ar789 Privacy Policy

1. Introduction

ar789 ("we", "us", "our", "ar789") operates the online gaming platform accessible at https://ar789.org and all associated subdomains, mobile applications, and related digital services (collectively, the "Platform"). ar789 takes the privacy and security of your personal data extremely seriously, and we are fully committed to handling all personal information entrusted to us with transparency, care, and in compliance with applicable international data protection standards.

This Privacy Policy ("Policy") describes the categories of personal data ar789 collects from players and visitors ("you", "your"), the purposes for which that data is processed, the legal bases for such processing, the parties with whom data may be shared, and the rights available to you with respect to your personal data. This Policy applies to all personal data collected through the ar789 Platform, whether via web browser, mobile application, live chat, email correspondence, or any other communication channel.

By registering an account on ar789, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the ar789 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of this Privacy Policy, ar789 acts as the data controller in respect of all personal data collected from players and visitors of the Platform. As data controller, ar789 determines the purposes for which, and the means by which, your personal data is processed. Where ar789 engages third-party service providers to process data on its behalf, those providers act as data processors and are subject to written data processing agreements that bind them to strict confidentiality and security obligations consistent with this Policy.

All formal data protection enquiries, subject access requests, and complaints regarding ar789's data processing activities should be directed to our support team using the contact details provided in Section 16 of this Policy.

3. Data We Collect

3.1 Registration & Identity Data

When you create an ar789 account, we collect the following personal data:

• Full legal name as it appears on your CNIC, passport, or other official identity document
• Date of birth (used to verify you are at least 21 years of age)
• Residential address in Pakistan (city, province, postal code)
• Email address
• Mobile phone number (Pakistani network)
• Username and encrypted password
• Security question responses (where applicable)

3.2 Identity Verification (KYC) Data

As required under our international gaming licence obligations, ar789 may request the following documentary evidence to verify your identity and comply with anti-money laundering (AML) regulations:

• Scanned or photographed copy of your CNIC, passport, or Pakistani driving licence
• Proof of residential address (recent utility bill, bank statement, or official government letter dated within 90 days)
• Proof of payment method ownership (screenshot of JazzCash wallet, EasyPaisa account, or bank statement showing your name and account number)
• Source of funds declaration where required by our AML procedures

3.3 Financial & Transaction Data

ar789 collects and retains records of all financial transactions conducted on the Platform, including:

• Deposit amounts, dates, times, and payment method references (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20)
• Withdrawal requests, amounts, processing dates, and destination account references
• Bonus credits, wagering activity, and promotional redemption history
• Account balance history and running PKR transaction ledger

3.4 Gaming Activity Data

We maintain detailed records of all gaming activity conducted through your ar789 account, including bet histories, casino game session logs, sports betting selections, win/loss records, and responsible gaming tool usage such as deposit limits, loss limits, and self-exclusion requests.

3.5 Technical & Device Data

When you access the ar789 Platform, we automatically collect the following technical data:

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited, features used, and navigation path within the Platform
• Referral source (how you arrived at ar789.org)

3.6 Communications Data

We retain records of all communications between you and ar789, including live chat transcripts, support email correspondence, and any complaints or feedback submitted to us.

4. How We Collect Data

ar789 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse or use the ar789 Platform.
• From third-party service providers — including identity verification agencies, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), fraud prevention services, and analytics providers who supply supplementary data to enhance the accuracy of our records.
• From publicly available sources — including sanctions screening databases and public records used for AML and fraud prevention purposes.

5. Purposes & Legal Basis for Processing

The table below sets out the key purposes for which ar789 processes your personal data and the corresponding legal basis under applicable international data protection frameworks:

Where ar789 relies on consent as the legal basis for processing — most notably for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing does not affect your ability to continue using the ar789 Platform.

6. Data Sharing

ar789 will never sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 infrastructure providers receive the minimum necessary transaction data required to process your deposits and withdrawals securely.
• Identity Verification Providers: Specialist KYC and AML screening agencies receive identity documents and personal data for the purposes of age verification, sanctions screening, and fraud prevention, as required under our gaming licence obligations.
• Game Software Providers: Licensed casino game studios and sportsbook data feed providers receive anonymised session and bet data necessary to operate their games and markets on the ar789 Platform.
• Regulatory Authorities: ar789 may be required to disclose player data to gaming regulators, financial intelligence units, or law enforcement agencies in response to a lawful regulatory request, court order, or legal obligation. ar789 will seek to notify affected players of such disclosures to the extent permitted by law.
• Professional Advisors: Legal counsel, auditors, and accountants acting under strict professional confidentiality obligations may access limited personal data where necessary to provide their services to ar789.
• Business Transfers: In the event of a merger, acquisition, or sale of ar789's business or assets, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected players will be notified in advance of any such transfer.

7. International Data Transfers

ar789 operates as an internationally licensed gaming platform, and some of our service providers — including cloud hosting infrastructure, KYC verification services, and game studio partners — may be located in countries outside Pakistan. Where personal data is transferred internationally, ar789 ensures that appropriate safeguards are in place to protect your data, including standard contractual clauses approved under internationally recognised data protection frameworks, binding corporate rules, or transfers to countries that have been deemed to provide an adequate level of data protection.

If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact ar789 support via the contact details in Section 16.

8. Data Retention

ar789 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active ar789 account plus a minimum of five (5) years following account closure, as required by international AML regulations.
• Financial transaction records: Retained for a minimum of seven (7) years following the transaction date, in compliance with financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of three (3) years following the last gaming session, or longer where required by our gaming regulator.
• Communications and support records: Retained for a minimum of three (3) years following the closure of the relevant support interaction.
• KYC documents: Retained for a minimum of five (5) years following account closure or the conclusion of any associated investigation.
• Marketing consent records: Retained for the duration of your consent, plus a reasonable period thereafter as evidence of the consent given.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ar789's data destruction procedures. Where data must be retained beyond these periods due to an ongoing regulatory investigation, legal proceedings, or unresolved dispute, retention will be extended until the matter is resolved.

9. Security Measures

ar789 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ar789 Platform.
• Encrypted storage of all sensitive personal data and financial records at rest, using industry-standard encryption algorithms.
• Two-factor authentication (2FA) options available for all ar789 player accounts.
• Strict access controls limiting internal access to personal data on a need-to-know basis, with all staff access logged and auditable.
• Regular penetration testing and independent security audits of the ar789 Platform infrastructure.
• Dedicated fraud monitoring systems that continuously analyse transaction patterns to detect and prevent unauthorised account activity.

Notwithstanding these measures, no internet-based system is completely immune to security risks. ar789 cannot provide an absolute guarantee against all possible data breaches. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ar789 will notify affected players in accordance with applicable notification requirements.

10. Cookies & Tracking Technologies

ar789 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and measure the effectiveness of our marketing. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load balancing cookies. They cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language settings, last visited game categories, and responsible gaming tool configurations to enhance your ar789 experience.
• Analytics Cookies: Collect anonymised data about how players navigate the ar789 Platform, which pages are most visited, and where errors occur, enabling us to improve Platform performance and usability.
• Marketing Cookies: Used to deliver relevant promotional content about ar789 to you on third-party websites, based on your browsing activity. These are only placed with your consent.

You can manage your cookie preferences at any time through your browser settings or via the ar789 cookie consent manager displayed when you first visit the Platform. Please note that disabling certain cookies may affect the functionality of the Platform.

11. Your Data Rights

Subject to applicable law and our legal obligations as a licensed gaming operator, you have the following rights in relation to your personal data held by ar789:

• Right of Access: You may request a copy of all personal data ar789 holds about you (a "Subject Access Request"). ar789 will respond within 30 calendar days of a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly within your ar789 account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to override by our legal and regulatory retention obligations, which may require us to retain certain data for defined periods as described in Section 8.
• Right to Restriction of Processing: You may request that ar789 restrict its processing of your data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that ar789 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. ar789 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights Related to Automated Decision-Making: ar789 does not use fully automated decision-making processes (with no human review) that produce legal or similarly significant effects on players.

12. Minors & Age Policy

The ar789 Platform is strictly intended for adults. No person under the age of 21 years may register an account, make a deposit, or engage in any real-money gaming activity on ar789. We do not knowingly collect personal data from individuals under the age of 21. If ar789 discovers or has reasonable grounds to believe that a registered user is under 21 years of age, we will immediately suspend the account, withhold any associated balance pending investigation, and permanently delete all personal data associated with the underage account as soon as our regulatory reporting obligations permit.

Parents and guardians who believe that a minor has registered on the ar789 Platform are urged to contact our support team immediately via live chat so that the account can be closed and the matter investigated as a priority.

13. Marketing Communications

ar789 may send you promotional communications about our latest bonuses, PSL cricket betting markets, new slot games, and other Platform features. We will only send direct marketing to you where you have given us your explicit consent to do so, or where we are otherwise permitted to do so under applicable law.

You can opt out of receiving marketing communications from ar789 at any time by:

• Clicking the "Unsubscribe" link included in every ar789 marketing email
• Updating your communication preferences in your ar789 account settings
• Contacting ar789 support via live chat or at [email protected]

Please note that opting out of marketing communications does not affect the delivery of transactional messages necessary for your account, such as deposit confirmations, withdrawal notifications, and KYC verification requests.

14. Third-Party Links

The ar789 Platform may contain links to third-party websites or resources. These links are provided for informational purposes only. ar789 has no control over the content, privacy practices, or data handling of any third-party website, and this Privacy Policy does not apply to any third-party website you may visit through links on our Platform. We strongly encourage you to review the privacy policies of any third-party website before providing any personal information.

15. Policy Changes

ar789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where a material change is made to this Policy, ar789 will provide reasonable advance notice to all registered players via email or a prominent on-site notification. The revised Policy will take effect on the date specified in the update notice. Your continued use of the ar789 Platform following that effective date constitutes your acknowledgement and acceptance of the revised Policy.

The most current version of this Privacy Policy is always accessible at https://ar789.org/privacy-policy. We recommend reviewing this page periodically to stay informed of how ar789 protects your data.

16. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or ar789's handling of your personal data, please contact our support team in the first instance:

• Live Chat: Available 24/7 directly on the ar789 Platform (fastest response)
• Email: [email protected]

ar789 commits to acknowledging all formal privacy complaints within 48 hours and providing a substantive written response within 14 calendar days. Where a complaint cannot be resolved to your satisfaction through our internal process, you retain the right to escalate the matter to the data protection authority or gaming regulatory body in the jurisdiction where ar789 holds its primary operating licence.