This Privacy Policy explains how 999y collects, uses, stores and protects your personal information, and sets out your rights in relation to that data. Please read it carefully before using the Platform.
The sections below summarise the most important aspects of how 999y handles your personal data. Full details follow in the policy text.
We collect only the information necessary to operate your account, process transactions, verify your identity and comply with legal obligations — including your name, contact details, KYC documents and payment information.
All data is transmitted over HTTPS/SSL encryption. Access to personal data is restricted to authorised personnel only. We maintain technical and organisational security measures proportionate to the sensitivity of the data held.
999y does not sell, rent or trade your personal information to third-party marketers. Data is shared only where necessary for platform operation, legal compliance or fraud prevention — never for commercial benefit to third parties.
We use cookies and similar technologies to maintain session state, improve Platform performance and deliver relevant content. Non-essential cookies require your consent and can be managed through your browser settings.
You have the right to access, correct, restrict processing of and request deletion of your personal data, subject to applicable legal obligations and our legitimate interests in retaining records for regulatory compliance.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law — including AML and regulatory record-keeping obligations which may extend beyond account closure.
This Privacy Policy ("Policy") is issued by 999y ("we", "us" or "our"), the operator of the online gaming and sports betting information platform accessible at https://999y.cam (the "Platform").
This Policy describes the categories of personal data we collect from users of the Platform ("you" or "your"), the purposes for which that data is processed, the legal bases upon which we rely, the circumstances in which we share data with third parties, and the rights available to you in relation to your personal information.
By accessing or registering on the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling policy, both of which are incorporated by reference.
Note for Pakistani Users: Pakistan does not currently have a comprehensive general data protection law equivalent to the GDPR. 999y processes data in accordance with the standards applicable in the operator's jurisdiction and applies good-faith data protection practices for all users, including those based in Pakistan. This Policy does not constitute legal advice.
For the purposes of this Privacy Policy, the following definitions apply:
When you create an Account on 999y, we collect the personal information you provide during the registration process, which includes:
To comply with AML obligations and age verification requirements, we collect identity documents that may include:
KYC documents are processed only through the Platform's secure HTTPS verification portal. You must never transmit KYC documents through unsecured channels.
We collect data relating to your financial transactions on the Platform, including:
We automatically collect certain technical data when you use the Platform:
When you contact our support team by email or live chat, we retain records of that correspondence, including the content of your messages and any attachments. These records are used for dispute resolution, quality assurance and training purposes.
Payment method names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced only as familiar Pakistani payment rails. Whether any of these services process gambling transactions depends on the provider's own terms. 999y does not store full bank account numbers or wallet credentials; only masked identifiers are retained for transaction record purposes.
The personal data we collect is used for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, KYC data, communications data |
| Identity and age verification (KYC) | KYC data, registration data |
| Processing deposits and withdrawals | Financial data, KYC data, registration data |
| AML and fraud prevention | Financial data, KYC data, usage data, IP data |
| Customer support and dispute resolution | Communications data, account data, transaction data |
| Platform performance and improvement | Usage data, technical data, cookie data |
| Responsible gambling monitoring | Usage data, transaction data, account settings data |
| Promotional communications (with consent) | Registration data, usage data, preference data |
| Legal and regulatory compliance | All categories as required by applicable law |
Where applicable data protection law requires us to identify a legal basis for processing personal data, we rely on the following:
We share personal data with carefully selected third-party service providers who process data on our behalf, including:
All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering the contracted service to us.
We may disclose personal data to regulators, law enforcement agencies, courts or other public authorities where we are required to do so by applicable law, court order or regulatory demand. This includes disclosures related to AML investigations and fraud prevention.
In the event of a merger, acquisition, restructuring or sale of all or part of our business, personal data held by 999y may be transferred to the acquiring entity. Users will be notified of any such transfer in accordance with applicable data protection obligations.
999y does not sell, rent, lease or trade your personal data to any third party for marketing, advertising or commercial purposes. This applies to all users, including users located in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and across Pakistan.
As an online platform operating internationally, 999y may process and store your personal data in countries outside Pakistan. Where data is transferred to a country that does not provide an equivalent level of data protection, we implement appropriate safeguards — such as contractual clauses or equivalent mechanisms — to ensure your data remains protected.
By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries other than Pakistan. If you have questions about the specific countries to which your data may be transferred, please contact us using the details in Section 15.
We retain personal data for as long as necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required by applicable law. The following general retention principles apply:
When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction.
The Platform uses the following categories of cookies:
| Category | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, authentication, security functions. Cannot be disabled without breaking core Platform functionality. | No |
| Functional | Remembering your preferences, language settings and responsible gambling tool configurations. | No |
| Analytics | Measuring page performance, understanding user navigation patterns and identifying areas for improvement. | Yes |
| Marketing | Delivering relevant promotional content based on your browsing behaviour on the Platform. | Yes |
You can manage or withdraw consent for non-essential cookies at any time through your browser settings. Disabling analytics or marketing cookies will not affect your ability to use core Platform features. Note that blocking strictly necessary cookies may impair Platform functionality.
999y implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:
Whilst we take reasonable technical precautions, no method of internet transmission or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your Account credentials. If you suspect that your Account has been compromised, contact us immediately at [email protected].
Depending on the data protection law applicable in your jurisdiction, you may have some or all of the following rights in relation to your personal data:
You have the right to request a copy of the personal data we hold about you and information about how it is being processed.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
In certain circumstances, you may request that we delete your personal data. This right is subject to our legal obligations — for example, we are required to retain KYC and transaction records for AML compliance regardless of such requests.
You may request that we limit how we use your data in certain circumstances, such as while the accuracy of that data is being contested.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request that we provide your data in a structured, commonly used and machine-readable format.
You have the right to object to processing based on our legitimate interests, including profiling for marketing purposes. You may opt out of promotional communications at any time.
Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.
To exercise any of the above rights, please submit a written request to [email protected]. We will respond within the timeframe required by applicable law, and in any event no later than thirty (30) days of receiving a valid request. We may need to verify your identity before processing a rights request.
The 999y Platform is intended for adults aged 18 and above — or the higher minimum required by the operator's license jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age. If we become aware that an Account has been registered by or on behalf of a minor, we will immediately close that Account and delete the associated personal data, subject to any overriding legal obligations.
The Platform may contain references to third-party services, payment rails or informational resources. Where links to external sites appear, 999y is not responsible for the privacy practices or data handling of those third parties. We encourage you to review the privacy policy of any third-party service before providing personal data to it.
References to payment services familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are included solely for contextual familiarity. These providers have their own independent privacy policies and data practices. None of them are affiliated with or endorse 999y.
We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or regulatory guidance. When material changes are made, we will publish the updated Policy on the Platform with a revised "Last Reviewed" date. Where required by applicable law, we will provide direct notice of significant changes to registered users.
Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must stop using the Platform and may request account closure by contacting our support team.
If you have questions, concerns or complaints about this Privacy Policy or about how 999y processes your personal data, please contact us through the following channels:
If you are unsatisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. As noted above, this Policy does not constitute legal advice — if you require specific guidance on data protection rights in Pakistan, please consult a qualified legal professional.
Now that you've reviewed our Privacy Policy, you have a clear picture of how we handle your data. Explore the homepage to discover all platform features, or visit our FAQ for answers to common questions.
Privacy concerns? Email us at [email protected] — or review our Terms & Conditions for the full platform rules.