y999cc Privacy
Policy

Section 01

Who We Are

y999cc is an online casino and sports betting platform accessible at y999cc.org, operated under international gaming licensing standards. For the purposes of this Privacy Policy, y999cc acts as the data controller in respect of the personal information you provide when registering an account, verifying your identity, making deposits and withdrawals in PKR, and using any feature of the platform.

This Privacy Policy applies to all personal data collected from players accessing y999cc from Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, and all other cities across the country — as well as any other jurisdiction from which the platform is accessible. It covers data collected via the y999cc website, mobile-optimised browser interface, and any communications you exchange with our support team.

If you have any questions about how y999cc handles your personal data, you can reach our support team 24/7 via live chat on the platform, or in writing at [email protected].

Section 02

Personal Data We Collect

y999cc collects personal data through several different touchpoints during your use of the platform. The categories of data we collect, and the circumstances under which they are collected, are set out below.

Section 03

How We Use Your Personal Data

y999cc uses the personal data we collect for the following specific purposes:

1. Account Management: To create and maintain your y999cc player account, authenticate your identity at login, and enable you to access all platform features including the casino lobby, sportsbook, and cashier.
2. Identity & Age Verification: To verify that you are who you say you are and that you are at least 21 years of age, as required under our responsible gaming policy and international gaming licensing obligations.
3. Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and MCB, and to maintain accurate financial records in compliance with anti-money laundering requirements.
4. Regulatory Compliance: To fulfil our obligations under applicable international gaming licensing standards, including AML checks, transaction monitoring, and reporting obligations. y999cc may be legally required to retain and disclose certain data to regulatory authorities.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and any other prohibited activities that could harm players or the integrity of the platform.
6. Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with your account — including responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
7. Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to proactively reach out or apply protective measures where our responsible gaming framework requires us to do so.
8. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have opted in to receive such communications. You may opt out at any time.
9. Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform, identify areas for improvement, and develop new features and game offerings.

Section 04

Legal Basis for Processing

y999cc processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: The majority of data processing by y999cc is necessary for the performance of the contract between you and y999cc — specifically, your account registration agreement and the Terms and Conditions you accepted upon joining. Without this processing, we cannot operate your account or provide our services.
• Legal Obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, and retention of financial records — are required by applicable international gaming licensing regulations and anti-money laundering frameworks. y999cc must process this data regardless of consent.
• Legitimate Interests: y999cc processes technical and security data (IP addresses, device fingerprints, session logs) on the basis of its legitimate interest in preventing fraud, detecting prohibited activity, and maintaining platform security. This processing does not override your privacy rights.
• Consent: Marketing communications — including promotional emails and SMS bonus alerts — are sent only where you have given your explicit consent during registration or via your account notification settings. You may withdraw consent at any time by updating your preferences in your account dashboard or by contacting support.

Section 05

Sharing Your Personal Data

y999cc does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose identified.

• Payment Processors: Your financial data is shared with the relevant payment providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB) solely to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial data protection regulations.
• KYC & Identity Verification Providers: Where y999cc uses a third-party identity verification service to assist with CNIC verification and age checks, your submitted documents are shared with that provider under a strict data processing agreement that prohibits any secondary use of your data.
• Game Software Suppliers: Your player ID and relevant gaming activity data may be shared with game suppliers such as Pragmatic Play, PG Soft, and Evolution Gaming to enable game functionality, resolve game disputes, and ensure the integrity of RNG certification. These suppliers do not receive your financial or identity documentation.
• Regulatory Authorities: y999cc may be required by law or by the terms of its gaming licence to disclose player data to regulatory authorities, law enforcement bodies, or financial intelligence units. Such disclosures are made only where legally compelled and will be limited to what is specifically required.
• Professional Advisors: y999cc's legal, compliance, and auditing advisors may access anonymised or aggregated account data as necessary to provide professional services. Access to identifiable personal data by advisors is subject to strict confidentiality obligations.

Section 06

Cookies & Tracking Technologies

y999cc uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, remember your preferences, and gather anonymised analytics data to improve the platform experience for players across Pakistan.

The categories of cookies y999cc uses are:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your authenticated session, prevent cross-site request forgery attacks, and enable core cashier and game lobby functionality. These cookies cannot be disabled without preventing the platform from operating correctly.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players navigate the platform — including which pages are visited most frequently and where error messages are encountered. This data is used solely to improve platform performance and user experience. No personally identifiable information is included in analytics data.
• Functional Cookies: These cookies remember your preferences such as language settings, display preferences, and responsible gaming tool configurations so you do not need to reset them on every visit.
• Marketing Cookies: Where you have consented to marketing communications, cookies may be used to track which promotional offers you have seen or interacted with, to avoid showing you the same offer repeatedly. You may opt out of marketing cookies at any time via your account preferences.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your y999cc account and using the platform.

Section 07

Data Security

y999cc implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• AES-256 encryption for all personal data stored at rest on y999cc servers.
• TLS 1.3 encryption for all data transmitted between your browser or device and the y999cc platform.
• Multi-factor authentication options for player accounts, including SMS-based 2FA.
• Strict role-based access controls ensuring that y999cc staff can only access the personal data categories relevant to their specific job function.
• Segregated storage of KYC documentation in an access-controlled environment with full audit logging of every access event.
• Regular third-party penetration testing and security audits of the y999cc platform infrastructure.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity for immediate review.

Section 08

Data Retention Periods

y999cc retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is either securely deleted from y999cc systems or permanently anonymised so that it can no longer be linked to any individual player.

Section 09

Your Privacy Rights

As a registered player on y999cc, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data y999cc holds about you. We will provide this in a clear, structured format within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Some corrections — such as changes to your registered name — may require supporting documentation such as an updated CNIC.
• Right to Erasure: You may request that y999cc delete your personal data. We will action this request where permitted — however, data that must be retained for regulatory, AML, or dispute resolution purposes cannot be deleted before the applicable retention period expires.
• Right to Restrict Processing: You may request that y999cc restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data we hold, while we investigate your dispute.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you provided to y999cc, which you may transfer to another service provider if you wish.
• Right to Object: You may object to processing based on legitimate interests — including direct marketing. Where you object to marketing, we will cease all marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing emails — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Section 10

Minors & Our 21+ Policy

y999cc's platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from persons under the age of 21 and we take active measures to prevent underage access through our KYC age verification process, which requires CNIC-based confirmation of age before any withdrawal is processed.

If y999cc discovers that personal data has been submitted by a person under the age of 21, that account will be immediately suspended, all funds will be held pending investigation, and the personal data submitted will be securely deleted or transferred to appropriate authorities where required.

Section 11

International Data Transfers

y999cc's platform and data infrastructure may involve the transfer and processing of your personal data in jurisdictions outside Pakistan. Where such transfers occur, y999cc ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards for international data transfers used by y999cc include: contractual data processing agreements with all third-party processors that bind them to equivalent data protection standards; selection of processors located in jurisdictions with recognised adequate data protection frameworks; and technical and organisational security measures applied consistently regardless of processing location.

Game software providers such as Pragmatic Play, PG Soft, and Evolution Gaming operate global infrastructure. Player activity data shared with these providers for game functionality purposes is subject to the same contractual protections described above.

Section 12

Changes to This Privacy Policy

y999cc reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, regulatory requirements, or applicable law. The effective date and version number displayed at the top of this document will be updated whenever a new version is published.

Material changes to this Privacy Policy — such as new categories of data being collected, new sharing arrangements with third parties, or significant changes to retention periods — will be communicated to registered players via email at least 7 days before the changes take effect.

Your continued use of the y999cc platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated policy, you should contact our support team to request account closure and withdrawal of your remaining balance before the effective date.

Section 13

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or y999cc's handling of your personal data, our team is here to help. We aim to respond to all privacy-related enquiries within 48 hours during Pakistan Standard Time (PST, UTC+5) business hours.

When submitting a privacy request by email, please include your registered username and a clear description of your request so our team can locate your account and assist you as efficiently as possible. Do not include your full password or CNIC number in any email communication.