99y Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal data processed by 99y ("99y", "we", "us", or "our") in connection with the operation of the online gaming platform at 99y.asia (the "Platform"). It applies to all registered players, unregistered visitors, and any other individuals whose personal data 99y processes in the course of its operations.

By accessing the Platform, registering an account, or using any 99y service, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree, you should not use the Platform.

2. Data Controller

For the purposes of applicable data protection law, 99y is the data controller in respect of personal data collected through the Platform. All data protection queries, subject access requests, and complaints may be directed to 99y's support team via live chat or at [email protected]. 99y will respond to all formal privacy requests within thirty (30) calendar days.

3. Information We Collect

99y collects personal data from you through several channels:

3.1 Registration Data. When you create a 99y account, we collect your mobile number, date of birth, and any optional profile information you choose to provide. Your mobile number serves as your unique account identifier.

3.2 Identity Verification (KYC) Data. Before processing your first withdrawal, we collect a copy of your CNIC or other government-issued identification document. This may include your full legal name, CNIC number, date of birth, and photograph.

3.3 Financial Data. We collect details of deposits and withdrawals processed through the Platform, including transaction amounts, dates, payment method identifiers (e.g., JazzCash wallet numbers, last four digits of cards), and transaction reference numbers. We do not store full payment card numbers on our servers.

3.4 Gaming Activity Data. We record your betting history, game play history, account balances, bonus usage, and session information. This data is used to provide the Platform services, to detect fraud, and to meet our regulatory obligations.

3.5 Device and Technical Data. We automatically collect device type, operating system version, browser type, IP address, time zone, and session duration when you access the Platform. This information is used for security, fraud prevention, and service optimisation.

3.6 Communications Data. If you contact 99y support via live chat or email, we retain records of that communication for audit and quality purposes.

3.7 Responsible Gaming Data. If you use self-exclusion, cooling-off, or deposit limit tools, we record that information to ensure we honour your preferences consistently across all access points.

4. How We Use Your Information

99y uses the personal data it collects for the following purposes:

• To create and manage your 99y account and to verify your identity.
• To process deposits and withdrawals via JazzCash, Easypaisa, HBL, Meezan Bank, and other supported payment methods.
• To provide access to betting markets, casino games, and all other Platform features.
• To detect, investigate, and prevent fraud, money laundering, and prohibited conduct.
• To meet our KYC, AML, and other regulatory obligations under applicable international licensing frameworks.
• To send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts via your registered mobile number.
• To enforce our Terms & Conditions and responsible gaming commitments, including honouring self-exclusion requests.
• To improve the Platform through aggregated, anonymised analytics of usage patterns.
• To personalise your experience, including surfacing relevant promotions based on your activity on the Platform.

99y does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

5. Legal Basis for Processing

Where data protection law requires 99y to identify a legal basis for processing personal data, we rely on the following:

• Contract performance: Processing necessary to provide you with the Platform services under our Terms & Conditions.
• Legal obligation: Processing necessary to comply with KYC, AML, and other applicable regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where those interests are not overridden by your rights.
• Consent: Where we send you optional promotional communications, we do so on the basis of your consent, which you may withdraw at any time from your account notification settings.

6. Sharing of Personal Data

6.1 99y does not sell, rent, or trade your personal data to third-party marketers under any circumstances.

6.2 99y may share personal data with the following categories of third parties, strictly to the extent necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, Skrill, Neteller, and USDT TRC20 processors require transaction data to process deposits and withdrawals.
• Identity verification providers: Third-party KYC verification services used to validate the authenticity of CNIC documents.
• Game software providers: Casino and slot game providers receive the minimum data required to run their games (e.g., player session token, bet amount, outcome). They do not receive your full identity data.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory instruction, 99y will disclose personal data to competent authorities.
• Platform infrastructure providers: Hosting, CDN, and security service providers who process data on 99y's behalf under contractual data processing agreements.

6.3 All third-party service providers engaged by 99y are required to process personal data only on 99y's documented instructions and to maintain appropriate security standards.

7. International Data Transfers

As an international platform serving Pakistani players, some of your personal data may be processed on servers located outside Pakistan. Where personal data is transferred internationally, 99y ensures that appropriate safeguards are in place, including contractual protections equivalent to those applicable under 99y's licensing jurisdiction. By using the Platform, you acknowledge and consent to such transfers where necessary to provide the services.

8. Data Retention

8.1 99y retains personal data for as long as your account is active and for a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping obligations and to resolve any post-closure disputes.

8.2 KYC documents are retained for a minimum of five (5) years from the date of verification, in accordance with applicable regulatory requirements.

8.3 Communications data (live chat transcripts, email correspondence) is retained for three (3) years for audit and quality purposes.

8.4 Following the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Cookies and Tracking Technologies

9.1 Session Cookies. 99y uses session cookies to maintain your logged-in state while you navigate the Platform. These are deleted when you close your browser or log out.

9.2 Persistent Cookies. If you select the "Keep me signed in" option at login, a persistent cookie is stored on your device for a limited period to restore your session on your next visit.

9.3 Analytics. 99y uses anonymised analytics to understand how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is aggregated and cannot be used to identify individual players.

9.4 No Behavioural Advertising. 99y does not use third-party advertising cookies or behavioural tracking technologies that profile you for advertising purposes across other websites.

9.5 You can control cookie behaviour through your browser settings. Disabling session cookies will prevent you from logging in to the Platform.

10. Security of Personal Data

99y implements and maintains a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• HTTPS encryption across all pages of the Platform.
• Password hashing using industry-standard algorithms. 99y does not store passwords in plaintext.
• Optional two-step verification available to all registered players.
• Role-based access controls limiting staff access to personal data to those with a documented operational need.
• Regular security reviews and vulnerability assessments.

No system is completely immune to security risk. In the event of a personal data breach that is likely to result in a high risk to your rights, 99y will notify affected players without undue delay.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 99y:

• Right of access: You may request a copy of the personal data 99y holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests.
• Right to data portability: You may request your data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on consent (e.g., promotional notifications), you may withdraw consent at any time from your account settings.

To exercise any of these rights, contact 99y support via live chat or at [email protected]. We will respond within thirty (30) days.

12. Children and Minors

The 99y Platform is strictly for individuals aged 18 and over. 99y does not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided personal data to 99y, please contact support immediately so that the data can be identified and deleted, and the account closed. 18+

13. Changes to This Policy

99y may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. Material changes will be communicated to registered players via account dashboard notification. The "Last updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy.

14. Contact Us

For any privacy-related queries, subject access requests, or complaints, please contact 99y support via the live chat available from your account dashboard. For formal written queries, email: [email protected] (plain text only – not a clickable link). Our support team operates in English, 24 hours a day, 7 days a week.