y9999 Privacy Policy

y9999 is Pakistan's premier licensed online casino and sports betting platform, accessible at y9999.ws. For the purposes of this Privacy Policy, "y9999", "we", "us", and "our" refer to the operator of the y9999 platform and all associated services, features, and sub-domains.

y9999 acts as the data controller in respect of all personal information collected from players and visitors to the y9999 platform. As data controller, y9999 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing complies with applicable data protection standards.

This Privacy Policy applies to all personal data collected through:

• The y9999 website at y9999.ws and all sub-pages and features thereof.
• The y9999 mobile application (where applicable).
• All customer support channels, including live chat and email communications.
• All financial transaction processing and KYC identity verification procedures conducted on or in connection with the y9999 platform.

If you have any questions about how y9999 processes your personal data, please refer to the Contact section at the end of this document.

y9999 collects personal data from players and platform visitors in the following categories. We collect only what is necessary for the specific purposes described in this Policy.

y9999 uses the personal data collected from players and platform visitors for the following specific purposes:

• Account Registration and Management: To create and maintain your y9999 player account, verify your identity, manage your wallet balance in PKR, and provide access to platform features.
• KYC and Age Verification: To confirm that all registered players are at least 21 years of age and that all identity documentation provided is authentic and matches the account registration details.
• Payment Processing: To process deposits made via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and Cash OTC, and to process withdrawal requests to verified payment methods.
• Anti-Money Laundering (AML) Compliance: To screen player transaction patterns against AML risk indicators, conduct source-of-funds checks where required, and file reports where legally obligated to do so.
• Responsible Gaming Monitoring: To identify players who may be exhibiting problem gambling behaviour and to proactively offer appropriate responsible gaming tools or interventions in accordance with y9999's Responsible Gaming Policy.
• Customer Support: To investigate and resolve account queries, payment disputes, technical issues, and formal complaints submitted by players.
• Platform Improvement and Analytics: To analyse how players interact with the y9999 platform in aggregate, identify technical issues, improve game performance, and develop new features that better serve Pakistani players.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and other security threats to the y9999 platform and its players.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Players may opt out at any time via account settings or by contacting support.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and enforce y9999's Terms and Conditions.

y9999 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing is necessary to perform the contract between y9999 and the Player — i.e., to provide the gaming and betting services described in the Terms and Conditions. This basis covers account registration, payment processing, game operation, and customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for y9999's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud prevention, platform security monitoring, responsible gaming analytics, and internal business reporting.
• Consent: Where y9999 relies on your consent as the basis for processing (principally in relation to direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

y9999 uses cookies and similar tracking technologies to operate the platform, remember player preferences, maintain session security, and analyse platform usage patterns. The following categories of cookies are used on the y9999 platform:

• Essential Cookies: Strictly necessary for the platform to function. These cookies enable session management, login authentication, security token validation, and core platform features. Essential cookies cannot be disabled without breaking the platform's functionality.
• Performance Cookies: Used to collect anonymised data about how players interact with the y9999 platform — which pages are visited most frequently, how long players spend on specific games, and where technical errors occur. This data is used exclusively to improve the platform.
• Functional Cookies: Used to remember player preferences such as language settings, interface customisation options, and last-used payment method selections, enabling a more personalised and convenient experience on return visits.
• Analytics Cookies: Used to generate aggregated, anonymised reports on platform traffic and user behaviour patterns. y9999 uses this data internally for business intelligence and platform improvement purposes only.

On your first visit to the y9999 platform, you will be presented with a cookie consent notice. You may accept all cookies, reject non-essential cookies, or customise your cookie preferences. Essential cookies will remain active regardless of your selection, as they are necessary for the platform to operate.

You may also control cookie behaviour through your browser settings at any time. Please note that disabling certain cookies may affect your experience on the y9999 platform, including the availability of some personalisation features.

y9999 does not sell, rent, or trade your personal data. However, in order to operate the platform and comply with legal obligations, y9999 shares personal data with a limited number of trusted third-party service providers and authorities under strictly controlled conditions.

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and Cash OTC agents receive the minimum financial data necessary to process deposit and withdrawal transactions. These parties are bound by their own regulatory obligations and data protection standards.
• KYC and Identity Verification Providers: y9999 uses third-party identity verification services to conduct document authentication and biometric checks during the KYC process. These providers process identity documents solely for verification purposes and are contractually prohibited from using such data for any other purpose.
• Game Software Providers: Third-party casino game providers whose games are offered on the y9999 platform may receive limited session and gameplay data necessary for game operation, fairness auditing, and technical support. No personally identifiable information beyond a session identifier is shared with game providers.
• Regulatory and Law Enforcement Authorities: y9999 will disclose personal data to competent regulatory or law enforcement authorities where legally required to do so, or where y9999 reasonably believes disclosure is necessary to prevent or detect crime, protect the safety of persons, or comply with a court order.
• Professional Advisors: y9999's legal counsel, auditors, and compliance consultants may have access to personal data on a strictly confidential basis where necessary for the provision of professional services to y9999.

y9999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship and for a minimum of 5 years following account closure, in compliance with applicable AML and financial records obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by financial record-keeping regulations applicable to y9999's operations.
• KYC Documentation: Retained for a minimum of 5 years following the completion of KYC verification, or longer where required by specific regulatory directive.
• Customer Support Communications: Retained for 3 years from the date of the most recent interaction, to enable y9999 to reference prior support history when handling related future queries or disputes.
• Marketing Consent Records: Retained for the duration of the consent and for 2 years following withdrawal of consent or account closure, as evidence of compliance with consent requirements.
• Analytics and Usage Data: Anonymised aggregated analytics data may be retained indefinitely. Personally identifiable usage data is deleted or anonymised within 12 months of collection where it is no longer required for an active purpose.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with y9999's data deletion procedures. Where data cannot be immediately deleted due to technical constraints, it is placed in a restricted archive state pending secure deletion at the next scheduled deletion cycle.

y9999 implements a comprehensive suite of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• TLS 1.3 Encryption: All data in transit between player devices and y9999's servers is encrypted using TLS 1.3, the current industry-leading transport security protocol.
• At-Rest Encryption: All sensitive personal data stored in y9999's databases is encrypted at rest using AES-256 encryption, ensuring that data is protected even in the event of unauthorised physical or logical access to storage media.
• Access Controls: Access to player personal data is restricted to authorised y9999 personnel who require such access for legitimate operational purposes. Access is governed by role-based permissions, and all access events are logged and audited.
• Two-Factor Authentication: y9999 staff with access to player data systems are required to use multi-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts for an additional layer of protection.
• Penetration Testing: y9999's platform undergoes regular third-party security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: y9999 maintains a documented data breach incident response procedure. In the event of a confirmed breach affecting player personal data, y9999 will notify affected players and relevant authorities without undue delay, and in any event within 72 hours of becoming aware of the breach where technically and operationally feasible.

As a y9999 player, you hold a number of rights in relation to your personal data. y9999 is committed to honouring these rights promptly and without undue bureaucracy. Your rights include:

To exercise any of the above rights, please contact the y9999 data team via live chat or by emailing support@y9999.ws with the subject line "Data Rights Request". y9999 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case y9999 will notify you of the extension and the reason for it.

y9999 operates a strict 21+ minimum age policy across all platform services without exception. The y9999 platform is not intended for, marketed to, or accessible by individuals under the age of 21.

y9999 does not knowingly collect or process personal data from individuals under the age of 21. All registration applications undergo age verification checks, and documentary proof of age may be required before account activation is completed.

If y9999 discovers or is notified that it has inadvertently collected personal data from an individual under the age of 21, the following steps will be taken immediately:

• The relevant account will be suspended pending investigation.
• All personal data associated with the underage individual will be deleted as promptly as technically feasible, subject to any overriding legal retention obligations.
• Any deposits made will be returned to the payment source used, and any gaming or betting activity conducted on the account will be voided.
• Where applicable, the incident will be reported to relevant child protection or regulatory authorities.

Parents and guardians who believe a minor may have registered or used the y9999 platform are urged to contact our support team immediately via live chat or at support@y9999.ws so that the matter can be addressed without delay.

The y9999 platform primarily processes and stores player data within secure data centres. In certain circumstances — such as when engaging international KYC verification providers, game software suppliers, or technology infrastructure partners — player data may be transferred to or accessed from locations outside Pakistan.

Where such international transfers occur, y9999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within Pakistan. Safeguards used by y9999 for international transfers include:

• Contractual data protection clauses that bind the recipient to handle data in accordance with international data protection standards.
• Transfers only to vendors operating in jurisdictions recognised as providing an adequate level of data protection, or to vendors who have adopted internationally recognised data protection frameworks.
• Technical controls including encryption of data in transit and at rest, ensuring that transferred data is protected regardless of where it is physically located.

Players who wish to obtain more specific information about the international transfer mechanisms applied to their personal data may submit a request to the y9999 data team via the contact details set out in Section 13.

y9999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Where a proposed change is material — meaning it significantly affects the way y9999 collects, uses, or shares your personal data — y9999 will provide advance notification via:

• A prominent notice displayed within the y9999 platform on your next login.
• An email notification to the address registered to your y9999 account.

Non-material changes — such as formatting updates, clarifications of existing practices, or corrections of typographical errors — may be made without advance notice, with the updated Policy taking effect immediately upon publication.

Your continued use of the y9999 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this Policy, you should cease using the platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way y9999 processes your personal data, please do not hesitate to get in touch with our dedicated data protection team. y9999 is committed to addressing all privacy-related queries promptly, transparently, and in good faith.

Primary Contact Method: Live Chat — available 24/7 directly on the y9999 platform. Our support agents can handle routine privacy queries and escalate data rights requests to the appropriate team on your behalf. Average response time is 3–5 minutes.

Email Contact: For formal data rights requests, complaints, or detailed privacy enquiries, you may contact us at support@y9999.ws with the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. y9999 acknowledges all email privacy queries within 5 business days.

If you are not satisfied with y9999's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. y9999 will cooperate fully with any such authority in the investigation and resolution of complaints.

y9999 values the trust that Pakistani players place in us and takes every privacy concern seriously. Our team is trained to handle your data with the care and respect it deserves — because at y9999, your privacy is our responsibility.