At y899, we take the privacy of every Pakistani player seriously. This Privacy Policy explains in plain, clear terms exactly what personal data y899 collects from you, how we use it, who we share it with, how long we keep it, and what rights you hold over your own information. Whether you are browsing from Karachi, Lahore, Islamabad, Faisalabad, or anywhere else in Pakistan — your data is handled with the same level of care and respect. We encourage you to read this document in full before creating a y899 account.
Our Privacy Principles
These six principles underpin everything y899 does with your personal information. They are not aspirational — they are operational commitments we hold ourselves to every day.
y899 only collects personal data that is strictly necessary for the operation of your account, processing of transactions, KYC verification, and compliance with applicable regulations. We do not collect data for its own sake.
All personal data stored by y899 — including your CNIC details, payment method information, and account credentials — is encrypted at rest and in transit using industry-standard TLS and AES-256 encryption protocols.
As a y899 player, you hold clear rights over your personal data — including the right to access, correct, delete, and port your information. y899 honours these rights promptly and without unnecessary obstacles.
y899 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Data is shared only with trusted service providers under strict contractual obligations, or where legally required.
This Privacy Policy is written in plain English. We avoid legal jargon where possible so that players across Pakistan — whether in Rawalpindi, Multan, or Peshawar — can understand exactly how their data is handled.
y899 retains personal data only for as long as it is needed for the purpose it was collected, or as required by law. Once that period expires, your data is securely deleted or anonymised in accordance with our retention schedule.
Effective Date: 1 January 2026. This Privacy Policy applies to all personal data collected and processed by y899 in connection with your use of the y899 platform at y899.org, including all casino games, sports betting, live dealer products, and account management services. By registering a y899 account or by continuing to use the Platform after this date, you acknowledge that you have read and understood this Privacy Policy.
y899 is an online casino and sports betting platform operating at y899.org, providing gaming and wagering services to English-speaking Pakistani players and other permitted users. In the context of this Privacy Policy, "y899", "we", "us", and "our" refer to the operating entity behind the y899 brand and platform.
y899 acts as the data controller in respect of the personal data of registered players and visitors to the y899 Platform. This means y899 determines the purposes and means by which your personal data is collected and processed. For any privacy-related queries or requests, you may contact our data protection team at [email protected] — please include "Privacy Request" in your subject line.
y899 collects the following categories of personal data in the course of providing the Platform and its associated services:
y899 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than as contained in submitted CNIC/passport images for KYC purposes), or medical information, unless you voluntarily disclose this in the context of a responsible gaming or self-exclusion request.
y899 collects your personal data through the following means:
y899 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| KYC identity and age verification | Legal obligation / Contract |
| Processing deposits and withdrawals | Performance of contract |
| Anti-money laundering (AML) checks | Legal obligation |
| Fraud prevention and security monitoring | Legitimate interests |
| Responsible gaming monitoring and intervention | Legal obligation / Legitimate interests |
| Customer support and complaint handling | Performance of contract / Legitimate interests |
| Marketing communications (where opted-in) | Consent |
| Platform analytics and improvement | Legitimate interests |
| Legal proceedings and regulatory reporting | Legal obligation / Legitimate interests |
Where processing is based on consent — for example, for marketing communications — you may withdraw your consent at any time by contacting [email protected] or by updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
y899 uses your personal data for the following specific purposes:
y899 does not use your personal data to make fully automated decisions that have legal or similarly significant effects on you without human oversight, except where such processing is strictly required for fraud or AML compliance, in which case you retain the right to request human review of the decision.
y899 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Privacy Policy:
All third-party recipients who process personal data on y899's behalf do so under written data processing agreements that impose obligations on them equivalent to those that apply to y899 under this Privacy Policy.
y899 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, remember your preferences, and analyse how the Platform is used. The following categories of cookies are used on y899.org:
y899 does not use third-party advertising or behavioural targeting cookies. You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features.
y899 retains your personal data for the following periods:
| Data Category | Retention Period |
|---|---|
| Account identity and KYC documents | 5 years from account closure |
| Transaction and financial records | 7 years from transaction date (regulatory requirement) |
| Gaming session and bet history | 3 years from account closure |
| Customer support communications | 3 years from the date of the communication |
| Marketing consent records | Until consent is withdrawn, plus 1 year |
| Self-exclusion and responsible gaming records | Duration of exclusion plus 5 years |
| Device and technical logs | 12 months from collection |
| Cookie and analytics data | Up to 13 months from collection |
After the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an identifiable individual. Where anonymised data is retained for statistical or analytical purposes, it is no longer considered personal data under this Privacy Policy.
As a y899 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please email [email protected] with the subject line "Privacy Rights Request":
Request a copy of all personal data y899 holds about you. We will respond within 30 days of receiving a verified request.
Request correction of any inaccurate or incomplete personal data. We will update records promptly upon verification of the correction.
Request deletion of your personal data where we no longer have a lawful basis to retain it. Note that legal and regulatory retention obligations may prevent full erasure in some cases.
Request that we restrict processing of your data — for example, while a dispute about its accuracy is being resolved.
Request a machine-readable copy of the personal data you provided to y899 directly, for transfer to another service provider of your choice.
Object to processing based on legitimate interests, including any profiling conducted for Platform analytics or responsible gaming monitoring purposes.
y899 will respond to all verified privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified within the initial 30-day window.
y899 applies robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include:
Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, y899 will notify affected players and relevant authorities in accordance with applicable data breach notification obligations.
y899 operates infrastructure and engages service providers in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Pakistan. Where such transfers occur, y899 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to what is required under this Privacy Policy. These safeguards include standard contractual clauses incorporated into agreements with international data processors, and selection of processors operating in jurisdictions that maintain adequate data protection standards.
y899 does not transfer personal data to jurisdictions with no data protection framework without first implementing additional contractual and technical safeguards.
y899 is strictly a 21+ platform. We do not knowingly collect or process personal data from individuals under the age of 21. During the registration process, all players are required to declare their age and subsequently verify it through the KYC process by submitting valid government-issued identity documents. If y899 discovers that an account has been registered by or on behalf of a person under 21, that account will be immediately suspended, all bets voided, and any deposited funds returned to the payment source. Any personal data associated with an underage account will be deleted as soon as it is safe and lawful to do so. If you have reason to believe that a minor has registered on y899, please notify us immediately at [email protected].
The y899 Platform may contain links to third-party websites or services — for example, game provider information pages or responsible gaming resources. This Privacy Policy applies solely to the y899 Platform and does not cover the data practices of any third-party websites or services that you access via links from y899.org. y899 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.
y899 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, y899 will notify registered players by email to the address on file and by displaying a prominent notice on the Platform for a minimum of 14 days before the changes take effect. The updated Privacy Policy will be published on this page with a revised effective date. Your continued use of the y899 Platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed of any changes.
For any queries, concerns, or requests relating to this Privacy Policy or y899's handling of your personal data, please contact our data protection team:
Email our privacy team at [email protected] — please include "Privacy Request" or "Data Protection Enquiry" in your subject line so your message reaches the right team. We aim to respond to all privacy-related enquiries within 5 business days and to resolve substantive requests within 30 calendar days.
If you are not satisfied with y899's response to a privacy complaint, you have the right to escalate your concern to y899's senior compliance team. Where a resolution cannot be reached internally, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. y899 commits to cooperating fully with any such regulatory investigation.
y899 is built for Pakistani players who value both entertainment and security. Your personal data is protected, your transactions are encrypted, and your rights are respected — every single session. 21+ only. Play responsibly.