How 9yyy Collects, Protects, and Manages Your Personal Data

9yyy is an internationally licensed online gaming and sports betting platform accessible at 9yyy.bio. 9yyy operates a full suite of gaming services for Pakistani players, including cricket betting, live casino, slots, poker, and Dragon Gate.

For the purposes of this Privacy Policy, "9yyy", "we", "us", and "our" refer to the operator of the 9yyy platform. "You" and "your" refer to any individual who accesses, registers on, or otherwise uses the 9yyy platform, regardless of whether they hold a funded real-money account.

9yyy acts as the data controller with respect to all personal data collected through the platform. As data controller, 9yyy determines the purposes for which your personal data is processed and the means by which that processing is carried out.

9yyy collects the following categories of personal data from users of the platform:

9yyy collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and similar tracking technologies each time you access the 9yyy platform.
• Third-party sources: Identity and age verification data from KYC service providers; fraud and AML screening data from licensed compliance partners; payment confirmation data from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

9yyy processes your personal data for the following purposes:

• Account administration: Creating and managing your 9yyy account, verifying your identity and age (21+), and maintaining account security.
• Service delivery: Enabling real-money gaming, processing PKR deposits and withdrawals, calculating and awarding bonuses, and delivering customer support.
• Legal compliance: Fulfilling Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations as required under 9yyy's international gaming licence.
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling and administering responsible gaming tools including deposit limits and self-exclusion.
• Fraud prevention: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and any other conduct in breach of the 9yyy Terms & Conditions.
• Platform improvement: Analysing aggregated usage data to improve the 9yyy interface, game selection, and overall player experience.
• Marketing communications: Sending you promotional offers, new game notifications, and bonus alerts — but only where you have provided consent and only via the channel(s) you have opted into.

9yyy processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and 9yyy — i.e., to operate your account and deliver gaming and payment services.
• Legal obligation: Processing required to comply with KYC, AML, responsible gaming, and licensing obligations imposed on 9yyy under its international gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, and service analytics, where such interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other processing activity for which 9yyy has specifically requested and received your consent.

9yyy does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with the following categories of recipients only where strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, for the purpose of processing PKR deposits and withdrawals.
• KYC and AML service providers: Licensed identity verification and compliance partners engaged to fulfil 9yyy's regulatory obligations.
• Technology and hosting providers: Cloud infrastructure and software vendors who process data on behalf of 9yyy under strict data processing agreements.
• Regulatory and law enforcement authorities: Where 9yyy is required by law, court order, or regulatory direction to disclose personal data — for example, in connection with a fraud investigation or AML report.
• Professional advisors: Legal counsel, auditors, and compliance advisors where necessary for the operation and protection of 9yyy's legitimate business interests.

9yyy uses cookies and similar technologies to operate and improve the platform. The following cookie categories are used:

• Strictly necessary cookies: Essential to the functioning of the 9yyy platform. These cookies cannot be disabled without impairing core platform functionality, including account login and session management. No consent is required for strictly necessary cookies.
• Functional cookies: Used to remember your platform preferences, such as language settings and responsible gaming tool configurations. These cookies improve your experience but are not strictly required.
• Analytical cookies: Used to collect aggregated and anonymised data about how users interact with the 9yyy platform, enabling ongoing improvement of the platform experience. These cookies require your consent.

You can manage your cookie preferences via the cookie settings panel available on the 9yyy website. Please note that disabling certain cookies may affect the functionality of the platform.

9yyy retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with 9yyy, and for a period of five (5) years following account closure, in compliance with standard AML and licensing record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with international AML standards.
• Technical and usage data: Retained for a rolling period of twenty-four (24) months for platform analytics purposes, after which it is anonymised or deleted.
• Customer support communications: Retained for three (3) years from the date of the communication, or for the duration of any unresolved dispute, whichever is later.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9yyy implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the 9yyy platform.
• Encryption of sensitive data at rest, including identity documents and financial account references.
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a strict need-to-know basis.
• Regular security assessments and penetration testing of the 9yyy platform and supporting infrastructure.
• Multi-factor authentication options for 9yyy account login to reduce the risk of unauthorised access.

As a data subject, you hold the following rights with respect to your personal data held by 9yyy. To exercise any of these rights, please contact the 9yyy support team via live chat or at [email protected].

The 9yyy platform is strictly for individuals aged 21 years and above. 9yyy does not knowingly collect or process personal data from anyone under the age of 21. Age verification is a mandatory step in the 9yyy registration process, and real-money play is not permitted until age verification is satisfactorily completed.

If 9yyy becomes aware that personal data has been collected from an individual under the age of 21, that data will be immediately deleted and the associated account permanently closed. If you have reason to believe that a minor has created an account on the 9yyy platform, please report this immediately to the 9yyy support team.

As an internationally licensed platform, 9yyy may transfer personal data to service providers and infrastructure partners located in jurisdictions outside Pakistan. Where such transfers occur, 9yyy ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within the platform's primary operating jurisdiction.

These safeguards may include contractual data protection clauses between 9yyy and the receiving party, or transfer to jurisdictions that maintain an adequate level of data protection as recognised under applicable international standards.

9yyy reserves the right to update this Privacy Policy at any time. The date of the most recent revision is indicated at the top of this document. Where changes are material, 9yyy will notify registered users via their registered contact details or by displaying a prominent notice on the platform prior to the changes taking effect.

Your continued use of the 9yyy platform following publication of an updated Privacy Policy constitutes your acknowledgment of the revised policy. We encourage you to review this page periodically to stay informed about how 9yyy manages your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 9yyy processes your personal data, please contact the 9yyy support team through any of the following channels:

• Live Chat: Available 24/7 directly within the 9yyy platform after login. This is the fastest way to reach the support team for urgent data queries.
• Email: [email protected] — for formal data subject access requests, erasure requests, or written privacy complaints. Please allow up to 30 days for a full response to formal data requests.

9yyy is committed to resolving all privacy-related enquiries promptly and in a transparent manner. If you are not satisfied with the outcome of a privacy complaint, you may escalate the matter to the relevant regulatory or licensing authority in 9yyy's operating jurisdiction.