y999c Privacy Policy
At y999c, your personal data is handled with the same level of care we apply to your gaming experience. This policy explains exactly what we collect, why we collect it, how it is stored, and what rights you hold as a Pakistani player on our internationally licensed platform.
How y999c Protects Your Data
Six core privacy principles that govern every aspect of how we handle your personal information on y999c.
256-bit SSL Encryption
Every connection to y999c — from your y999c login session through to cashier transactions — is protected by industry-standard 256-bit SSL/TLS encryption. Your data travels across our network in a fully encrypted channel at all times.
No Sale of Personal Data
y999c does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Your data is shared only with the service providers strictly necessary to operate the platform — payment processors, KYC providers, and our licensing authority.
Segregated Data Storage
Player personal data and financial records are stored in logically segregated, access-controlled environments. Internal access is granted on a strict need-to-know basis only, and all access events are logged and reviewed under our international gaming license audit obligations.
Password Hashing — Never Stored in Plain Text
Your y999c account password is never stored in readable form. We use industry-standard irreversible cryptographic hashing (bcrypt) so that even y999c staff cannot read your password. In the event of any security incident, your credentials remain protected.
Breach Notification Protocol
In the unlikely event of a data breach that materially affects your personal information, y999c will notify affected players via their registered email address within 72 hours of the breach being confirmed, consistent with our licensing authority's requirements.
Your Rights, Always Accessible
As a y999c player, you hold clear rights over your personal data — including the right to access, correct, and request deletion of your information. These rights can be exercised at any time by contacting y999c support via live chat, no additional verification hoops required.
Contents
- 1. Introduction
- 2. Data We Collect
- 3. How We Collect Data
- 4. How We Use Your Data
- 5. Data Sharing
- 6. Data Retention
- 7. Data Security
- 8. Cookies & Tracking
- 9. Your Rights
- 10. Minors & Age Restriction
- 11. Marketing Communications
- 12. International Transfers
- 13. Changes to This Policy
- 14. Contact & Complaints
This Privacy Policy ("Policy") describes how y999c ("y999c", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("Player", "you", "your") who access or use the y999c platform at y999c.net. By registering an account or continuing to use y999c, you acknowledge that you have read and understood this Policy. This Policy forms part of y999c's overall Terms & Conditions.
1 Introduction
y999c is Pakistan's trusted online casino and sports betting platform, operating under an internationally recognised gaming license. As a licensed operator, we are subject to strict data protection obligations imposed by our licensing authority, and we take those obligations seriously. This Policy applies to all personal data collected through the y999c website at y999c.net, our mobile-optimised platform, live chat support interactions, and any other touchpoints between you and y999c.
y999c is committed to processing your personal data lawfully, fairly, and transparently. We collect only the data we genuinely need to operate the platform, verify your identity, process your transactions in Pakistani Rupees (PKR), and keep your account safe. We do not engage in surveillance-style data collection or data monetisation practices.
This Policy is written in plain English and structured to be easily navigable. If you have any questions about any section, our support team is available 24/7 via live chat on y999c.
2 Data We Collect
2.1 Identity & Registration Data
When you register a y999c account, we collect: full legal name, date of birth, residential address (including city — Karachi, Lahore, Islamabad, Faisalabad, or elsewhere in Pakistan), email address, and mobile phone number. This data is required to create and maintain your account and to fulfil our KYC obligations under our international gaming license.
2.2 Financial Data
To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, Allied Bank, or USDT TRC20, we collect transaction records including amounts, timestamps, and payment method identifiers. We do not store full payment card numbers on our own servers. Mobile wallet numbers associated with JazzCash or EasyPaisa accounts are stored in encrypted form.
2.3 KYC Verification Documents
As part of our Know Your Customer (KYC) process — a mandatory requirement of our international gaming license — we collect copies of government-issued identity documents such as your CNIC, passport, or driving licence, along with proof of residential address and, where required, proof of payment method ownership.
2.4 Transactional & Gaming Data
We maintain detailed records of all gaming activity on your account, including wagers placed, games played, bet amounts, outcomes, bonus usage, and session durations. This data is required for regulatory audit purposes, dispute resolution, and to power responsible gaming tools such as deposit limits and session time reminders.
2.5 Technical & Device Data
We automatically collect certain technical data when you access y999c, including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform optimisation.
2.6 Communications Data
When you contact y999c support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes. Chat transcripts are stored securely and accessible only to authorised y999c staff.
| Data Category | Examples | Legal Basis |
|---|---|---|
| Identity Data | Name, DOB, CNIC, address | Contractual necessity; legal obligation (KYC) |
| Financial Data | Transaction records, PKR amounts, payment method IDs | Contractual necessity; legal obligation (AML) |
| Gaming Data | Wager history, session logs, bonus records | Contractual necessity; legitimate interest (responsible gaming) |
| Technical Data | IP address, device type, browser | Legitimate interest (security, fraud prevention) |
| Communications Data | Live chat transcripts, support emails | Legitimate interest (dispute resolution, quality assurance) |
| Marketing Preferences | Opt-in/opt-out records, communication history | Consent |
3 How We Collect Your Data
3.1 Directly From You
The majority of the data y999c holds about you is provided directly by you — during account registration on the y999c Login page, during KYC verification, when you make deposits or withdrawals via JazzCash, EasyPaisa, or other supported methods, and when you contact our support team via live chat.
3.2 Automatically During Platform Use
Technical and device data is collected automatically when you access y999c, using standard web server logs, session tracking mechanisms, and our security monitoring systems. This collection occurs regardless of whether you are logged into your account.
3.3 From Third Parties
In certain circumstances, y999c may receive data about you from third parties. This includes identity verification results from our KYC service provider, fraud risk signals from our payment processors, and — where legally required — information shared by our licensing authority or law enforcement agencies. y999c only requests third-party data where it is strictly necessary for regulatory compliance or fraud prevention.
3.4 Cookies and Similar Technologies
y999c uses cookies and similar tracking technologies to maintain your login session, remember your platform preferences, and monitor platform performance. Full details of our cookie practices are provided in Section 8 of this Policy.
4 How We Use Your Data
y999c uses your personal data for the following purposes:
- Account creation and management: to register your y999c account, maintain your profile, and process your y999c login sessions securely;
- KYC and identity verification: to verify your identity and age (21+ requirement) as mandated by our international gaming license;
- Transaction processing: to process PKR deposits and withdrawals via JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, Allied Bank, and USDT TRC20;
- Regulatory compliance: to fulfil anti-money laundering (AML) reporting obligations, maintain gaming records for licensing authority audits, and comply with any applicable legal obligations;
- Responsible gaming: to monitor gaming patterns and apply responsible gaming interventions — including deposit limits, session reminders, and self-exclusion — where warranted;
- Fraud prevention and security: to detect and prevent fraudulent activity, unauthorised account access, and prohibited conduct as defined in our Terms & Conditions;
- Customer support: to respond to your queries, resolve disputes, and maintain records of support interactions;
- Platform improvement: to analyse aggregated, anonymised usage data and improve the y999c platform experience;
- Marketing communications: to send you promotional offers and platform updates, but only where you have provided valid consent and have not subsequently opted out.
y999c does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where such processing is required for KYC verification or AML compliance under our licensing obligations. In such cases, you have the right to request human review of any automated decision that affects your account.
5 Data Sharing
5.1 Who We Share Data With
y999c shares your personal data only with the following categories of third parties, and only to the extent strictly necessary for the stated purpose:
- KYC and identity verification providers: to verify your identity documents and confirm your age eligibility (21+ requirement);
- Payment processors: JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, Allied Bank, and USDT TRC20 network providers, solely to process your deposit and withdrawal transactions in PKR;
- Gaming software providers: live dealer game providers (for Mini Baccarat, Nine, and other live table games) and slot content providers receive session tokens but not your full identity data;
- International gaming licensing authority: our licensing authority has a regulatory right to audit player account data as part of its oversight responsibilities. We comply fully with such requests;
- Law enforcement and regulatory bodies: where we are legally obligated to disclose information — for example, in connection with a court order, AML investigation, or regulatory inquiry.
5.2 What We Never Do
y999c never sells, rents, or trades your personal data to third-party marketers, advertising networks, data brokers, or any entity whose primary purpose is the commercial exploitation of personal data. This is a firm commitment, not a qualified statement.
All third-party service providers used by y999c are contractually bound to process your data only for the specific purpose for which it was shared, to maintain appropriate technical and organisational security measures, and to delete or return the data upon termination of their service agreement with y999c.
6 Data Retention
y999c retains your personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following guidelines:
- Active accounts: all personal, financial, and gaming data is retained for the duration of your active relationship with y999c;
- Closed accounts: KYC documents, transaction records, and gaming history are retained for a minimum of five years following account closure, as required by our international gaming license and applicable AML regulations;
- Self-excluded accounts: your self-exclusion record is retained indefinitely to prevent re-registration during the exclusion period. Other personal data associated with a self-excluded account is subject to the standard five-year post-closure retention schedule;
- Support communications: live chat transcripts and email records are retained for three years from the date of the communication;
- Marketing opt-out records: records of your marketing preferences and opt-out requests are retained indefinitely to ensure we do not inadvertently contact you after you have opted out.
After the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.
7 Data Security
7.1 Technical Measures
y999c employs the following technical security measures to protect your personal data:
- 256-bit SSL/TLS encryption on all connections to y999c.net;
- Bcrypt password hashing — your y999c login password is never stored in readable form;
- Payment card details are not stored on y999c servers — all card processing is handled by PCI-DSS compliant payment processors;
- Firewalls, intrusion detection systems, and regular penetration testing;
- Database access controls with full audit logging of all data access events;
- Two-factor authentication available for player accounts and mandatory for all internal y999c staff accounts.
7.2 Organisational Measures
Access to player personal data within y999c is restricted to staff who require it to perform their role. All staff with data access responsibilities receive regular data protection training. Background checks are performed on all staff in data-sensitive roles as a condition of employment.
7.3 Your Responsibility
While y999c takes comprehensive measures to protect your data on our end, the security of your y999c login credentials is your responsibility. Use a strong, unique password for your y999c account. Do not share your credentials with anyone. If you suspect your account has been accessed without your authorisation, contact y999c support via live chat immediately so we can secure your account.
y999c will never ask you for your password via live chat, email, or any other communication channel. If you receive any communication purporting to be from y999c that requests your password or full payment details, treat it as fraudulent and contact our support team immediately.
8 Cookies & Tracking Technologies
8.1 What Are Cookies
Cookies are small text files stored on your device by your browser when you visit a website. y999c uses cookies to maintain the functionality of the platform, enhance your user experience, and monitor platform security.
8.2 Types of Cookies We Use
- Strictly necessary cookies: essential to the operation of y999c. These cookies maintain your y999c login session, remember your language preferences, and protect against cross-site request forgery. They cannot be disabled without breaking core platform functionality.
- Performance cookies: collect anonymised data about how players navigate and use y999c, helping us identify areas for improvement. No personally identifiable information is collected by performance cookies.
- Functional cookies: remember your platform preferences — such as your preferred game lobby view or responsible gaming settings — so you do not need to reconfigure them at each login.
- Security cookies: used by our fraud prevention and bot detection systems to distinguish legitimate player sessions from automated or malicious traffic.
8.3 Managing Cookies
You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use y999c, including completing y999c login and accessing the cashier. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari) are available in your browser's help documentation.
9 Your Data Rights
As a y999c player, you hold the following rights in respect of the personal data we hold about you. These rights can be exercised by contacting y999c support via live chat or by emailing [email protected] with the subject line "Data Rights Request — [Your Username]".
y999c will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your data rights in most circumstances.
Please note that certain data rights — particularly the right to erasure — may be limited where retention of your data is required under our international gaming license obligations or applicable AML regulations. In such cases, y999c will explain specifically which data must be retained and for how long.
10 Minors & Age Restriction
y999c strictly enforces a minimum age of 21 years for all players. The platform does not knowingly collect, process, or retain any personal data belonging to individuals under the age of 21. Age verification is performed during the KYC process, and any account found to belong to an underage user is immediately suspended and the relevant data frozen pending investigation.
If you are a parent or guardian and believe that a minor in your care has registered a y999c account, please contact our support team via live chat immediately. We will investigate and take appropriate action, including account suspension and referral to our licensing authority as required under our international gaming license obligations.
The 21+ age restriction on y999c is non-negotiable and applies universally to all players regardless of location within Pakistan or elsewhere. This is a condition of our international gaming license and is enforced without exception.
11 Marketing Communications
11.1 Consent-Based Marketing Only
y999c sends marketing communications — including promotional offers, bonus announcements, and platform updates — only to players who have provided explicit consent to receive such communications during the registration process or subsequently through their account settings. We do not send unsolicited marketing communications.
11.2 Opting Out
You can withdraw your marketing consent and opt out of all y999c marketing communications at any time by updating your notification preferences in your account settings, by clicking the unsubscribe link in any marketing email from y999c, or by contacting support via live chat. Opt-out requests are processed within five business days. Please note that opting out of marketing communications does not affect transactional communications — we will still contact you regarding your account status, KYC requirements, and transaction confirmations as required to service your account.
11.3 Self-Excluded Players
Players who have activated self-exclusion on y999c are automatically removed from all marketing communication lists. y999c makes every reasonable effort to ensure that self-excluded players do not receive promotional materials. If you have self-excluded and continue to receive marketing communications, please contact support via live chat immediately so we can rectify the situation.
12 International Data Transfers
y999c operates under an international gaming license and uses service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, y999c ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within our platform.
Safeguards used for international data transfers include contractual clauses that require recipient parties to protect personal data to the same standard as y999c, and where applicable, transfers are made only to jurisdictions that maintain adequate data protection frameworks recognised by our licensing authority.
By registering and using y999c, you acknowledge and consent to the transfer of your personal data to service providers in other jurisdictions as described in this section, where such transfers are necessary to deliver the y999c platform services.
13 Changes to This Policy
y999c may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or regulatory obligations imposed by our international gaming license authority. When we make material changes to this Policy, we will notify active players via their registered email address at least 14 days before the changes take effect.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We recommend that you review this Policy periodically to stay informed about how y999c handles your personal data. Continued use of y999c following the effective date of any update constitutes your acceptance of the revised Policy.
If you do not agree with any changes to this Policy, you have the right to close your y999c account and request deletion of your personal data, subject to our legal retention obligations as described in Section 6.
14 Contact & Complaints
14.1 Contacting y999c About Privacy
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how y999c has handled your personal data, please contact our support team via live chat on y999c (available 24/7) or by emailing us at:
Privacy queries: [email protected] — Subject line: "Privacy Policy Query — [Your Username]"
14.2 Complaint Process
If you are not satisfied with y999c's response to a privacy concern, you have the right to escalate your complaint to our international gaming license authority. Details of the licensing authority's complaint process are available on our About Us page. y999c takes all privacy complaints seriously and commits to responding to all formal privacy complaints within 15 business days of receipt.
y999c's privacy team reviews all data rights requests and privacy complaints personally. We do not use automated systems to resolve privacy queries — every request is reviewed by a qualified member of our compliance team.
Ready to Join y999c?
Pakistan's trusted licensed casino and sports betting platform — PKR deposits, PSL cricket betting, live Mini Baccarat, Nine, and premium slots. 21+ only.
21+ only. Gambling involves risk. Play responsibly. Licensed under international gaming authority oversight.