1. Introduction
This Privacy Policy ("Policy") is issued by yo99 ("we", "us", "our", "the Platform") and governs the collection, use, storage, disclosure, and protection of personal data obtained from users ("you", "User") who access or interact with the yo99 platform at https://yo99.cam, including all associated mobile or web interfaces.
yo99 is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy describes our practices in clear language so that you understand precisely what happens to your information when you register, play, make a transaction, or otherwise engage with any part of the yo99 platform.
Acceptance: By registering an account, accessing the platform, or continuing to use yo99's services after a material update to this Policy, you acknowledge that you have read, understood, and accepted the practices described in this document. If you do not accept this Policy, you must not use the platform.
This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy.
2. Definitions
The following terms carry the meanings set out below throughout this Policy:
- "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data.
- "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
- "Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, yo99 is the Data Controller.
- "Processor" — a third party that processes Personal Data on behalf of yo99, under contractual instruction.
- "Cookies" — small text files placed on a user's device by a website to store session data, preferences, or tracking information.
- "KYC" — Know Your Customer; the identity and document verification process required for account compliance.
- "Special Category Data" — data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or criminal records. yo99 does not intentionally collect Special Category Data unless required by applicable law.
3. Data We Collect
yo99 collects Personal Data in the following categories, depending on how you interact with the platform:
| Data Category |
Examples |
How Collected |
| Identity Data |
Full name, date of birth, nationality, government ID number |
Registration & KYC forms |
| Contact Data |
Email address, phone number, residential address (including city, e.g. Karachi, Lahore, Islamabad) |
Registration & profile settings |
| Financial Data |
Payment method details, transaction history, deposit and withdrawal records in PKR or other currencies |
Cashier and payment processing |
| Technical Data |
IP address, browser type, device identifiers, operating system, session tokens |
Automatically via server logs and cookies |
| Usage Data |
Games played, bets placed, pages visited, session duration, clickstream data |
Automatically via platform analytics |
| Communications Data |
Support chat transcripts, emails, complaint records |
Live Chat, Help Center, email |
| Verification Documents |
Government-issued ID scans, proof of address documents, source-of-funds documentation |
KYC verification process |
Payment Provider Note: When you make a deposit or withdrawal using a payment method associated with providers such as HBL, UBL, Meezan Bank, Bank Alfalah, or mobile wallet services, the relevant financial data is processed through the payment infrastructure of those providers. yo99 receives only the information necessary to record and verify your transaction. These providers operate independently and their own privacy policies govern their data practices. They are not affiliated with or endorsing yo99's gaming operations.
4. Lawful Basis for Processing
yo99 processes Personal Data only where a recognised lawful basis exists. The applicable bases for our processing activities are:
- Contractual Necessity: Processing required to perform our contract with you — for example, creating your account, processing deposits and withdrawals, and delivering gaming services.
- Legal Obligation: Processing required to comply with applicable law — including Anti-Money Laundering (AML) obligations, KYC requirements, and fraud prevention duties.
- Legitimate Interests: Processing carried out for purposes that are in our legitimate business interests and do not override your fundamental rights — including platform security monitoring, fraud detection, and service improvement analytics.
- Consent: Where you have provided explicit, freely given, informed, and specific consent — for example, subscribing to promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. Data Processing — Purposes of Use
yo99 uses collected Personal Data for the following specific purposes:
- Account Management: Creating, maintaining, and administering your yo99 account, including identity verification and KYC compliance.
- Service Delivery: Providing access to casino games, live dealer tables, sports betting markets, and all other platform features.
- Payment Processing: Executing deposit and withdrawal transactions, verifying payment method ownership, and maintaining financial records.
- Regulatory Compliance: Meeting Anti-Money Laundering, Counter-Terrorism Financing, and other applicable compliance obligations. This includes transaction monitoring and suspicious activity reporting where required by law.
- Responsible Gambling: Monitoring gaming patterns to identify possible problem gambling behaviour, applying self-imposed limits, and communicating about responsible gambling tools.
- Customer Support: Responding to queries, complaints, and support requests submitted via Live Chat, email, or the Help Center.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-account abuse, bonus exploitation, and other prohibited conduct.
- Marketing Communications: Where you have provided consent, sending promotional offers, bonus notifications, and platform news. You may opt out at any time.
- Platform Analytics & Improvement: Understanding how users interact with the platform to improve usability, game selection, and technical performance.
No Sale of Data: yo99 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Data sharing with processors and partners is strictly governed by contractual obligations and limited to what is necessary for the stated purposes above.
6. Cookies & Tracking Technologies
yo99 uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, remember preferences, and gather anonymised analytics data. The categories of cookies used include:
- Strictly Necessary Cookies: Essential for platform operation — for example, maintaining your login session, preserving your account state between pages, and ensuring security token validity. These cannot be disabled without breaking platform functionality.
- Functional Cookies: Store user preferences such as language selection, display settings, and recent activity to improve your experience.
- Analytics Cookies: Collect anonymised or pseudonymised data about how users navigate the platform — for example, which game categories are most visited — to help us improve content and performance. No personally identifiable information is transmitted through analytics cookies without additional consent.
- Marketing / Targeting Cookies: Used only where you have provided consent, to deliver promotional content relevant to your interests.
You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the platform. For further detail, please refer to the cookie management options in your account settings or browser.
7. Data Sharing & Third-Party Processors
yo99 may share your Personal Data with carefully selected third-party processors who assist in delivering the platform's services. All processors are required to handle your data securely, only for the purposes specified, and in accordance with contractual data protection obligations.
Categories of third-party recipients include:
- Payment Service Providers: Entities that facilitate deposit and withdrawal transactions. These processors receive only the data necessary to execute and verify your specific transaction.
- Identity Verification Providers: Third-party KYC services that verify the authenticity of identity documents and perform liveness checks as required by compliance obligations.
- Fraud Detection & Risk Services: Specialist providers that assist in identifying suspicious activity, multi-accounting, and financial crime patterns.
- Cloud Infrastructure & Hosting Providers: Entities that provide secure server infrastructure, data storage, and platform hosting services.
- Analytics Providers: Services used to analyse anonymised platform usage data for product improvement purposes.
- Regulatory Authorities: Where required by applicable law, we may disclose data to government bodies, law enforcement agencies, or financial regulators. Such disclosure will only occur to the extent legally required or authorised.
Important: yo99 does not share your Personal Data with any third party for their own independent marketing or commercial purposes. Any data sharing is strictly limited to service delivery, compliance, and security functions as described above.
8. Data Retention
yo99 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations.
- Active Account Data: Retained for the duration of your account relationship with yo99, plus any legally required post-closure retention period.
- Financial & Transaction Records: Retained for a minimum period as required by applicable anti-money laundering legislation — typically five (5) to seven (7) years from the date of the transaction or account closure, whichever is later.
- KYC & Identity Documents: Retained for the period required by applicable compliance obligations, generally five (5) years after the end of the business relationship.
- Support Communications: Retained for a reasonable period to enable quality review, dispute resolution, and regulatory reporting.
- Marketing Data: Retained until you withdraw consent or opt out of marketing communications.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to you as an identifiable individual.
9. Data Security
yo99 implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
- Encryption of sensitive data at rest, including payment information and identity documents.
- Role-based access controls limiting staff access to Personal Data to those with a legitimate operational need.
- Regular security assessments and monitoring of platform infrastructure for vulnerabilities and intrusion attempts.
- Pseudonymisation of analytics and behavioural data wherever possible.
Your Responsibilities: The security of your account also depends on you. You are responsible for keeping your login credentials confidential and for using a strong, unique password. yo99 will never ask for your password via email, chat, or any unsolicited communication. If you suspect your account has been compromised, contact our Support team immediately.
Despite our best efforts, no internet transmission or electronic storage system is entirely risk-free. If a data security incident occurs that is likely to affect your rights or interests, we will notify you in accordance with applicable breach notification obligations.
10. International Data Transfers
As an online platform serving users internationally, yo99 may process or store Personal Data on servers or through service providers located outside your country of residence, including outside Pakistan. Where such transfers occur, yo99 ensures that appropriate safeguards are in place to protect your data in a manner consistent with applicable data protection standards.
Such safeguards may include contractual data processing agreements with processors incorporating appropriate data protection clauses, or reliance on recognised transfer mechanisms available under applicable law.
Pakistan Users: Data protection law in Pakistan is governed by applicable legislation including the Prevention of Electronic Crimes Act (PECA) 2016 and emerging data protection frameworks. yo99 does not represent that its data practices satisfy the requirements of any specific Pakistani law. Users are responsible for assessing whether using this platform is appropriate given applicable local legal requirements.
11. User Rights
Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you have the following rights in relation to your Personal Data held by yo99:
- Right of Access: You may request a copy of the Personal Data yo99 holds about you, together with information about how it is being processed.
- Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held about you.
- Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that override this right.
- Right to Restrict Processing: You may request that yo99 restricts processing of your data in certain circumstances — for example, while an accuracy dispute is being resolved.
- Right to Data Portability: Where technically feasible and legally applicable, you may request your Personal Data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our right to demonstrate overriding grounds.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Exercising Your Rights: To submit any data rights request, contact our Support team at the address shown in Section 15 of this Policy. We will acknowledge your request promptly and respond within the timeframe required by applicable law. We may need to verify your identity before processing a data rights request.
12. Minors
The yo99 platform is strictly for adults aged 18 years and above — or the higher minimum age required by the applicable operator or license jurisdiction. yo99 does not knowingly collect or process Personal Data from individuals under the applicable minimum age.
If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. Age verification is a mandatory component of the KYC process, and the platform implements reasonable technical and procedural controls to prevent underage access.
🔞 Adults Only: If you believe a minor has accessed or registered on the yo99 platform, please contact our Support team immediately so that appropriate action can be taken without delay.
13. Third-Party Links & Services
The yo99 platform may reference third-party services or include technical integrations with external providers for specific platform functionality (such as payment processing or identity verification). yo99 is not responsible for the privacy practices or data security of any third-party service. This Policy applies only to Personal Data processed directly by yo99 in connection with your use of the yo99 platform.
Users are encouraged to review the privacy policies of any third-party service they interact with in connection with using the platform, including payment service providers relevant to their deposit and withdrawal methods.
14. Policy Amendments
yo99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where material changes are made, we will endeavour to notify registered Users by email or through a prominent notice on the platform.
The "Last reviewed" date at the top of this Policy indicates when it was most recently updated. Continued use of the platform following publication of an amended Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the platform and may request account closure.