Our Approach
How We Think About Your Data
Six guiding principles shape every data decision we make at y999c.
Purpose Limitation
We collect only the data we genuinely need to operate your account, process transactions and comply with applicable legal obligations. No fishing for extra information.
Data Security
All data is stored using industry-standard encryption. Access to personal data within our organisation is restricted on a need-to-know basis with audit logging enabled.
No Data Sales
We do not sell, rent or trade your personal information to third parties for marketing or commercial purposes — full stop. Your data is yours.
Transparency
This document tells you in plain English exactly what we collect, what we do with it and who we may share it with. No hidden clauses, no vague language.
User Control
You have the right to access, correct, restrict or delete your personal data. We make these rights easy to exercise — simply contact our support team.
Minimal Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. After that, data is securely deleted or anonymised.
1 Introduction
y999c (the "Platform", "we", "us" or "our") is an English-language online betting and casino information platform operated at https://y999c.cam. This Privacy Policy (the "Policy") describes how we collect, use, store, protect and share personal data obtained from individuals ("Users", "you" or "your") who access or use the Platform.
This Policy applies to all Users globally, including those accessing the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and all other locations in Pakistan, as well as from any other country. By registering an account, placing a bet or otherwise using the Platform, you acknowledge that you have read and understood this Policy.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole.
2 Definitions
For the purposes of this Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living natural person, directly or in combination with other data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction. |
| "Controller" | The entity that determines the purposes and means of processing personal data — in this case, the Operator of y999c. |
| "Processor" | A third party that processes personal data on behalf of the Controller under a contractual arrangement. |
| "KYC" | Know Your Customer — the identity verification process required before certain account functions (particularly withdrawals) are enabled. |
| "Cookies" | Small text files placed on your device by a website to store information about your session or preferences. |
| "AML" | Anti-Money Laundering — legal obligations requiring the Operator to verify the source of funds and report suspicious activity. |
| "Third Party" | Any person or entity that is neither the User nor the Operator, including payment processors, analytics providers and game suppliers. |
3 Personal Data We Collect
We collect personal data in the categories described below. We collect only what is necessary for the stated purposes.
| Category | Examples | Why We Collect It |
|---|---|---|
| Identity Data | Full name, date of birth, gender, national identity document number | Account registration; KYC verification; age verification; AML compliance |
| Contact Data | Email address, mobile number, city of residence | Account communication; support responses; security notifications |
| Financial Data | Deposit amounts, withdrawal requests, payment method type, transaction history | Processing transactions; fraud prevention; AML reporting; cashier operations |
| KYC Documents | Copy of government-issued ID, proof of address, source-of-funds documentation | Identity verification; regulatory compliance; withdrawal processing |
| Technical Data | IP address, device type, browser, operating system, session duration, login timestamps | Security monitoring; fraud detection; platform optimisation; responsible gambling monitoring |
| Usage Data | Betting history, game sessions, bonus usage, pages visited on the Platform | Service delivery; responsible gambling monitoring; personalisation; dispute resolution |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Customer service; record-keeping; quality assurance; dispute resolution |
| Marketing Preferences | Opt-in/opt-out status for promotional communications | Sending relevant offers where consent has been given; honouring opt-out requests |
4 How We Collect Personal Data
We collect personal data through the following means:
4.1 Directly From You
- When you complete the account registration form;
- When you submit KYC documents in response to a verification request;
- When you make a deposit or request a withdrawal;
- When you contact our support team by chat or email;
- When you submit feedback or respond to surveys;
- When you opt in to receive promotional communications.
4.2 Automatically
- Through cookies and similar tracking technologies when you visit the Platform (see Section 9);
- Through server logs that record IP addresses, timestamps and pages accessed;
- Through device fingerprinting for security and fraud detection purposes;
- Through your betting and gaming activity on the Platform.
4.3 From Third Parties
- Identity verification and KYC data from third-party document verification services;
- Fraud risk scores from fraud prevention service providers;
- AML screening results from compliance data providers;
- Technical data from analytics platforms operating as our Processors.
5 Legal Basis for Processing
We process personal data under one or more of the following legal bases, depending on the purpose:
- Contractual Necessity: Processing required to perform our contract with you — operating your account, processing deposits and withdrawals, and delivering betting and gaming services.
- Legal Obligation: Processing required to comply with applicable law — including KYC identity verification, AML transaction monitoring, age verification and record-keeping requirements imposed by the Operator's licensing jurisdiction.
- Legitimate Interests: Processing necessary for our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, security monitoring, responsible gambling risk assessment and platform optimisation.
- Consent: Where you have given us explicit consent — for example, when opting in to receive promotional communications. You may withdraw consent at any time by contacting support or updating your account preferences.
6 How We Use Your Personal Data
We use the personal data we collect for the following purposes:
6.1 Account Management
To create and maintain your y999c account, verify your identity, process login authentication and manage account settings including responsible gambling limits.
6.2 Service Delivery
To process your bets and wagers, settle winnings, manage bonus credits, operate the cashier and deliver all features of the Platform — including cricket betting markets, PSL and ICC odds, live dealer games, slots and esports betting.
6.3 Compliance & Legal Obligations
To conduct KYC verification before enabling withdrawals, to carry out AML screening on transactions, to maintain records as required by the Operator's licensing jurisdiction and to respond to lawful requests from regulatory or law enforcement authorities.
6.4 Fraud Prevention & Security
To detect and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse and other security threats. Technical data such as IP addresses and device identifiers are used for this purpose.
6.5 Responsible Gambling
To monitor betting patterns that may indicate problem gambling behaviour, to prompt users to review their limits where appropriate and to action self-exclusion and cool-off requests. This processing is carried out in the interest of player welfare.
6.6 Customer Support
To respond to your queries, complaints and support requests. Support communications are logged for quality assurance and dispute resolution purposes.
6.7 Platform Improvement
To analyse aggregated and anonymised usage data to understand how users interact with the Platform and to improve its performance, navigation and content for Pakistani users.
6.8 Marketing Communications
Where you have opted in, to send you information about promotions, bonuses and new features on y999c. You may opt out of marketing communications at any time by contacting support or clicking the unsubscribe link in any marketing email.
7 Data Sharing with Third Parties
We do not sell or rent your personal data to third parties. We may share personal data with the categories of third parties described below, strictly for the purposes outlined in this Policy:
- Payment Processors: To process deposits and withdrawals. Payment processors handle transaction data under their own privacy and security standards. We do not receive or store full payment card numbers or banking passwords.
- KYC & Identity Verification Providers: To verify documents you submit during the identity verification process. These providers process KYC data as our Processors under contractual data protection obligations.
- AML & Fraud Prevention Services: To screen transactions and account activity against sanctions lists and fraud databases.
- Game & Software Suppliers: Game providers may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your full personal profile.
- Analytics Providers: We use analytics tools to understand platform usage. Where these providers process personal data, they do so under processor agreements and are prohibited from using your data for their own purposes.
- Regulatory & Legal Authorities: We may disclose personal data to regulatory authorities, law enforcement bodies or courts where required to do so by applicable law, a court order, or in connection with an investigation into suspected fraud, money laundering or other criminal activity.
- Group Companies: We may share data within our corporate group where necessary to operate the Platform or comply with legal obligations, subject to the same data protection standards as described in this Policy.
8 International Data Transfers
The Operator operates internationally and some of the third parties with whom we share data may be located outside your country of residence, including outside Pakistan. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with the data protection laws of the Operator's licensing jurisdiction.
Appropriate safeguards may include standard contractual clauses, adequacy decisions, binding corporate rules or other mechanisms recognised under applicable data protection law.
By using the Platform, you acknowledge that your personal data may be processed in countries outside Pakistan, including countries whose data protection laws may differ from those in Pakistan.
9 Cookies & Tracking Technologies
y999c uses cookies and similar technologies to operate the Platform, improve your experience and support security and analytics functions. The categories of cookies we use are described below.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. For more information on managing cookies in popular browsers, consult the help documentation for your browser of choice.
10 Data Retention
We retain personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal obligations. The following general retention periods apply:
- Active Account Data: Retained for the duration of your account registration plus a minimum of five (5) years after account closure, in line with AML and regulatory record-keeping requirements.
- KYC Documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
- Support Communications: Retained for a minimum of two (2) years from the date of the last communication.
- Marketing Preferences: Retained until you withdraw consent or for the duration of your account, whichever is earlier.
- Technical & Log Data: Typically retained for up to twelve (12) months, except where specific records are required for an ongoing security investigation.
After applicable retention periods expire, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.
11 Your Rights as a Data Subject
Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the details in Section 15.
Right of Access
Request a copy of the personal data we hold about you and information about how it is being used.
Right of Rectification
Request correction of any inaccurate or incomplete personal data we hold about you.
Right of Erasure
Request deletion of your personal data where it is no longer necessary, where consent is withdrawn, or where processing is unlawful — subject to our legal retention obligations.
Right to Restriction
Request that we limit processing of your data while a complaint or accuracy query is being resolved.
Right to Portability
Request a copy of certain data in a structured, machine-readable format for transfer to another service, where technically feasible.
Right to Object
Object to processing based on legitimate interests, including processing for direct marketing purposes. Marketing opt-outs take effect immediately.
We will respond to all valid rights requests within thirty (30) days. We may need to verify your identity before fulfilling a request. There is no charge for exercising your rights under normal circumstances; where a request is manifestly unfounded or excessive, we may charge a reasonable fee or decline to act.
12 Children's Privacy
The Platform is strictly prohibited for use by individuals under the age of 18 years, or the higher minimum age required by the applicable operator or licence jurisdiction. We do not knowingly collect personal data from minors.
If we become aware that personal data has been submitted by or on behalf of a person under the minimum age, we will immediately close the associated account, void all transactions and securely delete the data, returning any deposits to the source payment method.
If you believe that a minor has registered an account on y999c, please contact our support team immediately at the email address listed in Section 15.
13 Security Measures
We implement technical and organisational measures appropriate to the risk level of the personal data we process. These measures include:
- Encryption of personal data in transit using TLS (Transport Layer Security) protocols;
- Encryption of sensitive data at rest using industry-standard algorithms;
- Role-based access controls limiting staff access to personal data on a need-to-know basis;
- Audit logging of access to personal data systems;
- Regular security testing and vulnerability assessments;
- Two-factor authentication options for user accounts;
- Continuous monitoring for unusual login activity and suspicious transactions.
Despite these measures, no internet transmission is completely secure. You are responsible for maintaining the security of your own login credentials and for notifying us immediately if you suspect unauthorised access to your account. We will never ask for your password by email or chat.
14 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or the features of the Platform. Where changes are material, we will notify registered users by email at least fourteen (14) days before the updated Policy takes effect.
The "Last Updated" date at the top of this Policy indicates when the most recent version came into force. We encourage you to review this Policy periodically. Continued use of the Platform following any update constitutes your acceptance of the revised Policy.
15 Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or our handling of your personal data, please contact our Data Protection team through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line: Please include "Privacy Request" in the subject of your email
- Live Chat: Available 24/7 through the in-platform chat widget
- Response Time: We aim to respond within 30 days of receiving a valid request
- Languages: English (primary); Urdu assistance available on request
For responsible gambling concerns, self-exclusion requests or problem gambling resources, please visit our Responsible Gambling page.
For all other matters relating to your account or our services, please refer to our Terms & Conditions or our FAQ page.
Your Data. Your Rights. Your y999c.
We built y999c on transparency — that extends to how we handle your data. Explore the platform with confidence knowing your information is protected.