y9990 Privacy
Policy

Who We Are

y9990 is Pakistan's premier online betting and casino platform, accessible at y9990.org. For the purposes of this Privacy Policy, "y9990", "we", "us", and "our" refer to the operators and owners of the y9990 platform and all associated services, including sports betting, live casino, slot games, arcade titles, and the MT Live section.

y9990 acts as the data controller in respect of the personal information you provide when registering, depositing, playing, or otherwise interacting with the platform. As data controller, y9990 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is lawful, fair, and transparent.

We operate under international licensing and compliance standards applicable to online gaming operators. All data processing activities described in this Privacy Policy are carried out in accordance with those standards and with internationally recognised data protection principles.

Data We Collect

y9990 collects personal data from you at different stages of your relationship with the platform. The categories of data we collect, and the contexts in which they are collected, are described below.

Registration & Account Data

• Full legal name and date of birth (for age and identity verification)
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad)
• Email address and, where provided, mobile phone number
• Username and encrypted password
• CNIC number or passport number (collected during KYC verification)

Financial & Transaction Data

• Deposit and withdrawal transaction records in PKR
• Payment method details (e.g., JazzCash account reference, EasyPaisa mobile number, bank account name for HBL, UBL, or Meezan Bank transfers)
• Wallet balance history and bonus credit records

Gaming & Betting Activity Data

• Betting history, including markets, odds, stake amounts, and outcomes
• Game session logs for slots, arcade, and live casino titles
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)

Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps, login history, and platform navigation logs
• Cookie identifiers and similar tracking data (see Section 6)

Communications Data

• Records of your correspondence with y9990 customer support via live chat or email
• Feedback, survey responses, and complaints submitted to y9990

How We Use Your Data

y9990 uses your personal data for the following purposes:

Purpose	Data Used
Creating and managing your y9990 account	Registration data, contact details
Processing deposits and withdrawals in PKR	Financial data, payment method references
Verifying your identity and age (KYC)	CNIC/passport, date of birth, address
Providing sports betting and casino gaming services	Gaming activity data, wallet balance
Delivering customer support and resolving disputes	Communications data, account history
Detecting and preventing fraud, money laundering, and prohibited conduct	Transaction data, device data, IP address
Enforcing responsible gaming tools and age restrictions	Date of birth, gaming activity, limit settings
Sending service notifications and account updates	Email address, notification preferences
Improving platform performance and user experience	Technical data, navigation logs, session data
Complying with legal and regulatory obligations	All categories as required by law

y9990 does not use your personal data for profiling for third-party advertising purposes, and we do not make automated decisions that produce legal or similarly significant effects solely on the basis of profiling, without human review.

Legal Basis for Processing

y9990 processes your personal data on one or more of the following lawful bases, in line with internationally recognised data protection standards:

• Contractual Necessity: Processing required to perform the contract between you and y9990 — including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and age verification mandates.
• Legitimate Interests: Processing carried out for y9990's legitimate interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: Where y9990 relies on your consent (for example, for optional marketing communications or non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

Where the legal basis for processing changes or where y9990 intends to process your data for a purpose not listed in this Policy, we will notify you and, where required, seek your consent before proceeding.

Sharing Your Data

y9990 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly to the extent necessary to provide our services and fulfil our legal obligations:

• Payment Processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other payment providers require transaction data to process your deposits and withdrawals. Their use of your data is governed by their own privacy policies.
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm your identity and age. These providers process your document and biometric data solely for verification purposes.
• Game Content Providers: Providers such as Pragmatic Play and Evolution Gaming receive session data necessary to deliver live casino and slot games. They do not receive your financial or full personal data.
• Regulatory & Law Enforcement Authorities: y9990 will disclose personal data to competent authorities where required by law, court order, or regulatory direction, including in connection with investigations into fraud, money laundering, or match-fixing.
• IT & Platform Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on y9990's behalf under strict data processing agreements that prohibit independent use of your data.

Cookies & Tracking

y9990 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. Below is a summary of the cookie categories we use:

Cookie Type	Purpose	Required?
Essential / Session Cookies	Maintain your login session, remember your language preference, and ensure secure navigation across the platform	Yes — cannot be disabled
Functional Cookies	Remember your display preferences, responsible gaming limit settings, and game history within your session	Optional
Analytics Cookies	Aggregate, anonymised data on page visits and feature usage to help y9990 improve platform performance	Optional
Fraud Prevention Cookies	Identify unusual access patterns and support our anti-fraud and responsible gaming monitoring systems	Yes — required for security

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will impair the functionality of the y9990 platform and may prevent you from logging in or completing transactions. y9990 does not use third-party advertising or retargeting cookies.

Data Retention

y9990 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The general retention periods applied by y9990 are as follows:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction & Financial Records: Retained for a minimum of seven (7) years from the date of each transaction, as required under financial compliance standards applicable to licensed gaming operators.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Gaming Activity Logs: Retained for two (2) years from the date of each session for responsible gaming monitoring and audit purposes.
• Technical & Device Data: Retained for twelve (12) months from collection for security monitoring and fraud detection.

Upon expiry of the applicable retention period, y9990 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual.

Your Rights

As a y9990 user, you have the following rights in respect of your personal data. y9990 is committed to honouring these rights promptly and without unnecessary obstacles:

• Right of Access: You may request a copy of the personal data y9990 holds about you at any time. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where y9990 no longer has a legal basis to retain it. Note that this right is subject to our legal retention obligations — where we are required by law to retain data, we cannot delete it upon request until the applicable retention period expires.
• Right to Restriction: You may request that y9990 restrict processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests at any time. y9990 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected]. We may need to verify your identity before processing your request. All rights requests are handled free of charge.

Data Security

y9990 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and y9990's servers is encrypted using industry-standard protocols.
• AES-256 Encryption at Rest: Sensitive personal data stored in y9990's databases is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorised y9990 personnel on a strict need-to-know basis, with role-based access controls and multi-factor authentication enforced for all administrative systems.
• Regular Security Audits: y9990's platform and infrastructure undergo regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Fraud Detection Systems: Automated monitoring systems are in place to detect unusual account activity, suspicious transactions, and potential unauthorised access in real time.
• Incident Response Plan: y9990 maintains a documented data breach response plan. In the event of a confirmed breach affecting your personal data, we will notify you and relevant authorities in accordance with applicable obligations.

While y9990 employs all reasonable security measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying y9990 immediately if you suspect unauthorised access to your account.

Children & Minors

The y9990 platform is strictly intended for adults aged 21 years and above. y9990 does not knowingly collect personal data from individuals under the age of 21. Registration on the platform requires confirmation of age and is subject to KYC verification.

Parents and guardians are strongly encouraged to use device-level parental controls to prevent minors from accessing online gambling platforms. If you believe that a minor has accessed y9990, please contact our support team immediately at [email protected] so that we may take immediate action.

y9990 also supports the Responsible Gaming tools available on the platform, including self-exclusion, deposit limits, and session time reminders, as part of our broader commitment to player welfare.

Policy Updates

y9990 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, legal obligations, or platform services. Where changes are material, we will notify you via your registered email address or through a prominent notice displayed upon your next login, with a minimum of seven (7) days' advance notice before the changes take effect.

The effective date of the current version of this Privacy Policy is stated at the top of this page. Your continued use of the y9990 platform following the stated effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should cease using the platform and request account closure before the effective date.

All previous versions of this Privacy Policy are archived and available upon request by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to y9990's handling of your personal data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within the y9990 platform
• Response Time: Data-related queries are responded to within 5 working days. Urgent matters such as suspected unauthorised access are escalated immediately.

For responsible gaming support, self-exclusion requests, or concerns about problem gambling, please visit our dedicated Responsible Gaming page.