This Privacy Policy explains what personal data 99y collects from users of its platform, how that data is used, who it may be shared with, how long it is retained, and what rights you have in relation to your personal information. 99y is committed to handling your data transparently and securely.
These are the core data protection commitments that apply to every 99y account, regardless of whether you are in Karachi, Lahore, Islamabad, or anywhere else in Pakistan.
Every session on the 99y platform runs over TLS/SSL encryption. Data transmitted between your device and 99y's servers — including login credentials, payment details, and account information — is encrypted in transit at all times, preventing interception by third parties.
99y does not sell, rent, or broker your personal data to advertisers, data brokers, or any commercial third parties. Your information is shared only with regulated service providers — such as payment processors and KYC verification partners — strictly to the extent required to operate your account.
99y stores account passwords using one-way salted cryptographic hashing. Plain-text passwords are never stored. No 99y employee or support agent can retrieve your password — only a secure reset process is available if access is lost.
Personal data and financial records are stored in separate, access-controlled systems. Access to user data within 99y is restricted on a need-to-know basis, with staff access to personal data governed by internal data handling policies and logged for audit purposes.
Registered 99y users have a range of rights in relation to their personal data — including the right to access, correct, and in certain circumstances request deletion of data held about them. These rights are exercisable by contacting 99y support and are described in full in the legal sections below.
99y's data handling practices are governed by the requirements of its international operating licence, which imposes specific obligations around data retention, user verification, and the protection of player information. Compliance is reviewed on an ongoing basis by the 99y compliance team.
As a 99y user you hold specific rights in relation to your personal data. These rights can be exercised by contacting 99y support at any time via live chat or email.
You may request a copy of all personal data 99y holds about you at any time. 99y will provide this information within 30 days of a verified request.
If any personal data held by 99y is inaccurate or incomplete, you have the right to request that it be corrected. Update requests can be submitted via your account settings or support.
In certain circumstances you may request the deletion of your personal data. Note that 99y is required to retain certain records for regulatory and AML compliance purposes, which may limit the scope of erasure.
You may ask 99y to restrict processing of your personal data in specific circumstances — for example, while a correction request is being assessed or a complaint is under review.
Where technically feasible and legally applicable, you may request that 99y provide your personal data in a structured, machine-readable format for transfer to another service provider.
You may object to 99y processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests where you believe your rights override those interests.
Your privacy matters to 99y. This Privacy Policy applies to all users of the 99y platform at https://99y.bio, including visitors who have not yet registered an account. Please read this document in full. By using the 99y platform, you acknowledge that you have read and understood this policy. If you do not agree with how 99y handles personal data, please discontinue use of the platform.
1.1 This Privacy Policy ("Policy") is published by 99y ("we", "us", "our", "the Platform") and describes how 99y collects, uses, stores, and protects personal data relating to users ("you", "the User") of the 99y platform, including the website at https://99y.bio and any associated mobile platform or application.
1.2 99y operates as an online casino and sports betting platform serving English-speaking users in Pakistan. As part of its operating licence obligations, 99y is required to implement robust data protection practices and to provide users with clear information about how their personal data is handled.
1.3 This Policy is incorporated by reference into 99y's Terms and Conditions. Defined terms used in this Policy that are not separately defined here carry the same meaning as in the 99y Terms and Conditions.
1.4 This Policy should be read alongside the 99y Terms and Conditions and Responsible Gaming Policy, all of which are available on the 99y platform.
2.1 99y collects personal data from users through a number of channels, including account registration, KYC verification, use of platform features, customer support interactions, and technical data generated automatically during platform usage. The categories of personal data collected are described below.
When you create a 99y account, we collect the information you provide during registration, which includes:
To comply with its licence obligations and anti-money laundering (AML) requirements, 99y collects and processes documentary evidence of identity, which may include:
99y collects records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method identifiers (such as JazzCash or EasyPaisa mobile numbers and partial bank account references), and transaction timestamps. Full payment credentials (such as complete bank account numbers) are handled exclusively by regulated payment processors and are not stored on 99y's own systems.
99y records all gaming and betting activity conducted through your account, including game sessions, bet placements, wager amounts, game outcomes, bonus usage, and session durations. This data is used for account administration, dispute resolution, responsible gaming monitoring, and regulatory reporting.
When you access the 99y platform, certain technical data is collected automatically, including:
If you contact 99y via live chat, email, or any other support channel, 99y will retain a record of that communication, including the content of messages and any attachments provided, for the purposes of dispute resolution, quality assurance, and regulatory record-keeping.
Minimum Data Principle: 99y only collects personal data that is necessary for the specific purpose for which it is collected. Where optional fields are presented during registration or account management, you are not obligated to complete them, although doing so may be required to access certain platform features.
3.1 99y uses personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and administration | Registration data, KYC data |
| Processing deposits and withdrawals | Financial data, KYC data, registration data |
| Identity and age verification (21+) | KYC data, registration data |
| Anti-money laundering (AML) monitoring | Financial data, gaming activity data, KYC data |
| Fraud prevention and security monitoring | Technical data, financial data, gaming activity data |
| Responsible gaming monitoring and interventions | Gaming activity data, registration data |
| Customer support and dispute resolution | Communications data, gaming activity data, account data |
| Regulatory reporting and licence compliance | All categories as required |
| Platform improvement and analytics | Technical and usage data (aggregated or anonymised where possible) |
| Marketing communications (where consented) | Registration data, gaming activity data |
3.2 99y does not use personal data for purposes incompatible with those listed above without first obtaining your consent or establishing a separate legal basis for the new processing purpose.
4.1 99y processes personal data on the following legal bases, depending on the purpose of processing:
4.2 Where 99y relies on legitimate interests as a legal basis, a legitimate interests assessment has been conducted to balance those interests against the potential impact on users' privacy rights. Details are available upon request from 99y support.
5.1 99y does not sell or rent personal data to any third party. Personal data is shared only in the following circumstances and only to the extent strictly necessary for the relevant purpose:
5.2 All third parties with whom 99y shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using the data for any purpose beyond those specified in their agreement with 99y.
No Cross-Border Data Sales: 99y will never transfer, sell, or provide access to your personal data to overseas commercial third parties for advertising or profiling purposes. Any international transfer of data for operational purposes (e.g., cloud infrastructure) is conducted subject to appropriate safeguards.
6.1 The 99y platform uses cookies and similar tracking technologies to provide core platform functionality, remember user preferences, maintain session security, and analyse aggregate usage patterns. The categories of cookies used by 99y are as follows:
6.2 You may manage your cookie preferences through your browser settings at any time. Disabling cookies beyond the strictly necessary category may affect platform functionality. A detailed cookie notice is available on the 99y platform.
7.1 99y retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by applicable laws and licence conditions. The following general retention periods apply:
7.2 Where a retention period has expired and no legal basis exists for continued processing, 99y will securely delete or anonymise the relevant personal data.
8.1 99y implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
8.2 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, 99y will notify affected users and the relevant regulatory authority in accordance with applicable notification obligations.
8.3 While 99y takes all reasonable precautions to protect your personal data, no internet transmission or electronic storage system is 100% secure. Users are also responsible for maintaining the security of their own account credentials and devices.
9.1 To exercise any of the data rights described in this Policy or in the Your Rights section above, please contact 99y's support team via live chat or email at [email protected]. To protect the security of your personal data, 99y will verify your identity before processing any data rights request.
9.2 99y will respond to verified data rights requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, 99y may extend this period by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.
9.3 Data rights requests are provided free of charge. Where a request is manifestly unfounded or excessive — particularly if repetitive — 99y reserves the right to charge a reasonable administrative fee or refuse to act on the request, with written reasons provided.
9.4 Where 99y is unable to comply with a data rights request — for example, because compliance would conflict with a legal obligation — 99y will inform you of the reasons and of any available remedies, including escalation to the relevant data protection authority.
10.1 With your consent, 99y may send you promotional communications about bonuses, new games, PSL cricket betting markets, and other platform features via email or SMS. Marketing consent is collected at registration and can be updated at any time via your account settings or by contacting 99y support.
10.2 You may opt out of marketing communications at any time by:
10.3 Opting out of marketing communications will not affect your ability to receive transactional or account-related communications from 99y, such as deposit confirmations, withdrawal notifications, or security alerts, which are sent on the basis of contractual necessity rather than consent.
10.4 If you are a self-excluded user, 99y will take reasonable steps to ensure that you do not receive marketing communications during your self-exclusion period, in compliance with responsible gaming obligations.
11.1 The 99y platform is strictly intended for users who are 21 years of age or older. 99y does not knowingly collect personal data from individuals under the age of 21. If 99y discovers that personal data has been collected from a user under the age of 21, that data will be deleted immediately and the associated account will be closed.
11.2 If you are a parent or guardian and believe that a minor has accessed the 99y platform or submitted personal data to 99y, please contact 99y support immediately at [email protected].
Age Verification: 99y enforces age verification as part of its KYC process. Providing false information about your age during registration is a breach of 99y's Terms and Conditions and may result in account closure and forfeiture of funds.
12.1 99y may update this Privacy Policy from time to time to reflect changes in legal requirements, platform features, or data processing practices. The date of the most recent update is displayed at the top of this page.
12.2 Where changes to this Policy are material — meaning they significantly affect how 99y uses your personal data or your rights in relation to it — 99y will notify registered users via email or in-platform notification prior to the changes taking effect.
12.3 Continued use of the 99y platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the revised Policy, you should cease using the platform and close your account.
12.4 We recommend reviewing this page periodically, particularly if you receive a notification of an update from 99y.
This Privacy Policy was last reviewed and updated in January 2026. The version of this Policy displayed on this page is always the currently operative version applicable to your use of the 99y platform.
13.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 99y handles your personal data, you can reach the 99y support and compliance team through the following channels:
13.2 When submitting a data rights request or privacy-related complaint, please include your registered username, a clear description of your request or concern, and any supporting documentation. This helps the 99y compliance team handle your request as efficiently as possible.
13.3 If you are dissatisfied with 99y's response to a privacy concern, you may have the right to escalate the matter to the relevant data protection supervisory authority or to the dispute resolution body associated with 99y's operating licence. Details of the applicable escalation process are available upon request from 99y support.
Now that you know how 99y protects your personal data, explore Pakistan's most trusted PKR-native casino and sports betting platform — cricket betting, live casino, slots, and more.
21+ only. Real-money gaming. Play responsibly and within your means.