yy999 Privacy Policy — How We Handle Your Personal Data

yy999 operates the online gaming and sports betting platform accessible at yy999.win and through the official yy999 mobile application. For the purposes of this Privacy Policy, yy999 is the data controller — meaning we are responsible for deciding how your personal information is collected and used.

This policy applies to all users who visit the yy999 website, register an account, make deposits, place bets, play casino or fish games, or interact with the platform in any way. It covers data collected through the website, the mobile app and any communications you have with our support team.

By using yy999, you acknowledge that you have read this policy and understand how your data is handled. If you do not agree with any part of this policy, please do not create an account or continue using the platform.

yy999 collects personal data in the following categories, depending on how you use the platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health data. We do not collect full payment card numbers — payment processing is handled directly by your chosen payment provider (JazzCash, Easypaisa, etc.) and yy999 only receives transaction confirmation records.

yy999 collects and uses personal data only for specific, legitimate purposes. We do not collect data beyond what is needed to operate the platform and provide the services you use.

The purposes for which we use your data include:

• Account creation and management: To register your account, verify your identity and age, and manage your login credentials and account settings.
• Transaction processing: To process deposits and withdrawals in PKR through your chosen payment channel, and to maintain accurate financial records for your account.
• Platform operation: To deliver sports betting, casino, live casino and fish game services, settle bets, award winnings and apply bonuses correctly.
• Security and fraud prevention: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, money laundering and other prohibited activities.
• Legal compliance: To meet any applicable legal or regulatory obligations, including identity verification and record-keeping requirements.
• Customer support: To respond to your queries, investigate complaints and resolve account issues.
• Responsible gaming: To monitor activity patterns that may indicate problematic gambling behaviour and to apply any responsible gaming tools you have activated on your account.
• Platform improvement: To analyse usage patterns and improve the performance, design and content of the yy999 platform.
• Marketing (with consent): To send promotional communications about bonuses, new games and platform updates, where you have consented to receive them.

yy999 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the services you signed up for — account management, transaction processing, game delivery and bet settlement.
• Legitimate interest: Processing carried out for security monitoring, fraud prevention, abuse detection and platform analytics, where our legitimate interest in running a secure and functional platform is not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws, including identity verification and financial record-keeping.
• Consent: Processing for marketing communications and non-essential cookies, which we collect only where you have actively given consent. You may withdraw consent at any time without affecting any other processing.

yy999 does not sell your personal data to any third party. Data is shared externally only in the following limited circumstances, and only to the extent necessary:

• Payment processors: Transaction information is shared with JazzCash, Easypaisa, Raast, bank networks and card processors to process your deposits and withdrawals in PKR. These providers handle your payment data under their own privacy and security standards.
• Game software providers: The game providers who supply content to the yy999 Game Lobby may receive session data necessary to deliver game functionality. They do not receive your identity or financial data.
• Identity verification services: During KYC checks, identity documents may be processed by a third-party verification provider who operates under strict data protection obligations.
• Platform technology providers: Companies providing hosting, security, analytics and customer support infrastructure may process data as part of service delivery, under contractual data processing agreements.
• Legal and regulatory obligations: yy999 may disclose data to law enforcement, government bodies or other authorities where legally required to do so.

All third parties who process data on our behalf are required to maintain the confidentiality and security of that data and to use it only for the specified purpose. We do not transfer your data to parties outside of the above categories.

yy999 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser when you visit the website.

We use the following types of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security tokens that protect your account. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how users navigate the platform — which pages are visited, how long sessions last and where users encounter issues. This data is aggregated and does not identify individual users.
• Preference cookies: Used to remember settings you have configured, such as language and display preferences.
• Marketing cookies: Used to deliver relevant promotional content on the platform, where you have consented to this type of tracking.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using yy999, though some features may behave differently.

The yy999 mobile app uses equivalent device-based tracking technologies for session management, analytics and security. These function in the same way as website cookies and are subject to the same rules.

yy999 retains personal data only for as long as necessary for the purposes set out in this policy, or as required by legal or regulatory obligations.

• Active account data: Retained for the duration of your account's active status, plus a reasonable period after closure to allow for dispute resolution, fraud investigation and legal compliance.
• Financial transaction records: Retained for a minimum period to comply with financial record-keeping obligations. This typically covers several years from the date of each transaction.
• Identity verification documents: Retained for the period required by applicable legal obligations after the verification is completed or the account is closed.
• Support communications: Retained for a reasonable period to enable follow-up and complaint resolution.
• Marketing consent records: Retained for as long as needed to demonstrate that consent was obtained, even if the consent is later withdrawn.

When data is no longer needed and no legal retention obligation applies, it is securely deleted or anonymised.

yy999 takes the security of your personal data seriously. We have implemented technical and organisational measures designed to protect your information against unauthorised access, loss, disclosure or alteration.

Security measures in place include:

• Encryption of data in transit using TLS/SSL protocols across the website and mobile app.
• Secure, access-controlled server infrastructure with monitoring for unusual activity.
• Password hashing — your account password is never stored in plain text.
• Two-factor authentication options available for account login.
• Regular security assessments and internal access controls limiting who can access personal data internally.
• Contractual security obligations on all third-party service providers who process data on our behalf.

No system is completely immune to security breaches. In the event of a data breach that is likely to affect your rights, yy999 will notify you through your registered contact details as quickly as practicable.

You also play a role in keeping your data secure. Use a strong and unique password for your yy999 account, do not share your login credentials, and contact support immediately if you notice any suspicious activity on your account.

You have the following rights in relation to your personal data held by yy999. To exercise any of these rights, contact our support team through live chat or email.

yy999 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Registration and use of the platform requires users to confirm they are 18 or older.

If yy999 discovers or is informed that data has been collected from a person under 18, that account will be suspended immediately, the data will be deleted, and any funds held in the account will be handled in accordance with our Terms and Conditions.

If you believe a minor has created a yy999 account, please contact our support team immediately so we can investigate and take appropriate action.

yy999 may send promotional communications about bonuses, new games, sports betting markets, VIP programme updates and platform features. We only send marketing messages to users who have actively opted in to receive them.

You can manage your communication preferences at any time:

• Through the notification settings in your yy999 account dashboard.
• By contacting the yy999 support team via live chat and requesting to be removed from marketing lists.

Opting out of marketing communications will not affect your ability to use the platform, claim bonuses or receive service notifications related to your account transactions and security.

Users who have self-excluded from the platform will not receive any promotional communications for the duration of their exclusion period, including after the exclusion ends unless they actively opt back in.

yy999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes to services we use, or updated legal requirements. The "Last updated" date at the top of this page shows when the current version was published.

Where changes are significant, we will notify registered users via their registered email address or through a notice displayed within the platform on their next login. For minor changes — such as clarifications that do not affect your rights — we may update the policy without a specific notification beyond the updated date.

Your continued use of yy999 after a policy update takes effect constitutes your acceptance of the revised version. If you do not agree with changes, you should stop using the platform and contact support to close your account.

The current version of this Privacy Policy is always available at yy999.win/privacy-policy.

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how yy999 has handled your personal information, please contact us through the following channels:

• Live chat: Available 24/7 from within your logged-in yy999 account. This is the fastest way to reach us for any data-related query.
• Email: [email protected] — for formal data rights requests or written correspondence about privacy matters.
• FAQ: The FAQ page covers common account and data questions that may resolve your query without needing to contact support directly.

We aim to respond to all privacy-related queries within 72 hours. Formal data subject access requests will be processed within a reasonable timeframe following identity verification.