y99999 Privacy Policy

1 Introduction

y99999 ("we", "us", "our") operates the online casino and sports betting platform accessible at y99999.pro (the "Platform"). This Privacy Policy governs the collection, use, storage, and disclosure of personal data relating to individuals who register for, access, or interact with the Platform ("you", "Player").

By creating a y99999 account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data in the manner described herein. If you do not agree with any part of this Privacy Policy, you should not use the Platform and should contact us to request account closure.

y99999 takes its data protection obligations seriously and is committed to processing personal data in a fair, transparent, and lawful manner. This policy is written in plain English so that Pakistani players — from Karachi to Lahore, Islamabad to Faisalabad — can clearly understand their rights and our obligations.

2 Data We Collect

y99999 collects personal data from Players through several channels: directly from you when you register or use the Platform, automatically through your use of the Platform, and in limited circumstances from third-party verification and payment providers. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

When you create a y99999 account, we collect your full legal name, date of birth, residential address, Pakistani CNIC or passport number (for KYC verification), email address, and mobile phone number. This data is mandatory — without it, we cannot create or maintain a verified account for you.

2.2 Financial and Payment Data

To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, we collect details of the payment method used, including mobile wallet numbers and bank account reference information where applicable. y99999 does not store full bank account numbers or card numbers on our servers — payment transactions are processed through encrypted, PCI-DSS compliant payment gateways.

2.3 KYC Verification Documents

As part of our Know Your Customer (KYC) obligations, we collect copies of government-issued photographic identification documents, proof of address documentation, and where required, source-of-funds evidence. These documents are stored securely and used exclusively for identity verification and regulatory compliance purposes.

2.4 Transaction and Gaming Data

We maintain records of all deposits, withdrawals, bonus credits, wagers placed (including cricket betting markets, Dragon and Tiger, Fortune Bingo, slots, and live casino), game outcomes, and account balance history. This data is essential for account management, dispute resolution, and regulatory compliance.

2.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, session timestamps, pages visited, and referral URLs. This data is used for security monitoring, fraud prevention, and Platform optimisation.

3 How We Use Your Data

y99999 uses personal data only for the specific, legitimate purposes described in this section. We do not use your data for purposes that are incompatible with the original reason for collection without first obtaining your consent or establishing a separate legal basis.

3.1 Account Management

Your registration and identity data is used to create and maintain your y99999 account, authenticate your login sessions, process your PKR deposits and withdrawals, and communicate important account-related information to you — such as security alerts, withdrawal confirmations, and bonus credits.

3.2 KYC and Regulatory Compliance

We process identity and KYC documentation data to comply with our obligations under applicable anti-money laundering (AML) regulations and Know Your Customer (KYC) standards. This processing is mandatory and cannot be opted out of — without it, we are unable to process withdrawals or maintain your account in good standing.

3.3 Fraud Prevention and Security

Technical and device data, combined with gaming and transaction records, is used by y99999's automated fraud detection systems to identify suspicious activity, prevent unauthorised access to accounts, detect bonus abuse, and flag potential money laundering activity. This processing is essential to the integrity of the Platform and the security of all Players' accounts.

3.4 Responsible Gaming

y99999 uses your gaming and transaction data to monitor for behavioural indicators associated with problem gambling — such as rapidly escalating deposit volumes, long uninterrupted sessions, and unusual betting patterns. This data is used to trigger responsible gaming interventions, including reality check notifications, cooling-off prompts, and where appropriate, proactive outreach from our responsible gaming team. This use of your data reflects y99999's genuine commitment to player welfare and is not used for commercial profiling.

3.5 Customer Support

Communications data generated through live chat, support tickets, and any other contact with the y99999 support team is used to resolve your query, maintain a record of interactions for quality assurance purposes, and improve the overall level of support provided to y99999 Players.

3.6 Marketing Communications

Where you have explicitly opted in to receive promotional communications from y99999, we may use your contact data to send you information about new games, promotions, PSL cricket betting specials, and loyalty programme updates. You may withdraw your marketing consent at any time by updating your communication preferences in Account Settings or by contacting our support team.

4 Legal Basis for Processing

y99999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual Necessity: Processing that is required to perform the contract between you and y99999 — including creating and managing your account, processing deposits and withdrawals, and providing access to games and betting markets.
• Legal Obligation: Processing that is required for y99999 to comply with applicable legal and regulatory obligations, including AML regulations and KYC requirements.
• Legitimate Interests: Processing carried out in pursuit of y99999's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, informed, and unambiguous consent — such as the sending of marketing communications. You may withdraw consent at any time without detriment to your account.

5 Data Sharing and Disclosure

y99999 does not sell, rent, or trade your personal data to any third party. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose of the disclosure.

5.1 Payment Processors

To process PKR transactions, y99999 shares relevant financial and identity data with our payment processing partners — including JazzCash, EasyPaisa, and the banking partners facilitating HBL, UBL, and Meezan Bank transfers. Each payment processor operates under its own privacy policy and processes data only as necessary to complete the relevant transaction.

5.2 KYC and Identity Verification Providers

y99999 may use third-party identity verification service providers to assist in the KYC verification process. These providers receive only the minimum data necessary to perform identity checks and are contractually bound to process data solely for this purpose.

5.3 Regulatory and Law Enforcement Authorities

y99999 will disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or where y99999 reasonably believes disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. Such disclosures are made without prior notice to the affected Player where legally permissible.

5.4 Group Companies and Service Providers

y99999 may share personal data with affiliated group companies and carefully selected service providers (such as cloud hosting providers, cybersecurity vendors, and customer support platform operators) who process data on our behalf under written data processing agreements that bind them to process the data only as instructed by y99999.

6 Cookies and Tracking Technologies

y99999 uses cookies and similar tracking technologies on the Platform to enable core functionality, enhance your user experience, and support our security and analytics operations. The following categories of cookies are in use:

You may manage your cookie preferences through your browser settings. However, disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your y99999 account. y99999 does not use third-party advertising cookies or behavioural targeting cookies.

7 Data Retention

y99999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active y99999 account and for a minimum of five (5) years following permanent account closure, in order to satisfy AML and KYC record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory authority.
• Transaction and Gaming Records: Retained for a minimum of five (5) years following the date of the transaction or gaming activity, for regulatory compliance and dispute resolution purposes.
• Support Communications: Retained for up to three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical and Device Data: Retained for up to twelve (12) months from collection, unless retained for a longer period in connection with a specific fraud investigation or security incident.
• Marketing Consent Records: Retained for as long as your account remains active and for up to three (3) years following account closure, for the purpose of demonstrating consent compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with y99999's internal data lifecycle management procedures. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained for analytical purposes indefinitely.

8 Your Data Rights

As a y99999 Player, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact our support team via in-platform live chat or at the email address shown in Section 12.

9 Data Security

y99999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the y99999 Platform is encrypted using industry-standard TLS protocols. This applies to all pages of the Platform, including login, registration, cashier, and game interfaces.
• Encrypted Data Storage: Sensitive personal data — including identity documents and financial records — is stored in encrypted form on secure servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within y99999's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and mandatory data protection training.
• Two-Factor Authentication (2FA): y99999 supports and strongly encourages the use of 2FA on all Player accounts. Our internal administrative systems require 2FA for all staff access.
• Continuous Monitoring: y99999 operates 24/7 security monitoring of the Platform, including intrusion detection systems, anomaly detection, and real-time alerts for unusual access patterns.
• Regular Security Audits: The Platform undergoes regular penetration testing and independent security audits to identify and remediate vulnerabilities before they can be exploited.

In the event of a personal data breach that poses a risk to your rights and freedoms, y99999 will notify you promptly in accordance with applicable data breach notification obligations. Notification will be made via the email address registered to your y99999 account.

10 Children and Minors

Age verification is a mandatory step in the y99999 registration and KYC process. Any account found — through verification checks, parental complaint, or other means — to belong to a person under the age of 21 will be immediately and permanently closed. Any balance or winnings in such an account will be handled in accordance with our regulatory obligations and returned to the original payment source where practicable.

If you are a parent or guardian and believe that a person under 21 in your care has created a y99999 account, please contact our support team immediately via in-platform live chat. y99999 takes underage access extremely seriously and will investigate and act on all such reports without delay.

y99999 also recommends that parents and guardians in Pakistan use parental control software to restrict access to online gambling platforms on devices shared with or accessible to minors.

11 Changes to This Privacy Policy

y99999 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, Platform features, or internal data processing practices. Where a proposed change is material — meaning it significantly affects your rights or the way we process your personal data — y99999 will provide advance notice via the email address registered to your account prior to the change taking effect.

The "Last Updated" date at the top of this page reflects the date on which the most recent version of the Privacy Policy was published. Your continued use of the y99999 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept a material change to this Privacy Policy, you may close your account in accordance with the Account Closure process described in the y99999 Terms & Conditions.

Previous versions of this Privacy Policy are available upon request by contacting our support team. y99999 maintains an internal archive of all prior policy versions for regulatory compliance purposes.

12 Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way y99999 processes your personal data, please contact our support team using the following channels:

• In-Platform Live Chat: Available 24/7 from within your y99999 account dashboard. This is the fastest way to reach us for account-specific data queries.
• Email: [email protected] — for formal written data rights requests, please include "Data Rights Request" in the subject line along with your registered account email address and full name.

y99999 is committed to addressing all privacy-related enquiries promptly and transparently. We aim to acknowledge all written data enquiries within 2 business days and provide a substantive response within the timeframes specified in Section 8 of this Privacy Policy.