Privacy Policy — How arr99 Handles Your Data

arr99 is an online gaming and sports betting platform available at arr99.app. We provide Pakistani players with access to sports betting — including cricket markets covering PSL, T20 internationals and domestic tournaments — alongside fish games, live casino, slots and other game types. The platform is accessible via the arr99 website and the arr99 mobile app for Android and iOS.

For the purposes of this Privacy Policy, "arr99", "we", "us" and "our" refer to the operator of the arr99 platform. "You" and "your" refer to anyone who accesses the arr99 website, creates an account, or uses any feature of the arr99 platform. "Personal data" means any information that can identify you as an individual — directly or in combination with other information.

This policy applies to all personal data arr99 collects and processes. It covers data collected during account registration, during deposits and withdrawals in PKR, during gameplay, through the arr99 app and through any customer support interactions you have with the arr99 team.

arr99 collects personal data from you in two ways: information you provide directly, and information collected automatically as you use the platform.

Information you provide directly:

• Full name, date of birth and contact details (mobile number and email address) provided at registration.
• Identity verification documents such as CNIC, passport or driving licence, when requested during account verification or withdrawal processing.
• Payment information including your JazzCash or Easypaisa mobile number, bank account details or other payment method identifiers used to process PKR deposits and withdrawals.
• Communications you send to arr99 support, including chat transcripts, emails and any attachments you provide when raising a query or dispute.
• Responsible gaming preferences, such as deposit limits, session reminders or self-exclusion requests, that you configure within your account settings.

Information collected automatically:

• Device information: device type, operating system, browser type and version, and unique device identifiers.
• Network information: IP address, approximate location derived from IP, and mobile network operator.
• Usage data: pages visited, games played, bets placed, session duration, login timestamps and navigation patterns within the arr99 platform.
• Transaction logs: a record of all deposits, withdrawals, bonus claims and wager activity on your account.
• Cookie and tracking data: as described in Section 7 of this policy.

Every piece of data arr99 collects has a specific, legitimate purpose. The table below summarises the main ways your data is used:

arr99 does not use your personal data to make fully automated decisions that significantly affect you without human oversight. Where automated systems are used — for example, to flag suspicious activity — a member of the arr99 team reviews flagged cases before any account action is taken.

arr99 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the arr99 service to you, including account management, deposits, withdrawals and gameplay.
• Legitimate interests: Processing necessary to protect arr99, its players and the integrity of the platform — including fraud prevention, security monitoring and platform improvement.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering checks and age verification obligations.
• Consent: Where arr99 sends you optional marketing communications or uses non-essential cookies, this is done on the basis of your consent, which you can withdraw at any time.

All financial transactions on arr99 are conducted in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, Bank Transfer or another supported mobile wallet, your payment details are processed by the relevant payment provider directly.

arr99 retains a record of the transaction — including the amount, date, time, payment method type and transaction status — for account management and fraud prevention purposes. Full payment credentials such as complete bank account numbers or mobile wallet PINs are never stored by arr99.

Payment providers such as JazzCash and Easypaisa operate under their own privacy policies and terms. arr99 is not responsible for how these providers handle data on their own systems. We recommend reviewing the privacy policy of your chosen payment provider for details of how they process your information.

arr99 does not sell your personal data. We share it only in the following limited circumstances, and only to the extent necessary for each purpose:

• Payment processors: JazzCash, Easypaisa, Raast and bank networks receive transaction data necessary to process your PKR deposits and withdrawals.
• Identity verification providers: Third-party services used to verify your identity documents during account verification. These providers are bound by confidentiality obligations.
• Game content providers: Providers of fish games, live casino and slot content may receive anonymised session data required to deliver and maintain game functionality. No personally identifiable information is shared with game providers beyond what is technically required.
• Platform infrastructure providers: Cloud hosting and content delivery providers that support the operation of arr99.app and the arr99 app. These providers process data on arr99's behalf under strict data processing agreements.
• Legal and regulatory requirements: Where arr99 is required by law to disclose information — for example, in response to a valid legal request — your data may be shared with the relevant authorities. arr99 will only do this to the extent legally required.

Any third party that processes data on behalf of arr99 is required to handle that data securely, use it only for the purpose it was shared for, and comply with applicable data protection obligations. arr99 does not share data with advertisers, data brokers or marketing networks.

arr99 uses cookies and similar technologies to make the platform work correctly and to improve your experience. A cookie is a small text file placed on your device when you visit arr99.app or use the arr99 app.

The types of cookies arr99 uses include:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. You cannot opt out of essential cookies without preventing the platform from working properly.
• Analytics cookies: Used to understand how players navigate arr99 — which pages are visited most, where users drop off and how features are used. This data is aggregated and anonymised. These cookies are optional and require your consent.
• Security cookies: Used to detect suspicious login activity, enforce session timeouts and protect your account from unauthorised access.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using arr99, but it may limit some personalisation features. The arr99 mobile app uses equivalent tracking technologies that can be managed through your device's app permissions settings.

arr99 takes the security of your personal data seriously. The platform uses SSL/TLS encryption for all data transmitted between your device and arr99's servers. Account passwords are stored using industry-standard hashing methods — they are never stored in plain text, and arr99 support staff cannot retrieve your password.

Access to personal data within arr99's systems is restricted to staff and systems that genuinely need it to perform their function. Access logs are maintained, and any unusual access patterns are investigated promptly.

While arr99 applies strong technical and procedural security measures, no online platform can guarantee absolute security against all threats. In the event of a data breach that affects your personal information, arr99 will notify affected users and take immediate steps to contain and remediate the breach.

You also play a role in keeping your data secure. Use a strong, unique password for your arr99 account. Do not share your login credentials with anyone. If you notice unusual activity on your account, contact arr99 support immediately.

arr99 retains your personal data for as long as it is needed for the purpose it was collected for, and no longer than is necessary. The following general retention guidelines apply:

• Active accounts: Personal data is retained for the lifetime of your arr99 account and for a reasonable period after account closure to handle any outstanding queries or disputes.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum period required to comply with applicable financial record-keeping obligations.
• Identity verification documents: Retained for as long as required to meet verification and anti-money laundering obligations, and securely deleted thereafter.
• Support communications: Chat logs and email correspondence are retained for a limited period to allow arr99 to reference them in the event of a subsequent related query.
• Responsible gaming records: Self-exclusion records are retained for the duration of the exclusion and for a further period after it ends, to prevent re-registration during the exclusion window.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. You may request early deletion of your data by contacting arr99 support, subject to arr99's legal obligations to retain certain records.

As an arr99 player, you have the following rights regarding your personal data. To exercise any of these rights, contact arr99 support at [email protected] with your account details and a clear description of your request.

arr99 will respond to data rights requests within a reasonable period. Some requests — such as full data deletion — may be subject to arr99's legal obligations to retain certain financial and verification records. Where arr99 cannot fulfil a request in full, we will explain the reason.

arr99 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. The arr99 registration process requires confirmation that the applicant is 18 or over, and age verification may be requested at any point. If arr99 becomes aware that a person under 18 has registered or attempted to use the platform, the account will be closed immediately and any personal data collected will be deleted.

If you are a parent or guardian and believe that a minor has accessed arr99 or provided their data to arr99, please contact [email protected] immediately so the matter can be resolved without delay.

arr99 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable requirements, or improvements to how we communicate our data practices. The "Last Updated" date at the top of this page will be revised whenever a change is made.

For changes that materially affect your rights — for example, a new category of data being collected or a new type of third-party sharing — arr99 will notify registered players via email or an on-platform notification before the updated policy takes effect. For minor, clarifying edits that do not change the substance of how your data is handled, the updated policy will simply be published on this page.

We recommend bookmarking this page and checking it periodically. Continued use of arr99 after an updated policy has been published constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how arr99 handles your personal information, please get in touch with the arr99 support team. We aim to respond to all privacy-related enquiries promptly.

You can also find answers to common account and platform questions on the FAQ page. For policy-related documents, see also the Terms and Conditions and Responsible Gaming pages.