Your Privacy at yy999

1. Who We Are

1.1 yy999 is an online casino and sports betting platform accessible at yy999.app. In this Privacy Policy, references to "yy999", "we", "us", or "our" refer to the operator of the yy999 platform and all affiliated entities operating under the international gaming licence applicable to yy999.app.

1.2 yy999 acts as the data controller in respect of the personal data of all registered players and visitors to the yy999 platform. As data controller, yy999 determines the purposes for which and the means by which personal data is processed.

1.3 For any privacy-related enquiries, you may contact the yy999 data protection team at the email address provided in Section 16 of this Policy.

2. Scope of This Policy

2.1 This Privacy Policy applies to all personal data collected by yy999 in connection with:

• The registration and maintenance of player accounts on the yy999 platform;
• Visits to the yy999.app website, including pages browsed by non-registered visitors;
• Deposits, withdrawals, and all financial transactions processed through yy999;
• Participation in games, sports betting markets, and promotional activities offered by yy999;
• Communications between you and the yy999 customer support team;
• Completion of the yy999 Know Your Customer (KYC) and identity verification process.

2.2 This Policy must be read together with yy999's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall framework governing your use of the yy999 platform.

3. Data We Collect

3.1 yy999 collects the following categories of personal data from players and visitors:

Category	Examples of Data Collected	When Collected
Identity Data	Full legal name, date of birth, CNIC number, passport number, photograph	Registration & KYC verification
Contact Data	Email address, mobile number, city of residence (e.g., Karachi, Lahore, Islamabad)	Registration
Financial Data	JazzCash/EasyPaisa account reference, bank account details, USDT wallet address, transaction history	Deposits & withdrawals
Technical Data	IP address, device type, operating system, browser type, session identifiers	Every platform visit
Usage Data	Games played, bets placed, pages visited, time spent on platform, login timestamps	Ongoing platform use
Communications Data	Live chat transcripts, support email correspondence, complaint records	Support interactions
Marketing Preferences	Promotional opt-in/opt-out status, preferred notification channels	Account settings / consent forms

3.2 yy999 does not intentionally collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless such collection is specifically required to fulfil a legal or licensing obligation. Where special category data is collected, explicit consent will be sought at the point of collection.

4. How We Collect Your Data

4.1 Directly from you. The majority of personal data processed by yy999 is provided directly by you during the registration process, KYC submission, deposit and withdrawal requests, support interactions, and promotional sign-ups.

4.2 Automatically. When you visit yy999.app or use the yy999 platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and browsing behaviour within the platform. See Section 9 for full details of yy999's cookie practices.

4.3 From third parties. yy999 may receive personal data about you from the following third-party sources:

• Payment service providers such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay — for the purpose of verifying transaction authenticity and detecting fraud;
• Identity verification and KYC service providers — for the purpose of confirming the validity of CNIC or passport documents submitted during the verification process;
• Fraud prevention and anti-money laundering screening services — where yy999 is obligated to screen player data against relevant watchlists under its gaming licence conditions;
• Responsible gaming organisations — where a player has registered with a self-exclusion scheme that notifies participating operators.

5. Why We Use Your Data

5.1 yy999 uses your personal data for the following purposes:

• Account management: Creating and maintaining your yy999 player account, processing login requests, and managing account security;
• Identity verification: Confirming that you meet the 21+ age requirement and satisfying KYC obligations imposed by yy999's international gaming licence;
• Payment processing: Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, and other accepted payment channels;
• Service delivery: Providing access to casino games, cricket betting, live dealer tables, slots, and all other yy999 platform features;
• Fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and fulfilling our duty of care to players;
• Customer support: Responding to support queries, processing complaints, and maintaining records of communications;
• Legal compliance: Fulfilling obligations under yy999's gaming licence, applicable anti-money laundering regulations, and data protection law;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

6. Legal Bases for Processing

6.1 yy999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and yy999 — including operating your account, processing payments, and delivering gaming services;
• Legal obligation: Processing that is required for yy999 to comply with applicable laws, regulations, and the conditions of its international gaming licence — including KYC verification, anti-money laundering screening, and responsible gaming obligations;
• Legitimate interests: Processing carried out in pursuit of yy999's legitimate business interests, where those interests are not overridden by your fundamental rights — including fraud detection, platform security, and internal analytics used to improve the yy999 experience;
• Consent: Processing activities for which yy999 has obtained your explicit prior consent — including the sending of marketing communications and the placement of optional analytics cookies. You have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing

7.1 yy999 does not sell, rent, or otherwise commercially transfer your personal data to third parties. Data sharing by yy999 is limited to the following categories of recipient and the stated purposes:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 gateway providers receive the financial data necessary to process your deposit and withdrawal transactions;
• KYC and identity verification providers: Third-party services contracted by yy999 to verify CNIC, passport, and proof-of-address documents submitted by players during the verification process;
• Gaming software providers: Game studios and live dealer content providers receive session and wagering data necessary to deliver game content and calculate outcomes;
• Fraud and AML screening services: yy999 may share player data with specialist fraud prevention and anti-money laundering screening providers where required by its licensing obligations;
• Regulatory and law enforcement authorities: yy999 will disclose personal data to governmental, regulatory, or law enforcement bodies where it is legally required to do so or where such disclosure is necessary to protect the legal rights of yy999 or other players;
• Professional advisors: Legal counsel, auditors, and compliance advisors engaged by yy999 may access personal data on a strictly need-to-know basis subject to professional confidentiality obligations.

7.2 All third-party service providers engaged by yy999 who process personal data on yy999's behalf are required to do so under a written data processing agreement that mandates compliance with applicable data protection standards and prohibits the use of player data for any purpose other than those specified by yy999.

8. International Data Transfers

8.1 Given the international nature of yy999's operations and the global location of certain service providers, your personal data may be transferred to and processed in countries outside Pakistan. This includes transfers to the jurisdiction in which yy999 holds its international gaming licence and to countries where yy999's technology infrastructure is hosted.

8.2 Where personal data is transferred outside Pakistan, yy999 takes steps to ensure that appropriate safeguards are in place to protect your data in a manner consistent with the standards applied within Pakistan, including the use of contractual data protection clauses with receiving parties.

8.3 By registering on yy999 and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to international locations as described in this section.

9. Cookies & Tracking Technologies

9.1 yy999 uses cookies and similar tracking technologies (including web beacons and local storage objects) on the yy999.app platform. Cookies are small text files stored on your device that enable yy999 to recognise your browser and remember certain information about your session and preferences.

9.2 yy999 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the yy999 platform to function and cannot be disabled. They include session authentication cookies that keep you logged in to your yy999 account, security tokens, and cookies that enforce responsible gaming controls such as session time limits. No consent is required for strictly necessary cookies.
• Functional cookies: These cookies remember your preferences on the yy999 platform, such as your preferred language setting and display preferences. They improve your experience but are not essential to the platform's operation.
• Analytics cookies: yy999 uses analytics cookies to understand how players use the platform — including which pages are most visited, how long sessions last, and where players encounter errors. This data is used in aggregate form to improve the yy999 platform. Analytics cookies are placed only with your consent.
• Marketing cookies: Where you have consented to receive marketing communications from yy999, marketing cookies may be used to track which promotional content you have engaged with and to personalise future offers presented to you within the platform.

9.3 You can manage cookie preferences through your browser settings. Please note that disabling functional or analytics cookies will not affect your ability to use the core yy999 platform, but it may affect your experience of certain features.

10. Data Security

10.1 yy999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the yy999 platform;
• Encryption at rest for sensitive data fields including payment credentials and identity document references;
• Access controls limiting internal yy999 staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the yy999 platform infrastructure;
• Two-factor authentication options available to all registered yy999 players for account login;
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity for investigation.

10.2 While yy999 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own yy999 login credentials and for ensuring that you access the platform from secure devices and networks.

10.3 In the event of a personal data breach affecting yy999 players, yy999 will notify affected players and relevant regulatory authorities in accordance with its legal obligations and within the timeframes required by applicable law.

11. Data Retention

11.1 yy999 retains personal data only for as long as is necessary for the purposes for which it was collected or as required by applicable law and our gaming licence conditions. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the active player account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial record-keeping obligations applicable under yy999's gaming licence;
• Customer support communications: Retained for three (3) years from the date of the last communication, unless the communication relates to a formal complaint or legal matter, in which case the retention period is extended accordingly;
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it may be anonymised and retained indefinitely for aggregate analytics purposes;
• Marketing consent records: Retained for the duration of your consent and for two (2) years after consent is withdrawn, as evidence of the consent or withdrawal.

11.2 Where yy999 is required to retain data beyond the periods above in connection with an ongoing legal dispute, regulatory investigation, or audit, data will be retained until the relevant matter is fully resolved.

12. Your Data Rights

12.1 Subject to the conditions and limitations set out below, you hold the following rights in respect of your personal data processed by yy999:

• Right of access: You may request a copy of the personal data that yy999 holds about you at any time. yy999 will respond to verified access requests within 30 days;
• Right to rectification: If you believe that any personal data yy999 holds about you is inaccurate or incomplete, you may request that it be corrected. Minor account detail corrections (such as updating your email address) can be made directly via your yy999 account settings;
• Right to erasure: You may request that yy999 delete your personal data. This right is subject to important limitations — yy999 is legally required to retain certain data for the periods described in Section 11 and cannot erase data that it is obligated to retain under its gaming licence or applicable law;
• Right to restrict processing: You may request that yy999 temporarily restrict the processing of your personal data where you contest its accuracy, object to its processing, or require it for a legal claim;
• Right to data portability: You may request that yy999 provide your personal data in a structured, machine-readable format where processing is carried out by automated means on the basis of your consent or a contractual necessity;
• Right to object: You may object to yy999's processing of your personal data where that processing is based on legitimate interests. yy999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12.2 To exercise any of the rights listed above, please submit a written request to the yy999 data protection team at [email protected] with the subject line "Data Rights Request — [Your Account Username]". yy999 may request additional information to verify your identity before processing any data rights request.

13. Children & Minors

13.1 The yy999 platform is strictly restricted to individuals aged 21 and above. yy999 does not knowingly collect or process personal data relating to persons under the age of 21. The collection of data from minors is not part of any yy999 service or marketing activity.

13.2 Where yy999 becomes aware that personal data has been submitted by or on behalf of a person under the age of 21, the relevant account will be immediately suspended and the data in question will be reviewed and deleted in accordance with yy999's legal obligations. Any funds held in such an account will be dealt with in accordance with the yy999 Terms & Conditions.

13.3 If you are a parent or guardian and believe that a minor in your care has registered on yy999 or submitted personal data to the platform, please contact yy999 support immediately at [email protected] so that the matter can be addressed without delay.

14. Third-Party Links

14.1 The yy999 platform may, from time to time, contain references or links to third-party content, services, or partner platforms. This Privacy Policy applies exclusively to data processed by yy999 in connection with the yy999 platform. yy999 has no control over and accepts no responsibility for the privacy practices of any third-party website or service that you access via a link from the yy999 platform.

14.2 yy999 encourages you to review the privacy policies of any third-party platforms before providing your personal data to them. The presence of a link to a third-party site on the yy999 platform does not constitute an endorsement of that site's privacy practices by yy999.

15. Updates to This Privacy Policy

15.1 yy999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The revised Policy will be published on this page with an updated effective date.

15.2 For material changes to this Privacy Policy — particularly those that affect your rights or the ways in which yy999 uses your personal data — yy999 will notify registered players via email to the address associated with their account at least 7 days before the changes take effect. For minor or clarificatory updates, notice will be given via the revised publication date on this page.

15.3 Continued use of the yy999 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure via [email protected].

16. Contact Us

16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which yy999 processes your personal data, please contact the yy999 data protection team using the details below. All privacy-related correspondence must be submitted in writing to ensure a documented record is maintained.

16.2 yy999 is committed to resolving all privacy-related concerns promptly and transparently. If you remain dissatisfied with yy999's response to a privacy complaint, you may seek further recourse through the relevant data protection authority or the dispute resolution body designated under yy999's international gaming licence.