This page explains exactly what personal information arr999 collects when you create and use your account, how that information is used, who it is shared with in what circumstances, and what controls you have over your own data. It is written to be read and understood, not to be ignored.
This Privacy Policy describes how arr999 collects, uses, stores and protects the personal information of players who register and use the arr999 platform at arr999.win. It covers all areas of the platform — account registration, deposits and withdrawals, gaming activity, promotional participation and customer support interactions.
By creating an arr999 account you confirm that you have read and understood this Privacy Policy and that you consent to the data practices described here. This policy should be read together with the arr999 Terms and Conditions. If you have questions about anything in this policy that are not answered on this page, you can contact the arr999 support team through the contact details provided at the end of this document.
arr999 takes data privacy seriously. The platform is built for Pakistani players and handles all financial transactions in PKR. Your account information — including your payment details for JazzCash, Easypaisa, Raast and Bank Transfer — is treated with care and is not used for purposes beyond what is necessary to operate your account and provide you with the platform services.
This policy is written in plain Pakistan English. If you find any section unclear, please contact arr999 support before proceeding rather than assuming. Data consent is given at the point of account registration.
arr999 collects personal information in two ways — information you provide directly when registering and using the platform, and information collected automatically as part of normal platform operation. Here is a breakdown of both categories:
Information you provide directly:
Information collected automatically:
arr999 does not collect more information than is necessary to operate your account, process your payments and provide the platform services. We do not ask for information we have no use for.
The information arr999 holds about you is used for specific, defined purposes. Here is what those purposes are:
| Purpose | Data Used | Why Necessary |
|---|---|---|
| Account creation & management | Name, email, phone, DOB | Required to operate your account |
| Age & identity verification | DOB, CNIC or equivalent document | Platform is 18+ only; required before withdrawals |
| Deposit & withdrawal processing | Payment account details (JazzCash, Easypaisa, Bank) | Required to process PKR transactions |
| Fraud prevention & security | IP, device data, session logs, payment data | Detect multiple accounts, unauthorised access |
| Platform communications | Email, phone | Account notices, bonus updates, support responses |
| Platform improvement | Session logs, pages visited, device data | Understand how players use the platform to improve it |
| Responsible gaming | Deposit history, session frequency, self-exclusion status | Monitor for patterns that suggest problem gaming |
arr999 does not use your data for purposes beyond what is listed above. We do not sell personal data to third-party marketers. We do not use your gaming activity or personal details to serve you targeted advertising from external parties.
When you make a deposit on arr999 — whether via JazzCash, Easypaisa, Raast, Bank Transfer or card — the payment details you provide are processed through the relevant payment provider's systems. arr999 does not store full card numbers or complete mobile wallet credentials on its own servers. What arr999 does retain is a record of your transaction — the amount in PKR, the date, the payment method used, and whether the transaction was a deposit or withdrawal.
This transaction record is retained as part of your account history. It is used to verify your deposit history for withdrawal processing, to apply promotional offers correctly, and to assist with any dispute resolution if a payment issue arises. Payment records are retained for the period required by anti-fraud and financial record-keeping requirements.
Where identity verification is required before a withdrawal is processed — for example, where the withdrawal amount crosses a threshold that requires CNIC verification — the documents you submit are used solely for that verification purpose. They are handled securely and are not shared with parties beyond those involved in processing the verification.
Always ensure that the payment account you use to deposit on arr999 is registered in your own name. Deposits from third-party accounts create complications for verification and withdrawal processing.
arr999 does not sell your personal data. However, some categories of data are shared with third parties where necessary to operate the platform. Here is who receives data and why:
Beyond the categories above, your personal data stays within arr999's systems. We do not share account details, gaming history or financial records with marketing companies, data brokers or unrelated third parties.
arr999 uses cookies — small text files stored in your browser — to operate core platform functions, remember your login session, and understand how the platform is being used in aggregate. Here is a breakdown of the types of cookies arr999 uses:
Most mobile browsers and desktop browsers allow you to view, manage and delete cookies through browser settings. Deleting essential cookies will require you to log in again on your next visit and may affect some platform preferences.
arr999 does not use cookies to track your activity on third-party websites that are not part of the arr999.win domain. Cookie use is limited to the arr999 platform itself.
arr999 applies technical and organisational security measures to protect your personal information from unauthorised access, alteration or loss. These measures include encrypted connections (HTTPS) throughout the platform, access controls limiting which staff and systems can access personal data, and monitoring for unusual account activity that may indicate a breach.
Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to affect your rights or interests, arr999 will take steps to notify affected players as promptly as the circumstances allow.
You can help protect your account by using a strong, unique password, not sharing your login credentials with anyone, and logging out of your account when using a shared or public device. If you believe your arr999 account has been accessed without your permission, contact support immediately.
arr999 does not keep your data longer than necessary. Here is how long different categories of data are typically retained:
When data is no longer required for any legitimate retention purpose, arr999 will delete or anonymise it in a manner that makes re-identification impossible.
As an arr999 player you have a number of rights in relation to the personal data arr999 holds about you. These rights are exercisable by contacting arr999 support through the contact details at the end of this policy:
You can request a copy of the personal data arr999 holds about you. Requests are typically processed within a reasonable timeframe.
If data arr999 holds about you is inaccurate, you can request that it be corrected. Updates to core account details may require verification.
You can request deletion of your account and associated data. Note that some data categories — like transaction records — are subject to retention requirements that may limit immediate deletion.
You can object to the processing of your data for purposes beyond strict account operation — such as platform analytics — where technically possible within platform constraints.
You can request a copy of the data you provided to arr999 in a structured, readable format where technically feasible.
You can request that arr999 restrict the processing of your data while a data accuracy or objection request is being handled.
To exercise any of the above rights, contact arr999 support using the details in Section 12 of this policy. arr999 will respond to verified data requests within a reasonable period and may request identity confirmation before actioning a request.
arr999 is strictly for players aged 18 and above. arr999 does not knowingly collect personal data from individuals under 18 years of age. Age confirmation is required at account registration. Where arr999 identifies that an account has been created by a person under 18, the account will be closed immediately, any deposits will be refunded to the payment method used, and all data associated with the account will be deleted.
If you are a parent or guardian and believe that a minor has registered an account on arr999, please contact support immediately so the account can be located and closed. arr999 will handle such reports promptly.
arr999 may update this Privacy Policy from time to time to reflect changes in platform operation, legal requirements or data handling practices. When this policy is updated, the revised version will be published on this page with an updated date at the top. For significant changes to how your data is used, arr999 will make reasonable efforts to notify active players through platform notifications or email before the change takes effect.
Continued use of the arr999 platform after an updated Privacy Policy is published constitutes your acceptance of the revised terms. If you disagree with a change to the Privacy Policy, you should close your account before the change takes effect by contacting arr999 support.
If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how arr999 handles your personal information, you can contact the arr999 support team:
Email: [email protected] (plain text – not a clickable link)
arr999 will aim to respond to privacy-related queries within a reasonable period. For data access or deletion requests, identity verification may be required before the request is actioned to ensure that data is only disclosed or deleted for verified account holders.
The most important things to understand about how arr999 handles player data
Every page of arr999 is served over an encrypted HTTPS connection. Data transmitted between your device and the platform — including login credentials and payment details — is protected in transit.
arr999 does not sell your personal information to advertisers, data brokers or marketing companies. Your account information and gaming history stay within arr999's systems and the essential service providers listed in this policy.
Full payment credentials for JazzCash, Easypaisa, Raast and Bank Transfer are processed through the respective payment providers. arr999 stores only the transaction record — amount, date, method — not your complete account credentials.
You can request access to, correction of, or deletion of your personal data at any time by contacting arr999 support. Requests are handled within a reasonable timeframe with identity verification where required.
arr999 uses cookies to keep you logged in, remember preferences and understand aggregate platform usage. Cookies are not used to track your activity on other websites or build marketing profiles.
Age verification data is collected specifically to enforce the 18+ requirement. Accounts found to belong to minors are closed immediately and associated data is deleted. arr999 does not knowingly hold personal data for under-18s.
Technical and practical measures that protect your information day-to-day
All connections to arr999.win are encrypted. Whether you are logging in, depositing or playing a game, the data in transit between your device and the platform is protected from interception.
Internal access to player account data is restricted on a need-to-know basis. Not all arr999 staff can view your personal details — only those whose function requires access to specific categories of data.
arr999 monitors accounts for login patterns or activity that may indicate unauthorised access. Unusual behaviour triggers a review process. If your account is flagged, you may be contacted for verification.
Identity documents submitted for withdrawal verification — such as CNIC copies — are handled through secure channels, not via plain email. They are used only for the verification purpose and are not retained beyond what is required.
arr999 collects only the data necessary to operate your account and the platform. We do not request information we have no operational use for. Data that is no longer needed is deleted or anonymised.
In the event of a data security incident that is likely to affect player rights, arr999 will notify affected players as promptly as the circumstances allow and take steps to limit the impact of the incident.