ar888 Privacy Policy

This Privacy Policy ("Policy") is issued by ar888, the operator of the online gaming and sports betting platform accessible at https://ar888.ws ("Platform"). This Policy describes how ar888 collects, uses, stores, discloses, and protects the personal data of individuals who visit the Platform, register an account, or otherwise interact with ar888's services.

By registering an account on the ar888 Platform, or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy should be read alongside the ar888 Terms & Conditions, which are available at /terms-conditions. In the event of any conflict between this Policy and the Terms & Conditions in relation to data protection matters, this Policy shall take precedence.

ar888 acts as the data controller in respect of personal data collected through the Platform. All references to "we", "us", "our", or "ar888" in this Policy refer to the ar888 platform operator in its capacity as data controller.

ar888 collects personal data across several categories depending on how you interact with the Platform. The categories of personal data we may collect include:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth, for the purpose of verifying that you meet the minimum age requirement of 21 years.
• CNIC (Computerised National Identity Card) number, passport number, or driving licence number where provided for KYC verification purposes.
• Photographs of identity documents submitted during the KYC verification process.

2.2 Contact Data

• Email address used to register and communicate with ar888.
• Mobile telephone number, used for account verification, two-factor authentication, and support communications.
• Residential address, including city, postal code, and province of residence within Pakistan.

2.3 Financial Data

• Payment method details, including JazzCash account references, EasyPaisa mobile wallet identifiers, HBL, UBL, Allied Bank, Meezan Bank, or SadaPay account information, as applicable.
• USDT TRC20 wallet addresses where cryptocurrency deposits are made.
• Transaction records, including deposit amounts, withdrawal requests, and associated timestamps.
• Source of funds documentation where requested as part of enhanced due diligence.

2.4 Technical Data

• IP address and approximate geographic location at the time of each login and transaction.
• Device type, operating system, browser type and version.
• Session duration, pages visited, and navigation patterns on the Platform.
• Cookies and similar tracking technologies as described in Section 9 of this Policy.

2.5 Gaming Activity Data

• Bet histories across cricket betting, live casino, slot games, All-Star Fishing, and Mermaid Fishing.
• Bonus and promotion participation records.
• Responsible gaming tool settings, including deposit limits, session time alerts, and self-exclusion status.
• Customer support communications, including chat transcripts and email correspondence.

ar888 collects personal data through the following means:

• Direct Submission: Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawal requests, participating in promotions, contacting customer support, or responding to surveys.
• Automated Collection: Technical data collected automatically as you interact with the Platform, including through server logs, cookies, pixel tags, and similar technologies. This collection occurs from the moment you first visit the ar888 website.
• Third-Party Sources: Data received from identity verification service providers, payment processors (such as JazzCash and EasyPaisa), fraud detection agencies, and publicly available sources where necessary to complete KYC obligations or to investigate suspected fraudulent activity.
• Game Interaction: Data generated by your gameplay on the ar888 Platform, including bet placement, game selections, and outcomes — this data is generated as a natural consequence of using the gaming services.

ar888 does not collect personal data from individuals who have not visited the Platform or registered an account, except where data is received from third-party verification providers as part of an active KYC process initiated by a player.

ar888 uses your personal data for the following purposes:

ar888 does not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing another lawful basis for such processing.

ar888 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between ar888 and you as a registered player — including account creation, payment processing, and provision of gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, KYC verification mandates under ar888's gaming licence, and court orders or regulatory directives.
• Legitimate Interests: Processing necessary for ar888's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided such interests are not overridden by your privacy rights.
• Consent: Where ar888 relies on your consent as the legal basis for processing — in particular for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Where processing is based on legitimate interests, ar888 has assessed those interests against your privacy rights and is satisfied that such processing is proportionate and appropriate in the context of the ar888 Platform.

ar888 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Identity Verification Providers: Third-party KYC and age verification services that process identity documents and verify player eligibility on behalf of ar888.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and cryptocurrency processing partners, to facilitate deposits and withdrawals. Each processor handles data under their own privacy policies and applicable financial regulations.
• Fraud Prevention & Risk Services: Specialised agencies that assist ar888 in detecting and preventing fraudulent account activity, collusion, bonus abuse, and money laundering.
• Game Content Providers: Third-party game studios whose titles are available on the ar888 Platform. These providers may receive limited technical data (such as session tokens and game outcome records) necessary to operate their games.
• Customer Support Tools: Third-party helpdesk and live chat software providers used to manage and respond to player support queries. Access is limited to support staff with a need to resolve the relevant query.
• Regulatory & Law Enforcement Authorities: Government bodies, gaming regulatory authorities, financial intelligence units, law enforcement agencies, and courts, where ar888 is required or permitted by law to make such disclosures.
• Professional Advisers: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations, where disclosure is necessary for the conduct of ar888's business.

ar888 operates as an internationally licensed online gaming platform. In the course of providing the Platform services, your personal data may be transferred to, stored in, and processed in countries outside Pakistan. These may include jurisdictions where ar888's servers, third-party service providers, or group entities are located.

Where personal data is transferred internationally, ar888 takes steps to ensure that appropriate safeguards are in place to protect your data, including:

• Entering into contractual data protection agreements with receiving parties that incorporate obligations equivalent in effect to internationally recognised data protection standards.
• Transferring data only to jurisdictions or organisations that ar888 has assessed as providing an adequate level of data protection relative to the nature of the data being transferred.
• Applying technical and organisational security measures as described in Section 12 of this Policy to protect data in transit and at rest.

By using the ar888 Platform, you acknowledge and consent to the transfer of your personal data to international locations as described in this section. If you have concerns about international transfers of your data, you may contact the ar888 data protection team at [email protected].

ar888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data & KYC Records: Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering regulatory requirements applicable under ar888's gaming licence.
• Transaction Records: Financial transaction data, including deposit and withdrawal history, is retained for a minimum of five (5) years from the date of each transaction.
• Gaming Activity Records: Bet histories and game session logs are retained for a minimum of three (3) years, or longer where required by our licensing obligations or where an active dispute remains unresolved.
• Marketing Consent Records: Records of your marketing consent (or opt-out) are retained for as long as you hold an ar888 account and for a period of two (2) years after account closure, to demonstrate compliance with consent obligations.
• Support Communications: Customer support records are retained for three (3) years from the date of the final communication in a support thread, unless linked to an open regulatory matter or dispute.
• Technical & Log Data: Server logs and technical access data are retained for a maximum of twelve (12) months, after which they are anonymised or deleted.

Where retention is based solely on a contractual relationship with you, data will be deleted or anonymised within a reasonable period following account closure, subject to overriding legal retention obligations.

ar888 uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage objects) on the Platform. These technologies serve the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state, security tokens, and load-balancing cookies. These cannot be disabled without preventing core Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated data about how visitors use the Platform — including pages visited, time on site, and navigation paths — to help ar888 improve the Platform experience. This data is processed in anonymised or pseudonymised form.
• Functional Cookies: Enable the Platform to remember your preferences, such as display settings and language selection, to provide a more personalised experience.
• Targeting & Advertising Cookies: Where you have provided consent, these cookies track your interaction with ar888 promotional content to deliver relevant offers and measure the effectiveness of ar888's marketing activity.

ar888 does not use cookies to collect personal data about individuals who have not registered an ar888 account, beyond what is strictly necessary for security and analytics purposes.

Subject to applicable law and the terms of ar888's licensing obligations, registered players and Platform visitors hold the following rights in relation to their personal data:

• Right of Access: You may request a copy of the personal data ar888 holds about you. ar888 will respond to verified access requests within 30 days.
• Right to Rectification: If the personal data ar888 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. You may also update certain information directly through your ar888 account settings.
• Right to Erasure: In certain circumstances, you may request that ar888 delete your personal data. This right is subject to overriding legal retention obligations — for example, ar888 cannot delete KYC or transaction records that must be retained to comply with anti-money laundering regulations.
• Right to Restrict Processing: You may request that ar888 restrict the processing of your personal data in circumstances where, for example, you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that ar888 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of ar888's legitimate interests, including profiling for responsible gaming monitoring. ar888 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — in particular for marketing communications — you may withdraw that consent at any time by contacting support.

To exercise any of these rights, please submit a written request to the ar888 data protection team at [email protected], including your full name, registered account username, and a clear description of the right you wish to exercise. ar888 may require you to verify your identity before processing a data rights request.

The ar888 Platform is strictly intended for adults aged 21 and above. ar888 does not knowingly collect personal data from individuals under the age of 21. The Platform employs automated age verification tools as part of the registration process, and manual KYC review procedures to identify and prevent underage access.

If ar888 becomes aware that personal data has been collected from an individual under the age of 21, the following steps will be taken immediately:

• The account will be suspended and permanently closed.
• Any deposits made by the underage individual will be returned to the originating payment method, net of any amounts that cannot be recovered.
• No winnings generated during the underage period will be paid out.
• All personal data associated with the underage account will be deleted, subject only to any minimum retention obligations imposed by applicable law.

If you believe that a minor has registered or is using an ar888 account, please notify us immediately at [email protected]. ar888 treats such reports with the utmost urgency and will investigate all reports promptly.

ar888 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All communications between your device and the ar888 Platform are encrypted using TLS (Transport Layer Security) with a minimum of 256-bit AES encryption.
• Encryption at Rest: Personal data and financial records stored on ar888 systems are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to ar888 personnel and approved third-party contractors on a strict need-to-know basis. All access is logged and subject to regular audit.
• Two-Factor Authentication: ar888 offers two-factor authentication for player accounts and enforces multi-factor authentication for all internal staff accessing player data systems.
• Regular Security Assessments: ar888 conducts periodic vulnerability assessments, penetration testing, and security audits of its Platform and data infrastructure.
• Incident Response: ar888 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ar888 will notify affected individuals and relevant authorities as required by applicable law within the applicable reporting timeframe.

The ar888 Platform integrates with various third-party services to deliver a complete gaming experience. These include game content providers, payment gateways, and customer support tools. While ar888 takes reasonable steps to ensure that third-party partners maintain appropriate data protection standards, ar888 is not responsible for the privacy practices of independent third-party operators.

Third-party game studios whose titles are available on ar888 process certain technical and gameplay data under their own privacy policies. Players are encouraged to review the privacy policies of game providers where available if they have concerns about how gameplay data is handled beyond the ar888 Platform.

Payment service providers including JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, and SadaPay each operate their own privacy and data handling frameworks as regulated financial institutions under Pakistani law. Your use of these payment services is governed by the respective provider's terms, in addition to this ar888 Privacy Policy.

The ar888 Platform does not contain links to external third-party websites beyond what is necessary for the provision of payment services. ar888 is not responsible for the data practices of any external websites.

ar888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. All changes will be published on this page with an updated effective date.

Where changes are material — meaning they significantly affect your rights or the way we process your personal data — ar888 will make reasonable efforts to notify registered players via the email address held on their account, or through a prominent notice on the Platform, prior to the changes taking effect.

Your continued use of the ar888 Platform after any amended Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the Platform and may request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ar888 processes your personal data, please contact the ar888 data protection team using the following details:

• Email: [email protected] (plain text only — not a clickable link)
• Subject Line: Please include "Privacy Policy Query" or "Data Rights Request" in your subject line for fastest routing.
• Response Time: ar888 aims to respond to all privacy-related enquiries within 5 business days, and to formal data rights requests within 30 calendar days.
• Language: English

When submitting a data rights request, please include your full name, registered account username, and a clear description of the right you wish to exercise or the concern you wish to raise. This will help ar888 process your request as efficiently as possible.