are999 Privacy Policy

1. Introduction

1.1 are999 ("we", "us", "our") operates the online casino and sports betting platform available at are999.net. In the course of providing our services to you, we collect and process personal data about you as described in this Privacy Policy.

1.2 This Privacy Policy applies to all personal data collected through the are999 website, mobile browser interface, live chat support system, email correspondence, and any other channel through which you interact with are999.

1.3 This Privacy Policy should be read alongside the are999 Terms & Conditions and Responsible Gaming Policy, all of which together govern your relationship with the are999 platform.

2. Data Controller

2.1 For the purposes of this Privacy Policy, are999 is the data controller in respect of all personal data collected through the are999 platform. As data controller, are999 determines the purposes for which and the manner in which personal data is processed.

2.2 are999 operates under an international gaming licence. Queries relating to data protection, including requests to exercise your rights as described in Section 12 of this Policy, should be directed to the are999 support team using the contact details in Section 15.

3. Personal Data We Collect

3.1 are999 collects the following categories of personal data about you, depending on how you interact with our platform:

3.2 are999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where disclosure of health-related information is voluntarily made by a player in the context of a responsible gaming interaction. Any such information is treated with the highest level of confidentiality.

4. How We Collect Personal Data

are999 collects personal data through the following means:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or update your Account settings;
• Automatically: through cookies, server logs, and tracking technologies when you browse or use the are999 platform — see Section 10 for full details;
• From third parties: identity verification providers, payment processors (such as JazzCash and EasyPaisa), fraud detection services, and where required, public records or regulatory databases;
• From responsible gaming interactions: when you voluntarily contact are999 to discuss gambling behaviour, set limits, or request self-exclusion.

5. Purposes & Legal Basis for Processing

5.1 are999 processes your personal data only where a lawful basis for doing so exists. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis:

5.2 Where are999 relies on legitimate interest as a legal basis, we have assessed that our legitimate interest is not overridden by your rights and interests. You may contact us to request further information about this assessment.

6. Data Sharing with Third Parties

6.1 are999 does not sell, rent, or trade your personal data. We share your data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network processors — for the purpose of executing deposits and withdrawals;
• Identity Verification Providers: Third-party KYC service providers who assist are999 in verifying CNIC documents, proof of address, and age confirmation;
• Fraud & AML Detection Services: Specialist providers who assist are999 in identifying suspicious transactions, account patterns, and potential money laundering activity;
• Game Software Providers: Licensed third-party game studios whose RNG-certified games are hosted on the are999 platform — these providers may receive anonymised session data for technical purposes;
• Regulatory Authorities: Where are999 is required by law, court order, or regulatory instruction to disclose player data;
• IT & Hosting Providers: Secure cloud hosting and infrastructure providers who process data solely on are999's instructions under data processing agreements;
• Professional Advisers: Legal, accounting, and audit firms, subject to confidentiality obligations, where necessary for are999 to manage its business affairs.

6.2 All third parties with whom are999 shares personal data are required to handle that data securely, to process it only for the specified purpose, and to comply with applicable data protection obligations.

7. International Data Transfers

7.1 As an internationally operated platform, are999 may transfer your personal data to servers or service providers located outside Pakistan. Where such transfers occur, are999 ensures that appropriate safeguards are in place to protect the data, including contractual protections equivalent to internationally recognised data protection standards.

7.2 By registering an Account with are999 and accepting this Privacy Policy, you consent to the transfer of your personal data as described in this Section.

8. Data Retention

8.1 are999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements;
• KYC / identity documents: Retained for a minimum of five (5) years following the completion of the verification, or five (5) years after Account closure, whichever is later;
• Support communications: Retained for three (3) years from the date of the last communication;
• Marketing preferences and consent records: Retained for the duration of your Account plus two (2) years;
• Technical / server log data: Retained for up to twelve (12) months from collection.

8.2 Once the applicable retention period has expired and there is no legal obligation requiring continued retention, personal data is securely deleted or irreversibly anonymised.

9. Security Measures

9.1 are999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the are999 platform;
• AES-256 encryption for personal data stored on are999 servers;
• Role-based access controls ensuring that only authorised are999 staff can access personal data, limited to what they need to perform their specific function;
• Regular penetration testing and security audits of the are999 platform;
• Two-factor authentication (2FA) available to all players for Account login;
• Intrusion detection systems and 24/7 security monitoring of are999 infrastructure.

9.2 While are999 takes all reasonable precautions to secure your data, no internet transmission is entirely risk-free. You are responsible for keeping your own are999 login credentials confidential. If you suspect that your Account has been accessed without your authorisation, contact are999 support immediately.

10. Cookies & Tracking Technologies

10.1 The are999 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The categories of cookies used by are999 are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load balancing cookies. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred sports markets, and responsible gaming limit configurations.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the are999 platform, which helps us improve navigation, game layout, and support response times.
• Security Cookies: Help are999 detect and prevent fraudulent logins, bot activity, and other security threats.

10.2 You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the are999 platform.

11. Minors & Age Verification

11.1 21+ The are999 platform is strictly restricted to individuals aged 21 years and above. are999 does not knowingly collect or process personal data of anyone under the age of 21.

11.2 Age verification is conducted during the registration process and as part of are999's KYC procedures. Players are required to submit valid proof of age, such as a Pakistani CNIC, before withdrawals are approved. Where are999 discovers or suspects that a player is under 21 years of age, the Account will be immediately suspended, all winnings will be voided, and any deposited funds will be returned to the payment source following verification.

11.3 If you believe that a minor has registered an Account on the are999 platform, please contact our support team immediately using the details in Section 15.

12. Your Data Rights

12.1 Depending on applicable law, you may hold the following rights in relation to the personal data that are999 holds about you. To exercise any of these rights, please contact are999 support as described in Section 15.

12.2 are999 will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with notification provided to you within the initial 30-day window.

13. Marketing Preferences

13.1 are999 may send you promotional communications about bonuses, new games, cricket betting markets, and platform features where you have consented to receive such communications at the time of registration or subsequently through your Account settings.

13.2 You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email sent by are999; (b) updating your communication preferences in your are999 Account settings; or (c) contacting are999 support directly.

13.3 Opting out of marketing communications does not affect the delivery of transactional communications, which are999 must send to you as part of operating your Account — such as deposit confirmations, withdrawal notifications, and KYC requests.

14. Changes to This Privacy Policy

14.1 are999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The most current version of this policy will always be available at are999.net/privacy-policy.

14.2 Where changes are material — meaning they significantly affect your rights or how are999 uses your personal data — we will notify you by email to your registered address and/or through a prominent notice on the are999 platform, prior to the changes taking effect.

14.3 Your continued use of the are999 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.

15. Contact & Complaints

15.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how are999 has handled your personal data, please contact us:

• Live Chat: Available daily 08:00 – 02:00 PST via the are999 platform
• Email: [email protected]

15.2 are999 will acknowledge all privacy-related enquiries within 48 hours and will endeavour to resolve them within 30 calendar days. If you are not satisfied with are999's response to your data protection concern, you have the right to escalate the matter to the relevant supervisory authority or independent dispute resolution body under are999's operating licence.