y99999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out how y99999 ("we", "us", "our") collects, uses, stores, discloses and otherwise processes personal data when you access or use the y99999 platform at https://y99999.cam (the "Service"). It also explains your rights in relation to your personal data and how you may exercise them.

By accessing or using the Service, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Service and may request account closure in accordance with our Terms & Conditions.

This Policy should be read together with our Terms & Conditions. In the event of any inconsistency, the Terms & Conditions shall prevail on matters of contract, and this Policy shall prevail on matters of personal data processing.

2 Definitions

In this Policy, the following terms carry the meanings set out below:

3 Data Controller Information

y99999 is the Data Controller responsible for the personal data processed in connection with the Service. As Data Controller, we determine the purposes for which your data is collected and the means by which it is processed.

Where third-party service providers (payment processors, KYC verification platforms, analytics providers) process personal data on our behalf, they do so as Data Processors under contractual arrangements that require them to handle data in accordance with our instructions and applicable data protection standards.

4 Personal Data We Collect

y99999 collects personal data through several channels — directly from you when you register or use the Service, automatically through your interaction with the platform, and in some cases from third-party sources such as KYC verification providers.

4.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar), mobile number and chosen account credentials.
• KYC documentation: Copies of government-issued photo identification (e.g., Pakistani CNIC, passport, driving licence), proof of address and, where required, source of funds documentation.
• Payment data: Payment method details, transaction amounts in PKR or other currencies, and payment account references. Full card or wallet credentials are handled by third-party payment processors and are not stored directly by y99999.
• Communications: Content of messages submitted via Live Chat, email or any support contact form, including details of your enquiry.
• Responsible gambling preferences: Deposit limits, loss limits, session time limits and self-exclusion requests submitted through your account.

4.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, screen resolution, device identifiers and time zone.
• Usage data: Pages visited, features accessed, session duration, click patterns, search queries submitted within the platform and error logs.
• Transaction logs: Records of all deposits, withdrawals, wagers, game sessions and bonus activations associated with your account.
• Cookie data: Session identifiers, preference settings and analytics data collected via cookies and similar tracking technologies as described in Section 11.

4.3 Data from Third Parties

• KYC/AML verification providers: Identity verification results, document authenticity checks and sanctions screening outcomes.
• Payment processors: Transaction status confirmations and fraud risk assessments from payment gateway providers. Payment provider names referenced on this platform (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are mentioned for contextual familiarity; y99999 does not claim these providers endorse or support gambling.
• Fraud prevention services: Device fingerprinting data and behavioural risk scores from fraud detection providers.

5 How We Use Your Personal Data

y99999 uses personal data for the following clearly defined purposes:

6 Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, y99999 relies on one or more of the following grounds:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions and deliver the Service as described in the Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, KYC requirements and regulatory reporting obligations.
• Legitimate interests: Processing carried out for purposes that are in our legitimate business interests and not overridden by your rights — including fraud prevention, security monitoring and platform analytics.
• Consent: Processing for purposes where you have provided freely given, specific and informed consent — such as receiving marketing communications. You may withdraw consent at any time by contacting support or using in-account preference settings.

7 Data Sharing & Disclosure

y99999 does not sell your personal data. We share personal data with third parties only to the extent necessary and in accordance with this Policy:

• Service providers and processors: Third-party vendors engaged to process data on our behalf — including KYC/AML verification platforms, payment processing providers, fraud detection services, IT infrastructure providers and customer support systems. These parties are contractually obligated to process data only on our instructions and to maintain appropriate security standards.
• Regulatory and law enforcement authorities: Where required by law, court order or lawful request from a competent authority, y99999 may disclose personal data. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, asset sale or restructuring of y99999, personal data may be transferred to the successor entity, subject to equivalent privacy protections.
• Fraud prevention networks: Aggregated fraud risk indicators may be shared with industry fraud-prevention services where necessary to protect the platform and its users from financial crime.

8 International Data Transfers

y99999 operates as an international online platform. Your personal data may be transferred to and processed in countries other than Pakistan, including countries where the data protection laws may differ from those in your home jurisdiction.

Where personal data is transferred internationally, y99999 takes steps to ensure that appropriate safeguards are in place — including contractual arrangements with processors that impose data protection obligations equivalent to applicable standards. Where required, standard contractual clauses or other recognised transfer mechanisms are used.

By using the Service and providing personal data, you acknowledge that your data may be transferred to and processed in jurisdictions outside Pakistan.

9 Data Retention

y99999 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the following retention considerations:

• Active accounts: Personal data is retained for the duration of your account relationship with y99999 and as necessary to provide the Service.
• Closed accounts: Following account closure, certain categories of data — including identity verification records, transaction histories and KYC documentation — are retained for a minimum period as required by applicable AML/CTF regulations and financial record-keeping obligations. This period is commonly five (5) years from the date of account closure, but may be longer where law requires.
• Support communications: Records of customer support interactions are retained for a period sufficient to manage any ongoing complaints or disputes.
• Marketing data: Where you have consented to marketing communications, your contact preferences are retained until you withdraw consent, after which your data is removed from active marketing lists.

Where personal data is no longer required, it is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

10 Security Measures

y99999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the y99999 platform
• Encryption of sensitive data fields at rest within our databases
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security assessments and monitoring of platform infrastructure
• Two-factor authentication options available to users for account login
• Vendor due diligence processes for third-party processors handling personal data on our behalf

While we apply these measures diligently, no online service can guarantee absolute security. Users are responsible for maintaining the security of their own account credentials. If you suspect unauthorised access to your account, contact support immediately at the details in Section 16.

11 Cookies & Tracking Technologies

y99999 uses cookies and similar client-side technologies to operate platform functionality, maintain session state and analyse user behaviour in aggregate. The following categories of cookies are used:

11.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled without affecting core functionality. They include session cookies that maintain your logged-in state, security tokens and load-balancing identifiers. No personal data is shared with third parties via strictly necessary cookies.

11.2 Functional Cookies

Functional cookies remember your preferences — such as language settings, currency display (PKR) and notification preferences — to personalise your experience. These cookies do not track browsing outside of the y99999 platform.

11.3 Analytics Cookies

Analytics cookies collect aggregated, anonymised data about how users interact with the platform — which pages are visited most frequently, where users encounter errors, and how navigation flows are used. This data is used to improve platform quality and user experience. Where third-party analytics tools are used, they are configured to anonymise IP addresses and are not permitted to use y99999 user data for their own purposes.

11.4 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies or receive a notification when a cookie is set. Note that disabling certain cookies — particularly strictly necessary and functional cookies — may impair your ability to use the Service. For detailed instructions on managing cookies in your browser, consult your browser's help documentation.

12 Your Rights Regarding Personal Data

Subject to applicable law and our legitimate legal obligations, you have the following rights in relation to your personal data held by y99999:

• Right of access: You may request confirmation of whether y99999 processes personal data about you and, if so, a copy of that data along with information about how it is being processed.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data. For basic account details, you may update information directly in your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis for processing), or where processing is otherwise unlawful. This right is subject to retention obligations under applicable AML/CTF and financial regulation requirements.
• Right to restriction: You may request that y99999 restrict processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing for that purpose promptly.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details set out in Section 16. We will respond to all valid requests within a reasonable period and in accordance with applicable law. We may need to verify your identity before processing certain requests.

13 Minors and Age Restriction

The y99999 Service is strictly intended for adults. We do not knowingly collect or process personal data from individuals under the age of 18 — or under the higher minimum age required by the applicable operator license jurisdiction — and we do not permit minors to register accounts or use any features of the Service.

Where we discover that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. Any deposits made by a minor will be handled in accordance with applicable law, which may include forfeiture.

If you have reason to believe that a minor has provided personal data to y99999 or has registered an account on the platform, please contact us immediately at the details in Section 16.

14 Third-Party Services and Links

The y99999 platform may reference third-party payment methods, sports leagues and other services for contextual purposes. These references do not constitute links to or endorsements of those third parties' platforms or their privacy practices.

Where you interact with a third-party service in connection with the y99999 platform — such as a payment processor handling a PKR deposit or withdrawal — your data will also be subject to that provider's own privacy policy. y99999 is not responsible for the privacy practices of third-party services. Users are encouraged to review the privacy policies of any third-party providers they engage with.

15 Amendments to This Policy

y99999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or operational requirements. The "Last reviewed" date at the top of this document will be updated to reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we process your personal data or your rights — we will endeavour to provide reasonable advance notice, such as a platform notification or email to registered account holders, before the revised Policy takes effect.

Your continued use of the Service following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any changes, you may request account closure in accordance with the Terms & Conditions.

16 Contact Us — Data Enquiries

For all enquiries, requests or complaints relating to this Privacy Policy or the processing of your personal data by y99999, please contact our support team:

For further information about your rights, account terms or our responsible gambling tools, please visit the relevant sections of this website:

• Terms & Conditions — account eligibility, betting rules, bonus terms
• Responsible Gambling — limits, self-exclusion and support resources
• FAQ — answers to common questions about accounts, payments and the platform