y99999 Privacy Policy

1. Who We Are

This Privacy Policy is issued by y99999 ("y99999", "we", "us", "our"), the operator of the online casino and sportsbook platform accessible at y99999.org ("the Platform"). y99999 is committed to protecting the personal data of all users who access the Platform, register an account, or interact with any y99999 service.

For the purposes of this Privacy Policy, y99999 acts as the data controller in respect of all personal data collected through the Platform. This means y99999 determines the purposes and means by which your personal data is processed.

2. Data We Collect

y99999 collects the following categories of personal data from users of the Platform:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory 21+ age verification).
• Pakistani CNIC number, passport number, or driving licence number (collected during KYC verification).
• Photographs or scanned copies of identification documents submitted during KYC.

2.2 Contact Data

• Email address registered to your y99999 account.
• Pakistani mobile phone number (used for account verification and two-factor authentication).
• Residential address, including city (e.g. Karachi, Lahore, Islamabad, Faisalabad) and postal code.

2.3 Financial Data

• JazzCash or EasyPaisa mobile wallet number associated with deposits or withdrawals.
• Bank account details (account title, IBAN, and bank name) for HBL, UBL, Meezan Bank, Raast, or 1LINK transfers.
• Cryptocurrency wallet addresses used for USDT TRC-20 or Bitcoin transactions.
• Transaction history including deposit amounts, withdrawal requests, and bet settlement records.

2.4 Technical Data

• IP address and approximate geolocation at the time of login and transaction.
• Device type, operating system, and browser information.
• Session data including login timestamps, pages visited, and session duration.
• Cookies and similar tracking technologies as described in Section 7.

2.5 Behavioural & Gaming Data

• Betting history across all y99999 sportsbook markets including cricket, tennis, and other sports.
• Casino game play history including slots, live dealer tables, and arcade games.
• Bonus usage records including wagering activity against promotional offers.
• Responsible gaming tool usage, including deposit limits set and self-exclusion history.

2.6 Communications Data

• Records of live chat conversations with y99999 support agents.
• Email correspondence sent to or received from y99999.
• Feedback, complaint, and dispute records.

3. How We Collect Data

y99999 collects your personal data through the following means:

• Direct collection at registration: When you create a y99999 account, you provide identity and contact data directly through the registration form.
• KYC verification submissions: Identity documents and proof of address are submitted by you through the y99999 account verification portal.
• Payment processing: Financial data is collected when you initiate a deposit or withdrawal through any supported payment method.
• Platform usage: Technical and behavioural data is collected automatically as you navigate the y99999 Platform, place bets, and interact with games.
• Support interactions: Communications data is collected when you contact y99999 via live chat or email.
• Third-party KYC providers: y99999 may receive verification data from third-party identity verification partners who assist with the KYC process.

4. How We Use Your Data

y99999 uses the personal data it collects for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact
Age verification and KYC compliance	Identity, Financial
Processing deposits and withdrawals	Financial, Technical
Fraud detection and prevention	Identity, Financial, Technical, Behavioural
Anti-money laundering (AML) compliance	Identity, Financial
Delivering personalised gaming experience	Behavioural, Technical
Responsible gaming monitoring	Behavioural, Financial
Promotional communications (where opted in)	Contact, Behavioural
Customer support and dispute resolution	Identity, Contact, Communications
Platform security and technical maintenance	Technical

y99999 does not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate legal basis for the new processing activity.

5. Legal Basis for Processing

y99999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil y99999's obligations to you under the account agreement, including account management, payment processing, and bet settlement.
• Legal obligation: Processing required for y99999 to comply with applicable laws and regulations, including AML obligations, KYC requirements, and regulatory reporting.
• Legitimate interests: Processing carried out to pursue y99999's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing carried out based on your freely given, specific, and informed consent — for example, in relation to marketing communications. You may withdraw consent at any time by contacting y99999 support or updating your communication preferences in your account dashboard.

6. Sharing Your Data

y99999 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis:

6.1 Payment Processors

Financial data is shared with payment service providers including JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank) solely to process transactions you have authorised. Cryptocurrency transactions are processed via blockchain networks where transaction data is inherently public by nature of the technology.

6.2 KYC & Identity Verification Partners

y99999 engages third-party identity verification providers to assist with the KYC process. These providers process your identity documents under strict data processing agreements and are not permitted to use your data for their own purposes.

6.3 Regulatory & Law Enforcement Authorities

y99999 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive. y99999 will not disclose data beyond what is strictly required to satisfy the legal obligation in question.

6.4 Technology & Infrastructure Providers

y99999 uses third-party cloud hosting, database management, and cybersecurity service providers who may process technical data on y99999's behalf. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they deliver to y99999.

7. Cookies & Tracking

y99999 uses cookies and similar tracking technologies on the Platform to ensure its correct functioning, to enhance your user experience, and to gather analytical insights that help us improve y99999 services.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your y99999 account and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred payment method, and responsible gaming limits you have set. Disabling these cookies may result in some Platform features not working as expected.
• Analytical Cookies: Used to collect anonymised data about how users navigate the y99999 Platform, which pages are most visited, and where users encounter errors. This data helps y99999 improve the Platform experience.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the y99999 Platform, including your ability to log in and place bets.

8. Data Security

y99999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and y99999 servers.
• Encryption at rest for all stored personal and financial data.
• Multi-factor authentication options for user accounts, including two-factor authentication via SMS or authenticator app.
• Role-based access controls ensuring that y99999 staff can only access personal data to the extent necessary to perform their job functions.
• Regular penetration testing and security audits of y99999 infrastructure.
• Incident response procedures for the prompt identification, containment, and reporting of any personal data breaches.

9. Data Retention

y99999 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account's active status plus five (5) years following account closure, to satisfy AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years following each transaction in accordance with financial record-keeping obligations.
• KYC documentation: Retained for five (5) years following account closure or the completion of the business relationship.
• Communications records: Live chat and email support records are retained for three (3) years following the date of the communication.
• Marketing consent records: Retained for the duration of your consent plus two (2) years to evidence compliance with consent obligations.

Upon expiry of the applicable retention period, y99999 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

10. Your Rights

As a y99999 account holder, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of all personal data y99999 holds about you. y99999 will provide this within 30 days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data y99999 holds. Many details can be updated directly within your y99999 account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to y99999's legal retention obligations. Requests will be assessed on a case-by-case basis.
• Right to Restriction: You may request that y99999 restrict the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: You may request a copy of the personal data you have provided to y99999 in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data where y99999 relies on legitimate interests as its legal basis, unless y99999 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where y99999 processes your data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact y99999 support as described in Section 15. y99999 will respond to all rights requests within 30 days. In complex cases this period may be extended by a further two months, in which case y99999 will notify you of the extension and the reasons for it.

11. Children & Minors

y99999 operates a strict 21+ age policy across all services. The Platform is not directed at, and y99999 does not knowingly collect personal data from, individuals under the age of 21. If y99999 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.

12. Crypto & Payment Data

y99999 accepts cryptocurrency deposits and withdrawals including USDT TRC-20 and Bitcoin. Users should be aware of the following privacy considerations specific to cryptocurrency transactions:

• Blockchain transactions are recorded on a public ledger and are inherently transparent. While y99999 does not publish your identity alongside blockchain transactions, the transaction itself — including wallet addresses and amounts — is publicly visible on the respective blockchain.
• y99999 records the cryptocurrency wallet addresses you use for deposits and withdrawals as part of its AML compliance obligations. These records are subject to the retention period described in Section 9.
• y99999 does not store private keys or seed phrases associated with your external cryptocurrency wallets. You are solely responsible for the security of your external wallet credentials.

For fiat payment methods including JazzCash, EasyPaisa, and bank transfers, financial data is processed in accordance with the privacy policies and security standards of the respective payment processors. y99999 encourages users to review the privacy terms of any payment service provider they use in connection with their y99999 account.

13. International Transfers

y99999 may transfer your personal data to, and store or process it in, countries outside Pakistan. Where such transfers occur, y99999 takes appropriate steps to ensure that your personal data receives an adequate level of protection. These steps may include the use of standard contractual clauses, data processing agreements incorporating appropriate security requirements, or transfers to recipients in jurisdictions that have been assessed as providing adequate data protection standards.

By using the y99999 Platform and submitting your personal data, you acknowledge that your data may be transferred to and processed in countries outside Pakistan as described in this section.

14. Changes to This Policy

y99999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, y99999 will:

• Update the "Last Updated" date at the top of this page.
• Send an email notification to the address registered to your y99999 account prior to the changes taking effect.
• Display a prominent notice on the y99999 Platform for a reasonable period following the update.

Your continued use of the y99999 Platform following notification of changes to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes, you should cease using the Platform and may request account closure in accordance with the Terms and Conditions.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about the way y99999 has handled your personal data, please contact the y99999 support team. Our team handles all privacy and data protection matters and is available 24 hours a day, 7 days a week.

Data protection inquiries: [email protected]

Please include "Privacy Request" or "Data Protection" in the subject line of your email, along with your y99999 account username and a clear description of your request or concern. y99999 will acknowledge your query within 48 hours and provide a substantive response within 30 days.

If you are not satisfied with y99999's response to a privacy complaint, you may have the right to lodge a complaint with the applicable data protection supervisory authority in your jurisdiction.