At 999y, your privacy is not a side note — it is a core obligation. This Privacy Policy explains what personal data we collect from Pakistani players, why we collect it, how we use and protect it, and what rights you hold over it.
These cards summarise the key commitments 999y makes to every player regarding the handling of personal information. The full policy below contains the complete legal detail — all registered players should read it in its entirety.
999y collects personal data on a minimum-necessary basis. We ask for information required to operate your account, process PKR transactions via JazzCash or EasyPaisa, verify your identity, and comply with legal obligations — nothing beyond what is genuinely needed for those purposes.
Data collected by 999y is used exclusively for the purposes described in this Privacy Policy. We do not use your personal information for undisclosed purposes, sell it to advertisers, or share it with unaffiliated third parties for marketing without your explicit consent.
All personal data held by 999y is stored on secured servers using industry-standard encryption. Data transmitted between your device and 999y is protected by 256-bit SSL encryption. Access to personal data within 999y is restricted to staff with a legitimate operational need.
You have the right to access, correct, and in appropriate circumstances delete the personal data 999y holds about you. You also have the right to object to certain processing activities. Requests are handled within a reasonable timeframe through our support channels.
999y retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations under our international gaming license. When data is no longer needed, it is securely deleted or anonymised.
This Privacy Policy is written to be understood — not to obscure what 999y does with your data. If you have a question not answered here, contact our support team at any time. We are committed to explaining our data practices clearly to every Pakistani player who asks.
Scope: This Privacy Policy applies to all personal data processed by 999y in connection with the operation of the 999y.bid platform, including your account, gaming activity, financial transactions, and communications with our support team. By registering and using 999y, you acknowledge that you have read and understood this policy.
1.1 This Privacy Policy sets out the basis on which 999y collects, processes, stores, and discloses personal data obtained from individuals who register for, access, or use the 999y online casino and sports betting platform at 999y.bid.
1.2 999y is committed to handling personal information with respect and care. Our data practices are designed to comply with applicable data protection principles under our international gaming license framework, and we apply those standards to the protection of every player's personal information — including all players based in Pakistan, from Karachi to Islamabad to Lahore.
1.3 Personal data is defined for the purposes of this policy as any information that identifies, or could reasonably be used to identify, a natural person — directly or in combination with other data. This includes names, mobile numbers, financial account details, IP addresses, device identifiers, and gaming behaviour records.
1.4 This Privacy Policy should be read in conjunction with the 999y Terms & Conditions and the Responsible Gaming policy, both of which form part of the overall agreement between you and 999y.
2.1 For the purposes of this Privacy Policy, 999y — the operator of 999y.bid — acts as the data controller in respect of personal data collected from players and site visitors. As data controller, 999y determines the purposes and means of processing personal data collected through the Platform.
2.2 Where 999y engages third-party service providers to process personal data on its behalf — for example, payment processors such as JazzCash and EasyPaisa, identity verification providers, or game software suppliers — those providers act as data processors and are bound by contractual obligations to handle data only in accordance with 999y's documented instructions and applicable data protection standards.
2.3 Contact details for data-related inquiries are provided in Section 16 of this policy. All data subject requests will be acknowledged and processed in accordance with 999y's obligations under its licensing framework.
999y collects the following categories of personal data from players and users of the Platform:
| Data Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, username | Registration & KYC verification |
| Contact Data | Pakistani mobile number, email address | Registration |
| Financial Data | JazzCash/EasyPaisa account reference, HBL/UBL/Meezan account details (masked), transaction history | Deposits & withdrawals |
| Gaming Data | Bet history, game preferences, session durations, win/loss records | Ongoing platform use |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Every site visit |
| Usage Data | Pages visited, features accessed, click paths, time on page | Every site visit |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When contacting support |
| Verification Documents | CNIC scan, proof of address, payment method confirmation | KYC process |
999y does not collect or process special category data — including health information, biometric data, or political opinions — except where expressly required by regulatory obligation and where appropriate safeguards are applied.
The majority of personal data 999y holds is provided directly by you when you register for an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in promotional activities. You are always informed at the point of collection what data is being requested and why.
When you access the 999y Platform, our servers automatically record certain technical data — including your IP address, device identifiers, browser type, and session activity. This data is collected to maintain platform security, monitor for fraudulent activity, improve site performance, and enable 999y to deliver a consistent experience across devices commonly used by Pakistani players including Android and iOS smartphones.
999y may receive personal data about you from third parties in limited circumstances, including: (a) identity verification service providers used to confirm CNIC details during KYC; (b) payment processors confirming transaction authenticity; (c) fraud prevention services flagging suspicious activity patterns; and (d) regulatory bodies where required under our licensing obligations. Data received from third parties is handled with the same care as directly collected data.
999y uses cookies and similar tracking technologies as described in Section 8 of this policy. Cookies enable core platform functions such as maintaining your login session, remembering your language preferences, and delivering a personalised lobby experience. You may manage cookie preferences through your browser settings, subject to the limitations described in Section 8.
999y processes personal data on the following legal bases:
Where processing is based on consent, withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. Where processing is based on legitimate interests, you may object to such processing by contacting 999y as described in Section 16.
999y uses personal data collected from players for the following purposes:
No Data Selling: 999y does not sell, rent, or trade your personal data to any unaffiliated third party for their own marketing or commercial purposes. Your data is used solely in connection with operating and improving the 999y platform.
7.1 999y shares personal data only in the following defined circumstances:
7.2 In the event of a corporate transaction — such as a merger, acquisition, or sale of assets — personal data held by 999y may be transferred to the acquiring entity. Players will be notified of any material change to data controllership that affects their rights.
999y uses the following categories of cookies and similar technologies on the Platform:
You may control non-essential cookies through your browser settings. Most modern browsers — including Chrome, Safari, and Firefox used by Pakistani players on Android and iOS devices — provide options to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your 999y account and accessing real-money games.
Cookie Notice: By continuing to use the 999y Platform after being presented with our cookie notice, you consent to the placement of cookies in accordance with this section. Consent for non-essential cookies may be withdrawn at any time through your browser settings.
9.1 999y implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
9.2 While 999y employs significant technical safeguards, no digital platform can guarantee absolute security. In the event of a data breach that poses a material risk to player rights, 999y will take prompt remedial action and notify affected players in accordance with applicable regulatory requirements.
9.3 Players are responsible for maintaining the security of their 999y login credentials and must notify our support team immediately if they suspect unauthorised access to their account.
10.1 999y retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Specific retention periods are guided by the following principles:
10.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players may request information about the specific retention period applicable to their data by contacting the 999y support team.
Subject to applicable law and regulatory restrictions, you have the following rights in relation to personal data held by 999y. Rights may be exercised by contacting the 999y support team using the details in Section 16:
You may request a copy of the personal data 999y holds about you. We will provide this within a reasonable period, typically 30 days of receipt of a verifiable request. In certain limited circumstances — for example, where disclosure would prejudice an ongoing fraud investigation — we may lawfully decline or restrict access.
If personal data 999y holds about you is inaccurate or incomplete, you have the right to request correction. Account details such as your registered mobile number or name can be updated through the 999y account settings or by contacting our support team with supporting documentation where required.
In certain circumstances you may request the deletion of personal data 999y holds about you. This right is not absolute — we are required by our gaming license to retain certain records (including transaction history and KYC documents) for defined periods regardless of erasure requests. We will inform you of any applicable retention obligations when responding to your request.
You may object to 999y processing your personal data on the basis of legitimate interests, including processing for marketing purposes. Where you object to marketing, we will cease that processing immediately. Where you object to other processing based on legitimate interests, we will assess the request against our legal obligations and inform you of the outcome.
Where processing is based on your consent or on a contractual basis and is carried out by automated means, you may request a copy of data you have provided to 999y in a structured, commonly used, machine-readable format. This right applies to data such as your account registration information and gaming history records.
In certain circumstances — for example, while the accuracy of personal data is being contested, or where you have objected to processing and a determination is pending — you may request that 999y restricts the processing of your data to storage only, pending resolution of the relevant issue.
12.1 The 999y Platform is strictly for individuals aged 21 years and above. 999y does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process, and 999y reserves the right to request documentary proof of age — such as a Pakistani CNIC — at any point during the account lifecycle.
12.2 If 999y becomes aware that an account has been registered by an individual under the age of 21, the account will be immediately suspended and any deposited funds returned to the verified payment method. Any winnings accrued on an underage account are not payable.
12.3 If you have reason to believe that a minor has opened a 999y account, please contact our support team immediately so that appropriate action can be taken.
21+ Only: 999y does not permit individuals under 21 years of age to register or use the Platform under any circumstances. Parental controls and device-level blocking tools are available to help ensure minors cannot access gambling content.
13.1 The 999y Platform may reference third-party services — including payment processors such as JazzCash and EasyPaisa, and game software providers — whose own privacy policies govern the handling of data in their respective systems. 999y is not responsible for the privacy practices of third-party service providers beyond the contractual obligations we impose on them as data processors.
13.2 Players are encouraged to review the privacy policies of payment providers they use to fund their 999y accounts, as those providers independently control certain data relating to payment transactions processed through their systems.
13.3 Where 999y integrates third-party analytics or security tools, those integrations are configured to minimise data sharing and are governed by data processing agreements consistent with applicable privacy standards.
14.1 As an internationally licensed gaming platform, 999y may transfer personal data to jurisdictions outside Pakistan in connection with the operation of its services. This may include transfers to the jurisdiction in which 999y holds its gaming license, or to jurisdictions where third-party processors — such as game software providers or fraud prevention services — are located.
14.2 Where personal data is transferred internationally, 999y ensures that appropriate safeguards are in place — including contractual protections with receiving parties — to maintain a standard of data protection equivalent to that applied within the 999y platform environment.
14.3 Players may request information about the specific jurisdictions to which their data may be transferred by submitting a request through the contact details provided in Section 16.
15.1 999y reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via the Platform or by notification to your registered contact details, with a minimum of 14 days' notice where practicable.
15.2 The current version of this Privacy Policy, including its effective date, is always available on this page. We recommend that players review the policy periodically. Continued use of the 999y Platform following any update constitutes acceptance of the revised Privacy Policy.
15.3 If you have concerns about any changes to this policy, you are encouraged to contact the 999y support team before the changes take effect. If you do not agree with an amendment, you may close your account in accordance with the procedure described in the Terms & Conditions.
If you wish to exercise any of your data rights, submit a privacy-related inquiry, raise a concern about how 999y handles your personal data, or request information about our data practices not covered in this policy, please contact us through the following channels:
When submitting a data subject request, please provide sufficient information to allow us to verify your identity before processing the request. This protects your data from being disclosed to or deleted by unauthorised third parties.
You've read how 999y handles your data. Pakistan's most trusted online casino and cricket betting platform — deposits via JazzCash or EasyPaisa, withdrawals in 15 minutes, 500+ certified games available right now.
Go to 999y Login Responsible Gaming