Privacy Policy — ark999

1. Who We Are

ark999 is an online gaming platform operating at ark999.org under an international gaming licence. References to "ark999", "we", "us", or "our" in this Privacy Policy refer to the operator of the ark999 platform and its authorised data processing affiliates.

For the purposes of this Privacy Policy, ark999 acts as the data controller in respect of the personal data collected from players and visitors through the ark999.org website and all associated gaming products, including cricket betting, live casino, slot games, bingo fishing, and rummy.

If you have any questions about how ark999 processes your personal data, or if you wish to exercise any of your data rights set out in Section 8 of this Policy, you may contact our Data Protection team at the details provided in Section 15.

2. Data We Collect

ark999 collects personal data from you in three primary ways: directly from you during registration and account use; automatically through your interaction with the platform; and from third-party sources as part of our verification and compliance obligations. The categories of personal data we collect are set out below.

2.1 Data You Provide Directly

• Registration Data: Full name, date of birth, gender, residential address (city, province — e.g., Karachi, Lahore, Faisalabad, Islamabad), email address, and mobile number.
• Identity Verification (KYC): A copy of your valid Pakistani CNIC (Computerised National Identity Card), and where required, proof of address documentation.
• Payment Data: Payment method identifiers associated with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard, or USDT wallet addresses used for deposits and withdrawals. Full card numbers and banking passwords are never stored by ark999.
• Communications Data: Records of your correspondence with ark999 support, including support tickets, live chat transcripts, and email exchanges.
• Responsible Gaming Data: Self-exclusion requests, deposit limit preferences, and cooling-off period elections made through your account dashboard.

2.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network information.
• Usage Data: Pages visited on ark999.org, game sessions played, bet history, login timestamps, session duration, and navigation paths through the platform.
• Cookie & Tracking Data: Data collected via cookies and similar technologies as described in Section 6 of this Policy.

2.3 Data from Third Parties

• Identity Verification Providers: Where ark999 uses third-party KYC verification services to validate CNIC documents and confirm player eligibility, we receive confirmation data from those providers.
• Payment Processors: Transaction status and reference information from JazzCash, EasyPaisa, and banking partners to reconcile deposit and withdrawal records.
• Fraud & Risk Screening: Risk signals from fraud prevention partners used to identify potentially fraudulent account activity or multi-accounting behaviour.

3. How We Use Your Data

ark999 uses the personal data we collect for the following purposes. Each purpose is supported by a legal basis as described in Section 4 of this Policy.

ark999 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where profiling is used — for example, in responsible gaming monitoring or fraud detection — it is conducted to protect players and the integrity of the platform, not to make irreversible decisions about individual players without oversight.

4. Legal Basis for Processing

ark999 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are as follows:

• Contract Performance: Processing that is necessary to fulfil our contractual obligations to you as a registered player, including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and our gaming licence conditions, including KYC/AML obligations, age verification, responsible gaming monitoring, and regulatory reporting.
• Legitimate Interests: Processing carried out in the legitimate interests of ark999 or a third party, where those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, and analytics used to improve gaming services for Pakistani players.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

ark999 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard processors, and USDT network operators — solely to process your deposits and withdrawals in PKR.
• KYC & Identity Verification Partners: Accredited third-party providers used to verify the authenticity of CNIC documents and confirm player age eligibility. These providers operate under strict data processing agreements.
• Fraud Prevention & Risk Management Services: Third-party fraud detection platforms that help ark999 identify multi-accounting, payment fraud, and match-fixing activity on the platform.
• Gaming Software Providers: Providers of the live casino studio feeds, slot game engines, and sports data services integrated into ark999. These providers receive only the minimum data necessary to deliver the relevant game service.
• Regulatory & Licensing Authorities: ark999's gaming licence authority and any other competent regulatory body to which we are legally required to report player data, suspicious activity, or compliance records.
• Law Enforcement Agencies: Where required by applicable law or court order, ark999 may disclose player data to law enforcement or government authorities. We will notify the affected player of such disclosure where we are legally permitted to do so.

6. Cookies & Tracking Technologies

ark999 uses cookies and similar tracking technologies on the ark999.org website to ensure the platform functions correctly, to remember your preferences, and to understand how players navigate the site. The categories of cookies we use are described below.

• Strictly Necessary Cookies: Required for the platform to function. These cookies enable login session management, security token verification, and payment page access. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your account preferences, language settings, and game lobby view configurations. These enhance your experience on ark999 but are not essential to core functionality.
• Analytics Cookies: Used by ark999's internal analytics team to understand which game categories — such as cricket betting, slots, or bingo fishing — are most popular among Pakistani players, and to identify usability improvements. Data collected via analytics cookies is aggregated and does not identify individual players by name.
• Marketing Cookies: Used to deliver relevant promotional content to players who have opted in to marketing communications. These cookies help ensure that, for example, a player interested in PSL cricket betting sees cricket-related promotions rather than irrelevant offers.

You may manage your cookie preferences at any time through the cookie settings panel accessible from the footer of the ark999 website. Please note that disabling certain cookie categories may affect the availability of some platform features. Strictly necessary cookies cannot be opted out of as they are essential to platform operation.

7. Data Retention

ark999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our gaming licence conditions and applicable law. The following retention guidelines apply:

• Active Account Data: Personal data associated with an active ark999 account is retained for the duration of the account's activity and for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC & Identity Documents: CNIC copies and related verification documents are retained for a minimum of 5 years from the date of verification, or longer if required by the applicable regulatory authority.
• Transaction Records: Deposit and withdrawal records, including PKR amounts and payment method references, are retained for a minimum of 5 years from the date of the transaction.
• Support Communications: Customer support tickets and live chat transcripts are retained for 2 years from the date of the most recent communication in the relevant thread.
• Marketing Data: Contact data used for promotional communications is retained until you withdraw your consent or request deletion, after which it is removed from active marketing lists within 30 days.
• Cookie & Analytics Data: Session-level analytics data is aggregated and anonymised within 90 days of collection. Raw session data is not retained beyond this period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ark999's data disposal procedures. Anonymised data (which can no longer be linked to an individual) may be retained indefinitely for statistical and platform improvement purposes.

8. Your Data Rights

As a player on the ark999 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ark999's Data Protection team at the details provided in Section 15. ark999 will respond to all valid data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data ark999 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly through your ark999 account settings.
• Right to Erasure: You may request that ark999 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that this right is subject to our legal retention obligations — we cannot delete data that we are legally required to retain.
• Right to Restriction: In certain circumstances — for example, where you contest the accuracy of data or object to its processing — you may request that ark999 restrict further processing of your data while the matter is resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive a copy of your personal data in a structured, machine-readable format, or to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where ark999 relies on legitimate interests as the legal basis, including profiling for responsible gaming monitoring. ark999 will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce significant legal or similarly significant effects on you. ark999 does not make such decisions without human review.

9. Children & Minors

The ark999 platform is strictly intended for individuals aged 21 years and above. ark999 does not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is conducted during account registration and at the KYC verification stage prior to withdrawal processing.

If ark999 becomes aware that personal data has been collected from an individual who does not meet the 21+ age requirement, that account will be permanently suspended and all associated personal data will be deleted in accordance with our data disposal procedures. Any deposits made by an underage individual will be returned to the payment source.

10. Data Security

ark999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your device and ark999's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all platform interactions, including login, deposit, withdrawal, and game play sessions.
• At-Rest Encryption: Personal data stored in ark999's databases — including CNIC documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within ark999's internal systems is strictly role-based and limited to personnel who require access to perform their specific job functions. All internal data access is logged and audited.
• Two-Factor Authentication: ark999's internal systems require multi-factor authentication for all staff accessing player data. We also offer and recommend OTP-based 2FA for player accounts.
• Penetration Testing: ark999 conducts regular third-party penetration testing of its platform infrastructure to identify and remediate security vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to the rights and freedoms of affected players, ark999 will notify the relevant regulatory authority within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

Despite these measures, no online platform can guarantee absolute security. Players are encouraged to maintain strong, unique passwords for their ark999 accounts and to enable two-factor authentication to provide an additional layer of personal account protection.

11. International Data Transfers

ark999 operates under an international gaming licence and, as a result, some of the personal data we collect may be transferred to and processed in countries outside of Pakistan. Such transfers may occur in connection with our use of gaming software providers, KYC verification services, fraud prevention platforms, and cloud infrastructure providers.

Where personal data is transferred internationally, ark999 ensures that appropriate safeguards are in place to protect the data in accordance with applicable data protection standards. These safeguards may include:

• Binding contractual clauses (standard data protection clauses) included in agreements with recipient organisations.
• Transfers to organisations in jurisdictions that provide an adequate level of data protection as recognised by the relevant regulatory authority.
• Supplementary technical measures — such as end-to-end encryption — where the receiving jurisdiction's protections are assessed as insufficient on their own.

Players who wish to obtain further information about the specific safeguards applicable to international transfers of their personal data may submit a request to ark999's Data Protection team at the contact details provided in Section 15.

12. Marketing Communications

With your consent, ark999 may send you promotional communications by email or SMS. These may include notifications about new game launches, cricket betting promotions during PSL season, slot tournament announcements, and deposit bonus offers tailored for Pakistani players.

ark999 will only send marketing communications to players who have opted in to receive them. You may withdraw your marketing consent at any time by:

• Updating your communication preferences in the Notifications section of your ark999 account dashboard.
• Clicking the "Unsubscribe" link included in any marketing email sent by ark999.
• Contacting ark999 support at [email protected] with the subject line "Unsubscribe" and your registered account username.

Opting out of marketing communications does not affect your receipt of transactional and service messages such as deposit confirmations, withdrawal processing updates, security alerts, and account verification requests. These communications are essential to the operation of your account and cannot be opted out of while your account remains active.

13. Third-Party Links

The ark999.org website may contain references to third-party services — such as payment method providers including JazzCash and EasyPaisa — for informational purposes. ark999 is not responsible for the privacy practices of any third-party platform, and this Privacy Policy applies solely to data collected and processed by ark999 through the ark999.org platform and its associated gaming services.

Players who access third-party payment platforms, banking apps, or other external services in connection with their ark999 account should review the applicable privacy policies of those platforms independently. ark999 does not control and is not responsible for the content, privacy practices, or data security of any third-party platform.

14. Changes to This Policy

ark999 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice by posting a prominent notification on the ark999 platform and, where appropriate, by sending an email notification to registered players' email addresses on file.

Non-material changes — such as clarifications of existing language, corrections of typographical errors, or updates to reflect new contact details — may take effect immediately upon posting. The "Effective Date" displayed at the top of this Policy will be updated to reflect the date of the most recent revision.

Your continued use of the ark999 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how ark999 protects your personal data.

15. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ark999 processes your personal data, please contact our Data Protection team using the details below. We aim to respond to all privacy-related enquiries within 10 business days.

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: Within 10 business days for general enquiries; within 30 days for formal data rights requests

If you are not satisfied with ark999's response to your privacy enquiry or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority or regulatory body in the jurisdiction applicable to your circumstances. ark999 is committed to cooperating fully with any such investigation.