y999c Privacy Policy — Your Data, Protected

y999c ("we", "us", "our") is committed to protecting the personal data of all users ("you", "Player") who access and use the y999c online casino and sports betting platform at y999c.org. This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by y999c.

y999c operates its gaming and betting services under international gaming standards. As part of our licensing obligations, we are required to collect and retain certain personal information about our players for identity verification, anti-money laundering (AML) compliance, responsible gaming enforcement, and fraud prevention purposes.

We understand that Pakistani players value their privacy, and we have designed our data practices to be as transparent and minimal as possible — collecting only what is genuinely needed to provide you with a secure, fair, and enjoyable gaming experience on y999c.

y999c collects the following categories of personal data in connection with your account and use of our platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming assessments conducted at your request.

y999c collects personal data through the following methods:

• Direct interactions: Data you provide when registering your y999c account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically as you navigate the y999c platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity and age verification data received from third-party KYC verification providers; fraud risk data from anti-fraud intelligence services; payment confirmation data from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• Publicly available sources: In limited circumstances, y999c may verify information against publicly available records as part of our AML and due diligence obligations.

y999c uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your y999c player account, including password resets, 2FA, and account recovery.
• Identity & age verification: Confirming that you meet y999c's 21+ age requirement and verifying your identity in accordance with our KYC obligations prior to processing withdrawals.
• Payment processing: Facilitating deposits and withdrawals via your chosen Pakistani payment method, and maintaining records of all financial transactions for regulatory compliance.
• Fraud prevention & security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeovers, bonus abuse, and other forms of platform abuse.
• Responsible gaming: Monitoring your gaming activity to identify patterns that may indicate problem gambling behaviour, and applying any self-imposed limits or exclusions you have requested.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Platform improvement: Analysing aggregated usage data to improve the y999c platform experience, fix bugs, and develop new features relevant to Pakistani players.
• Marketing communications: Sending you bonus offers, promotions, and platform updates where you have opted in to receive such communications. You may opt out at any time.
• Legal compliance: Meeting our obligations under applicable anti-money laundering, gaming regulation, and data protection laws.

y999c processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and y999c — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing necessary for y999c to comply with applicable legal requirements, including AML regulations, KYC obligations, and gaming licence conditions, is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of y999c's legitimate interests, balanced against your privacy rights.
• Consent: Processing for optional marketing communications and non-essential cookies is carried out only where you have provided your explicit, informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

y999c does not sell your personal data to any third party. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purposes:

• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and meet our regulatory obligations.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers used to process your deposits and withdrawals.
• Fraud prevention services: Anti-fraud and AML intelligence platforms that help y999c identify and prevent financial crime on the platform.
• Technology providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on behalf of y999c under strict data processing agreements.
• Regulatory authorities: Gaming regulators, financial intelligence units, and law enforcement agencies where disclosure is required by applicable law or court order.
• Professional advisers: Lawyers, auditors, and compliance consultants where necessary for the protection of y999c's legal rights or the fulfilment of regulatory obligations.

y999c retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, or reporting requirements. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial crime prevention regulations.
• Customer support communications: Retained for three (3) years following resolution of the relevant enquiry or dispute.
• Marketing preference records: Retained until you opt out of marketing communications, plus an additional period as required for compliance audit purposes.
• Technical and usage data: Anonymised or deleted within twelve (12) months of collection unless retained in aggregate, anonymised form for analytics purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents reconstruction of your identity.

y999c implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and y999c's servers.
• At-rest encryption for all sensitive personal data stored in y999c's databases, including identity documents and financial records.
• Two-factor authentication (2FA) available to all players via their registered Pakistani mobile number, providing an additional layer of account security.
• Role-based access controls ensuring that y999c staff can only access the minimum personal data necessary for their specific job function.
• Regular security audits and penetration testing of the y999c platform infrastructure by qualified cybersecurity professionals.
• Intrusion detection systems monitoring y999c's network for anomalous activity and potential data breach attempts in real time.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, y999c will notify affected players and the relevant regulatory authority in accordance with applicable data breach notification obligations.

y999c uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how players use our services. The following categories of cookies are used on y999c:

You can manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies may impair the functionality of the y999c platform. Disabling analytics or marketing cookies will not affect your ability to play games or access your account.

As a y999c player, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting our support team at [email protected]:

y999c will respond to all verified data rights requests within thirty (30) days of receipt. Where a request is complex or there are a high number of requests, this period may be extended by a further sixty (60) days with notification to you. y999c will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

If you are a parent or guardian and believe that your child has registered on y999c or provided personal data to y999c without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action, including account closure and data deletion, without delay.

y999c operates globally and may transfer your personal data to servers or service providers located outside Pakistan. Where such transfers occur, y999c ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy.

Safeguards used by y999c for international data transfers include standard contractual clauses, data processing agreements containing binding obligations on recipient parties, and transfers to jurisdictions that maintain adequate data protection standards under applicable international frameworks.

The y999c platform may contain links to or integrations with third-party services, including game software providers, live dealer studios, and payment gateways. These third parties operate their own independent privacy policies, and y999c is not responsible for the data practices of any third-party operator.

When you use a third-party payment method such as JazzCash or EasyPaisa to fund your y999c account, that payment provider's own privacy policy and terms of service apply to the transaction. y999c recommends that you review the privacy notices of any third-party services you interact with through the y999c platform.

y999c reserves the right to update or modify this Privacy Policy at any time. Where changes are material — for example, where we intend to use your personal data for a new purpose not previously disclosed — we will provide advance notice by email or via an on-platform notification before the changes take effect.

The effective date at the top of this Policy will be updated each time a revision is made. We encourage you to review this Policy periodically to stay informed of how y999c is protecting your personal data. Your continued use of y999c following the publication of a revised Policy constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how y999c has handled your personal data, please get in touch with our support team. We are available 24/7 in both English and Urdu.

If you are not satisfied with y999c's response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection or gaming supervisory authority in your jurisdiction. y999c takes all privacy complaints seriously and will work in good faith to resolve any issues raised.