ar999 Privacy Policy
ar999 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold as a data subject under applicable privacy law.
Your privacy matters to us. This Privacy Policy applies to all players who access ar999 through any device, browser, or mobile interface. By creating an ar999 account or using any service on ar999.im, you confirm that you have read and understood this policy and consent to the collection and processing of your personal data as described herein.
Information We Collect
ar999 collects personal data to provide a safe, reliable, and personalised gaming experience to players across Bangladesh and other eligible jurisdictions. We collect information in three primary ways: directly from you when you register or interact with the platform, automatically through your use of our website, and from verified third-party sources where applicable.
Registration and Account Data: When you open an ar999 account, we collect your full legal name, date of birth, residential address, Bangladeshi mobile number, email address, and the payment method details (such as your bKash, Nagad, or Rocket mobile wallet number) you register for deposits and withdrawals.
Identity Verification (KYC) Data: As part of our mandatory Know Your Customer process, we may collect copies of government-issued identification (national ID card, passport, or driving licence), utility bills or bank statements confirming your address, and proof of payment method ownership. This data is required before any withdrawal is processed and is handled with the highest level of security.
Transaction Data: Every deposit, withdrawal, bonus claim, bet placement, and game round played on ar999 generates a transaction record. We retain these records as part of our financial audit trail, fraud prevention infrastructure, and regulatory compliance obligations.
Technical and Device Data: We automatically collect certain technical data when you access ar999, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data helps us optimise the platform for Bangladeshi users, detect suspicious login activity, and enforce our one-account-per-person policy.
Behavioural and Usage Data: We record which games you play, how long you spend on the platform, which promotions you view, and your general navigation patterns. This data is used in aggregate to improve the ar999 platform and in individual form to power our responsible gaming monitoring system, which can flag unusual patterns that may indicate problem gambling behaviour.
Identity Data
Name, date of birth, address, NID or passport — collected at registration and verified during KYC before your first withdrawal.
Payment Data
bKash, Nagad, Rocket, and Upay wallet numbers linked to your account for deposit and withdrawal processing. Always matched to your registered name.
Behavioural Data
Game history, session duration, betting patterns, and promotional interactions — used for platform improvement and responsible gaming monitoring.
Technical Data
IP address, device type, browser, and OS — collected automatically to secure your account and optimise platform performance across devices.
Communications Data
Records of any support queries, live chat transcripts, emails, or complaint submissions you send to the ar999 support team at [email protected].
Transaction Data
Full audit trail of all deposits, withdrawals, bonus claims, and game-round outcomes — retained for financial compliance and dispute resolution.
How We Use Your Data
ar999 processes your personal data only for the purposes described below. We do not sell your personal data to third-party marketing organisations. We do not use your data for purposes that are incompatible with the reason it was originally collected.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Identity, contact, payment data | Contract performance |
| Payment processing | Payment method, transaction data | Contract performance |
| Identity verification (KYC) | Identity documents, address proof | Legal obligation |
| Fraud prevention & security | Technical, behavioural, transaction data | Legitimate interest |
| Responsible gaming monitoring | Behavioural, session, transaction data | Legal obligation / legitimate interest |
| Customer support | Communications, account, transaction data | Contract performance |
| Promotional communications | Contact data, gameplay preferences | Consent (opt-in) |
| Platform analytics & improvement | Behavioural, technical data (aggregated) | Legitimate interest |
Promotional communications: ar999 may send you emails or SMS notifications about bonuses, seasonal promotions (such as Eid specials, BPL season offers, or Pohela Boishakh promotions), and platform updates. These communications are sent only where you have opted in during registration or subsequently through your account settings. You may withdraw your consent to marketing communications at any time by contacting our support team at [email protected] or by updating your notification preferences within your ar999 account.
Automated decision-making: ar999 uses automated systems to detect multi-accounting, identify fraudulent transaction patterns, and flag potential responsible gaming concerns. Where an automated decision may significantly affect your account (such as a temporary suspension pending review), you have the right to request human review of that decision by contacting our support team.
Data Sharing & Third Parties
We do not sell your data. ar999 does not sell, rent, or trade your personal data to third-party marketing companies or data brokers under any circumstances. Data sharing with third parties is strictly limited to the operational and compliance purposes described in this section.
ar999 operates with the support of carefully selected third-party service providers. We share your personal data with these parties only to the extent necessary to deliver our services, maintain platform security, and meet our compliance obligations. All third-party data processors are contractually bound to handle your data securely and to process it only for the purposes specified by ar999.
Payment Service Providers
ar999 shares necessary transaction data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank in order to complete your deposits and withdrawals. These providers operate under their own privacy policies and are regulated by Bangladesh Bank. ar999 does not store your full mobile banking PIN or banking password.
Game Software Providers
Live casino and slot games on ar999 are provided by third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming. These providers receive a session token and anonymised player identifier to facilitate game loading and results delivery. They do not receive your full name, address, or payment details.
Identity Verification Partners
ar999 may use third-party KYC and identity verification services to validate documents you submit during the verification process. These partners process your identity data under strict data processing agreements and do not retain your documents beyond the period required for verification.
Analytics Providers
ar999 uses aggregated, anonymised analytics tools to understand how players navigate the platform, identify performance issues, and optimise the user experience. No individually identifiable data is passed to analytics providers for marketing profiling purposes.
Regulatory & Law Enforcement Authorities
ar999 may be required by applicable law or a valid legal process to disclose certain personal data to financial intelligence units, law enforcement agencies, or other regulatory bodies. We will not disclose more information than is legally required, and where permitted by law, we will notify affected users of such disclosures.
ar999 does not transfer your personal data to countries with inadequate data protection standards without first implementing appropriate safeguards, such as standard contractual clauses or equivalent protections. All data transfers are conducted in accordance with applicable international data protection frameworks.
Cookies & Tracking Technologies
ar999 uses cookies and similar tracking technologies to operate the platform, maintain your session state, personalise your experience, and monitor platform performance. A cookie is a small text file placed on your device when you visit ar999.im. Cookies do not contain executable code and cannot be used to access other data on your device.
ar999 uses the following categories of cookies:
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session management, login state, security tokens | Session | No — required for platform function |
| Functional | Language preference, game settings, last-visited page | 30 days | Yes — some features may be limited |
| Performance / Analytics | Page load times, navigation paths, error logging (anonymised) | 90 days | Yes — no impact on core functionality |
| Security / Fraud Prevention | Device fingerprinting, multi-account detection, suspicious activity signals | 12 months | No — required for account security |
You can manage or delete cookies through your browser settings at any time. Most modern browsers (Chrome, Firefox, Samsung Internet, Opera Mini) provide granular cookie management options. Please note that disabling strictly necessary or security cookies may prevent you from logging in to your ar999 account or accessing certain platform features.
ar999 does not use third-party advertising cookies or behavioural retargeting pixels that track you across external websites. Our cookies operate solely within the ar999.im domain.
Data Retention & Storage
ar999 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law, financial regulation, and our legitimate business interests in fraud prevention and dispute resolution.
The following retention periods apply to the principal categories of data held by ar999:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation, fraud prevention |
| KYC / identity documents | Duration of account + 5 years after closure | Legal obligation (AML compliance) |
| Transaction records | 7 years from transaction date | Financial regulation, tax compliance |
| Game-round history | 3 years from the date of play | Dispute resolution, responsible gaming |
| Support communications | 3 years from last communication | Dispute resolution, service improvement |
| Technical / device logs | 12 months from collection | Security monitoring, fraud detection |
| Marketing consent records | Until consent is withdrawn + 2 years | Proof of consent, legal compliance |
When the applicable retention period expires, ar999 will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual. Where full deletion is not immediately technically feasible (for example, due to backup rotation cycles), the data will be isolated from active processing until it can be securely destroyed.
ar999 stores data on servers located in secure, access-controlled data centre facilities. All data at rest is encrypted using industry-standard AES-256 encryption. All data in transit between your browser and ar999 servers is protected using TLS 1.2 or higher.
Your Privacy Rights
As a player on the ar999 platform, you hold a set of rights with respect to your personal data. ar999 is committed to honouring these rights in a timely manner. To exercise any of the rights listed below, please contact our data privacy team at [email protected] with the subject line "Privacy Rights Request" and include your registered account username and email address for verification purposes.
ar999 will respond to all valid rights requests within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Right of Access
Request a copy of all personal data ar999 holds about you in a portable, readable format.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your ar999 account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that ar999 restrict the processing of your data in certain circumstances, such as while the accuracy of data is being contested.
Right to Object
Object to ar999 processing your data for direct marketing purposes or on the basis of legitimate interests.
Right to Data Portability
Receive your account data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service.
Automated Decision Review
Request human review of any automated decision — such as an account restriction — that significantly affects you.
Right to Withdraw Consent
Withdraw your consent to marketing communications at any time without affecting the lawfulness of prior processing.
Important note on erasure requests: ar999 may be unable to delete certain categories of data — particularly KYC documents and transaction records — where retention is mandated by applicable anti-money laundering (AML) legislation or financial regulation. In such cases, we will inform you of which data cannot be deleted and the legal basis for retaining it.
Data Security Measures
ar999 implements a comprehensive, layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures are reviewed and updated regularly to keep pace with evolving cybersecurity threats.
TLS Encryption in Transit
All data transmitted between your browser or mobile device and ar999 servers is encrypted using TLS 1.2 or TLS 1.3. The padlock icon in your browser confirms an active, secure connection at all times.
AES-256 Encryption at Rest
All personal data stored on ar999 servers — including KYC documents, payment details, and account records — is encrypted at rest using AES-256, the same standard used by global financial institutions.
Two-Factor Authentication
ar999 accounts are protected by OTP-based two-factor authentication sent to your registered Bangladeshi mobile number on every login. This ensures that a stolen password alone is insufficient to access your account.
Fraud Detection Systems
ar999 operates 24/7 automated fraud detection across all account activity, transaction processing, and login events. Anomalous patterns trigger immediate alerts and, where necessary, temporary account holds pending review.
Access Controls
Internal access to player data is restricted on a strict need-to-know basis. All ar999 staff with data access undergo background screening and are bound by confidentiality agreements. Access is logged and audited regularly.
Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, ar999 will notify affected players within 72 hours of becoming aware of the breach, as required by our security protocols.
While ar999 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your own account — keep your password confidential, never share your OTP with anyone (ar999 support staff will never ask for your OTP), and log out of shared devices after each session.
Policy Updates & Contact
ar999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make a material change to this policy, we will update the "Last updated" date at the top of this page and, where the change significantly affects your rights, notify you via the email address registered to your ar999 account.
We encourage you to review this Privacy Policy periodically to stay informed about how ar999 protects your personal data. Continued use of the ar999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.
Children's Privacy: ar999 is strictly an 18+ platform and does not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has registered on ar999, please contact us immediately at [email protected] so we can investigate and close the account without delay.
Contact our Data Privacy Team: For any questions, concerns, or rights requests relating to this Privacy Policy or the personal data ar999 holds about you, please contact us at:
- Email: [email protected] (subject line: "Privacy Rights Request")
- Response time: Within 30 days of a verified request
- Platform: ar999.im — operating in Bangladesh Standard Time (BST, UTC+6)
ar999 takes all privacy complaints seriously. If you submit a privacy concern and are not satisfied with our response, you retain the right to escalate the matter through appropriate legal channels available in your jurisdiction.
Governing version: This English-language version of the ar999 Privacy Policy is the authoritative governing document. In the event of any conflict or ambiguity between this document and any translated or summarised version, this English text shall prevail.
Continue Exploring ar999
Now that you understand how ar999 protects your data, explore our full range of games and betting markets — all secured with SSL encryption and fair-play certified for Bangladesh players.