Your privacy matters to us. This policy explains what personal data yyy9 collects, why we collect it, who we share it with, and what rights you have over your own information.
A plain-language summary of the most important parts of this policy. Full details are in the sections below.
yyy9 collects personal data for account management, payment processing, identity verification, and platform improvement. We do not collect data beyond what is required for these purposes.
yyy9 does not sell, rent, or trade your personal information to any third parties for marketing or commercial purposes. Your data is yours.
All data transmitted between your device and yyy9 is encrypted using SSL. Payment data is processed through secure, certified payment gateways. We never store full card numbers.
You can access, correct, or request deletion of your personal data at any time by contacting support. Marketing communications can be opted out of from your account settings.
Data is shared only with service providers essential to platform operation — payment processors (JazzCash, Easypaisa), identity verification, and game suppliers. All bound by confidentiality agreements.
Account data is retained for as long as your account is active. After account closure, certain data is retained for a defined period for legal and fraud-prevention purposes, then securely deleted.
This Privacy Policy applies to yyy9 ("we", "us", "the Platform"), which operates the website yyy9.onl and its associated mobile applications. yyy9 is the data controller responsible for the personal data of registered users.
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a concern about how your data has been handled, you can reach our privacy team through the following channels:
We aim to respond to all privacy-related enquiries within 5 business days.
We collect personal data from you directly when you register, use the platform, and interact with our services. We also collect some data automatically when you use the site or app.
Data you provide directly:
Data collected automatically:
yyy9 does not collect biometric data beyond what your device's operating system uses for biometric login (fingerprint or Face ID). This data is handled entirely by your device's secure enclave and is never transmitted to yyy9 servers.
Every piece of data we collect has a specific purpose. The table below summarises the main data types, the reason we collect them, and the legal basis for processing.
| Data Type | Purpose | Basis |
|---|---|---|
| Name, DOB, address | Account registration and identity verification | Contract performance |
| Email and phone | Account communications, security alerts, support | Contract performance |
| Government ID | Age verification and fraud prevention | Legal obligation |
| Payment details | Processing deposits and withdrawals in PKR | Contract performance |
| Betting and gaming history | Account management, responsible gaming monitoring, dispute resolution | Contract performance / Legitimate interest |
| IP address and device data | Fraud prevention, security, platform optimisation | Legitimate interest |
| Email address (marketing) | Sending promotions and platform news | Consent |
We do not use your personal data for automated decision-making that produces significant legal effects on you, except in cases where automated fraud detection systems flag an account for review — in which case a human reviewer will assess the flagged account before any action is taken.
yyy9 uses cookies and similar tracking technologies on our website and mobile platform. Cookies are small data files stored on your device that help the platform remember your preferences and analyse how users interact with the site.
Types of cookies we use:
You can manage cookie preferences from the cookie settings panel on the website. Disabling non-essential cookies will not affect your ability to use core platform features.
yyy9 does not use third-party advertising networks that place cookies for cross-site retargeting. Our analytics and marketing tracking is scoped to yyy9.onl only.
yyy9 does not sell your personal data. We share data only with third parties who are directly involved in delivering our services, and only to the extent necessary for those specific purposes. All third-party processors are bound by confidentiality agreements and data processing agreements.
Categories of third parties we share data with:
yyy9 will never ask you to share sensitive personal data — such as passwords, full ID numbers, or financial PINs — through chat, email, or phone. Any communication claiming to be from yyy9 that requests this information should be treated as suspicious and reported to support.
yyy9 takes data security seriously and maintains technical and organisational measures appropriate to the sensitivity of the data we hold. Our key security measures include:
No system is completely immune to security incidents. In the event of a data breach that affects your personal data, yyy9 will notify affected players as promptly as possible and take immediate steps to contain and remediate the breach.
You are responsible for keeping your own login credentials secure. Do not share your yyy9 password with anyone. If you believe your account has been compromised, contact support immediately.
We keep your personal data for as long as your account is active and for a defined period after account closure. The specific retention periods depend on the type of data and the reason it was collected.
After the applicable retention period, data is securely deleted or anonymised so it can no longer be associated with any individual.
As a yyy9 player, you have the following rights regarding your personal data. To exercise any of these rights, contact support at [email protected] or via live chat.
Request a copy of the personal data yyy9 holds about you. We will provide this within 30 days.
Request correction of any inaccurate or incomplete personal data held in your account.
Request deletion of your personal data where it is no longer required or you withdraw consent. Subject to legal retention obligations.
Object to processing of your data for marketing purposes at any time. Unsubscribe from emails via account settings or contact support.
Request your personal data in a structured, machine-readable format for transfer to another service where technically feasible.
Request that we restrict how we use your data while a dispute or rectification request is being resolved.
If you have opted in to marketing communications during registration or at a later date, yyy9 may contact you by email or push notification (mobile app) with information about promotions, bonuses, new games, and cricket or PSL betting offers.
You can opt out of marketing communications at any time by:
Opting out of marketing does not affect transactional communications — you will still receive emails about your account, deposits, withdrawals, and important security notices.
yyy9 will never send marketing communications by SMS without your prior consent. Push notifications on the mobile app can be fully disabled from your device's notification settings at any time.
yyy9 is strictly for users aged 18 and above. We do not knowingly collect or process personal data from anyone under 18 years of age. If you believe a minor has registered on yyy9 using false age information, please contact us immediately at [email protected] so we can investigate and take appropriate action, including account closure and data deletion.
We recommend that parents and guardians use parental control software on devices that may be accessed by minors to prevent access to adult gaming platforms.
yyy9 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable laws. When we make material changes, we will notify registered players by email and display a notice on the platform.
The "Last updated" date at the top of this page indicates when the most recent changes were made. Your continued use of yyy9 after a policy update constitutes acceptance of the revised policy. If you do not agree with changes to the policy, you may close your account by contacting support.
We encourage you to review this page periodically. If you have questions about any changes, contact [email protected].
All privacy-related queries, data access requests, and complaints should be directed to:
We aim to acknowledge all privacy requests within 2 business days and resolve them within 30 days. For complex requests, we may need additional time and will communicate that to you clearly.
For more information about how your data is used in specific contexts, you can also review our Terms and Conditions and Responsible Gaming pages, both of which touch on data-related topics relevant to platform use.
For data requests, complaints, or privacy queries:
Response within 2 business days