Privacy Policy

01 Introduction

This Privacy Policy ("Policy") applies to all personal data processed by y9998 (the "Operator", "we", "us" or "our") in connection with the operation of the online gaming platform accessible at https://y9998.cam (the "Platform"). It governs the collection, storage, use and disclosure of personal information relating to registered users and visitors (each a "User", "Player" or "you").

y9998 is designed as an English-language gaming platform for adult users, with content and functionality specifically developed for players located in or familiar with Pakistan. We recognise that privacy is a fundamental concern for our users and we are committed to handling all personal data responsibly, transparently and in accordance with applicable data protection laws and the operator's licensing obligations.

By registering an Account, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

02 Definitions

For the purposes of this Policy, the following terms have the meanings assigned below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or indirectly.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Controller" — the entity that determines the purposes and means of processing Personal Data; in this context, y9998.
• "Processor" — a third party that processes Personal Data on behalf of the Controller under a contractual arrangement.
• "KYC Data" — identity verification documents and information submitted by a Player during the Know Your Customer process.
• "Cookies" — small data files placed on a User's device by the Platform for functional, analytical or marketing purposes.
• "Account" — a registered user profile on the y9998 Platform.
• "Third Party" — any natural or legal person, authority or body other than the User and y9998.

03 Data We Collect

We collect Personal Data through several channels: directly from you when you register or interact with the Platform; automatically as you use the Platform; and from third-party service providers where permitted by law.

3.1 Data You Provide Directly

• Full legal name and date of birth
• Email address and contact details
• Residential address and country of residence
• Username and encrypted account password
• KYC documents (government-issued ID such as Pakistan CNIC, passport or driving licence; proof of address)
• Payment information (transaction references, deposit method details; note: full card numbers are handled by payment processors, not stored by y9998)
• Communications you send to our support team via live chat or email
• Responsible gambling preferences (deposit limits, self-exclusion requests, etc.)

3.2 Data Collected Automatically

• IP address and approximate geolocation data
• Device type, operating system and browser version
• Session duration, pages visited and click-path data
• Game history, wagering records and transaction logs
• Cookie identifiers and analytics data (see Section 7)

3.3 Data from Third Parties

We may receive Personal Data from third-party KYC verification providers, fraud detection services, payment processors and, where applicable, sanctions-screening services. Any third-party data is used solely for account verification, fraud prevention and regulatory compliance purposes.

04 Legal Basis for Processing

y9998 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and y9998 — including account creation, payment processing and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements and licensing obligations imposed by the operator's regulatory jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we will seek your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 How We Use Your Data

We use the Personal Data we collect for the following purposes:

• Creating, managing and verifying your Account
• Processing deposits and withdrawals in PKR and other accepted currencies
• Conducting KYC identity verification and ongoing AML monitoring
• Delivering customer support via live chat and email ([email protected])
• Enforcing responsible gambling measures including deposit limits, loss limits, session timers and self-exclusion
• Detecting and preventing fraud, cheating, collusion and other prohibited conduct
• Complying with our licensing obligations and responding to lawful regulatory or law enforcement requests
• Analysing platform usage to improve performance, game selection and user experience
• Sending transactional and account-related communications (e.g., deposit confirmations, withdrawal notifications, security alerts)
• Sending promotional communications where you have opted in to receive them (opt-out available at any time)

06 Data Sharing & Disclosure

y9998 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: To process deposits and withdrawals. Payment method names such as Easypaisa, JazzCash, Raast and bank transfer providers (HBL, UBL, Meezan Bank, Bank Alfalah) may be involved as familiar Pakistani payment rails. Their use of your data is governed by their own privacy policies. y9998 does not claim any of these providers endorse or affiliate with gambling services.
• KYC & Identity Verification Providers: Third-party services that assist with verifying the identity and age of Players as required by licensing obligations.
• Fraud Prevention & Security Services: Providers that assist with detecting suspicious activity, protecting account integrity and preventing financial crime.
• Game Studio Partners: Game content providers may receive limited technical data (e.g., session tokens) necessary to deliver game functionality. No unnecessary Personal Data is transmitted to game studios.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or licensing authority, we may disclose Personal Data to relevant regulatory bodies or law enforcement agencies.
• Corporate Transactions: In the event of a merger, acquisition or sale of the Operator's business, Personal Data may be transferred as part of that transaction, subject to equivalent data protection commitments.

07 Cookies & Tracking Technologies

y9998 uses cookies and similar tracking technologies to deliver, secure and improve the Platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies and load-balancing identifiers. They cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language settings and responsible gambling limit selections.
• Analytical Cookies: Collect anonymised or pseudonymised usage data to help us understand how the Platform is used and how it can be improved.
• Marketing Cookies: Used to deliver relevant promotional content if you have opted in. These are not placed without your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Our cookie banner, displayed on your first visit, provides granular consent controls for non-essential cookies.

08 Data Retention

We retain your Personal Data for as long as is necessary to fulfil the purposes described in this Policy, including compliance with legal and regulatory retention obligations. In practice:

• Active Accounts: Personal Data is retained for the full duration of the Account relationship.
• Closed or Self-Excluded Accounts: Following Account closure or self-exclusion, we are typically required by AML and licensing regulations to retain certain data (including KYC records and financial transaction logs) for a minimum of five (5) years from the date of closure.
• Support Communications: Records of support interactions are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Marketing Data: Where consent is the legal basis, marketing data is retained until you withdraw consent or opt out.

After the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data destruction procedures.

09 Data Security

y9998 implements industry-standard technical and organisational measures to protect your Personal Data against unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and our servers
• Encrypted storage of passwords and sensitive Account credentials
• Role-based access controls limiting internal data access to authorised personnel only
• Regular security assessments, penetration testing and vulnerability management
• Two-factor authentication options available to Players for Account protection
• Logging and monitoring of data access events for audit and incident response

Despite our security measures, no system is entirely immune to breach. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and take immediate remedial action.

10 International Data Transfers

As y9998 operates internationally, your Personal Data may be transferred to and processed in countries outside your country of residence, including countries where data protection laws may differ from those applicable in Pakistan. Where such transfers occur, we apply appropriate safeguards — such as standard contractual clauses or equivalent transfer mechanisms — to ensure that your data continues to receive an adequate level of protection.

By using the Platform, you acknowledge that your Personal Data may be processed in these jurisdictions as part of the operation of the services described in this Policy.

11 Your Data Rights

Subject to applicable law and the operator's licensing obligations, you have the following rights in relation to your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected — subject to our overriding legal obligations to retain certain data under AML and licensing requirements.
• Right to Restrict Processing: You may request that we limit how we use your Personal Data in certain circumstances.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will respond to verified requests within 30 days. We may need to verify your identity before processing a data rights request.

12 Minors & Under-Age Access

y9998 is strictly an adults-only platform. We do not knowingly collect or process Personal Data relating to individuals under the age of 18, or the higher minimum age required by the operator's licence jurisdiction, whichever is greater.

All Account registrations are subject to age verification as part of the KYC process. If we become aware that a minor has created an Account or submitted Personal Data, we will immediately close the Account, delete the associated Personal Data and return any deposited funds in accordance with applicable procedures.

If you believe a minor has accessed the Platform, please contact us immediately at [email protected] so that we can take prompt action.

13 Third-Party Links & Services

The Platform may contain references to or integrations with third-party services, including game studios, payment processing systems and analytics providers. This Policy applies only to data processed by y9998 as the Controller. Third-party services have their own privacy policies that govern their data practices. y9998 is not responsible for the privacy practices of any third-party service provider.

References to Pakistani payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on this Platform are for contextual familiarity only. These providers are not affiliated with or endorsing y9998 or any gambling activity. Their collection and use of your data when you interact with their services is governed by their own privacy notices.

14 Policy Amendments

y9998 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered Players via email or an in-platform notification.

We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the changes. If you disagree with any amendment, you should cease using the Platform and contact us to request Account closure.

15 Contact & Data Queries

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your Personal Data by y9998, please contact our support team through the following channels:

• Live Chat: Available 24/7 within the Platform — recommended for the fastest response.
• Email: [email protected] (plain text only — not a clickable link).

When submitting a data rights request by email, please include: your registered Account username, the nature of your request (e.g., access, erasure, rectification), and sufficient information to verify your identity. We will acknowledge receipt within 48 hours and aim to resolve all data-related queries within 30 calendar days.

If you are not satisfied with our response to a data-related complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the operator's licensing jurisdiction.