99y888 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") is published by 99y888 ("99y888," "we," "our," or "us") and applies to all personal data collected from individuals ("you," "Member," "Player," or "Visitor") who access or use the 99y888 platform at https://99y888.asia, including all casino games, sports betting services, account management functions, promotional services, and customer support interactions.

99y888 acts as the data controller in respect of personal data collected through the platform. This means we determine the purposes for which your data is processed and the means by which it is processed. In certain circumstances — such as where payment processing is handled by JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank — those third parties act as independent data controllers in respect of the data you provide directly to them through their own interfaces.

By registering a 99y888 account, you acknowledge that you have read this Policy, understand how your data will be processed, and consent to such processing where consent is required as the applicable legal basis. Where other legal bases apply — such as contractual necessity or legitimate interest — processing occurs without requiring your active consent, though this Policy remains binding on both parties.

99y888 collects personal data across the following categories, depending on your interaction with the platform:

We do not collect special categories of personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) unless strictly required for a specific compliance purpose and with appropriate legal basis in place.

99y888 collects personal data through the following methods:

3.1 Direct Collection

• Data you provide when completing the 99y888 account registration form.
• Documents uploaded during KYC verification processes.
• Information submitted when contacting 99y888 customer support by email or live chat.
• Payment details entered when making deposits or requesting withdrawals via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank.
• Preferences and settings you configure within your account dashboard.

3.2 Automated Collection

• Technical data collected automatically each time you access the 99y888 platform, including IP address, browser fingerprint, device identifiers, and session activity logs.
• Gaming and betting activity data generated as you use the 99y888 casino, sportsbook, and related features.
• Cookie and similar tracking technology data. See Section 11 for full details on our cookie practices.

3.3 Third-Party Sources

In limited circumstances, 99y888 may receive personal data from third-party sources, including: identity verification service providers engaged to support KYC processes; fraud prevention and AML screening databases; and payment processors where transaction metadata is returned to us as part of payment confirmation flows.

99y888 processes your personal data for the following specific, documented purposes:

• Account Administration: Creating, maintaining, and managing your 99y888 member account, including processing login authentication, password resets, and account preference updates.
• Service Delivery: Enabling access to casino games, sports betting markets, live dealer tables, and all other features available on the 99y888 platform.
• Financial Transaction Processing: Processing PKR deposits and withdrawal requests, including communication with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank as required to complete transactions.
• KYC and Identity Verification: Verifying your identity and age (21+ requirement) in compliance with 99y888's international gaming licence conditions.
• Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns and member activity for indicators of money laundering, fraud, or other financial crime, as required under licensing obligations.
• Responsible Gaming: Monitoring gaming behaviour to identify patterns associated with problem gambling; administering deposit limits, self-exclusion requests, and cool-off periods.
• Customer Support: Responding to enquiries, resolving complaints, and maintaining records of support interactions.
• Security and Fraud Prevention: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, and other security threats.
• Legal and Regulatory Compliance: Meeting obligations imposed by 99y888's gaming licence, applicable AML regulations, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, features, and user experience of the 99y888 platform.
• Marketing Communications: Where you have given explicit consent, sending you promotional offers, PSL bonus announcements, and other marketing communications relevant to your 99y888 membership. You may withdraw this consent at any time through your account settings.

99y888 processes personal data only where a recognised legal basis exists. The legal bases applicable to each processing purpose are as follows:

Where processing is based on legitimate interests, 99y888 has balanced those interests against your rights and has concluded that the processing is proportionate and does not override your fundamental privacy interests.

99y888 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data may be shared in the following specific and limited circumstances:

6.1 Payment Processors

To process your PKR deposits and withdrawals, 99y888 must share relevant transaction data with our payment partners — including JazzCash, EasyPaisa, Habib Bank Limited, United Bank Limited, Meezan Bank, Visa, and Mastercard. Data shared is limited to what is strictly necessary to authorise and complete each transaction.

6.2 Identity and KYC Verification Partners

For KYC compliance purposes, 99y888 may use third-party identity verification services. Your identity documents and relevant personal data may be transmitted to such providers under strict data processing agreements that prohibit any secondary use of your data.

6.3 Technology and Platform Providers

The 99y888 platform operates using services from third-party technology providers including game studios (Evolution Gaming, Pragmatic Play, NetEnt, Play'n GO, and others) and infrastructure providers. These parties process data on 99y888's behalf under data processing agreements and are not permitted to use your data for their own purposes.

6.4 Regulatory and Legal Authorities

99y888 may be required to disclose personal data to regulatory bodies, licensing authorities, law enforcement agencies, or courts where lawfully required to do so. Such disclosures will be made only to the extent required by law and, where permissible, members will be notified of any such disclosure.

The 99y888 platform and its supporting infrastructure involve the transfer of personal data across international borders. As a Pakistani member, your data may be processed in jurisdictions outside Pakistan, including in the jurisdiction where 99y888 holds its international gaming licence and in other countries where our technology partners and game studios are based.

Where personal data is transferred internationally, 99y888 ensures that appropriate safeguards are in place to protect the security and integrity of your data. These safeguards may include: binding contractual clauses with recipients; transfers to organisations that maintain data protection standards equivalent to those applied by 99y888; and reliance on applicable regulatory frameworks governing cross-border data transfers within the online gaming industry.

By creating a 99y888 account and accepting this Privacy Policy, you acknowledge and consent to such international transfers to the extent necessary to deliver the services you have requested.

99y888 implements a layered, defence-in-depth approach to data security. The following technical and organisational measures are applied to protect your personal data:

• Transport Encryption: All data in transit between your device and 99y888 servers is protected by TLS 1.2/1.3 with 256-bit AES encryption. The platform enforces HTTPS across all pages and connections without exception.
• Data at Rest Encryption: Personal data and financial records stored in 99y888 databases are encrypted at rest using industry-standard encryption algorithms.
• Password Security: Member passwords are stored using one-way cryptographic hashing with salting. 99y888 staff cannot view or retrieve your plaintext password under any circumstances.
• Access Controls: Access to personal data within 99y888's internal systems is restricted on a strict need-to-know basis. Staff are granted the minimum data access necessary to perform their specific role.
• Intrusion Detection: 99y888's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and potential data breaches using automated monitoring tools.
• Two-Factor Authentication: Two-factor authentication (2FA) is available on all member accounts and is strongly encouraged as an additional personal security measure.
• Security Audits: 99y888 undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities in the platform infrastructure.

Despite these measures, no internet-based platform can guarantee absolute security against all potential threats. In the event of a personal data breach that poses a risk to affected individuals, 99y888 will notify affected members and relevant authorities in accordance with applicable obligations, without undue delay.

99y888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, regulatory, or contractual retention requirements. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

As a 99y888 member, you hold the following rights in relation to your personal data. These rights may be exercised by contacting the 99y888 support team at [email protected]:

99y888 will respond to all data rights requests within 30 days of receipt. Where additional time is required due to complexity or volume of requests, we will notify you of the extension and the reason for it.

The 99y888 platform uses cookies and similar tracking technologies to enable core platform functionality, improve the user experience, and gather aggregated analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session management cookies that keep you logged in during your 99y888 session and security cookies that help protect against CSRF and other web vulnerabilities. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings, game lobby filters, and display preferences so that these are remembered across sessions. Disabling these may affect your platform experience.
• Analytics Cookies: Collect anonymised data about how users interact with the 99y888 platform — which pages are visited most, how long sessions last, and which features are most used. This data is used solely to improve the platform and is not linked to individual identities.
• Security and Fraud Prevention Cookies: Help 99y888 identify patterns associated with fraudulent activity, multi-accounting, and bot behaviour. These are considered strictly necessary for platform security.

99y888 does not use third-party advertising cookies or permit advertising networks to place cookies on the 99y888 platform. Your 99y888 browsing data is not used to serve you targeted advertising on other websites.

You may manage cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not affect your ability to use the core 99y888 platform, but may result in some preference settings not being retained between sessions.

The 99y888 platform is strictly restricted to individuals aged 21 years and above. 99y888 does not knowingly collect personal data from any person under the age of 21. If we become aware that a member account has been registered by or on behalf of a person under 21, that account will be immediately closed, all personal data associated with it will be securely deleted, and any funds held will be addressed in accordance with our Terms and Conditions.

Age verification is conducted during the KYC process for every 99y888 member. We use this process specifically to enforce our 21+ policy and to protect individuals under 21 from accessing gambling services.

99y888 reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your data is used or your rights in relation to it — 99y888 will notify all active members by email to the registered account address and through a prominent notice on the platform prior to the changes taking effect.

Where changes are minor or administrative (such as correcting typographical errors, updating contact details, or clarifying existing language without changing its substance), 99y888 may update the Policy without advance notice, though the revised effective date will always be updated at the top of this document.

Your continued use of the 99y888 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you should cease using the platform and contact support to close your account.

14.1 Contacting Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 99y888, please contact our support team through the following channel:

14.2 What to Include in Your Request

When submitting a data rights request or privacy complaint, please include: your full name as registered on your 99y888 account; your registered email address; a clear description of the request or complaint; and, where relevant, the specific data or processing activity to which your request relates. This information will allow our team to handle your request efficiently and accurately.

14.3 Escalation to Supervisory Authorities

Where you are not satisfied with 99y888's response to a privacy complaint, you may have the right to escalate your complaint to a relevant data protection supervisory authority. Details of the applicable supervisory authority under 99y888's licensing jurisdiction will be provided upon request. 99y888 cooperates fully with any investigation conducted by competent supervisory authorities in relation to our data processing activities.