Privacy Policy

This Privacy Policy (hereinafter "the Policy") describes how y99com (hereinafter "the Platform", "we", "us" or "our"), accessible at https://y99com.cam, collects, processes, stores and protects personal data relating to users (hereinafter "you", "your" or "the User") who register, browse or otherwise interact with the Platform.

y99com is an internationally oriented online gaming and sports betting platform designed with Pakistani players in mind. As part of operating a responsible gaming service, we are committed to handling your personal data with transparency, integrity and care, and to respecting your privacy rights at every stage of our relationship with you.

By accessing the Platform, creating an Account, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

For the purposes of this Policy, the following terms shall have the meanings set out below:

We collect Personal Data through multiple channels depending on how you interact with the Platform. The categories of data we may collect include but are not limited to those set out in the table below.

We collect only the minimum data necessary for the purposes set out in this Policy. We do not intentionally collect sensitive categories of Personal Data such as racial or ethnic origin, religious beliefs, or medical history, unless directly relevant to a responsible gambling self-assessment you choose to complete.

We process your Personal Data on the basis of one or more of the following lawful grounds, depending on the specific processing activity:

• Contractual Necessity: Processing is required to perform the contract between you and y99com — for example, creating your Account, processing deposits and withdrawals, and settling bets.
• Legal Obligation: Processing is required to comply with applicable legal or regulatory requirements, including anti-money laundering (AML) obligations and age verification requirements under the operator's licensing jurisdiction.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud detection, Platform security, service improvement and responsible gambling monitoring, provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your freely given, specific and informed consent — for example, receiving promotional communications about PSL cricket markets, ICC tournament offers or bonus events. You may withdraw consent at any time.

Personal Data collected by y99com is used exclusively for the following purposes. We do not use your data for purposes incompatible with those for which it was originally collected without first obtaining your consent or establishing an alternative lawful basis.

• Creating, managing and maintaining your Account, including authenticating your identity on each login.
• Processing deposits, withdrawals and payment transactions in PKR or other available currencies.
• Verifying your age and identity as required to comply with the operator's KYC obligations and applicable licensing requirements.
• Detecting and preventing fraud, money laundering, account takeover attacks and other forms of abuse or prohibited conduct.
• Monitoring gaming activity to identify signs of problem gambling behaviour and enabling responsible gambling interventions, including self-exclusion, deposit limits and session time limits.
• Providing customer support via live chat (available in English and Urdu) and email, and maintaining records of your support interactions.
• Sending transactional communications such as deposit confirmations, withdrawal notifications and Account security alerts.
• Sending promotional communications about bonuses, offers and Platform events — only where you have opted in to receive marketing.
• Conducting statistical analysis and Platform performance monitoring to improve the user experience.
• Complying with legal obligations, responding to regulatory enquiries and enforcing these Terms and applicable policies.

y99com does not sell, rent or trade your Personal Data to third parties for their own marketing or commercial purposes. We may, however, share your data with the following categories of recipients where necessary and proportionate:

• Payment Processing Partners: Third-party payment service providers engaged to facilitate deposit and withdrawal transactions. These providers receive only the minimum data necessary to process the specific transaction.
• Identity Verification Providers: Specialist KYC and AML service providers who assist in verifying your identity and screening for fraud or sanctions-list matches.
• Game Content Providers: Software and game providers whose titles are offered on the Platform may receive anonymised or pseudonymised session data for technical purposes.
• IT and Hosting Providers: Cloud infrastructure, server hosting and cybersecurity providers who operate the technical environment in which the Platform runs and your data is stored.
• Analytics Providers: Service providers who help us measure Platform performance and user behaviour in aggregated or pseudonymised form.
• Legal and Regulatory Authorities: Law enforcement agencies, licensing bodies and other regulatory authorities where we are required by law, court order or regulatory direction to disclose your data.
• Professional Advisers: Lawyers, auditors and compliance consultants engaged on a confidential basis where reasonably required to operate the Platform lawfully.

y99com uses cookies and similar technologies (including web beacons and local storage objects) to ensure the Platform functions correctly, to remember your preferences, and to gather analytics data that helps us improve the service.

You may disable or delete cookies at any time through your browser settings. Please be aware that disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to stay logged in or to access certain features. Instructions for managing cookies vary by browser; consult your browser's help documentation for specific guidance.

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of legal, regulatory and contractual obligations. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your Account relationship with the Platform and for a minimum of five (5) years after Account closure, in accordance with AML and licensing obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, as required by applicable compliance obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications and Support Records: Retained for up to three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Analytical and Behavioural Data: Typically retained in aggregated or pseudonymised form for up to twenty-four (24) months.
• Marketing Consent Records: Retained from the date of opt-in until you withdraw consent, plus a reasonable period thereafter for compliance record-keeping.

Where data is no longer required, we apply secure deletion or anonymisation procedures to ensure it cannot be recovered or linked back to an individual.

y99com implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields at rest using industry-standard algorithms.
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis.
• Regular security assessments, vulnerability scans and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding Personal Data.
• Incident response procedures designed to detect, contain and report data security breaches in a timely manner.

As an internationally oriented platform, y99com may transfer your Personal Data to, and store it in, countries outside your country of residence. This may include countries that do not have data protection laws equivalent to those in your home jurisdiction.

Where such transfers occur, we ensure that appropriate safeguards are in place to protect your Personal Data, which may include:

• Standard contractual clauses approved by the relevant regulatory authority.
• Transfers to countries recognised as providing an adequate level of data protection by the relevant licensing authority.
• Binding contractual commitments with our Data Processors requiring them to apply equivalent protections to your data.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to other countries as described in this section, in circumstances where such transfers are lawful and appropriate safeguards are in place.

Subject to applicable law and our own legal obligations, you have the following rights in relation to your Personal Data held by y99com:

• Right of Access: You may request a copy of the Personal Data we hold about you and information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Basic profile data can be updated directly through your Account settings.
• Right to Erasure: You may request deletion of your Personal Data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected. This right may be limited where we are required to retain data under applicable law.
• Right to Restrict Processing: You may request that we temporarily restrict Processing of your data — for example, while a dispute about its accuracy is resolved.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to Processing based on our legitimate interests, including for direct marketing purposes. Objecting to marketing communications will result in immediate suppression from promotional mailings.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior Processing.

To exercise any of the above rights, please contact our support team via live chat or at the email address listed in Section 15. We will respond to verifiable requests within thirty (30) days. We may require you to verify your identity before actioning a request.

The Platform is strictly intended for adults aged 18 and over, or the higher minimum age required by the operator's licensing jurisdiction, whichever is greater. We do not knowingly collect or process Personal Data from individuals below the applicable minimum age.

Where we have reasonable grounds to suspect that a User may be below the permitted minimum age, we will suspend their Account and initiate full age verification procedures. If it is confirmed that a User is underage, their Account will be closed, any associated data will be deleted or anonymised to the extent permitted by law, and any funds held in the Account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that a minor may have registered an Account, please contact us immediately at [email protected] so we can investigate and take appropriate action.

The Platform may, from time to time, contain references or links to third-party websites or services — for example, licensed game content providers or responsible gambling resources. This Policy applies solely to Personal Data collected and processed by y99com. We have no control over, and accept no responsibility for, the privacy practices of any third-party website or service.

We encourage you to review the privacy policy of any third-party service you visit independently of the Platform. The inclusion of any third-party reference on the Platform does not constitute an endorsement of that third party's privacy practices or data handling procedures.

y99com reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will endeavour to notify you in advance by posting an updated version of this Policy on this page with a revised "Last Updated" date, and where appropriate by sending a notification to your registered email address.

Continued use of the Platform following publication of any amendments constitutes your acceptance of the revised Policy. If you do not accept any amendment, you should cease using the Platform and may request Account closure in accordance with the Terms and Conditions.

We encourage you to review this Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns or requests relating to this Privacy Policy or the way y99com handles your Personal Data, please do not hesitate to get in touch with our support team. We are available around the clock and can assist in both English and Urdu.