yy999 Privacy Policy – How We Protect Your Data

01 Introduction

yy999 operates the online gaming platform at yy999.pro and is the data controller responsible for the personal information you provide when registering, depositing, playing or contacting us. This Privacy Policy applies to all players accessing yy999 from Pakistan.

We have written this policy to be clear and practical — not full of legal jargon that is hard to understand. The goal is simple: you should know exactly what data we hold about you, why we hold it and what you can do about it. If anything in this document is unclear, please reach out to our support team and we will explain it in plain terms.

We may update this policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Significant changes will be communicated to registered account holders by email or in-platform notification.

02 Data We Collect

yy999 collects personal data through several channels — account registration, ongoing platform use, payment processing and customer support interactions. The categories of data we collect are:

Registration and Identity Data

• Full name as it appears on your national ID or passport.
• Date of birth — used to verify you are 18 or older.
• Email address and mobile phone number.
• Username and encrypted account password.
• Country of residence — Pakistan.

Identity Verification Documents

• Copy of CNIC, passport or other government-issued ID when requested for account verification or large withdrawal processing.
• Proof of payment method ownership where required to confirm a deposit or withdrawal is from an account in your name.

Transaction and Payment Data

• Deposit and withdrawal history including amounts in PKR, dates and payment method used (JazzCash, Easypaisa, Raast, bank transfer or card).
• Partial payment identifiers such as masked account numbers — full payment credentials are handled by your payment provider and are not stored on yy999 servers.

Gaming Activity Data

• Games played, bet amounts, win and loss records, session durations and bonus usage history.
• Login timestamps, IP addresses and device type — used for security monitoring and fraud prevention.
• Responsible gaming tool settings such as deposit limits or self-exclusion status.

Support and Communication Data

• Messages sent to our support team via live chat or email, including the content and timestamps.
• Records of any disputes, complaints or account review requests.

03 How We Use Your Data

Every piece of data yy999 collects has a specific purpose. We do not collect information speculatively. The main purposes for which we process your personal data are:

Where we rely on your consent to send promotional messages, you can withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawing consent for marketing does not affect the processing of data needed to operate your account.

04 Payment Data and PKR Transactions

yy999 processes all player transactions in Pakistani Rupees (PKR). When you deposit or withdraw using JazzCash, Easypaisa, Raast, bank transfer or a debit/credit card, the actual payment processing is carried out by the relevant payment provider.

Here is how payment data flows:

• When you initiate a deposit, you are redirected to or interact with your chosen payment provider's interface. The full credentials you enter — such as your JazzCash PIN or mobile banking details — are processed directly by that provider and are never seen or stored by yy999.
• yy999 receives a confirmation of the transaction outcome (success or failure), the amount in PKR, and a masked reference to the payment method used (for example, a partially redacted mobile number).
• This transaction record is stored on your yy999 account to maintain an accurate balance and withdrawal history.
• For bank transfers and card payments, similarly only transaction references and amounts are retained — not full account or card numbers.

For large withdrawals, yy999 may ask you to confirm the payment method you are withdrawing to belongs to you. This is a one-time check done to protect you from unauthorised withdrawal requests and does not involve storing additional sensitive payment data beyond what is already on record.

05 Sharing with Third Parties

yy999 does not sell, rent or share your personal data for third-party marketing. We share limited data only where it is necessary to operate the platform, comply with fraud prevention requirements, or fulfil our obligations to you.

The categories of third parties we work with, and the data shared, are as follows:

Payment Processors

JazzCash, Easypaisa, Raast infrastructure providers, acquiring banks and card networks receive the minimum data required to process your PKR deposit or withdrawal — typically your registered mobile number or partial account reference along with the transaction amount and reference ID.

Identity Verification Services

Where account verification requires checking a CNIC or passport, we may use a third-party identity verification service to cross-check the document. These services operate under strict data handling agreements and do not retain your documents beyond the verification process.

Fraud Prevention and Security

yy999 uses industry-standard fraud detection tools. These systems process login metadata, device fingerprints and transaction patterns to flag unusual activity. Data shared with these tools is anonymised or pseudonymised where possible.

Platform and Technology Providers

Game studios, software providers and hosting infrastructure that power yy999 may have access to aggregated or pseudonymised platform usage data for the purpose of operating and improving the platform. They are not permitted to use this data for any other purpose.

06 Cookies and Tracking

yy999 uses cookies — small text files stored in your browser — to make the platform work properly and to give you a better experience. We do not use advertising networks or third-party tracking pixels that follow you around other websites.

The types of cookies used on yy999 are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in while you navigate between pages. You cannot opt out of essential cookies without also losing platform functionality.
• Preference cookies: Remember settings you have chosen, such as preferred language or display preferences, so you do not have to set them again each visit.
• Analytics cookies: Help us understand how the platform is being used in aggregate — which pages are visited most, where users encounter issues, and how the overall experience can be improved. Data collected through analytics cookies is aggregated and does not identify you personally.
• Security cookies: Used to detect and prevent fraudulent login attempts, credential stuffing and other account security threats.

You can manage or delete cookies through your browser settings at any time. Clearing all cookies will log you out of your yy999 session. Most modern browsers also allow you to block specific categories of cookies while allowing essential ones to function.

07 Data Retention

yy999 keeps your personal data for as long as your account remains active and for a defined period after account closure. Retention periods vary depending on the type of data and the reason it was collected:

• Account and identity data: Retained for the lifetime of your account plus a period after closure to meet record-keeping obligations and handle any outstanding queries or disputes.
• Transaction records: PKR deposit and withdrawal history is retained for an extended period to support financial record-keeping, dispute resolution and fraud investigation.
• Gaming activity logs: Session and gameplay records are retained for a reasonable period and may be used for responsible gaming monitoring, fraud investigation or dispute resolution.
• Support communications: Records of customer support conversations are retained for a period sufficient to manage ongoing issues and improve service quality.
• Identity verification documents: Copies of CNIC or passport submitted for verification are retained only as long as legally required and are securely deleted thereafter.

When data is no longer needed and retention periods have expired, it is securely deleted or anonymised so it can no longer be linked back to you as an individual.

08 Security Measures

Protecting your personal data is something we invest in actively. The security measures in place at yy999 include:

• Encryption in transit: All data transmitted between your browser or app and yy999 servers is encrypted using TLS. You will see HTTPS in your browser address bar when using the platform.
• Encryption at rest: Personal data stored on yy999 servers is encrypted. Even in the unlikely event of a server compromise, data would not be readable in plain text.
• Password hashing: Your account password is never stored in plain text. We use strong one-way hashing so that even yy999 staff cannot retrieve your original password.
• Access controls: Access to personal data within yy999's internal systems is restricted on a need-to-know basis. Staff members only have access to data relevant to their role.
• Login monitoring: Unusual login activity — such as access from an unfamiliar device or location — triggers additional verification steps to protect your account.
• Fraud detection systems: Automated systems monitor transaction patterns and account activity continuously to detect and respond to suspicious behaviour quickly.

While we take strong precautions, no digital system is completely immune to risk. If you notice unusual activity on your account — transactions you did not make, login alerts you did not trigger, or messages you did not send — contact support immediately and change your password.

09 Your Rights Over Your Data

You have a number of rights in relation to the personal data yy999 holds about you. These rights are available to all Pakistan players and can be exercised by contacting our support team:

• Right to access: You can request a copy of the personal data we hold about your account. We will provide this in a readable format within a reasonable timeframe.
• Right to correction: If any information in your account is inaccurate or out of date, you can request that we update it. For most basic details like contact information, you can update these directly in your account settings.
• Right to deletion: You can request that your account and associated personal data be deleted. This is subject to us first completing any outstanding transactions and ensuring there are no unresolved issues on the account. Some data may be retained for a period after deletion to meet record-keeping obligations.
• Right to restrict processing: In certain circumstances, you can ask us to limit how we use your data — for example while a query or complaint is under investigation.
• Right to withdraw consent: Where processing is based on your consent — such as receiving promotional emails — you can withdraw that consent at any time without affecting other aspects of your account.
• Right to data portability: You can request your account data in a structured, machine-readable format if you wish to transfer it elsewhere.

10 Minors and Age Verification

yy999 is strictly an adult platform. You must be 18 years of age or older to register, deposit or play. We do not knowingly collect personal data from anyone under 18.

Age verification is carried out at registration through date of birth entry and, where required, by reviewing a copy of a government-issued ID such as a CNIC. If we have reason to believe an account belongs to someone under 18, the account will be suspended immediately pending investigation.

If you are a parent or guardian and believe a minor has registered on yy999 using your details or independently, please contact our support team immediately. We take these reports seriously and act on them without delay.

11 Policy Updates

yy999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable requirements, or improvements to how we communicate our practices to you.

When we make material changes — changes that affect your rights or how we handle your data in a significant way — we will notify registered account holders via email or an in-platform notification ahead of the change taking effect.

Minor updates, such as clarifications, wording improvements or corrections that do not affect your rights, may be made without individual notice. The "Last Updated" date at the top of this page always reflects the current version.

If you continue to use yy999 after a policy update has been communicated, your continued use constitutes acceptance of the revised policy. If you do not agree with a change, please stop using the platform and contact support to close your account before the change takes effect.

12 Contact and Data Requests

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to report a privacy concern, please get in touch with our support team. We handle all privacy-related queries with confidentiality and aim to respond promptly.

• Email: [email protected] (plain text only — do not send sensitive documents via email without being asked to by our team)
• Live Chat: Available 24/7 within your logged-in account. This is the fastest way to reach us for urgent queries.
• FAQ: Visit our FAQ page for answers to common questions about accounts, payments and privacy.

For data deletion requests or requests to receive a copy of your personal data, please use live chat or email so that we can verify your identity before acting on the request. This step is in place to protect you — we want to make sure your data is only shared with or deleted at the request of the actual account holder.