hy999 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data processed by hy999 in connection with the operation of the hy999 online gaming platform available at hy999.org. This Policy covers all registered players, visitors to the hy999 website, and individuals who contact hy999 via support channels.

hy999 is the data controller responsible for your personal information. As an internationally licensed gaming operator serving Pakistani players, hy999 takes its data protection obligations seriously and commits to handling your information with transparency, security, and respect for your individual rights.

By registering an account on hy999 or continuing to use the platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the hy999 platform and may request account closure.

hy999 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on government-issued identification;
• Date of birth (for age verification purposes);
• Residential address (city, province, postal code — Pakistan);
• Valid email address;
• Contact mobile number (as registered with JazzCash or EasyPaisa where applicable).

2.2 Identity Verification (KYC) Documents

• Copies of government-issued photo identification (CNIC, Passport, or Driver's Licence);
• Proof of address documentation (utility bill, bank statement dated within 3 months);
• Proof of payment method ownership (JazzCash or EasyPaisa account confirmation, bank statement);
• Source of funds documentation where required by internal risk and compliance procedures.

2.3 Financial Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (mobile wallet numbers for JazzCash/EasyPaisa, bank account details for HBL, UBL, or Meezan Bank transfers);
• Account balance history and gaming transaction logs.

2.4 Gaming & Behavioural Data

• Gameplay records including game titles played, wager amounts, win/loss outcomes, and session durations;
• Sports betting history including markets, odds accepted, and settlement outcomes;
• Bonus and promotion claim history;
• Responsible gaming tool usage (deposit limits, self-exclusion activations, session time settings).

2.5 Technical & Usage Data

• IP address and geolocation data (country/region level);
• Device type, operating system, and browser information;
• Pages visited on the hy999 platform, clickstream data, and time-on-page metrics;
• Login timestamps and session activity logs.

2.6 Communications Data

• Support chat transcripts and email correspondence with hy999 customer support;
• Feedback, complaints, and dispute submissions;
• Survey responses or promotional competition entries (where applicable).

hy999 collects personal data through the following channels:

hy999 processes your personal data for the following specific, legitimate purposes:

• Account creation and management: To register your player account, verify your identity, and manage your ongoing relationship with hy999;
• Service delivery: To provide access to gaming, betting, and live casino services available on the hy999 platform;
• Payment processing: To facilitate PKR deposits and withdrawals via your registered Pakistani payment methods (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank);
• KYC and regulatory compliance: To fulfil identity verification obligations under international anti-money laundering (AML) and Know Your Customer (KYC) standards applicable to our licensing jurisdiction;
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the hy999 platform;
• Responsible gaming compliance: To monitor gaming patterns, enforce self-exclusion requests, apply player-set deposit and loss limits, and identify players who may require responsible gaming support;
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality and audit purposes;
• Marketing and promotions: To send you relevant bonus offers, PSL season promotions, and platform updates — subject to your marketing preferences and the right to opt out at any time;
• Platform improvement: To analyse aggregated usage data for the purpose of improving the hy999 platform, game selection, and user experience;
• Legal and regulatory obligations: To comply with applicable legal requirements, licensing conditions, regulatory requests, and judicial orders.

hy999 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered hy999 player, including account operation, game access, and payment processing;
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory requirements imposed by hy999's licensing authority;
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental rights;
• Consent: Processing carried out for direct marketing communications, where your explicit opt-in consent has been obtained. You may withdraw this consent at any time by contacting hy999 support or updating your account notification preferences.

hy999 may share your personal data with the following categories of third parties:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — solely to process your deposit and withdrawal transactions;
• KYC and identity verification partners: Third-party verification platforms used to validate identity documents and conduct sanctions screening;
• Gaming software providers: Game studios and platform providers who supply the games you play on hy999 may receive anonymised session data for game performance and RTP auditing purposes;
• Fraud prevention and risk intelligence services: Specialist third-party providers used to detect and prevent financial crime and platform abuse;
• Regulatory and licensing authorities: hy999's licensing body may require access to certain player records as part of regulatory oversight and compliance audits;
• Legal and law enforcement authorities: Where required by a valid court order, regulatory direction, or applicable law, hy999 may disclose player data to government authorities or law enforcement agencies;
• Professional advisors: Legal counsel, auditors, and compliance consultants operating under strict confidentiality obligations.

All third parties with whom hy999 shares personal data are contractually required to process that data only for the specific purpose for which it was shared and to maintain appropriate data security standards.

hy999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's existence on the hy999 platform;
• KYC documents and transaction records: Retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements applicable to hy999's licensing jurisdiction;
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Support communications: Retained for two (2) years following the resolution of a support query or dispute;
• Marketing consent records: Retained until consent is withdrawn plus six (6) months for audit trail purposes.

Following the expiry of applicable retention periods, hy999 will securely delete or anonymise personal data in a manner that prevents its reconstruction.

hy999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• SSL/TLS encryption: All data transmitted between your device and hy999 servers is encrypted using 256-bit SSL/TLS protocols;
• Data-at-rest encryption: Sensitive personal data and KYC documents stored on hy999 systems are encrypted at rest;
• Access controls: Access to player personal data is restricted to authorised hy999 personnel on a strictly need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Firewalls and intrusion detection: hy999's platform infrastructure is protected by enterprise-grade firewalls, DDoS mitigation, and continuous intrusion detection monitoring;
• Regular security audits: hy999 conducts periodic security assessments and penetration testing to identify and address potential vulnerabilities.

hy999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit hy999.org. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Please note that disabling functional or analytics cookies will not affect your ability to use the core hy999 platform features, but may affect certain personalisation preferences.

As a player on the hy999 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact hy999 via live chat or at [email protected].

hy999 will acknowledge all data rights requests within five (5) business days and aim to fulfil verified requests within thirty (30) days. Where a request cannot be fulfilled due to conflicting legal obligations, hy999 will provide a written explanation.

hy999 employs age verification controls during the registration process and reserves the right to request documentary proof of age (such as a CNIC copy) at any point. If hy999 discovers that personal data has been collected from an individual below the minimum age of 21, the following actions will be taken:

• The account will be immediately suspended and permanently closed;
• All personal data associated with the underage account will be securely deleted, subject only to any legal retention obligations;
• Any funds deposited will be returned to the originating payment method after applicable verification is completed;
• The incident will be logged for internal compliance and, where required, reported to relevant regulatory authorities.

If you believe an underage individual has registered on hy999, please contact us immediately at [email protected].

As hy999 is an internationally licensed gaming operator, certain processing activities — including cloud hosting, KYC verification services, and gaming software platforms — may involve the transfer of personal data to servers or service providers located outside Pakistan.

Where personal data is transferred internationally, hy999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards include:

• Contractual data processing agreements with all third-party processors requiring compliance with internationally recognised data protection standards;
• Use of service providers certified under internationally recognised security and privacy frameworks;
• Encryption of all data in transit, regardless of the transfer destination.

hy999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. Where changes are material, hy999 will notify registered players via email or a prominent on-platform notification prior to the changes taking effect.

The effective date of the current version of this Policy is indicated at the top of this page. Your continued use of the hy999 platform following a Policy update constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how hy999 manages your personal data.

For any questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact hy999 using the following details:

When submitting a data request, please include your registered hy999 account email address and a detailed description of your request to ensure prompt and accurate handling. hy999 may require additional identity verification before processing data access or deletion requests to protect against unauthorised requests.