Privacy Policy — How yy999 Handles Your Personal Data

yy999 is an online casino and sports betting platform accessible at yy999.bet, operated by the entity holding an international gaming licence under which this platform is authorised to provide gambling services. References to "yy999", "we", "us", or "our" throughout this Privacy Policy refer to that operating entity and its authorised data processing activities.

For the purposes of data protection law, yy999 acts as the data controller in respect of personal data collected from players who register and use the yy999 platform. As data controller, we determine the purposes and means by which personal data is processed, and we are responsible for ensuring that processing is lawful, fair, and transparent.

This Privacy Policy applies exclusively to personal data collected through the yy999.bet website and its associated services. It does not apply to any third-party websites, services, or platforms that may be linked to or from the yy999 platform.

yy999 collects the following categories of personal data from players, depending on the nature of their interaction with the platform:

yy999 collects personal data through the following methods:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit, requesting a withdrawal, filling in a support form, or communicating with our team via live chat or email.
• Automated technical collection: Data collected automatically when you access the yy999 platform, including IP addresses, device identifiers, browser fingerprints, session durations, and page interaction data via server logs and analytics tools.
• Cookies and similar technologies: First-party cookies and session tokens set by the yy999 platform to maintain your login state, personalise your experience, and support fraud detection. See Section 7 for full cookie details.
• Payment processor data: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors when you complete a financial transaction on the platform.
• Third-party verification services: Where yy999 uses a third-party identity verification provider to assist with KYC checks, that provider may return structured identity confirmation data to yy999 following document review.

yy999 processes personal data on one or more of the following legal bases, depending on the purpose of the processing activity:

• Contractual necessity: Processing required to deliver the services you have contracted for when creating a yy999 account — including account management, gameplay, deposits, withdrawals, and bonus administration.
• Legal obligation: Processing required to comply with our obligations under our international gaming licence, including Know Your Customer (KYC) verification, anti-money laundering (AML) screening, and transaction monitoring.
• Legitimate interests: Processing conducted for the legitimate interests of yy999 and our players, including fraud detection, responsible gambling monitoring, platform security, and service improvement analytics — provided those interests are not overridden by your data protection rights.
• Consent: Where we send optional marketing communications or deploy non-essential cookies, we do so only on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

yy999 uses your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and manage your relationship with yy999 across all platform features.
• Transaction processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate transaction records in PKR.
• KYC and regulatory compliance: To verify your age (21+), identity, and payment method ownership as required by our international gaming licence and applicable AML regulations.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, multi-accounting, and any other conduct that violates our Terms and Conditions or applicable law.
• Responsible gambling: To monitor gaming behaviour for indicators of problem gambling and to enforce deposit limits, cooling-off periods, and self-exclusion requests you have placed on your account.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes through our live chat and email support channels.
• Platform improvement: To analyse aggregated, anonymised usage data to improve game performance, navigation, and the overall player experience on yy999.bet.
• Marketing communications: Where you have opted in, to send you information about new games, promotions, PSL and cricket betting specials, and platform updates relevant to players in Pakistan.

yy999 does not sell, rent, or trade your personal data. We share your data only in the following specific and necessary circumstances:

• Payment processors: We share the minimum necessary financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors solely to facilitate your requested transactions. Each processor operates under its own privacy and data protection policies.
• KYC and identity verification providers: We may share identity document data with a licensed third-party KYC verification service to assist with automated or manual document checks. Such providers are contractually bound to process data solely for verification purposes.
• Game software providers: Certain gameplay data (session identifiers, game results) may be shared with or accessible to the third-party game studios whose content is hosted on yy999, to the extent necessary for game operation and RTP auditing.
• Regulatory and law enforcement authorities: We are legally required to report certain activities — including suspected money laundering and fraud — to relevant authorities under our international gaming licence obligations. Such disclosures are made without prior notice to the affected player where legally required.
• Professional advisers: We may share data with lawyers, auditors, and compliance consultants where strictly necessary for legal proceedings, regulatory audits, or the defence of legal claims.
• Corporate transactions: In the event of a merger, acquisition, or restructuring of the yy999 operating entity, player data may be transferred to a successor entity subject to equivalent data protection obligations.

yy999 uses cookies and similar tracking technologies to provide, secure, and improve the platform. The following categories of cookies are deployed on yy999.bet:

You may manage non-essential cookie preferences through the cookie consent panel displayed on your first visit to yy999.bet. Please note that disabling strictly necessary cookies may impair the functionality of the platform, including the ability to log in and access your account.

yy999 does not deploy third-party advertising cookies or allow external advertising networks to set cookies on yy999.bet pages. All cookies set on the platform are first-party or strictly service-related.

yy999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five years from the date of account closure, in accordance with standard AML regulatory requirements applicable under our international gaming licence.
• Transaction records: Retained for a minimum of five years from the date of each transaction, to support financial auditing, regulatory review, and dispute resolution.
• Responsible gambling records: Self-exclusion and account restriction history is retained for the duration of the exclusion period plus a minimum of two years thereafter, to prevent circumvention of self-exclusion commitments.
• Support and communications data: Live chat transcripts and email correspondence are retained for up to two years from the date of the interaction, or longer if the communication relates to an ongoing dispute or investigation.
• Technical and session data: Server logs and session data are retained for up to 90 days and then anonymised or deleted, unless required for an active security investigation.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is sooner.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

yy999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and yy999 servers, ensuring that login credentials, payment data, and personal information cannot be intercepted in transit.
• Encrypted at-rest storage for sensitive data including CNIC details, financial account references, and identity document copies.
• Role-based access controls that restrict internal access to personal data on a strict need-to-know basis. Support staff can access only the data required to resolve your specific query.
• Regular security audits and penetration testing conducted by qualified third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
• Fraud detection systems that monitor login activity, transaction patterns, and session behaviour in real time to flag and respond to anomalous activity promptly.
• Staff data protection training conducted on a regular basis to ensure all personnel who handle personal data understand their obligations and follow correct procedures.

As a yy999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]:

• Right of access: You may request a copy of all personal data yy999 holds about you. We will respond within a reasonable timeframe with a structured, readable summary.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For certain data categories, such as your registered name, correction may require fresh identity documentation.
• Right to erasure: You may request the deletion of your personal data. Erasure will be carried out subject to our regulatory retention obligations — data required for AML compliance, fraud investigation, or legal proceedings will be retained for the legally mandated period before deletion.
• Right to restrict processing: In certain circumstances, such as where you contest the accuracy of data or object to its processing, you may request that yy999 restrict the processing of your data while the matter is resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

yy999 will not charge a fee for exercising any of the above rights in ordinary circumstances. We reserve the right to charge a reasonable administrative fee or decline to respond only where requests are manifestly unfounded or excessive.

The yy999 platform is strictly restricted to individuals aged 21 years and older. yy999 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the account registration and KYC process, and any account found to be operated by an underage individual will be closed immediately.

If a parent or guardian becomes aware that their child has provided personal data to yy999 without their knowledge, they should contact us immediately via live chat or at [email protected]. We will take prompt action to close the account and delete the personal data in question in accordance with our data retention obligations.

The yy999 platform may contain references to third-party game studios, payment processors, or services whose own websites or platforms are accessible externally. This Privacy Policy applies solely to data processed by yy999 on the yy999.bet platform and does not cover the data practices of any third party.

yy999 is not responsible for the privacy practices, cookie policies, or data security measures of any third-party websites or services. We recommend that you review the privacy policy of any third-party service before submitting your personal information to them. The presence of a third-party name on the yy999 platform (for example, a payment method or a game studio logo) does not constitute an endorsement of that party's data handling practices.

yy999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing activities, applicable regulatory requirements, or best practice standards. The effective date at the top of this page will be updated to reflect any revision.

Where changes are material — for example, where we introduce a new category of data processing or change our data sharing arrangements — yy999 will notify registered players via on-screen notification upon their next login or by email to the address registered on their account, whichever is practicable.

Your continued use of the yy999 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any revision, you should cease using the platform and contact us to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data yy999 holds about you, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the yy999 platform at yy999.bet. Live chat is the fastest way to reach our team and is monitored around the clock.
• Email: [email protected] — Please note this address is displayed as plain text for your reference and is not a clickable link. Copy the address manually into your email client to send a message.

When submitting a data-related request by email, please include your registered account username and a clear description of your request so that our team can identify your account and respond efficiently. yy999 aims to acknowledge all data protection enquiries within 48 hours and to resolve them within 14 business days.

All formal data protection complaints and escalations should be submitted in writing to [email protected] with the subject line "Data Protection Request" for proper routing to our compliance team.