yyy9 Privacy Policy – How We Protect Your Data in Pakistan

yyy9 operates the online casino and sports betting platform available at yyy9.ws. For the purposes of this Privacy Policy, yyy9 is the data controller responsible for personal information collected through the platform, the website, customer support channels and any related services.

This Privacy Policy applies to all users of yyy9 — whether you are a registered member, a visitor browsing the website, or someone who has contacted our support team. By using yyy9, you acknowledge that you have read and understood this policy.

If you have any questions about how yyy9 handles your personal data, you can contact our privacy team at any time using the details in Section 14 of this policy.

yyy9 collects personal data that falls into the following categories. We collect only what is necessary for the purposes described in this policy.

yyy9 collects personal data through the following channels:

• Directly from you when you register an account, complete identity verification, make a deposit, request a withdrawal, contact support, or respond to a survey or promotion.
• Automatically as you use the yyy9 platform — technical data such as your IP address, device details and session activity is collected as part of normal platform operations and security monitoring.
• From payment providers — when you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, the payment provider may share transaction confirmation data with yyy9 to allow us to credit or process your account.
• From identity verification partners — where yyy9 uses a third-party verification service to confirm your identity documents, that service will share the outcome (verified or not) with yyy9.

yyy9 uses your personal data for clearly defined purposes. We do not use data in ways that go beyond what is reasonable given the nature of an online casino and sports betting platform. The primary purposes are:

Where yyy9 relies on your consent as the lawful basis — such as for sending promotional messages — you can withdraw that consent at any time by contacting support or updating your account notification preferences.

yyy9 does not share your personal data with third parties except in the following defined circumstances:

• Payment processors: Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, partner banks and card processors to the extent necessary to process your deposits and withdrawals.
• Identity verification providers: Where yyy9 requires identity document checks, your submitted documents are shared with a specialist KYC provider solely for the purpose of verification.
• Fraud prevention services: Device fingerprinting and session data may be shared with fraud detection partners to identify suspicious activity and protect user accounts.
• Regulatory and law enforcement authorities: yyy9 will share data with competent authorities where required to do so by law or in response to a valid legal request. We do not volunteer information beyond what is legally required.
• Business transfers: If yyy9 undergoes a merger, acquisition or sale of assets, user data may be transferred as part of that transaction. Users will be notified before any such transfer affects how their data is processed.

Given that yyy9 handles PKR deposits and withdrawals for Pakistani users, we want to be clear about exactly how payment data is treated at yyy9.

What yyy9 does not store: Your Easypaisa wallet number, JazzCash PIN, NayaPay account credentials, bank account login details, card number, CVV or card expiry date are never stored on yyy9 servers. Payment transactions are routed through specialist payment processors that maintain their own security infrastructure and compliance standards.

What yyy9 does store: Transaction records — including the amount, date, payment method type (e.g. "Easypaisa deposit"), transaction reference number and status — are stored as part of your account history. This is necessary for account management, dispute resolution and regulatory compliance.

Transaction monitoring: yyy9 monitors deposit and withdrawal patterns as part of its anti-money laundering obligations. If unusual patterns are detected, we may contact you for additional information or temporarily restrict account activity while we investigate. This is a standard compliance process and is not a negative reflection on any individual user.

yyy9 uses cookies and similar technologies to keep the platform working correctly, to remember your preferences and to understand how users navigate the site. Here is what each category of cookie does:

You can manage cookie preferences through your browser settings. Disabling essential or security cookies will impair your ability to use yyy9 — login, deposits and withdrawals depend on these. Optional analytics cookies can be refused without affecting platform functionality.

yyy9 keeps your personal data for as long as your account is active and for a defined period after account closure, as outlined below:

• Active account data — retained for the duration of your account being open at yyy9.
• Account and transaction history — retained for a minimum of five years after account closure to comply with applicable anti-money laundering and financial record-keeping regulations.
• Identity verification documents — retained for the period required by applicable regulation (typically five years from the end of the business relationship) and then securely deleted.
• Customer support communications — retained for three years to allow for dispute resolution and service quality review, then deleted.
• Session and technical logs — retained for 12 months then deleted.

When data reaches the end of its retention period, it is securely and permanently deleted from yyy9 systems. Data that forms part of an ongoing regulatory investigation or legal proceeding will be retained until that matter is resolved.

yyy9 takes data security seriously and applies a range of technical and operational measures to protect your personal information:

• 256-bit SSL/TLS encryption on all data transmitted between your device and yyy9 servers.
• Encrypted data storage for sensitive account data at rest on yyy9 servers.
• Access controls — only authorised yyy9 staff with a defined need can access personal data, and all access is logged.
• Intrusion detection systems — yyy9's infrastructure is monitored continuously for unauthorised access attempts.
• Regular security reviews — yyy9's security posture is reviewed periodically and updated in response to new threats.
• Secure credential handling — passwords are stored as cryptographic hashes, never in plain text. yyy9 will never ask you for your password.

Despite these measures, no online platform can guarantee absolute security. If you suspect your yyy9 account has been accessed without your authorisation, contact our support team immediately so we can take protective action.

As a yyy9 user, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact us at support@yyy9.ws with your registered phone number or email address.

yyy9 will respond to all rights requests within 14 calendar days. Where additional time is needed, we will let you know within the initial 14-day window and explain the reason for the delay.

yyy9 is strictly for users aged 18 and over. The platform does not knowingly collect personal data from anyone under the age of 18. If you believe a minor has registered an account or provided personal data to yyy9, contact us immediately at support@yyy9.ws. We will investigate and, where confirmed, close the account and delete all associated data promptly.

yyy9 uses age verification checks during registration and may request proof of age at any point. Accounts where the user cannot confirm they are 18 or over will be suspended and closed.

The yyy9 website does not contain links to external third-party websites as a standard feature of its navigation or content. Where any links to third-party resources appear — for example in support documentation — yyy9 is not responsible for the privacy practices or content of those external sites.

Payment providers such as Easypaisa, JazzCash, NayaPay and SadaPay operate their own platforms with their own privacy policies. When you interact with those providers as part of a deposit or withdrawal, their privacy practices govern that interaction. yyy9 encourages users to review the privacy policies of any payment service they use.

yyy9 may update this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements or platform features. The effective date at the top of this page will always reflect when the current version came into force.

Where changes are material — meaning they affect how your data is used in a significant way — yyy9 will notify registered users via their registered mobile number or email address at least seven days before the changes take effect. Minor clarifications and non-substantive updates may be made without individual notification.

The most current version of this Privacy Policy is always available at yyy9.ws/privacy-policy. Continued use of yyy9 after the effective date of an updated policy constitutes your acceptance of the revised terms.

If you have any questions, concerns or requests relating to this Privacy Policy or how yyy9 handles your personal data, please reach out to our support team:

• Email: support@yyy9.ws
• Subject line: "Privacy Request – [your registered phone number]"

yyy9's support team is available 24 hours a day, 7 days a week. Privacy-related requests are handled by a dedicated team member and are treated with priority. We aim to acknowledge all privacy requests within 48 hours and resolve them within 14 calendar days.

For general account or payment queries that are not privacy-related, please use the standard support contact at the same email address.