Privacy Policy — y9999 Online Casino

1Who We Are

y9999 is Pakistan's premier online casino and sports betting platform, operating at y9999.biz. The y9999 platform offers cricket betting, EVO Live casino tables, Teen Patti 20-20, slot games, and a full suite of casino-style products, all accessible via mobile and desktop to registered players across Pakistan — including Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and Peshawar.

For the purposes of this Privacy Policy, y9999 is the data controller — meaning we determine the purposes and means by which your personal data is processed. When you register a y9999 account, deposit via JazzCash or EasyPaisa, or interact with any part of the platform, you are providing your data to y9999 in the capacity described in this policy.

If you have any questions about this Privacy Policy, how y9999 handles your data, or wish to exercise any of the rights described in Section 11, please contact us via live chat (available 24/7) or email at [email protected].

2Information We Collect

y9999 collects personal information through several channels: at account registration, during KYC verification, through your use of the platform, and via your interactions with our support team. The following table summarises the categories of data collected and the source of each:

3How We Use Your Information

y9999 uses the personal data it collects for the following specific purposes only. We do not use your data for purposes other than those listed here without first obtaining your explicit consent or being required to do so by applicable law:

• Account Creation & Authentication: To register your y9999 account, verify your identity at login, and maintain the security of your account across sessions on your Pakistani mobile device or desktop browser.
• KYC & Age Verification: To verify that you meet the 21+ age requirement and to confirm your identity before processing withdrawals, as required under our international gaming authority obligations.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT — including matching your payment method registration to your y9999 account name.
• Game Delivery & Platform Operation: To deliver cricket betting markets, EVO Live tables, Teen Patti 20-20, slot games, and all other platform features in a technically functional manner.
• Fraud Prevention & AML Compliance: To detect and prevent fraudulent activity, money laundering, bonus abuse, and multi-accounting in accordance with our anti-money laundering obligations.
• Customer Support: To respond to your enquiries, resolve account issues, process formal complaints, and maintain records of support interactions for quality and training purposes.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to apply deposit limits or self-exclusion periods you have requested, and to send responsible gaming check-in communications where relevant.
• Marketing Communications (with consent): To send you promotional offers, bonus alerts, PSL and cricket betting market notifications, and platform updates — but only where you have actively opted in to receive such communications.
• Legal Compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

4Legal Basis for Processing

y9999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between y9999 and you — i.e., to operate your account, process transactions, and deliver the services you have registered to use.
• Legal Obligation: Processing required for y9999 to comply with its legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and age restriction enforcement.
• Legitimate Interests: Processing carried out in y9999's legitimate business interests where those interests do not override your fundamental rights — including fraud prevention, platform security, and internal analytics used to improve game quality and user experience.
• Consent: Processing that is based entirely on your freely given, specific, informed consent — primarily marketing communications. You may withdraw consent for marketing at any time without affecting the lawfulness of any processing that took place before withdrawal.

5Cookies & Tracking Technologies

y9999 uses cookies and similar tracking technologies to ensure the platform functions correctly and to understand how players interact with the site. The following categories of cookies are used:

5.1 Strictly Necessary Cookies

These cookies are essential for the y9999 platform to function. They maintain your login session, remember your language preference, and ensure that your game session data is correctly associated with your account. These cookies cannot be disabled without breaking core platform functionality.

5.2 Performance & Analytics Cookies

y9999 uses first-party analytics to understand which games are most popular, which pages Pakistani players visit most, and where technical errors occur. This data is aggregated and anonymised — it cannot be used to identify individual players. This helps us prioritise platform improvements.

5.3 Functional Cookies

These remember your preferences — such as your preferred deposit method (JazzCash vs. EasyPaisa), your responsible gaming session time alert setting, and your notification preferences — so you do not need to reconfigure them each time you log in.

5.4 Managing Cookies

You can manage or delete cookies at any time through your mobile browser settings. Please note that disabling strictly necessary cookies will affect your ability to use y9999 normally. For detailed information about the specific cookies y9999 uses and their durations, please contact our support team.

6Data Sharing & Third Parties

y9999 does not sell, rent, or trade your personal data. However, certain categories of data are shared with carefully selected third-party service providers who help y9999 operate the platform. All third-party processors are bound by strict data processing agreements and are only permitted to use your data for the specific purpose for which it was shared.

• Payment Processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and relevant USDT processing partners solely for the purpose of executing and confirming your deposit and withdrawal transactions.
• KYC Verification Partners: Where y9999 uses a third-party identity verification service to assist with CNIC or passport document review, your KYC documents are shared with that provider under strict confidentiality obligations. The provider does not retain documents beyond the verification process.
• Live Casino Content Providers: EVO Live and Teen Patti 20-20 game providers receive limited session data (player ID, table session reference, wager amounts) to deliver and settle live table game results. They do not receive your CNIC, payment details, or contact information.
• Fraud Prevention & AML Services: Anonymised or pseudonymised transaction patterns may be shared with specialist AML screening services to detect suspicious financial activity as required by our licensing obligations.
• Legal & Regulatory Authorities: y9999 will disclose personal data to regulatory authorities, law enforcement bodies, or courts where required to do so by a lawful order, warrant, or legal obligation. y9999 will notify you of such disclosures where legally permitted to do so.

7Payment Data & PKR Transactions

When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, or a Pakistani bank account, y9999 receives confirmation data from your payment provider — including the registered account name, a transaction reference number, and the amount in PKR. y9999 does not store full bank account numbers or complete JazzCash/EasyPaisa mobile wallet credentials on its own servers.

Payment data is used exclusively for:

• Crediting or debiting your y9999 account wallet in PKR.
• Matching your payment method registration name to your y9999 account for KYC and anti-fraud purposes.
• Resolving payment disputes — for example, if a deposit does not appear in your y9999 wallet within the expected timeframe.
• Producing transaction records for AML reporting where required.

All payment transactions on y9999 are processed over encrypted connections. y9999's payment infrastructure is isolated from its general web platform to minimise any risk of cross-system exposure.

8KYC & Identity Documents

Identity documents submitted for KYC — including CNIC scans, passport copies, selfies, and proof-of-address documents — are among the most sensitive data y9999 handles. The following specific protections apply to KYC documents:

• KYC documents are stored in an encrypted, access-controlled document store that is separate from the general y9999 player database.
• Access to KYC documents is restricted to a small number of authorised y9999 compliance staff on a strict need-to-know basis. Access is logged and audited.
• KYC documents are retained for the duration of your account and for a defined period following account closure, as required by applicable AML regulations.
• KYC documents are never shared with any party other than authorised identity verification partners (see Section 6) or regulatory/legal authorities under lawful compulsion.
• Where y9999 uses a third-party KYC verification tool, that provider operates under ISO 27001 certified security standards or equivalent.

9Data Retention

y9999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

When the applicable retention period expires, y9999 securely deletes or anonymises the relevant data. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate analytics purposes.

10Data Security

y9999 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and y9999's servers is encrypted using current SSL/TLS protocols. This applies to every page of the platform — not just login and payment pages.
• Password Hashing: Your y9999 account password is stored as a salted cryptographic hash. y9999 staff cannot read your password in plain text under any circumstances.
• Two-Factor Authentication: y9999 offers optional two-factor authentication for all registered accounts. We strongly recommend all Pakistani players enable 2FA, particularly those using public or shared mobile data connections.
• Access Controls: Internal access to player data is granted on a strict least-privilege basis. Staff can only access the data required for their specific role. All internal data access is logged.
• Infrastructure Security: y9999's servers are hosted in secure data centres with physical access controls, redundant power systems, and 24/7 monitoring by our infrastructure security team.
• Regular Security Audits: y9999 conducts periodic internal security reviews and engages third-party security professionals to perform penetration testing and vulnerability assessments of the platform.

In the event of a personal data breach that poses a risk to your rights and freedoms, y9999 will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.

11Your Rights

As a y9999 player, you hold the following rights with respect to the personal data y9999 holds about you. You can exercise any of these rights by contacting our support team via live chat or email at [email protected]:

• Right of Access: You may request a copy of all personal data y9999 holds about you. We will provide this in a structured, commonly used format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data y9999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details, you can update information directly within your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Note that y9999 may be required to retain certain data (such as KYC documents and transaction records) for a defined period under applicable AML and financial regulations even after account closure — these retention obligations take precedence over erasure requests for that specific data.
• Right to Restrict Processing: In certain circumstances, you may request that y9999 restricts its processing of your data — for example, while you contest the accuracy of data we hold, or while an objection is being considered.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that your data be provided to you in a machine-readable format (JSON or CSV) for transfer to another service provider.
• Right to Object: You may object to y9999's processing of your data where that processing is based on legitimate interests. y9999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where y9999 processes your data on the basis of your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

y9999 will respond to all data rights requests within 30 days. Where a request is complex or involves multiple data subjects, the response period may be extended by an additional 30 days — in which case y9999 will notify you of the extension and the reason for it.

12Children & Minors

y9999 is strictly an adult platform. Access is limited to individuals aged 21 and above. y9999 does not knowingly collect personal data from anyone under the age of 21, and takes active steps to prevent minors from registering or accessing the platform.

If you are a parent or guardian and believe that a minor in your household has registered a y9999 account or accessed the platform without authorisation, please contact our support team immediately via live chat or at [email protected]. We take all such reports seriously and will act promptly.

y9999 strongly recommends that parents and guardians in Pakistan use device-level parental controls and mobile operator content filters to prevent underage access to online gambling platforms.

13International Data Transfers

y9999 operates under international gaming authority licensing, and some of the service providers and infrastructure partners used to operate the platform may be located outside Pakistan. Where your personal data is transferred to, stored in, or processed by entities in jurisdictions outside Pakistan, y9999 takes the following steps to ensure your data receives an adequate level of protection:

• Transfers are conducted only to service providers who have agreed to y9999's data processing terms, which require them to implement security standards equivalent to those described in Section 10 of this policy.
• Where transfers involve KYC documents or payment data, additional contractual safeguards are applied to ensure those providers cannot use that data for any purpose other than the specific service they are providing to y9999.
• y9999 does not transfer your data to jurisdictions that have no framework for personal data protection without first putting in place appropriate contractual protections.

For further information about the specific international transfer safeguards y9999 has in place, you may contact our support team with a written request and we will provide details within a reasonable timeframe.

14Changes to This Privacy Policy

y9999 reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, changes to the services we offer, or updates to applicable legal requirements. When material changes are made to this policy, y9999 will notify registered players via email to the address on file or via a prominent notice within the platform — not just a quiet version number change at the top of the page.

The effective date of the current version is always shown at the top of this policy. If you continue to use the y9999 platform after a revised Privacy Policy has been published, that continued use constitutes your acceptance of the updated version. If you do not accept the revised policy, you may request account closure in accordance with y9999's Terms & Conditions.

Previous versions of this Privacy Policy are available on request by contacting our support team. y9999 maintains an internal archive of all historical policy versions with their effective dates.

15Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 11, or want to raise a concern about how y9999 handles your personal data, you can reach our team through any of the following channels:

• Live Chat: Available 24/7 directly through the y9999 platform — the fastest way to get a response for most data queries.
• Email: [email protected] — for formal data access requests, erasure requests, and written complaints. Please include your registered account email address and player ID so we can locate your account promptly.
• Response Time: y9999 aims to acknowledge all data-related requests within 48 hours and provide a full response within 30 days, as required under applicable data protection standards.

When submitting a data access or erasure request, y9999 may need to verify your identity before processing the request. This is to protect your data from unauthorised third-party requests. You may be asked to confirm details associated with your registered account or provide a copy of identification — which will be used solely for the purpose of verifying the request and then securely deleted.