Privacy Policy — ar998

1. Who We Are

ar998 is an internationally licensed online gaming operator offering sports betting, live casino, slot games, and fishing game experiences to players in Pakistan and other permitted territories. The platform is accessible at ar998.org and all associated subdomains and mobile interfaces.

For the purposes of this Privacy Policy, ar998 acts as the data controller — meaning we determine the purposes and means by which your personal data is collected and processed. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are contractually bound by data protection obligations consistent with this policy.

If you have any questions regarding data controller responsibilities or wish to exercise any of your data rights, please contact us through the channels listed in Section 14 of this policy.

2. Personal Data We Collect

ar998 collects the following categories of personal data in connection with your account and use of our platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data except where explicitly required for regulatory identity verification purposes and with your knowledge.

3. How We Collect Your Data

ar998 collects personal data through the following channels:

• Direct collection: Information you provide when registering your ar998 account, completing identity verification, making deposits or withdrawal requests, contacting our support team, or responding to surveys and promotional offers;
• Automated collection: Technical and usage data gathered automatically when you access the ar998 platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 7);
• Third-party sources: Identity verification data from KYC service providers; fraud prevention signals from payment processors including JazzCash and EasyPaisa; publicly available information used to verify identity or investigate suspected fraudulent activity.

4. Why We Use Your Personal Data

ar998 uses your personal data for the following specific purposes:

• To create, manage, and maintain your ar998 account and verify your identity in compliance with our licensing obligations;
• To process deposits and withdrawals in PKR via your chosen payment method, including reconciling transactions and issuing account statements;
• To detect, investigate, and prevent fraudulent transactions, money laundering, underage gambling, and other prohibited activities;
• To monitor your gaming activity for responsible gambling purposes, including identifying signs of problem gambling behaviour and applying protective measures where appropriate;
• To respond to your customer support queries, live chat conversations, and formal complaints;
• To send you transactional communications relating to your account, including deposit confirmations, withdrawal notifications, and security alerts;
• To send you promotional communications about ar998 bonuses, game launches, and seasonal offers — only where you have opted in to such communications or where permitted under applicable law;
• To comply with anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and any other applicable legal or regulatory obligations;
• To improve the ar998 platform through anonymised analytics, user experience research, and performance monitoring.

5. Legal Basis for Processing

ar998 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game access;
• Legal obligation: Processing required to comply with applicable AML, KYC, licensing, and regulatory reporting obligations imposed on ar998 as a licensed gaming operator;
• Legitimate interests: Processing carried out to protect ar998 and its players from fraud, abuse, and security threats, where such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing of data for marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

ar998 does not sell your personal data. We share your data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to execute deposits and withdrawals. These institutions operate under their own privacy frameworks and applicable financial regulations;
• Identity verification providers: Third-party KYC service providers who assist us in verifying player identity and age in accordance with our licensing requirements. These providers are contractually bound to handle your data securely and exclusively for verification purposes;
• Fraud prevention services: Specialist fraud detection platforms that help ar998 identify suspicious activity, protect player accounts, and comply with AML obligations;
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory direction, ar998 may disclose personal data to competent authorities. We will, where legally permissible, notify you of such disclosure;
• Game software providers: Licensed game studios whose products are featured on ar998 may receive anonymised or pseudonymised gameplay data for technical support and audit purposes. No directly identifiable personal data is shared for this purpose without your knowledge.

7. Cookies & Tracking Technologies

ar998 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit ar998.org. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential to the functioning of the platform — including maintaining your login session, remembering your language preference, and securing your connection. These cannot be disabled without affecting platform functionality;
• Performance cookies: Used to collect anonymised data about how players navigate the platform, which pages load slowly, and where errors occur. This data helps us improve the ar998 user experience;
• Functional cookies: Remember preferences you have set — such as game view settings or responsible gaming tool configurations — so you do not need to re-enter them on each visit;
• Analytics cookies: Used to understand aggregate user behaviour patterns and platform performance. Data processed for analytics purposes is anonymised before analysis.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core ar998 platform, though some features may behave differently.

8. Data Retention

ar998 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under applicable financial regulations;
• Identity verification documents: Retained for the period required by our licensing authority's KYC retention standards, typically five (5) years post-account closure;
• Support and communications data: Retained for up to three (3) years following the resolution of the relevant query or complaint;
• Marketing preferences and consent records: Retained for the period during which consent is active, and for one (1) year following withdrawal of consent as an audit record.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

9. Security Measures

ar998 implements a layered approach to data security, combining technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction:

• All data in transit is encrypted using TLS 1.2 or higher. Financial data is additionally protected via the security protocols of our payment partners;
• Access to player personal data within ar998 is restricted on a strict need-to-know basis. Internal access controls, role-based permissions, and audit logging are in place across all systems handling personal data;
• ar998 conducts regular security assessments and vulnerability testing on its platform infrastructure;
• Passwords are stored in hashed form and are never transmitted or stored in plain text. ar998 will never ask you to reveal your password via any communication channel;
• In the event of a personal data breach that poses a risk to your rights and freedoms, ar998 will notify affected players and relevant regulatory authorities in accordance with applicable breach notification obligations.

10. Your Data Rights

Subject to applicable law, you hold the following rights in relation to the personal data ar998 processes about you:

• Right of access: You may request a copy of the personal data ar998 holds about you, along with information about how it is being used;
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may also update certain account details directly from within your ar998 account settings;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances — for example, while the accuracy of data is being contested;
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that your data be provided to you in a structured, machine-readable format;
• Right to object: You may object to processing based on ar998's legitimate interests, including direct marketing communications. You may unsubscribe from marketing emails at any time via the unsubscribe link in any such communication or by contacting support.

To exercise any of the above rights, please contact us via live chat or email at [email protected]. We will respond to your request within 30 calendar days. We may need to verify your identity before processing your request.

11. Children's Privacy

The ar998 platform is strictly intended for adults aged 21 and over. ar998 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not attempt to register an account, deposit funds, or access any gaming content on the platform.

Where ar998 becomes aware that personal data has been collected from an individual who has misrepresented their age during registration, we will take immediate steps to close the account, reverse any transactions where possible, and permanently delete the associated personal data.

If you believe that a minor has registered on the ar998 platform, please contact our support team immediately so that we can investigate and take appropriate action.

12. Third-Party Links

The ar998 platform may contain references or navigational links to third-party content, game providers, or informational resources. This Privacy Policy applies exclusively to data processed by ar998 on the ar998.org platform. ar998 is not responsible for the privacy practices of third-party websites or services, and we encourage you to review the privacy policies of any third-party sites you visit.

The presence of a reference to a third-party service on the ar998 platform does not constitute an endorsement of that service's data handling practices.

13. Changes to This Privacy Policy

ar998 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, the revised policy will be published on this page with an updated "Last Updated" date. Where changes are significant, ar998 may also notify active players via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how ar998 is protecting your personal data. Your continued use of the ar998 platform following the publication of a revised policy constitutes your acknowledgment of the updated terms.

If any proposed change to this policy would require your renewed consent for processing activities previously conducted under consent, ar998 will seek that consent proactively before the change takes effect.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ar998 holds about you, please reach out to our team through the following channels:

• Live Chat: Available 24/7 directly within the ar998 platform — the fastest way to reach our support team for any privacy-related query.
• Email: [email protected] — for formal data subject access requests, erasure requests, or written complaints. Please allow up to 30 calendar days for a full response.

When submitting a data rights request, please include your registered ar998 username and the email address associated with your account so that our team can verify your identity and locate the relevant data promptly.