Privacy Policy — yw999 Player Data Protection

1. Introduction

This Privacy Policy ("Policy") describes how yw999 ("yw999", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("Player", "User", "you") who access or use the yw999 online casino and sports betting platform at yw999.org.

yw999 is committed to handling your personal data with integrity, transparency, and in compliance with applicable international data protection standards. While Pakistan's data protection framework continues to evolve, yw999 voluntarily aligns its data practices with globally recognised principles — including those reflected in the General Data Protection Regulation (GDPR) — to ensure the highest standard of player data protection.

This Policy applies to all personal data collected through the yw999 website, mobile site, customer support channels, and any other touchpoint through which you interact with yw999.

2. Data Controller

yw999 acts as the data controller in respect of all personal data collected from players and visitors to the yw999 platform. As data controller, yw999 determines the purposes and means by which your personal data is processed.

For all data-related enquiries, requests, or complaints, you may contact yw999's designated data protection point of contact at: [email protected]

3. What Personal Data We Collect

yw999 collects the following categories of personal data from players:

yw999 does not collect or process any special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless required by specific regulatory obligations and with your explicit prior consent.

4. How We Collect Your Data

yw999 collects personal data through the following means:

• Direct collection: Data you provide when registering a yw999 account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion;
• Automated collection: Technical and usage data collected automatically when you access the yw999 platform, through server logs, session tracking, and cookies (see Section 8);
• Third-party sources: Identity verification data from licensed KYC service providers; fraud screening data from payment processors such as JazzCash and EasyPaisa; analytics data from platform analytics tools operated on our behalf.

yw999 does not purchase personal data from data brokers or any other third-party commercial data sources for marketing or profiling purposes.

5. How We Use Your Personal Data

yw999 uses your personal data for the following purposes:

• To create, verify, and maintain your yw999 player account;
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods;
• To comply with our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable regulatory requirements;
• To detect, investigate, and prevent fraudulent transactions, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions;
• To provide personalised customer support via live chat and email;
• To send you account-related communications, including transaction confirmations, security alerts, and policy updates;
• To send you promotional offers, bonuses, and marketing communications — but only where you have opted in to receive such communications, or where we have a legitimate interest to do so;
• To monitor gameplay patterns for responsible gaming purposes and to administer self-exclusion and deposit limit tools;
• To improve the yw999 platform through aggregated usage analytics and A/B testing;
• To meet any applicable legal, regulatory, or court-ordered data disclosure obligations.

6. Legal Basis for Processing

yw999 processes your personal data under the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between you and yw999 — including account registration, payment processing, and customer support;
• Legal obligation: Processing required to comply with applicable KYC, AML, and gaming regulatory requirements;
• Legitimate interests: Processing carried out in pursuit of yw999's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

yw999 does not sell or rent your personal data to any third party. yw999 may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment partners — for the purpose of processing deposits and withdrawals;
• KYC & identity verification providers: Licensed third-party KYC service providers used to verify your identity and age as required by our regulatory obligations;
• Fraud prevention services: Third-party fraud screening tools used to detect and prevent financial crime on the platform;
• Platform technology providers: Game software providers, IT infrastructure partners, and cloud hosting services that support yw999's technical operations — all operating under strict data processing agreements;
• Legal and regulatory authorities: Government bodies, law enforcement agencies, or regulators in Pakistan or internationally, where yw999 is legally required or permitted to disclose your data;
• Professional advisers: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations.

Any third party receiving your personal data on behalf of yw999 is contractually bound to process it only for the specified purpose and to maintain appropriate security standards.

8. Cookies & Tracking Technologies

yw999 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the yw999 website. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without preventing core platform functionality;
• Functional cookies: Used to remember your preferences — such as language settings and game lobby layout — to provide a more personalised experience;
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the yw999 platform, enabling us to identify performance issues and improve the user experience;
• Marketing cookies: Used to track whether you arrived at yw999 via a specific promotional channel, so that we can measure the effectiveness of our campaigns. These are only active if you have opted in to marketing communications.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the yw999 platform. Your cookie consent preferences can also be updated at any time via the cookie settings panel accessible from the yw999 website footer.

9. Data Retention

yw999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, regulatory, or accounting requirements. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active yw999 account, plus a minimum of five (5) years following account closure, in line with standard AML record-keeping obligations;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required for financial compliance and dispute resolution;
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the subject matter is the subject of ongoing legal proceedings;
• Marketing preferences and consent records: Retained for the duration of your account and for two (2) years following account closure or consent withdrawal;
• Technical and usage data: Retained in anonymised, aggregated form indefinitely for platform analytics. Identifiable technical data is deleted after twelve (12) months.

Upon expiry of the applicable retention period, your personal data is securely deleted or anonymised in a manner that prevents reconstruction.

10. Security Measures

yw999 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all platform connections and data transmissions;
• Encrypted storage of all sensitive personal and financial data at rest;
• Role-based access controls restricting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all yw999 administrative and operational systems;
• Regular security audits and penetration testing conducted by independent security specialists;
• Incident response procedures — in the event of a confirmed personal data breach, yw999 will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, where required by applicable law.

11. Your Data Rights

As a yw999 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact yw999 support at [email protected]. yw999 will respond to all verified data rights requests within 30 days:

• Right of Access: You may request a copy of all personal data yw999 holds about you, along with information about how it is processed;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your yw999 account;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to yw999's legal retention obligations;
• Right to Restriction: You may request that yw999 restrict the processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved;
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider;
• Right to Object: You may object to the processing of your data where yw999 relies on legitimate interests as its legal basis, including for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

yw999 will not charge a fee for handling a data rights request unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply.

12. Minors & Under-Age Players

The yw999 platform is strictly intended for adults aged 21 years and over. yw999 does not knowingly collect personal data from individuals under the age of 21. If yw999 becomes aware that personal data has been collected from an individual under the minimum age, that data will be deleted immediately and the associated account permanently closed.

If you believe that a minor has registered a yw999 account or provided personal data to yw999 without authorisation, please notify us immediately at [email protected] so that we can take prompt remedial action.

13. International Data Transfers

As an internationally licensed platform, yw999 may transfer personal data to, or process personal data in, countries outside Pakistan in connection with platform operations, technical infrastructure, or regulatory compliance obligations. Where such transfers occur, yw999 ensures that appropriate safeguards are in place, which may include:

• Contractual data protection clauses incorporated into agreements with all third-party data processors located outside Pakistan;
• Transfer only to jurisdictions that maintain adequate data protection standards recognised by applicable regulatory frameworks;
• Technical security measures as described in Section 10 of this Policy, applied regardless of the geographic location of data processing.

Details of the specific safeguards applied to any particular international transfer of your personal data are available upon request from yw999 support.

14. Changes to This Privacy Policy

yw999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. Where a material change is made, yw999 will notify registered players by email to their registered address, or by a prominent notice displayed upon next login, no less than seven (7) days prior to the change taking effect — except where an urgent change is required for legal or security reasons.

The current version number and effective date of this Policy are displayed at the top of this page. We encourage you to review this Policy periodically. Continued use of the yw999 platform following any update constitutes acceptance of the revised Policy.

15. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by yw999, please contact our data protection team through any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for data rights requests;
• Live Chat: Available 24/7 from your yw999 account dashboard after login;
• Response Time: yw999 will acknowledge all privacy-related contacts within 48 hours and respond in full within 30 calendar days.