wy999 Privacy Policy

1 Who We Are

This Privacy Policy is issued by wy999, the operator of the online gaming platform accessible at wy999.bio ("wy999", "we", "us", or "our"). wy999 is the data controller responsible for the personal data of players registered on the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Platform" means the wy999 website, mobile browser interface, and all associated services accessible via wy999.bio.
• "Player" or "You" means any individual who registers, accesses, or uses the wy999 Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, as processed by wy999 in the course of operating the Platform.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.

2 Data We Collect

wy999 collects the following categories of personal data in the course of operating the Platform and delivering gaming services to players in Pakistan:

2.1 Identity Data

• Full legal name as it appears on your Pakistani CNIC or other accepted identification document.
• Date of birth (used to verify the minimum age requirement of 21 years).
• CNIC number and a scan or photograph of your CNIC, collected during KYC verification.
• Photograph or selfie, where requested for enhanced identity verification.

2.2 Contact Data

• Mobile phone number, including your registered JazzCash or EasyPaisa number where applicable.
• Email address, used for account notifications, promotional communications (where consented), and support correspondence.
• City or district of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad) — collected optionally for platform localisation purposes.

2.3 Financial Data

• Payment method identifiers, including JazzCash account number, EasyPaisa number, bank account details (HBL, UBL, Meezan Bank, SadaPay), and USDT TRC20 wallet address where used for deposits or withdrawals.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used for each transaction.
• Account balance history for compliance and audit purposes.

2.4 Gaming & Behavioural Data

• Game activity records, including games played, stakes placed, outcomes, and session durations across all wy999 products including cricket betting, slots, live casino, Pool Rummy, and Keno Bonus Number.
• Bonus usage records, including bonuses claimed, wagering progress, and bonus expiry events.
• Responsible gaming tool usage, including deposit limit settings, self-exclusion periods, and cooling-off requests.

2.5 Technical Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session logs, login timestamps, and access records.
• Cookie identifiers and similar tracking data, as described in Section 8.

2.6 Communications Data

• Content of live chat transcripts, support emails, and any other written communications you send to wy999.
• Records of marketing communication preferences and consent history.

3 How We Collect Data

wy999 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, and session activity, via server logs and cookies.
• Third-party sources: Identity verification data returned by wy999's KYC and AML service providers following document checks. Payment confirmation data returned by payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay) confirming transaction status.
• Inferred data: Behavioural inferences drawn from your gaming activity for the purposes of responsible gaming monitoring and fraud detection, as described in Section 4.

4 Why We Use Your Data

wy999 uses the personal data it collects for the following specific purposes:

5 Legal Basis for Processing

wy999 processes personal data only where a valid legal basis exists. The legal bases wy999 relies upon are:

• Contract performance: Processing necessary to register your account, process transactions, deliver gaming services, and manage your account relationship with wy999.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, age verification obligations, tax reporting requirements, and other applicable legal duties.
• Legitimate interest: Processing necessary for wy999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytical improvement of the Platform — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for purposes where you have given clear, specific, and freely given consent — primarily marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

wy999 does not sell or commercially transfer your personal data to unrelated third parties. However, wy999 shares data with the following categories of recipients where strictly necessary:

6.1 Payment Service Providers

Transaction data is shared with your chosen payment provider — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20 gateway — solely to process deposits and withdrawals. These providers act as independent data controllers for the transaction data they handle.

6.2 KYC and AML Verification Providers

Identity documents and related data are shared with wy999's third-party KYC verification partner to perform identity checks and AML screening. All such providers operate under binding data processing agreements and are prohibited from using your data for any purpose other than fulfilling the verification service.

6.3 Game Software Providers

Gaming session data (game type, stake, outcome, session duration) is shared with wy999's third-party game software providers to the extent necessary to render and record the relevant game round. These providers are contractually prohibited from using this data for independent marketing or profiling purposes.

6.4 Legal and Regulatory Authorities

wy999 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal obligation, court order, or regulatory instruction. wy999 will, where legally permissible, notify the affected player of any such disclosure.

6.5 Professional Advisers

Personal data may be accessed by wy999's lawyers, auditors, or financial advisers on a strictly need-to-know basis and subject to professional confidentiality obligations.

7 KYC & AML Data

wy999 is obligated to verify the identity of all players prior to processing withdrawals and to screen transactions for potential money laundering activity. This is not optional — it is a legal requirement that wy999 applies consistently to all accounts regardless of balance or activity level.

KYC data — including your CNIC copy, selfie, and any supplementary documents — is stored securely and used exclusively for the following purposes:

• Confirming your identity and age before enabling withdrawal functionality.
• Screening your identity against international sanctions lists and PEP (Politically Exposed Person) databases.
• Fulfilling wy999's AML record-keeping obligations, which require retention of KYC documents for a minimum of five (5) years from the date of account closure.

8 Cookies & Tracking

wy999 uses cookies and similar tracking technologies on the Platform for the following purposes:

8.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They maintain your login session, store your language and display preferences, and enable secure navigation between pages. Essential cookies cannot be disabled without breaking core Platform functionality.

8.2 Analytical Cookies

wy999 uses first-party analytical cookies to understand how players use the Platform — which pages are visited most frequently, where players encounter difficulties, and how navigation flows are used. This data is aggregated and anonymised where possible. Analytical cookies can be disabled via your browser settings.

8.3 Security Cookies

Security cookies help wy999 detect and prevent fraudulent activity, including account takeover attempts and bot traffic. They record session fingerprint data used to identify anomalous access patterns.

wy999 does not use third-party advertising cookies or behavioural targeting cookies that share your data with advertising networks. You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies will impair your ability to log in and use the Platform.

9 Data Retention

wy999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of account closure, in compliance with AML record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of account closure.
• Gaming activity logs: Retained for three (3) years from the date of each gaming session for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for two (2) years from the date of the last communication in each support thread.
• Marketing consent records: Retained for the duration of your account plus two (2) years, as evidence of consent or withdrawal of consent.
• Technical logs (IP, session data): Retained for ninety (90) days on a rolling basis, except where retained longer for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual player. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

10 Data Security

wy999 implements technical and organisational security measures appropriate to the risk associated with processing player personal data. These measures include:

• Encryption in transit: All data transmitted between your device and wy999 servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive data stored in wy999 databases — including KYC documents, financial records, and authentication credentials — is encrypted using AES-256 or equivalent.
• Access controls: Access to personal data is restricted to wy999 personnel and authorised third parties on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication: Internal wy999 systems that access player data require multi-factor authentication for all personnel.
• Penetration testing: wy999 conducts regular security assessments and penetration tests of the Platform and underlying infrastructure.
• Incident response: wy999 maintains a documented data breach response procedure. In the event of a breach affecting player personal data, affected players will be notified without undue delay.

11 Your Rights

As a wy999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the wy999 support team via live chat or email. wy999 will respond within five (5) business days:

• Right of Access: You have the right to request a copy of the personal data wy999 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by wy999.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to wy999's legal retention obligations. Note that AML obligations require wy999 to retain certain data for five years post-closure regardless of a deletion request.
• Right to Restriction: You have the right to request that wy999 restrict processing of your data in certain circumstances, for example where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where processing is based on consent or contract performance.
• Right to Object: You have the right to object to processing based on legitimate interest, including profiling for responsible gaming monitoring purposes, where your individual circumstances warrant it.
• Right to Withdraw Consent: Where processing is based on your consent — primarily marketing communications — you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

12 Children & Minors

wy999 is strictly an adults-only platform. Players must be aged 21 years or older to register and use wy999. wy999 does not knowingly collect personal data from individuals under the age of 21.

Where wy999 discovers or is notified that an account has been registered by or on behalf of an individual under 21 years of age, the account will be immediately suspended, all data associated with the account will be deleted in accordance with applicable law, and any funds in the account will be dealt with in accordance with wy999's responsible gaming obligations.

If you believe that a minor in your household has registered a wy999 account, please contact wy999 support immediately so the account can be closed and data handled appropriately.

13 Marketing Communications

wy999 sends promotional communications — including bonus offers, PSL betting promotions, slot tournament announcements, and platform news — only to players who have explicitly opted in to receive such communications at registration or via account settings.

Marketing communications are delivered via the mobile number or email address registered on your wy999 account. wy999 does not send unsolicited bulk marketing messages.

You may opt out of marketing communications at any time by:

• Adjusting your notification preferences in the wy999 account settings dashboard.
• Contacting wy999 customer support via live chat or email and requesting removal from the marketing list.
• Using the unsubscribe link included in every wy999 marketing email.

Opt-out requests are processed within 48 hours. Note that opting out of marketing communications does not affect transactional notifications — you will continue to receive account-related messages such as deposit confirmations, withdrawal notifications, and security alerts, as these are necessary for the operation of your account.

14 Changes to This Policy

wy999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or wy999's data processing practices. The updated Privacy Policy will be published on this page with a revised effective date.

Where changes are material — meaning they significantly affect how wy999 processes your personal data or your rights in relation to it — wy999 will notify registered players via account notification or email prior to the changes taking effect.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or wy999's handling of your personal data, please contact the wy999 privacy team through the following channels:

• Live Chat: Available 24/7 directly from the wy999 Platform. The live chat team can handle routine data enquiries and escalate complex data requests to the compliance team.
• Email: [email protected] — please use the subject line "Privacy Request" for data-related enquiries to ensure prompt routing to the appropriate team. Response within 5 business days.

wy999 is committed to resolving all privacy-related enquiries fairly and transparently. Where you are not satisfied with the outcome of your enquiry, you may escalate the matter to the relevant data protection authority in accordance with the laws applicable to your jurisdiction.