yo99 Privacy Policy

1 Who We Are

yo99 ("yo99", "we", "us", "our") operates the online casino and sports betting Platform accessible at yo99.app. This Privacy Policy applies to all users of the yo99 Platform, including registered account holders and visitors who browse the Platform without registering ("Users", "you", "your").

yo99 acts as the data controller in respect of personal data collected through the Platform. This means yo99 determines the purposes and means by which your personal data is processed. Where yo99 engages third-party service providers to process data on its behalf, those providers act as data processors subject to contractual obligations consistent with this Privacy Policy.

If you have any questions about this Privacy Policy or how yo99 handles your personal data, please contact our support team using the details set out in Section 13 of this Policy.

2 Personal Data We Collect

yo99 collects personal data that you provide directly, data generated through your use of the Platform, and, in limited circumstances, data received from third parties. The categories of personal data yo99 collects include:

yo99 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, or health data) unless specifically required for responsible gaming or legal compliance purposes, in which case explicit consent will be sought.

3 How We Use Your Personal Data

yo99 uses personal data collected from Users for the following purposes:

• Account management: To register and maintain your yo99 account, verify your identity, process yo99 Login requests, and manage account settings and preferences.
• Service delivery: To process deposits and withdrawals in PKR via JazzCash, Easypaisa, and other supported payment methods; to settle bets on cricket, PSL, casino games, and other markets; and to provide access to all Platform features.
• Identity verification and fraud prevention: To conduct know-your-customer (KYC) checks, verify age eligibility (18+), detect and prevent fraudulent activity, money laundering, and other prohibited conduct as described in the yo99 Terms and Conditions.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour, apply responsible gaming tools requested by Users (deposit limits, self-exclusion), and fulfil regulatory obligations related to player protection.
• Customer support: To respond to your queries, process formal complaints, provide technical assistance, and improve the quality of yo99's support operations.
• Marketing and promotions: To send you relevant promotional offers, personalised bonus communications, and updates about new yo99 products and features, where you have consented to receive such communications or where yo99 has a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform improvement: To analyse aggregated usage data, identify technical issues, test new features, and improve the yo99 Platform's performance, accessibility, and user experience.
• Legal and regulatory compliance: To meet obligations imposed by applicable law, respond to court orders, regulatory enquiries, or law enforcement requests, and enforce yo99's Terms and Conditions.

4 Legal Basis for Processing

yo99 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and yo99, including account registration, bet settlement, payment processing, and yo99 Login authentication.
• Legal obligation: Processing necessary to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing where yo99 has a legitimate business interest that is not overridden by your interests or fundamental rights, including fraud detection, Platform security, responsible gaming monitoring, and service improvement through analytics.
• Consent: Processing based on your freely given, specific, and informed consent, including direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5 Data Sharing and Third-Party Disclosure

yo99 does not sell your personal data to third parties. yo99 may share your personal data with the following categories of recipients in the circumstances described:

• Payment service providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment processors require transaction-level data to process deposits and withdrawals. These providers are contractually bound to use your data only for payment processing purposes.
• Identity verification providers: Third-party KYC and age verification services that process identity documents and biometric data on yo99's behalf to fulfil legal verification obligations.
• Technology and infrastructure providers: Cloud hosting, data storage, analytics, and cybersecurity providers who process data on yo99's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: yo99 is required by law to disclose account information and transaction records to financial regulators, law enforcement agencies, and courts when lawfully compelled to do so. yo99 will comply with such requests without prior notification to the User unless prohibited from doing so.
• Corporate transactions: In the event of a merger, acquisition, or sale of yo99's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

6 Data Retention

yo99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following general retention principles apply:

• Account data and transaction records are retained for a minimum of five (5) years following account closure or the last transaction on the account, in accordance with standard AML record-keeping requirements.
• KYC and identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications and complaint records are retained for three (3) years from the date of resolution.
• Technical and usage data collected for analytics purposes is anonymised or deleted within twelve (12) months of collection, unless required for ongoing investigation or legal proceedings.

Upon expiry of the applicable retention period, yo99 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

7 Cookies & Tracking Technologies

yo99 uses cookies and similar tracking technologies on the Platform to provide a functional user experience, maintain session state after yo99 Login, analyse Platform usage, and, where applicable, deliver relevant promotional content. The categories of cookies used by yo99 include:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session authentication cookies that keep you logged in to yo99 across pages without requiring repeated yo99 Login. These cannot be disabled.
• Performance and analytics cookies: Collect anonymised data about how Users interact with the Platform — which pages are visited, how long sessions last, and which features are used most frequently. This information helps yo99 improve Platform performance.
• Functional cookies: Remember your preferences and settings, such as your preferred language, game filters, and responsible gaming tool configurations.
• Marketing cookies: Used to track the effectiveness of yo99's promotional campaigns and deliver personalised bonus offers to logged-in account holders, where you have consented to such personalisation.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the Platform's functionality, including the ability to complete yo99 Login and maintain a session.

8 Security Measures

yo99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the yo99 Platform, including during yo99 Login and all financial transactions.
• Encrypted storage of account passwords using industry-standard hashing algorithms. yo99 does not store passwords in readable form.
• Two-factor authentication (2FA) available for all yo99 account holders to add an additional layer of protection to the yo99 Login process.
• Access controls ensuring that yo99 staff and third-party processors can only access personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure.
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable regulatory requirements.

While yo99 takes reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own yo99 account credentials and for notifying yo99 immediately of any suspected unauthorised access.

9 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by yo99:

• Right of access: You may request a copy of the personal data yo99 holds about you, together with information about how that data is used.
• Right of rectification: You may request that inaccurate or incomplete personal data be corrected. You can update most account information directly through your yo99 account settings after yo99 Login.
• Right of erasure: In certain circumstances, you may request that yo99 delete your personal data. This right is subject to yo99's legal obligations to retain data for AML and regulatory compliance purposes.
• Right to restrict processing: You may request that yo99 limit the way it uses your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Where technically feasible and legally required, you may request your personal data in a structured, machine-readable format.
• Right to object: You may object to yo99's processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests, subject to yo99 demonstrating compelling grounds for that processing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact yo99 using the details in Section 13. yo99 will acknowledge your request within 72 hours and aim to respond substantively within thirty (30) calendar days.

10 Children's Privacy

The yo99 Platform is strictly intended for adults aged 18 and above. yo99 does not knowingly collect, use, or store personal data from persons under the age of 18. If yo99 becomes aware that personal data has been collected from a minor, that account will be immediately suspended, all associated data will be securely deleted, and any deposited funds will be returned in accordance with applicable law.

Parents and guardians who believe their child has accessed or registered on the yo99 Platform are encouraged to contact yo99 support immediately so that appropriate action can be taken without delay.

11 International Data Transfers

yo99 operates infrastructure that may involve the transfer of personal data to, and storage of personal data in, jurisdictions outside the country in which you reside. Where such transfers occur, yo99 ensures that appropriate safeguards are in place to protect your personal data, including standard contractual clauses approved by relevant data protection authorities or equivalent transfer mechanisms recognised under applicable law.

By using the yo99 Platform, you acknowledge and consent to the transfer of your personal data to yo99's infrastructure locations as necessary to provide the services described in this Privacy Policy.

12 Changes to This Privacy Policy

yo99 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or yo99's data processing practices. Material changes will be communicated to registered Users via the email address on file or via a prominent notice on the yo99 Platform at least seven (7) days before the changes take effect.

Your continued use of the yo99 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. It is your responsibility to review this Policy periodically and to ensure that your contact details on file with yo99 are current so that you receive notification of material updates.

13 Contact Us

If you have questions, concerns, or wish to exercise your data rights under this Privacy Policy, please contact yo99 using the following channels. Contact details are provided as plain text only and are not clickable links:

• Email: [email protected]
• Live Chat: Available 24/7 via the yo99 Platform — the fastest channel for urgent data requests
• Response time: Email acknowledgement within 72 hours; substantive response within 30 calendar days

When contacting yo99 to exercise a data right, please include your registered yo99 account email address, a description of your request, and any relevant supporting information to help yo99 identify your account and respond efficiently.