Privacy Policy
yb999 Online Gaming Platform

This Privacy Policy ("Policy") describes how yb999 ("the Operator", "we", "us", "our"), the operator of the online gaming platform accessible at https://yb999.cam, collects, processes, stores, protects and, where applicable, discloses personal data relating to users ("you", "your") of the Platform.

yb999 is an English-language platform designed primarily for users based in Pakistan, including cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. This Policy is written in English and governs all personal data processing activities connected with your use of the Platform, regardless of the device or method of access.

By accessing the Platform, creating an Account, or otherwise interacting with any part of the yb999 service, you acknowledge that you have read this Policy and understand how your personal data will be handled. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated herein by reference.

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — such as name, email address, CNIC number, IP address or device identifier.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, the Operator of yb999.
• "Data Processor" means an entity that processes Personal Data on behalf of the Data Controller, such as a payment service provider or KYC verification partner.
• "Account" means a registered user account on the yb999 Platform.
• "KYC" means Know Your Customer identity verification, conducted for anti-money laundering (AML), fraud prevention and age-verification compliance.
• "Cookies" means small data files placed on your device by the Platform to facilitate session management, preference storage and analytics.
• "Platform" means the yb999 website at https://yb999.cam, its mobile-optimised versions and any associated applications.

We collect the following categories of Personal Data, as described in the table below:

We do not collect or store full payment card numbers (PAN) on our servers. Card transactions, where applicable, are routed through PCI-DSS-compliant payment processors. Mobile wallet references (e.g., Easypaisa, JazzCash) are collected only insofar as they appear in transaction records; these references do not imply any endorsement or partnership with the respective payment provider.

yb999 collects Personal Data through the following channels:

• Direct provision by you: Data submitted during Account registration, KYC document upload, deposit or withdrawal forms, support contact, or feedback submissions;
• Automated technical collection: Data captured automatically when you access the Platform — including IP address, session cookies, device identifiers and usage logs — via our server infrastructure and analytics tools;
• Third-party sources: Identity verification data returned by KYC service providers; fraud and sanctions-screening data from compliance databases; payment status information from payment processors;
• Responsible gambling tools: Limit configurations, self-exclusion requests and session activity data generated through the Platform's responsible gambling features.

We process your Personal Data on the following legal bases, which may apply individually or in combination depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing and support;
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, counter-terrorism financing requirements and identity verification obligations under our operating licence;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring and internal analytics, where these interests are not overridden by your privacy rights;
• Consent: Processing for optional activities such as marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

yb999 uses the Personal Data we collect for the following purposes:

• Account creation and management: To register, verify and maintain your Account on the Platform;
• Identity and age verification: To confirm your identity and verify that you meet the minimum age requirement (18+, or higher where required by applicable law);
• Payment processing: To process deposits and withdrawals, reconcile transactions and detect payment anomalies;
• Regulatory compliance: To fulfil AML, KYC, fraud-prevention and counter-terrorism financing obligations under applicable licence conditions;
• Customer support: To respond to your queries, resolve disputes and maintain records of support interactions;
• Responsible gambling: To enforce player-configured deposit, loss and session limits; to monitor usage patterns for indicators of problem gambling; to facilitate self-exclusion requests;
• Security and fraud prevention: To detect suspicious activity, prevent multi-accounting, identify fraudulent transactions and protect the integrity of the Platform;
• Platform improvement: To analyse usage patterns and optimise the Platform's performance, navigation and content for Pakistani users;
• Marketing communications: Where you have provided explicit consent, to send promotional offers, relevant updates and personalised recommendations via email or in-Platform notifications. You may opt out at any time.

We do not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on you without providing a mechanism for human review and appeal.

yb999 does not sell, rent or trade your Personal Data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly as necessary to operate the Platform and comply with our obligations:

• KYC and identity verification providers: Third-party services that assist in verifying your identity, confirming your age and conducting AML screening. These providers act as Data Processors under contractual data-processing agreements;
• Payment service providers: Entities that facilitate deposit and withdrawal transactions. Transaction data is shared only to the extent necessary to process the relevant payment. Payment provider names (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) referenced in this context are illustrative of potential processor types and do not imply confirmed partnerships or endorsements;
• Fraud prevention and security services: Providers of device fingerprinting, IP reputation checking, sanctions screening and related security services;
• Regulatory and law enforcement authorities: Where required by applicable law, court order or regulatory instruction — for example, reporting obligations under AML or counter-terrorism financing regulations;
• Platform technology providers: Cloud hosting, data storage and platform infrastructure providers who process data on our behalf under contractual agreements;
• Corporate transactions: In the event of a merger, acquisition, restructuring or sale of assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

The yb999 Platform is operated from a jurisdiction outside Pakistan. As a result, your Personal Data may be transferred to, stored in or processed in countries other than Pakistan, including countries in which the Operator and its service providers maintain infrastructure or offices.

Where Personal Data is transferred internationally, we take steps to ensure that an adequate level of protection is applied, including through:

• Transfers to jurisdictions that provide an adequate level of data protection under applicable frameworks;
• Contractual data-protection clauses with third-party processors and sub-processors;
• Technical and organisational security measures appropriate to the sensitivity of the data transferred.

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Accounts: Personal Data is retained for the duration of your active Account relationship with yb999;
• Closed Accounts: Following Account closure, we retain identity, transaction and KYC records for a minimum of five (5) years, or such longer period as required by the Operator's licence conditions or applicable AML regulations;
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, in accordance with AML retention obligations;
• Support Communications: Records of support interactions are retained for up to three (3) years following the resolution of the relevant matter, unless a longer period is required for ongoing dispute or regulatory purposes;
• Marketing Data: Where you have consented to marketing communications, preference data is retained until you withdraw consent or opt out, at which point it is deleted or suppressed as appropriate.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures. Anonymised or aggregated data that no longer identifies any individual may be retained indefinitely for statistical and analytical purposes.

yb999 uses cookies and similar technologies (including pixel tags and local storage) to operate the Platform, maintain session security, remember your preferences and analyse Platform performance. The following categories of cookies may be active on the Platform:

• Strictly necessary cookies: Essential for the Platform to function correctly — including session authentication, security tokens and load-balancing identifiers. These cannot be disabled without impairing core Platform functionality;
• Functional cookies: Used to remember your preferences such as language settings and responsible gambling limit configurations set within your Account;
• Performance and analytics cookies: Used to collect aggregated data about how users navigate the Platform, which pages are visited most frequently and where errors occur. This data is used to improve the Platform experience;
• Security cookies: Used for fraud detection, bot mitigation and suspicious-activity identification to protect the integrity of the Platform and your Account.

Subject to applicable law and certain exemptions relevant to AML, fraud prevention and legal proceedings, you hold the following rights in respect of your Personal Data held by yb999:

• Right of Access: You may request a copy of the Personal Data we hold about you and information about how it is being processed;
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For certain data categories (e.g., name, date of birth), correction may require re-verification of identity documents;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations;
• Right to Restriction of Processing: You may request that we restrict processing of your data in specified circumstances, such as where you contest the accuracy of data or have objected to processing;
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. You may withdraw marketing consent at any time;
• Right not to be subject to automated decisions: You have the right to request human review of any significant decision made about you through automated processing alone.

To exercise any of the above rights, please submit a written request to our support team via the contact details in Section 16. We will acknowledge your request promptly and respond within the timeframe required by applicable law. We may request proof of identity before processing certain rights requests to protect against unauthorised access to your data.

The yb999 Platform is strictly restricted to adults aged 18 years and above — or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect Personal Data from any person under the applicable minimum age.

Age verification is conducted as part of the KYC process for all registered users. If we discover that Personal Data has been collected from a user below the applicable minimum age, we will take immediate steps to delete that data, close the relevant Account and, where legally required, notify the appropriate regulatory authority.

yb999 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, disclosure, alteration or destruction. These measures include but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive stored data, including identity document images;
• Access controls restricting internal access to Personal Data on a need-to-know basis;
• Multi-factor authentication requirements for internal administrative access;
• Continuous monitoring for security incidents, anomalous access patterns and data breach indicators;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Formal data breach response procedures, including notification obligations where applicable.

While we take all reasonable steps to protect your data, no internet-based system is unconditionally secure. You are responsible for maintaining the security of your own Account credentials and for notifying us immediately of any suspected unauthorised access to your Account.

The yb999 Platform does not include links to third-party websites for commercial or advertising purposes. Where links to third-party content are present (such as responsible gambling support organisations referenced in our Responsible Gambling Policy), these are provided as informational references only.

yb999 is not responsible for the privacy practices, data-handling procedures or content of any third-party website or service. If you choose to access any third-party site referenced on or from the Platform, your use of that site is governed by its own privacy policy and terms, not by this Policy.

yb999 reserves the right to amend, update or replace this Privacy Policy at any time, subject to the following notification commitments:

• Material changes — changes that significantly affect how we use your data, introduce new data categories or alter your rights — will be communicated to registered users via the email address on their Account no less than fourteen (14) days prior to the effective date;
• Non-material changes — corrections to wording, updated contact information or clarifications that do not change data-processing practices — will be reflected in the revised Policy without individual notice, with the "Last Updated" date amended accordingly;
• The most current version of this Policy is always accessible at https://yb999.cam/privacy-policy.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept an amended Policy, you should cease use of the Platform and request Account closure before the effective date.

For any questions, requests or complaints relating to this Privacy Policy or to the handling of your Personal Data by yb999, please contact us through the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Complaint" to ensure prompt routing
• Live Chat: Available 24/7 via the Platform's support widget — per operator-published guidelines
• Written correspondence: Postal address available in the Operator's published licensing documentation

When submitting a data rights request or privacy complaint, please include the following information to help us process your request efficiently:

• Your full name and registered Account username;
• The email address associated with your Account;
• A clear description of your request or complaint;
• Any relevant transaction references, dates or Account activity details.

We aim to acknowledge all data-related requests within five (5) business days and to provide a substantive response within thirty (30) days. Where a request is complex or high-volume, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason.