y999com Privacy Policy

1 Introduction

This Privacy Policy applies to all personal data collected and processed by y999com in connection with your use of the y999com platform located at y999com.net, including all casino games, sports betting markets, live dealer tables, account management features, and customer support services.

y999com is committed to handling personal data in a manner that is transparent, fair, and consistent with internationally recognised data protection principles. This Policy is intended to give you a clear understanding of your privacy rights and the obligations y999com holds in respect of your personal information at every stage of your account relationship with the platform.

By registering an account with y999com or by continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood the practices described in this document. If you disagree with any part of this Policy, you should discontinue use of the y999com platform and contact support to arrange account closure.

2 Data Controller

For the purposes of this Privacy Policy, y999com acts as the data controller in respect of the personal data it collects from registered players and platform visitors. As data controller, y999com determines the purposes for which personal data is processed and the means by which that processing is carried out.

y999com operates under international gaming licence standards and processes personal data in accordance with applicable international data protection frameworks. All data processing activities carried out by y999com are documented, reviewed periodically, and aligned with the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

3 Data We Collect

y999com collects personal data across several categories depending on how you interact with the platform. The specific data collected may vary based on the services you use and the verification requirements applicable to your account at any given time.

y999com does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where expressly required for responsible gaming intervention purposes, in which case such data is handled with heightened protection measures.

4 How We Collect Your Data

y999com collects personal data through the following methods:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotional activities.
• Automated collection: Technical data collected automatically when you access the y999com platform, including IP address, device identifiers, and session data gathered through cookies and similar tracking technologies.
• Third-party sources: Identity and address verification data provided by KYC and AML compliance service providers engaged by y999com to assist with the verification process. Payment data provided by payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in connection with your transactions.
• Blockchain data: Publicly available on-chain transaction data associated with cryptocurrency wallet addresses linked to your y999com account, collected for AML compliance purposes.

5 How We Use Your Data

y999com uses the personal data it collects for the following purposes:

• To create, manage, and maintain your y999com account, including processing deposits, withdrawals, and bet settlements.
• To verify your identity and age in accordance with y999com's KYC obligations and to prevent underage access to the platform.
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, and other prohibited activities on the platform.
• To monitor your gambling behaviour for the purposes of responsible gaming intervention, including identifying patterns that may indicate problem gambling and proactively reaching out where appropriate.
• To provide customer support, including responding to queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• To send transactional communications relating to your account, including deposit confirmations, withdrawal notifications, and security alerts.
• To send promotional communications about y999com bonuses and offers, where you have consented to receive such communications. You may opt out of marketing communications at any time by contacting support.
• To comply with applicable legal and regulatory obligations, including anti-money laundering legislation, tax reporting requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• To improve the y999com platform, including analysing aggregated, anonymised usage data to understand how players interact with the platform and to identify areas for product improvement.

6 Legal Basis for Processing

y999com processes personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to fulfil the contract between you and y999com, including account management, transaction processing, and the provision of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML compliance, and responses to lawful regulatory requests.
• Legitimate interests: Processing carried out in pursuit of y999com's legitimate business interests, including fraud prevention, security monitoring, responsible gaming oversight, and platform improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in the context of marketing communications. Where consent is the basis for processing, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing & Disclosure

y999com does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your data may be shared in the following limited circumstances only:

• Service providers: Third-party providers engaged by y999com to assist with KYC verification, payment processing, fraud detection, customer support infrastructure, and IT services. These providers are contractually bound to process your data only on y999com's instructions and in accordance with applicable data protection standards.
• Payment processors: Financial institutions and mobile wallet operators including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, to the extent necessary to process your deposits and withdrawals.
• Regulatory and law enforcement authorities: Where y999com is required by applicable law, court order, or regulatory direction to disclose personal data. y999com will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of y999com's business or assets, personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to the applicable privacy policy in advance where reasonably practicable.

In all cases, y999com takes reasonable steps to ensure that third parties to whom personal data is disclosed maintain appropriate data protection standards.

8 Cookies & Tracking Technologies

y999com uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and gather analytical data about how the platform is used. The categories of cookies used by y999com include the following:

• Strictly necessary cookies: Essential for the operation of the y999com platform. These cookies enable core functionality such as account login, session management, and security features. They cannot be disabled without significantly impairing the platform's operation.
• Functional cookies: Used to remember your preferences and settings, such as language preferences and display options, to improve your experience on the platform.
• Analytical cookies: Used to collect anonymised data about how visitors interact with the y999com platform, including pages visited, time spent, and navigation patterns. This data is used solely for internal platform improvement purposes.
• Security cookies: Used to support fraud detection and security monitoring activities, including identifying unusual login patterns or suspicious account activity.

You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the y999com platform. y999com does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.

9 Data Security

y999com implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL encryption for all data transmitted between your device and the y999com platform.
• Secure, access-controlled server infrastructure with restricted personnel access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability monitoring of the y999com platform and associated systems.
• Incident response procedures designed to detect, contain, and notify affected individuals of any personal data breaches in a timely manner.
• Staff training on data protection obligations and secure data handling practices.

While y999com takes data security seriously and applies industry-standard protections, no internet-based platform can guarantee absolute security. You are also responsible for keeping your y999com account credentials secure and for notifying support immediately if you suspect your account has been accessed without your authorisation.

10 Data Retention

y999com retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The general retention principles applied by y999com are as follows:

• Active accounts: Personal data associated with active y999com accounts is retained for the duration of the account relationship and used on an ongoing basis for the purposes described in this Policy.
• Closed accounts: Following account closure, y999com retains account data — including identity, financial, and transaction records — for a period consistent with applicable AML, responsible gaming, and regulatory compliance obligations. This retention period is typically a minimum of five years from the date of account closure.
• Support communications: Customer support records are retained for a reasonable period to enable dispute resolution and quality assurance review.
• Technical and analytical data: Anonymised or aggregated analytical data may be retained indefinitely as it no longer constitutes personal data once it has been anonymised beyond re-identification.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

11 Your Rights

Subject to applicable law and certain limitations, you have the following rights in respect of the personal data y999com holds about you:

• Right of access: You may request a copy of the personal data y999com holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by y999com.
• Right to erasure: You may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires its retention.
• Right to restriction: You may request that y999com restrict its processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to object: You may object to the processing of your personal data where that processing is based on y999com's legitimate interests, subject to y999com demonstrating compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: In certain circumstances, you may request that personal data you have provided to y999com be transferred to you or to another service provider in a structured, machine-readable format.

To exercise any of these rights, please contact the y999com support team via live chat from within your account dashboard or by email. y999com will respond to all valid requests within a reasonable timeframe. y999com may need to verify your identity before processing a rights request to ensure that personal data is not disclosed to an unauthorised party.

12 Children & Minors

The y999com platform is strictly for adults aged 21 years and over. y999com does not knowingly collect or process personal data from individuals under the age of 21. Age verification procedures are in place to help prevent minors from accessing the platform.

If y999com becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be closed immediately, all associated data will be deleted or anonymised as quickly as practically possible, and the matter will be escalated through y999com's responsible gaming procedures.

If you believe that a minor has registered an account on y999com, please notify the support team immediately so that appropriate action can be taken without delay.

13 International Data Transfers

y999com operates under international gaming licence standards and may, in the course of its operations, transfer personal data to service providers or infrastructure providers located outside of Pakistan. Where such transfers occur, y999com takes steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with the principles described in this Policy.

Safeguards used by y999com for international transfers may include contractual clauses that impose data protection obligations equivalent to those applied within the platform's primary operating jurisdiction, and the selection of service providers who maintain recognised data protection certifications or comply with internationally accepted data protection frameworks.

14 Third-Party Links

The y999com platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to data processed by y999com in connection with your use of the y999com platform. y999com is not responsible for the privacy practices of any third-party website or service and makes no representations regarding the data protection standards of external platforms.

You are encouraged to review the privacy policy of any third-party platform before providing personal data to it. The presence of a link to a third-party site on the y999com platform does not constitute an endorsement of that site's data practices.

15 Changes to This Policy

y999com reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or the way in which y999com operates its platform. Where a material change is made to this Policy, y999com will provide reasonable notice to registered players via the platform or by email.

The date at the top of this Policy reflects the most recent revision. You are encouraged to review this Policy periodically to stay informed about how y999com handles your personal data. Your continued use of the y999com platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which y999com processes your personal data, please get in touch using the following contact details:

• Live Chat: Available 24/7 from within your y999com account dashboard. This is the fastest and most direct route to the support team, with peak staffing during Pakistan Standard Time (PKT, UTC+5).
• Email: [email protected] — please allow up to 24 hours for a response to email enquiries.

When submitting a data rights request, please include your registered email address and a clear description of your request to help the team process it as efficiently as possible. y999com may need to verify your identity before actioning a data access or deletion request.