y999g Privacy Policy

This Privacy Policy ("Policy") describes how y999g ("the Company", "we", "us", "our") collects, uses, stores, and discloses personal information about users ("you", "the Player") who access or register on the y999g Platform at https://y999g.org and all associated subdomains and services.

y999g is committed to protecting the privacy and personal data of all its users — whether you are a registered player from Karachi, Lahore, Islamabad, Faisalabad, or anywhere else in Pakistan, or an international player accessing the Platform from an eligible jurisdiction. We believe that privacy is a fundamental right and not simply a compliance checkbox.

This Policy should be read in conjunction with our Terms & Conditions. By using the y999g Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

For the purposes of applicable data protection legislation, y999g acts as the data controller in respect of personal data collected through the Platform. As data controller, y999g determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests regarding the processing of your personal data, you may contact our Data Protection team using the contact details provided in Section 14 of this Policy. We aim to respond to all privacy-related enquiries within ten (10) business days.

y999g collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the Platform, and occasionally from trusted third-party verification services. The categories of data we collect are set out below.

3.1 Registration & Account Data

• Full legal name (as it appears on your CNIC or government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Username and encrypted password
• Preferred currency (PKR / USDT / BTC)

3.2 Identity Verification (KYC) Data

• Copy of CNIC (Computerised National Identity Card) or equivalent government-issued photo ID
• Proof of address (utility bill, bank statement issued within 90 days)
• Proof of payment method ownership (screenshot of JazzCash / EasyPaisa wallet, bank statement, or crypto wallet address confirmation)
• Selfie or liveness verification image where required

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, and transaction IDs
• Payment method details (JazzCash account number, EasyPaisa number, HBL/UBL/Meezan Bank account details, crypto wallet addresses)
• Currency conversion records
• Bonus crediting and wagering history

3.4 Gameplay & Betting Data

• Bet history, stake amounts, odds accepted, and outcomes
• Casino game session logs (game name, duration, result, RTP data)
• Sports markets wagered on (including PSL, international cricket, and other sports)
• In-play and pre-match betting activity

3.5 Technical & Usage Data

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser version
• Session timestamps, login history, and duration of Platform use
• Pages visited, features accessed, and navigation patterns
• Error logs and crash reports

3.6 Communications Data

• Content of live chat conversations with our support team
• Email correspondence with y999g
• Survey responses and feedback submissions

y999g processes your personal data only for clearly defined, legitimate purposes. The table below summarises the primary use cases for each category of data collected.

y999g will never use your personal data for purposes incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for processing.

y999g processes your personal data under the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to enter into or perform our contract with you, including account operation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, AML screening, and reporting obligations under our international gaming license.
• Legitimate Interests: Processing for purposes of fraud prevention, Platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time by updating your communication preferences within your account dashboard.

The y999g Platform uses cookies and similar tracking technologies to ensure its proper functioning, improve performance, and deliver a personalised experience. A cookie is a small text file stored on your device when you visit a website.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Performance & Analytics Cookies: Used to understand how players interact with the Platform — which pages are visited most, where errors occur, and how navigation flows are used. Data collected is aggregated and anonymised.
• Functional Cookies: Remember your preferences such as language settings, preferred currency display, and notification preferences so you don't have to set them on every visit.
• Marketing Cookies (Opt-In Only): Used only if you explicitly opt in, to track engagement with promotional content and tailor bonus offers relevant to your playing behaviour.

6.2 Managing Cookies

You may manage or disable non-essential cookies through the cookie preference settings available in your account dashboard or via your browser settings. Please note that disabling certain cookies may impair Platform functionality — for example, disabling functional cookies may mean your login session is not maintained between visits.

y999g does not sell or rent your personal data. We may, however, share your data with carefully selected third parties in the following circumstances:

7.1 Service Providers

We engage trusted third-party service providers to assist with Platform operations. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and crypto payment gateways), KYC and identity verification providers, fraud detection and AML screening services, cloud hosting and data storage providers, and customer support software platforms. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to y999g.

7.2 Regulatory & Legal Disclosure

y999g may disclose your personal data to regulatory authorities, law enforcement agencies, gaming licensing bodies, or courts where required by applicable law, court order, or regulatory directive. This includes disclosures required under AML legislation and international gaming license compliance obligations.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of y999g's business assets, your personal data may be transferred to the acquiring entity. You will be notified via email or a prominent notice on the Platform prior to any such transfer, and the acquiring entity will be required to honour the commitments in this Privacy Policy.

7.4 International Data Transfers

Given that y999g operates under an international gaming license and uses global cloud infrastructure, your data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, y999g ensures that appropriate safeguards — including standard contractual clauses or equivalent data protection mechanisms — are in place to protect your data.

y999g retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

y999g implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following:

• TLS/SSL Encryption: All data transmitted between your device and the y999g Platform is encrypted using industry-standard TLS 1.2 or higher protocols.
• At-Rest Encryption: Sensitive data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Password Security: User passwords are never stored in plain text. We use bcrypt hashing with a strong salt to ensure password data cannot be reverse-engineered even in the event of a data breach.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their y999g accounts for an additional layer of access security.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: y999g operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular Security Audits: The Platform undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities proactively.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, y999g will notify affected users without undue delay and in accordance with applicable data breach notification obligations.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by y999g. To exercise any of these rights, please contact our Data Protection team using the details in Section 14.

10.1 Right of Access

You have the right to request a copy of the personal data y999g holds about you, along with information about how it is processed. We will provide this in a structured, commonly used, and machine-readable format.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You may update most account details directly through your y999g account settings. For KYC documents, please contact our support team.

10.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that certain data must be retained by y999g to comply with regulatory and legal obligations (see Section 8), and erasure requests cannot override these mandatory retention requirements.

10.4 Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.

10.5 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a portable format and, where technically feasible, to have it transmitted directly to another controller.

10.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests. y999g will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

10.7 Right to Withdraw Consent

Where y999g processes your data on the basis of your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

The y999g Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete all related personal data, and — where applicable — report the matter in accordance with our licensing obligations.

If you are a parent or guardian and believe that a minor may have registered an account on y999g, please contact our support team immediately via live chat or email so that we can take appropriate action without delay.

The y999g Platform may occasionally contain references to third-party services such as payment processors or verification providers in the context of explaining our services. y999g is not responsible for the privacy practices or content of any third-party websites or services. This Privacy Policy applies solely to data collected by and through the y999g Platform.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of y999g — including JazzCash, EasyPaisa, and your bank — as their data practices are independent of ours.

y999g reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. Where changes are material — meaning they significantly affect your rights or how we use your data — we will notify you via email to your registered address and/or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page will always indicate when this Policy was most recently revised. Your continued use of the y999g Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised terms, you must cease using the Platform and may close your account by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to the y999g Data Protection team through the following channels:

We take all privacy enquiries seriously and commit to acknowledging your message within two (2) business days and providing a full response within ten (10) business days. For complex data subject access requests, we may ask you to verify your identity before we can process the request.