Privacy Policy — ary999

This Privacy Policy (the "Policy") is issued by ary999 (the "Platform", "we", "us" or "our") and applies to all users (the "User", "you" or "your") who access or use the ary999 online sports betting and live casino platform accessible at https://ary999.cam.

ary999 is operated by an international operator under a gambling licence issued outside Pakistan. We are committed to protecting the privacy and security of personal data that users share with us when registering an account, completing identity verification, using the platform's features, or contacting our support team.

This Policy explains what personal data we collect, the purposes for which we use it, the legal bases we rely on, your rights in relation to your data, and how you may exercise those rights. Please read this Policy carefully before providing any personal information to us. By accessing or using the ary999 platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, date of birth, identity document details, payment information and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, erasure and destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the ary999 platform, the Data Controller is the operator holding the applicable gambling licence.
• "KYC Data" — identity verification documents and associated materials submitted by a User in connection with the Know Your Customer compliance process, including CNIC, passport, proof of address and selfie/liveness images.
• "Cookies" — small data files placed on a User's device by the platform for purposes including session management, security and usage analytics.
• "Third-Party Service Provider" — any entity that processes personal data on behalf of ary999 in connection with the operation of the platform, including payment processors, identity verification services and fraud prevention providers.

ary999 collects personal data in three principal ways: information you provide directly, information collected automatically through your use of the platform, and information obtained from third parties in connection with compliance obligations.

ary999 processes your personal data on the following legal bases, as applicable:

• Contractual Necessity: Processing required to perform the contract between you and ary999, including account creation, identity verification, processing wagers, managing deposits and withdrawals, and providing customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, fraud prevention, and reporting duties imposed by the operator's licence.
• Legitimate Interests: Processing for ary999's legitimate business interests, including platform security monitoring, fraud detection, abuse prevention, improving user experience and responsible gambling monitoring — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required, and where you have explicitly provided it — for example, for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Personal data collected by ary999 is used for the following purposes:

• Account Management: Creating, maintaining and managing your registered account, processing login authentication, and enabling access to platform features.
• Identity & Age Verification: Confirming that you satisfy the minimum age requirement (18+, or higher as required by the operator's licence jurisdiction) and that your identity matches the information provided at registration.
• Transaction Processing: Recording and processing deposits, withdrawals and betting activity denominated in PKR, and maintaining accurate transaction histories.
• Compliance & AML: Meeting anti-money laundering, counter-terrorism financing and other regulatory obligations imposed by the operator's applicable licence, including screening against relevant sanctions lists.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, account abuse, multi-accounting, bonus manipulation and other prohibited conduct.
• Responsible Gambling: Monitoring betting and gaming activity to identify patterns consistent with problem gambling and, where appropriate, to apply or recommend responsible gambling tools including deposit limits, session timers and self-exclusion.
• Customer Support: Responding to support requests, resolving disputes and maintaining records of communications in connection with account management.
• Platform Improvement: Analysing usage patterns to improve platform performance, user interface design and the range of features available.
• Marketing Communications (where consented): Sending promotional communications, bonus offers and platform updates where you have consented to receive them. You may withdraw consent at any time by contacting support.

ary999 does not sell, rent or commercially trade your personal data to third parties. We may share personal data in the following limited circumstances:

• Third-Party Service Providers: We engage carefully selected service providers who process data on our behalf for specific operational purposes — including identity verification providers, fraud detection services, payment processors and IT infrastructure providers. These providers are bound by contractual obligations to process data only as instructed and to maintain appropriate security standards.
• Regulatory and Legal Authorities: Where required by applicable law, regulation, court order, or at the request of a competent authority, ary999 may disclose personal data to the relevant regulatory body, law enforcement agency or judicial authority.
• Licence Compliance: Personal data may be shared with the relevant gambling licence authority as required for compliance, audit or reporting purposes under the operator's licence conditions.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of the operator's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

Identity verification documents represent some of the most sensitive personal data that ary999 processes. We apply heightened controls to this category of data:

• KYC documents must be submitted exclusively through the platform's official, secure HTTPS verification portal. Never send identity documents by email, SMS, unencrypted chat or any third-party application.
• Access to KYC documents is restricted to authorised compliance personnel and, where required, the relevant regulatory or licence authority.
• KYC data is used solely for the purposes of age verification, identity confirmation, AML compliance and fraud prevention. It is not used for marketing or profiling beyond these purposes.
• Documents are stored with encryption at rest and in transit.
• Never alter, obscure, crop or falsify any document submitted. Submission of fraudulent documents is a serious breach of the Terms & Conditions and may result in immediate account termination and referral to relevant authorities.

ary999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting and reporting requirements.

• Active Accounts: Personal data associated with an active account is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, personal data — including transaction records and KYC documentation — is retained for a minimum period as required by the operator's licence conditions and applicable AML regulations. This period is typically five (5) years from the date of account closure, subject to any extended retention required by law or ongoing compliance investigations.
• Marketing Data: Where you have consented to marketing communications, your contact details are retained until you withdraw consent, or for a reasonable period following the conclusion of the relationship.
• Support Records: Communication records are retained for a period sufficient to address any ongoing disputes and to meet applicable record-keeping obligations.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

ary999 uses cookies and similar tracking technologies to operate the platform effectively and to enhance user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised information about how users interact with the platform — including pages visited, features used and session duration — to help us improve platform performance.
• Functionality Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Security Cookies: Used to detect fraudulent activity, prevent unauthorised access and protect account integrity.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. For further information on managing cookies, consult your browser's help documentation.

ary999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, accidental loss or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the platform (HTTPS across all pages).
• Encryption at rest for sensitive data categories, including KYC documents and financial records.
• Role-based access controls restricting personnel access to personal data on a need-to-know basis.
• Two-factor authentication (2FA) options for user accounts.
• Regular security assessments and monitoring of platform infrastructure.
• Incident response procedures for potential data breaches, including notification obligations in accordance with applicable law.

While we take reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your account credentials and for notifying us promptly if you suspect unauthorised access to your account.

Subject to applicable law and the operator's licence obligations, you may be entitled to exercise the following rights in respect of your personal data:

The ary999 platform is strictly intended for persons who are at least 18 years of age, or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.

Where ary999 becomes aware that personal data has been collected from a person who does not satisfy the minimum age requirement, the relevant account will be suspended immediately, any associated data will be deleted (subject to legal retention obligations relating to the underage access incident), and the matter may be reported to the relevant authority.

If you are a parent or guardian and believe that a minor has created an account or provided personal data to ary999, please contact us immediately at [email protected].

ary999 is operated by an international operator. As a result, your personal data may be transferred to, stored in, or processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where personal data is transferred internationally, ary999 takes appropriate measures to ensure that such transfers are conducted in compliance with applicable data protection requirements. These measures may include contractual safeguards, adequacy assessments or equivalent protective mechanisms appropriate to the applicable regulatory framework.

By using the ary999 platform, you acknowledge that your personal data may be transferred internationally as described in this section.

ary999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or platform operations. Where changes are material, we will provide reasonable notice through the platform, by email to your registered address, or by a prominent notice on the homepage.

The date of the most recent review of this Policy is displayed at the top of this page. We encourage you to review this page periodically so that you remain informed about how we protect your data.

Your continued use of the platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the platform and request account closure by contacting our support team.

If you have any questions, concerns or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights, please contact the ary999 support team. All data-related requests must be submitted in writing to ensure they are properly documented and actioned.

For general platform enquiries and responsible gambling support, please visit our FAQ or Responsible Gambling pages. For the full platform rules, see our Terms & Conditions.