yyy9 Privacy Policy – How We Collect, Use and Protect Your Data

1 Who We Are

yyy9 (referred to as "we", "us", or "yyy9" throughout this Privacy Policy) is the operator of the online betting and gaming platform accessible at yyy9.app. We are the data controller responsible for the personal data of all registered users and visitors to the yyy9 platform.

This Privacy Policy applies to all personal data collected through the yyy9 website, mobile-optimised platform, and any communications you have with yyy9 including customer support interactions via email or live chat. It applies to all users regardless of their location, though yyy9's platform is specifically designed for users in Pakistan.

2 Personal Data We Collect

yyy9 collects personal data that is necessary to provide you with a safe, legal, and functional betting and gaming platform. The categories of data we collect are described below.

3 How We Collect Your Data

yyy9 collects your personal data through the following means:

3.1 Direct Collection

When you register a yyy9 account, complete identity verification, make a deposit or withdrawal, place a bet, contact customer support, or respond to a yyy9 survey or promotion, you directly provide us with personal data.

3.2 Automated Collection

When you access and use the yyy9 platform, we automatically collect technical and usage data through cookies, log files, and similar tracking technologies. This data is collected to ensure the platform functions correctly, to detect fraud, and to improve the user experience. See Section 7 for full details on cookies.

3.3 Third-Party Sources

In limited circumstances, yyy9 may receive personal data about you from third parties, including:

• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners) — to confirm transaction completion.
• Identity verification service providers — to assist with CNIC verification where required by our compliance obligations.
• Fraud detection and anti-money laundering screening services — to assess account risk as required by applicable regulations.

4 How and Why We Use Your Personal Data

yyy9 uses the personal data we collect for the following specific purposes. We only process personal data when we have a legitimate reason to do so — see Section 5 for the legal basis for each purpose.

• Account creation and management: To open your yyy9 account, authenticate your login, and manage your account settings and preferences.
• Identity verification (KYC): To verify that you are who you say you are and that you meet the minimum age requirement of 18 years, as required by our licensing conditions.
• Payment processing: To process deposits and withdrawals via your chosen PKR payment method, and to maintain accurate records of all financial transactions on your yyy9 account.
• Delivering our services: To provide you with sports betting, casino games, Aviator, virtual sports, live cricket scores, and all other yyy9 platform features you access.
• Customer support: To respond to your queries, resolve disputes, and assist with any issues related to your yyy9 account or bets.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multiple account creation, bonus abuse, and other breaches of the yyy9 Terms and Conditions.
• Legal and regulatory compliance: To meet our obligations under our gaming licence, applicable Pakistani law, and international anti-money laundering standards.
• Responsible gaming: To monitor betting patterns for signs of problem gambling and to apply responsible gaming tools when requested or when patterns of concern are identified.
• Platform improvement: To analyse usage patterns and improve the yyy9 user experience, fix bugs, and develop new features that Pakistani users will find valuable.
• Marketing communications (optional): To send you promotional offers, enhanced odds alerts, and news about yyy9 features — only if you have given consent. See Section 12.

5 Legal Basis for Processing

yyy9 processes personal data only when there is a lawful basis to do so. The applicable basis for each category of processing is:

• Contract performance: Processing necessary to provide the yyy9 service you have registered for — account management, payment processing, bet settlement.
• Legal obligation: Processing required to comply with KYC/AML regulations, age verification requirements, and gaming licence conditions.
• Legitimate interests: Fraud prevention, platform security, abuse detection, and general platform improvement, where these interests do not override your fundamental privacy rights.
• Consent: Marketing communications. You may withdraw consent at any time without affecting your yyy9 account or service quality.

6 When We Share Your Data

yyy9 does not sell your personal data. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for each purpose.

6.1 Payment Providers

When you make a deposit or request a withdrawal, your financial details and transaction data are shared with the relevant payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (via IBFT), or Visa/Mastercard's processing network. These providers act as independent data controllers for their portion of the transaction.

6.2 Identity Verification Partners

To meet our KYC obligations, yyy9 may share your identity documents and details with third-party verification service providers. These providers are bound by strict data processing agreements and use your data solely for the verification purpose.

6.3 Fraud and AML Screening

yyy9 may share transaction data and identity information with anti-money laundering screening services and fraud detection providers as required to meet our regulatory obligations.

6.4 Legal Requirements

yyy9 will disclose personal data to law enforcement authorities, regulatory bodies, or courts when required to do so by law, a valid court order, or our licensing authority.

6.5 Business Transfers

In the event that yyy9 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer, and the acquiring entity will be bound by this Privacy Policy.

7 Cookies and Tracking Technologies

yyy9 uses cookies and similar tracking technologies to make the platform work properly and to understand how users interact with it. The cookies we use fall into the following categories:

• Essential cookies: Required for the yyy9 platform to function. These include session authentication cookies and security cookies. You cannot opt out of these without making the platform unusable.
• Functional cookies: Remember your preferences on yyy9, such as your preferred deposit method or language setting, so you do not have to re-enter them on each visit.
• Analytics cookies: Help us understand how users navigate yyy9 — which pages are most visited, where users drop off, and how features are used. This data is aggregated and anonymised. We use this to improve the platform.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and multiple account creation attempts on yyy9.

You can control non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain yyy9 features. yyy9 does not use cookies to serve third-party advertising.

8 How Long We Keep Your Data

yyy9 retains personal data for as long as necessary to fulfil the purposes described in this policy and to meet our legal and regulatory obligations. The specific retention periods are:

When data is no longer required, yyy9 securely deletes or anonymises it so it can no longer be linked to any individual.

9 How We Protect Your Data

Data security is a core part of how yyy9 operates. We implement the following technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse:

• SSL/TLS encryption: All data transmitted between your device and yyy9 servers is encrypted using industry-standard TLS protocols.
• Encrypted data storage: Sensitive data including identity documents and financial information is stored in encrypted form at rest.
• Access controls: Access to personal data within yyy9 is restricted on a strict need-to-know basis. Staff access is logged and audited regularly.
• Two-factor authentication: Available for all yyy9 user accounts to provide an additional layer of protection beyond your password.
• Regular security audits: yyy9 undergoes regular independent security assessments to identify and address vulnerabilities before they can be exploited.
• Fraud detection systems: Automated systems monitor account activity in real time for patterns indicative of fraud, hacking attempts, or unauthorised access.

10 Your Privacy Rights

As a yyy9 user, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting support@yyy9.app.

yyy9 will respond to all privacy rights requests within 30 days. In complex cases, we may extend this by up to 60 days and will inform you of any extension. We do not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

11 Children's Privacy

yyy9 does not knowingly collect or process the personal data of individuals under 18 years of age. The yyy9 platform is strictly for adults. If you are under 18, you must not use yyy9 or provide us with any personal data.

If yyy9 discovers that personal data has been collected from a person under 18, we will immediately close the associated account and delete all related data. If you are a parent or guardian and believe your child has registered on yyy9, please contact support@yyy9.app immediately so we can take action.

12 Marketing Communications

yyy9 may send you promotional communications about new features, enhanced odds, PSL promotions, and other yyy9 offers. We will only send marketing communications if you have given your consent to receive them at registration or at a later point through your account settings.

12.1 Types of Marketing We Send

• Email notifications about active promotions and bonus offers on yyy9.
• SMS alerts for time-sensitive promotions, match reminders, and major events like Pakistan cricket fixtures or PSL matches.
• In-platform notifications within your yyy9 account dashboard.

12.2 Withdrawing Consent

You can opt out of all marketing communications from yyy9 at any time by: clicking the unsubscribe link in any marketing email; adjusting your notification preferences in your yyy9 account settings; or contacting support@yyy9.app and requesting removal from all marketing lists.

Opting out of marketing will not affect your ability to use yyy9 or access any of the platform's features. Service communications — such as deposit confirmations, withdrawal notifications, and important account security alerts — are not marketing and cannot be opted out of while your account remains active.

13 International Data Transfers

yyy9 primarily processes and stores personal data within secure data centres. In some cases — for example, when using internationally-based fraud detection or KYC verification services — personal data may be transferred to and processed in countries outside Pakistan.

When such transfers occur, yyy9 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Privacy Policy. This may include data processing agreements incorporating standard contractual clauses, or reliance on services operating under equivalent privacy frameworks.

If you have specific concerns about international data transfers related to your yyy9 account, please contact support@yyy9.app for further information.

14 Changes to This Privacy Policy

yyy9 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform functionality. The effective date at the top of this document indicates when the current version came into force.

When material changes are made — changes that affect how we use your data or your privacy rights — yyy9 will notify you by email or via an in-platform notification at least 7 days before the changes take effect. Minor clarifications or administrative updates may be made without advance notice.

Your continued use of yyy9 after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with an updated policy, you should stop using yyy9 and request account closure before the changes take effect.

15 Contact and Complaints

If you have any questions about this Privacy Policy, how yyy9 handles your personal data, or if you wish to exercise any of the rights described in Section 10, please contact us through the following channels:

• Email: support@yyy9.app (include "Privacy" in the subject line for faster routing)
• Live chat: Available 24/7 within your yyy9 account
• Privacy rights requests: support@yyy9.app — please state your full name and registered mobile number for account verification

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 days. If you are dissatisfied with how yyy9 has handled your personal data or responded to a privacy request, you have the right to raise a complaint with the relevant supervisory authority in the jurisdiction applicable to our licence.