9y999 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by 9y999 ("the Platform", "we", "us", "our"), accessible at https://9y999.cam. 9y999 is an English-language online betting and casino information platform built for Pakistani users and others who lawfully access the site. This Policy describes how we collect, use, store, share, and protect personal data in connection with your use of the platform.

9y999 operates as an independent platform. It is not affiliated with, endorsed by, or regulated by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any Pakistani financial institution. References to payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah are made solely as familiar local references and do not imply any endorsement, affiliation, or formal partnership between those institutions and 9y999.

This Policy should be read in conjunction with our Terms & Conditions, which form a binding agreement between you and 9y999. Data protection practices described herein apply to all registered users, visitors, and anyone who accesses any part of the 9y999 platform, regardless of their location.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Controller" means 9y999, the entity that determines the purposes and means of processing personal data.
• "Data Subject" means the identified or identifiable natural person to whom personal data relates — in the context of this Policy, the registered User or visitor.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial data, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Processor" means any third-party service provider that processes personal data on behalf of 9y999 under a data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawal of funds.
• "Cookie" means a small text file placed on a user's device by a website, used to store preferences, session data, or analytics information.
• "PKR" means Pakistani Rupee, the primary currency displayed on 9y999.
• "Sensitive Data" means personal data of a particularly sensitive nature, including government-issued identity documents, financial records, and biometric data submitted for KYC purposes.

03 Data We Collect

3.1 Registration Data

When you create an account on 9y999, we collect the following information: full legal name, date of birth, email address, residential address, chosen username, and password (stored in hashed, non-reversible form). This information is required to create and maintain your account and to comply with age verification obligations.

3.2 Identity Verification (KYC) Data

To process withdrawal requests, we may require you to submit copies of a valid government-issued identity document (such as a Pakistani CNIC or passport) and proof of residential address. Where applicable, we may also collect source-of-funds information in accordance with anti-money laundering (AML) obligations. KYC data is handled with heightened security controls and is not shared beyond our approved KYC verification partners and relevant regulatory or law enforcement authorities where legally required.

3.3 Transaction & Financial Data

We collect records of all deposits, withdrawals, wagers, bonus claims, and account balance changes. Transaction records include amount (in PKR), payment method reference, timestamp in Pakistan Standard Time (PKT), and outcome. We do not store complete payment card numbers; payment processing is handled by approved third-party payment processors.

3.4 Usage and Technical Data

We automatically collect technical data when you access the platform, including IP address, device type and operating system, browser type and version, pages visited, time on page, click paths, and session duration. This data is used to operate the platform securely, detect fraud, and improve user experience.

3.5 Communications Data

When you contact 9y999 via live chat or email at [email protected], we retain records of communications for quality assurance, dispute resolution, and regulatory compliance purposes. Communication records are accessible to authorised support and compliance staff only.

3.6 Cookie and Tracking Data

We collect data through cookies and similar tracking technologies as described in Section 7 of this Policy.

04 Legal Basis for Processing

9y999 processes personal data on one or more of the following legal bases, depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing required to fulfil the agreement between you and 9y999 — including account creation, transaction processing, withdrawal execution, and customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, AML record-keeping, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for 9y999's legitimate business interests, including fraud detection and prevention, platform security, responsible gambling monitoring, and service improvement — where these interests are not overridden by your rights.
• Consent: Where we rely on your consent for specific processing activities (such as non-essential cookies or marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

05 How We Use Your Data

9y999 uses your personal data for the following purposes:

• Creating, maintaining, and managing your account
• Processing deposits and withdrawals in PKR and verifying payment method ownership
• Conducting KYC identity and age verification before processing withdrawals
• Detecting, investigating, and preventing fraud, collusion, and prohibited activity
• Monitoring compliance with our responsible gambling obligations, including identifying potential problem gambling behaviour
• Providing customer support via live chat and email ([email protected] — plain text, not a clickable link)
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts
• Sending promotional communications where you have opted in, or where permitted under applicable rules — you may opt out at any time
• Complying with AML, KYC, and other legal and regulatory obligations
• Improving the platform through analytics, A/B testing, and user experience research
• Enforcing our Terms & Conditions and resolving disputes

We do not use your personal data for automated individual decision-making that produces significant legal effects, except where required by law or where you have been notified and given the opportunity to contest the outcome.

06 Data Sharing & Disclosure

6.1 We Do Not Sell Your Data

9y999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data sharing is limited to the categories set out in this section.

6.2 Service Providers and Processors

We engage trusted third-party service providers to process personal data on our behalf under appropriate data processing agreements. These include:

• KYC and identity verification providers
• Payment processing partners (not named here to avoid implied endorsement)
• Fraud detection and AML screening providers
• Cloud hosting and data storage providers
• Analytics and platform performance monitoring services
• Customer support platform providers

All processors are contractually required to process personal data only as instructed by 9y999, to apply appropriate security measures, and not to use data for their own independent purposes.

6.3 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so — for example, in response to a court order, regulatory investigation, or AML/CTF reporting obligation. We will notify you of such disclosure where permitted by law.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 9y999's business or assets, personal data may be transferred to the acquiring entity. Users will be notified of any such transfer and any material changes to data processing practices that result.

07 Cookies & Tracking Technologies

9y999 uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the platform. Cookies are small text files stored on your device. We use the following categories of cookies:

• Essential Cookies: Required for the platform to function. They enable login sessions, account security, and navigation. These cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language, currency display (PKR), and time zone (PKT) to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform — which pages are visited, how long sessions last, and where users navigate from. This data is used to improve the platform.
• Security & Fraud Cookies: Used to detect suspicious activity, prevent bot traffic, and protect account security.

You may control non-essential cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the platform but may limit our ability to improve the service based on usage patterns. Please consult your browser's help documentation for instructions on managing cookies.

08 Data Retention

We retain personal data for as long as your account remains active and for a defined period following account closure. Retention periods vary by data category:

• Account and Registration Data: Retained for the life of the account plus a minimum of five (5) years following closure, in line with standard AML record-keeping obligations.
• KYC / Identity Documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later, as required by applicable AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Communications Records: Retained for up to three (3) years from the date of the communication, or longer if the record is relevant to an ongoing dispute or legal matter.
• Analytics Data: Retained in aggregated, anonymised form for up to twenty-four (24) months.

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Deletion requests from Data Subjects may not be fulfilled where a legal retention obligation applies.

09 Data Security

9y999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Security measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data in transit
• Encryption at rest for sensitive data categories including KYC documents
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and vulnerability reviews
• Password hashing using industry-standard one-way algorithms
• Multi-factor authentication options for account access
• Audit logging of access to sensitive data systems

No method of transmission over the internet or electronic storage is completely secure. While we apply industry-standard protections, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, we will notify you promptly in accordance with applicable requirements.

You are responsible for maintaining the security of your account credentials. Do not share your password with any person. If you suspect your account has been compromised, contact us immediately via live chat or at [email protected] (plain text — not a clickable link).

10 International Data Transfers

9y999 may transfer personal data to third-party service providers and technology partners located outside Pakistan. Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place — such as contractual data protection clauses, adequacy decisions, or equivalent mechanisms consistent with applicable data protection standards.

By using 9y999, you acknowledge that your personal data may be transferred to and processed in countries that may not have the same data protection laws as Pakistan. Where such transfers occur, we contractually require receiving parties to protect your data to the standard described in this Policy.

11 User Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights with respect to your personal data held by 9y999:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold. Some corrections require re-submission of identity documents.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any applicable legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as where accuracy is disputed or processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected] (plain text — not a clickable link). We will respond within thirty (30) days of receipt. We may require identity verification before processing your request.

12 Children's Privacy

9y999 is strictly for adults. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of eighteen (18) years — or the higher minimum age required by the operator's license jurisdiction. Access by minors is strictly prohibited.

If we become aware that personal data has been collected from a minor without verified parental consent, we will delete that data promptly and close the associated account. If you believe a minor has registered on the platform, please contact us immediately at [email protected] (plain text — not a clickable link).

Being 18 or over does not, by itself, make gambling lawful in Pakistan. Local laws may impose additional restrictions. This clause does not constitute legal advice.

13 Third-Party Links & Services

The 9y999 platform may reference third-party services (such as payment method providers including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah) in an informational context. These references are for user convenience only and do not constitute endorsement, affiliation, or a formal partnership.

9y999 is not responsible for the privacy practices or content of any third-party service, platform, or application. When you interact with a third-party payment processor or any external service, their own privacy policy and terms of service apply. We encourage you to review those policies independently.

14 Changes to This Privacy Policy

9y999 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, data processing practices, or platform operations. When material changes are made, we will notify registered users via email and/or a prominent notice on the platform.

The version date displayed at the top of this document indicates when the Policy was last reviewed. Continued use of the platform following notification of changes constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must stop using the platform and request account closure.

We encourage you to review this Policy periodically to stay informed about how we handle your personal data.

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact 9y999 using the details below. The email address is displayed as plain text only — it is not a clickable link.

We will acknowledge privacy-related requests within five (5) business days and aim to resolve them within thirty (30) days. Where a complaint cannot be resolved directly, you may have the right to escalate to the relevant data protection supervisory authority under the applicable legal framework. This is not legal advice; independent legal guidance should be sought where necessary.

For responsible gambling support or account tools, please visit our Responsible Gambling page. For full account terms, see our Terms & Conditions.