Privacy Policy – yo999 Your Data & Security Explained

1 Introduction

This Privacy Policy describes how yo999 ("Platform", "we", "us") collects, uses, stores and protects your personal information when you use our website, mobile application or any related services. It applies to all users who register an account, make deposits in PKR, place bets or play games on the platform.

By registering an account on yo999 or using any part of the platform, you confirm that you have read and understood this Privacy Policy and that you agree to the collection and use of your information as described here. If you do not agree, please do not register or use yo999.

We take data privacy seriously. This policy is written in straightforward language because we want you to genuinely understand how your information is handled — not just tick a box and move on. If at any point you have questions about anything in this document, the support team is available to help.

2 Data We Collect

yo999 collects personal data in several ways — directly from you when you register and use the platform, automatically when you interact with the site or app, and from payment processors when you make PKR transactions.

Category	Examples	How Collected
Identity Data	Full name, date of birth, CNIC / Passport number	Registration & KYC verification
Contact Data	Mobile number, email address	Registration form
Financial Data	PKR deposit/withdrawal history, payment method type	Transaction processing
Account Activity	Login times, bets placed, games played, session duration	Platform usage logs
Device & Technical Data	IP address, device type, OS, browser, app version	Automatic collection
Communications	Support chat messages, email correspondence	When you contact support

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where you optionally enable biometric login on your own device) or health information.

3 How We Use Your Data

The data yo999 collects is used for specific, legitimate purposes. Below is a clear breakdown of what your data is used for:

• Account operation: To create and manage your yo999 account, process your PKR deposits and withdrawals, and maintain your transaction history.
• Identity verification: To confirm that you are who you say you are, that you are aged 18 or above, and that your payment methods belong to you.
• Security and fraud prevention: To monitor activity on your account for signs of unauthorised access, bonus abuse, money laundering or other prohibited behaviour described in the Terms and Conditions.
• Customer support: To respond to queries, investigate complaints and resolve disputes related to your account, bets or transactions.
• Platform improvement: Aggregated, anonymised usage data helps the team understand how users interact with the platform and where improvements can be made.
• Promotions and communications: If you have opted in, to send you information about relevant promotions, PSL match-day offers, bonus updates and platform news. You can opt out at any time via account settings.
• Legal compliance: To meet our obligations related to anti-money laundering (AML), counter-terrorism financing (CTF) and other applicable regulatory requirements.

4 Legal Basis for Processing

yo999 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration details, verifying your identity and handling PKR transactions are all essential to fulfilling the agreement between you and yo999 when you create an account.
• Legitimate interests: Fraud detection, platform security monitoring and aggregated analytics are carried out on the basis of our legitimate interest in operating a safe and functional platform.
• Legal obligation: Certain data — particularly identity verification records and transaction histories — must be retained to comply with AML and CTF obligations.
• Consent: Where we send you optional marketing communications about promotions, bonuses or PSL betting offers, we do so only with your explicit consent. You can withdraw consent at any time.

5 Sharing Your Data

yo999 does not sell your personal data. We do not share your information with third parties for their own marketing purposes. Data may be shared in the following limited circumstances:

• Payment processors: When you deposit or withdraw in PKR via JazzCash, Easypaisa, Raast, Bank Transfer or cards, the relevant payment provider receives the transaction details necessary to process that payment. These providers operate under their own privacy policies and security standards.
• Identity verification partners: Third-party KYC (Know Your Customer) service providers may process your identity documents to complete account verification. These partners are bound by strict data processing agreements.
• Technology and infrastructure providers: Hosting, security, analytics and customer support tools used to run the platform may process certain data on yo999's behalf. These are data processors, not independent data controllers, and they act only on our instructions.
• Legal and regulatory requirements: yo999 may disclose data to relevant authorities if required to do so by law, court order or in response to a legitimate investigation.

6 Payment Data & PKR Transactions

Given that yo999 handles real-money transactions in Pakistani Rupees, payment data security is a top priority. Here is how your financial information is handled:

• All deposit and withdrawal requests are processed through encrypted, secure payment channels.
• yo999 does not store full debit or credit card numbers on its own servers. Card payments are tokenised by the payment processor.
• Your JazzCash and Easypaisa mobile wallet numbers are used solely for processing the specific transaction you initiate. They are not used for outbound communications or shared with unrelated third parties.
• A record of your PKR transaction history — deposits, withdrawals, bonuses credited — is maintained within your account for your reference and for our compliance obligations.
• If you request a withdrawal, the funds are returned to the same payment method used for deposit wherever possible. This is a standard anti-fraud measure.

If you notice any transaction on your yo999 account that you did not initiate, contact the support team immediately. Do not share your account credentials or OTP codes with anyone, including people claiming to represent yo999 support.

7 Cookies & Tracking Technologies

yo999 uses cookies and similar tracking technologies on the website and app to provide a functional, personalised experience. Here is a plain-language breakdown of how they are used:

• Essential cookies: Required for the platform to work correctly — keeping you logged in, maintaining your session and remembering your preferences within the app. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand aggregate usage patterns — which sections of the platform are most visited, how long sessions last and where users encounter issues. This data is anonymised and used only to improve the platform.
• Security cookies: Help detect suspicious activity, such as login attempts from unfamiliar devices or locations, and form part of yo999's fraud prevention infrastructure.
• Preference cookies: Store your display settings, selected sport or game categories and notification preferences so the platform feels familiar every time you return.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect your ability to use the platform normally. yo999 does not use third-party advertising cookies or allow external ad networks to track you through the platform.

8 Data Retention

yo999 retains your personal data for as long as your account is active and for a defined period after account closure. The general retention periods are as follows:

• Active accounts: Data is retained throughout the period your account remains open and active.
• Closed accounts: Core identity and transaction records are retained for a minimum of five years after account closure to meet anti-money laundering and financial compliance requirements.
• Support communications: Chat logs and email correspondence are kept for up to two years to help resolve any future disputes or queries.
• Marketing data: If you opted in to promotional communications, your contact preferences are retained until you opt out. Upon opt-out, your details are removed from marketing lists promptly.

When data is no longer required for any of the above purposes, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

9 Your Rights

As a yo999 user, you have the following rights regarding your personal data. To exercise any of these rights, contact the support team with your registered mobile number and a clear description of your request:

• Right to access: You can request a copy of the personal data yo999 holds about you.
• Right to correction: If any of your details are inaccurate or out of date, you can ask us to correct them. Basic details like your mobile number and email can be updated directly in account settings.
• Right to deletion: You can request that your personal data be deleted. Note that where retention is required for legal compliance (e.g. AML obligations), full deletion may not be possible until the mandatory retention period has passed.
• Right to restrict processing: In certain circumstances, you can ask us to limit how your data is used while a query or dispute is being resolved.
• Right to data portability: You can request your account and transaction data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent — for example, marketing communications — you can withdraw that consent at any time without it affecting your ability to use the platform.
• Right to object: You can object to processing based on legitimate interests, including profiling for fraud detection purposes, though this may affect our ability to maintain account security.

10 Account Security & Your Responsibilities

Protecting your data is a shared responsibility. yo999 implements robust technical and organisational security measures, but the security of your account also depends on actions you take on your end.

To keep your yo999 account secure:

• Use a strong, unique password that you do not use on other websites or apps.
• Enable two-factor authentication (2FA) in your account settings — this adds a second layer of protection beyond just your password.
• Never share your password, OTP codes or account login details with anyone — including people claiming to be yo999 staff. The support team will never ask for your password.
• Log out of your account on shared or public devices after each session.
• If you receive a suspicious message claiming to be from yo999 asking for personal or payment details, do not respond and report it to the support team immediately.

yo999 is not responsible for unauthorised access to your account that results from you sharing your credentials, falling for phishing attempts or failing to take reasonable precautions with your login details.

11 Children & Minors

yo999 is strictly an 18+ platform. The collection of personal data from anyone under the age of 18 is not permitted and is not intentional. If we become aware that an account has been registered by or on behalf of a minor, that account will be closed immediately, any balance will be forfeited and all associated data will be reviewed in line with our compliance obligations.

If you are a parent or guardian and believe that a minor has registered on yo999, please contact the support team immediately with the relevant account details so that appropriate action can be taken without delay.

12 Policy Updates

yo999 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable regulations or improvements in data protection practices. When material changes are made, the updated policy will be published on this page with a revised "Last Updated" date.

For significant changes that affect how your data is used, we will notify active users via an in-app message or email to the address registered on your account. We encourage you to review this page periodically so that you are always aware of the current policy. Continuing to use yo999 after a policy update has been published constitutes your acceptance of the revised terms.

13 Contact & Privacy Queries

If you have any questions about this Privacy Policy, want to exercise your data rights or need to raise a data-related concern, the yo999 support team is available 24 hours a day, 7 days a week through the live chat feature in the platform app and website.

When contacting support about a privacy matter, please include your registered mobile number and a clear description of your request or concern. This helps the team locate your account and process your request as quickly as possible.

For matters relating to responsible gaming tools, self-exclusion or account closure, please mention this specifically in your message so that it is routed to the appropriate team without delay. The support email address is displayed in the footer of this page — please note it is for text correspondence only and cannot be used as a clickable link.