Privacy Policy

This Privacy Policy ("Policy") is issued by yz999 ("yz999", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User") who register for, access, or use the yz999 online gaming platform available at yz999.app, including all associated services, features, games, and communications offered by yz999.

yz999 is committed to protecting the privacy and personal data of its players. This Policy describes in detail the categories of personal data we collect, the purposes for which that data is used, the legal grounds on which processing is based, and the rights you have in relation to your personal data. Please read this Policy carefully before registering an account or submitting any personal information to yz999.

By registering an account on yz999, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not create an account or use the yz999 platform.

For the purposes of this Privacy Policy, yz999 acts as the data controller in respect of personal data collected from players using the yz999 platform. As data controller, yz999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws and the obligations of yz999's international gaming licence.

If you have any questions or concerns regarding the processing of your personal data, or wish to exercise any of the rights described in this Policy, you may contact our dedicated data protection support team via live chat available inside your account dashboard, or by email at [email protected].

yz999 collects personal data through several channels: directly from you when you register and use your account, automatically through your use of the platform, and from third-party sources such as payment processors and identity verification services. The categories of data we collect are set out below.

3.1 Registration & Identity Data

• Full legal name as it appears on your official government-issued identification;
• Date of birth (for age verification purposes — yz999 is strictly 21+ only);
• Pakistani CNIC number or passport number;
• Registered mobile number (Jazz, Telenor, Zong, or Ufone);
• Email address;
• City of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi).

3.2 KYC Verification Documents

• Scanned or photographed copy of your valid CNIC or passport;
• Proof of payment method ownership (e.g., JazzCash or EasyPaisa account screenshot);
• Proof of address documents such as a utility bill or bank statement where required.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment methods used;
• Payment method identifiers (e.g., registered JazzCash or EasyPaisa mobile number, HBL or UBL account details, Meezan Bank account reference, Visa or Mastercard last four digits);
• Account balance history and bonus activity records.

3.4 Gaming Activity Data

• Betting history across all products including cricket sportsbook, slots, live casino, Star Fishing, Pearls of Bingo, and other games;
• Session duration and frequency of play;
• Responsible gaming tool usage (deposit limits, self-exclusion requests, session reminders).

3.5 Technical & Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser type;
• Unique device identifiers;
• Login timestamps and session logs.

3.6 Communications Data

• Content of live chat conversations with our support team;
• Email correspondence with yz999;
• Responses to surveys or promotions where you choose to participate.

yz999 does not knowingly collect sensitive personal data beyond what is necessary for identity verification and regulatory compliance (e.g., document images containing photographs). We do not collect biometric data, health data, or political opinions.

yz999 uses your personal data only for the specific purposes described in this Policy. The table below sets out the primary purposes for which we process your data.

Where yz999 wishes to use your data for a new purpose not described in this Policy, we will notify you and, where required by applicable law, seek your consent before proceeding.

yz999 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contract with you, including operating your account, processing deposits and withdrawals, and delivering gaming services.
• Legal obligation: Processing required to comply with yz999's obligations under its international gaming licence, including KYC identity verification, age verification, anti-money laundering checks, and regulatory reporting.
• Legitimate interests: Processing carried out for yz999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, including where applicable for marketing communications. You may withdraw consent at any time by adjusting your account communication preferences or contacting our support team.

yz999 does not sell, rent, or trade your personal data to any third party for their independent commercial purposes. We may share your personal data with the following categories of recipients, strictly as necessary and under appropriate data protection safeguards:

6.1 Identity Verification Providers

yz999 works with regulated third-party KYC and identity verification services to confirm the identity and age of registered players. These providers process your identity documents and return a verification result to yz999. They are contractually bound to process your data only for this purpose.

6.2 Payment Processors

In order to process deposits and withdrawals, yz999 shares relevant transaction data with payment partners including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card scheme processors for Visa and Mastercard transactions. These parties receive only the data required to execute and reconcile the relevant transaction.

6.3 Regulatory and Licensing Authorities

yz999 is required to share certain data with its licensing authority and, where applicable, with law enforcement agencies or financial intelligence units, where disclosure is required by law, court order, or regulatory obligation. yz999 will only disclose data in response to lawful requests and will notify affected players where permitted by law.

6.4 Technology and Platform Service Providers

yz999 uses a range of technology partners — including cloud hosting providers, gaming software suppliers, and cybersecurity services — who may process personal data on our behalf as data processors. All such providers are bound by data processing agreements that restrict their use of your data to the specified services they provide to yz999.

6.5 Fraud Prevention Networks

To prevent fraud and money laundering, yz999 may share limited identity and transaction data with shared fraud prevention databases and networks used by the online gaming industry. Data shared in this context is limited to the minimum required to perform the fraud check.

yz999 uses cookies and similar tracking technologies on its platform to provide core functionality, improve user experience, and analyse platform usage. The categories of cookies used by yz999 are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as account login sessions, game loading, deposit flow, and security checks. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: These cookies remember your preferences such as language settings and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
• Analytics cookies: yz999 uses anonymised analytics cookies to understand how players navigate the platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is used in aggregate to improve platform performance and usability.
• Security cookies: These cookies help yz999 detect and prevent fraudulent access attempts, bot activity, and suspicious login patterns.

yz999 does not use advertising or cross-site tracking cookies that profile you across third-party websites. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using certain core platform features including account login.

yz999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by our international gaming licence obligations and applicable law. The general retention principles are as follows:

• Active account data: Retained for the duration of your account's active status plus a period of at least five (5) years following account closure, to comply with anti-money laundering record-keeping requirements under our licensing obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later, in accordance with regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years following the date of the transaction for regulatory compliance and dispute resolution purposes.
• Support communications: Retained for a period of three (3) years from the date of the conversation, unless the subject matter requires longer retention for dispute or complaint purposes.
• Marketing consent records: Retained for as long as the consent remains active, plus a reasonable period thereafter to demonstrate compliance.

Where retention beyond these periods is not required by law or legitimate business necessity, yz999 will securely delete or anonymise the relevant data.

yz999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data in transit between your device and yz999's servers;
• Encryption at rest for all stored personal data and identity documents;
• Role-based access controls ensuring that only authorised yz999 personnel with a specific operational need can access personal data;
• Multi-factor authentication requirements for all internal staff accessing data systems;
• Regular penetration testing and security audits conducted by independent specialists;
• Incident response procedures including player notification protocols in the event of a confirmed data breach affecting your rights and freedoms.

While yz999 takes all reasonable precautions to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact our support team immediately via live chat inside your account dashboard.

As a registered player on yz999, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the yz999 support team via live chat or email. We will respond to all valid requests within 30 days of receipt.

Please note that certain rights may be subject to limitations where yz999 is required by law or regulatory obligation to retain or process your data, for example to fulfil anti-money laundering record-keeping requirements under our international gaming licence. Where a limitation applies, yz999 will explain the reason clearly in its response to your request.

yz999 is an adult gaming platform strictly intended for users who are 21 years of age or older. yz999 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted on all registered accounts as part of yz999's KYC process.

If yz999 becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, all associated data will be deleted in accordance with applicable regulations, and any funds will be handled in accordance with yz999's regulatory obligations. Parents or guardians who believe a minor has registered on yz999 should contact our support team immediately via live chat or at [email protected].

As an internationally licensed gaming platform, yz999 may process and store personal data on servers and systems located outside of Pakistan. Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that applicable in the country of the data subject, yz999 ensures that appropriate safeguards are in place to protect that data.

Such safeguards may include contractual clauses with data processors and service providers that impose binding data protection obligations equivalent to international standards, and compliance with data transfer requirements set out in yz999's gaming licence conditions. By registering an account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan on this basis.

The yz999 platform does not include links to external third-party websites other than those required for payment processing or regulatory disclosures. This Privacy Policy applies solely to data processed by yz999 in connection with your use of the yz999 platform at yz999.app. yz999 is not responsible for the privacy practices of any third-party services you may independently access.

yz999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, yz999 will notify registered players via email to their registered address or through an in-platform notification displayed upon login, providing a minimum of seven (7) days' notice before the updated Policy takes effect.

The date of the most recent update is displayed at the top of this page. Your continued use of the yz999 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and close your account.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about the way yz999 processes your personal data, please contact us through the following channels:

For matters relating to responsible gaming, self-exclusion, or account closure, please visit our dedicated Responsible Gaming page.