Privacy Policy — YR999 Pakistan Gaming Platform

1 Introduction

yr999 operates an online gaming platform available to players in Pakistan, offering live casino, cricket betting, sports markets, slots and related services. All transactions are processed in PKR and the platform is designed specifically for Pakistan players using local payment methods.

When you register an account on yr999, make a deposit, place a bet or interact with the platform in any way, you share certain information with us. This Privacy Policy describes what data we collect, why we collect it, how we use it and how we protect it. It also explains your rights regarding your personal data and how to exercise those rights.

This Privacy Policy forms part of the yr999 Terms and Conditions and should be read alongside them. By registering an account, you confirm that you have read this policy and consent to the collection and use of your data as described here. If you do not agree with this policy, you must not register an account or use the platform.

We may update this policy from time to time. The revised version will be published on this page with an updated date. Continued use of the platform after a policy update constitutes acceptance of the revised terms.

2 Data We Collect

yr999 collects personal data in the following categories. The specific data collected depends on how you interact with the platform.

yr999 does not collect sensitive data such as racial or ethnic origin, political opinions, religious beliefs or biometric data beyond what is contained in standard government-issued identification documents required for KYC purposes.

3 How We Use Your Data

yr999 uses your personal data only for purposes that are necessary, proportionate and clearly connected to the operation of the platform and your account. The main purposes are:

• Account management: Creating and managing your account, processing logins, maintaining your account balance and VIP tier, and communicating with you about your account.
• Payment processing: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets. Matching payments to your account and reconciling transaction records.
• Identity verification: Conducting KYC checks to verify your identity and age as required for operating the platform responsibly.
• Fraud prevention and security: Detecting and preventing fraudulent activity, bonus abuse, money laundering and unauthorised account access. Monitoring account activity patterns to identify security threats.
• Platform improvement: Analysing usage data to understand how players use the platform, identify technical issues and improve the experience for Pakistan players.
• Customer support: Responding to your queries, resolving disputes and maintaining records of support interactions.
• Promotions and bonuses: Administering bonus offers, cashback programmes, PSL promotions and VIP rewards. Sending you relevant offers based on your account activity — you can opt out of marketing communications at any time.
• Legal obligations: Retaining records as required for compliance with applicable financial and anti-money laundering obligations.

yr999 does not use your personal data for automated decision-making that produces significant legal effects on you without human review. If a decision affecting your account — such as a withdrawal hold or account suspension — is triggered by automated monitoring, a member of the compliance team reviews the case before any final action is taken.

4 Payment Data and PKR Transactions

All financial transactions on yr999 are conducted in PKR. When you make a deposit using JazzCash, Easypaisa, Raast, bank transfer or any other supported method, the following data is collected and processed:

• The payment method type and associated account reference (e.g., your JazzCash mobile number or bank account number)
• The transaction amount in PKR
• The date and time of the transaction
• The transaction reference number provided by the payment provider

Payment data is processed by yr999 and by the respective third-party payment processors (JazzCash, Easypaisa, Raast or the relevant bank). yr999 does not store full card numbers or complete bank account credentials on its own servers. Payment processing is handled through secure, encrypted third-party gateways.

yr999 requires that all payment accounts used for deposits and withdrawals are registered in your own name. This is both a security measure and a requirement of the platform's anti-money laundering procedures. Payments from or to third-party accounts will not be processed and may trigger a KYC review.

5 KYC Verification and Identity Documents

yr999 operates a Know Your Customer (KYC) process to verify the identity and age of all account holders. KYC verification may be required at registration, before a withdrawal is processed or at any other time at the platform's discretion.

Documents you submit for KYC — such as CNIC photos, passport copies, utility bills or payment method screenshots — are:

• Stored securely using encrypted storage.
• Accessed only by authorised members of the yr999 compliance team.
• Used solely for the purpose of identity and age verification.
• Never shared with third parties except where required for legal compliance or fraud investigation purposes.
• Retained for the period required under the platform's data retention policy (see Section 7).

If your KYC documentation is rejected, you will be notified and given the opportunity to resubmit acceptable documents. Accounts that fail to complete KYC within the required timeframe may have withdrawals held or the account suspended pending verification.

6 Sharing Your Data

yr999 does not sell your personal data to third parties. We do not share your data with advertisers or data brokers. Your data is shared only in the following limited and necessary circumstances:

• Payment processors: JazzCash, Easypaisa, Raast, banks and card networks receive the transaction data required to process your PKR deposits and withdrawals.
• Game software providers: Third-party casino and slots software providers receive your session data to enable game play. They do not receive your full identity or payment details.
• Fraud prevention services: yr999 may use third-party fraud detection tools that process technical data (IP address, device fingerprint) to identify suspicious activity. These tools do not receive your full identity data.
• Legal requirements: yr999 may disclose your data to law enforcement or regulatory authorities if required to do so by a valid legal obligation or court order.
• Business transfers: In the event of a merger, acquisition or sale of assets, your data may be transferred to the successor entity as part of that transaction. You will be notified of any such change via account notification.

Any third party that receives your data from yr999 is contractually required to process it only for the specified purpose and to maintain appropriate security standards. yr999 does not permit third parties to use your data for their own marketing or commercial purposes.

7 Data Retention

yr999 retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods for different categories of data are as follows:

• Account and identity data: Retained for the duration of your account and for five years after account closure. This is required to comply with financial record-keeping obligations.
• Transaction records: PKR deposit and withdrawal records are retained for five years after the transaction date.
• KYC documents: Retained for five years after account closure or the date of the last verified transaction, whichever is later.
• Support communications: Retained for two years from the date of the last interaction.
• Technical and usage data: Retained for up to 24 months from the date of collection, after which it is aggregated or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to your identity. Anonymised, aggregated data may be retained for analytical and platform improvement purposes without any retention limit.

8 Cookies and Tracking Technologies

yr999 uses cookies and similar tracking technologies on the platform website and mobile app to deliver core functionality, improve performance and understand how players use the platform. The types of cookies used are:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens and language preference cookies. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregated data about how players navigate and use the platform. This data helps yr999 identify performance issues and improve the user experience. Analytics data is processed in aggregate and is not linked to your individual identity.
• Functional cookies: Remember your preferences such as game display settings, notification choices and account dashboard layout preferences. These improve your experience but are not strictly required for the platform to operate.
• Security cookies: Used by fraud detection systems to identify unusual patterns in session behaviour. These cookies process technical data including IP address and device fingerprint and are essential for platform security.

yr999 does not use third-party advertising cookies or behavioural tracking cookies that follow you across other websites. You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the platform.

9 Data Security

yr999 implements technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Key security measures include:

• SSL/TLS encryption for all data transmitted between your device and the yr999 platform.
• Encrypted storage for sensitive data including KYC documents and payment references.
• Access controls ensuring that personal data is accessible only to authorised yr999 personnel on a need-to-know basis.
• Two-factor authentication options for account login to protect against unauthorised access.
• Regular security audits and monitoring of platform infrastructure.
• Incident response procedures for detecting and responding to data security breaches.

Despite these measures, no online platform can guarantee absolute security. You also have a responsibility to keep your account credentials secure. Do not share your password with anyone. yr999 staff will never ask you for your password. If you suspect your account has been accessed without your authorisation, change your password immediately and contact customer support.

10 Your Data Rights

As a yr999 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact yr999 customer support from your registered account:

yr999 will respond to all data rights requests within 30 days. Where a request is complex or requires additional verification, this period may be extended and you will be informed of the reason for the delay. There is no fee for exercising your data rights under normal circumstances.

11 Under-18 Policy

yr999 is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from persons under the age of 18. Age verification is a mandatory part of the KYC process and accounts found to belong to persons under 18 will be immediately closed.

If you are a parent or guardian and believe that someone under 18 in your household has registered an account on yr999, contact customer support immediately. yr999 will close the account, delete any personal data collected and return any deposited funds to the payment source after completing the necessary verification.

We recommend that parents and guardians use parental control software on shared devices to prevent minors from accessing online gaming platforms.

12 Changes to This Privacy Policy

yr999 may update this Privacy Policy from time to time to reflect changes in platform operations, data processing practices or legal requirements. When changes are made, the updated policy will be published on this page with a revised date at the top.

Where changes are material — for example, a significant change in how your data is used or shared — yr999 will notify registered account holders via account notification or email before the changes take effect. Your continued use of the platform after the revised policy has been published constitutes your acceptance of the updated terms.

If you do not agree with any changes to this Privacy Policy, you should stop using the platform and contact support to close your account. Any data retained after account closure will be handled in accordance with the retention periods described in Section 7.

13 Contact Us About Your Data

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how yr999 handles your personal data, please contact customer support through the platform. Support is available 24 hours a day, 7 days a week.

When contacting support about a data rights request, please provide your registered account username and a description of your request so the team can process it efficiently. Identity verification will be required before any personal data is disclosed or deleted.