ar998 Privacy Policy

1 Introduction & Scope

ar998 ("we", "us", "our") operates the online casino and sports betting platform accessible at ar998.net (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the Platform. This Privacy Policy sets out in clear, plain terms exactly how ar998 collects, processes, stores, and protects your personal information.

This Policy applies to all users of the ar998 Platform, including visitors who browse without registering, registered members, and any individual who contacts our customer support team. It covers data collected through the website, any mobile-optimised version of the Platform, and all direct communications between you and ar998.

By accessing or using the ar998 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

2 Data Controller Information

ar998 acts as the data controller in respect of the personal data you provide when using the Platform. As data controller, ar998 determines the purposes and means by which your personal data is processed.

For all privacy-related queries, requests, or complaints, you may contact our dedicated Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the ar998 Platform
• Subject Line: Please use "Data Privacy Request" for faster routing

ar998 is licensed and regulated by an internationally recognised gaming authority. Details of our licensing jurisdiction are available on the Platform. Our data processing practices are aligned with the obligations imposed by our regulatory framework.

3 Personal Data We Collect

ar998 collects only the personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

4 How We Collect Your Data

ar998 collects personal data through the following methods:

• Direct Registration: When you create an ar998 account, you voluntarily provide identity and contact data.
• KYC Verification: When you submit identity documents (CNIC, passport) to satisfy our Know Your Customer obligations prior to withdrawal.
• Transaction Processing: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, financial data is captured to process the transaction.
• Platform Interaction: Automatically collected as you browse, play games, place bets, or navigate the Platform. This includes IP addresses, device identifiers, and session logs.
• Cookies and Similar Technologies: See Section 8 for full details on our cookie practices.
• Customer Support: When you contact ar998 via Live Chat or email, the content of that communication is recorded and stored.
• Third-Party Sources: ar998 may receive data from identity verification providers, fraud prevention agencies, and payment processors to supplement information you have provided directly.

5 Legal Basis for Processing

ar998 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is required to perform the contract between you and ar998 — for example, to process your bets, manage your account balance, and facilitate deposits and withdrawals.
• Legal Obligation: ar998 is required to collect and retain certain data to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) rules, and tax reporting obligations imposed by our licensing authority.
• Legitimate Interests: ar998 processes certain data on the basis of its legitimate business interests, including fraud detection, platform security, and responsible gaming monitoring, provided those interests are not overridden by your rights.
• Consent: Where ar998 sends you direct marketing communications or uses non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 How We Use Your Personal Data

ar998 uses the personal data we collect for the following specific purposes:

• To create, verify, and manage your ar998 account;
• To process deposits and withdrawals through your chosen Pakistani payment method;
• To verify your age (21+) and identity in compliance with our KYC obligations;
• To detect and prevent fraud, money laundering, collusion, and other prohibited activities;
• To provide customer support and resolve disputes in a timely and accurate manner;
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling;
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts;
• To send you promotional communications about ar998 bonuses and offers, where you have provided consent;
• To improve the ar998 Platform through analysis of aggregated usage data;
• To comply with our obligations under applicable laws and the requirements of our gaming licence.

7 Data Sharing & Third Parties

ar998 does not sell your personal data to third parties for their own commercial purposes. We may, however, share your data with carefully selected third parties in the following circumstances:

• Payment Processors: Financial data is shared with payment service providers (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors) solely for the purpose of processing your transactions.
• Identity Verification Providers: ar998 uses licensed KYC and AML service providers to verify your identity documents. These providers process your data under strict data processing agreements with ar998.
• Regulatory Authorities: ar998 may be required to disclose personal data to our gaming licensing authority, financial intelligence units, or law enforcement agencies in response to lawful requests or as required by applicable regulations.
• Fraud Prevention Agencies: ar998 shares data with fraud prevention and risk management services to protect the Platform and its users from financial crime.
• Technology Providers: ar998 works with hosting, cloud infrastructure, and software providers. These vendors act as data processors and are contractually bound to handle your data only in accordance with ar998's instructions.
• Game Content Providers: Aggregated, anonymised gameplay data may be shared with our game software suppliers for performance and fairness auditing purposes. No individually identifiable data is shared for this purpose.

All third parties with whom ar998 shares personal data are subject to data processing agreements that require them to maintain appropriate technical and organisational security measures and to process your data only for the purposes specified by ar998.

8 Cookies & Tracking Technologies

ar998 uses cookies and similar tracking technologies to operate and improve the Platform, authenticate users, maintain session security, and where applicable, deliver personalised content and promotional offers. The types of cookies ar998 uses are:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These cannot be disabled as they are essential for login sessions, security tokens, and basic navigation. No consent is required for these.
• Performance & Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — such as which pages are visited most often and whether error messages are encountered. This data helps ar998 improve the Platform experience.
• Functional Cookies: Enable ar998 to remember your preferences, such as your preferred language, currency display (PKR), and notification settings, so you do not need to reconfigure these on each visit.
• Targeting & Marketing Cookies: Used, with your consent, to deliver promotional content relevant to your interests and to measure the effectiveness of ar998's marketing campaigns. These cookies may track your activity across the Platform over time.

You can manage your cookie preferences through your browser settings or through the ar998 cookie consent interface presented on your first visit to the Platform. Please note that disabling certain cookies may affect the functionality of the Platform, particularly authentication and session management features.

9 Data Retention

ar998 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and operational obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with ar998, plus a minimum of 5 years following account closure, in accordance with AML record-keeping obligations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial regulatory requirements.
• KYC & Identity Documents: Retained for a minimum of 5 years following the end of the business relationship, or longer if required by our licensing authority.
• Customer Support Communications: Retained for 2 years following the resolution of the relevant query or dispute, or longer if the matter is subject to ongoing legal proceedings.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, whichever occurs first.
• Technical & Log Data: Typically retained for 12 months for security monitoring and fraud prevention purposes, after which it is deleted or anonymised.

Upon expiry of the applicable retention period, ar998 will securely delete or anonymise your personal data in a manner that prevents reconstruction of any individually identifiable information.

10 Your Data Rights

As an ar998 user, you have specific rights in relation to your personal data. ar998 is committed to honouring these rights promptly and without undue delay. Your rights include:

• Right of Access: You have the right to request a copy of the personal data ar998 holds about you, along with information about how it is processed.
• Right to Rectification: You may request that ar998 corrects any inaccurate or incomplete personal data held in your account.
• Right to Erasure: In certain circumstances, you may request that ar998 delete your personal data. This right is subject to limitations where retention is required by law or regulatory obligation.
• Right to Restriction: You may request that ar998 restricts the processing of your data — for example, while a correction request is being assessed.
• Right to Data Portability: You may request a copy of the data you have provided to ar998 in a structured, machine-readable format, where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact ar998's Data Protection team via Live Chat or by emailing [email protected] with the subject line "Data Privacy Request". ar998 will acknowledge your request within 48 hours and provide a full response within 30 days.

11 Data Security

ar998 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ar998 Platform is encrypted using industry-standard Transport Layer Security protocols.
• At-Rest Encryption: Sensitive personal and financial data stored in ar998's databases is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. ar998 staff are granted only the minimum level of access required to perform their role, enforced through role-based access control systems.
• Two-Factor Authentication: Available to all registered ar998 users, and mandatory for administrative system access by ar998 staff.
• Regular Security Audits: ar998 conducts periodic independent security assessments and penetration tests of its Platform infrastructure.
• Incident Response: ar998 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, ar998 will notify affected users and relevant authorities in accordance with applicable regulatory requirements.

While ar998 takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying ar998 immediately if you suspect any unauthorised access to your account.

12 Children & Minors

The ar998 Platform is intended exclusively for individuals aged 21 years and over. ar998 does not knowingly collect, process, or retain personal data from anyone under the age of 21. Age verification is a mandatory step in the ar998 registration and KYC process, and the Platform employs technical and procedural safeguards to prevent underage access.

If ar998 discovers or is notified that personal data has been collected from an individual who is under the age of 21, we will take immediate steps to close the associated account, delete the data in question, and — where required by our regulatory obligations — report the matter to the appropriate authority.

13 International Data Transfers

ar998 operates within an international technology and service provider ecosystem. As a result, your personal data may be processed or stored in countries outside of Pakistan. Where such transfers occur, ar998 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under our licensing framework.

Safeguards for international data transfers employed by ar998 include:

• Data processing agreements with all international service providers that include binding data protection obligations;
• Restriction of transfers to jurisdictions with adequate data protection frameworks or to providers that have committed to recognised international data transfer mechanisms;
• Regular review of international data flows to ensure continued adequacy of protections.

If you would like further information about the specific safeguards in place for any international transfer of your personal data, please contact our Data Protection team at [email protected].

14 Changes to This Policy

ar998 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and services offered on the Platform. The effective date at the top of this document will be updated whenever a new version is published.

Where changes are material — meaning they significantly affect your rights or how ar998 processes your personal data — ar998 will notify registered users via email and by displaying a prominent notice on the Platform prior to the changes taking effect. For non-material updates, continued use of the Platform following publication of the revised Policy constitutes your acceptance of the changes.

ar998 recommends that you review this Privacy Policy periodically so that you remain informed about how your personal data is being handled.

15 Contact & Complaints

If you have any questions, concerns, or complaints about how ar998 handles your personal data, please contact our Data Protection team in the first instance:

• Live Chat: Available 24/7 on the ar998 Platform — the fastest route for urgent queries
• Email: [email protected] — please include "Data Privacy Request" in the subject line
• Response Time: Acknowledgement within 48 hours; full response within 30 days

If you are not satisfied with ar998's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction in which ar998 holds its gaming licence, or to seek independent legal advice.