YY99 Privacy Policy – How We Protect Your Data

This Privacy Policy explains what personal information yy99 collects when you use the platform, how that information is used, who it may be shared with and what rights you have over your own data. Please read it alongside the Terms and Conditions before registering.

Last Updated: June 2026

Our Privacy Commitments to You

Before getting into the full policy, here are the six core principles that guide how yy99 handles your personal information.

Data is Secured at Rest and in Transit

Personal information and PKR payment data are encrypted using industry-standard TLS in transit and AES-256 at rest. Unencrypted transmission of sensitive data is not permitted on yy99 systems.

Your Data Is Not Sold

yy99 does not sell, rent or trade your personal information to third-party marketers. Data is shared only with service providers that are necessary to operate the platform — payment processors, verification services and platform infrastructure.

Data Collected Only for Clear Purposes

yy99 only collects personal data that has a specific, legitimate purpose — account management, payment processing, identity verification, responsible gaming and platform improvement. No data is collected without a reason.

You Control Your Data

You can request a copy of the personal data yy99 holds on you, ask for corrections to inaccurate information and request deletion of your account data subject to legal retention requirements.

Data Kept Only as Long as Needed

Account information is retained for as long as your account is active plus any period required by applicable regulations. When data is no longer needed, it is securely deleted or anonymised.

You Will Be Informed of Material Changes

If yy99 makes significant changes to this Privacy Policy, registered users will be notified via their account before the changes take effect, giving them time to review the update.

1. Who We Are

This Privacy Policy applies to yy99.onl and all services, mobile applications and associated platforms operated under the yy99 brand. When this policy refers to "yy99", "we", "us" or "our", it refers to the operator of yy99.onl.

As the operator of the platform, yy99 acts as the data controller in respect of personal information collected from registered users and visitors in Pakistan. This means yy99 determines the purposes and means by which your personal data is processed.

This policy applies to users accessing yy99 from Pakistan using any supported payment method including JazzCash, Easypaisa, Raast, bank transfer or mobile wallets.

2. Personal Data We Collect

The personal data yy99 collects depends on how you interact with the platform. The main categories are set out in the table below.

Category Examples When Collected
Identity Data Full name, date of birth, national ID or passport details Registration and identity verification
Contact Data Mobile number, email address Registration and account updates
Financial Data JazzCash or Easypaisa wallet reference, bank account details, transaction amounts in PKR Deposit and withdrawal processing
Usage Data Bets placed, games played, session duration, pages visited Ongoing platform use
Technical Data IP address, device type, operating system, browser Automatic collection on each session
Communications Data Support chat messages, email correspondence When you contact yy99 support

yy99 does not collect sensitive categories of personal data such as biometric data, health information or political opinions. Age verification data is collected solely to confirm that users meet the 18+ requirement and is not retained beyond what is necessary for that purpose.

3. How We Collect Your Data

Personal data reaches yy99 through the following channels:

  • Direct input — information you provide when registering, updating your account, making a deposit or withdrawal, or contacting support.
  • Automated collection — technical and usage data collected automatically as you browse and use the platform, typically through session cookies and server logs.
  • Payment providers — confirmation and transaction reference data received from JazzCash, Easypaisa, Raast and other payment processors when transactions are processed.
  • Identity verification services — data returned by third-party verification providers when age or identity checks are conducted as part of account opening or withdrawal processing.

4. How We Use Your Personal Data

yy99 uses the personal data it holds for the following purposes:

  • Creating and managing your yy99 account, including login authentication and account security.
  • Processing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and other supported methods.
  • Verifying that account holders meet the minimum age requirement of 18 years.
  • Providing sports betting, casino, bingo and other gaming features on the platform.
  • Managing and awarding VIP loyalty points and tier status based on qualifying activity.
  • Sending account-related communications such as deposit confirmations, withdrawal notifications and security alerts.
  • Detecting and preventing fraud, multi-accounting, bonus abuse and other prohibited conduct.
  • Operating responsible gaming tools including deposit limit monitoring and self-exclusion enforcement.
  • Improving the platform based on usage patterns and technical performance data.
  • Complying with applicable legal and regulatory requirements.

yy99 does not use your personal data for unsolicited third-party marketing or share it with advertisers. Promotional communications from yy99 itself are based on your account activity and can be managed through your account notification settings.

5. Sharing Your Data

yy99 does not sell personal data. Data is shared only where necessary to operate the platform, and only with organisations that are bound by appropriate data protection obligations. The main categories of recipients are:

  • Payment processors — JazzCash, Easypaisa, Raast and banking partners receive the transaction data necessary to process your PKR deposits and withdrawals.
  • Identity verification providers — specialist services used to confirm account holder identity and age when required.
  • Platform infrastructure providers — hosting, cloud services and technical operations partners who process data on behalf of yy99 under strict contractual terms.
  • Fraud prevention services — data may be shared with fraud detection and financial crime prevention organisations where there is a reasonable basis to suspect prohibited conduct.
  • Legal and regulatory bodies — yy99 will disclose data when required to do so by a valid legal process or to comply with applicable law.

If yy99's business is acquired or merged with another organisation, your personal data may be transferred as part of that transaction. You will be notified via your registered contact details if this occurs and the new controller's privacy practices differ materially from this policy.

6. PKR Payments and Financial Data

When you deposit or withdraw funds using JazzCash, Easypaisa, Raast or bank transfer, the transaction is processed by the relevant payment provider under their own terms and privacy policy. yy99 receives a confirmation reference and transaction amount in PKR — it does not store full mobile wallet credentials or bank account passwords.

Financial transaction records are retained for the period required to meet accounting, fraud prevention and any applicable legal record-keeping obligations. This data is stored in encrypted form and access is restricted to authorised personnel.

Withdrawal requests are cross-checked against the account holder's registered identity data to ensure that funds can only be released to the verified account holder.

7. Cookies and Similar Technologies

yy99 uses cookies and similar session technologies to operate the platform. These fall into the following categories:

  • Essential cookies — required for login sessions, account authentication, and basic platform functionality. The platform cannot operate correctly without these.
  • Performance cookies — used to measure how different parts of the platform are used, identify technical errors and guide improvements. These collect aggregated, anonymised data.
  • Preference cookies — used to remember your account settings such as preferred language and notification preferences between sessions.

You can manage cookie settings in your browser. Disabling essential cookies will affect the platform's ability to function correctly and you may not be able to log in or use key features. Disabling performance or preference cookies will not prevent you from using the platform but may affect your experience.

8. Data Retention

yy99 keeps personal data for as long as your account is active. If you close your account, yy99 will retain the data for an additional period as required to:

  • Resolve any outstanding disputes or withdrawal requests.
  • Comply with fraud prevention and financial crime detection obligations.
  • Meet any applicable legal retention requirements.
  • Maintain self-exclusion records to prevent re-registration during an active exclusion period.

When data is no longer required for any of these purposes, it is either securely deleted from yy99 systems or anonymised so that it can no longer be connected to an individual.

9. Security Measures

yy99 implements technical and organisational security measures appropriate to the nature of the data held. These include:

  • TLS encryption for all data in transit between your device and yy99 servers.
  • AES-256 encryption for sensitive data stored at rest.
  • Access controls that limit internal access to personal data to authorised staff with a legitimate need.
  • Regular security reviews and vulnerability assessments of the platform.
  • Two-factor authentication available for account login.

No online platform can guarantee absolute security. In the event of a data breach that creates a material risk to account holders, yy99 will notify affected users via their registered contact details as soon as reasonably practicable.

You also play a role in keeping your account secure. Use a strong, unique password for yy99 and do not share your login credentials with anyone. If you suspect unauthorised access to your account, contact yy99 support immediately.

10. Your Rights Over Your Personal Data

As a yy99 account holder, you have the following rights in respect of your personal data. To exercise any of these rights, contact yy99 support with your account details and the specific request.

Right of Access

You may request a copy of the personal data yy99 holds about you. We will provide this within a reasonable timeframe, typically 30 days of your request.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you can ask us to correct it. Update basic details directly in your account settings or contact support for other corrections.

Right to Erasure

You may request deletion of your personal data. This right is subject to legal retention requirements — for example, transaction records required for financial compliance cannot be deleted on request.

Right to Restrict Processing

In certain circumstances — for example, while a dispute is being investigated — you may ask yy99 to limit how your data is used without deleting it entirely.

Right to Data Portability

You may request that certain data held about you is provided in a structured, machine-readable format so you can transfer it to another service if you choose to.

Right to Object

You may object to yy99 processing your data for purposes based on legitimate interests. We will consider your objection and cease processing unless compelling grounds override your rights.

11. Minors and Under-18 Policy

yy99 is strictly an adult platform for users aged 18 and above. The platform does not knowingly collect or process personal data from anyone under the age of 18.

If yy99 becomes aware that an account was registered by or on behalf of a minor, the account will be closed immediately, any balance will be returned to the depositing payment method and all data associated with the minor will be deleted as soon as practicable.

If you are a parent or guardian and believe a minor has registered on yy99, please contact support immediately with details so the account can be identified and closed.

yy99 may request proof of age at any time during account use. Failure to provide satisfactory proof may result in the account being suspended until verification is completed.

12. Changes to This Privacy Policy

yy99 may update this Privacy Policy from time to time. Minor updates — such as clarifications to existing practices — will be reflected on this page with a revised "Last Updated" date. Material changes that affect how your data is used or shared will be communicated to registered users via their account contact details before the changes take effect.

Continued use of the yy99 platform after a policy update constitutes acceptance of the revised terms. If you do not agree with changes to this policy, you may request account closure by contacting support.

13. Contact and Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact yy99 support. Support is available 24/7 through live chat on the platform.

Email: [email protected]

When submitting a data access, correction or deletion request, please include your registered account details to help us locate your records accurately. We aim to respond to data requests within 30 calendar days.

All data requests are handled by the yy99 support team. You will not be charged for making a legitimate data request. If a request is clearly unfounded or repetitive, yy99 reserves the right to decline it or charge a reasonable fee to cover administrative costs.

Privacy Questions Pakistan Players Often Ask

Quick answers on the most common data and privacy concerns at yy99.

No. When you make a deposit or withdrawal through JazzCash or Easypaisa, the transaction is processed directly by that payment provider. yy99 receives only a transaction reference and the PKR amount — your mobile wallet PIN, account password or full credentials are never transmitted to or stored by yy99. The same applies to Raast and bank transfer transactions.

You can request account closure and data deletion by contacting yy99 support. Your account will be closed, your personal profile will be deleted and any withdrawable balance will be returned to your registered payment method. Some data — primarily financial transaction records — must be retained for the period required by applicable regulations even after account closure. This is standard practice for any platform handling real-money transactions.

yy99 shares personal data only with organisations that are directly necessary to operate the platform — payment processors, identity verification services and platform infrastructure providers. These organisations are bound by data processing agreements. yy99 does not sell personal data or share it with third-party advertisers. Data may also be disclosed where legally required.

Your account activity — bets placed, winnings, deposit amounts and personal details — is private and not visible to other players on yy99. The platform does not have public leaderboards that display identifiable account information. Bingo room winner tickers use display names only, not your real name or account ID, and you control what display name is associated with your account.

When you self-exclude, your account is locked for the duration you have selected. Your personal data is retained during and after the self-exclusion period so that the exclusion can be enforced — this prevents re-registration under the same identity during an active exclusion. If your exclusion is permanent and you subsequently request account deletion, yy99 will delete your personal profile but retain the minimum data necessary to prevent re-registration and meet legal requirements.

Happy with Our Privacy Policy? Join YY99

Register your free yy99 account, deposit in PKR and access cricket betting, live casino, bingo and VIP rewards — with your data handled the way this policy describes.