ys999 Privacy Policy —
Your Data, Handled
With Care and Transparency

ys999 is an online casino platform serving players in Pakistan, accessible at ys999.pro. In the context of this Privacy Policy, "ys999", "we", "us", and "our" refer to the operators of the ys999 platform responsible for the collection and processing of personal data described in this document.

ys999 acts as the data controller for personal information collected directly through the ys999 registration process, account management, and platform usage. Where ys999 engages third-party service providers to process data on its behalf, those providers act as data processors under contractual obligations consistent with this Privacy Policy.

ys999 collects the following categories of personal data in connection with your use of the platform:

ys999 does not collect sensitive categories of personal data — such as health information, religious beliefs, or political views — except where explicitly required for responsible gaming assessments initiated at your request.

ys999 collects personal data through the following channels:

• Direct submission: Information you provide when registering a ys999 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account settings.
• Automated platform tracking: Technical and gaming data collected automatically as you use the ys999 website, including through cookies and server logs (see Section 7 for full cookie details).
• Payment providers: Transaction confirmation data received from Easypaisa, JazzCash, HBL, UBL, MCB Bank, Raast, SadaPay, and other supported Pakistani payment services when you initiate a deposit or withdrawal.
• Identity verification providers: Where ys999 uses a third-party KYC service to verify your identity or age, that provider shares the outcome and relevant verification data with ys999.
• Fraud prevention services: Risk and fraud data received from third-party providers used to protect the integrity of the ys999 platform and its players.

ys999 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your ys999 account and associated PKR wallet.
• Age and identity verification: Confirming that you meet the 18+ age requirement and verifying your identity as required for responsible gaming compliance and financial regulation.
• Payment processing: Facilitating PKR deposits and withdrawals via your chosen Pakistan payment method and maintaining accurate financial records.
• Game delivery: Providing access to the ys999 game library, recording game history, and applying RNG-based outcomes.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and administering deposit limits, session controls, and self-exclusion tools.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, bonus abuse, money laundering, and unauthorised account access.
• Legal compliance: Meeting obligations imposed by applicable anti-money laundering, counter-terrorism financing, and data protection requirements.
• Marketing (with consent only): Sending promotional communications about ys999 bonuses, new games, and platform updates where you have explicitly opted in.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the ys999 platform experience for Pakistan players.

ys999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and ys999 — including account creation, game access, and payment processing — is carried out because it is necessary to perform that contract.
• Legal obligation: Processing required to comply with applicable law — including age verification, anti-money laundering checks, and record-keeping obligations — is carried out to meet those mandatory legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and anonymised analytics is carried out on the basis of ys999's legitimate interest in operating a safe, secure, and commercially viable platform. These interests do not override your fundamental data rights.
• Consent: Processing for marketing communications is carried out only on the basis of your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time.

ys999 does not sell or rent your personal data to unaffiliated third parties. We share your data only in the following limited circumstances:

• Payment service providers: Easypaisa, JazzCash, HBL, UBL, MCB Bank, Raast, SadaPay, and other Pakistan payment processors receive the minimum data necessary to process your PKR transactions.
• Identity verification providers: Third-party KYC and age verification services receive identity documents and confirmation data as required to complete verification.
• Game content providers: Game studios and software providers may receive anonymised game session data to support game functionality and RNG certification. No personally identifiable information is shared with game providers beyond what is technically required.
• Fraud prevention services: Risk management and fraud detection providers receive technical and behavioural data to help protect the ys999 platform and its players from financial crime.
• Legal and regulatory authorities: ys999 will disclose personal data to Pakistani regulatory, law enforcement, or government authorities where required by law or valid legal process.
• Professional advisers: Legal, accounting, and audit firms may access personal data as necessary to provide professional services to ys999, subject to strict confidentiality obligations.

All third parties who process data on ys999's behalf are bound by data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to ys999.

ys999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following types of cookies are used on ys999.pro:

• Strictly necessary cookies: Essential for the ys999 platform to function. These include session cookies that keep you logged in to your ys999 account during a browsing session. These cookies cannot be disabled without preventing platform functionality.
• Functional cookies: Remember your preferences such as language settings, responsible gaming choices, and display options. These improve your experience but are not essential.
• Analytics cookies: Collect anonymised, aggregated data about how Pakistan players use ys999.pro — such as which pages are visited most frequently and where players exit the site — to help ys999 improve the platform. No personally identifiable data is included in analytics reports.
• Security cookies: Support fraud detection and account security functions by identifying unusual access patterns or suspicious login attempts.

ys999 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption across all connections between your browser and ys999 servers.
• Encrypted storage of all personal and financial data at rest.
• Role-based access controls ensuring that only authorised ys999 personnel can access player data, limited strictly to what their job function requires.
• Multi-factor authentication on all internal ys999 administrative systems.
• Regular independent security audits and penetration testing of the ys999 platform.
• Intrusion detection and real-time monitoring of server environments.
• Data breach response procedures with defined timelines for investigating and notifying affected players if a material breach occurs.

While ys999 takes every reasonable precaution to protect your data, no digital system is entirely immune to risk. You also play a role in keeping your account secure — please use a strong, unique password for your ys999 account and never share your login credentials with anyone.

ys999 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

• Active account data: Retained for the duration of your ys999 account and for a period after account closure as required by legal and regulatory obligations (typically five years for financial records).
• KYC and identity verification records: Retained for the period mandated by anti-money laundering regulations applicable to online gaming operators.
• Transaction records (PKR deposits and withdrawals): Retained for a minimum of five years from the date of each transaction for financial regulatory compliance purposes.
• Support communications: Retained for three years from the date of the last support interaction, or longer where there is an ongoing dispute.
• Marketing data: Retained until you withdraw consent for marketing communications, after which your marketing preferences are updated and no further promotional messages are sent.
• Anonymised analytics data: May be retained indefinitely as it contains no personally identifiable information.

When data is no longer required for the applicable retention period, ys999 securely deletes or anonymises it in accordance with its data disposal procedures.

As a ys999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact ys999 at [email protected] with your registered email address and a clear description of your request.

• Right of access: You may request a copy of the personal data ys999 holds about you. ys999 will provide this information within a reasonable timeframe.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by ys999. Corrections to registered name, email, or mobile number may require identity verification before they are applied.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to ys999's legal obligations to retain certain records — particularly financial and KYC data — which take precedence over erasure requests for the applicable mandatory retention period.
• Right to restrict processing: You may request that ys999 restrict the processing of your personal data in defined circumstances, such as while a dispute about data accuracy is being resolved.
• Right to data portability: You may request that ys999 provide your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to object: You may object to the processing of your personal data where that processing is based on ys999's legitimate interests. ys999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without penalty.

ys999 is strictly an 18+ platform. We do not knowingly collect or process personal data from persons under the age of 18. Age verification is a mandatory step in the ys999 registration process and may be requested again at any point during your account lifetime.

Parents and guardians in Pakistan who are concerned about a minor's access to online gaming platforms are encouraged to use parental control tools available through their internet service provider or mobile network operator. ys999 supports the use of such tools as a responsible gaming measure.

ys999 reviews this Privacy Policy at a minimum annually and updates it whenever our data collection or processing practices change in a material way. The effective date shown at the top of this page reflects the date of the most recent revision.

Where changes are material — for example, if ys999 begins processing a new category of personal data, or starts sharing data with a new category of third party — ys999 will provide prominent notice on the platform and send an email notification to all registered players at least fourteen days before the changes take effect.

Your continued use of the ys999 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with changes to this Privacy Policy, you may close your ys999 account by contacting support.

For all privacy-related enquiries, data rights requests, or complaints about how ys999 handles your personal data, please use the contact details below. ys999 is committed to resolving privacy concerns promptly and transparently.