At AR 999 we take the security of your personal information seriously. This Privacy Policy explains exactly what data we collect from members in Pakistan, why we collect it, how we use and store it, who (if anyone) we share it with, and what rights you have over your own information. Please read it carefully before using our platform.
Every page and transaction on the AR 999 platform is protected by 256-bit SSL encryption. Your personal and payment data is never transmitted in plain text under any circumstances.
AR 999 never sells your personal information to advertisers, data brokers, or any third party for commercial purposes. Your data belongs to you — we only use it to operate your account.
You can request access to, correction of, or deletion of your personal data at any time. AR 999 will respond to all data requests within 30 days — no bureaucratic delays.
AR 999 uses cookies only for essential platform functions, analytics, and optional personalisation. You can manage your cookie preferences at any time from the cookie settings panel.
AR 999 ("AR 999," "we," "us," "our") operates the online betting and gaming platform accessible at ar999.wine. For the purposes of this Privacy Policy, AR 999 is the data controller in respect of the personal information you provide when you register, log in, deposit, bet, or otherwise interact with the platform. This policy applies to all members who access the AR 999 platform from Pakistan or from any other location.
If you have questions about how your personal data is handled at AR 999 or wish to exercise any of your data rights, you can contact our Data Privacy team at any time via the contact details in Section 13 of this policy. We aim to make privacy as straightforward and transparent as the rest of our platform — no legal jargon designed to confuse, just plain English explaining exactly what we do with your information.
AR 999 collects personal data through three main channels: information you provide directly when you register and use the platform; information generated automatically by your use of the platform; and information we receive from third-party payment processors and identity verification partners as part of our compliance obligations.
When you register or update your AR 999 account, we collect the following:
| Data Type | Examples | Why We Need It | Status |
|---|---|---|---|
| Identity | Full name, date of birth, CNIC number | Age verification, KYC compliance, anti-fraud | Required |
| Contact | Email address, mobile number | Account communications, security alerts, support | Required |
| Address | City, province, postal address | Identity verification, KYC, AML compliance | Required |
| Financial | Deposit/withdrawal amounts, payment method references (not full card details) | Transaction processing, fraud prevention, AML | Required |
| KYC Documents | CNIC scan/photo, proof of address, selfie for identity verification | Regulatory compliance, identity confirmation | Required |
| Preferences | Favourite sports, notification settings, responsible gaming limits | Personalisation, responsible gaming support | Optional |
When you access the AR 999 platform, we automatically collect certain technical and behavioural data that helps us operate the platform securely and improve the experience for all members:
AR 999 uses the personal information we hold about you for specific, defined purposes only. We do not use your data for any purpose beyond what is described in this policy without first obtaining your explicit consent.
The primary use of your data at AR 999 is to operate your account and deliver the betting and gaming services you've signed up for. This includes processing your deposits and withdrawals in PKR, settling your bets, crediting bonuses you've qualified for, maintaining your account history, and applying any responsible gaming limits you've set.
AR 999 is required to verify the identity of members before processing withdrawals above certain thresholds and to comply with our anti-money laundering (AML) obligations. Your identity data, including your CNIC and proof of address, is used solely for this verification purpose and is not used for any commercial profiling or advertising.
We use your account data, transaction history, IP address, and device information to detect and prevent fraudulent activity, protect your account from unauthorised access, identify suspicious patterns that may indicate money laundering or match-fixing, and investigate any reported security incidents affecting your account.
Aggregated and anonymised usage data — not linked to your identity — helps the AR 999 technical team understand how members use the platform, which features are most valued, where members encounter difficulties, and how to prioritise improvements. This analysis does not involve individual profiling; it operates at a population level across all active members.
AR 999 uses your contact details to send you transactional communications (deposit confirmations, withdrawal notifications, bet settlement notifications, security alerts), as well as, where you have consented, promotional communications about bonuses, new features, and offers. You can opt out of marketing communications at any time from your account settings or by contacting support — this will not affect your transactional notifications, which are essential to your account.
AR 999 processes your personal data on the following legal grounds, depending on the specific purpose:
AR 999 does not sell your personal information to any third party. We share your data only in the following limited circumstances, and only with parties who are bound by appropriate data protection obligations:
To process your deposits and withdrawals, AR 999 shares the minimum necessary transaction data with our certified payment partners — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors, and Visa/Mastercard network operators. These partners process your transaction data under their own privacy policies and applicable financial regulations. AR 999 does not share your full payment credentials with these partners — payment authentication happens directly between you and the payment provider.
AR 999 uses licensed identity verification service providers to perform KYC checks on new members and for periodic re-verification. Your CNIC data and biometric verification information may be transmitted to these partners for the sole purpose of identity confirmation. All such partners are contractually bound to use your data only for the stated verification purpose.
AR 999 will disclose your personal information to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so — for example, in response to a court order, a regulatory investigation, or a statutory reporting obligation under AML regulations. We will notify you of any such disclosure where we are legally permitted to do so.
AR 999 works with a small number of carefully selected technology and infrastructure providers — including cloud hosting services, platform analytics tools, and customer support software — who process data on our behalf under strict data processing agreements. These providers are not permitted to use your data for their own purposes.
The security of your financial data is treated as the highest priority at AR 999. All financial transactions on the platform are protected by 256-bit SSL encryption. Payment card details are processed directly by PCI-DSS Level 1 certified payment processors — the highest available certification standard — and full card numbers, expiry dates, and CVV codes are never transmitted to or stored on AR 999 servers at any point.
For mobile wallet payments via Easypaisa, JazzCash, NayaPay, and SadaPay, transaction authentication takes place within the respective wallet apps, which maintain their own security standards and regulatory compliance. AR 999 receives only a transaction reference and confirmation — not your wallet PIN or authentication credentials.
AR 999 implements the following additional security measures to protect your account and financial data:
AR 999 uses cookies and similar tracking technologies on the ar999.wine platform. Cookies are small text files stored on your device that help us recognise returning members, maintain your session when you're logged in, understand how the platform is being used, and deliver a consistent experience across your visits.
Required for the platform to function. Maintain your login session, protect against CSRF attacks, and remember your cookie preferences. Cannot be disabled without breaking core functionality.
Help AR 999 understand which pages and features members use most. Data is aggregated and anonymised — it does not identify you personally. You can opt out via cookie settings.
Remember your display preferences, language settings, and odds format selections so you don't have to set them on every visit. Only active where you have given consent.
You can manage your cookie preferences at any time by clicking the cookie settings link in the footer of the AR 999 platform. You can also control cookies through your browser settings, though blocking essential cookies will prevent you from logging in or using the platform normally. AR 999 does not use third-party advertising cookies or share cookie data with any advertising network.
AR 999 retains your personal data only for as long as is necessary for the purposes for which it was collected, or for as long as we are legally required to keep it. The following retention periods apply:
When your data reaches the end of its retention period, AR 999 securely deletes or permanently anonymises it. If you request deletion of your data before the end of the applicable retention period, we will delete everything we are not legally required to retain, and clearly explain to you what we are required to keep and for how long.
As an AR 999 member, you have the following rights over your personal data. These rights apply regardless of which country you are accessing the platform from, and AR 999 will respond to all valid requests within 30 days:
You can request a copy of all personal data AR 999 holds about you at any time. We will provide this in a structured, machine-readable format where technically feasible.
If any personal data we hold about you is inaccurate or incomplete, you can ask us to correct it. For account details you can update directly, this can be done from your account settings.
You can request deletion of your personal data. We will delete everything we are not legally required to retain and inform you clearly of anything we must keep and for how long.
You can request that we restrict processing of your data in certain circumstances — for example while a data correction request is being resolved or while you are contesting the accuracy of data we hold.
Where technically feasible, you can request your personal data in a portable format so you can transfer it to another service. This applies to data you have directly provided to us.
You can object to processing of your data for direct marketing purposes at any time. You can also object to processing based on legitimate interests, though we may continue if there are compelling grounds.
To exercise any of these rights, contact the AR 999 Data Privacy team at support@ar999.wine. Please mark your message as a "Data Rights Request" and describe clearly what you are requesting. We may need to verify your identity before processing the request to protect your data from unauthorised access.
AR 999 strictly prohibits use of the platform by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that personal data has been collected from a person under 18, we will immediately delete that data, close the associated account, and return any deposited funds where legally possible.
If you are a parent or guardian and believe your child has registered an account on the AR 999 platform, please contact us immediately at support@ar999.wine. We will treat all such reports as urgent and act within 24 hours of receiving a verified report. We also encourage parents and guardians to use parental control software to restrict access to online betting platforms for children and young people in their household.
AR 999 operates internationally, and your personal data may be stored or processed in countries outside Pakistan as part of our platform infrastructure. In all cases, AR 999 ensures that international data transfers are subject to appropriate safeguards — including data processing agreements that impose data protection standards equivalent to those described in this policy — and that the receiving parties are not permitted to use your data for any purpose beyond what is described here.
Our core member data is stored on servers located in jurisdictions with established data protection frameworks. AR 999's cloud infrastructure partners are selected in part based on their compliance with international data protection standards. If you would like information about the specific safeguards in place for international transfers of your data, please contact our Data Privacy team.
AR 999 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or new features we introduce to the platform. When we make material changes, we will notify registered members via the email address on file and display a prominent notice on the platform for at least 14 days before the changes take effect.
The date at the top of this page shows when the policy was last updated. We encourage you to review this policy periodically. Continued use of the AR 999 platform after an updated policy has taken effect constitutes your acceptance of the updated terms. If you do not agree to material changes, you should stop using the platform and contact us to close your account — any outstanding balance will be returned to you in accordance with our standard withdrawal process.
For all privacy-related queries, data rights requests, or concerns about how AR 999 handles your personal information, please use the following contact details:
For questions about specific aspects of this policy, for responsible gaming support, or to exercise any of the rights described in Section 9, our team is available around the clock. We take all privacy queries seriously and will always give you a substantive, direct response — not a form letter.
If you feel that AR 999 has not adequately addressed a privacy concern, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction. Our team will be happy to provide information about the appropriate authority for your location if you contact us directly.
All major Pakistani payment methods — instant, fee-free, PKR
Min deposit Rs 200 | Withdrawals in under 5 minutes | All amounts in PKR (Rs)
Quick answers to the privacy questions that come up most often from AR 999 members in Pakistan