Privacy Policy – y9998 Online Gaming Platform Pakistan

1. Who This Policy Applies To

This Privacy Policy applies to all individuals who interact with y9998 in any of the following ways:

• Visiting the y9998 website at y9998.win, whether or not you are a registered player.
• Registering for a player account and providing personal details during the signup process.
• Making deposits or withdrawals in PKR using any of the supported payment methods — JazzCash, Easypaisa, Raast, Bank Transfer, cards or mobile wallets.
• Using the y9998 mobile app on Android or any other device.
• Contacting y9998 support through any channel provided.
• Participating in promotions, VIP programme activities or any other feature of the platform.

The policy applies regardless of whether you are accessing the platform from Karachi, Lahore, Islamabad, or anywhere else in Pakistan. By using y9998, you acknowledge that your data will be handled in accordance with the terms set out here.

2. What Data We Collect

The information y9998 collects falls into a few clear categories. We have set these out in the table below so it is easy to see what we collect, why, and how it is gathered.

y9998 does not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.

3. How We Use Your Data

Every piece of data y9998 collects has a specific, legitimate purpose. We do not collect data speculatively or hold it "just in case." The table below maps each category of data to the reason we use it.

• Account operation: Your name, email and mobile number are used to create and manage your player account, send you important account notifications, and allow you to log in securely.
• Identity and age verification: Identity documents are used to confirm you meet the minimum age requirement of 18 years and to verify your identity before processing withdrawals above certain thresholds.
• Payment processing: Financial data is used solely to process your PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer or other selected method. Raw payment credentials are never stored on y9998 servers.
• Fraud prevention and security: Technical data — including IP address, device identifiers and session patterns — is used to detect unusual activity, prevent account takeovers, identify multi-accounting and protect the integrity of the platform.
• Personalisation and promotions: Usage data may be used to tailor bonus offers, highlight relevant games such as Cricket betting markets or Fish Games, and show promotions that are relevant to your activity on the platform. You can opt out of marketing communications at any time through your account settings.
• Customer support: Communications data is used to handle and resolve support queries efficiently. Support transcripts may be reviewed for quality assurance purposes.
• Legal and compliance obligations: Certain data must be retained to meet legal obligations. y9998 will retain data for the minimum period required and no longer.

4. Cookies and Tracking Technologies

y9998 uses cookies and similar tracking technologies to make the platform work properly and to understand how players use it. A cookie is a small text file placed on your device when you visit the site. It does not contain executable code and cannot carry viruses.

We use the following types of cookies:

• Essential cookies: Required for the platform to function. These handle session management, login state and security checks. You cannot opt out of essential cookies without affecting the platform's ability to operate.
• Performance cookies: Collect anonymous data on how pages are used — which pages are visited most often, how long players stay, and where errors occur. This data helps us improve the platform.
• Functional cookies: Remember your preferences — for example, your preferred language setting or whether you have dismissed a notification — so you do not have to set them again on each visit.
• Analytics cookies: Used to understand aggregate player behaviour across the platform. Data collected via analytics cookies is anonymised and not linked to individual identities.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using y9998, but some personalisation features may not function as intended. Note that clearing cookies will log you out of your current session.

5. Sharing Your Data With Third Parties

y9998 does not sell, rent or trade your personal data. There are, however, certain third parties who may receive your data as part of delivering the platform's services. These are:

• Payment processors: JazzCash, Easypaisa, Raast, and other payment partners receive the minimum data required to process your PKR transactions. These providers operate under their own privacy policies and are responsible for securing data within their systems.
• Identity verification providers: Where automated or manual KYC (Know Your Customer) checks are performed, identity documents may be shared with a trusted verification partner. These partners are contractually bound to use your data only for the purpose of identity verification.
• Game and platform technology providers: Third-party game providers who supply Fish Games, Live Casino products and sports data feeds may receive anonymised session data to operate their games within the y9998 platform. They do not receive your full personal profile.
• Analytics and performance tools: Aggregated, anonymised usage data may be shared with analytics providers to help us understand platform performance. No personally identifiable information is included in these reports.
• Legal and regulatory authorities: y9998 will disclose data to relevant authorities if required to do so by applicable law, court order or to protect the safety and security of the platform and its users.

Any third party that receives data from y9998 is required to handle it securely and use it only for the stated purpose. y9998 does not authorise third parties to use your data for their own marketing purposes.

6. Data Security

Keeping your data safe is a core operational priority for y9998. We have implemented a range of technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

• Encryption in transit: All data transmitted between your device and y9998 servers is encrypted using TLS (Transport Layer Security). The padlock icon in your browser address bar confirms this connection is secure.
• Encrypted storage: Sensitive data — including identity verification records and financial transaction data — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within y9998 is restricted to staff and systems that have a legitimate operational need. Access is logged and regularly reviewed.
• Secure payment handling: y9998 does not store raw card numbers, JazzCash PINs or Easypaisa credentials. Payment processing is handled by certified, PCI-compliant payment partners.
• Anomaly detection: Automated systems monitor for unusual login patterns, suspicious transaction activity and other indicators of unauthorised access to player accounts.

Despite these measures, no online platform can guarantee absolute security. If you suspect unauthorised activity on your account, change your password immediately and contact support. You can help protect your account by using a strong, unique password and not sharing your login credentials with anyone.

7. Data Retention

y9998 retains personal data only for as long as necessary to fulfil the purpose for which it was collected. The following general retention principles apply:

• Active accounts: Data associated with an active player account is retained for the duration of the account's active status plus a period after closure to handle any outstanding queries, disputes or legal obligations.
• Financial records: Transaction records in PKR — deposits, withdrawals, bonus credits — are retained for a minimum period in accordance with applicable financial record-keeping requirements.
• Identity verification documents: KYC documents are retained for the period required to meet compliance obligations and then securely deleted.
• Support communications: Support transcripts and emails are retained for a defined period to handle follow-up queries and quality review, after which they are deleted.
• Technical logs: Server logs and session data are retained for a short operational period for security monitoring, then purged on a rolling basis.

When data is no longer required for its stated purpose and there is no legal reason to retain it, y9998 will securely delete or anonymise it.

8. Your Data Rights

As a user of y9998, you have the following rights in relation to the personal data we hold about you. These are not formalities — they are genuine rights you can exercise at any time by contacting support.

To exercise any of these rights, contact y9998 support through the contact details available in your account area. We will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request to ensure we are sharing or deleting data belonging to the correct person.

9. Marketing Communications

y9998 may, with your consent, send you marketing communications about promotions, bonus offers, new game releases, Cricket and PSL betting markets, and other platform news. These communications may be sent via email, SMS or push notification through the y9998 app.

• Marketing consent is collected during the registration process. You can choose whether or not to receive marketing communications at that point.
• You can change your marketing preferences at any time through your account settings or by following the unsubscribe link in any marketing email.
• Opting out of marketing communications does not affect essential account notifications — you will still receive messages about your deposits, withdrawals, account security and important policy changes regardless of your marketing preferences.
• y9998 does not send unsolicited marketing to individuals who have not provided consent, and does not use your data to target you with advertising on external websites or apps.

10. Children's Privacy

y9998 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been registered by a minor, the account will be closed immediately and any associated data will be deleted, subject to any legal retention obligations.

If you believe that a minor has accessed or registered on y9998, please contact support immediately so the matter can be investigated and resolved as quickly as possible.

Parents and guardians are encouraged to use available device controls and parental supervision tools to prevent underage access to online gaming and betting platforms.

11. Changes to This Privacy Policy

y9998 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable legal requirements, or improvements to our data handling practices. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Where changes are material — for example, a change to the categories of data collected, a new third-party data sharing arrangement, or a change to your rights — y9998 will notify registered players via email or an in-platform notification before the change takes effect.

Continued use of y9998 after any update to this policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you may close your account in accordance with the account closure process described in our Terms and Conditions.

For any questions about this Privacy Policy or how y9998 handles your data, please use the contact options available through your account area or refer to the FAQ page for common queries.