yo99 Privacy Policy

1. Who We Are

yo99 operates the online casino and sports betting platform accessible at yo99.asia ("Platform"). In the context of this Privacy Policy, "yo99", "we", "us", and "our" refer to the entity responsible for operating the Platform and for the processing of personal data described herein. "You", "Player", or "User" refers to any individual who accesses, registers with, or uses the yo99 Platform.

This Privacy Policy applies to all personal data collected through the yo99 website, any associated mobile-optimised interfaces, and communications between yo99 and its registered players, including Pakistani players accessing the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, or elsewhere in Pakistan.

2. Data We Collect

yo99 collects the following categories of personal data from players:

• Registration data: Full name, date of birth, email address, username, and country of residence provided at account creation.
• Identity verification data: Copies of government-issued identity documents (such as CNIC for Pakistani players) and selfie photographs submitted as part of the Know Your Customer (KYC) verification process.
• Financial data: Payment method details, transaction histories, deposit and withdrawal records. yo99 does not store full payment card numbers; card processing is handled by compliant third-party payment processors.
• Technical data: IP address, browser type, device type, operating system, session duration, pages visited, and click-path data collected automatically when you access the Platform.
• Communications data: Records of correspondence between you and yo99 support, including live chat transcripts and email exchanges.
• Responsible gaming data: Records of deposit limits, self-exclusion requests, cooling-off activations, and session timer settings associated with your account.
• Gameplay data: Wager histories, game session logs, bonus redemption records, and win/loss summaries associated with your account.

3. How We Use Your Data

yo99 processes personal data for the following purposes:

• To create and manage your yo99 account and provide access to the Platform's games and services.
• To verify your identity and age in compliance with applicable regulatory requirements, including the confirmation that all players are aged 18 or above.
• To process deposits, withdrawals, and other financial transactions via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT.
• To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited activities.
• To operate and improve the Platform through analytics and performance monitoring.
• To communicate with you regarding account activity, security alerts, promotional offers (where consent has been given), and policy updates.
• To administer responsible gaming tools and comply with any obligations arising from self-exclusion or limit requests.
• To comply with legal obligations, including responses to lawful requests from regulatory authorities or law enforcement.

4. Legal Basis for Processing

yo99 processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services set out in the yo99 Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations and age verification requirements.
• Legitimate interests: Processing for fraud prevention, Platform security, and analytical improvement of yo99 services, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have opted in to receive such communications and may withdraw consent at any time.

5. Data Sharing & Disclosure

yo99 does not sell personal data to any third party. yo99 may share personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: JazzCash, Easypaisa, and banking partners (HBL, UBL, Meezan Bank, Bank Alfalah) receive transaction data necessary to process deposits and withdrawals.
• Identity verification providers: Third-party KYC services used to verify documents submitted by players during account verification.
• Game software providers: Game studios and live dealer platform operators receive session and wager data necessary to operate their games within the yo99 lobby.
• Analytics and security providers: Technical service providers used for Platform performance monitoring and fraud detection. These providers are contractually prohibited from using yo99 player data for their own commercial purposes.
• Legal and regulatory authorities: yo99 will disclose personal data to competent authorities where required by law, court order, or legitimate regulatory request.

6. International Data Transfers

As a global platform, yo99's infrastructure and service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, yo99 ensures that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards. This may include contractual data processing agreements, standard contractual clauses, or transfers to jurisdictions that provide an adequate level of protection as recognised under applicable frameworks.

7. Data Retention

yo99 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, to maintain your account while it remains active, and to comply with legal retention obligations. Specific retention periods applicable to yo99:

• Account registration and identity data is retained for the lifetime of the account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of five years from the date of each transaction.
• Support communications are retained for three years from the date of the last interaction.
• Technical and session data is retained for up to 24 months for analytics and security purposes.

Upon expiry of applicable retention periods, yo99 will securely delete or anonymise personal data so that it can no longer be attributed to an identified individual.

8. Cookies & Tracking Technologies

yo99 uses cookies and similar technologies (including local storage and session tokens) on the Platform for the following purposes:

• Essential cookies: Required for session management, authentication, and core Platform functionality. These cannot be disabled without impacting platform usability.
• Analytics cookies: Used to collect aggregate data about how players use the Platform, enabling yo99 to identify and fix performance issues and improve user experience.
• Security cookies: Used to detect and prevent fraudulent login attempts and protect account integrity.

Players can manage cookie settings through their browser preferences. Note that disabling essential cookies may affect the ability to log in or use core Platform features. yo99 does not use third-party advertising cookies or cross-site tracking cookies.

9. Your Data Rights

Subject to applicable law and yo99's legitimate operational and legal obligations, registered players have the following rights in relation to their personal data:

• Right of access: Request a copy of the personal data yo99 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of personal data where retention is no longer legally required. Note that legal retention obligations (e.g., AML record-keeping) may limit the scope of this right.
• Right to restriction: Request that processing of your data be restricted in certain circumstances, for example while a dispute about data accuracy is resolved.
• Right to object: Object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact yo99 support via live chat or by emailing [email protected]. yo99 will respond to data rights requests within 30 days of receipt.

10. Children's Privacy

yo99 is strictly an adults-only platform. The Platform is not intended for, and yo99 does not knowingly collect personal data from, individuals under the age of 18. Age is verified through mandatory CNIC document submission during account verification. If yo99 becomes aware that a minor has registered an account, the account will be closed immediately, deposited funds returned, and all associated personal data deleted in accordance with yo99's data retention procedures.

If you have reason to believe that a minor has created a yo99 account, please contact [email protected] immediately.

11. Security Measures

yo99 implements a range of technical and organisational security measures to protect player data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between players' devices and the yo99 Platform.
• Encrypted storage of sensitive data including identity documents and financial records.
• Strict internal access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments of Platform infrastructure.
• Two-factor authentication options available to all registered players.

Despite these measures, no online platform can guarantee absolute security. Players are encouraged to use a strong unique password for their yo99 account, enable two-factor authentication, and report any suspected unauthorised account access to support immediately.

12. Marketing Communications

yo99 may send players promotional emails, SMS notifications, or in-platform messages regarding bonuses, new game launches, PSL special betting markets, and other offers – but only where the player has opted in to receive such communications during registration or subsequently via account settings.

Players may withdraw marketing consent at any time by updating communication preferences in their yo99 account settings panel or by contacting support. Withdrawal of marketing consent does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, security alerts, or policy updates, which are sent regardless of marketing preferences.

13. Changes to This Privacy Policy

yo99 reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, Platform features, or data processing practices. Material changes will be communicated to registered players by email or by prominent notice on the Platform at least 7 days before taking effect. The "Last updated" date at the top of this Policy will be revised with each update. Continued use of the yo99 Platform following notification of changes constitutes acceptance of the revised Policy.

14. Contact Us

For any queries, complaints, or requests relating to this Privacy Policy or yo99's data processing practices, please contact the yo99 data team via:

• Live chat: available within your yo99 account dashboard
• Email: [email protected]

yo99 will acknowledge privacy-related enquiries within 5 business days and aims to provide a substantive response within 30 days. For complex requests involving large volumes of data or requiring legal review, this period may be extended by a further 30 days with notification.