yy99 Privacy Policy – How We Protect Your Personal Data

1Who We Are

yy99 is an online sports betting and gaming platform accessible at yy99.pro, providing services to members in Pakistan. References to "yy99", "we", "us" or "our" throughout this policy refer to the platform and its operating entity. References to "you", "member" or "user" refer to any individual who registers an account or accesses any part of the yy99 platform.

yy99 acts as the data controller for personal information collected through the platform. If you have any questions about how your data is handled, you can reach the support team at the contact details provided in Section 14 of this policy.

2Personal Data We Collect

yy99 collects personal data in the following categories. We only collect what is genuinely necessary to operate the platform and provide services to members.

We do not collect special categories of sensitive personal data such as biometric data, health information or political opinions. We do not collect payment card numbers in full — card processing is handled by our payment processors, not stored on yy99 systems.

3How We Use Your Personal Data

The personal data yy99 collects is used for the following purposes:

• Account administration: Creating and managing your yy99 account, verifying your identity and age, and keeping your account details up to date.
• Providing platform services: Processing bets and game play, crediting winnings, managing your PKR wallet and enabling features such as live in-play betting on cricket and PSL matches.
• Payment processing: Handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfers and card payments, and reconciling your transaction history.
• Security and fraud prevention: Detecting and preventing fraudulent activity, multi-accounting, money laundering and unauthorised access to accounts.
• Customer support: Responding to queries, resolving disputes and managing responsible gaming requests such as self-exclusion.
• Platform improvement: Analysing aggregated usage data to understand how members use yy99 and to improve the experience, particularly during high-traffic events like PSL matches.
• Communications: Sending account-related notifications, deposit confirmations, withdrawal updates and — where you have opted in — promotional messages about bonuses and offers relevant to Pakistan members.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour and enabling the responsible gaming tools described in the Responsible Gaming section.

4Legal Basis for Processing

yy99 processes your personal data on the following legal grounds:

• Contract performance: Processing necessary to provide the services you signed up for — account management, payment processing and bet settlement.
• Legitimate interests: Security monitoring, fraud detection, platform analytics and responsible gaming oversight, where these interests do not override your rights.
• Legal obligation: Record-keeping and identity verification required to meet applicable obligations, including anti -money-laundering requirements.
• Consent: Marketing communications and optional cookies, where you have given explicit consent. You may withdraw consent at any time by contacting support or adjusting your account notification settings.

5Data Sharing and Third Parties

yy99 does not sell your personal data to third parties for their own marketing purposes. We share data only where necessary and with appropriate safeguards in place. The categories of recipients are:

• Payment processors: JazzCash, Easypaisa, Raast, bank partners and card processing providers receive the financial data necessary to complete your PKR transactions. Each processor operates under its own privacy commitments.
• Game software providers: Third-party game studios that supply slots, fish games, live casino and other content may receive a session token and anonymised player identifier to enable gameplay. They do not receive your full identity or contact details.
• Identity verification services: Where document-based KYC verification is required, a specialist verification provider may process copies of your identity documents. These providers are bound by strict confidentiality obligations.
• Analytics and security tools: Aggregated or pseudonymised technical and usage data may be processed by analytics providers to help yy99 identify performance issues and security threats.
• Legal and regulatory requirements: yy99 will disclose personal data to relevant authorities where required to do so by applicable law, court order, or to protect the safety and security of the platform and its members.

6Payments and Transaction Data

All financial transactions on yy99 are conducted in PKR. When you make a deposit via JazzCash, Easypaisa, Raast, bank transfer or card, the transaction details are passed securely to the relevant payment processor. yy99 retains a record of the transaction — including amount, method, date and status — for account management, dispute resolution and record-keeping purposes.

Full payment card numbers are never stored on yy99 systems. Card transactions are processed using tokenisation through our payment partners, meaning only a non-sensitive token reference is held on our side. JazzCash and Easypaisa mobile wallet references are stored only in hashed or masked form.

Your transaction history is visible within your yy99 account at all times. If you believe there is an error in your transaction records, contact support with the relevant details and we will investigate promptly.

7Cookies and Tracking Technologies

yy99 uses cookies and similar technologies on the website and in the mobile app to make the platform work correctly and to understand how members use it. The types of cookies used are:

• Essential cookies: Required for the platform to function — including keeping you logged in, remembering your language and currency preferences (PKR), and maintaining session security. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand how pages and features are used — for example, which sports markets are most popular during cricket and PSL seasons — so that yy99 can improve the experience. Data collected is aggregated and not tied to your identity.
• Preference cookies: Remember your display settings and platform preferences between sessions so you do not have to reconfigure them each time you log in.

yy99 does not use advertising or retargeting cookies that track you across external websites. You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the platform.

8Data Security

yy99 implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration or disclosure. Key measures include:

• SSL/TLS encryption for all data transmitted between your device and the yy99 platform.
• Encryption of sensitive data fields at rest within our databases.
• Access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis.
• Regular security reviews and monitoring for unusual access patterns or potential breaches.
• Two-factor authentication options available for member accounts to reduce the risk of unauthorised login.

9Data Retention

yy99 retains your personal data for as long as your account is active and for a period after account closure as required for the following purposes:

• Active accounts: All account and transaction data is retained for the duration of your membership.
• Closed accounts: Identity and transaction records are retained for a minimum period after account closure to meet record-keeping obligations and to handle any post-closure disputes or queries.
• Responsible gaming records: Self-exclusion records are retained for the full period of the exclusion and for a reasonable period afterwards to prevent reinstatement requests being processed prematurely.
• Marketing data: If you have opted in to marketing communications, your preferences are retained until you opt out. Upon opt-out, your details are removed from active marketing lists promptly.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to your identity.

10Your Rights Over Your Personal Data

As a yy99 member, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data yy99 holds about you at any time.
• Right to rectification: If any data we hold about you is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure: You may request deletion of your personal data. Note that where we are required to retain certain records for legal or dispute-resolution purposes, full deletion may not be immediately possible.
• Right to restriction: You can ask us to limit how we process your data in certain circumstances — for example, while a dispute is being investigated.
• Right to object: You can object to processing carried out on the basis of legitimate interests, including direct marketing. If you object to marketing communications, we will stop sending them promptly.
• Right to withdraw consent: Where processing is based on your consent — such as promotional emails — you may withdraw that consent at any time via your account settings or by contacting support.

To exercise any of these rights, contact the yy99 support team with your request. We aim to acknowledge all data rights requests within 72 hours and fulfil them within a reasonable timeframe, subject to identity verification to protect your account security.

11Minors and Age Policy

yy99 is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been registered by a minor, it will be closed immediately and any associated data will be deleted, subject to any legal record-keeping requirements related to the underage registration itself.

Parents and guardians in Pakistan are encouraged to use device-level parental controls to prevent minors from accessing online betting and gaming platforms. If you believe a minor has registered on yy99, please contact our support team immediately so the matter can be addressed without delay.

12Third-Party Services and External Links

The yy99 platform may reference or integrate with third-party services — such as game providers, payment processors and analytics tools — that operate under their own privacy policies. yy99 is not responsible for the privacy practices of these third parties, and this Privacy Policy does not extend to cover them.

Any link or reference to an external service within the yy99 platform does not constitute an endorsement of that service's privacy practices. Members are encouraged to review the privacy policies of any third-party service they interact with in the course of using yy99.

13Changes to This Privacy Policy

yy99 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable requirements, or changes in the services offered. When material changes are made, members will be notified through an in-platform message or an email to their registered address, giving them an opportunity to review the updated policy before it takes effect.

The "Last Updated" date at the top of this page will always reflect when the most recent changes were made. Continued use of yy99 after a policy update has been notified constitutes acceptance of the revised Privacy Policy. If you do not accept the changes, you should contact support to close your account.

14Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal data is being handled, please get in touch with the yy99 support team:

When contacting us about a data rights request, please include your registered username and a clear description of your request so we can handle it efficiently. We may need to verify your identity before processing the request to ensure your data is not disclosed to an unauthorised party.

For general platform queries, the FAQ page covers common topics including account management, deposits and withdrawals.