9yyy Privacy Policy

9yyy is an internationally licensed online gaming and sports betting platform accessible at https://9yyy.vip. References to "9yyy", "we", "us", or "our" throughout this Privacy Policy refer to the operating entity responsible for the platform and for the processing of personal data collected from registered users.

9yyy serves players primarily in Pakistan, providing cricket betting, live casino, slot games, and sports wagering with full PKR support via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. As the data controller, 9yyy determines the purposes and means by which your personal data is processed.

For all data protection enquiries, you may contact our Privacy Team at: [email protected]

9yyy collects personal data through several channels — directly from you during registration and account use, automatically through platform interaction, and in limited cases from third-party verification services. The categories of data collected are set out below:

We do not intentionally collect sensitive personal data categories such as biometric data, health information, or religious beliefs. Where any such data is incidentally included in documents submitted for KYC, it is not extracted, processed, or stored separately.

9yyy processes your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with what is listed here:

• Account creation and management — to register your account, authenticate your identity, and maintain your player profile in good standing.
• KYC and age verification — to confirm you are aged 21 or above and to verify your identity in accordance with our international gaming licence obligations and anti-money laundering (AML) requirements.
• Payment processing — to process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to reconcile your account balance accurately.
• Service delivery — to provide you with access to cricket betting, live casino, slot games, and all other platform features available on 9yyy.
• Customer support — to respond to your queries, complaints, and support requests in English and Urdu, via live chat and email.
• Fraud prevention and security — to detect and prevent fraudulent activity, multi-accounting, bonus abuse, and money laundering, using automated monitoring systems and manual review.
• Responsible gaming compliance — to monitor for signs of problem gambling behaviour, apply self-exclusion and deposit limit settings you have configured, and reach out proactively where our monitoring identifies concerning patterns.
• Legal and regulatory compliance — to comply with obligations imposed by our gaming licence authority, applicable AML legislation, and any lawful request from a regulatory or law enforcement body.
• Platform improvement — to analyse aggregated, anonymised usage data to improve the performance, usability, and game offering on the 9yyy platform.
• Marketing communications — to send you promotional offers, bonus notifications, and PSL season updates where you have consented to receive such communications. You may opt out at any time through your account notification settings.

9yyy processes your personal data only where a valid legal basis exists under applicable data protection standards. The primary legal bases we rely upon are:

• Contractual necessity — processing required to perform the contract between you and 9yyy, including account creation, game access, payment processing, and KYC verification.
• Legal obligation — processing required to comply with applicable laws and our gaming licence conditions, including AML monitoring, regulatory reporting, and age verification.
• Legitimate interests — processing carried out in pursuit of 9yyy's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming oversight, where these interests are not overridden by your rights.
• Consent — processing for marketing communications, optional cookies, and any other purpose where we have explicitly requested and received your consent. Where consent is the basis, you have the right to withdraw it at any time.

9yyy does not sell your personal data. We share your data only in the following limited and controlled circumstances:

• Payment processors — we share the minimum necessary financial data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to execute your deposit and withdrawal transactions in PKR. These providers are bound by their own data protection obligations.
• KYC verification partners — where automated identity verification tools are used to validate your CNIC or cross-reference identity data, these third-party verification services process only the data necessary for that specific check and are contractually prohibited from retaining or repurposing your information.
• Gaming software providers — live casino game providers and slot software developers may receive anonymised session data to enable gameplay and calculate outcomes. No personally identifiable data is shared with game content providers.
• Regulatory and law enforcement bodies — 9yyy will disclose personal data where required to do so by a lawful order, court directive, regulatory instruction, or where we are obligated to file a Suspicious Activity Report (SAR) under applicable AML regulations.
• Fraud prevention networks — we may share data with industry fraud prevention databases to identify and block known fraudulent actors, multi-accounters, and persons subject to gaming self-exclusion schemes.
• Corporate transactions — in the event of a merger, acquisition, or restructuring of the 9yyy operating entity, your data may be transferred to a successor entity. You will be notified of any such event in advance where legally permissible.

All third parties with whom we share data are subject to contractual data processing agreements that prohibit the use of your data for any purpose other than the one for which it was shared.

9yyy retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, data is either securely deleted or anonymised such that it can no longer be attributed to any individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

9yyy uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device when you visit the site. We use the following categories of cookies:

• Strictly necessary cookies — essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Performance cookies — used to collect anonymised data on page load times, error rates, and user flow patterns to help us improve platform performance. No personally identifiable data is included in these cookies.
• Functional cookies — used to remember your preferences such as language setting, display options, and last-used payment method to improve your experience on return visits.
• Responsible gaming cookies — used to track session duration and gaming activity for the purposes of delivering session time reminders and reality check notifications configured in your account settings.

9yyy does not use advertising cookies, cross-site tracking pixels, or any cookie that shares your browsing behaviour with third-party advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from using the platform.

9yyy implements a layered technical and organisational security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• Transport Layer Security (TLS 1.3) — all data in transit between your device and 9yyy servers is encrypted using the latest TLS standard.
• AES-256 encryption at rest — stored personal data, including KYC documents and payment information, is encrypted using AES-256 on all production servers and backup storage.
• Access controls — personal data is accessible only to 9yyy staff who require it for their specific job function. Role-based access controls (RBAC) and audit logging are enforced across all internal systems.
• Two-factor authentication (2FA) — all 9yyy internal staff accounts with access to player data require 2FA. Players are also encouraged to enable 2FA on their own accounts for additional protection.
• Penetration testing — the 9yyy platform undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response — in the event of a data breach that poses a risk to your rights, 9yyy will notify affected users and relevant authorities within the timeframe required under applicable regulations.

While we take all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your 9yyy login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

As a 9yyy user, you have the following rights in relation to your personal data. These rights may be exercised by contacting our Privacy Team at [email protected] with the subject line "Data Rights Request":

• Right of access — you may request a copy of all personal data 9yyy holds about you. We will provide this in a structured, readable format within 30 days.
• Right to rectification — if any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, updated KYC documentation may be required.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where the data has been unlawfully processed. Note that certain data categories must be retained for regulatory compliance and cannot be deleted on request.
• Right to restrict processing — you may request that we pause the processing of your data in certain circumstances, for example while a rectification request is being investigated.
• Right to data portability — you may request that we provide your personal data in a machine-readable format (CSV or JSON) that you can transfer to another service provider.
• Right to object — you may object to processing based on legitimate interests, including profiling used for responsible gaming monitoring. Objections will be assessed on a case-by-case basis.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time with immediate effect by updating your notification preferences in account settings.

All data rights requests are processed free of charge. We may ask you to verify your identity before fulfilling a request to protect against unauthorised access to another person's data.

The 9yyy platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the 9yyy platform under any circumstances.

In the event that 9yyy discovers it has inadvertently collected personal data from a person under 21, we will immediately suspend the associated account, delete all related personal data, and reverse any deposits made to the account. Parents or guardians who become aware that a minor has registered on 9yyy should contact our support team immediately at [email protected].

9yyy operates infrastructure across multiple jurisdictions to ensure platform availability and resilience. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, 9yyy ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses equivalent to those used in GDPR-regulated jurisdictions.
• Transfer only to jurisdictions that provide an adequate level of data protection, or where the specific transfer is subject to binding organisational rules.
• Encryption of all data in transit, regardless of the destination country.

By using the 9yyy platform, you acknowledge and agree that your personal data may be transferred internationally as described in this section, subject to the safeguards outlined above.

The 9yyy platform does not contain links to external third-party websites. All links within the platform navigate to pages within the 9yyy domain (9yyy.vip). This Privacy Policy applies exclusively to data processed by 9yyy within the 9yyy platform. It does not extend to any third-party services you may access independently, including your mobile banking or e-wallet provider's app or website.

Your interactions with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank are governed by the respective privacy policies of those institutions. 9yyy has no control over and accepts no responsibility for the data practices of these independent providers.

9yyy reviews this Privacy Policy on a regular basis and updates it when our data practices change, when new features are introduced, or when regulatory requirements evolve. The effective date at the top of this document reflects the most recent revision.

Where material changes are made to this Policy — particularly changes that affect how your data is used or your rights over it — 9yyy will notify registered account holders via platform notification, email to your registered address, or SMS to your registered mobile number, at least 7 days before the changes take effect.

Your continued use of the 9yyy platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should contact support to close your account before the new Policy takes effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 9yyy handles your personal data, please contact our Privacy Team through the following channels:

• Live Chat: Available 24/7 directly on the 9yyy platform — average response time 3–5 minutes.
• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for faster routing.
• Languages: Our privacy team handles enquiries in both English and Urdu.

We aim to acknowledge all privacy-related communications within 2 business days and to provide a full response within 30 calendar days. Complex data rights requests may take up to 60 days where permitted under applicable regulations; you will be informed of any extension within the initial 30-day window.