Privacy Policy

ar888 ("ar888", "we", "us", "our") is committed to protecting the privacy and personal data of all users of the ar888 online gaming platform, accessible at ar888.cam (the "Platform", the "Service"). This Privacy Policy ("Policy") sets out in clear, structured terms how we collect, use, store, share and safeguard your personal information in connection with your use of the Platform.

This Policy applies to all registered users of the Platform, as well as visitors who access the Site without completing registration. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

By registering an Account with ar888 or otherwise accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings below:

• "Personal Data"Any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial data or location data.
• "Processing"Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure or destruction.
• "Data Controller"The entity that determines the purposes and means of processing Personal Data — in this context, ar888.
• "Data Processor"A third party that processes Personal Data on behalf of ar888 in accordance with ar888's instructions.
• "User" / "You"Any registered account holder, visitor or other individual whose Personal Data is processed by ar888 in connection with the Platform.
• "KYC"Know Your Customer — identity verification procedures including document checks, used for regulatory compliance purposes.
• "Cookies"Small text files stored on your device by the Platform's web server for session management, security and analytics purposes.
• "Sensitive Personal Data"Categories of data warranting heightened protection, including government-issued identity document numbers (e.g., CNIC), financial account details and biometric data where applicable.

ar888 collects only the Personal Data that is necessary for the specified purposes described in this Policy. The categories of data we collect are set out in the table below:

ar888 does not knowingly collect Sensitive Personal Data beyond what is strictly required for KYC/AML compliance. We do not process biometric or health data.

4.1 — Data You Provide Directly

Personal Data you actively submit to ar888, including information provided during account registration, KYC document upload, payment transactions, support interactions and any feedback or correspondence you initiate with ar888.

4.2 — Automatically Collected Data

When you access the Platform, ar888's servers automatically log certain Technical Data and Usage Data. This includes your IP address, device identifiers, browser type and version, pages accessed, time and duration of visits, and referring URL. This data is collected via server logs, cookies and similar tracking technologies.

4.3 — Third-Party Sources

ar888 may receive data about you from third-party identity verification providers (used for KYC checks), fraud-prevention services and payment processors where this is necessary to perform account verification or transaction processing. Data received from these sources is used only for the stated purpose and retained only as long as required.

ar888 processes Personal Data on the following legal bases, consistent with applicable data protection frameworks:

• Contractual necessity: Processing required to enter into or perform the contract with you — including account creation, transaction processing and customer support.
• Legal obligation: Processing required to comply with KYC/AML regulatory requirements and other applicable legal obligations imposed on ar888 by its operator license conditions.
• Legitimate interests: Processing necessary for ar888's legitimate business purposes — including fraud prevention, platform security, responsible gambling monitoring and service improvement — where these interests are not overridden by your rights.
• Consent: Where processing is based on your consent (for example, sending promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

ar888 processes your Personal Data for the following purposes:

• Account management: Creating and maintaining your Account, authenticating your identity at login and processing account settings changes;
• Transaction processing: Processing deposits, withdrawals and bonus credits, generating transaction records and maintaining balance accuracy in PKR;
• KYC/AML compliance: Verifying your identity before processing withdrawal requests, detecting and preventing fraud, money laundering and other financial crime;
• Responsible gambling: Monitoring usage patterns to identify behaviour consistent with problem gambling and applying account-level controls in accordance with our Responsible Gambling Policy;
• Customer support: Responding to enquiries, resolving complaints, and maintaining a record of support interactions;
• Platform security: Detecting and preventing unauthorized access, suspicious activity and system abuse;
• Service improvement: Analyzing usage data to improve platform performance, game offerings and user interface design;
• Marketing communications: Sending promotional offers, bonus notifications and platform updates where you have consented or where a legitimate interest applies — with clear opt-out options in every message.

7.1  ar888 does not sell, rent or trade your Personal Data to third parties for their own marketing or commercial purposes.

7.2  ar888 may share your Personal Data with the following categories of third parties, strictly on a need-to-know basis and only for the purposes specified:

• Identity verification providers: Third-party KYC service providers who assist with document verification, identity checks and fraud screening;
• Payment processors: Service providers who facilitate deposit and withdrawal transactions. Data shared is limited to what is required to complete the transaction;
• IT and hosting providers: Cloud hosting, database and infrastructure providers who process data on ar888's behalf under contractual data-processing agreements;
• Regulatory and law enforcement bodies: Where required by applicable law, court order or regulatory obligation — including anti-money laundering reporting requirements;
• Professional advisers: Legal counsel, accountants and auditors where necessary for legitimate business and compliance purposes, under obligations of confidentiality.

7.3  Payment service names mentioned on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced as familiar Pakistani context only. No data-sharing arrangement exists with these providers in connection with this Platform unless you initiate a transaction through an operator's cashier that uses their services, in which case that provider's own privacy policy governs their data handling.

8.1  ar888 may transfer your Personal Data to servers, service providers or processors located in countries other than your country of residence. Where such transfers occur, ar888 takes reasonable steps to ensure that appropriate safeguards are in place to protect your data, including entering into data-processing agreements with third-party processors.

8.2  By using the Platform and consenting to this Privacy Policy, you acknowledge and agree that your Personal Data may be transferred to and processed in countries outside Pakistan, including countries whose data protection laws may differ from those in Pakistan.

9.1  ar888 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

9.2  As a general principle, account data is retained for the duration of your account relationship plus a post-closure retention period as required by KYC/AML regulations (typically a minimum of five years following account closure, in line with standard anti-money laundering retention requirements in most licensing jurisdictions).

9.3  Technical and usage data collected via server logs may be retained for shorter periods for security and analytics purposes, typically between three and twelve months, unless retention is required for an ongoing investigation or dispute.

9.4  Where Personal Data is no longer required for any lawful purpose, ar888 will securely delete or anonymize it.

10.1  ar888 uses cookies and similar browser-based storage technologies on the Platform for the following purposes:

• Session cookies: Maintain your authenticated login session while you navigate the Platform. Deleted when your browser session ends;
• Security cookies: Help identify and prevent fraudulent access attempts and CSRF attacks;
• Preference cookies: Remember your display preferences and settings (such as language or display currency) between visits;
• Analytics cookies: Collect aggregated, anonymized data about how users interact with the Platform to inform performance improvements.

10.2  Cookies placed by ar888 do not contain your password, payment card numbers, government ID data or any Sensitive Personal Data.

10.3  You may disable cookies through your browser settings. However, disabling essential session or security cookies may prevent you from accessing certain Platform features or from remaining authenticated during your session.

11.1  ar888 implements technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration or disclosure. These measures include:

• HTTPS/TLS encryption for all data in transit between your device and Platform servers;
• Encryption of Sensitive Personal Data at rest within our database infrastructure;
• Access controls that limit staff access to Personal Data on a strict need-to-know basis;
• Account authentication controls including password hashing and optional two-factor authentication (2FA);
• Regular review of security configurations and third-party processor security standards.

11.2  While ar888 applies these measures diligently, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials and notifying support immediately upon detecting any unauthorized access to your Account.

11.3  ar888 does not display fabricated security certifications, fake regulatory logos or unsupported "100% secure" claims. Security measures described in this section are genuine technical and organizational controls.

Subject to applicable law, you have the following rights in relation to your Personal Data held by ar888. To exercise any of these rights, please contact us through the support channel described in Clause 16.

ar888 will endeavor to respond to all valid rights requests within 30 days. Some requests may be declined where fulfilling them would conflict with legal retention obligations, regulatory requirements or the rights of others. ar888 will explain the basis for any such refusal.

13.1  The Platform is strictly for adults. ar888 does not knowingly collect Personal Data from individuals under 18 years of age (or the higher minimum age required by the operator's license jurisdiction). Age verification is conducted during registration and through KYC processes.

13.2  If ar888 becomes aware that Personal Data has been collected from a minor, that data will be deleted and the associated Account will be closed immediately, with any balances handled in accordance with applicable law and operator policy.

13.3  If you believe a minor has created an Account on the Platform, please contact support immediately using the contact details in Clause 16.

14.1  ar888 is an English-language platform built for users across Pakistan — including cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. Pakistani users should be aware of the following:

• Pakistan does not currently have a comprehensive general data protection law equivalent to frameworks such as the EU GDPR. ar888 does not claim compliance with any specific Pakistani data legislation but processes data in accordance with the principles described in this Policy.
• Online gambling is restricted in Pakistan under domestic law. The collection and processing of your data by ar888 in connection with gaming activities does not imply legal authorization or government endorsement of such activities in Pakistan.
• References to payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are made as familiar contextual references for Pakistani users only. ar888 has no data-sharing arrangement with these services in connection with the Platform unless explicitly confirmed through an active cashier integration.
• Pakistani users are encouraged to review their rights under applicable local laws and to seek independent legal advice if they have concerns about data privacy in the context of online gaming.

15.1  ar888 reserves the right to update or amend this Privacy Policy at any time. The "Effective Date" at the top of this document will be updated to reflect the date of the most recent revision.

15.2  Where changes are material — for example, if we introduce a new category of data processing or a new data-sharing relationship — ar888 will endeavor to notify registered users via a Platform notification or to their registered email address before the changes take effect.

15.3  Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should close your Account and discontinue use of the Platform.

16.1  If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by ar888, please contact us through the following channel:

16.2  For responsible gambling concerns or self-exclusion requests, please visit the dedicated Responsible Gambling page, which includes specific contact options and support resources.