y9998 Privacy Policy

y9998 is an internationally licensed online casino and sports betting platform accessible at https://y9998.bet. The platform is operated by a regulated entity holding an international gaming licence issued by a recognised gaming regulatory authority. In the context of this Privacy Policy, "y9998", "we", "us", and "our" refer to that operating entity as the data controller responsible for your personal information.

As a licensed operator, y9998 is subject to strict data handling, anti-money laundering (AML), and know-your-customer (KYC) obligations imposed by our licensing authority. These obligations directly shape how we collect, store, and process the personal data of all registered players, including Pakistani players transacting in PKR.

If you have any questions about how y9998 handles your personal data, you may contact our Data Protection contact via the email address provided in Section 14 of this policy.

y9998 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the categories of data collected and their primary source:

y9998 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless expressly required by our licensing authority for identity verification purposes in specific circumstances.

y9998 collects personal data through the following channels and mechanisms:

• Direct provision: Data you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting Player Support, or updating your account profile.
• Automated collection: Technical data automatically recorded by our Platform servers when you access y9998, including your IP address, browser fingerprint, session duration, pages visited, and in-game events.
• Payment processors: Transaction confirmation data and payment method identifiers received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and other payment partners when you initiate a deposit or withdrawal.
• KYC verification partners: Identity verification outcomes and document authentication results received from our contracted third-party KYC service providers.
• Cookies and similar technologies: Session cookies, preference cookies, and analytics tracking as described in Section 7 of this policy.
• Third-party game providers: Aggregated gameplay performance data returned by game providers whose titles are available on the y9998 Platform.

y9998 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you accepted at registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law and our international gaming licence requirements — including KYC verification, AML screening, age verification, and regulatory reporting.
• Legitimate interests: Processing carried out in y9998's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: Processing based on your freely given, specific, and informed consent — including sending marketing emails, SMS promotions related to PSL betting offers, and optional platform personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

y9998 uses your personal data for the following specific purposes:

• Account creation and management: Setting up, maintaining, and securing your y9998 account, including login authentication and account recovery.
• Identity verification: Conducting KYC checks to confirm your identity, age (21+), and eligibility to use the Platform in compliance with our licensing obligations.
• Payment processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, bank transfer, and other approved payment methods registered to your account.
• Fraud and AML prevention: Monitoring transactions and account activity to detect and prevent fraudulent behaviour, money laundering, and other financial crimes as required by our international gaming licence.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, applying self-imposed limits, and intervening where necessary to protect player welfare.
• Customer support: Responding to your enquiries, processing complaints, and providing assistance via live chat and email.
• Platform personalisation: Tailoring your experience on y9998 based on your game preferences, betting history, and platform usage patterns.
• Marketing communications: Sending you promotional offers, bonus announcements, PSL cricket betting specials, and platform updates via email or SMS — where you have provided consent.
• Legal and regulatory compliance: Fulfilling reporting obligations to our licensing authority, responding to lawful requests from regulatory bodies, and maintaining records required by applicable law.

y9998 does not use your personal data for any automated individual decision-making processes that produce legally significant effects without human oversight, except where such processing is required for fraud detection or AML screening under our regulatory obligations.

y9998 may share your personal data with the following categories of third parties, each bound by appropriate contractual data protection obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and cryptocurrency payment partners receive the transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party verification services receive copies of your identity documents and personal details to carry out automated and manual identity checks on y9998's behalf.
• Game content providers: Software providers whose casino games are hosted on the y9998 Platform receive player identifiers and gameplay session data necessary to deliver and settle game outcomes.
• Regulatory and licensing authorities: Our international gaming licensing authority and, where legally required, law enforcement agencies or financial intelligence units may receive account and transaction data in accordance with applicable law.
• IT and infrastructure providers: Cloud hosting, security monitoring, and platform analytics vendors who process data on our behalf under strict processor agreements.
• Professional advisors: Legal counsel, auditors, and compliance consultants who require access to personal data in connection with the lawful provision of their services to y9998.

Any third party receiving your personal data from y9998 is contractually prohibited from using that data for any purpose beyond the specific service they provide to y9998.

The y9998 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session while logged in, and to understand how players use the Platform so we can improve it.

The categories of cookies used by y9998 are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged into your y9998 account and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred game view, and interface customisations. Disabling these cookies may affect your experience but will not prevent access to core Platform features.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the y9998 Platform — which game pages are visited most frequently, average session duration, and error occurrence rates. This data helps us improve the Platform experience for all Pakistani players.
• Marketing Cookies: Only placed where you have provided explicit consent. Used to track whether you arrived at y9998 via a promotional campaign so we can measure the effectiveness of our marketing activities.

You may manage your cookie preferences through your browser settings at any time. Note that disabling cookies may impact certain Platform functionality. y9998 does not use third-party advertising network cookies or sell cookie data to external advertisers.

y9998 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in transit: All data exchanged between your device and y9998's servers is protected using TLS 1.3 / 256-bit SSL encryption.
• Encryption at rest: Personal data and financial records stored in y9998's databases are encrypted using AES-256 encryption.
• Access controls: Access to personal data within y9998's internal systems is strictly role-based. Only personnel with a legitimate operational need may access player data, and all access events are logged and audited.
• Penetration testing: y9998's Platform undergoes regular independent security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: y9998 maintains a documented data breach incident response procedure. In the event of a data breach affecting your personal data, you will be notified in accordance with applicable regulatory requirements.

y9998 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by our international gaming licence and applicable law. The following retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, as required by our licensing authority for AML and audit purposes.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements under our gaming licence.
• KYC documents: Retained for the duration of the account relationship and for five (5) years following account closure.
• Gaming activity records: Retained for five (5) years from the date of each session, to support dispute resolution, responsible gaming monitoring, and regulatory audit requirements.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction in a support thread.
• Marketing consent records: Retained for the duration of consent and for two (2) years following withdrawal of consent, as evidence of the consent history.

Following the expiry of the applicable retention period, personal data is either permanently and securely deleted or irreversibly anonymised so that it can no longer be linked to any individual player.

As a y9998 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact y9998 Player Support with your account details and a clear description of your request. y9998 will respond within 30 days.

Please note that certain rights may be limited where y9998 is required to retain or process your data to comply with legal or regulatory obligations under our gaming licence. In such cases, y9998 will clearly explain the basis for any limitation in our response to your request.

y9998 employs active age verification measures during registration and as part of our KYC process to prevent minors from accessing the Platform. Parents and guardians who have reason to believe their child has registered on y9998 should contact our Player Support team immediately. We will investigate and take appropriate action within 48 hours of a verified report.

y9998 supports third-party parental control software and encourages households with children to use such tools to prevent inadvertent access to gambling platforms. More information on protecting young people from gambling harm is available on our Responsible Gaming page.

As an internationally licensed platform, y9998 may transfer your personal data to third-party processors and service providers located outside Pakistan. Such transfers may include data flowing to our KYC verification providers, cloud infrastructure partners, and game content suppliers operating in various jurisdictions globally.

Where personal data is transferred internationally, y9998 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. Safeguards used by y9998 include contractual data processing agreements with standard protective clauses, transfer to processors operating in jurisdictions recognised as providing adequate data protection standards, and additional technical and organisational controls where required.

If you would like more information about the specific safeguards applied to international transfers of your personal data, please contact y9998 Player Support as detailed in Section 14.

y9998 may update this Privacy Policy from time to time to reflect changes in our data processing practices, our Platform features, or applicable regulatory requirements. When material changes are made, y9998 will notify registered players by email to the address on file at least seven (7) days before the updated policy takes effect.

The "Effective Date" displayed at the top of this policy will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically to stay informed of how y9998 protects your personal data.

Your continued use of the y9998 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should cease using the Platform and contact Player Support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or y9998's handling of your personal data, please contact our Player Support team using one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the y9998 Platform. Our support agents have average first response times of under 3 minutes.
• Support Email: [email protected] — for privacy-related requests, please include "Privacy Request" in your subject line. Responses are provided within 4 business hours.

For formal data subject requests — including access, rectification, erasure, or portability requests — please contact us via email with your full name, registered email address, and a clear description of your request. y9998 will verify your identity before processing any data subject request to protect against unauthorised access to player data.

y9998 aims to respond to all privacy-related requests within 30 calendar days. Where a request is particularly complex or you have made multiple simultaneous requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.