99ar Privacy Policy

This Privacy Policy ("Policy") is issued by 99ar ("we", "us", "our", "Platform"), the operator of the online gaming platform accessible at https://99ar.cam. This Policy sets out how we collect, use, store, share and protect personal data provided by or obtained from users ("User", "you", "Player") who access, register on, or interact with the 99ar Platform.

By registering an account, depositing funds, placing wagers, or otherwise using the 99ar Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform immediately.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling policy, which together form the full legal framework governing your use of 99ar.

The following defined terms are used throughout this Privacy Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, date of birth, address, email, payment data and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, the 99ar Platform Operator.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "User" or "Player" means any individual who registers an account or accesses the 99ar Platform.
• "KYC" means Know Your Customer — the identity and age verification process required before permitting withdrawals or lifting account restrictions.
• "Cookies" means small data files placed on your device by a website to store session and preference information.
• "Third Party" means any entity other than the User and 99ar that may receive or process personal data in connection with the Platform.

The Data Controller for personal data collected through the 99ar Platform is the Operator of the Platform, as identified in the Platform's licensing disclosure and Terms & Conditions. The Operator is responsible for determining why and how your personal data is processed.

For all data-related enquiries, requests or complaints, please contact us using the details set out in Section 17 (Contact Us) of this Policy.

We collect personal data that is necessary to operate the 99ar Platform, process your transactions, comply with our legal and regulatory obligations, and provide you with a safe and functional gaming experience. The categories of data we collect include:

We do not intentionally collect sensitive personal data (e.g., racial or ethnic origin, political opinions, religious beliefs) beyond what may be incidentally present in identity documents submitted for KYC purposes. Where such data appears in submitted documents, it is processed only to the extent necessary for verification.

We collect personal data through the following channels:

• Direct Submission: Information you provide when creating your account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, via cookies, server logs and similar tracking technologies.
• Third-Party Sources: Identity verification and fraud-prevention service providers, payment processing partners, and publicly available sources where permitted by applicable law.
• Communications: Data contained in your correspondence with our support team, including emails and live chat messages.

We process your personal data for the following purposes:

• Account Management: To create, maintain and administer your 99ar account.
• Identity Verification (KYC): To verify your identity and age in compliance with the Operator's licensing obligations and to prevent underage gambling.
• Transaction Processing: To process deposits, withdrawals and bonus credits, including verification of payment method ownership.
• Legal & Regulatory Compliance: To meet anti-money laundering (AML), counter-terrorist financing (CTF), tax reporting and other legal obligations applicable under the Operator's licensing jurisdiction.
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, money laundering, collusion and other prohibited conduct.
• Responsible Gambling: To monitor gambling behaviour, apply responsible gambling limits requested by you, and identify patterns that may indicate problem gambling.
• Customer Support: To respond to your support requests, resolve disputes and improve our service quality.
• Marketing Communications: To send promotional offers, bonus notifications and relevant platform updates where you have consented to receive such communications.
• Platform Improvement: To analyse usage patterns, diagnose technical issues and improve the Platform's features and performance.

Where applicable data protection law requires a lawful basis for processing, 99ar relies on the following bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing and game provision.
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML and CTF requirements under the Operator's licensing jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, service improvement and responsible gambling monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications and certain non-essential cookies, where you have provided clear, freely given consent. You may withdraw consent at any time.

99ar does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly as necessary for the purposes set out in this Policy:

• Payment Processors: Third-party payment service providers who process your deposits and withdrawals. Where you use payment channels familiar in Pakistan — such as mobile wallet providers or bank transfer services — your data is shared with those providers only to the extent necessary to complete the transaction.
• KYC & Identity Verification Providers: Specialist third-party verification services engaged to authenticate identity documents and conduct AML screening.
• Game Software Providers: Suppliers of casino games, sportsbook technology and live dealer systems who require player session data to deliver gaming services.
• Fraud Prevention Services: Providers of risk-scoring and fraud-detection systems used to identify and prevent prohibited activity on the Platform.
• IT & Infrastructure Providers: Cloud hosting, data storage and cybersecurity service providers who process data as Data Processors under contractual data protection obligations.
• Regulatory Authorities: Government bodies, licensing regulators or law enforcement agencies where disclosure is required by law, court order or regulatory direction.
• Professional Advisers: Legal counsel, auditors and compliance consultants subject to professional confidentiality obligations.

As an internationally operated platform, 99ar may transfer your personal data to countries outside of your jurisdiction of residence, including countries that may not have data protection laws equivalent to those in your home country. Where such transfers occur, we take appropriate safeguards to ensure that your data is protected to a standard consistent with this Policy, including contractual data protection clauses with third-party recipients.

By using the 99ar Platform, you consent to the transfer of your personal data to other jurisdictions as described in this section.

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and the Operator's regulatory obligations. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, or longer where required by AML or licensing regulations.
• Transaction records: Retained for a minimum of five (5) years to comply with financial record-keeping and AML obligations.
• Support communications: Retained for a reasonable period to facilitate dispute resolution and quality assurance, typically three (3) years.
• Marketing consent records: Retained for as long as you have an active account, plus a reasonable period thereafter as evidence of consent.
• Technical and usage logs: Typically retained for up to twelve (12) months for security and fraud analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data governance procedures.

99ar implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• Industry-standard encryption of data in transit (TLS/SSL) and at rest.
• Password hashing using recognised cryptographic algorithms; plaintext passwords are never stored.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security testing, vulnerability assessments and penetration testing of Platform infrastructure.
• Data breach response procedures including notification protocols where required by applicable law.

While we employ robust security measures, no system is completely immune to the risk of security incidents. You are also responsible for maintaining the security of your own account credentials. Please notify us immediately if you suspect any unauthorised access to your account.

The 99ar Platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, analyse usage patterns and, where you have consented, deliver relevant content. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies required for login authentication, security tokens and basket management. These cookies cannot be disabled.
• Functional Cookies: Used to remember your language preferences, display settings and session state across pages.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform — pages visited, session duration, navigation paths. This data is used solely to improve the Platform experience.
• Marketing Cookies: Used to deliver promotional content relevant to your interests and to measure the effectiveness of marketing activities, where you have provided consent.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. For strictly necessary cookies, no opt-out is available as they are required for basic platform operation.

Subject to applicable data protection law in the Operator's jurisdiction, you may have the following rights in relation to your personal data held by 99ar:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where we no longer have a lawful basis to retain it, subject to our legal and regulatory retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your data.
• Right to Object: You may object to processing based on legitimate interests, or to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The 99ar Platform is strictly restricted to adults aged 18 years or older, or the higher minimum age required by the Operator's licensing jurisdiction. We do not knowingly collect personal data from persons under the applicable minimum age.

If we become aware that we have inadvertently collected personal data from an underage individual, we will take immediate steps to delete that data and suspend or close the relevant account. If you believe that a minor has registered on the Platform or provided personal data to us, please contact our support team immediately.

Age verification (KYC) is a mandatory step before withdrawals are permitted. This process also serves as a safeguard against underage access to gambling services.

The 99ar Platform does not include links to external third-party websites as a matter of policy. However, some game providers or payment processors may operate their own interfaces within the Platform environment. 99ar is not responsible for the privacy practices of third-party game studios or payment service providers operating independently. We recommend reviewing the privacy policies of any third-party services you interact with directly.

99ar reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will notify registered Players via email or in-platform notification prior to the changes taking effect. The updated Policy will be published on this page with a revised effective date.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure through our support team.

If you have any questions, concerns or requests regarding this Privacy Policy, or wish to exercise any of your data rights, please contact the 99ar Data Team using the following details:

• Email (plain text — not a clickable link): [email protected]
• Subject Line: Privacy Enquiry / Data Request
• Support Hours: 24 hours a day, 7 days a week
• Languages: English and Urdu

We aim to acknowledge all privacy-related communications within a reasonable timeframe. For complex data subject access requests, we will respond fully within 30 days of receiving a verified request. Response times may be extended in exceptional circumstances, in which case we will notify you promptly.

For responsible gambling support, please visit our dedicated Responsible Gambling page. For the full terms governing your use of the Platform, please review our Terms & Conditions.