Your Privacy Matters to ary99 — Here Is Exactly How We Handle Your Data

1 Introduction

ary99 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the ary99 website at ary99.net. This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information we receive from players across Pakistan — including major cities such as Karachi, Lahore, Islamabad, Faisalabad, and Peshawar.

This policy applies to all personal data processed in connection with your use of the ary99 platform, including account registration, deposits and withdrawals, gameplay activity, bonus participation, and any communications between you and the ary99 support team. By creating an ary99 account and using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

This Privacy Policy should be read alongside the ary99 Terms & Conditions and the Responsible Gaming policy, both of which form part of the overall agreement between you and ary99.

2 Personal Data We Collect

ary99 collects personal data from players at various points during their relationship with the platform. The categories of data we collect — and the circumstances in which they are collected — are set out below.

Where ary99 is required by law or regulatory obligation to collect specific categories of personal data and you decline to provide it, we may be unable to open or maintain your account or process certain transactions.

3 How We Use Your Personal Data

ary99 uses the personal data it collects for specific, clearly defined purposes. We do not use your data in ways that you would not reasonably expect given the nature of an online gaming platform. The primary purposes for which we process your personal data are as follows:

• Account Administration: To create, verify, manage, and maintain your ary99 player account, including processing identity verification and ensuring the one-account-per-player rule is upheld.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all account activity.
• Regulatory Compliance: To fulfil obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations, including age verification to enforce the 21+ restriction.
• Platform Personalisation: To tailor your ary99 experience, including displaying relevant game recommendations, customising bonus offers, and presenting content appropriate to your preferences and gaming history.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, multiple account creation, bonus abuse, and other prohibited conduct as described in the ary99 Terms & Conditions.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and maintain records of communications for quality assurance purposes.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated usage data and player behaviour patterns — in anonymised form — to improve the features, performance, and overall quality of the ary99 platform.

4 Legal Basis for Processing Your Data

Every instance of personal data processing at ary99 rests on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and ary99 — for example, processing a withdrawal to your Meezan Bank account or verifying your identity as part of account setup.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, regulatory reporting requirements, and age verification mandates.
• Legitimate Interests: Processing carried out in the legitimate interests of ary99 or a third party, where those interests are not overridden by your fundamental rights. This includes fraud detection, platform security, and internal analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Third-Party Disclosure

ary99 does not sell, rent, or otherwise commercially disclose your personal data to third parties. Data is shared only in the limited circumstances described below, and always subject to appropriate contractual protections and data security requirements.

• Payment Service Providers: Financial data necessary to process your PKR transactions is shared with our authorised payment partners — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — strictly for the purpose of executing deposits and withdrawals.
• Identity Verification Providers: To comply with KYC and age verification requirements, ary99 may share identity documentation and biographic data with regulated third-party identity verification services.
• Regulatory Authorities: ary99 may be legally obliged to disclose personal data to governmental bodies, law enforcement agencies, financial intelligence units, or gaming regulators where required by law or valid legal process.
• Anti-Fraud & AML Partners: Anonymised or pseudonymised transaction and behavioural data may be shared with specialist fraud detection and anti-money laundering service providers to help identify and prevent financial crime.
• Technology & Infrastructure Providers: Third-party vendors who provide hosting, cloud storage, analytics, or platform technology services to ary99 may process data on our behalf under strict data processing agreements that prohibit independent use of that data.
• Business Transfers: In the unlikely event that ary99 undergoes a merger, acquisition, or asset sale, personal data held on the platform may be transferred as part of that transaction. Players will be notified of any such transfer and of any changes to applicable privacy terms.

6 Payment Data & PKR Transaction Security

All financial transactions on ary99 are denominated in Pakistani Rupees (PKR) and processed through trusted local payment channels. The security of your financial data is a priority for ary99, and the following measures are in place to protect it:

• Full card and account number data is never stored on the ary99 platform. Where payment details must be retained — for example, to process a withdrawal to the same method used for a deposit — only tokenised or partially masked references are held.
• All communication between your device and our payment processing infrastructure is encrypted using SSL/TLS technology.
• ary99 will never ask you to provide your full JazzCash PIN, EasyPaisa password, or internet banking credentials through any channel, including live chat, email, or phone.
• Unusual transaction patterns — including large deposits from new accounts or rapid sequences of deposits and withdrawals — are automatically flagged for manual review as part of our AML monitoring programme.

Players are reminded that they are solely responsible for the security of their own payment accounts and mobile banking apps. ary99 is not liable for losses resulting from unauthorised access to your payment provider accounts that are not attributable to any failure on ary99's part.

7 Cookies & Tracking Technologies

ary99 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small data file placed on your device when you visit a website. Cookies allow ary99 to recognise your device on return visits, maintain your session, and understand how the platform is being used.

The types of cookies used on ary99 include:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in during a visit and security cookies that help protect against cross-site request forgery. These cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, display options, and preferred payment method — so that you do not need to reconfigure them on every visit.
• Analytics Cookies: Used to collect anonymised data about how players navigate the platform — which pages are visited, how long sessions last, and where users typically exit. This data helps ary99 identify usability issues and improve the overall player experience.
• Marketing Cookies: Used only where you have consented to receive personalised promotional content. These cookies help ary99 track which promotions you have been shown and assess their relevance to your gaming preferences.

You may manage your cookie preferences through your browser settings. Please be aware that disabling certain categories of cookies may affect the functionality of the ary99 platform. Strictly necessary cookies cannot be disabled through browser settings alone without affecting your ability to use the site.

8 Data Security

ary99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and ary99 servers
• Encryption of sensitive data at rest, including identity documents and financial records
• Access controls restricting personal data access to authorised ary99 personnel on a need-to-know basis
• Regular security assessments, vulnerability testing, and infrastructure audits
• Incident response procedures to detect, report, and remediate any personal data breach in a timely manner
• Staff training on data protection obligations and information security best practices

While ary99 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ary99 will notify affected players in accordance with applicable legal requirements without undue delay.

9 Data Retention

ary99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active ary99 account is retained for the duration of the account relationship and for a defined period thereafter to meet regulatory obligations.
• Transaction Records: Financial records — including deposit and withdrawal history — are retained for a minimum of five years following the date of the transaction, in line with standard AML record-keeping requirements.
• Identity Verification Documents: KYC documentation is retained for a minimum of five years following account closure or the conclusion of the business relationship.
• Support Communications: Records of live chat and email communications with the ary99 support team are typically retained for up to two years for quality assurance and dispute resolution purposes.
• Inactive Account Data: Accounts that have been inactive for 12 or more consecutive months may be subject to data minimisation processes, with non-essential personal data deleted or anonymised, subject to any overriding legal retention obligations.

Upon account closure — whether requested by you or initiated by ary99 — personal data will be retained for the minimum period required by law and then securely deleted or irreversibly anonymised.

10 Your Data Rights

As an ary99 player, you have the following rights with respect to your personal data. These rights can be exercised at any time by contacting the ary99 support team via live chat or email:

• Right of Access: You have the right to request a copy of the personal data that ary99 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data held by ary99 is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. This right is subject to ary99's legal and regulatory retention obligations.
• Right to Restrict Processing: You have the right to request that ary99 limit the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on ary99's legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

ary99 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by up to a further 60 days, with notice provided to the requesting party. ary99 will not charge a fee for exercising any of the above rights in standard circumstances.

11 Children & Minors

The ary99 platform is strictly intended for adults aged 21 years and above. ary99 does not knowingly collect personal data from individuals under the age of 21, and any registration attempt identified as coming from a minor will be refused and the associated data deleted immediately.

If you believe that a minor has accessed the ary99 platform or provided personal data without appropriate parental consent, please contact the ary99 support team immediately so that the situation can be investigated and the relevant data removed without delay.

Parents and guardians are strongly encouraged to make use of parental control software and internet filtering tools to prevent minors from accessing online gaming platforms. ary99's Responsible Gaming page provides additional guidance on protecting younger individuals from exposure to gambling content.

12 Third-Party Links & Integrations

The ary99 platform may, from time to time, reference or integrate with third-party services — such as payment gateways — that have their own privacy policies and data handling practices. ary99 is not responsible for the privacy practices of these third parties, and this Privacy Policy does not extend to any website, service, or application that is not directly operated by ary99.

We encourage you to review the privacy policies of any third-party service you use in connection with your ary99 account — particularly your payment provider — to understand how they handle your personal data independently of ary99's own practices.

13 Updates to This Privacy Policy

ary99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services offered on the platform. When material changes are made, we will notify registered players via email or via a prominent notice displayed on the ary99 platform prior to the changes taking effect.

The date of the most recent update is displayed at the top of this page. We recommend reviewing this policy periodically to stay informed about how ary99 protects your personal data. Continued use of the ary99 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

14 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ary99 handles your personal data, please reach out to our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Live Chat: Available 24 hours a day, 7 days a week via the ary99 platform — the fastest way to reach us
• Email (plain text — not a link): [email protected]

When contacting us about a data rights request or a privacy concern, please provide your registered ary99 username and a clear description of the matter. This will allow us to locate your account and handle your request as efficiently as possible. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.