yr999 Privacy Policy — Your Data, Your Rights, Our Commitment

For the purposes of this Privacy Policy, the data controller responsible for the personal information of yr999 platform users is yr999 (referred to throughout this document as "yr999", "we", "us", or "our"). yr999 operates the online betting and casino platform accessible at https://yr999.games, targeting users in Pakistan.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data yr999 holds about you, you may contact our dedicated privacy team at any time. Contact details are provided in Section 14 of this document.

yr999 collects personal data in several categories depending on how you interact with the platform. The following table summarises the types of data we collect and the purpose behind each category:

yr999 does not collect special category data (such as racial origin, political opinions, or health data) unless explicitly required for a regulatory purpose and with your prior consent.

yr999 collects personal data through the following channels:

• Direct input: Data you provide when creating your yr999 account, completing KYC verification, making a deposit or withdrawal, or contacting support.
• Automated collection: Technical and usage data collected automatically as you browse and interact with the yr999 platform, via cookies and server logs (see Section 8).
• Payment processors: Transaction confirmation data received from Easypaisa, JazzCash, SadaPay, Raast, or your bank when a PKR deposit or withdrawal is processed.
• Identity verification services: Where required for KYC, yr999 may cross-reference identity information with third-party verification services to confirm the validity of documents you submit.
• Public sources: Publicly available information, such as fraud or sanctions watchlists, may be checked as part of yr999's anti-money laundering obligations.

yr999 uses your personal data exclusively for the following purposes:

• To create, verify, and manage your yr999 account and ensure it remains secure.
• To process PKR deposits and withdrawals via your chosen payment method and maintain accurate transaction records.
• To settle bets and casino game outcomes and credit any winnings to your PKR balance.
• To comply with anti-money laundering (AML), Know Your Customer (KYC), and other applicable regulatory obligations.
• To detect, investigate, and prevent fraudulent activity, including the use of multiple accounts, bonus abuse, and unauthorised access.
• To monitor player activity for responsible gaming purposes and apply limits or restrictions where appropriate.
• To provide customer support via live chat, email, and other channels in English.
• To send you transactional communications (account alerts, withdrawal confirmations, security notifications) which are non-optional as they are necessary for account operation.
• To send you promotional communications about yr999 offers, new games, and events — only where you have given explicit consent.
• To improve the performance, security, and user experience of the yr999 platform through aggregated analytics.

yr999 relies on the following legal bases for processing personal data:

• Contractual necessity: Processing required to fulfil yr999's obligations to you as an account holder — including account management, bet settlement, and PKR payment processing.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, and other applicable laws in the jurisdictions where yr999 operates.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improving services where these interests are not overridden by your rights.
• Consent: Where yr999 sends marketing communications or uses non-essential cookies, this is done on the basis of your freely given, specific, and informed consent, which can be withdrawn at any time.

yr999 does not sell, rent, or trade your personal information. We may share your data with the following categories of third parties only where strictly necessary:

• Payment service providers: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, and USDT processors — solely for the purpose of processing your PKR deposits and withdrawals.
• Identity verification providers: Third-party KYC services used to verify the authenticity of identity documents submitted during account registration or enhanced verification.
• Fraud prevention services: Third-party services that help yr999 identify and prevent fraudulent activity, operating under confidentiality agreements.
• Technology providers: Cloud hosting, customer support platform, and analytics providers who process data strictly on yr999's behalf under data processing agreements and may not use your data for their own purposes.
• Regulatory and law enforcement authorities: Where yr999 is required by law to disclose information, for example in response to a valid legal order from a Pakistani court or regulator.

yr999 processes all financial transactions in Pakistani Rupees (PKR) through regulated Pakistani payment channels. When you make a deposit or request a withdrawal, yr999 collects and retains records of the transaction amount, date, time, payment method used, and the reference numbers provided by the payment provider.

Full payment card numbers and mobile wallet PINs are never stored by yr999. Where card or wallet credentials are required, they are handled directly by the relevant payment processor under their own security standards. yr999 only retains the last four digits of an account number or card number for identification and reconciliation purposes.

Financial transaction records are retained for a minimum of five (5) years from the date of the transaction to comply with anti-money laundering record-keeping requirements under applicable Pakistani law.

yr999 uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. The categories of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function, including session management and security tokens. These cannot be disabled without impairing basic functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display settings to personalise your yr999 experience.
• Analytics cookies: Used (in aggregate and anonymised form) to understand how players navigate the yr999 platform, which features are most used, and where performance improvements can be made. No individual player is identified from analytics data.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotional content from yr999. You can withdraw this consent at any time through your browser settings or account preferences.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core yr999 betting and casino features, though some personalisation functions may be limited.

yr999 retains personal data for the periods set out below, after which it is securely deleted or anonymised:

• Active account data: Retained for the lifetime of your yr999 account and for five (5) years following account closure, to satisfy regulatory and legal obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AML record-keeping rules.
• KYC documents: Retained for five (5) years from the date of submission or the date of account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last communication in a support case.
• Marketing consent records: Retained until you withdraw your consent, plus an additional two (2) years for audit trail purposes.
• Technical and usage logs: Retained for thirteen (13) months from the date of collection for security and fraud investigation purposes.

yr999 implements a range of technical and organisational security measures to protect the personal data of our Pakistani players against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and yr999's servers.
• Encrypted storage of sensitive data at rest, including identity documents and financial records.
• Two-factor authentication (2FA) available for all yr999 accounts, using your registered Pakistani mobile number.
• Role-based access controls ensuring that yr999 staff can only access personal data where necessary for their job function.
• Regular internal security audits and penetration testing to identify and address vulnerabilities.
• Incident response procedures to detect, respond to, and notify affected users of any data breach in a timely manner.

Despite these measures, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your yr999 login credentials and for logging out of your account on shared devices.

As a yr999 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days and at no charge for the first request per calendar year.