Your privacy matters to y999. This policy explains exactly what personal information we collect when you use the y999 platform, how we use it, who we share it with, and what rights you hold over your own data.
y999 uses SSL encryption for all data in transit and stores sensitive account information using industry-standard hashing and encryption. Your data is not accessible in plain text to any party, including y999 staff.
y999 collects only the data required to operate your account, process payments, comply with legal obligations, and improve the platform experience. We do not collect data beyond what is necessary for these purposes.
y999 does not sell, rent, or trade your personal data to any third party for their commercial purposes. Data shared with third parties is limited to what is necessary for service delivery and legal compliance only.
You have the right to access, correct, and in certain circumstances request deletion of your personal data. You may also object to specific processing activities. Contact y999 support to exercise any of these rights.
y999 retains your data only for as long as necessary — either for the operational purpose for which it was collected, or for the duration required by applicable law. Data is securely deleted once the retention period expires.
In the unlikely event of a data breach that affects your personal data, y999 will notify affected users promptly and take all necessary remediation steps. Security incidents are treated with the highest operational priority.
This Privacy Policy ("Policy") describes how y999 ("y999", "we", "us") collects, uses, stores, and protects the personal data of users ("you", "User") who access or use the y999 platform at y999.asia. This Policy forms part of the y999 Terms & Conditions. By registering an account or using the y999 platform, you acknowledge that you have read this Policy and consent to the data practices described herein.
y999 is Pakistan's premier online gaming platform, providing casino games, live dealer tables, sports betting, and slot entertainment to Pakistani players. In delivering these services, y999 necessarily processes certain personal information about the users who register and interact with the platform. We take our data protection responsibilities seriously and are committed to handling your information with transparency, care, and in accordance with applicable data protection standards.
This Policy applies to all personal data processed by y999 in connection with the y999 platform, including data collected through the website at y999.asia, through account registration, through payment transactions, through customer support interactions, and through your general use of y999's gaming services. It does not apply to third-party websites or services that may be linked from y999, which have their own privacy policies that are entirely separate from this one.
For the purposes of this Policy, y999 acts as the data controller in respect of the personal data of its registered users. As data controller, y999 determines the purposes and means of processing your personal data. Where y999 engages third-party service providers to process data on its behalf, those providers act as data processors under y999's instruction and are bound by appropriate data processing agreements.
If you have any questions about how y999 processes your personal data or wish to exercise any of your data rights, you may contact y999 by email at [email protected] or via live chat inside your account dashboard (available 8:00 AM – 2:00 AM PKT, seven days a week).
y999 collects personal data in the following categories:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC/NICOP number, gender | Account registration, age and identity verification (KYC) |
| Contact Data | Email address, Pakistani mobile number, city of residence | Account communication, support, SMS notifications |
| Financial Data | JazzCash/EasyPaisa number, bank account details (HBL, UBL, Meezan Bank), transaction history | Processing deposits, withdrawals, and financial compliance |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Platform security, fraud prevention, technical support |
| Usage Data | Games played, bets placed, session duration, feature interactions | Platform improvement, responsible gaming monitoring, personalisation |
| Verification Documents | Copies of CNIC, NICOP, utility bills, payment method confirmation | KYC compliance, fraud prevention, regulatory obligations |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Support delivery, service quality monitoring, dispute resolution |
Sensitive Data: y999 does not intentionally collect special category personal data (such as health information, political opinions, or religious beliefs) through its platform. If such information is voluntarily disclosed in a support interaction, it will be treated with the highest level of care and will not be used for any purpose beyond resolving the relevant query.
y999 collects personal data through the following means:
y999 uses the personal data it collects for the following purposes:
To create and manage your y999 account, process deposits and withdrawals in PKR, deliver gaming services, communicate with you about your account, and provide customer support. This is the primary purpose for which y999 processes your data and is necessary for the performance of the contract between you and y999.
To verify your identity and age (21+ requirement) as required for responsible gaming and regulatory compliance. To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as defined in the y999 Terms & Conditions. Financial transaction data is analysed for unusual patterns that may indicate financial crime.
To comply with applicable laws, regulations, and legal obligations, including but not limited to anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and responses to lawful requests from competent authorities.
To monitor your gaming activity in connection with y999's responsible gaming programme, including identifying patterns that may indicate problem gambling behaviour and administering self-imposed limits and exclusions. Your usage data is integral to this function and its processing serves your welfare as a player.
To analyse aggregated usage data in order to improve the y999 platform, identify technical issues, optimise game performance, and develop new features. Where used for this purpose, data is analysed in aggregate and individuals are not targeted.
To send you promotional offers, bonus announcements, and other marketing communications about y999 — but only where you have provided your consent to receive such communications. You may withdraw your consent to marketing communications at any time by updating your account notification preferences or by contacting y999 support.
y999 processes your personal data on the following legal bases depending on the specific processing activity:
y999 does not sell, rent, or trade your personal data. y999 shares your data only in the following limited circumstances:
No Commercial Data Sales: y999 will never sell your personal data to data brokers, advertising networks, or any third party for their own commercial purposes. Any sharing of data is strictly limited to what is necessary for service delivery, legal compliance, or fraud prevention.
y999 retains your personal data for the following periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Regulatory and legal compliance obligations |
| Financial Transaction Data | Duration of account + 7 years post-closure | AML obligations and financial audit requirements |
| KYC / Verification Documents | Duration of account + 5 years post-closure | Regulatory compliance and dispute resolution |
| Support Communications | 3 years from last interaction | Service quality and dispute resolution |
| Technical & Usage Data | 2 years from collection | Platform improvement and security monitoring |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of consent compliance |
Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised. Anonymised data (which can no longer identify you) may be retained for statistical and analytical purposes beyond the retention periods above.
y999 implements the following technical and organisational measures to protect your personal data against unauthorised access, disclosure, loss, or destruction:
Despite these measures, no online platform can guarantee absolute security. In the event of a data security incident affecting your personal data, y999 will notify you promptly in accordance with applicable notification requirements and will take all necessary steps to mitigate the impact.
y999 uses cookies and similar technologies to support platform functionality, maintain your login session, and understand how users interact with the platform. The following categories of cookies are used:
y999 does not use advertising cookies or tracking technologies for third-party advertising purposes. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to use y999's services.
You have the following rights in respect of your personal data held by y999. These rights are not absolute and are subject to applicable legal obligations, including y999's regulatory retention requirements:
To exercise any of the above rights, contact y999 support via live chat inside your account dashboard or by email at [email protected]. Please include your full name, registered email address, and a clear description of the right you wish to exercise. y999 will respond within 30 days of receiving a valid request.
y999 is an adults-only platform. The minimum age to register and use y999's services is 21 years. y999 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during and after registration as part of y999's KYC process.
Underage Account Discovery: If y999 discovers or is notified that an account belongs to a person under 21 years of age, the account will be immediately closed, all data associated with the account will be deleted to the extent permitted by legal obligations, and any balance will be forfeited in accordance with the y999 Terms & Conditions. If you believe a minor has registered on y999, please notify y999 support immediately at [email protected].
y999 primarily stores and processes data within the geographic region serving the y999 platform. Where data is processed by third-party service providers who operate infrastructure outside Pakistan, y999 ensures that appropriate contractual safeguards are in place to protect your data to an equivalent standard to that described in this Policy. y999 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate transfer mechanisms.
y999 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they affect how y999 uses your data in a way that is meaningfully different from what this Policy currently describes — y999 will notify registered users by email and/or by displaying a prominent notice on the platform prior to the changes taking effect.
Non-material changes, such as corrections to typographical errors or clarification of existing practices, may be made without prior notice. The effective date at the top of this Policy will be updated with each revision. Continued use of the y999 platform following the effective date of an amended Policy constitutes your acceptance of the revised terms.
Current Version: This Privacy Policy was last reviewed and updated effective 1 January 2026. The version published at y999.asia/privacy-policy is the current governing version at all times. y999 recommends that registered users review this Policy periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way y999 processes your personal data, please contact us through any of the following channels:
y999 will acknowledge privacy-related queries promptly and aims to provide a substantive response within 5 business days. Complex requests — such as data subject access requests — may require additional time in accordance with the 30-day response period described in Section 11.
If you have any questions about your data or wish to exercise your data rights, the y999 support team is available every day from 8:00 AM to 2:00 AM PKT. You can also review the platform's related policy pages below.