Privacy Policy

This Privacy Policy ("Policy") describes how ya999 ("ya999", "we", "us", "our") collects, uses, discloses, stores and protects personal data obtained from users ("you", "your", "User") of the ya999 online betting and gaming platform accessible at https://ya999.cam, including any related mobile-optimised interfaces or applications (collectively, the "Platform").

By registering an account, visiting the Platform or otherwise interacting with our services, you acknowledge that you have read and understood this Policy. Where processing is based on your consent, your continued use of the Platform following notice of this Policy constitutes that consent. You may withdraw consent at any time as described in Section 11.

ya999 is an English-language platform built for Pakistani users, including players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. All data-handling practices described in this Policy apply equally to all users of the Platform regardless of location.

The following definitions apply throughout this Policy unless context requires otherwise:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the legal entity that determines the purposes and means of Processing Personal Data — in this context, the Operator of the ya999 Platform.
• "Data Processor" means a third party that Processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "KYC Data" means identity, age and address verification documents collected during the Know Your Customer process, including CNIC copies, passport scans and utility bills.
• "Transaction Data" means records of deposits, withdrawals, wagers, bonuses and account balance movements.
• "Technical Data" means device identifiers, IP addresses, browser type, operating system, session durations and related technical information collected automatically.
• "Marketing Data" means preferences, communication opt-ins and promotional interaction history.
• "Sensitive Data" means Personal Data that warrants heightened protection, including financial account details and government-issued identity numbers.

ya999 collects the following categories of Personal Data:

ya999 collects Personal Data through the following means:

• Direct Provision: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting customer support or responding to surveys.
• Automated Technologies: Data collected automatically when you visit or interact with the Platform, including cookies, session tracking, device fingerprinting and server log files. See Section 8 for details on cookies.
• Third-Party Verification Providers: Identity and age verification data returned by KYC service providers engaged by ya999 to confirm the authenticity of documents submitted by users.
• Payment Processors: Transaction confirmation data returned by payment processors following a deposit or withdrawal instruction, used to reconcile Account balances.
• Game Providers: Round-level game data returned by third-party game providers integrated into the Platform, used to populate your betting history and settle wagers.
• Fraud Detection Partners: Risk signals and device intelligence data provided by fraud-detection service providers, used to identify suspicious account activity.

ya999 relies on one or more of the following legal bases when Processing your Personal Data:

• Contractual Necessity: Processing required to perform the contract between you and ya999 — for example, creating your account, processing deposits and withdrawals, settling wagers and providing customer support.
• Legal Obligation: Processing required to comply with applicable law and regulatory requirements, including anti-money-laundering (AML) obligations, age verification mandates and record-keeping requirements imposed by the Operator's license jurisdiction.
• Legitimate Interests: Processing necessary for ya999's legitimate business interests, including fraud prevention, platform security, responsible-gambling monitoring, internal analytics and service improvement — provided those interests are not overridden by your fundamental rights and interests.
• Consent: Processing based on your freely given, specific and informed consent — primarily used for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ya999 uses the Personal Data it collects for the following purposes:

• Account Management: Creating, maintaining and securing your ya999 account; processing login requests; managing password resets and two-factor authentication.
• Identity & Age Verification: Conducting KYC checks to verify your identity, confirm you meet the minimum age requirement (18+ or higher where required) and comply with AML obligations.
• Payment Processing: Facilitating PKR-denominated deposits and withdrawals; reconciling account balances; investigating and resolving payment disputes.
• Wager Settlement: Recording bets placed on cricket, PSL, ICC tournaments, football, UFC and other markets; settling outcomes; crediting winnings to your Account Balance.
• Responsible Gambling: Monitoring betting patterns to identify potential problem-gambling indicators; applying deposit limits, loss limits and self-exclusion settings; sending session-time reminders.
• Fraud & Security: Detecting and preventing multi-accounting, bonus abuse, payment fraud, chargeback fraud and unauthorised account access.
• Customer Support: Responding to enquiries, complaints and live-chat requests; maintaining support records for quality assurance.
• Legal Compliance: Retaining records as required by the Operator's license jurisdiction; responding to lawful requests from regulatory or law-enforcement authorities.
• Marketing (with consent): Sending promotional offers, bonus notifications and event-based communications — such as alerts ahead of major PSL or ICC fixtures — where you have opted in. You may unsubscribe at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game content, page performance and mobile-first design for Pakistani users.

ya999 does not sell your Personal Data. We may share it only in the following limited circumstances:

• KYC & Verification Providers: Identity verification and age-check service providers engaged to process your KYC documents. These providers act as Data Processors under written contracts that prohibit them from using your data for any other purpose.
• Payment Processors: Payment infrastructure providers necessary to execute deposit and withdrawal instructions. Only the minimum data necessary to complete the transaction is shared.
• Game Providers: Third-party game studios and platform providers whose content is integrated into ya999. Game providers receive only the data necessary to operate the game session and return the result.
• Fraud & Risk Management Partners: Third-party fraud-detection and device-intelligence services that help ya999 identify suspicious activity. These partners are bound by confidentiality obligations.
• Regulatory & Law Enforcement Authorities: Where ya999 is required by law, court order or regulatory directive to disclose Personal Data, we will comply with such obligations. Where lawfully permissible, we will notify affected users.
• Corporate Transactions: In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

ya999 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the Platform, maintain your logged-in session, detect fraud and understand how users interact with the Platform.

The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection tokens and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, odds format and deposit limit acknowledgements. These improve your experience but are not essential.
• Analytics Cookies: Used to collect aggregated, anonymised data on how users navigate the Platform — for example, which pages are visited most frequently and where users encounter errors. This data is used solely to improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity and suspicious device behaviour. These are a core part of ya999's fraud-prevention infrastructure.

ya999 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality and you may not be able to log into your account.

ya999 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These include:

• Encryption in Transit: All data transmitted between your device and the ya999 Platform is encrypted using TLS 1.3 or higher. Connections over HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Personal Data and financial records stored on ya999's servers are encrypted using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. Administrative access requires multi-factor authentication and is subject to audit logging.
• Intrusion Detection: ya999 employs real-time monitoring, anomaly detection and intrusion-prevention systems to identify and respond to potential security incidents.
• Penetration Testing: Regular third-party security assessments and penetration tests are conducted to identify and remediate vulnerabilities.
• Incident Response: ya999 maintains a documented data-breach response procedure. In the event of a breach that poses a risk to affected users, we will notify relevant parties in accordance with applicable law.

ya999 retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected or to meet applicable legal, regulatory and audit requirements. The following general retention guidelines apply:

• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in line with standard anti-money-laundering record-keeping requirements applicable in the Operator's license jurisdiction.
• Transaction & Betting Records: Retained for a minimum of five (5) years from the date of the transaction to support dispute resolution, regulatory review and audit obligations.
• Account Profile Data: Retained for the duration of the active account relationship and for a minimum of two (2) years following account closure.
• Support Correspondence: Retained for two (2) years from the date of the final communication in a support thread.
• Marketing Data: Retained until you withdraw consent or unsubscribe, after which marketing preferences are suppressed but a record of the opt-out is retained to demonstrate compliance.
• Technical & Usage Data: Typically retained for thirteen (13) months in identifiable form, after which it is anonymised or deleted.

When Personal Data is no longer required, it is securely deleted or anonymised in accordance with ya999's internal data-disposal procedures.

Subject to applicable law and verification of your identity, you may exercise the following rights in relation to your Personal Data held by ya999:

• Right of Access: Request a copy of the Personal Data ya999 holds about you, along with information about how it is used.
• Right to Rectification: Request correction of inaccurate or incomplete Personal Data. You may also update most profile information directly from your account dashboard.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that KYC and Transaction Data must be retained for minimum statutory periods and cannot be deleted on request alone.
• Right to Restriction: Request that ya999 restricts the Processing of your Personal Data in certain circumstances — for example, while the accuracy of data is disputed.
• Right to Data Portability: Request that ya999 provides your Personal Data in a structured, commonly used and machine-readable format where processing is based on consent or contractual necessity.
• Right to Object: Object to Processing based on legitimate interests, including direct marketing. Where you object to marketing, ya999 will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, submit a written request to [email protected]. ya999 will respond within thirty (30) calendar days of receiving a valid, verified request. We may need to verify your identity before processing your request to prevent unauthorised access to your data.

ya999 operates as an international online platform. Your Personal Data may be transferred to and processed in countries other than Pakistan, including the Operator's license jurisdiction and the locations of third-party Data Processors engaged by ya999.

Where Personal Data is transferred outside the jurisdiction in which it was collected, ya999 ensures that appropriate safeguards are in place, including:

• Standard contractual data-protection clauses incorporated into agreements with Data Processors.
• Transfer to jurisdictions that provide an adequate level of data protection as determined by applicable law.
• Technical security measures — including encryption and access controls — applied consistently regardless of the location of processing.

By using the Platform, you acknowledge that your Personal Data may be processed in international locations and consent to such transfers on the basis described in this Policy.

The ya999 Platform is strictly for adults only. You must be at least 18 years of age — or the higher minimum age required by the Operator's license jurisdiction — to register an account and use the Platform. ya999 does not knowingly collect Personal Data from individuals who do not meet this age requirement.

If ya999 discovers that Personal Data has been submitted by an underage individual, the account will be immediately closed, all associated data will be securely deleted (subject to any applicable legal retention obligations) and any funds deposited by the underage user will be returned via the original payment method following verification.

If you believe a minor has registered an account on the Platform, please notify us immediately at [email protected]. We will investigate and take appropriate action without delay.

The ya999 Platform may contain references to third-party services — such as payment providers familiar to Pakistani users — for contextual purposes. ya999 does not include outbound links to third-party websites within the Platform's primary navigation or content areas.

Where any third-party integration is present (for example, embedded game content from a licensed game studio), that third party's own privacy practices will govern the data it processes directly. ya999 is not responsible for the privacy practices of third-party game providers, payment processors or other service providers beyond the obligations imposed through our contractual arrangements with them.

We encourage users to review the privacy notices of any third-party service they interact with in connection with their use of ya999.

ya999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law or the Operator's license requirements. All changes will be posted to this page with an updated "Last Updated" date at the top of the document.

Where changes are material — for example, a change in the categories of Personal Data collected or a new purpose for which existing data will be used — ya999 will provide prominent notice via an on-Platform notification and/or an email to your registered address at least seven (7) days before the change takes effect, where practicable.

Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree with the revised Policy, you must stop using the Platform and close your account prior to the effective date of the change.

If you have any questions about this Privacy Policy, wish to exercise your data-subject rights or need to report a privacy concern, please contact the ya999 data team using the details below. All privacy requests are logged, acknowledged within 48 hours and handled in accordance with our internal privacy response procedure.

Email: [email protected] (plain text — not a clickable link)

Subject Line: Please include "Privacy Request" or "Data Subject Request" in your email subject line to ensure prompt routing to the appropriate team member.

Response Target: ya999 aims to respond to all privacy-related enquiries within three (3) business days and to fully resolve data-subject requests within thirty (30) calendar days. For complex requests, a one-month extension may apply, of which you will be notified.

Support Hours: 24 hours a day, 7 days a week, in English and Urdu.