Privacy Policy – 999y Pakistan Betting Platform

1. Introduction

This Privacy Policy explains how 999y ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal information of individuals who register and use the 999y platform at https://999y.biz. It applies to all services offered by 999y, including sports betting, PSL and cricket betting, football betting, live casino games, and all related features available to registered players in Pakistan.

By creating an account on 999y or using any part of our platform, you confirm that you have read and understood this Privacy Policy and that you consent to the data practices described here. If you do not agree with this policy, please do not use 999y.

This policy is written in plain English and is intended to be genuinely readable — not a wall of legal text. If anything here is unclear, please contact us at support@999y.biz and we will explain it personally.

2. What Personal Data We Collect

2.1 Registration Data

When you create an account on 999y, we collect the following information that you provide directly:

• Your full legal name as it appears on your national identity card (CNIC)
• Your date of birth (to verify that you are 18 or older)
• Your Pakistani mobile phone number
• Your email address (if provided)
• Your chosen username and encrypted password

2.2 Verification Data

When 999y requests identity verification — which may occur before processing a withdrawal or lifting a betting limit — we may collect:

• A copy of your CNIC (front and back)
• A utility bill or bank statement for address verification
• A screenshot or confirmation of your Easypaisa, JazzCash, NayaPay, or SadaPay wallet registration in your name

2.3 Transaction Data

Every financial transaction on your 999y account is recorded, including deposits, withdrawals, bet placements, and bet settlements. This data includes transaction amounts in Pakistani Rupees, timestamps, payment method references, and the outcome of each bet.

2.4 Usage & Device Data

When you use the 999y platform, we automatically collect technical information including your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), pages visited on 999y, the time and duration of your visit, and referring URLs. This information is used to maintain platform security, optimise the mobile experience, and understand how players use 999y.

2.5 Communications Data

If you contact 999y customer support via email or any other channel, we retain records of those communications in order to resolve your issue and improve our service quality.

3. How We Use Your Personal Data

999y uses the personal data we collect for the following specific purposes:

• Account management: To create, maintain, and secure your 999y account, including processing your registration and verifying your identity and age.
• Transaction processing: To process deposits, withdrawals, and bet settlements in PKR using your linked payment method. Without your payment data, we cannot process transactions.
• Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and any other conduct that violates our Terms and Conditions.
• Regulatory compliance: To meet any legal or regulatory obligations that apply to the operation of the 999y platform.
• Customer support: To respond to your queries and resolve account issues efficiently.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the design, performance, and features of 999y.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour, and to apply responsible gaming tools to protect at-risk players.
• Marketing communications: To send promotional emails or SMS messages about 999y bonuses, new features, and upcoming events — but only where you have given consent to receive such communications.

4. Legal Basis for Processing

999y processes your personal data under the following legal bases:

• Contract performance: The majority of data processing on 999y is necessary to perform the contract between you and 999y — specifically, to operate your betting account, process your deposits and withdrawals, and settle your bets.
• Legitimate interests: 999y has legitimate interests in preventing fraud, protecting platform security, and improving the service we provide to Pakistani players. Where we process data under this basis, we have assessed that our interests do not override your privacy rights.
• Legal obligation: In certain circumstances, 999y may be required by law or regulatory authorities to process or disclose personal data. We will comply with such requirements while taking reasonable steps to protect your privacy.
• Consent: For marketing communications and optional analytics cookies, 999y processes your data only with your explicit consent. You may withdraw this consent at any time.

5. Sharing Your Personal Data

999y does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share data with third parties only in the following limited circumstances:

5.1 Payment Providers

To process deposits and withdrawals, 999y shares the minimum necessary payment information with our payment service providers, including Easypaisa, JazzCash, NayaPay, SadaPay, and Visa/Mastercard processing networks. These providers are bound by their own privacy and security obligations and are permitted to use your data only to complete the transaction.

5.2 Identity Verification Services

Where required for account verification, 999y may use third-party identity verification services. These services process your CNIC or other verification documents solely for the purpose of confirming your identity and age, and are not permitted to retain or use your data beyond that purpose.

5.3 Legal and Regulatory Disclosure

If 999y is required by a court order, regulatory authority, or applicable law to disclose your personal data, we will comply. Where legally permitted to do so, we will notify you of such a disclosure request before complying.

5.4 Business Succession

In the event of a merger, acquisition, or sale of all or part of the 999y business, your personal data may be transferred to the acquiring entity as part of that transaction. In such a case, we will notify registered players and ensure that the privacy protections in this policy continue to apply.

6. Data Retention

999y retains your personal data for as long as your account is active and for a period after account closure as required by our legal and regulatory obligations. Specific retention periods include:

• Account and transaction data: Retained for a minimum of five years following account closure to comply with financial record-keeping obligations.
• Identity verification documents: Retained for five years after the end of the customer relationship.
• Communication records: Customer support communications are retained for two years following resolution of the relevant query.
• Usage and device data: Retained for up to 24 months in aggregated or anonymised form for platform analytics purposes.

After the applicable retention period, your personal data is securely deleted or anonymised in a way that means it can no longer be associated with you personally.

7. Cookies and Tracking Technologies

999y uses cookies — small text files stored on your device — to operate the platform and understand how it is used. The following table explains the categories of cookies 999y uses:

You can manage optional cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of your 999y account, including keeping you logged in.

8. Your Privacy Rights

As a registered user of 999y, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@999y.biz. We will respond to all requests within a reasonable timeframe.

9. Data Security

999y takes the security of your personal data seriously and has implemented the following technical and organisational measures to protect it:

• SSL encryption: All data transmitted between your browser and 999y is encrypted using industry-standard SSL/TLS protocols. This applies to every page on the platform, not just login and payment pages.
• Password hashing: Your 999y account password is never stored in plain text. Passwords are hashed using a secure one-way algorithm so that even 999y staff cannot read your password.
• Access controls: Personal data is accessible only to 999y staff who require it to perform their specific job functions. All staff access to personal data is logged and monitored.
• Server security: 999y's servers are hosted in a secure environment with physical and network access controls, regular security patching, and intrusion detection monitoring.
• Fraud monitoring: 999y continuously monitors account activity for signs of unauthorised access, unusual transaction patterns, and other security anomalies.

While we take all reasonable precautions to protect your data, no online platform can guarantee absolute security. If you believe your 999y account has been compromised, contact us immediately at support@999y.biz so we can take protective action.

10. Children and Under-18s

999y is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register on 999y or attempt to use any part of our platform.

If 999y discovers or is made aware that a registered account belongs to someone under 18, that account will be closed immediately. Any deposits made will be returned to the payment method used, and any bets placed will be voided. No winnings will be paid out to accounts found to belong to underage users.

If you believe a minor has created a 999y account using false information, please contact us at support@999y.biz immediately so we can investigate and take appropriate action.

11. Marketing Communications

With your consent, 999y may send you promotional emails and SMS messages about bonuses, new features, upcoming PSL matches, and other 999y offers. These communications are sent to the email address and phone number associated with your account.

You can opt out of 999y marketing communications at any time in the following ways:

• Click the unsubscribe link in any marketing email from 999y.
• Reply STOP to any promotional SMS received from 999y.
• Update your communication preferences in your 999y account settings.
• Email support@999y.biz with "Unsubscribe" in the subject line.

Opting out of marketing communications will not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, and bet settlement results — which are necessary for the operation of your 999y account.

12. Updates to This Privacy Policy

999y may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page.

For significant changes that affect how we use your personal data in a materially different way from what was described when you first registered, 999y will notify you via email or a prominent notice within the platform before the changes take effect. You will have the opportunity to review the updated policy and, if you do not agree, close your account by contacting support@999y.biz.

We recommend reviewing this page periodically. Your continued use of 999y after any policy update constitutes acceptance of the updated Privacy Policy.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how 999y has handled your personal information, please get in touch with us:

• Email: support@999y.biz (include "Privacy" in the subject line for fastest routing)
• Response time: We aim to respond to all privacy-related enquiries within 5 business days.
• Data requests: Requests to access, correct, or delete your data will be processed within 30 days of receipt.

For concerns about the use of your data specifically for responsible gaming purposes — for example, if you have been flagged by our system or wish to discuss your betting pattern data — please visit our Responsible Gaming page or include "Responsible Gaming" in the subject line of your email.