y9998 Privacy Policy

1.1 Data Controller. y9998 operates the online casino and sports betting platform accessible at y9998.pro. For the purposes of this Privacy Policy, y9998 is the data controller responsible for the personal data of registered players and site visitors.

1.2 Platform Scope. This Policy applies to all personal data collected through the y9998 website, mobile-optimised web interface, customer support channels, and any other touchpoints operated directly by y9998. It does not apply to third-party websites or platforms that may be linked from the y9998 platform.

1.3 Contact. For all privacy-related enquiries, including data access requests, correction requests, and formal complaints, you may contact the y9998 data team at: [email protected]. Please include "Privacy Request" in the subject line of your message.

2.1 Registration Data. When you create a y9998 account, we collect your full legal name, date of birth, residential address, email address, mobile phone number, and preferred currency (PKR). This information is required to create and manage your account.

2.2 Identity Verification (KYC) Data. As part of our Know Your Customer (KYC) obligations, y9998 may request copies of identity documents such as your CNIC (Computerised National Identity Card), passport, or driving licence. We may also request proof of address documents such as a utility bill or bank statement.

2.3 Financial Data. We collect information relating to your payment transactions, including deposit amounts, withdrawal amounts, payment method details (such as JazzCash wallet numbers, EasyPaisa account references, HBL or UBL bank account details, or Visa/Mastercard card numbers in masked form), and transaction timestamps. Full payment card numbers are not stored by y9998 — card data is processed directly by our PCI-DSS compliant payment processors.

2.4 Gameplay Data. We record details of your gaming activity on the Platform, including games played, wagers placed, outcomes, bonus usage, and session durations. This data is used for account management, bonus administration, responsible gaming monitoring, and fraud prevention.

2.5 Technical Data. When you access y9998, our servers automatically collect technical data including your IP address, browser type and version, operating system, device type, referring URL, and pages visited within the Platform. This data is collected via server logs and cookies.

2.6 Communications Data. If you contact y9998 customer support via live chat or email, we retain records of those communications for a defined period for training, quality assurance, and dispute resolution purposes.

3.1 Account Management. Your registration data is used to create, maintain, and administer your y9998 account — including processing logins, managing your balance, applying bonuses, and communicating account-related updates.

3.2 Payment Processing. Financial data is used to process deposits and withdrawals via your chosen payment method, whether that is JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Visa/Mastercard. Payment data is also used to verify that funds originate from a source registered in your name.

3.3 Identity Verification & AML Compliance. KYC data is used to verify your identity, confirm your age (21+ requirement), and fulfil our anti-money laundering (AML) obligations. This is a legal requirement under applicable international gaming regulations.

3.4 Fraud Prevention & Security. Technical data, gameplay data, and financial data are analysed by y9998's compliance and security systems to detect and prevent fraudulent activity, account compromise, bonus abuse, and money laundering.

3.5 Responsible Gaming. Gameplay data is used by our responsible gaming systems to monitor for signs of problem gambling behaviour, enforce any self-imposed limits or exclusions you have requested, and trigger welfare interventions where required.

3.6 Marketing Communications. Where you have provided explicit consent to receive promotional communications, we may use your email address and platform preferences to send you information about y9998 bonuses, promotions, and new features. You may withdraw this consent at any time by updating your account notification settings or contacting support.

3.7 Platform Improvement. Aggregated, anonymised technical and gameplay data is used to analyse platform performance, identify popular features, and guide future product development decisions. This data cannot be used to identify individual players.

4.1 Contractual Necessity. The majority of personal data processing carried out by y9998 is necessary for the performance of the contract between y9998 and the player — specifically, the Terms & Conditions you agree to at registration. Without processing your identity, financial, and gameplay data, y9998 could not operate your account or deliver the services you have requested.

4.2 Legal Obligation. Some data processing is carried out to comply with legal obligations applicable to y9998 as an online gaming operator, including KYC identity verification, age verification, AML transaction monitoring, and record-keeping requirements.

4.3 Legitimate Interests. y9998 processes certain technical and gameplay data on the basis of legitimate interests — specifically, the prevention of fraud, the security of the Platform, and the improvement of services offered to players. These interests are balanced against your rights and do not override your fundamental privacy interests.

4.4 Consent. Where y9998 relies on consent as the legal basis for processing — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5.1 Payment Processors. Financial data necessary to execute your deposit or withdrawal transactions is shared with our approved payment processing partners. These partners are contractually bound to process your data only for the purpose of executing the specific transaction and maintaining required financial records.

5.2 Game Providers. To deliver casino games and sports betting services, y9998 integrates content from certified third-party game providers. A limited set of technical data (such as session tokens) may be shared with game providers to facilitate gameplay. These providers do not receive your personal identity or financial data.

5.3 KYC / Identity Verification Providers. Where y9998 uses a third-party identity verification service to process KYC documents, your identity data is shared with that provider under a data processing agreement that restricts its use to identity verification purposes only.

5.4 Regulatory and Law Enforcement Authorities. y9998 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or other governmental bodies where required by law, court order, or regulatory direction. y9998 will comply with all lawful requests for data disclosure.

5.5 No Sale of Data. y9998 does not sell, rent, or otherwise transfer your personal data to any unaffiliated third party for their own commercial or marketing purposes. This restriction applies without exception.

6.1 What Are Cookies. Cookies are small text files stored on your device by your browser when you visit a website. y9998 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform, remember your preferences, maintain your logged-in session, and analyse usage patterns.

6.2 Types of Cookies Used. y9998 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and last-used payment method. Disabling these cookies will reduce the personalisation of your experience.
• Analytical Cookies: Used to collect anonymised data about how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used to improve the Platform.
• Marketing Cookies: Used only where you have provided consent to receive personalised promotional communications. You may withdraw consent at any time via your account settings.

6.3 Managing Cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your y9998 account. Detailed instructions for managing cookies in common browsers are available from the browser developer's support resources.

7.1 Account Data. Personal data associated with your y9998 account is retained for the duration of the account relationship and for a defined period after account closure. Retention periods are determined by the nature of the data and applicable regulatory requirements.

7.2 Financial Records. Transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable anti-money laundering record-keeping requirements.

7.3 KYC Documents. Identity verification documents are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.

7.4 Communications Records. Customer support communications are retained for a period of up to three (3) years from the date of the last communication, unless a specific dispute or regulatory matter requires longer retention.

7.5 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with y9998's data disposal procedures. Where anonymisation is applied, the resulting data can no longer be linked to any individual player.

8.1 Technical Measures. y9998 employs a range of technical security measures to protect personal data from unauthorised access, loss, or disclosure. These measures include TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, firewalls, intrusion detection systems, and regular security assessments.

8.2 Organisational Measures. Access to personal data within y9998's internal systems is restricted on a need-to-know basis. Staff members with access to player data are subject to confidentiality obligations and receive regular data protection training.

8.3 Payment Security. y9998 does not store full payment card numbers on its own systems. Card payment processing is handled by PCI-DSS compliant payment processors who maintain their own rigorous security standards.

8.4 Breach Notification. In the event of a personal data breach that poses a risk to players' rights and interests, y9998 will take immediate steps to contain the breach and will notify affected players and relevant authorities in accordance with applicable notification requirements.

8.5 Your Responsibilities. The security of your y9998 account also depends on you keeping your login credentials confidential. y9998 strongly recommends using a strong, unique password and enabling any two-factor authentication options available on the Platform. You should notify y9998 support immediately if you suspect your account has been accessed without your authorisation.

9.1 Right of Access. You have the right to request a copy of the personal data that y9998 holds about you. Upon receiving a verified access request, y9998 will provide you with a summary of your personal data in a readable format within a reasonable timeframe.

9.2 Right to Rectification. If any personal data held by y9998 is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data directly through your account settings; for other corrections, please contact support.

9.3 Right to Erasure. You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other legal basis for processing. Please note that some data must be retained by y9998 for regulatory compliance reasons, and deletion requests in those categories cannot be fulfilled.

9.4 Right to Restriction. You may request that y9998 restrict the processing of your personal data in defined circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to deletion.

9.5 Right to Data Portability. Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transferred to another data controller where technically feasible.

9.6 Right to Object. You have the right to object to processing of your personal data carried out on the basis of y9998's legitimate interests, including profiling. Where you object, y9998 will cease the relevant processing unless compelling legitimate grounds can be demonstrated that override your interests.

9.7 How to Exercise Your Rights. To exercise any of the above rights, contact y9998 support at [email protected] with the subject line "Data Rights Request". y9998 will verify your identity before processing any data rights request and will respond within a reasonable period.

10.1 Age Restriction. The y9998 platform is strictly restricted to individuals who are 21 years of age or older. y9998 does not knowingly collect personal data from anyone under the age of 21. The 21+ minimum age requirement is enforced at registration through self-declaration and verified through the KYC process.

10.2 Discovery of Underage Data. If y9998 discovers or is notified that personal data has been collected from an individual under the age of 21, that account will be closed immediately and all associated personal data will be deleted as promptly as practicable, subject only to any regulatory record-keeping requirements that may apply to the transactions already processed on the account.

10.3 Parental Controls. y9998 encourages parents and guardians to make use of available internet parental control tools to prevent minors from accessing online gaming platforms. If you believe a minor has registered on y9998, please contact our support team immediately at [email protected].

11.1 Cross-Border Processing. As an internationally operating online gaming platform, y9998 may store and process personal data on servers located in jurisdictions outside Pakistan. Where such transfers occur, y9998 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with this Policy.

11.2 Third-Party Processors. Some of y9998's third-party service providers — including payment processors and game providers — may process data in jurisdictions outside Pakistan. y9998 requires all such providers to maintain adequate data protection standards as a condition of the contractual relationship.

11.3 Your Acknowledgement. By using the y9998 platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries outside Pakistan. y9998 will handle all such transfers responsibly and in accordance with this Policy.

12.1 Right to Update. y9998 reserves the right to amend this Privacy Policy at any time. Updated versions will be published on this page with a revised effective date. The most current version of this Policy is always the governing version.

12.2 Notification of Material Changes. Where y9998 makes a material change to this Policy that significantly affects how your personal data is processed, we will endeavour to notify registered players via their registered email address at least 14 days before the change takes effect, where operationally practicable.

12.3 Continued Use. Your continued use of the y9998 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree to the updated Policy, you should cease using the Platform and contact support to close your account.

13.1 Privacy Enquiries. For all questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by y9998, please contact our support team. We are available 24 hours a day, 7 days a week via live chat on the Platform.

13.2 Written Requests. For formal data rights requests — including access, rectification, erasure, portability, or objection requests — please submit your request in writing to: [email protected]. Please use the subject line "Data Rights Request" and include your registered email address and a brief description of your request.

13.3 Identity Verification. For the protection of all players, y9998 will verify your identity before processing any data rights request. This typically involves confirming your registered account details and may require submission of a KYC document.

13.4 Response Timeframe. y9998 will acknowledge all data rights requests promptly and will endeavour to provide a substantive response within 30 days of receiving a verified request. Where a request is complex or involves a large volume of data, this period may be extended — in which case y9998 will notify you of the expected timeframe.