yyy9 Privacy Policy

1 Introduction

yyy9 takes the privacy of its users seriously. This Privacy Policy sets out the basis on which any personal data we collect about you, or that you provide to us, will be processed by yyy9. We have written this policy to be readable and specific rather than filled with legal boilerplate that nobody actually parses.

References to "yyy9", "we", "us" or "the platform" refer to the operating entity behind yyy9.win and the yyy9 mobile application. "You" refers to any individual who uses, visits or registers on any part of the yyy9 platform.

This Privacy Policy should be read alongside our Terms and Conditions. Both form part of the overall agreement between you and yyy9 when you create an account or use our services.

2 Personal Data We Collect

The personal data we collect falls into the following categories:

Account Registration Data

When you create a yyy9 account, we collect your full name, date of birth, mobile number, email address and country of residence. This information is required to create and verify your account.

Identity Verification Data

For account verification and to process withdrawals, we may request copies of a government-issued identity document such as a Pakistani CNIC or passport. This data is handled with the highest level of security and is used solely for verification purposes.

Transaction & Payment Data

We record deposits and withdrawal transactions including the method used (JazzCash, Easypaisa, Raast, Bank Transfer, cards), transaction amounts in PKR and transaction timestamps. We do not store full payment account credentials — payment processing is handled by the respective payment providers.

Gaming & Platform Activity Data

We record your activity on the platform including games played, bets placed, session durations and betting history. This data is used to manage your account, administer bonuses and fulfil responsible gaming obligations.

Technical & Device Data

When you use the yyy9 website or app, we automatically collect certain technical data including your IP address, device type, operating system, browser type and approximate geographic location. This data is used for platform security, fraud prevention and performance optimisation.

Communications Data

When you contact our support team via live chat, email or in-app messaging, we retain a record of that communication. This includes the content of the message and any information you provide within it, used to resolve your query and for quality assurance purposes.

3 How We Use Your Personal Data

yyy9 uses the personal data we hold about you for the following specific purposes:

• Account creation and management: Registration data is used to create your account, verify your identity and manage your ongoing access to the platform.
• Processing deposits and withdrawals: Transaction and payment data is necessary to execute PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, Bank Transfer and cards.
• Delivering gaming services: Your activity data is used to run Sports Betting, Casino, Fish Games, Bingo and Slots sessions correctly — including recording bet results, applying winnings and managing bonus balances.
• Fraud prevention and security: Technical and device data is used to detect and prevent suspicious activity, unauthorised account access and potential fraud or money laundering patterns.
• Responsible gaming compliance: Gaming activity data is monitored to identify patterns that may suggest a player is at risk. This feeds into the deposit limit, session tracking and self-exclusion tools available to all users.
• Customer support: Communications data is used to respond to queries and resolve account issues. Support staff have access to relevant account data to assist you effectively.
• Platform improvements: Aggregated and anonymised technical data is used to understand how the platform is being used and to improve performance and user experience.
• Promotional communications: With your consent (or on the basis of legitimate interest for existing customers), we may send you details of yyy9 bonuses, promotions and relevant offers via email or in-app notifications. You can opt out of these at any time.

4 Sharing Your Personal Data

yyy9 does not sell personal data. We share your data only in the following limited and specific circumstances:

• Payment processors: Transaction data is shared with payment providers (including JazzCash, Easypaisa, Raast and banking partners) as necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy and security standards.
• Identity verification partners: Where third-party identity verification services are used to verify your CNIC or other documents, your submitted identification data is shared with that provider for verification purposes only.
• Legal and regulatory obligations: We may disclose personal data to law enforcement, financial intelligence authorities or other bodies where we are legally required to do so — for example, in response to a court order or regulatory investigation.
• Fraud prevention services: Technical and account data may be shared with third-party fraud detection systems to identify and prevent fraudulent activity on the platform.
• Platform infrastructure providers: Our hosting, database and security infrastructure providers have access to data as necessary to maintain the technical operation of the platform. All such providers are bound by confidentiality and data processing agreements.

In all cases, data is shared on a need-to-know basis and only to the extent required for the specific purpose. We do not share personal data with advertisers, data brokers or unrelated third parties.

5 Payments & Financial Data

All financial transactions at yyy9 are conducted in PKR. When you make a deposit or withdrawal using JazzCash, Easypaisa, Raast, Bank Transfer or a debit or credit card, the actual payment processing is handled by the relevant payment provider. yyy9 does not store your full mobile wallet credentials, bank account details or full card numbers.

What yyy9 does store is a record of each transaction — the method type, the PKR amount, the date and time, and the result (completed, pending or failed). This transaction history is accessible in your account dashboard and is retained as part of your account record.

If you are ever concerned about a payment transaction on your yyy9 account, contact our support team directly. Do not share your JazzCash or Easypaisa PIN or bank credentials with anyone including yyy9 staff — we will never ask for these.

6 Cookies & Tracking Technologies

The yyy9 website uses cookies and similar tracking technologies to operate correctly and to analyse platform usage. Cookies are small text files stored in your browser when you visit the site. Here is how we use them:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your preferences and ensure the deposit and game functions work correctly. These cannot be disabled without breaking the platform.
• Analytics cookies: We use anonymised analytics tools to understand how players navigate the site, which pages are visited most and where technical issues occur. This data is used in aggregate and does not personally identify individual users.
• Security cookies: Short-lived cookies are used as part of our fraud detection and bot-prevention systems. They help identify genuine human users versus automated traffic.

Most browsers allow you to view and manage cookies through your browser settings. Blocking essential cookies will prevent the yyy9 platform from functioning correctly. Blocking analytics or security cookies will reduce our ability to improve the platform but will not otherwise affect your gaming experience.

The yyy9 App uses equivalent local storage mechanisms on your device to maintain session data and preferences.

7 How Long We Keep Your Data

yyy9 retains personal data for as long as your account is open and for a defined period after account closure. The retention periods for different categories of data are as follows:

• Account registration and identity data: Retained for the duration of your account and for a minimum of five years after account closure. This retention period reflects the standard requirements for financial records and anti-money laundering compliance.
• Transaction and payment records: Retained for a minimum of five years from the date of each transaction. This aligns with standard financial record-keeping requirements.
• Gaming activity data: Retained for the duration of your account and for a period of two years post-closure for responsible gaming monitoring and dispute resolution purposes.
• Technical and device data: Typically retained for up to 12 months for fraud prevention and security analysis, after which it is anonymised or deleted.
• Support communications: Retained for up to two years from the date of the communication for quality assurance and dispute resolution purposes.

When data is no longer required and its retention period has expired, it is securely deleted or anonymised so that it can no longer be linked to any individual.

8 Your Rights Over Your Personal Data

You have the following rights in relation to the personal data yyy9 holds about you. To exercise any of these rights, contact our support team with a clear description of your request and your registered account details.

We will respond to data rights requests within a reasonable timeframe. Some requests — such as deletion requests — may be subject to legal retention requirements that prevent immediate deletion of all data categories.

9 How We Protect Your Data

yyy9 uses a range of technical and organisational security measures to protect the personal data we hold. These include:

• Encrypted data transmission using HTTPS/TLS protocols across the website and app.
• Encryption at rest for sensitive data stored on our servers, including identity documents and financial records.
• Role-based access controls that limit which staff members can access different categories of personal data.
• Regular security reviews and vulnerability assessments of our platform infrastructure.
• Two-factor authentication available for player accounts and enforced for internal admin access.

No online platform can guarantee absolute security, but yyy9 takes its security obligations seriously. If you become aware of any suspected unauthorised access to your account or data, report it to our support team immediately.

On your side: please use a strong, unique password for your yyy9 account, enable any available account security features, and never share your login credentials with anyone. yyy9 staff will never ask for your password.

10 Children and Minors

The yyy9 platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been opened by or on behalf of a minor, we will immediately suspend the account, void any associated transactions and delete the registration data.

If you are a parent or guardian and believe that a person under 18 may have registered a yyy9 account or accessed the platform using a shared device, please contact our support team immediately. We also recommend applying parental controls or device-level restrictions to prevent unauthorised access.

11 Changes to This Privacy Policy

yyy9 may update this Privacy Policy from time to time. When significant changes are made, we will notify registered users via email or through an in-platform notice. The "Last Updated" date at the top of this page will always reflect when the policy was last revised.

Continued use of the yyy9 platform after a policy update is published constitutes your acceptance of the revised policy. If you do not agree with changes to this policy, you may close your account by contacting our support team.

12 Contact Us About Privacy

For any questions, requests or concerns about how yyy9 handles your personal data, please reach out to our support team. The fastest way to get a response is via the live chat function available in the yyy9 App and on the website, which is staffed 24 hours a day.

For written data-related requests — such as a formal access request or a deletion request — you can also email us at the address shown in the footer of this page. Please include your registered username or account ID so we can locate your records efficiently.

We aim to acknowledge data rights requests within two working days and to respond fully within a reasonable timeframe depending on the complexity of the request.