PRIVACY & DATA PROTECTION — Y 999 KHELO
At Y 999, we take your privacy seriously. This page explains exactly what personal data we collect when you use our platform, why we collect it, how we protect it, and what rights you have over it. We have written this in plain language so you do not need a legal background to understand it.
Data We Collect
Only what is necessary to operate your account and keep it secure.
How We Protect It
256-bit SSL, no card storage, no third-party data sales.
Your Rights
Access, correction, deletion, and objection rights — all honoured.
Contact Us
support@y999-khelo.com — data queries answered within 24 hours.
This Privacy Policy explains how Y 999 Khelo ("Y 999", "we", "us", "our") collects, uses, stores, and protects personal data belonging to players and visitors who interact with our platform at y999-khelo.com. Y 999 operates exclusively for Pakistani players, and this policy is written with that context in mind — plain language, straightforward explanations, and a clear commitment to treating your data with respect.
By registering an account on Y 999, visiting our website, or using any service we provide, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside the Y 999 Terms and Conditions and the Responsible Gaming Policy, both of which form part of your overall agreement with Y 999.
If you have any questions about anything in this policy, contact us at support@y999-khelo.com or through the 24/7 live chat available on the Y 999 platform. We respond to all privacy queries within 24 hours.
Y 999 Khelo is the data controller for all personal data collected through the y999-khelo.com platform. As data controller, Y 999 is responsible for determining the purposes for which personal data is collected and the means by which it is processed.
For any data protection matter — including requests to access, correct, or delete your personal data — you can contact Y 999 at:
Y 999 is committed to handling all data-related queries promptly and transparently. If you contact us about a data matter and we cannot resolve it to your satisfaction, you have the right to escalate your concern to the relevant data protection authority in Pakistan.
Y 999 collects personal data in several categories. The table below summarises what we collect and why each category is necessary.
| Data Category | Examples | Why It Is Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number | Account registration, age verification, fraud prevention |
| Contact Data | Pakistani mobile number, email address | Account access, support communication, security alerts |
| Financial Data | Easypaisa/JazzCash wallet reference, bank IBFT details, card last-4 digits | Processing PKR deposits and withdrawals, anti-money laundering compliance |
| Transaction Data | Deposit history, withdrawal history, bet history, bonus claim records | Account management, dispute resolution, regulatory compliance |
| Technical Data | IP address, device type, browser type, session timestamps | Platform security, fraud detection, service optimisation |
| Usage Data | Game sessions, pages visited, features used, session duration | Platform improvement, responsible gaming monitoring |
| Communications Data | Support chat logs, emails sent to Y 999 | Customer service, dispute evidence, quality assurance |
Y 999 collects personal data through the following channels:
When you register an account on Y 999, the registration form collects your name, date of birth, and Pakistani mobile number directly. Additional information such as your CNIC may be requested during the account verification process. When you contact Y 999 support, the content of that communication becomes part of your data record.
When you visit y999-khelo.com or use the Y 999 platform on a mobile device, technical data is collected automatically. This includes your IP address, the type of device and browser you are using, the pages you visit, the duration of your session, and the features you interact with. This data is collected using cookies and similar tracking technologies — see Section 9 for full details.
When you make a deposit or withdrawal through Easypaisa, JazzCash, NayaPay, SadaPay, or a bank IBFT transfer, Y 999 receives transaction confirmation data from the relevant payment provider. This includes the transaction reference number, the amount, and the payment method identifier. Full wallet credentials are never transmitted to Y 999 — the payment provider handles authentication on their own systems.
Where Y 999 uses a third-party identity verification service to confirm a player's age or identity, that service may return a verification result and certain identity data points to Y 999. Y 999 uses this data only for compliance purposes and does not share it with other third parties.
Y 999 uses personal data only for the purposes described below. We do not use your data for any purpose that is inconsistent with this policy or with the reasonable expectations you had when you provided it.
Y 999 does not sell, rent, or trade personal data to any third party under any circumstances. We share data only where it is necessary to provide our services or where we are legally required to do so.
To process deposits and withdrawals, Y 999 shares relevant transaction data with your chosen payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT partner banks, or Visa/Mastercard network). Each provider operates under its own privacy policy and is responsible for data processed on its own systems.
Where third-party identity verification is used, the minimum necessary data is shared with the verification provider for the purpose of confirming age and identity. Verification providers are bound by contractual data processing agreements with Y 999.
Y 999 uses technology partners for functions such as cloud hosting, fraud detection, analytics, and customer support tools. These partners process data strictly under Y 999's instruction and are prohibited from using player data for their own purposes.
Y 999 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required by applicable Pakistani law, where disclosure is necessary to protect the safety of individuals, or where Y 999 is responding to a valid legal order or regulatory request.
Y 999 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable law. The following general retention periods apply:
When data is no longer required under the retention periods above, Y 999 will securely delete or anonymise it so that it can no longer be linked back to you.
Y 999 implements layered technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. The key measures in place include:
Y 999 uses cookies and similar tracking technologies on the y999-khelo.com platform. Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your device on return visits and to function correctly across sessions.
You can manage cookie settings through your browser settings at any time. Disabling non-essential cookies will not prevent you from using Y 999, but it may affect some non-core features such as remembered preferences. Note that disabling essential cookies will prevent the Y 999 platform from functioning correctly and you will not be able to log in or place bets.
As a Y 999 player whose personal data we process, you have the following rights. Y 999 is committed to honouring these rights promptly and without charge in the majority of cases.
Request a copy of all personal data Y 999 holds about you. We will provide this within 30 days of receiving your request.
Request correction of inaccurate personal data held by Y 999. Contact support with the specific correction required.
Request deletion of your personal data in circumstances where Y 999 no longer has a legal basis to retain it. This right is subject to legal retention obligations.
Object to the processing of your personal data for marketing purposes at any time. Marketing opt-out takes effect within 48 hours of your request.
Request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
Request that Y 999 suspends processing of your personal data in certain circumstances — for example, while accuracy is being investigated.
To exercise any of these rights, contact Y 999 at support@y999-khelo.com or through the in-platform live chat. We will acknowledge your request within 48 hours and aim to resolve it within 30 calendar days. For complex requests, we may require up to 60 days — we will let you know if this applies to your case.
Y 999 Khelo is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification, and we conduct additional identity checks where there is any doubt about a player's age.
If Y 999 becomes aware that personal data belonging to a person under 18 has been collected — whether through a falsified registration or any other means — the associated account will be immediately suspended. All data collected in relation to that account will be deleted except where retention is required for legal or regulatory compliance purposes. Any deposits held in the account will be returned to the originating payment method.
Y 999 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes to the services we offer. When material changes are made, Y 999 will notify registered players via the mobile number or email address associated with their account.
The updated policy will be published at y999-khelo.com/privacy-policy with the revised effective date shown at the top of the page. Continued use of Y 999 services following notification of an updated policy constitutes acceptance of the revised terms.
If you have any question about this Privacy Policy, want to exercise any of your data rights, or want to raise a concern about how Y 999 has handled your personal data, please contact us through either of the following channels:
When you contact us about a data matter, please include your Y 999 account mobile number (without sharing your password) and a clear description of your query or request. This helps us locate your records and resolve the matter as quickly as possible.
If you are not satisfied with how Y 999 has handled your privacy concern after contacting us directly, you have the right to escalate the matter to the relevant data protection authority in Pakistan.
Six ways Y 999 protects your personal data every single day
Every page, every session, every transaction on Y 999 is encrypted with 256-bit SSL — the same standard used by major banks. Your data cannot be intercepted in transit under normal conditions.
Y 999 never stores your full payment card number. Card transactions are processed by certified gateways — Y 999 holds only the last four digits as a reference. Your financial credentials stay where they belong.
Your personal data is never sold, rented, or shared with advertisers, data brokers, or any other commercial third party. Ever. Data sharing happens only with service providers who need it to process your payments or run your account.
Access requests, correction requests, deletion requests, and marketing opt-outs are processed within clear timeframes — no delays, no unnecessary friction. Your rights over your own data are taken seriously at Y 999.
Y 999 only collects personal data that is genuinely needed to operate your account, process your PKR transactions, and keep the platform secure. We do not collect data speculatively or for purposes unrelated to your gaming experience.
Privacy queries are handled by Y 999 support agents available around the clock in both English and Urdu. If you have a concern about your data, you can reach a real person in under two minutes through live chat.