y999 Privacy Policy — How We Protect Your Data

This Privacy Policy applies to y999 — available at y999.cx — and covers all services on the platform including Casino, Sports Betting, Live Casino, Fish Games, the Game Lobby and the y999 mobile App. When you register an account, make a PKR deposit or simply browse the website, you are sharing information with us. This policy tells you exactly what we collect and what we do with it.

y999 is committed to handling your personal information responsibly. We collect only what is necessary for operating the platform, processing transactions in PKR and keeping your account secure. We do not sell personal data to third parties for marketing purposes, and we do not share your information beyond what is described in this policy.

By using y999, you acknowledge that you have read and understood this Privacy Policy. If you have questions about anything covered here, you can reach our support team at the contact details provided in Section 12.

y999 collects personal data through three main channels: information you provide directly, information generated by your use of the platform and technical data collected automatically when you access the site or app.

We do not collect sensitive categories of personal data such as health information, religious beliefs or political views. The only exception would be where you voluntarily disclose such information — for example, if you mention a health-related reason when requesting self-exclusion under our Responsible Gaming options.

y999 uses your personal data only for legitimate purposes directly related to operating the platform and providing you with a secure, reliable experience. We do not use your data for purposes beyond those listed below:

• Account management — creating and maintaining your y999 account, verifying your identity and managing your PKR wallet.
• Transaction processing — handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast and Bank Transfer, and resolving payment queries.
• Fraud prevention and security — detecting and preventing unauthorised access, bonus abuse, money laundering and other prohibited activities.
• Platform improvement — analysing how players use Cricket betting, Casino, Fish Games and other features to improve performance and content.
• Customer support — responding to your queries, resolving disputes and maintaining records of support interactions.
• Responsible Gaming — monitoring activity patterns to identify players who may need support tools such as deposit limits or self-exclusion.
• Legal and compliance obligations — maintaining records required for financial compliance and responding to lawful requests from relevant authorities.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. If a decision such as account restriction is triggered by automated monitoring, it is reviewed by a member of the y999 team before any permanent action is taken.

All financial transactions on y999 are processed in PKR. When you deposit or withdraw using JazzCash, Easypaisa, Raast or Bank Transfer, we collect the payment reference details necessary to complete the transaction and verify the source of funds.

Payment data is handled with additional care beyond standard personal data:

• We store only the minimum payment details needed to process transactions and meet anti-money laundering verification requirements.
• Full bank account numbers or mobile wallet credentials are never stored in plain text on our systems.
• Payment data is used solely to process your deposits and withdrawals, verify identity and investigate any disputed transactions.
• We do not share your payment details with third parties for any purpose other than completing the transaction through the relevant payment provider (e.g., JazzCash or Easypaisa network processors).
• Withdrawals are always returned to the same payment method used for the deposit, which is both a security measure and a standard anti-fraud practice.

y999 does not sell, rent or trade your personal data. We share it only where it is strictly necessary to operate the platform, as described below:

• Payment processors — JazzCash, Easypaisa, Raast and banking partners receive only the data required to complete PKR transactions.
• Game providers — third-party Casino, Slot and Fish Game providers may receive a player session token and stake data to run game sessions. They do not receive your identity or payment details.
• Identity verification services — where required for KYC verification, your identity documents may be processed by a trusted verification partner under strict data processing agreements.
• Fraud and security tools — specialist anti-fraud platforms may process technical data such as IP address and device fingerprint to detect suspicious activity.
• Legal obligations — y999 may disclose personal data to competent authorities where required by applicable law or in response to a lawful order.

All third parties who receive personal data from y999 are required to handle it securely, use it only for the permitted purpose and not share it further. We do not transfer personal data to any third party located outside of necessary operational partners without appropriate safeguards in place.

y999 uses cookies and similar tracking technologies on the website and in the mobile App to ensure core functionality, maintain your session and improve the overall experience. Cookies are small text files stored on your device when you access the platform.

Most browsers allow you to control cookies through their settings. Disabling essential or security cookies may prevent you from logging in or using core features of y999. Analytics and functional cookies can be disabled without affecting your ability to play.

The y999 mobile App uses similar session and security technologies within the app environment. The App does not track your location or access your contacts, camera or microphone unless you explicitly grant permission for a specific feature.

y999 implements technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• Encryption of data in transit using TLS (HTTPS) across all web and API communications.
• Encrypted storage for sensitive data fields including identity documents and payment references.
• Access controls limiting internal staff access to personal data on a need-to-know basis only.
• Regular security reviews and monitoring for suspicious system activity.
• Two-factor authentication options available for your y999 account login.

While y999 takes data security seriously, no online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights, y999 will notify affected players and take immediate remedial action.

You also play a role in keeping your account secure. Use a strong, unique password for your y999 account, do not share your login credentials with anyone, and contact support immediately if you notice any suspicious activity on your account.

y999 retains personal data only for as long as it is needed for the purpose it was collected, or as required to comply with legal and financial record-keeping obligations. The following general retention periods apply:

• Active accounts — personal data is retained for the full duration of your account and for a minimum period after account closure, as required for financial compliance purposes.
• Transaction records — PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction, in line with standard financial record requirements.
• KYC documents — identity verification documents are retained for a minimum of five years from account closure or the date the document was submitted.
• Support communications — chat logs and email correspondence with y999 support are retained for three years unless a longer period is required for an ongoing dispute or investigation.
• Inactive accounts — accounts with no activity for an extended period may have non-essential data removed while core identity and financial records are retained as required.

When data is no longer required and the applicable retention period has passed, y999 securely deletes or anonymises the data so it can no longer be linked to you personally.

As a y999 player, you have the following rights regarding your personal data. You can exercise any of these rights by contacting y999 support directly:

• Right to access — you may request a copy of the personal data y999 holds about you at any time.
• Right to correction — if any of your personal data held by y999 is inaccurate or incomplete, you can request that it be corrected.
• Right to deletion — in certain circumstances, you may request that y999 delete your personal data. Note that deletion requests may be limited where data must be retained for legal, financial or fraud-prevention purposes.
• Right to restrict processing — you may request that y999 limit how it uses your data in certain situations, such as while a correction request is being investigated.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to data portability — you may request a structured copy of data you have provided to y999 in a commonly used format.

y999 will respond to data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request to ensure we are disclosing data only to the correct account holder. There is no fee for standard data access or correction requests.

y999 is strictly an adult platform. Our services are available only to individuals who are 18 years of age or older. We do not knowingly collect or process personal data belonging to persons under the age of 18.

As part of the account registration and identity verification process, y999 takes steps to confirm that users meet the minimum age requirement. If we become aware that an account has been registered by a person under 18, the account will be immediately suspended, any balance will be returned to the deposit source and all personal data associated with the underage account will be deleted from our systems.

If you believe a minor has registered on y999 using falsified details, please contact support immediately so that the account can be investigated and closed.

y999 may update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes in data processing practices or updates required by applicable law. The most current version of the Privacy Policy will always be available at y999.cx/privacy-policy.

When material changes are made, y999 will notify registered players via email or an in-platform notification. The date at the top of this page indicates when the policy was last updated. Continued use of y999 after a policy update constitutes acceptance of the revised terms.

We recommend reviewing this page periodically so you are always aware of how your data is being handled. If any update significantly changes your rights or our obligations, we will make that clear in the notification.

If you have any questions, concerns or requests regarding this Privacy Policy or how y999 handles your personal data, please get in touch with our support team:

When contacting us about a data-related request, please include your registered phone number or email address and a clear description of your query. Our team will respond as promptly as possible.

For account-specific concerns such as unrecognised transactions or suspected unauthorised access, include as much detail as you can so the team can investigate without unnecessary delays.