y9998 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy ("Policy") is issued by y9998 ("y9998", "we", "us", or "our") and applies to all personal data collected, processed, and stored in connection with the y9998 online gaming platform accessible at y9998.bio ("Platform"). This Policy applies to all registered and prospective players, visitors to the Platform, and any individual who contacts y9998 through any available support channel.

y9998 is committed to protecting the privacy of its players across Pakistan, including those accessing the Platform from Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, Multan, Peshawar, and all other cities and regions. This Policy describes in plain terms what data y9998 collects, why it collects it, how long it keeps it, who it may share it with, and what rights you have as a data subject.

By registering a y9998 account, using Platform services, or contacting y9998 support, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the y9998 Platform.

For the purposes of this Policy, y9998 acts as the Data Controller in respect of all personal data collected from players and visitors through the Platform. As Data Controller, y9998 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is lawful, fair, and transparent.

Where y9998 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, and fraud prevention providers — those providers act as Data Processors under the instruction of y9998 and are contractually bound to process data only for the specified purposes and with appropriate security measures in place.

y9998 collects personal data across several categories. The following table outlines the categories of personal data y9998 processes, together with specific examples and the primary purpose for which each category is collected.

y9998 does not intentionally collect special category data (such as health information, religious beliefs, or political opinions) unless specifically required by responsible gaming obligations — for example, where a player discloses a gambling disorder in the context of requesting self-exclusion assistance.

y9998 collects personal data through the following channels and mechanisms:

• Direct Provision: Data you provide when registering your y9998 account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotional surveys.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser type, session duration, and pages visited, via server logs and analytics tools.
• Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies placed on your device when you visit the Platform. See Section 8 for full details.
• Third-Party Sources: Identity and fraud-risk data received from third-party KYC providers, payment processors (including JazzCash and EasyPaisa transaction confirmations), and fraud prevention databases where y9998 has a legitimate interest in verifying your identity.
• Payment Platforms: Transaction metadata shared by payment intermediaries in connection with deposits and withdrawals processed via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT wallet providers.

y9998 uses collected personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your y9998 account, including processing login requests, updating profile information, and managing account preferences.
• Service Delivery: Providing access to all y9998 gaming products including cricket betting, live casino, slots, and Fortune Bingo, processing wagers, and settling game outcomes.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, and other supported payment methods, and processing withdrawal requests to your verified payment account.
• Identity Verification (KYC): Verifying your identity and age (21+) in compliance with y9998's licensing obligations and anti-money laundering requirements.
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, account takeovers, collusion, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: Monitoring gaming behaviour to identify patterns consistent with problem gambling, enforcing deposit limits and self-exclusion tools, and complying with responsible gaming policy commitments.
• Legal Compliance: Meeting obligations under applicable anti-money laundering laws, regulatory requirements, and responding to lawful requests from governmental or regulatory authorities.
• Customer Support: Responding to player queries, resolving disputes, and maintaining communication records as required for complaint management.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform functionality, game selection, payment performance, and user experience.
• Marketing (with consent): Sending promotional communications about bonuses, new games, and platform updates to players who have opted in to receive such communications. See Section 14 for details.

y9998 processes personal data on the following legal bases under applicable data protection law:

• Contractual Necessity: Processing required to perform the contract between y9998 and you as a registered player — including account creation, game delivery, payment processing, and support.
• Legal Obligation: Processing required for y9998 to comply with applicable legal duties, including KYC/AML obligations, responsible gaming compliance, and responses to lawful regulatory or governmental requests.
• Legitimate Interests: Processing conducted on the basis of y9998's legitimate business interests, including fraud detection, Platform security, dispute resolution, and aggregated analytics — where such interests are not overridden by your privacy rights.
• Consent: Processing of personal data for marketing communications, non-essential cookies, and optional Platform features, where y9998 has obtained your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

y9998 does not sell, rent, or trade personal data. y9998 may share your personal data with the following categories of third parties, solely for the purposes described in this Policy:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT wallet providers, to the extent necessary to process your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and age verification services engaged by y9998 to confirm player identity and document authenticity as required by licensing obligations.
• Fraud Prevention Services: Industry fraud databases and risk intelligence providers used to detect and prevent prohibited conduct, account takeovers, and financial crimes.
• Game Software Providers: Casino and slot game providers whose software powers y9998's gaming products may receive limited gaming session data (such as bet amounts and game IDs) required for game operation and RNG certification.
• Legal and Regulatory Authorities: Pakistani law enforcement agencies, financial intelligence units, and international regulatory bodies, where disclosure is required by law, court order, or regulatory direction.
• Professional Advisers: Legal counsel, accountants, and auditors acting under professional duties of confidentiality, where access to personal data is necessary for the provision of professional services to y9998.

y9998 uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform. Cookies are small data files stored on your device that help y9998 recognise your session, remember your preferences, and gather analytical data about Platform usage.

y9998 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for core Platform functionality, including session management, login persistence, and security features. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language settings, display options, and previously used payment methods to improve your experience on subsequent visits.
• Analytical Cookies: Collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where errors occur, used to identify improvements. y9998 uses aggregated analytics only.
• Security Cookies: Support fraud detection and account security functions, including device fingerprinting to identify suspicious login patterns.

Non-essential cookies (functional and analytical) are only placed with your consent, which y9998 requests when you first visit the Platform. You may manage cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the performance or availability of some Platform features.

y9998 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active y9998 account relationship.
• Closed Account Data (Identity and Financial): Retained for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering and financial record-keeping requirements.
• Gaming Transaction Records: Retained for a minimum of five (5) years for audit, dispute resolution, and regulatory compliance purposes.
• Support Communications: Retained for three (3) years from the date of the communication, unless a related dispute or investigation requires longer retention.
• Technical and Log Data: Retained for twelve (12) months, after which it is aggregated and anonymised.
• Marketing Consent Records: Retained for the duration of your consent and for two (2) years following withdrawal of consent as evidence of consent management.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes.

As a y9998 player, you hold the following rights in respect of your personal data. These rights are subject to applicable legal exceptions, particularly where exercise of a right would conflict with y9998's legal obligations or legitimate fraud prevention interests.

To exercise any of the above rights, contact y9998's data team at [email protected] with the subject line "Privacy Rights Request" and your registered account details. y9998 will respond within 30 calendar days of receiving a verifiable request. y9998 may request additional identity verification before processing rights requests to protect against unauthorised access to account data.

y9998 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between player devices and y9998's servers.
• Encryption of sensitive data fields (including password hashes and financial account details) at the database level.
• Role-based access controls limiting personal data access to authorised personnel with a documented operational need.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication on all y9998 administrative systems with access to player data.
• Continuous monitoring of system access logs for anomalous activity, with automated alerting protocols.
• Incident response procedures defining escalation, containment, and notification steps in the event of a data breach.

The y9998 Platform is strictly for adults aged 21 years and older. y9998 does not knowingly collect personal data from individuals below the age of 21, and the Platform is not directed at, designed for, or marketed to minors in any way.

Where y9998 discovers or has reason to believe that personal data has been provided by or collected in relation to an individual below the age of 21, y9998 will immediately suspend the associated account, delete the collected data to the extent permissible under applicable law, and take steps to prevent further access by that individual.

If you are a parent or guardian and believe that a minor has registered on the y9998 Platform or provided personal data to y9998 without your knowledge, please contact y9998's support team immediately at [email protected] so that appropriate action can be taken without delay.

y9998 operates globally and may transfer personal data to servers or service providers located outside of Pakistan in the course of operating the Platform. Such transfers occur where y9998's third-party providers — including game software partners, cloud infrastructure providers, and fraud prevention services — operate their primary systems in international locations.

Where personal data is transferred outside Pakistan, y9998 takes steps to ensure an appropriate level of protection is maintained, including through the use of standard contractual clauses or other recognised data transfer mechanisms. y9998 does not transfer personal data to jurisdictions where adequate data protection standards cannot be assured.

By using the y9998 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan where such transfer is necessary for the provision of Platform services.

y9998 may send promotional communications about bonuses, new games, special offers, and platform updates to players who have opted in to receive such communications during account registration or at any subsequent point through their account settings.

y9998 sends marketing communications via the following channels, subject to your opt-in preferences:

• Email to your registered email address
• SMS to your registered mobile number
• In-platform notifications displayed within your y9998 account dashboard

You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your y9998 account settings, or by contacting y9998 support. Withdrawal of marketing consent does not affect your ability to use the Platform or access gaming services. Transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) are not marketing communications and will continue regardless of marketing preference settings.

y9998 may update this Privacy Policy from time to time to reflect changes in legal requirements, Platform operations, or data processing practices. Where changes are material — meaning they substantively affect how y9998 processes your personal data or your rights as a data subject — y9998 will provide at least seven (7) days' advance notice via your registered email address or a prominent notice on the Platform prior to the changes taking effect.

Non-material changes (such as corrections to language, formatting adjustments, or clarifications that do not alter the substance of y9998's data processing) may be made without advance notice and take effect on the date of publication. The effective date at the top of this Policy reflects the most recent version.

Your continued use of the y9998 Platform following the publication of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and contact support to close your account before the revised Policy takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by y9998, please contact the y9998 data team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for data-related correspondence. Responses are provided within 5 business days for general enquiries and within 30 calendar days for formal rights requests.
• Live Chat: Available 24 hours a day, 7 days a week via the support chat on any page of the y9998 Platform. For urgent data security matters (such as suspected unauthorised account access), live chat is the fastest available channel.

If you are dissatisfied with y9998's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. y9998 encourages players to contact y9998's own team first so that issues can be resolved efficiently and directly.