only for the purposes we specify and to maintain appropriate security standards.
• Legal and regulatory obligations: If required by applicable law, a court order, or a lawful request from a relevant authority, we may be required to disclose certain information. We will always seek to limit the scope of any such disclosure.

In all cases where data is shared with a third party, we take reasonable steps to ensure that the recipient protects your information to at least the same standard we apply.

Because 999ar handles real-money transactions in PKR, the financial data you provide is treated with an especially high level of care. When you add a JazzCash account, Easypaisa number, Raast ID, bank account, or card details to your player profile, that information is stored using industry-standard encryption.

Full payment credentials — such as complete card numbers — are never stored directly on 999ar servers. We use tokenisation methods provided by payment processors so that sensitive financial details are held by the processor and referenced only by a secure token on our end.

Your financial data is used exclusively to:

• Process deposits you initiate
• Process withdrawal requests to your verified payment method
• Verify that deposits and withdrawals are made to and from accounts in your own name
• Meet anti-money-laundering record-keeping requirements

999ar uses cookies and similar tracking technologies to make the platform work properly and to understand how players use it. Cookies are small text files stored on your device when you visit the platform.

Types of cookies we use

• Essential cookies: These are necessary for the platform to function — for example, keeping you logged in during a session. You cannot opt out of these without stopping use of the platform.
• Analytics cookies: These help us understand how players navigate the platform — which pages are visited most, where players drop off, and how performance can be improved. Data collected is aggregated and not tied to individual identities in a way we share externally.
• Preference cookies: These remember your settings and preferences to personalise your experience on return visits.
• Marketing cookies: If you have opted in to promotional communications, these help us show relevant offers and measure campaign effectiveness. You can opt out of marketing cookies at any time through your account settings or browser cookie controls.

You can control and delete cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of some parts of the platform.

We keep your personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required to meet legal and compliance obligations.

• Active accounts: Personal and transactional data is retained for the full duration your account is active.
• Closed accounts: After account closure, we retain certain data — particularly financial transaction records and identity verification documents — for a minimum period to meet applicable record-keeping obligations. This period is typically five years from the date of account closure.
• Support communications: Chat logs and email records are retained for up to two years to support dispute resolution and quality assurance.
• Marketing data: If you withdraw consent for marketing communications, we remove you from active marketing lists promptly and retain only a suppression record to ensure we do not contact you again.

Once the applicable retention period has passed, data is securely deleted or anonymised so that it can no longer be linked back to you.

Protecting your data from unauthorised access, loss or misuse is a core operational priority at 999ar. We apply multiple layers of security across the platform:

• Encryption in transit: All data transmitted between your device and 999ar servers is protected using TLS encryption, the same standard used by online banks.
• Encryption at rest: Sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest.
• Access controls: Access to personal data within our organisation is strictly limited to staff who need it to perform their job function. All access is logged and audited.
• Fraud detection: Automated systems monitor platform activity for signs of fraud, account takeover, and suspicious transaction patterns in real time.
• Password security: Player passwords are stored as hashed values — we cannot see your actual password. We recommend using a strong, unique password for your 999ar account.

Despite our best efforts, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify affected users as quickly as practically possible.

You have meaningful rights over the personal data 999ar holds about you. Here is a plain-language summary of what you can ask us to do:

• Access: You can request a copy of the personal data we hold about you at any time.
• Correction: If any information we hold is inaccurate or out of date, you can ask us to correct it. You can also update many details directly through your account settings.
• Deletion: You can ask us to delete your personal data. We will do so where there is no overriding legal or compliance reason to retain it. Note that certain financial records must be kept for a minimum period regardless of a deletion request.
• Restriction: You can ask us to temporarily stop processing your data in certain circumstances — for example, while a correction request is being resolved.
• Withdraw marketing consent: If you previously opted in to promotional communications, you can withdraw that consent at any time by updating your notification preferences in your account or contacting support.
• Complaints: If you feel your privacy rights have not been respected, you are entitled to raise a complaint with us directly. We will investigate and respond within a reasonable timeframe.

To exercise any of these rights, contact us through the support section of your account dashboard or send a message to [email protected]. We will respond within a reasonable period and may ask you to verify your identity before acting on the request.

999ar is strictly an adult platform and is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. Age verification is a required step before any withdrawal is processed, and we reserve the right to request proof of age at any point during account use.

If we become aware that a minor has registered and provided personal data, we will immediately close the account and securely delete all associated data. If you believe a minor has accessed the platform using false information, please contact our support team immediately.

Parents and guardians who are concerned about underage access to gaming platforms are encouraged to use parental controls and device-level content filters to prevent access.

We may update this Privacy Policy from time to time to reflect changes in our platform, the services we offer, or applicable legal requirements. When changes are made, the "Last updated" date at the top of this page will be revised accordingly.

For material changes — those that meaningfully affect how your data is used — we will notify registered players via email or an in-platform notification ahead of the changes taking effect. For minor or clarifying updates, the revised policy will simply be posted on this page.

We encourage you to review this page periodically. Continued use of the platform after a policy update has been posted constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, want to exercise one of your data rights, or need to report a privacy concern, please get in touch through your account support dashboard — that is the fastest route to our team.

You can also reach us at: [email protected]

We are committed to addressing all privacy-related queries promptly and transparently. For questions that are not privacy-related, our FAQ page covers common account, deposit, and withdrawal topics.