ya999 Privacy Policy — How We Protect Your Personal Data

ya999 is committed to protecting the privacy and personal data of every Pakistani player who uses the platform. This Privacy Policy is designed to give you a clear, honest account of how your data is handled — what we collect, why we collect it, who it may be shared with, how long we keep it, and what rights you have over it.

ya999 acts as the data controller in respect of personal data collected from players accessing the ya999.games platform. As data controller, ya999 determines the purposes and means of processing personal data in accordance with applicable data protection principles. Any questions about how ya999 processes your personal data should be directed to our support team at [email protected].

ya999 collects personal data from Pakistani players through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party payment processors and identity verification services engaged to support our operations. The categories of data collected are set out below.

ya999 does not collect sensitive personal data such as biometric data, health information, or political opinions. ya999 does not collect personal data from persons under the age of 18. If ya999 discovers that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be closed.

ya999 processes personal data collected from Pakistani players for the following specific purposes. Each purpose is tied to a lawful basis for processing, as described in Section 4 of this Policy:

• Account creation and management: To register your ya999 account, maintain your player profile, authenticate your identity at login, and manage your account settings throughout your relationship with the platform.
• Payment processing: To process PKR deposits and withdrawals via your chosen payment method (Easypaisa, JazzCash, HBL, UBL, or MCB Bank), to reconcile transactions, and to investigate payment disputes.
• KYC and identity verification: To verify your age, identity, and the source of your funds in compliance with applicable anti-money laundering obligations.
• Responsible gaming and player protection: To monitor account activity for signs of problem gambling, to apply responsible gaming restrictions requested by players, and to enforce self-exclusion arrangements.
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeover attempts, money laundering, and other illegal activity on the ya999 platform.
• Customer support: To respond to your queries, investigate complaints, and provide assistance through ya999's support channels.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to Pakistani players who have consented to receive such communications.
• Platform improvement: To analyse aggregate usage patterns, diagnose technical issues, and improve the performance and features of the ya999 platform.
• Legal compliance: To meet ya999's legal and regulatory obligations, including retention of financial records and responding to lawful requests from authorities.

ya999 relies on the following legal bases when processing personal data from Pakistani players. For each processing activity, at least one of the following lawful bases applies:

• Contractual necessity: Processing that is necessary to perform the contract between ya999 and the player — including account registration, payment processing, game delivery, and withdrawal management.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering laws, KYC obligations, and tax record retention requirements.
• Legitimate interests: Processing undertaken to pursue ya999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the platform experience for Pakistani players — where those interests are not overridden by the player's rights.
• Consent: Processing based on the player's explicit and freely given consent — specifically, the sending of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

ya999 does not sell, rent, or trade Pakistani players' personal data to any third party for commercial purposes. ya999 shares personal data only in the following limited and necessary circumstances:

• Payment processors: Personal and financial data is shared with payment service providers (including Easypaisa, JazzCash, HBL, UBL, and MCB Bank) solely to the extent required to process deposits and withdrawals in PKR.
• Identity verification providers: Identity and document data is shared with third-party KYC and AML verification services engaged to support ya999's compliance obligations.
• IT and hosting providers: Technical data is accessible to ya999's server hosting and IT infrastructure providers operating under strict data processing agreements.
• Legal and regulatory authorities: ya999 may disclose personal data to law enforcement agencies, regulators, or courts where required by a lawful order or legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of ya999's business or assets, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

ya999 uses cookies and similar tracking technologies on the ya999.games platform to support platform functionality, improve user experience, and analyse aggregate usage patterns. Cookies are small data files placed on your device when you visit the platform.

ya999 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged into your ya999 account. These cannot be disabled.
• Functional cookies: Used to remember your preferences on the ya999 platform, such as language settings and display preferences.
• Analytics cookies: Used to collect anonymised data about how Pakistani players navigate the ya999 platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve the platform.
• Marketing cookies: Used, where you have consented, to track your engagement with ya999 promotions and to deliver relevant bonus offers. These can be disabled through your browser settings or by withdrawing marketing consent.

Pakistani players can manage cookie preferences through their browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in to and use the ya999 platform.

ya999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active relationship with ya999 plus a post-closure retention period as required by applicable financial record-keeping laws.
• KYC and identity documents: Retained for a minimum of five years following the closure of the associated account, in accordance with standard anti-money laundering retention requirements.
• Financial transaction records: Retained for a minimum of five years following each transaction to meet financial regulatory obligations.
• Customer support communications: Retained for up to three years following the resolution of the relevant support interaction.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent previously given.

When personal data is no longer required, ya999 will securely delete or anonymise it in accordance with our data disposal procedures.

ya999 implements a range of technical and organisational security measures to protect Pakistani players' personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between player devices and the ya999 platform.
• Firewalls, intrusion detection systems, and regular penetration testing on ya999's server infrastructure.
• Role-based access controls that limit internal access to personal data to authorised personnel only.
• Regular independent security audits of the ya999 platform and data storage environment.
• Multi-factor authentication requirements for internal systems that hold personal data.
• Data breach detection and response procedures, with notification to affected players and relevant authorities where required by law.

Pakistani players who hold a ya999 account have the following rights in respect of their personal data held by ya999. To exercise any of these rights, please contact [email protected] with your account details and a clear description of your request.

• Right of access: You may request a copy of the personal data ya999 holds about you and information about how that data is being processed.
• Right to rectification: You may request the correction of inaccurate or incomplete personal data held about your ya999 account.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ya999's legal retention obligations.
• Right to restriction: You may request that ya999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where ya999 processes your data on the basis of consent (specifically, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to the processing of your personal data where ya999 relies on legitimate interests as the lawful basis, unless ya999 can demonstrate compelling grounds that override your interests.

ya999 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and ya999 will notify you of any such extension within the initial 30-day period.

If ya999 becomes aware that personal data has been collected from an individual under the age of 18, whether through misrepresentation at registration or any other means, that data will be deleted immediately, the associated account will be closed, and any PKR balance held in the account will be handled in accordance with ya999's Terms & Conditions for underage account closures.

ya999 employs age verification checks during the registration and KYC processes specifically to prevent underage access. Pakistani parents or guardians who believe their child may have registered on ya999 should contact [email protected] immediately to report the situation and request account closure.

ya999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the features available on the ya999 platform. When this Policy is updated, the revised version will be published at ya999.games/privacy-policy with an updated effective date at the top of the document.

ya999 will notify registered Pakistani players of material changes to this Privacy Policy via the email address registered to their account. For non-material changes, the updated Policy will be published without individual notification, and your continued use of the ya999 platform following publication will constitute acceptance of the revised terms.

ya999 recommends that Pakistani players review this Privacy Policy periodically to stay informed about how their personal data is being handled. The most current version of this Policy is always available at ya999.games/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ya999 handles your personal data, please contact our support team using the details below. ya999 is committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Response time: ya999 aims to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• What to include: Please include your ya999 account username and a clear description of your privacy query or request so we can locate your records and respond efficiently.