Privacy Policy — How yd999 Handles Your Data

yd999 ("we", "us", "our" or "the Platform") is an English-language online betting and casino information platform. We are committed to protecting the privacy and personal data of all users, including users accessing the Platform from Pakistan and other jurisdictions.

This Privacy Policy ("Policy") describes how yd999 collects, uses, stores, shares and protects personal data obtained through your use of the Platform. It also describes the rights you have in relation to your personal data and how you may exercise those rights.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, each of which is incorporated by reference.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can identify a natural person, directly or indirectly, including name, identification number, location data, online identifiers or one or more factors specific to the physical, economic or social identity of that person.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, yd999 acts as the Data Controller in respect of Personal Data collected via the Platform.
• "Data Processor" means any natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Data Controller.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "User" or "you" means any individual who accesses or uses the Platform, whether registered or unregistered.
• "KYC" means Know Your Customer — the identity and document verification process applied to registered Accounts.

yd999 collects Personal Data through multiple channels, including direct submission by the User, automated technical collection during Platform use, and from third-party verification providers where applicable.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

yd999 processes your Personal Data only for specified, explicit and legitimate purposes. The primary purposes for which we process Personal Data are:

• Account Management: Creating, maintaining and administering your Account, including password resets, account security and correspondence regarding your Account.
• Identity Verification (KYC): Verifying your identity, age and eligibility to use the Platform, and fulfilling anti-money laundering (AML) and fraud prevention obligations.
• Payment Processing: Processing deposits and withdrawal requests, reconciling transactions and managing chargebacks or disputed transactions.
• Responsible Gambling: Monitoring activity patterns for indicators of problem gambling, applying responsible gambling tools, processing self-exclusion requests and communicating with users about their gambling behaviour where warranted.
• Platform Security: Detecting and preventing fraud, cheating, multi-accounting, bonus abuse and other prohibited conduct.
• Customer Support: Responding to enquiries, resolving complaints and providing technical assistance.
• Legal Compliance: Meeting obligations under applicable laws and regulations, including responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: Analysing anonymised usage data to improve Platform features, content and user experience.
• Marketing Communications: Sending promotional materials where you have provided consent or where we have a legitimate interest, subject to your right to opt out at any time.

Where applicable data protection law requires a legal basis for processing Personal Data, yd999 relies on the following bases:

• Contractual Necessity: Processing required to perform the agreement between you and yd999, including account management, payment processing and KYC verification.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering laws, age verification obligations and responses to lawful authority requests.
• Legitimate Interests: Processing conducted for the legitimate business interests of yd999, including fraud prevention, platform security and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing conducted on the basis of your explicit consent, including the sending of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

6.1 Third-Party Service Providers

yd999 may share Personal Data with carefully selected third-party service providers who process data on our behalf as Data Processors. These providers are contractually obligated to process Personal Data only in accordance with our instructions and to maintain appropriate security measures. Categories of third-party processors include:

• Identity verification and KYC service providers;
• Payment processing partners (for transaction facilitation purposes only);
• Cloud hosting and data storage providers;
• Customer support platform providers;
• Fraud detection and security analytics providers;
• Anonymised web analytics providers.

6.2 Payment Brand References

yd999 may reference familiar Pakistani payment brands including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in an informational context. The sharing of Personal Data with any specific payment provider depends entirely on the applicable operator's payment integrations and the provider's own data practices. yd999 does not share Personal Data with payment providers outside of what is strictly necessary to process a specific transaction.

6.3 Legal Disclosures

yd999 may disclose Personal Data to regulatory authorities, law enforcement agencies or other public bodies where required to do so by applicable law, court order or binding regulatory direction. Where permitted by law, we will notify you of such a disclosure.

6.4 No Sale of Data

yd999 does not sell, rent, lease or otherwise commercially transfer your Personal Data to third parties for their own marketing or commercial purposes. This is an absolute commitment and is not subject to any commercial arrangement.

yd999 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data disposal procedures.

yd999 implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is protected using 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive Personal Data and financial information stored on our systems is encrypted at rest using industry-standard cryptographic protocols.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All personnel with access to Personal Data are subject to confidentiality obligations.
• Authentication: Multi-factor authentication is applied to administrative access to systems holding Personal Data.
• Security Testing: Regular security assessments, penetration testing and vulnerability scanning are conducted.
• Incident Response: A documented data breach response procedure is maintained. In the event of a qualifying data breach, affected Users and relevant authorities will be notified in accordance with applicable legal requirements.

yd999 uses cookies and similar tracking technologies to facilitate Platform functionality, maintain security and collect anonymised usage analytics. A cookie is a small text file placed on your device by a website you visit. Cookies used by yd999 fall into the following categories:

yd999 does not deploy third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.

yd999 operates internationally and your Personal Data may be transferred to and processed in jurisdictions other than Pakistan. When Personal Data is transferred outside of your home jurisdiction, yd999 takes steps to ensure that appropriate safeguards are in place, which may include:

• Contractual clauses binding the recipient to data protection standards equivalent to those applied by yd999;
• Processing by service providers located in jurisdictions recognised as providing adequate data protection;
• Other lawful transfer mechanisms as applicable under the laws of your jurisdiction.

By using the Platform and providing Personal Data, you acknowledge that your data may be processed outside of Pakistan. If you have concerns about international data transfers, please contact us using the details in Section 15.

Subject to applicable law and certain exceptions, you have the following rights in relation to your Personal Data held by yd999. To exercise any of these rights, please contact our support team using the details in Section 15.

We will respond to rights requests within a reasonable period, not exceeding 30 days from receipt of a valid request. Requests may be subject to identity verification before processing. We will not charge a fee for standard requests unless a request is manifestly unfounded or excessive.

The yd999 Platform is strictly intended for use by adults aged 18 years and over, or the higher minimum age required by the applicable operator or license jurisdiction. yd999 does not knowingly collect Personal Data from persons under the applicable minimum age.

If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated Account. If you have reason to believe that a minor has registered on the Platform or has submitted Personal Data to yd999, please notify us immediately at the contact details in Section 15.

Parents and guardians are encouraged to make use of parental control software to prevent minors from accessing gambling-related content.

The Platform may from time to time reference or display information about third-party services, products or websites. This Privacy Policy applies exclusively to Personal Data processed by yd999 in connection with your use of this Platform.

yd999 has no control over and accepts no responsibility for the privacy practices or content of any third-party websites or services that may be referenced on the Platform. We strongly recommend that you review the privacy policies of any third-party services you access.

Payment service providers referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — operate under their own independent privacy policies and data practices. References to these brands are for contextual familiarity only and do not imply any data-sharing arrangement or commercial partnership.

yd999 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or Platform operations. Where changes are material, we will notify registered Users by a prominent notice on the Platform or via the email address associated with your Account.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We recommend reviewing this Policy periodically. Your continued use of the Platform following any updates constitutes acceptance of the revised Policy. If you do not agree to the updated Policy, you must discontinue use of the Platform.

Archived versions of this Policy are available upon request by contacting our support team.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by yd999, please contact our dedicated support team. All privacy-related requests will be handled with appropriate confidentiality and within the response timelines described in Section 11.

For matters relating to your Account or responsible gambling tools, please also refer to our Responsible Gambling Policy and our Terms & Conditions.