yx999 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") is published by yx999 ("yx999", "we", "us", "our") and applies to all personal data collected through the yx999 website at yx999.bet, the yx999 mobile application, and all associated services including sports betting, casino games, slot titles, Super Keno, promotional activities, and customer support interactions.

At yx999, we understand that Pakistani players trust us with sensitive personal and financial information. That trust is not taken lightly. This Policy is written in plain, honest terms so that you — the player — can clearly understand what we collect, why we collect it, and what happens to it. We deliberately avoid vague or evasive language in this document because we believe transparency is the only acceptable approach to data privacy.

By registering an account on yx999, downloading the yx999 application, or accessing any part of the yx999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

yx999 collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information received from third-party service providers.

• Registration Data: Full name (as it appears on your CNIC), date of birth, mobile phone number, and chosen account credentials;
• Identity Verification (KYC): National Identity Card (CNIC) number and a copy of your CNIC document, and any additional documents requested during enhanced due diligence;
• Payment Information: JazzCash mobile number, EasyPaisa account number, or bank account details (HBL, UBL, Meezan Bank) provided when making deposits or requesting withdrawals;
• Support Communications: Records of your communications with the yx999 customer support team, including live chat transcripts and email correspondence;
• Responsible Gaming Information: Self-exclusion requests, deposit limit settings, and session reminder preferences submitted through your account settings.

• Gaming Activity: Details of bets placed, games played, wagering amounts, win and loss records, and session duration on yx999;
• Transaction Records: Complete records of all deposits, withdrawals, and bonus transactions associated with your account;
• Device & Technical Data: IP address, device type and model, operating system version, browser type, mobile network operator (Jazz, Zong, Telenor, Ufone, etc.), and app version;
• Usage Data: Pages visited, navigation paths through the yx999 platform, feature usage patterns, and timestamps of platform access.

• KYC/AML Providers: Identity verification results and fraud risk scores from third-party identity verification service providers;
• Payment Processors: Transaction confirmation and status data from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank payment processing systems;
• Game Providers: Gaming session and results data from Evolution Gaming, Pragmatic Play, Ezugi, and other certified game studios whose content is hosted on the yx999 platform.

yx999 uses the personal data it collects for the following specific purposes:

yx999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and yx999 — specifically, to operate your account, process your bets and transactions, and provide gaming services;
• Legal Obligation: Processing required for yx999 to comply with applicable regulatory obligations, including KYC verification, AML monitoring, and record-keeping requirements under internationally recognised gaming regulatory standards;
• Legitimate Interests: Processing carried out in the legitimate interests of yx999 or third parties — including fraud prevention, platform security, abuse detection, and service improvement — where those interests are not overridden by your privacy interests;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent for marketing at any time through your account settings or by contacting support.

yx999 does not sell your personal data to any third party. Your data is shared only in the following specific and controlled circumstances:

yx999 shares personal data with third-party service providers who assist in operating the platform. These providers act strictly as data processors under contractual obligations and are permitted to use your data only for the specific purpose for which it was shared. Categories of service providers include:

• Identity verification and KYC/AML service providers;
• Payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank);
• Licensed game content providers (Evolution Gaming, Pragmatic Play, Ezugi, and others);
• Customer support software and live chat platform providers;
• Platform security and fraud detection technology providers;
• Analytics and performance monitoring tools (using anonymised or aggregated data where possible).

yx999 may be required to disclose your personal data to regulatory authorities, law enforcement agencies, or other government bodies in the following circumstances:

• To comply with a legal obligation, court order, or official regulatory request;
• To report suspicious financial activity as required under applicable AML regulations;
• To report potential match-fixing or betting integrity violations to relevant sporting authorities;
• To protect the legal rights, safety, or property of yx999, its players, or the general public.

yx999 uses cookies and similar tracking technologies on its website to deliver and improve the platform experience. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting core platform functionality;
• Functional Cookies: Used to remember your preferences, such as your chosen language and display settings, to personalise your experience on yx999;
• Analytics Cookies: Used to collect aggregated, anonymised information about how visitors use the yx999 website — pages visited, time spent, and navigation paths — to help us improve the platform;
• Security Cookies: Used to detect unusual login patterns and potential account takeover attempts.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the yx999 platform. The yx999 mobile application uses equivalent device-level tracking technologies subject to the same principles.

yx999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and yx999 servers is encrypted using 256-bit SSL/TLS protocols;
• Encryption at Rest: Sensitive personal data stored in yx999 databases is encrypted at rest using industry-standard encryption methods;
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis with role-based access controls and comprehensive access logging;
• Two-Factor Authentication: yx999 offers SMS OTP-based two-factor authentication for account logins and applies mandatory OTP verification for new device logins;
• Security Monitoring: yx999 operates continuous automated monitoring systems to detect and respond to suspicious activity, potential intrusions, and anomalous account behaviour;
• Regular Security Reviews: yx999 conducts periodic security assessments of its platform infrastructure and data handling practices.

yx999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with yx999 and for a minimum period after account closure as required by applicable regulations;
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, as required under internationally recognised AML regulatory standards;
• Transaction Records: Retained for a minimum of five (5) years following each transaction, as required for financial compliance and audit purposes;
• Support Communications: Retained for a period of three (3) years following the close of each support interaction, or longer if the communication relates to an ongoing dispute;
• Gaming Activity Logs: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

As a player registered on the yx999 platform, you have the following rights with respect to your personal data. These rights may be exercised by contacting the yx999 support team through live chat or at the email address listed in the footer of this page:

• Right of Access: You have the right to request a copy of the personal data yx999 holds about you, along with information about how it is being used;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by yx999;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to yx999's legal and regulatory obligations to retain certain data;
• Right to Restriction: You may request that yx999 restrict its processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified;
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service, where technically feasible;
• Right to Object: You have the right to object to processing of your personal data where yx999 relies on legitimate interests as the legal basis, or where data is used for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

yx999 is strictly a platform for persons aged 21 and above. yx999 does not knowingly collect, process, or retain personal data relating to persons under the age of 21. The platform employs CNIC-based age verification to enforce this requirement at the point of registration.

If yx999 becomes aware that personal data relating to a person under the age of 21 has been collected — whether through a fraudulent registration or any other means — that data will be deleted immediately, the associated account will be suspended, and any funds in the account will be subject to regulatory review prior to any refund decision.

If you have reason to believe that a minor has successfully registered on yx999, please notify the support team immediately via live chat or email so that appropriate action can be taken without delay.

yx999 operates with the support of service providers and technology partners who may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to, stored in, or processed in countries other than Pakistan. This is a normal operational reality for internationally regulated gaming platforms.

Where such transfers occur, yx999 takes appropriate steps to ensure that your personal data receives a standard of protection consistent with this Privacy Policy. These steps include:

• Entering into data processing agreements with recipient entities that require them to protect personal data to the same standard as yx999 itself;
• Using service providers that are certified under internationally recognised data protection standards where applicable;
• Ensuring that game providers who receive session data are themselves subject to data protection obligations under their own regulatory frameworks.

yx999 may send you promotional communications about bonuses, new games, tournaments, and special offers — but only where you have given your explicit consent to receive such communications. Consent for marketing is collected separately from the general account registration process.

If you have consented to receive marketing communications, you may withdraw that consent at any time through one of the following channels:

• Updating your notification preferences inside your yx999 account settings;
• Replying to any SMS marketing message with the word STOP;
• Contacting the yx999 support team via live chat and requesting removal from marketing communications.

Withdrawal of marketing consent does not affect the sending of essential transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming notifications — which are sent as a necessary part of managing your yx999 account and cannot be disabled.

The yx999 platform may contain links to or integrations with third-party services, including game provider interfaces, payment provider portals, and customer support tools. This Privacy Policy applies only to personal data collected and processed directly by yx999. It does not cover the privacy practices of third-party services or platforms.

When you interact with third-party services accessible through the yx999 platform — for example, when processing a JazzCash payment or playing a game hosted by Evolution Gaming — those services operate under their own privacy policies. yx999 is not responsible for the privacy practices of these third-party providers, though it does select partners that maintain industry-standard data protection commitments.

yx999 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, yx999 will provide notice through one or more of the following channels: a prominent notice on the yx999 website, a notification within the yx999 application, or an SMS or email to registered players where appropriate.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the yx999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not accept a revised Privacy Policy, you should cease using the platform and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how yx999 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which yx999 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available directly on the yx999 website and in the yx999 app, 24 hours a day, 7 days a week. Average response time is 3–5 minutes. Both Urdu and English speaking agents are available;
• Email: Contact our privacy and support team at the address shown in the footer of this page — support at yx999.bet;
• Account Settings: Many data rights requests, including marketing opt-outs, deposit limit changes, and responsible gaming settings, can be handled directly through your yx999 Account Settings panel without needing to contact support.