ark999 Privacy Policy —
How We Collect, Use, and
Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") explains how ark999 ("ark999", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("you", "your") who access or use the ark999 online gaming platform at https://ark999.app (the "Platform"), including all associated games, payment services, prize pool competitions, promotional features, and customer support channels.

At ark999, we treat data privacy as a core operational responsibility. Our Pakistan-based player community entrusts us with sensitive personal and financial information, and we take that responsibility seriously. This Policy is written in plain English so that you can clearly understand what data we hold about you and how it is used — not buried in impenetrable legal language.

By registering an account on ark999, using the Platform, or communicating with our support team, you acknowledge that you have read and understood this Policy. This Policy should be read alongside the ark999 Terms & Conditions and Responsible Gaming Policy.

---

2 Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data processed in connection with the ark999 Platform is ark999. As the data controller, ark999 determines the purposes and means by which your personal data is processed.

If you have any questions about this Policy or how your data is handled, the primary point of contact is the ark999 data privacy team, reachable via [email protected] or through the Live Chat channel available within the Platform at any hour.

---

3 Personal Data We Collect

ark999 collects personal data through several categories of interaction with the Platform. The following table summarises the categories of data collected and the primary context in which each is gathered:

3.1 Data We Do Not Collect

ark999 does not collect or process any of the following categories of sensitive personal data: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data (other than CNIC photograph for identity verification purposes), or health data (other than self-disclosed problem gambling disclosures made in the context of responsible gaming support).

---

4 How We Use Your Personal Data

ark999 uses the personal data collected from you for the following specific purposes:

• Account Management: To create, maintain, and manage your ark999 account, including processing your registration, verifying your identity through KYC checks, and managing your PKR wallet balance.
• Payment Processing: To facilitate PKR deposits via Easypaisa, JazzCash, and other accepted Pakistan payment methods, and to process withdrawal requests to your verified payment accounts.
• Platform Operation: To deliver the gaming services available on the Platform, including live dealer games, jackpot slots, prize pool competitions, and all other features associated with your ark999 account.
• Legal Compliance: To fulfil ark999's obligations under applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and other applicable legal obligations including responding to lawful requests from regulatory and law enforcement authorities.
• Responsible Gaming: To operate the Platform's responsible gaming features including deposit limit enforcement, self-exclusion management, and age verification checks.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide you with technical assistance relating to your ark999 account or Platform use.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited activities on the Platform.
• Service Improvement: To analyse usage patterns, test new features, troubleshoot technical issues, and improve the performance and user experience of the Platform for Pakistan players.
• Marketing Communications: Where you have given your consent, to send you information about ark999 promotions, prize pool competitions, and platform updates. You may withdraw consent to marketing communications at any time by contacting the support team.

---

5 Legal Basis for Processing

ark999 processes your personal data on the following legal bases:

• Performance of a Contract: Processing necessary to provide you with the Platform services you have registered to use, including account management, payment processing, and game delivery.
• Legal Obligation: Processing necessary to comply with applicable legal requirements including AML obligations, KYC verification, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing for the purposes of platform security, fraud prevention, dispute resolution, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where we have obtained your prior consent. You retain the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

---

6 Sharing Your Personal Data

ark999 does not sell, rent, or commercially trade your personal data. We share personal data only in the following limited circumstances:

6.1 Service Partners

ark999 works with carefully selected third-party service partners who process data on our behalf, including: payment processors facilitating PKR transactions (Easypaisa, JazzCash, and banking partners); certified game providers who deliver the games available on the Platform; identity verification and KYC service providers; customer communication platform providers (Live Chat, Telegram, WhatsApp API integrations); and cloud hosting and infrastructure providers. All service partners are contractually bound to process data only as instructed by ark999 and to maintain appropriate data security standards.

6.2 Legal and Regulatory Authorities

ark999 may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where required by applicable law, a court order, or a formal regulatory request. In such cases, ark999 will disclose only the minimum data required to satisfy the legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ark999's business assets, your personal data may be transferred to the relevant third party as part of that transaction. You will be notified of any such transfer via a notice on the Platform and/or by email to your registered contact details.

---

7 Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the ark999 Platform. They help the Platform remember your session, maintain login state, and understand how the Platform is used.

7.2 Types of Cookies Used by ark999

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cannot be disabled without preventing Platform use.
• Functional Cookies: Store your preferences such as language settings and session time reminder configurations. Disabling these may affect Platform functionality.
• Analytics Cookies: Used to understand how players navigate and use the Platform, helping ark999 identify areas for improvement. These cookies collect data in aggregated, anonymised form.

7.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to view, disable, or delete cookies. Please note that disabling essential cookies will prevent you from logging into and using the ark999 Platform. Disabling analytics cookies will not affect your ability to use the Platform.

---

8 Data Retention

ark999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Active account data: Retained for the duration of your account and for a period of 5 years following account closure, to satisfy AML and KYC record-keeping obligations.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Support communications are retained for 3 years from the date of the most recent interaction, unless retention is required for longer as part of an ongoing dispute or legal proceeding.
• Technical and usage data: Aggregated and anonymised usage analytics are retained indefinitely. Individual-level technical data is retained for 12 months.
• Self-exclusion records: Records of self-exclusion applications are retained indefinitely to prevent future registration by excluded individuals.

Where data is no longer required for any legitimate purpose, it will be securely deleted or anonymised in accordance with ark999's data lifecycle management procedures.

---

9 Data Security

ark999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data in transit between your device and the ark999 Platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including payment data and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within ark999's systems is restricted on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and security training.
• Two-Factor Authentication: 2FA is available for all ark999 user accounts and is strongly recommended. Internal system access by ark999 staff requires 2FA as a mandatory control.
• Monitoring and Incident Response: ark999 maintains continuous security monitoring of Platform systems. In the event of a data security incident that affects your personal data, you will be notified promptly in accordance with applicable legal obligations.
• Third-Party Security Standards: All third-party service partners handling personal data on behalf of ark999 are required to meet equivalent data security standards as a condition of their service agreements.

---

10 Your Data Rights

As an ark999 user, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the ark999 support team in writing. All requests will be acknowledged within 3 business days and substantively responded to within 30 days:

• Right of Access: You have the right to request a copy of the personal data ark999 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Some corrections require documentary evidence (e.g., name changes require updated CNIC).
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that require ark999 to retain certain data for defined periods.
• Right to Restriction: You have the right to request that ark999 restrict processing of your personal data in defined circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on consent or a contract, and is carried out by automated means, you have the right to request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests, where you have grounds related to your particular situation.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

---

11 Children and Minors

The ark999 Platform is strictly for adults aged 18 and over. ark999 does not knowingly collect personal data from individuals under the age of 18. If ark999 discovers that personal data has been collected from a minor, the account will be closed immediately, all deposits will be returned net of any administrative costs, and all personal data associated with the minor's account will be deleted without undue delay.

If you believe that a minor may have registered an ark999 account, please contact the support team immediately at [email protected] or via Live Chat so that the matter can be investigated and resolved promptly.

---

12 International Data Transfers

The ark999 Platform is operated from and primarily serves users in Pakistan. However, some of the third-party service partners used by ark999 — including game providers and cloud infrastructure providers — may process data in jurisdictions outside Pakistan. Where such transfers occur, ark999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy.

Safeguards used for international data transfers include standard contractual clauses, data processing agreements with security and privacy obligations, and transfers only to partners operating in jurisdictions with adequate data protection frameworks.

---

13 Third-Party Links and Services

The ark999 Platform does not contain links to third-party websites unrelated to the Platform. However, where your use of the Platform involves interactions with third-party payment providers — such as Easypaisa and JazzCash — those providers' own privacy policies govern the personal data you provide directly to them in the course of payment transactions. ark999 is not responsible for the privacy practices of third-party payment providers.

---

14 Updates to This Privacy Policy

ark999 may update this Privacy Policy periodically to reflect changes in our data processing activities, legal obligations, or Platform features. When material changes are made to this Policy, we will notify you via the contact details registered on your account or via a prominent notice on the Platform prior to the changes taking effect.

The current version of this Policy, including the effective date, is always available at https://ark999.app/privacy-policy. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the changes.

---

15 Contact Us and Privacy Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or how ark999 handles your personal data, please contact the data privacy team through any of the following channels. All privacy communications should be submitted in English:

• Email: [email protected] — for formal data subject access requests, erasure requests, and written privacy complaints
• Live Chat: Available in the ark999 Platform 24 hours a day, 7 days a week
• Telegram: ark999 English-language support channel — available 24/7
• WhatsApp: English support — available 24 hours a day, 7 days a week

ark999 aims to resolve all privacy-related requests and complaints within 30 days of receipt. Where a complaint cannot be resolved to your satisfaction through the internal process, you retain the right to escalate the matter through appropriate legal channels in your jurisdiction.