At arr99, your privacy is not an afterthought — it is built into the foundation of how we operate. This Privacy Policy explains exactly what personal information arr99 collects from players in Pakistan, how that information is used, how it is protected, and what rights you hold over your own data. Please read this document fully before registering an account or using any arr99 service.
Privacy at a Glance
From the moment you register on arr99 to every deposit you make in PKR via JazzCash or EasyPaisa, your personal data is governed by these principles.
arr99 only collects personal data that is directly necessary for account registration, KYC verification, payment processing, and responsible gaming compliance. We never collect data covertly or without a legitimate purpose.
All data transmitted between your device and arr99's servers is protected using industry-standard TLS/SSL encryption. Your account credentials, payment details, and personal information are never transmitted in plain text.
arr99 does not sell, rent, or trade your personal information to third-party marketers. Your data is only shared with service providers who are contractually bound to process it solely on arr99's behalf and under strict confidentiality obligations.
You have the right to access, correct, and request deletion of your personal data held by arr99, subject to our legal retention obligations. Data rights requests can be submitted at any time by contacting arr99 support via live chat or email.
arr99 uses cookies and similar tracking technologies to improve platform performance and personalise your experience. You can manage your cookie preferences through your browser settings at any time, though some features may be affected if essential cookies are disabled.
arr99 operates in accordance with applicable data protection standards and anti-money laundering obligations. Our data handling practices are aligned with internationally recognised privacy principles to ensure your information is processed lawfully and fairly.
This Privacy Policy ("Policy") describes how arr99 ("arr99", "we", "us", "our") collects, uses, stores, shares, and protects personal information provided by users ("you", "Player", "User") of the arr99 website located at https://arr99.net and all associated services, including sports betting markets, casino games, payment processing, customer support, and promotional communications (collectively, the "Services").
arr99 is committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection principles. We recognise that players accessing arr99 from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities across Pakistan entrust us with sensitive personal and financial information, and we take that responsibility seriously.
By registering an account on arr99, making a deposit, placing a wager, or otherwise using any arr99 Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, please discontinue use of arr99 immediately and contact us to close your account.
For the purposes of this Privacy Policy, arr99 acts as the data controller in respect of personal information collected through the arr99 platform. As data controller, arr99 determines the purposes for which and the means by which your personal data is processed.
All data protection queries, access requests, deletion requests, and complaints relating to arr99's handling of your personal data should be directed to arr99's support team, whose contact details are provided in Section 13 of this Policy. arr99 will acknowledge all written data protection requests within five (5) business days and will endeavour to provide a substantive response within thirty (30) calendar days.
When you register an arr99 account, complete KYC verification, make a deposit or withdrawal, contact support, or claim a promotion, you provide us with personal information that may include:
When you access and use the arr99 platform, we automatically collect certain technical and behavioural data, including:
arr99 may receive personal data about you from third parties in limited circumstances, including from identity verification service providers during KYC processing, from payment processors to confirm the status of your transactions, and from fraud prevention services to assess account risk.
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Name, DOB, CNIC, passport | You (registration / KYC) |
| Contact Data | Email, phone, address | You (registration) |
| Financial Data | Payment method refs, transaction history | You / payment processors |
| Technical Data | IP address, device info, browser | Automatically collected |
| Behavioural Data | Gaming activity, session data, bet history | Automatically collected |
| Verification Data | KYC documents, risk scores | You / third-party verifiers |
arr99 processes your personal data for the following purposes:
To create, maintain, and manage your arr99 player account, including verifying your identity, resetting your password, updating your account settings, and managing your account status in accordance with arr99's Terms and Conditions.
To provide you with access to arr99's sports betting markets (including PSL and international cricket), casino games, live dealer tables, instant games such as Mines and Baseball, and all other platform features you use during your sessions on arr99.
To process deposits and withdrawals in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard. This includes verifying payment method ownership during KYC and maintaining a record of all financial transactions associated with your arr99 account.
To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, fraud prevention measures, and any other legal or regulatory obligations applicable to arr99's operations. This includes screening your details against relevant sanctions lists and reporting obligations where required.
To monitor your gaming activity for signs of problematic behaviour, enforce deposit limits and self-exclusion requests, and fulfil arr99's responsible gaming obligations. If arr99 identifies patterns of play that suggest potential harm, we may use your data to proactively reach out with responsible gaming information and tools.
Where you have provided your consent to receive marketing communications, arr99 may use your contact details to send you information about promotions, bonuses, new games, and special offers available on arr99. You may withdraw your consent to marketing communications at any time by updating your communication preferences in your account settings or by contacting support.
To detect, investigate, and prevent fraudulent activity, account abuse, bonus fraud, multi-accounting, and any other prohibited conduct described in arr99's Terms and Conditions. This includes using automated risk-scoring tools to flag unusual account behaviour for manual review.
arr99 processes your personal data only where a lawful basis exists for doing so. The primary legal bases on which arr99 relies are as follows:
arr99 shares personal data with carefully selected third-party service providers who assist in delivering the arr99 platform and its services. These include identity verification and KYC service providers, payment processors and banking partners (including JazzCash, EasyPaisa, and Pakistani banking institutions), game content providers, fraud detection and risk management vendors, and IT infrastructure and hosting providers. All service providers are contractually prohibited from using your data for any purpose beyond the specific service they provide to arr99.
arr99 may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other government authorities where required to do so by applicable law, court order, or regulatory directive. arr99 will not notify you of such disclosures where doing so would be prohibited by law or would compromise an active investigation.
In the event that arr99 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that may result from it.
arr99 does not sell, rent, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or marketing agencies. Your personal information is not a product that arr99 monetises.
Cookies are small text files placed on your device when you visit the arr99 website. arr99 uses cookies and similar technologies (including local storage and session tokens) to enable core platform functionality, remember your preferences, analyse platform usage, and support security and fraud prevention measures.
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair or entirely prevent access to arr99's gaming and account services. Disabling analytics and functional cookies will not prevent access to arr99 but may reduce the quality of your experience on the platform.
arr99 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML/KYC legal obligations |
| KYC verification documents | 5 years post account closure | Regulatory compliance |
| Transaction records | 7 years post transaction | Financial record-keeping obligations |
| Gaming activity logs | 3 years post last session | Responsible gaming monitoring |
| Support communications | 3 years post resolution | Dispute resolution records |
| Marketing preferences | Until withdrawn + 1 year | Consent audit trail |
Once the applicable retention period has elapsed and no overriding legal obligation requires continued storage, arr99 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.
arr99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, arr99 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.
Subject to applicable law and arr99's legal retention obligations, you have the following rights in respect of your personal data held by arr99:
To exercise any of these rights, please contact arr99 support via live chat or email at [email protected]. arr99 will verify your identity before processing any data rights request. We will respond to all requests within thirty (30) calendar days. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension within the initial thirty-day period.
The arr99 platform is strictly intended for adults aged 21 years and above. arr99 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. The 21+ age restriction is enforced through arr99's mandatory age verification process at the point of account registration and through ongoing KYC procedures.
If arr99 discovers or has reasonable grounds to believe that personal data has been collected from a user under the age of 21, arr99 will immediately suspend the relevant account, void all associated wagers and balances, and permanently delete all personal data associated with the underage user from its systems, except where retention is required by applicable law.
If you are a parent or guardian and believe that your child has registered an arr99 account without your knowledge, please contact arr99 support immediately via live chat or at [email protected] so that we can take appropriate action without delay.
arr99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. When material changes are made to this Policy, arr99 will notify registered players via a prominent notice on the arr99 platform and, where appropriate, by email to the address registered on your account.
The updated Privacy Policy will be published on this page with a revised "Last Updated" date at the top of the document. Your continued use of the arr99 platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you must cease using arr99 and request account closure.
If you have any questions, concerns, or complaints regarding this Privacy Policy or arr99's handling of your personal data, please contact our support team through the following channels:
arr99 aims to acknowledge all written privacy-related queries within 24 hours and to provide a full substantive response within thirty (30) calendar days. For urgent matters relating to suspected unauthorised access to your account, please contact us via live chat immediately and change your password as a precautionary measure.
How We Keep You Safe
Beyond legal compliance, arr99 has built operational practices that put your privacy first — from how our teams access your data to how we respond when things go wrong.
arr99 collects only the identity documents strictly required for legal verification. Your CNIC and address proof are used solely for KYC — never for marketing profiling.
JazzCash, EasyPaisa, and bank transactions are processed through encrypted payment channels. arr99 never stores your full payment credentials on its own servers.
Marketing emails and SMS notifications from arr99 include a clear unsubscribe mechanism. You can also manage all communication preferences directly within your arr99 account settings.
arr99 maintains a tested incident response plan. In the event of any data security incident affecting your personal data, you will be notified promptly with clear guidance on next steps.
arr99 combines world-class gaming — from PSL cricket betting to live dealer casino and instant games — with the rigorous data protection standards you've just read about. Your security and privacy are guaranteed every step of the way.
Access Your Account Explore arr99 Casino