9yyy Privacy Policy – How We Protect Your Data in Pakistan

9yyy is an online casino platform operating at 9yyy.ws, designed specifically for players in Pakistan. When this policy refers to "9yyy", "we", "us" or "our", it means the operating entity behind the 9yyy platform. This Privacy Policy governs all personal data collected through the 9yyy website, mobile browser experience, customer support communications and any other point of contact between you and 9yyy.

This policy should be read alongside the 9yyy Terms and Conditions and the Responsible Gaming policy, both of which form part of the overall agreement between you and the platform. Where this Privacy Policy refers to data processing carried out by third-party payment providers or game studios, those parties operate under their own privacy frameworks, but 9yyy takes reasonable steps to ensure that any third party with access to your data handles it appropriately.

9yyy is specifically designed for Pakistani players. All account balances, deposits and withdrawals are processed in Pakistani Rupees (PKR). The data we collect reflects the needs of operating a PKR-based platform with local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay and standard bank transfer.

9yyy collects only the personal data that is genuinely necessary to operate your account, process your PKR transactions, verify your identity and provide you with a safe gaming experience. We do not collect data speculatively or beyond what is required for these purposes. The categories of data we collect are set out below.

We do not collect sensitive personal data such as biometric information, racial or ethnic origin, political opinions, religious beliefs or health information as part of standard account operation. CNIC data collected for identity verification is used solely for that purpose and is not used for any other profiling or analytics function.

Every piece of data that 9yyy collects is used for a specific, documented purpose. We do not use your data for purposes beyond those listed below without obtaining fresh consent or relying on a separate legal basis. The primary uses of your personal data at 9yyy are as follows.

• Account creation and management: Your registration data is used to create and maintain your 9yyy account, authenticate your logins and apply account settings including deposit limits and responsible gaming preferences.
• Processing PKR transactions: Financial data is used to process your deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, and to execute withdrawal requests back to your verified payment method.
• Identity verification: CNIC data is used to verify that you are who you say you are before your first withdrawal is processed, and to ensure you meet the minimum age requirement of 18 years.
• Fraud prevention and security: Technical and usage data is used to identify suspicious activity, prevent unauthorised account access and detect patterns associated with money laundering, bonus abuse or multi-accounting.
• Customer support: Communications data is used to respond to your queries, resolve disputes and maintain records of support interactions for quality assurance.
• Platform improvement: Anonymised and aggregated usage data is used to understand how players interact with the 9yyy lobby, identify technical issues and improve game loading performance, particularly on mobile connections.
• Marketing communications: Where you have opted in, your contact details are used to send you information about bonuses, promotions and new games at 9yyy. You can opt out at any time.
• Responsible gaming compliance: Usage data is used to identify patterns that may indicate problem gambling and to apply any account limits or restrictions you have requested.

9yyy processes your personal data on the following legal bases, depending on the purpose of the processing activity in question.

• Contractual necessity: Processing your registration data, financial data and identity verification data is necessary to fulfil the contract between you and 9yyy — that is, to operate your account, accept your PKR deposits and pay out your winnings.
• Legitimate interests: Processing technical and usage data for fraud detection, security monitoring and platform improvement is carried out on the basis of 9yyy's legitimate interest in operating a secure and fair gaming environment.
• Consent: Processing your contact details for marketing communications is carried out only where you have explicitly opted in. This consent can be withdrawn at any time by contacting support@9yyy.ws or updating your account preferences.
• Legal obligation: Where applicable law requires 9yyy to retain or disclose certain data — for example, in connection with identity verification, anti-money laundering checks or a lawful request from a regulatory authority — processing is carried out on the basis of legal obligation.

9yyy does not sell your personal data to any third party for commercial purposes, full stop. We share your data only in the following limited and documented circumstances, and only to the extent necessary for the specific purpose in question.

• Payment processors: Your financial data is shared with the payment gateway handling your transaction — for example, the technical infrastructure behind Easypaisa, JazzCash or your card-issuing bank — solely for the purpose of processing that specific deposit or withdrawal in PKR.
• Game providers: When you play a game from a third-party studio such as Pragmatic Play, PG Soft or Habanero, limited technical data such as your player session ID is shared with that provider to facilitate the game session. No personal identification data is passed to game studios beyond what is necessary to run the session.
• Identity verification services: CNIC data may be processed by a third-party identity verification service to confirm document authenticity. These services operate under strict data processing agreements with 9yyy.
• Fraud prevention and security partners: Technical data including IP address and device fingerprint may be shared with security analytics providers for the purpose of fraud detection and prevention only.
• Legal and regulatory authorities: Where 9yyy receives a lawful, documented request from a competent authority requiring disclosure of player data, 9yyy will comply with that request to the extent required by applicable law. Where permissible, 9yyy will notify the affected player of such a disclosure.

All financial transactions at 9yyy are conducted in Pakistani Rupees. This means that your deposit and withdrawal records at 9yyy are maintained in PKR with no currency conversion at any stage. The financial data retained by 9yyy includes the amount of each transaction, the payment method used (for example, Easypaisa, JazzCash or IBFT), the date and time of the transaction, and the reference number issued by the payment processor.

9yyy does not store full card numbers or mobile wallet PINs. Card details are processed directly by the card payment gateway and are not retained on 9yyy servers. Mobile wallet transactions via Easypaisa, JazzCash, NayaPay and SadaPay are processed through the respective payment infrastructure of those providers, and 9yyy retains only the transaction outcome and reference — not your full wallet credentials.

Financial records are retained for the period specified in Section 7 of this policy, primarily to support transaction dispute resolution, fraud prevention and any applicable legal obligations related to financial record-keeping.

9yyy retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised. The retention periods that apply to different categories of data are outlined below.

• Account data (registration and identity): Retained for the lifetime of your active account plus a minimum of five years following permanent account closure, primarily to support any post-closure dispute resolution and applicable anti-money laundering obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction to support dispute resolution and applicable financial record-keeping requirements.
• Usage and gaming data: Retained for up to two years for the purpose of responsible gaming monitoring, fraud analytics and platform improvement. Data older than two years is aggregated and anonymised.
• Communications data (support interactions): Retained for up to two years from the date of the interaction to support quality assurance and recurring issue tracking.
• Marketing consent records: Retained until you withdraw consent, plus one year following withdrawal, for compliance documentation purposes.
• Technical/security logs: Retained for up to 90 days unless a security investigation is ongoing, in which case relevant logs are retained until the investigation is concluded.

Upon permanent account closure, 9yyy will initiate the deletion of your personal data according to the schedule above. Some data cannot be deleted immediately due to legal retention obligations — in those cases, access to the data is restricted to authorised compliance personnel only and it is not used for any active operational purpose during the retention period.

9yyy takes the security of your personal data seriously and maintains a layered set of technical and organisational measures to protect it against unauthorised access, loss or disclosure. Key security measures in place at 9yyy include the following.

• SSL/TLS encryption: All data transmitted between your device and the 9yyy platform is encrypted using industry-standard SSL/TLS protocols. This applies to every page of the site, every login, every deposit and every support communication.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a one-way cryptographic algorithm, meaning that even 9yyy staff cannot view your password.
• Access controls: Internal access to personal data is restricted to authorised personnel with a documented need. Different teams have different levels of access, and all internal access to player data is logged.
• Fraud monitoring: Automated systems monitor account activity for unusual patterns that may indicate fraud, account takeover or money laundering. Suspicious activity triggers immediate investigation.
• Secure data storage: Personal data is stored on servers with physical and network-level access controls, regular security audits and vulnerability assessments.

No online platform can guarantee absolute security against all threats, and 9yyy does not make that claim. However, we maintain security standards consistent with responsible industry practice and review our security measures regularly. If you have reason to believe that your 9yyy account has been compromised, please contact our support team immediately at support@9yyy.ws.

9yyy uses cookies and similar tracking technologies to operate the platform, remember your preferences and understand how players use the site. A cookie is a small text file stored on your device when you visit the 9yyy website. The types of cookies used by 9yyy are described below.

You can manage cookie preferences through your browser settings. Blocking essential cookies will affect how the 9yyy platform functions, including your ability to log in. Blocking non-essential cookies will not prevent you from using the core platform features.

9yyy sends promotional communications — including information about bonuses, new games, VIP Club rewards and special events — only to players who have explicitly opted in to receive them. These communications may be sent via SMS to your registered mobile number or by other direct messaging channels you have provided.

If you opted in at registration and later change your mind, you can opt out of marketing communications at any time by contacting our support team at support@9yyy.ws or by updating your account notification preferences in the settings section of your 9yyy account. Opting out of marketing messages does not affect your ability to use the platform or to receive essential account-related communications such as deposit confirmations, withdrawal notifications and security alerts — those are not marketing messages and are required to operate your account.

As a player on the 9yyy platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@9yyy.ws with your registered mobile number and a clear description of your request. We will respond within a reasonable timeframe and, in most cases, within 30 days.

9yyy is strictly an adults-only platform. No person under the age of 18 is permitted to register an account, access the platform or provide any personal data to 9yyy. We do not knowingly collect personal data from anyone under 18. If 9yyy becomes aware that a person under the age of 18 has created an account or provided personal data, that account will be immediately suspended and the data will be deleted as soon as is practicable, subject to any legal retention obligations.

CNIC verification prior to first withdrawal serves as a meaningful check against underage access, since a valid Pakistani CNIC is only issued to individuals aged 18 and above. If you are a parent or guardian and believe that a minor has registered on 9yyy, please contact us immediately at support@9yyy.ws so that we can take swift action.

9yyy reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, platform operations or applicable requirements. Where a material change is made to this policy, we will use reasonable efforts to notify registered players via their registered mobile number or by a prominent notice on the 9yyy platform. Minor updates that do not materially affect how your data is used may be made without individual notification.

The most current version of this Privacy Policy will always be available at 9yyy.ws/privacy-policy. The "Last Reviewed" date at the top of this page indicates when the policy was most recently assessed. Continued use of 9yyy after any policy update constitutes your acceptance of the revised version. If you do not accept a revised Privacy Policy, please close your account by contacting support@9yyy.ws.

If you have any questions about this Privacy Policy, want to exercise any of your data rights or have a concern about how your personal data is being handled at 9yyy, please get in touch through the following channels. Our support team is available around the clock, seven days a week.

• Email: support@9yyy.ws — for data access requests, deletion requests, correction requests and privacy complaints. Include your registered mobile number and a clear description of your request.
• Live Chat: Available directly on the 9yyy platform. The support team can assist with general privacy questions and escalate formal requests to the relevant internal team.

We aim to acknowledge all privacy-related requests within 48 hours and to resolve them within 30 days. For complex requests, we will keep you updated on progress if additional time is required.