Privacy Policy

y899 ("the Platform", "we", "us", "our") is committed to protecting the personal data of every individual who accesses or registers on the y899 website at https://y899.cam. This Privacy Policy ("Policy") sets out in full detail how y899 collects, processes, stores, shares and protects your personal data, and explains the rights available to you in relation to that data.

y899 is an English-language information and guide platform for online sports betting and live casino, operated for Pakistani users. The platform provides educational content, payment guides, responsible gambling resources and transparent platform information. In delivering those services, y899 inevitably processes certain categories of personal data about users who register accounts, contact support or simply browse the platform.

This Policy applies to all personal data processed by y899 in connection with the platform, regardless of the device or method of access used. It should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which are accessible from the main navigation menu.

The following definitions apply throughout this Privacy Policy:

"Personal Data"

Any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, email address, phone number, national identity number, IP address and financial information.

"Processing"

Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure or destruction.

"Data Controller"

The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, y899 is the data controller in respect of data collected through the platform.

"Data Processor"

A third party that processes personal data on behalf of the data controller in accordance with documented instructions and this Policy.

"User" / "you"

Any natural person who accesses the y899 platform, whether or not they have created a registered account.

"Cookies"

Small text files placed on your device by the y899 platform or third-party analytics tools for the purposes of session management, analytics and preference retention, as described in Section 7.

"KYC"

Know Your Customer — the identity verification process required before processing withdrawal transactions, as described in the Terms & Conditions.

y899 collects personal data through several channels. The categories of data collected, and the circumstances in which they arise, are described in the table below.

3.1 Data You Provide Voluntarily

Certain data is collected only when you actively provide it — for example, when completing the registration form, submitting KYC documents, contacting our support team or enabling responsible gambling tools in your account settings. You are not obliged to provide this data, but some features of the platform will be unavailable without it.

3.2 Data Collected Automatically

When you access the y899 platform, certain technical data is collected automatically by our servers and analytics tools. This includes your IP address, device identifiers and browsing behaviour on the platform. This data is used in aggregate for analytics and security purposes as described in Section 4.

y899 uses personal data for the following clearly defined purposes only:

• Account management: Creating, maintaining and administering your y899 account, including processing login requests and account settings changes.
• Transaction processing: Facilitating PKR deposits and withdrawals through available payment methods, including verifying transaction details and processing cashier requests.
• Identity verification (KYC): Verifying your identity and age eligibility in accordance with applicable anti-money-laundering obligations and responsible gambling requirements.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints and providing technical assistance via live chat, email and the Help Centre.
• Security and fraud prevention: Detecting, investigating and preventing fraudulent transactions, unauthorised account access and other prohibited conduct as described in our Terms & Conditions.
• Legal and regulatory compliance: Meeting obligations imposed by applicable law, including anti-money-laundering regulations, responsible gambling requirements and licensing conditions.
• Platform improvement: Analysing aggregate usage data to understand how users interact with the platform and to improve content, features and performance.
• Marketing communications: Sending promotional content, bonus notifications and platform updates to users who have opted in to receive them. You may unsubscribe at any time through your account settings or by contacting support.
• Responsible gambling: Monitoring account activity to identify potential problem gambling patterns and to apply limit settings or self-exclusion as requested or required.

y899 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review.

y899 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and y899, including account registration, transaction processing and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and responsible gambling requirements imposed by licensing conditions.
• Legitimate interests: Processing necessary for y899's legitimate business interests, including fraud prevention, platform security, analytics and product improvement, where those interests are not overridden by your privacy rights.
• Consent: Where processing is based on your explicit consent — for example, opting in to marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

y899 does not sell, rent or trade personal data. We may share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers and Data Processors

y899 engages third-party service providers to assist in operating the platform. These may include payment processing providers, identity verification and KYC services, cloud hosting providers, analytics platforms and customer support software providers. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose other than performing services for y899.

6.2 Regulatory and Law Enforcement Authorities

y899 may disclose personal data to regulators, law enforcement agencies or other authorities where required to do so by applicable law, court order, regulatory direction or in connection with the investigation of suspected fraud, money laundering or other criminal activity.

6.3 Responsible Gambling Organisations

Where you request self-exclusion through a third-party responsible gambling scheme, y899 may be required to share limited identity data (such as name and date of birth) with the relevant organisation to register your exclusion. This sharing is conducted in your interest and in accordance with the scheme's data processing requirements.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of y899's business, personal data held by the platform may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and the applicable privacy arrangements in advance where practicable.

y899 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences and collect anonymised analytics data. The categories of cookies in use are described below.

• Strictly necessary cookies: Essential to the functioning of the platform, including session management and security tokens. These cannot be disabled without impairing core platform functions.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how users interact with the platform — pages visited, session duration, error events — to help us improve the user experience.
• Preference cookies: Store your language preferences and display settings so you do not need to reconfigure them on every visit.
• Marketing cookies: Used only where you have consented to receive personalised promotional content. These track whether you have interacted with an offer or campaign.

You can control and manage cookies through your browser settings. Disabling strictly necessary cookies may affect your ability to use core platform features. For performance and marketing cookies, you may opt out through your account settings.

y899 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory and compliance obligations. The following general retention principles apply:

• Account data: Retained for the duration of your active account relationship with y899, and for a further period following account closure as required by anti-money-laundering and licensing regulations (typically five to seven years, depending on applicable jurisdiction requirements).
• Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for the period required by applicable AML and tax regulations.
• KYC documentation: Identity verification documents are retained for the minimum period required by applicable regulatory obligations, and are securely deleted thereafter.
• Support communications: Live chat transcripts and support ticket records are retained for up to two years following resolution of the relevant query, unless a longer retention period is required in connection with an active complaint or regulatory investigation.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify individual users.
• Marketing preferences: Records of your marketing consent and opt-out history are retained for the duration of your account plus three years, to demonstrate compliance with applicable marketing regulations.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in accordance with y899's internal data deletion procedures.

y899 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the y899 platform.
• Encryption of sensitive data at rest, including financial records and identity documents.
• Role-based access controls restricting internal access to personal data to staff with a legitimate operational requirement.
• Regular security assessments and vulnerability testing of platform infrastructure.
• Incident response procedures for data breach detection, investigation and notification.

While y899 takes data security seriously, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for logging out of your account when using shared devices. If you believe your account security has been compromised, please contact support immediately.

y899 may process personal data on servers located in jurisdictions outside of Pakistan. Where personal data is transferred internationally, y899 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required in the data controller's licensing jurisdiction. Such safeguards may include:

• Standard contractual clauses incorporated into agreements with relevant data processors.
• Data processing agreements with service providers that impose equivalent data protection obligations.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by the relevant regulatory authority.

If you have questions about the specific safeguards in place for any particular international transfer of your personal data, please contact us using the details provided in Section 14.

Subject to applicable law and regulation, you have the following rights in relation to your personal data held by y899. To exercise any of these rights, please contact us using the details in Section 14.

• Right of access: You may request a copy of the personal data y899 holds about you, together with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data is corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that y899 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used and machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on y899's legitimate interests, including for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

y899 will respond to all rights requests within thirty (30) days of receipt. Where a request is complex or where multiple requests are received, this period may be extended by a further sixty (60) days, with notice provided to you within the initial thirty-day period.

The y899 platform is strictly intended for adults aged 18 or older — or such higher minimum age as is required by the operator's license jurisdiction or applicable local law. y899 does not knowingly collect, process or retain personal data from individuals below the minimum age threshold.

Where y899 discovers or has reasonable grounds to believe that personal data has been submitted by a person below the minimum age, all data associated with that individual will be immediately deleted and the relevant account suspended pending investigation.

If you are a parent or guardian and believe that your child has submitted personal data to y899, please contact us immediately using the details in Section 14 so that we can take appropriate action without delay.

y899 reserves the right to amend, update or replace this Privacy Policy at any time. Where material changes are made, y899 will endeavour to provide reasonable advance notice to registered users via email or an in-platform notification.

The date of the most recent update is displayed prominently at the top of this document. Continued use of the y899 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to an amended Policy, you should discontinue platform use and may request account closure via the Help Centre.

We recommend reviewing this Policy periodically, particularly if you have concerns about how your personal data is handled. The current version will always be accessible via the Privacy Policy link in the site navigation.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by y899, please contact us through the following channels:

• Live Chat: Available 24/7 via the Help Centre widget on the platform — the fastest channel for urgent data requests or suspected security incidents.
• Help Centre Ticket: Submit a written request through the in-platform Help Centre for non-urgent matters including data access, rectification and erasure requests.
• Email: [email protected] — plain text only; copy and paste this address into your email client. This address is not a clickable link.

Please include "Privacy Request" in the subject line of any data rights enquiry, along with your registered email address and a description of your request. y899 will respond within thirty (30) calendar days of receipt.