ar999 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how ar999 ("ar999", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "the Player") who register an account on, access, or use the ar999 online gaming platform at ar999.io ("the Platform"). ar999 operates an online casino and sports betting service for adult players in Bangladesh.

We are committed to handling your personal data with transparency, integrity, and care. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the ar999 Platform. By creating an ar999 account or using the Platform in any way, you acknowledge that you have read and understood this Privacy Policy.

This Policy applies in conjunction with the ar999 Terms & Conditions and the Responsible Gaming Policy, both of which are available on ar999.io. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

2. Data Controller

ar999 acts as the data controller in respect of the personal data collected from players who use the Platform. This means ar999 determines the purposes for which your personal data is processed and the manner in which it is processed. All data-related enquiries, access requests, and complaints should be directed to the ar999 support team via live chat at ar999.io, or by email at the address displayed in the footer of this page.

3. Personal Data We Collect

ar999 collects the following categories of personal data from players:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address including city, district, and postcode
• Email address and mobile phone number
• Copies of identity documents submitted during KYC verification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence)

3.2 Financial Data

• Mobile wallet account identifiers (bKash, Nagad, Rocket, Upay numbers) used for deposits and withdrawals
• Bank account or card details where applicable (Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank)
• Transaction history including deposits, withdrawals, and bonus credits
• Account balance and wagering history on the Platform

3.3 Technical and Usage Data

• IP address and approximate geolocation at the time of account login and each transaction
• Device type, operating system, and browser type and version
• Session duration, pages visited on ar999.io, and clickstream data
• Game session logs including games played, stakes wagered, and outcomes
• Login timestamps and account activity records

3.4 Communications Data

• Records of your communications with the ar999 support team via live chat or email
• Your marketing preferences and communication opt-in or opt-out records
• Feedback and survey responses where voluntarily provided

4. How We Collect Your Data

ar999 collects personal data through the following channels:

• Direct submission: Data you provide when you register your ar999 account, complete KYC verification, make a deposit or withdrawal, or contact our support team.
• Automated collection: Technical data collected automatically when you access and use the Platform, including via cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data provided by our KYC and fraud prevention service partners, and payment confirmation data from payment processors such as bKash, Nagad, and Rocket.

5. How We Use Your Personal Data

ar999 uses your personal data for the following purposes:

6. Legal Basis for Processing

ar999 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to register and manage your account, process payments, and deliver the services you have requested from ar999.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering checks, and responsible gaming obligations.
• Legitimate interests: Processing necessary for ar999's legitimate business interests, including fraud prevention, Platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential analytics cookies, where you have given your explicit prior consent. You may withdraw consent at any time.

7. Sharing Your Personal Data

ar999 does not sell, rent, or trade your personal data to unaffiliated third parties. ar999 may share your data with the following categories of trusted service partners, and only to the extent necessary for the specific purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank — to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who assist in verifying your identity and age in accordance with ar999's compliance obligations.
• Fraud prevention services: Third-party anti-fraud and risk management providers who help ar999 detect and prevent fraudulent activity on the Platform.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive limited technical data (such as session tokens) necessary to deliver their games within the ar999 Platform environment.
• IT and hosting providers: Infrastructure and data hosting partners who store and process Platform data on ar999's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where ar999 is required by law, court order, or regulatory requirement to disclose personal data, we will comply with such obligations.

All third-party partners with whom ar999 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than that for which it was shared.

8. Data Retention

ar999 retains your personal data for as long as your account is active and for a period thereafter as required by our legal and compliance obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years after account closure, to comply with anti-money laundering and fraud prevention obligations.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction in accordance with financial record-keeping requirements.
• Support communications: Retained for three (3) years from the date of the communication, or longer where required in connection with an unresolved dispute.
• Marketing preference records: Retained for as long as your account is active, and for one (1) year following account closure or withdrawal of consent.

When personal data is no longer required for its original purpose and no legal retention obligation applies, ar999 will securely delete or anonymise it.

9. Cookies and Similar Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. ar999 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, maintain your session, and improve your experience as a Bangladesh player on ar999.io.

9.2 Types of Cookies We Use

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the ar999 Platform. Essential cookies cannot be disabled as they are required for the Platform to operate correctly.

10. Your Data Rights

As a player on the ar999 Platform, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data ar999 holds about you at any time.
• Right to rectification: You may request that ar999 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ar999's legal retention obligations.
• Right to restrict processing: You may request that ar999 limit the processing of your personal data in certain circumstances, for example while a data accuracy dispute is resolved.
• Right to data portability: You may request that ar999 provide your personal data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where ar999's processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing carried out on the basis of ar999's legitimate interests where you believe your rights and freedoms override those interests.

To exercise any of these rights, please contact the ar999 support team via live chat at ar999.io. ar999 will respond to all data rights requests within thirty (30) calendar days. In some cases, ar999 may need to verify your identity before processing a request.

11. Data Security

ar999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL encryption for all data transmitted between your device and the ar999 Platform
• Encrypted storage of sensitive personal and financial data on secured servers
• Access controls that limit employee access to personal data to those with a legitimate business need
• Regular security audits and penetration testing of the Platform infrastructure
• Two-factor authentication (2FA) available to all players for additional account protection
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach

While ar999 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ar999 account credentials and for ensuring that your own devices and network connections are secure.

12. Minors and Age Restriction

The ar999 Platform is strictly restricted to individuals aged 21 and above. ar999 does not knowingly collect personal data from persons under the age of 21. If ar999 discovers that personal data has been collected from a person under 21, that account will be closed immediately and all personal data associated with it will be deleted promptly. If you believe that a minor has created an ar999 account, please notify us immediately via the support team. ar999 encourages all players to use parental control tools to prevent minors from accessing online gaming platforms.

13. International Data Transfers

ar999 primarily stores and processes player data on servers located within the regions in which our infrastructure partners operate. In certain circumstances, personal data may be transferred to, or accessed by, parties in countries outside of Bangladesh — for example, where ar999 uses a cloud infrastructure provider or game content partner whose systems are hosted in another country. Where such transfers occur, ar999 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses with the relevant service partners.

14. Changes to This Privacy Policy

ar999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ar999 will notify registered players by email or via a prominent notice on the Platform prior to the changes taking effect. The effective date of the current version of this Policy is stated at the top of this page. Your continued use of the ar999 Platform after notification of changes constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how ar999 protects your personal data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or ar999's handling of your personal data, please contact the ar999 support team via live chat at ar999.io — available 24 hours a day, 7 days a week, in English. Our support team is trained to assist Bangladesh players with all privacy and data-related enquiries. You may also write to us by email at the address shown in the footer of this page.