yz999 Privacy Policy

This Privacy Policy applies to all users of the yz999 Platform accessible at yz999.org, including visitors who browse without a registered account and registered members who participate in casino games, live dealer tables, slot games, and sports betting markets including PSL cricket betting. yz999 is committed to handling personal data responsibly, transparently, and securely.

By accessing the yz999 Platform in any capacity — whether from Karachi, Lahore, Islamabad, Faisalabad, or anywhere else — you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein. If you do not agree, please discontinue use of the Platform immediately.

For the purposes of applicable data protection law, yz999 acts as the data controller in respect of all personal data collected through the Platform. As data controller, yz999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable legal requirements.

All data protection enquiries and requests relating to this Privacy Policy should be directed to yz999 using the contact details set out in Section 14 of this Policy. We will acknowledge your enquiry within 48 hours and aim to provide a substantive response within 14 calendar days.

yz999 collects personal data through several channels when you use the Platform. The categories of data we collect are described below:

yz999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming assessments and only with your explicit consent in that context.

yz999 uses the personal data we collect strictly for the purposes described in this Policy. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes of our data processing activities are as follows:

• Account Management: To create, maintain, and administer your yz999 account, including processing registrations, managing login credentials, and updating account details.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa. Financial data is used solely to execute transactions and to maintain accurate account ledgers.
• Identity & Age Verification: To verify that you are who you say you are and that you meet the minimum age requirement of 21 years. Verification is mandatory before withdrawals are processed and may be requested at any time.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other violations of our Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to administer responsible gaming tools including deposit limits, loss limits, session alerts, and self-exclusion.
• Platform Improvement: To analyse usage data in aggregated and anonymised form to improve the performance, design, and content of the yz999 Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and communicate account-related information.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including record-keeping requirements and responses to lawful requests from competent authorities.
• Marketing (with consent): To send you promotional communications about yz999 bonuses, new games, and PSL cricket betting markets where you have given explicit consent. See Section 12 for your opt-out rights.

yz999 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and yz999, including account management, game participation, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and record-keeping duties.
• Legitimate Interests: Processing necessary for the legitimate interests of yz999, including fraud prevention, Platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent, primarily in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

yz999 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how the Platform is used. The types of cookies we deploy are described below:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and preferred deposit method, so you do not need to reconfigure them on each visit.
• Analytical Cookies: Used in aggregated, anonymised form to understand how users navigate the Platform. This data helps yz999 improve page structure, game discovery, and overall user experience.
• Marketing Cookies: Used to deliver relevant promotional content about yz999 games and offers where you have consented to marketing communications. These cookies are not used to build profiles for third-party advertising.

yz999 does not deploy fingerprinting scripts, pixel trackers, or any cross-site tracking technology beyond what is described in this section.

yz999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your data with the following categories of third parties solely as required to operate the Platform and fulfil our legal obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa require transaction data to process your deposits and withdrawals. These processors are contractually bound to handle your financial data securely and in accordance with applicable data protection standards.
• Identity Verification Providers: Third-party Know Your Customer (KYC) service providers may receive copies of your identity documents to perform age and identity checks. These providers are bound by strict data processing agreements.
• Game Software Providers: yz999 hosts games developed and certified by third-party game studios. Certain gameplay and RNG audit data may be shared with these providers for integrity verification purposes. No personally identifiable data is shared with game studios beyond what is strictly necessary.
• Legal & Regulatory Authorities: yz999 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by law, court order, or lawful regulatory request.
• IT & Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers who process data on our behalf under strict data processing agreements that prohibit independent use of your data.

yz999 retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account relationship with yz999, plus a minimum of five years following account closure, to meet anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven years from the date of the transaction, in accordance with standard financial record-keeping obligations.
• Identity Verification Documents: Retained for five years following account closure or the date of the last transaction, whichever is later.
• Customer Support Correspondence: Retained for three years from the date of the last interaction, unless the content relates to an open dispute or legal matter, in which case it is retained until resolution.
• Marketing Consent Records: Retained for the duration of your consent plus three years to demonstrate compliance with applicable consent requirements.
• Technical Logs: Server access logs and security event logs are retained for a maximum of 12 months, after which they are anonymised or deleted.

Once a retention period expires, yz999 will securely delete or anonymise your personal data in a manner that prevents reconstruction of the original information.

yz999 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the yz999 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all sessions regardless of whether you are browsing on mobile or desktop.
• Encrypted Data Storage: Sensitive data fields including financial account references and identity document copies are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within the yz999 organisation is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: yz999 offers two-factor authentication (2FA) for all registered accounts. We strongly encourage all Pakistani users to enable 2FA via the account security settings to provide an additional layer of protection.
• Regular Security Audits: The Platform undergoes periodic security assessments and penetration testing conducted by independent cybersecurity professionals to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, yz999 has an incident response plan that includes timely notification to affected users and relevant authorities.

As a user of the yz999 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team via 24/7 live chat or at [email protected] (plain text — not a clickable link):

• Right of Access: You have the right to request a copy of the personal data yz999 holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 calendar days of receiving your verified request.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held about you. Where possible, you can update basic account details directly from your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that certain data must be retained to meet our legal obligations and cannot be erased on request.
• Right to Restriction: You may request that yz999 restricts processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your data in a portable format to transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data where yz999 relies on legitimate interests as the legal basis. yz999 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights Related to Automated Decision-Making: yz999 does not make decisions that produce significant legal effects on you based solely on automated processing, without human review.

The yz999 Platform is strictly restricted to individuals aged 21 years or older. yz999 does not knowingly collect, process, or retain personal data belonging to any person under the age of 21. Age verification is a mandatory step in the account registration process and is enforced prior to real-money play being enabled.

yz999 employs a range of technical controls to prevent minors from accessing the Platform, including mandatory date-of-birth entry at registration, document-based age verification, and automated age-check triggers during payment processing. We also recommend that adults who share devices with children activate parental control software at the operating system level as an additional safeguard.

yz999 may send you promotional communications about new casino games, slot releases, live PSL cricket betting markets, bonus offers, and other Platform updates — but only where you have given your explicit consent to receive such communications at the time of registration or subsequently via your account settings.

• Marketing emails and SMS notifications will always clearly identify yz999 as the sender and will include a clear, one-click opt-out mechanism.
• You can update your marketing preferences at any time from the Notifications section of your account dashboard without needing to contact support.
• Opting out of marketing communications will not affect your access to the Platform, your ability to play games, or the processing of your transactions.
• yz999 does not share your contact details with third-party marketers for their own promotional use.
• Transactional communications — including deposit confirmations, withdrawal notifications, and account security alerts — are not marketing communications and will continue regardless of your marketing preferences.

yz999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The date of the most recent revision is shown prominently at the top of this page.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — yz999 will notify registered users by email to the address on file and by displaying a notice on the Platform for a period of not less than 14 days prior to the changes taking effect. Non-material amendments such as typographical corrections or minor clarifications may be made without prior notice.

Your continued use of the yz999 Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease use of the Platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way yz999 handles your personal data, please reach out to us using the details below. All privacy correspondence is treated as confidential and handled by our dedicated data protection team.

• Live Chat: Available 24/7 directly from the yz999 Platform. Average response time is under 2 minutes.
• Email (plain text — not a clickable link): [email protected]
• Response Commitment: We will acknowledge all privacy-related enquiries within 48 hours and aim to resolve them fully within 14 calendar days.