At yo999, we take the privacy of every registered player in Pakistan seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your own information. Transparency is not optional for us — it is a baseline commitment.
yo999 is an internationally licensed online casino and sports betting platform operated for the benefit of players across Pakistan. The yo999 platform is accessible at yo999.org and encompasses all associated mobile interfaces, games, betting markets, and account management services.
For the purposes of this Privacy Policy, yo999 acts as the data controller in respect of all personal information collected through the yo999 Platform. As data controller, yo999 determines the purposes and means of processing your personal data and bears primary responsibility for that processing being conducted lawfully, fairly, and transparently.
If you have any questions about how yo999 handles your personal data, or wish to exercise any of the rights described in this Policy, please contact our dedicated Data Protection contact using the details in Section 15 of this document.
yo999 collects and processes the following categories of personal data in connection with the operation of the Platform and the provision of services to registered players:
| Category | Examples | Collected When |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, gender | Registration & KYC verification |
| Contact Data | Email address, mobile number, city of residence (e.g. Karachi, Lahore, Islamabad) | Registration & account updates |
| Financial Data | JazzCash / EasyPaisa account references, HBL / UBL bank account details, USDT wallet addresses, deposit and withdrawal history | Deposits, withdrawals & AML checks |
| Verification Documents | Scanned or photographed CNIC, proof of address, source-of-funds documentation | KYC & AML compliance checks |
| Technical Data | IP address, device type and OS, browser type and version, session tokens, geolocation data | Every Platform visit and session |
| Usage Data | Pages visited, games played, bets placed, wagering history, session duration, clickstream data | Active gameplay and navigation |
| Communications Data | Live chat transcripts, support emails, dispute submissions, feedback form submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, session time limit preferences, reality check settings | Responsible gaming tool usage |
yo999 collects personal data through the following means:
yo999 processes your personal data strictly for the following purposes. Each purpose is linked to one or more legal bases described in Section 5:
yo999 relies on the following legal bases for processing your personal data, consistent with international data protection principles applicable under our operating licence:
| Legal Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing required to perform the yo999 player agreement — account management, transaction processing, game provision, and support. |
| Legal Obligation | AML/CFT compliance, KYC verification, regulatory reporting, and retention obligations imposed by yo999's operating licence and applicable law. |
| Legitimate Interests | Fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where these interests are not overridden by your rights and interests. |
| Consent | Direct marketing communications and optional analytics cookies — where you have given explicit, freely withdrawable consent. You may withdraw consent at any time without affecting prior processing. |
yo999 does not sell your personal data to third parties. yo999 does not share your personal data with third-party marketing organisations. Personal data is shared only in the following limited circumstances:
yo999 operates under an international gaming licence and utilises cloud infrastructure and service providers that may process data in jurisdictions outside Pakistan. Where your personal data is transferred internationally, yo999 ensures that appropriate safeguards are in place, including:
You may request further information about the specific safeguards applied to international transfers of your personal data by contacting yo999 Data Protection at the address provided in Section 15.
yo999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML/KYC regulatory obligations |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping and audit requirements |
| Communications & Support Records | 3 years from last interaction | Dispute resolution and quality assurance |
| Responsible Gaming Records | Duration of exclusion + 5 years | Self-exclusion enforcement and duty-of-care obligations |
| Technical & Usage Logs | 13 months on a rolling basis | Security monitoring and platform analytics |
| Marketing Consent Records | Duration of consent + 3 years | Evidence of consent and compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised data may be retained for statistical and analytical purposes without limitation.
yo999 uses cookies and similar tracking technologies on the Platform to deliver core functionality, personalise your experience, and collect analytics data. The following cookie categories are in use:
| Cookie Type | Classification | Purpose |
|---|---|---|
| Session & Authentication | Maintaining your logged-in state, PKR Wallet session, and security tokens. Cannot be disabled without breaking core Platform functionality. | |
| Preferences & Settings | Remembering your language preference, responsible gaming tool settings, and interface customisations between sessions. | |
| Platform Analytics | Aggregated, pseudonymised usage data used to measure Platform performance and identify areas for improvement. Enabled only with your consent. | |
| Fraud Prevention | Device fingerprinting and behavioural signals used to detect bot activity, account sharing, and other security threats. Always active. |
You can manage your cookie preferences through the Cookie Settings panel accessible from the footer of the yo999 Platform at any time. Disabling non-essential cookies will not affect your ability to play games or access your account, but may limit certain personalisation features. Please note that essential and fraud-prevention cookies cannot be disabled as they are strictly necessary for Platform security and operation.
Subject to applicable law and the legal bases on which yo999 processes your data, you hold the following rights in respect of your personal data held by yo999. You may exercise any of these rights at any time by contacting us as described in Section 15:
yo999 applies a layered, defence-in-depth approach to the security of your personal data. The following technical and organisational measures are in place across the yo999 Platform:
Despite these measures, no online platform can guarantee absolute security against all threats. yo999 strongly encourages you to use a strong, unique password for your yo999 Account, to enable 2FA, and to notify yo999 immediately if you suspect unauthorised access to your account.
yo999 is strictly a 21+ platform. yo999 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Registration by persons under 21 years of age is prohibited and void.
As part of our mandatory age verification process, yo999 will not activate real-money gaming access on any account until satisfactory proof of age has been received and verified. Where yo999 discovers or has reason to believe that personal data has been collected from a person under 21, yo999 will immediately suspend the relevant account, close it without payment of any balance, and securely delete all associated personal data to the extent not required to be retained for regulatory compliance purposes.
If you are a parent or guardian and believe that your child may have registered on the yo999 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
The yo999 Platform may contain links to third-party websites or services — for example, links to payment provider portals or responsible gaming support organisations. This Privacy Policy applies solely to the yo999 Platform and does not extend to any third-party website or service, regardless of whether it is accessed via a link on the yo999 Platform.
yo999 is not responsible for the privacy practices, content, or security of any third-party website. We strongly encourage you to review the privacy policy of any third-party site you visit before providing any personal information.
yo999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date at the top of this document will be updated whenever a revised version is published.
Where changes are material — meaning they meaningfully affect your rights or how yo999 handles your personal data — yo999 will provide at least seven (7) days' advance notice by posting a prominent notice on the Platform and/or sending an email to your registered address.
Your continued use of the yo999 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with any changes, you should stop using the Platform and request account closure before the revised Policy takes effect.
We recommend reviewing this Privacy Policy periodically. The most current version will always be accessible at yo999.org/privacy-policy.
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how yo999 handles your personal data, please reach out through the following channels:
If you are not satisfied with yo999's response to your privacy concern, you have the right to escalate your complaint to the data protection supervisory authority relevant to yo999's operating jurisdiction, or to the dispute resolution mechanism provided by yo999's licensing authority. Details of this mechanism are available on request.
Six core privacy rights every yo999 player in Pakistan holds under this Privacy Policy
Request a full copy of every piece of personal data yo999 holds about your account — including your transaction history, KYC records, and responsible gaming settings. We deliver your data package within 30 days of a verified request.
If any information on your yo999 account is wrong — your name spelling, city of residence (Karachi, Lahore, Faisalabad, Islamabad), or contact details — you can request a correction at any time. We update inaccurate records without unnecessary delay.
Ask yo999 to delete your personal data when it is no longer necessary for the purpose it was collected. Note that AML and KYC regulatory obligations may require certain records to be retained for up to 7 years even after account closure.
Receive a structured, machine-readable export of the personal data you submitted to yo999. You can use this export to transfer your data history to another service provider of your choice, quickly and without friction.
Object to yo999 processing your data for direct marketing at any time — and we will stop, immediately and without question. You can also object to processing based on legitimate interests where your personal circumstances warrant it.
Where yo999 processes your data based on consent — such as marketing emails or analytics cookies — you can withdraw that consent at any time via your Account Settings or by emailing [email protected]. Past processing remains lawful.
Security measures applied across every layer of the yo999 Platform to keep your personal data safe
All data in transit is encrypted with TLS 1.3 and 256-bit SSL. Connection downgrade attacks are blocked at the infrastructure level.
Sensitive database fields — identity documents, financial references, authentication hashes — are encrypted at rest with AES-256.
Optional two-factor authentication via SMS OTP to your Pakistani mobile number adds a critical extra layer to your account security.
Internal access to player data is strictly limited to staff who require it for their specific role. All access is logged and audited.
Your personal data is in safe hands. Join Pakistan's trusted online casino and sports betting platform — cricket betting, PSL markets, live casino, and slots all in PKR with JazzCash and EasyPaisa support. 21+ only.
21+ only. Gambling involves financial risk. Please read our Responsible Gaming policy before playing.