yyy999 Privacy Policy

1 Who We Are

yyy999 is an online gaming and sports betting platform operating under an international gaming licence and accessible at yyy999.org. yyy999 is the data controller responsible for the personal information of all registered Players on the Platform. For the purposes of this Policy, the term "Platform" encompasses the yyy999 website, all associated pages, mobile-optimised experiences, and any gaming services delivered through the yyy999 domain.

yyy999 serves a significant player base across Pakistan, including players in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other major cities. Pakistani players interact with yyy999 using PKR (Pakistani Rupee) and supported local payment methods including JazzCash and EasyPaisa. All data handling described in this Policy applies equally to Pakistani players as to all other registered users of the Platform.

2 Personal Data We Collect

yyy999 collects personal data through several channels: during Account registration, through ongoing use of the Platform, through payment processing, and through the KYC (Know Your Customer) verification process. The categories of data collected are set out below.

yyy999 does not collect special category data (such as racial or ethnic origin, political opinions, or health data) unless specifically required by our responsible gaming obligations — for example, recording a self-exclusion request or a vulnerability flag on a Player's Account.

3 How We Use Your Personal Data

yyy999 uses the personal data described in Section 2 for the following purposes:

• Account management: Creating, maintaining, and securing your yyy999 Account, including password resets and two-factor authentication.
• Identity verification (KYC): Complying with our international licensing obligations by verifying your identity, age (21+), and source of funds before processing withdrawal requests above defined thresholds.
• Payment processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment channels.
• Gaming services delivery: Providing cricket betting, live casino, slots, Ultra Treasure, Slide, and all other yyy999 game products.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised Account access.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling patterns and applying self-exclusion or deposit limits where appropriate or requested.
• Customer support: Responding to queries, complaints, and dispute resolution requests submitted via live chat, email, or phone.
• Legal compliance: Meeting our obligations under the laws and regulations of the jurisdiction in which yyy999 holds its gaming licence.
• Marketing (where consent is given): Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to marketing communications.

4 Legal Basis for Processing

yyy999 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between yyy999 and the Player — including Account creation, payment processing, and gaming services delivery.
• Legal obligation: Processing required to comply with applicable laws, including KYC verification, anti-money laundering checks, and age verification.
• Legitimate interests: Processing necessary for yyy999's legitimate business interests, including fraud detection, platform security, and product improvement — provided those interests are not overridden by the Player's fundamental rights.
• Consent: For optional processing activities such as marketing communications and certain non-essential cookies, yyy999 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time.

5 Cookies & Tracking Technologies

yyy999 uses cookies and similar tracking technologies on the Platform to ensure core functionality, improve user experience, and — where consent is given — to deliver relevant content to Players.

5.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable login session management, security token validation, and payment gateway interactions. These cookies cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how Players use the Platform — such as pages visited and time spent — to help yyy999 improve its services. These are only deployed with your consent.
• Functional Cookies: These remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Marketing Cookies: Where you have consented, these cookies track your interaction with yyy999 content across sessions to enable relevant promotional messaging. You may withdraw consent at any time via Account settings.

5.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core yyy999 Platform features. Full cookie preferences can also be managed through the yyy999 cookie consent panel, accessible from the footer of every Platform page.

6 Sharing Your Data with Third Parties

yyy999 does not sell your personal data to third parties. However, yyy999 does share certain data with trusted third-party service providers and regulatory bodies where this is necessary to operate the Platform or comply with legal obligations. The categories of recipients are as follows:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to process your PKR deposits and withdrawals. Each processor operates under its own privacy policy and applicable financial services regulations.
• KYC and identity verification providers: Specialist third-party KYC providers may process your identity documents and personal data to verify your age and identity on yyy999's behalf. These providers operate under strict data processing agreements with yyy999.
• IT infrastructure and cloud service providers: yyy999 uses third-party hosting and cloud infrastructure providers to operate its Platform. These providers access data only to the extent necessary to provide infrastructure services and are bound by confidentiality obligations.
• Fraud prevention and security services: yyy999 shares technical data (such as IP addresses and device fingerprints) with fraud detection service providers to protect the Platform and its Players from unauthorised access and financial crime.
• Regulatory and licensing authorities: yyy999 may be required to disclose Player data to the licensing authority under which it operates, or to law enforcement agencies, if compelled by a valid legal order.
• Game content providers: Third-party game studios whose content is hosted on yyy999 may receive anonymised gaming session data for the purpose of game performance monitoring. No personally identifiable information is shared with game providers for marketing purposes.

7 Data Retention

yyy999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable laws. The general retention periods applied by yyy999 are as follows:

• Account data and KYC documents: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, or longer where required by the laws of the governing jurisdiction.
• Gaming session logs: Retained for up to three (3) years from the date of each session, for the purposes of dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for up to three (3) years from the date of the last communication, or for the duration of any ongoing dispute.
• Marketing consent records: Retained for as long as your marketing opt-in consent is active, plus one (1) year following withdrawal of consent, to provide an audit trail.

Once data reaches the end of its retention period, yyy999 will securely delete or anonymise it so that it can no longer be attributed to an individual Player.

8 Data Security

yyy999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and yyy999 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Role-based access controls ensuring that yyy999 staff can only access Player data on a strict need-to-know basis.
• Regular third-party security audits and penetration testing of the yyy999 Platform.
• Two-factor authentication (2FA) available to all Players and mandatory for yyy999 internal administrative systems.
• Intrusion detection systems and 24/7 security monitoring of Platform infrastructure.

While yyy999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to Players, yyy999 will notify affected individuals and the relevant regulatory authority within the timeframe required by applicable law.

9 Your Data Rights

As a Player on yyy999, you hold the following rights with respect to your personal data. To exercise any of these rights, contact yyy999 at [email protected] with your registered Account email address and a description of your request. yyy999 will respond within thirty (30) days.

• Right of access: You may request a copy of all personal data yyy999 holds about you, along with information on how it is being processed.
• Right to rectification: If any personal data yyy999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: Subject to yyy999's legal retention obligations, you may request deletion of your personal data. Note that data required for AML compliance, KYC records, or active dispute resolution may not be deleted until the relevant obligation or dispute has concluded.
• Right to restrict processing: You may request that yyy999 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified.
• Right to data portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on yyy999's legitimate interests at any time. yyy999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where yyy999 processes your data based on consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Children & Minors

yyy999 operates a strict minimum age policy. The Platform is intended exclusively for users aged 21 years and above. yyy999 does not knowingly collect personal data from any person under the age of 21. If yyy999 becomes aware that personal data has been collected from a person under 21, that Account will be immediately suspended, the data will be deleted, and any deposits will be returned to the originating payment method following verification.

yyy999 employs age-verification checks at the point of registration and during the KYC process. If you believe a minor has registered on yyy999, please contact us immediately at [email protected]. Protecting minors from online gambling is a core commitment of the yyy999 platform.

11 Marketing Communications

yyy999 sends promotional emails, SMS messages, and push notifications — including information about bonuses, new games, PSL betting promotions, and platform updates — only to Players who have provided explicit opt-in consent at the time of registration or subsequently through Account settings.

You may opt out of all yyy999 marketing communications at any time by:

• Clicking the "Unsubscribe" link in any yyy999 marketing email.
• Updating your communication preferences in the Notifications section of your yyy999 Account settings.
• Contacting yyy999 support at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications will not affect transactional messages — such as deposit confirmations, withdrawal notifications, KYC status updates, or security alerts — which are sent regardless of marketing preferences as they are essential to the operation of your Account.

Players who have activated a self-exclusion through yyy999's responsible gaming tools will automatically be removed from all marketing communications lists for the duration of their self-exclusion period.

12 International Data Transfers

yyy999 operates under an international gaming licence and uses service providers located in multiple countries. As a result, your personal data may be transferred to and processed in countries outside of Pakistan. Where such transfers occur, yyy999 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses between yyy999 and the recipient entity that impose data protection obligations equivalent to those described in this Policy.
• Use of service providers located in jurisdictions that maintain adequate data protection standards as assessed by yyy999 and its legal advisors.
• Binding corporate rules or equivalent internal data governance frameworks where data is transferred within the yyy999 corporate group.

By using the yyy999 Platform, you acknowledge that your personal data may be transferred internationally as described above. If you have questions about the specific safeguards in place for any particular international data transfer, contact yyy999 at [email protected].

13 Updates to This Privacy Policy

yyy999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. The most current version of the Policy will always be published at yyy999.org/privacy-policy, with the "Last Updated" date revised accordingly.

Where updates are material — meaning they substantially change how yyy999 processes your personal data or affect your rights — yyy999 will notify registered Players by email to the address held on file at least seven (7) days before the changes take effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgement of those changes.

yyy999 encourages all Players to review this Policy periodically to stay informed about how their personal data is being protected.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or yyy999's handling of your personal data, please contact the yyy999 Data Protection team using the details below. All contact information is displayed as plain text only and cannot be used as a clickable link:

• Email: [email protected]
• Live Chat: Available 24/7 via the yyy999 Platform
• Phone Support: 9 AM – 2 AM Pakistan Standard Time (PKT)

yyy999 will acknowledge all privacy-related requests within 48 hours and aims to resolve them fully within thirty (30) days of receipt. Where a request is complex or involves a high volume of data, yyy999 may extend this period by a further thirty (30) days, in which case the Player will be notified of the extension and the reason for it.