wy999 Privacy Policy
Your Data. Your Rights. Our Responsibility.

wy999 is committed to protecting the personal data of all its members, with particular attention to the needs and context of our Pakistani player base spanning Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond. This Privacy Policy is effective as of January 2026 and supersedes all previous versions.

This Policy applies to all personal data processed by wy999 in connection with your use of the wy999 platform, including data collected when you visit the website without registering, when you create and manage an account, when you deposit or withdraw funds, when you place bets or play casino games, and when you interact with our customer support team.

wy999 operates in alignment with internationally recognised data protection standards. While Pakistan is in the process of developing its comprehensive data protection legislative framework, wy999 voluntarily applies GDPR-aligned principles to all data processing activities as a demonstration of our commitment to genuine data protection for our players.

wy999 collects personal data through several channels: directly from you when you register, complete your profile, or contact support; automatically through your use of the platform via cookies and server logs; and from third-party verification and payment partners as part of our KYC and AML compliance processes.

The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, national identity number (CNIC), copies of government-issued identification documents (CNIC card, passport), and selfie verification images where required.
• Contact Data: Email address, Pakistani mobile phone number, and city or region of residence.
• Account Data: Username, encrypted password, account creation date, login history, and account preference settings.
• Financial Data: JazzCash wallet number, EasyPaisa account details, bank account information (HBL, UBL, Meezan Bank), SadaPay account details, USDT TRC20 wallet addresses, deposit and withdrawal transaction history, and balance records.
• Gaming Activity Data: Bet history, game session logs, win and loss records, bonus claim history, and responsible gaming tool usage (deposit limits, self-exclusion status, cool-off periods).
• Technical Data: IP address, device fingerprint, browser type and version, operating system, screen resolution, time zone, and session duration logs.
• Communication Data: Records of all live chat conversations, support email exchanges, and complaint submissions.
• Marketing Preference Data: Your opt-in or opt-out status for promotional communications and your stated game category preferences where voluntarily provided.

wy999 does not intentionally collect any special category data (also referred to as sensitive personal data) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification as mandated by our operating licence.

wy999 uses your personal data only for the specific, legitimate purposes set out below. We do not use your data in ways that are incompatible with the purpose for which it was originally collected.

• Account Registration & Management: To create, verify, and maintain your wy999 account, including processing your initial registration, authenticating your login sessions, and managing your account settings and preferences.
• Identity Verification (KYC): To comply with our international gaming licence obligations to verify that all players are at least 21 years of age and are who they claim to be, using identity documents and third-party verification services.
• Payment Processing: To process deposits and withdrawals via your chosen Pakistani payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20), verify payment method ownership, and maintain transaction records.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for patterns consistent with money laundering, terrorist financing, or other financial crimes as required under our operating licence's AML obligations.
• Customer Support: To respond to your queries, investigate and resolve complaints, and maintain records of all support interactions for quality assurance and dispute resolution purposes.
• Responsible Gaming: To enforce deposit limits, cool-off periods, and self-exclusion requests; to monitor gaming patterns that may indicate problem gambling behaviour; and to intervene proactively where required.
• Platform Security & Fraud Prevention: To detect and prevent unauthorised access, account takeover attempts, bonus abuse, multi-accounting, match-fixing activity, and other forms of fraud or cheating.
• Platform Improvement: To analyse anonymised and aggregated usage data to improve the wy999 platform's features, performance, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about wy999 — but only where you have explicitly opted in to receive such communications. You may opt out at any time.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.

wy999 uses cookies and similar tracking technologies on the wy999.pro website. Cookies are small text files placed on your device that help us recognise you between visits, maintain your login session, and understand how you interact with the platform.

wy999 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the platform to function and cannot be disabled. They include session authentication tokens, security cookies, and load balancing cookies. No personal data is transmitted via these cookies to third parties.
• Functional Cookies: These remember your preferences — such as language settings, preferred payment method, and game display options — to personalise your experience on return visits.
• Analytics Cookies: These collect anonymised data about how players navigate and use the wy999 platform to help us identify areas for improvement. Data collected through analytics cookies is aggregated and cannot be used to identify individual players.
• Security Cookies: These support our fraud detection and device fingerprinting systems, helping us identify suspicious login attempts or unusual activity patterns that may indicate account compromise or multi-accounting.

wy999 does not use third-party advertising cookies or allow external advertisers to place tracking technologies on the wy999.pro domain. Your browsing activity on wy999 is not shared with advertising networks.

wy999 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party. We share personal data only in the limited circumstances described below, and always under strict contractual obligations that require the recipient to protect your data to at least the same standard as wy999 itself.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency network providers receive the financial data necessary to process your deposit and withdrawal transactions. Each of these partners is bound by their own regulatory obligations under Pakistani financial law and international standards.
• Identity Verification (KYC) Partners: Third-party KYC and AML compliance services receive the identity documents and data necessary to complete your account verification. These partners are selected on the basis of their compliance with international data protection standards and are prohibited from using your data for any other purpose.
• Game Providers: Game providers whose titles are available on wy999 (including providers of slots, live dealer games, and instant games) receive anonymised player session data necessary to deliver gameplay and calculate RTP outcomes. Game providers do not receive your full name, CNIC, or financial data.
• Fraud Prevention & Security Services: Specialist fraud detection partners may process technical data (IP address, device fingerprint, session patterns) to help wy999 identify and prevent fraudulent activity on the platform.
• Legal & Regulatory Authorities: wy999 will disclose personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies when required to do so by a valid legal order, court order, or equivalent compulsory legal instrument. wy999 will not disclose data to any authority voluntarily without a valid legal basis.

All third-party data processors engaged by wy999 are required to enter into Data Processing Agreements (DPAs) that specify the lawful purpose of processing, the security standards to be maintained, and the prohibition on any secondary use of your personal data.

wy999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status, plus an additional period of five (5) years following account closure, to satisfy AML audit trail requirements under international gaming licence conditions.
• KYC Identity Documents: Retained for a minimum of five (5) years following the closure of your account, as required by international AML and counter-terrorism financing standards applicable to our operating licence.
• Transaction Records: Deposit, withdrawal, and gaming transaction records are retained for seven (7) years to comply with financial record-keeping obligations.
• Support Communication Records: Chat transcripts and email exchanges are retained for three (3) years following the closure of the related support case, for dispute resolution and quality assurance purposes.
• Technical Logs: Server logs and device fingerprint data are retained for a maximum of ninety (90) days, after which they are automatically deleted unless retained as evidence of a specific security incident under investigation.
• Marketing Preference Data: Retained until you withdraw your marketing consent or close your account, whichever occurs first. Opt-out records are retained indefinitely to ensure we do not inadvertently re-contact you.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from wy999's systems or anonymised in a manner that makes it impossible to re-identify the individual. Anonymised data may be retained for statistical and platform improvement purposes indefinitely.

wy999 respects your rights over your own personal data. The following rights are available to all wy999 players. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of all personal data wy999 holds about you. We will respond to access requests within thirty (30) days. The first request is processed free of charge; subsequent requests within a 12-month period may attract a reasonable administrative fee.
• Right to Rectification: If any personal data wy999 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. For data that you can update directly within your account dashboard (such as email address or contact number), we encourage you to do so directly.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where the data has been unlawfully processed. This right is subject to our legal retention obligations — we cannot delete data we are legally required to retain.
• Right to Restriction of Processing: You may request that wy999 temporarily stop processing your data while a dispute about its accuracy or the legality of its processing is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you provided to wy999, in order to transfer it to another service provider. This right applies only to data processed on the basis of consent or contract performance.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, although wy999 may continue processing where we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

wy999 operates an online gambling platform and is strictly prohibited from allowing any person under the age of 21 to register, access, or use the platform in any capacity. This policy applies absolutely and without exception across all regions of Pakistan and all international markets where wy999 operates.

wy999 does not knowingly collect any personal data from any individual under the age of 21. All accounts are subject to mandatory KYC age verification before deposits or gameplay are permitted. If wy999 becomes aware, through any means, that a minor has registered on the platform or provided personal data, the account will be immediately suspended, all funds will be frozen pending investigation, and all personal data associated with the account will be deleted as soon as the investigation is concluded.

If you are a parent or guardian and you believe your child has registered on wy999, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and take action within 24 hours of receiving your report.

wy999 implements a comprehensive, multi-layered data security programme designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and wy999's servers is encrypted using industry-standard TLS 1.3 protocol. This protects your data in transit from interception by third parties.
• At-Rest Encryption: Sensitive data stored in wy999's databases — including identity documents, financial data, and password hashes — is encrypted at rest using AES-256 encryption.
• Password Security: Passwords are never stored in plain text. wy999 uses bcrypt hashing with a high work factor to store password credentials securely. Even wy999 staff cannot retrieve your password.
• Two-Factor Authentication (2FA): wy999 offers and encourages the use of 2FA for all player accounts as an additional layer of login security. Players in Pakistan can use SMS-based 2FA tied to their registered mobile number.
• Access Controls: Access to player personal data within wy999's organisation is strictly limited on a need-to-know basis. Staff who do not require access to personal data to perform their roles are not granted it. All data access is logged and audited.
• Security Monitoring: wy999 operates 24/7 security monitoring of its platform infrastructure to detect and respond to intrusion attempts, unusual access patterns, and other security threats in real time.
• Penetration Testing: wy999's platform undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. wy999 urges all players to use strong, unique passwords for their wy999 accounts, enable 2FA, never share their login credentials with any third party, and to contact support immediately if they suspect unauthorised access to their account.

wy999 operates on an international platform infrastructure. As a result, your personal data may be stored and processed on servers located outside of Pakistan. wy999 takes all necessary steps to ensure that any international transfers of personal data are conducted in compliance with applicable data protection standards.

Where personal data is transferred to a country that does not have a recognised adequate level of data protection, wy999 ensures appropriate safeguards are in place, including Data Processing Agreements incorporating Standard Contractual Clauses (SCCs) or equivalent binding commitments that require the data recipient to protect your data to the same standard required by this Policy.

wy999's Responsible Gaming programme requires the collection and processing of certain personal and gaming activity data for the specific purpose of player protection. This data processing is conducted in the legitimate interest of player welfare and is a condition of our operating licence.

Responsible gaming data processing activities at wy999 include:

• Deposit Limit Enforcement: wy999 records your self-set deposit limits and enforces them automatically. Requests to increase deposit limits are subject to a mandatory cooling-off period before the increase takes effect.
• Session Time Monitoring: wy999 tracks session duration and, where configurable by the player, can provide alerts or automatic session termination when time limits are reached.
• Self-Exclusion Programme: Players who request self-exclusion have their account status recorded in a restricted database. Self-exclusion data is retained for the full duration of the exclusion period plus an additional mandatory holding period to prevent inadvertent re-registration.
• Problem Gambling Pattern Detection: wy999 uses anonymised gaming activity data to identify behavioural patterns that may indicate problem gambling. Where such patterns are detected, our responsible gaming team may make proactive contact with the affected player.
• Cool-Off Period Records: Records of cool-off period activations and their durations are maintained to ensure they are fully honoured and to assist in responsible gaming reporting.

Responsible gaming data is treated with the highest level of confidentiality within wy999. It is not shared with marketing teams, is not used for promotional profiling, and is not disclosed to third parties except where required by our gaming licence regulatory obligations.

wy999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or changes to the wy999 platform's features and services.

When we make material changes to this Policy — meaning changes that substantively affect your rights or how your personal data is used — we will notify all registered players via the email address associated with their wy999 account at least fourteen (14) days before the updated Policy takes effect. For minor or non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy), we will update the Policy on the website without prior individual notification.

The "Effective Date" shown at the top of this Policy reflects the date on which the current version came into effect. We recommend that all players review this Policy periodically to stay informed of how wy999 handles their personal data. Your continued use of the wy999 platform following the effective date of an updated Policy constitutes your acceptance of the changes.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how wy999 has handled your personal data, please contact our Data Protection team:

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Response Time: All privacy-related enquiries are acknowledged within 72 hours and resolved within 30 calendar days.
• Complaints: If you are not satisfied with wy999's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the regulatory body overseeing our gaming licence. Details of the applicable authority will be provided upon request.