9yyy Casino
Privacy Policy

01Who We Are & Scope of This Policy

9yyy Casino is an online gaming and sports betting platform operated at 9yyy.biz. For the purposes of this Privacy Policy, "9yyy", "we", "us", and "our" refer to the Company that owns and operates the 9yyy platform under its international gaming licence. "You" and "your" refer to any individual who visits, registers on, or otherwise interacts with the 9yyy platform.

This Privacy Policy applies to all personal data processed by 9yyy in connection with:

• Registration and maintenance of a 9yyy player account;
• Use of casino games, live dealer tables, sports betting, crash games, and all other platform services;
• Deposits, withdrawals, and all payment transactions in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard;
• Customer support communications submitted by email, live chat, or other channels;
• KYC identity verification processes;
• Promotional and marketing communications (where you have given or implied consent);
• General browsing and navigation of the 9yyy.biz website.

02Personal Data We Collect

9yyy collects personal data through the following channels: information you actively provide during registration and account management; data generated automatically through your use of the platform; and information received from regulated third parties (such as KYC verification partners and payment processors). The categories of personal data collected are as follows:

2.1 Identity & Account Data

2.2 Financial Data

2.3 Technical & Usage Data

When you access 9yyy, the following technical data is automatically collected:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, navigation path through the platform;
• Game session data including games played, bet amounts, outcomes, and session duration;
• Login timestamps, session identifiers, and authentication events;
• Error logs and technical performance data used to maintain platform stability.

2.4 Communications Data

The content of all communications you submit to 9yyy — including support ticket details, live chat transcripts, email correspondence, and any documents or images you upload for KYC purposes — is retained for the purposes described in Section 3 and for the durations set out in Section 6.

03How We Use Your Personal Data

04Legal Basis for Processing

9yyy processes personal data on one or more of the following legal bases depending on the specific processing activity:

4.1 Contract Performance

The majority of data processing at 9yyy is necessary to perform the contract between you and 9yyy — that is, to operate your account, process your deposits and PKR withdrawals via JazzCash and EasyPaisa, provide access to games, and deliver the services you signed up for. Without this processing, 9yyy cannot provide the platform to you.

4.2 Legal Obligation

As a holder of an international gaming licence, 9yyy is subject to mandatory obligations in areas including: KYC identity verification, age verification (21+ requirement), anti-money-laundering transaction monitoring, record-keeping for regulatory audits, and responsible gaming compliance. Data processed under this basis cannot be refused or restricted by players without the consequence of account suspension, as such processing is not discretionary for 9yyy.

4.3 Legitimate Interests

9yyy processes certain data where it is in the legitimate interests of the Company or its players to do so, provided that those interests are not overridden by your privacy rights. This includes fraud detection and prevention, platform security, abuse monitoring, and analytical processing of anonymised usage data to improve services for Pakistani players generally.

4.4 Consent

Where processing is not required by contract or law, 9yyy will request your consent. This applies primarily to marketing communications — promotional emails, SMS notifications about bonuses, PSL season offers, and new game alerts. You may withdraw consent for marketing at any time by contacting the support team or using the unsubscribe mechanism in any marketing communication you receive.

05Sharing & Disclosure of Personal Data

5.1 Third-Party Service Providers

9yyy shares personal data with carefully selected third-party service providers who process data on 9yyy's behalf, including:

• Payment processors — JazzCash, EasyPaisa, and card processing partners receive transaction data necessary to execute PKR deposits and withdrawals;
• KYC verification services — Identity document data is shared with specialist third-party verification partners to complete the mandatory KYC process under 9yyy's gaming licence obligations;
• Game software providers — PG Soft, Pragmatic Play, Jili, JDB, Ezugi, and other certified game providers receive the player session data necessary to operate their games on the 9yyy platform;
• Cloud infrastructure providers — 9yyy's platform is hosted on secure cloud infrastructure; limited technical data is processed by hosting providers under strict data processing agreements;
• Fraud detection & AML analytics services — Transaction and usage data is processed by anti-fraud and AML technology partners to fulfil 9yyy's regulatory obligations.

5.2 Regulatory & Legal Disclosure

9yyy may disclose personal data to its gaming regulatory authority, law enforcement agencies, financial intelligence units, or other governmental bodies where required to do so by law, court order, regulatory directive, or where 9yyy determines that disclosure is necessary to prevent fraud, protect the rights of other players, or fulfil its obligations under its gaming licence. Such disclosures will be limited to the minimum data necessary to satisfy the applicable legal or regulatory requirement.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 9yyy's business operations, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any material change in data controller arising from such a transaction in accordance with Section 13 of this Policy.

5.4 Data Not Shared

9yyy does not share personal data with: advertising networks for targeted ad serving; data brokers or list companies; social media platforms for profile building; or any other commercial third parties for purposes unrelated to the operation of the 9yyy platform.

06Data Retention

9yyy retains personal data for defined periods appropriate to the purpose for which it was collected and in accordance with applicable regulatory retention requirements. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is either securely deleted from 9yyy's systems or, where deletion is not technically feasible, anonymised in a manner that permanently prevents re-identification of the data subject.

07Your Data Rights

As a data subject whose personal data is processed by 9yyy, you hold the following rights. To exercise any of these rights, contact the 9yyy support team at [email protected] with your registered email address and a clear description of the right you wish to exercise. 9yyy will respond within 30 days of receipt.

08Cookies & Tracking Technologies

9yyy uses cookies and similar tracking technologies to operate the platform, maintain session security, analyse usage, and — where you have consented — deliver relevant promotional content. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Blocking all cookies will prevent 9yyy from functioning correctly, as essential session cookies are required for login and gameplay. For guidance on managing browser cookies, refer to your browser's help documentation.

09International Data Transfers

9yyy's platform serves Pakistani players but operates infrastructure that may involve transfer of personal data to servers or service providers located outside Pakistan. Where such transfers occur, 9yyy ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that which would apply if the data remained within its jurisdiction of origin.

Safeguards applied to international transfers include: data processing agreements with service providers incorporating appropriate standard contractual clauses; selection of service providers certified under recognised data protection frameworks; and technical measures including end-to-end encryption of data in transit. 9yyy does not transfer personal data to jurisdictions without adequate data protection frameworks without implementing compensating safeguards.

10Children & Underage Players

If you have reason to believe that a minor has created a 9yyy account, please notify the support team immediately at [email protected]. 9yyy takes underage gambling extremely seriously and considers it a fundamental obligation — not merely a policy preference — to prevent anyone under 21 from accessing real-money gaming services.

11Security Measures

9yyy implements a multi-layer technical and organisational security framework to protect personal data from unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between player devices and 9yyy servers;
• Encryption at rest for all stored personal data, particularly financial and KYC data;
• Access controls ensuring only authorised 9yyy personnel with a specific operational need can access player personal data;
• Two-factor authentication for all internal systems accessing personal data;
• Regular security audits and penetration testing of the 9yyy platform and associated infrastructure;
• Intrusion detection systems monitoring for unusual access patterns or potential data exfiltration;
• Incident response procedures for timely management and notification of any data security breach.

In the event of a data security breach that is likely to result in a risk to your rights and freedoms, 9yyy will notify you and the relevant regulatory authority in accordance with applicable breach notification requirements. Notification will include the nature of the breach, the categories of data affected, and the steps being taken to address it.

12Marketing Communications

Where you have consented to receive marketing communications, 9yyy may send you promotional emails, SMS messages, or in-platform notifications relating to: new game releases, bonus and promotion announcements, PSL season special offers, cricket betting previews, deposit match offers, loyalty programme updates, and other relevant platform news.

You may opt out of all marketing communications at any time by:

• Clicking the unsubscribe link present in every marketing email;
• Updating your notification preferences in the 9yyy account settings;
• Contacting the support team at [email protected] with your registered email address.

Opting out of marketing communications does not affect essential service communications — such as withdrawal confirmations, security alerts, KYC status updates, and account notifications — which 9yyy must send to you regardless of marketing preferences as part of operating your account under its licence obligations.

13Amendments to This Privacy Policy

9yyy reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulation, business practices, or platform services. Where material changes are made — particularly changes that affect the legal basis for processing, the categories of data collected, or the categories of third parties with whom data is shared — 9yyy will notify registered players by email to the address on file at least seven (7) days before the updated Policy takes effect.

Your continued use of the 9yyy platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. If you disagree with any amendment, you should discontinue use of the platform and request account closure in accordance with the procedure set out in the 9yyy Terms and Conditions before the effective date of the amendment.

All historical versions of this Privacy Policy are available on request from the 9yyy support team. The "Effective Date" at the top of the current version always indicates when the most recent revision entered into force.

14Contact & Privacy Complaints

For any questions, concerns, or requests relating to this Privacy Policy or 9yyy's handling of your personal data, please contact the 9yyy Privacy team:

14.1 Complaints

If you are dissatisfied with 9yyy's handling of your personal data or response to a privacy rights request, you may escalate your complaint to the data protection supervisory authority applicable under 9yyy's licensing jurisdiction. Details of the relevant authority are available on request from the support team. 9yyy will cooperate fully with any regulatory investigation into its data handling practices.

This Privacy Policy was last revised and published in January 2026. By accessing or using 9yyy Casino, you acknowledge that you have read and understood this Privacy Policy in its entirety.