9yyy Privacy Policy

1. Introduction

Section 1

This Privacy Policy governs the collection, use, storage and disclosure of personal information by the 9yyy online casino and sports betting platform ("9yyy", "we", "us", "our"), accessible at 9yyy.asia. It applies to all users of the 9yyy platform, including registered account holders and visitors who browse the site without registering.

By registering an account on 9yyy or continuing to use the platform following any update to this policy, you acknowledge that you have read and understood the terms set out herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the 9yyy platform.

2. Data Controller

Section 2

9yyy acts as the data controller in respect of personal information collected from users of the 9yyy platform. As data controller, 9yyy determines the purposes and means of processing personal data and is responsible for ensuring that processing complies with applicable data protection standards.

For all data protection enquiries, users may contact 9yyy using the contact details provided in Section 14 of this policy. Our designated data protection point of contact can be reached via the live chat feature or email address provided therein.

3. Data We Collect

Section 3

9yyy collects the following categories of personal data in connection with the provision of its platform:

• Registration data: Email address, chosen username, date of birth, country of residence.
• KYC identity data: Full legal name, CNIC number, CNIC photograph, selfie for facial comparison, proof of address where required.
• Payment data: JazzCash or Easypaisa mobile wallet number; HBL, UBL, Meezan Bank or Bank Alfalah account details; transaction history including deposits, withdrawals and wager amounts denominated in PKR.
• Technical data: IP address, device type, browser type and version, operating system, session duration, page visit data, login timestamps.
• Communications data: Records of live chat conversations, support emails, and any other correspondence with the 9yyy support team.
• Behavioural data: Betting history, casino game activity, bonus usage, responsible gaming limit settings and self-exclusion requests.

4. How We Use Your Data

Section 4

9yyy uses your personal data for the following purposes:

• Creating and managing your 9yyy account and verifying your identity through KYC procedures;
• Processing PKR deposits and withdrawals via JazzCash, Easypaisa and supported bank transfer channels;
• Providing access to sports betting markets (including PSL and cricket), casino games, live dealer tables and promotional offers;
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, including transaction monitoring and suspicious activity reporting where legally required;
• Sending account-related communications including deposit confirmations, withdrawal notifications, KYC status updates and security alerts;
• Sending marketing communications where you have consented, or where a legitimate interest exists under applicable law and you have not opted out;
• Operating responsible gaming tools including deposit limits, session reminders and self-exclusion, and monitoring account activity for indicators of problem gambling;
• Detecting, investigating and preventing fraud, cheating, collusion and other prohibited conduct;
• Improving the 9yyy platform through aggregated, anonymised analytics on user behaviour and platform performance.

5. Legal Basis for Processing

Section 5

9yyy processes personal data on the following legal bases:

• Contract performance: Processing necessary to create and manage your 9yyy account, process payments, and deliver the betting and casino services you have requested.
• Legal obligation: Processing required by applicable law, including KYC identity verification, AML transaction monitoring and record-keeping requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring and improving the 9yyy user experience, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

Section 6

9yyy does not sell your personal data to third parties. We may share personal data with the following categories of recipients where necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank and Bank Alfalah receive only the transactional data required to process your deposit or withdrawal.
• KYC & identity verification providers: Third-party identity verification services that assist with CNIC validation and facial comparison during the KYC process.
• Game software providers: Casino game providers (e.g. Pragmatic Play, Evolution Gaming) receive minimum necessary technical session data to deliver game content. These providers are contractually prohibited from using session data for any purpose beyond game delivery.
• Regulatory and law enforcement authorities: Where required by applicable law, legal process or a valid regulatory request, 9yyy may disclose user information to competent authorities.
• Fraud prevention services: Shared data is limited to fraud indicators and is subject to strict confidentiality agreements.

7. International Data Transfers

Section 7

9yyy's infrastructure and some third-party service providers may be located outside Pakistan. Where personal data is transferred internationally, 9yyy implements appropriate safeguards including contractual data protection clauses, ensuring that recipient organisations provide a level of protection substantially equivalent to the standards applied by 9yyy.

8. Data Retention

Section 8

9yyy retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following specific retention schedules:

• Account and identity data: Retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction.
• Support and communications records: Retained for three (3) years from the date of the communication.
• Technical and log data: Retained for up to twelve (12) months for security and fraud prevention purposes.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents recovery.

9. Cookies & Tracking Technologies

Section 9

9yyy uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential cookies: Required for session management, login authentication, and basic platform functionality. These cannot be disabled without affecting core features.
• Analytics cookies: Aggregated, anonymised data on platform usage patterns used to improve the 9yyy user experience. No personally identifiable data is transmitted to analytics providers.
• Preference cookies: Store your language, display and notification preferences to maintain a consistent experience across sessions.

You may manage non-essential cookie preferences through your browser settings. Disabling essential cookies will affect the functionality of the 9yyy platform and may prevent login or access to certain features.

10. Your Rights

Section 10

Subject to applicable law, you have the following rights in respect of personal data that 9yyy holds about you:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may request correction of inaccurate or incomplete personal data.
• Erasure: You may request deletion of your personal data, subject to our retention obligations under applicable law.
• Restriction: You may request that we restrict processing of your data in certain circumstances.
• Portability: You may request a structured, machine-readable copy of data you have provided to 9yyy.
• Objection: You may object to processing based on legitimate interests or for direct marketing purposes.
• Withdrawal of consent: Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact the 9yyy support team using the details in Section 14. Requests will be acknowledged within five (5) business days and fulfilled within thirty (30) days, subject to identity verification.

11. Children's Privacy

Section 11

9yyy is strictly prohibited from collecting personal data from individuals under the age of 18. The platform is not directed at and is not intended for use by minors. If 9yyy becomes aware that personal data has been collected from a user under 18, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe your child has registered an account on 9yyy, please contact our support team immediately via live chat.

12. Security Measures

Section 12

9yyy implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL encryption for all data in transit between your browser and 9yyy servers;
• Encryption of sensitive data fields (including CNIC numbers and payment details) at rest;
• Access controls limiting internal access to personal data to authorised personnel with a legitimate operational need;
• Regular security assessments and penetration testing of the 9yyy platform;
• Two-factor authentication available to all users for additional account protection;
• Incident response procedures for managing and reporting data security incidents where required by applicable law.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. 9yyy encourages all users to maintain strong, unique passwords and enable 2FA on their accounts.

13. Changes to This Policy

Section 13

9yyy may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform features. Material changes will be communicated to registered users via the email address associated with their 9yyy account and/or via a notice displayed on the platform. The effective date of the current version is shown at the top of this page. Continued use of 9yyy following notification of a material change constitutes acceptance of the revised policy.

14. Contact & Complaints

Section 14

For all data protection enquiries, requests to exercise your rights under Section 10, or complaints about how 9yyy handles your personal data, please contact the 9yyy support team:

• Live chat: Available 24/7 on every page of the 9yyy platform
• Email: [email protected]

9yyy will acknowledge data protection requests within five (5) business days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.