Data & Privacy

Privacy Policy — How y9998 Handles Your Personal Data

This Privacy Policy explains what personal information y9998 collects when you use the platform, how that information is used, who it is shared with and what control you have over your own data. We have written it to be clear and practical rather than full of legalese that is difficult to follow.

Last Updated: June 2026

What This Privacy Policy Covers

These cards give you a quick overview of the major areas covered. The complete policy is in the sections below — please read it in full before using the y9998 platform.

What Data We Collect

y9998 collects the personal information you provide during registration and verification, transaction data related to your deposits and withdrawals in PKR, and usage data from your activity on the platform and app.

How We Use Your Data

Your data is used to operate and secure your account, process PKR payments through JazzCash and Easypaisa, carry out identity checks, provide customer support and — where you have opted in — send you relevant promotional offers.

Who We Share It With

Your data may be shared with payment processors, identity verification services, game studio providers and technology partners whose services are needed to run the platform. We do not sell your personal data to unrelated third parties.

How We Protect It

y9998 uses industry-standard encryption for data in transit and at rest. Access to personal data within our organisation is restricted to authorised personnel with a genuine operational need. We review our security practices regularly.

Your Rights Over Your Data

You can request access to the personal data we hold about you, ask for corrections, request deletion in applicable circumstances, or withdraw marketing consent at any time. Contact support to exercise any of these rights.

Cookies and App Data

The y9998 website uses cookies to maintain sessions and analyse platform performance. The mobile app collects device identifiers and usage data for functionality and security. You can manage cookie preferences from your browser settings.

About This Policy: This Privacy Policy applies to the y9998 website at y9998.onl and to any official y9998 mobile applications. By creating a y9998 account or using the platform, you confirm that you have read and understood how your personal data is handled as described in this document. This policy should be read alongside our Terms and Conditions.

1. Introduction

y9998 ("the Platform", "we", "us") operates y9998.onl and associated mobile applications as an online sports betting and gaming platform serving users in Pakistan. We take the privacy and security of your personal data seriously and are committed to handling it with care and transparency.

This document is our Privacy Policy — it describes what data we collect from you when you use y9998, why we collect it, how we use it, who we share it with and how long we keep it. It also explains the rights you have in relation to your personal data and how to exercise them.

If you have questions about any aspect of this Privacy Policy or about how your personal data is being handled, you can contact our support team at any time. Contact details are in Section 14.

2. Personal Data We Collect

The personal data we collect falls into three broad categories depending on how you interact with the y9998 platform:

Information you provide directly:

  • Full name and date of birth (required for registration and age verification)
  • Residential address in Pakistan
  • Contact details — mobile number and email address
  • Identity document details for verification purposes (such as CNIC or passport information)
  • Payment account details associated with JazzCash, Easypaisa, Raast, bank accounts or cards used for deposits and withdrawals
  • Communications you send to customer support

Information generated by your use of the platform:

  • Betting and gaming history including bet types, stakes, markets and outcomes
  • Deposit and withdrawal transaction records in PKR
  • Login records including date, time and device used
  • Account settings and preferences
  • Responsible gaming tool settings — deposit limits, session timers, exclusion periods

Technical and device data:

  • IP address and approximate geographic location
  • Device type, operating system version and browser or app version
  • Session identifiers and cookie data (see Section 9)
  • Platform performance data such as page load times, errors and feature usage patterns

Sensitive Data: y9998 does not intentionally collect sensitive personal data such as health information, religious beliefs or biometric data beyond what is inherent in identity document verification. If you contact us about responsible gaming concerns, any information you share in that context is treated with particular discretion and used only to assist you.

3. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

Purpose Data Used
Account creation and management Name, date of birth, contact details, address
Identity and age verification (18+) Name, date of birth, identity document data
Processing deposits and withdrawals in PKR Payment account details, transaction records
Providing betting and casino services Account data, betting history, session data
Fraud detection and security IP address, device data, transaction patterns
Customer support Contact details, account history, support communications
Responsible gaming management Limit settings, gaming history, support interactions
Platform improvement and analytics Aggregated usage data, technical performance data
Marketing (with consent only) Contact details, preferences, gaming behaviour

We do not use your personal data to make fully automated decisions that produce significant effects on you without the possibility of human review. Account security decisions that appear automated are subject to human review upon your request.

5. Sharing Your Personal Data

y9998 does not sell your personal data to unrelated third parties. We share personal data only in the following circumstances and only to the extent necessary:

  • Payment processors: JazzCash, Easypaisa, Raast and other payment service providers receive the transaction data necessary to process your deposits and withdrawals in PKR.
  • Identity verification providers: Third-party verification services may receive your identity document details and personal information to carry out age and identity checks.
  • Casino and game studio providers: Game providers whose content runs on the y9998 platform may receive account identifiers necessary to deliver their games and maintain game integrity.
  • Technology and infrastructure partners: Cloud hosting, security and analytics technology providers may process data as part of delivering and maintaining the platform.
  • Customer support systems: Third-party customer support platforms used to manage and respond to your support queries.

All third parties that process personal data on our behalf are required to handle it securely and only for the purposes for which it was shared. We do not share data with advertisers or data brokers.

Legal Disclosure: In certain circumstances we may be required to disclose personal data in response to lawful requests from authorities. We will only do so where the request is legally valid and, where permitted, we will notify you if your data has been requested.

6. Payment Data and PKR Transactions

All financial transactions on y9998 are processed in Pakistani Rupees (PKR). When you make a deposit using JazzCash, Easypaisa, Raast, a bank transfer or a card, the relevant payment details are transmitted securely to the payment processor handling your transaction.

y9998 stores transaction records — including amounts, dates, payment method types and outcomes — as part of your account history. These records are necessary for account management, dispute resolution and our legal obligations. Complete card numbers and mobile wallet credentials are not stored on y9998 systems — only the tokenised or masked references provided by payment processors.

All payment accounts used must be registered in your name. Deposits from or withdrawals to accounts not matching your verified identity are not permitted and will be returned or held pending review.

7. How Long We Keep Your Data

We retain personal data for as long as it is necessary for the purposes described in this policy and to comply with applicable legal obligations. In practice, this means:

  • Active accounts: Personal data is retained for the duration of your account's existence plus an additional period as required by our legal obligations.
  • Closed accounts: Following account closure, core account and transaction records are retained for a minimum of five years to meet standard record-keeping requirements.
  • Responsible gaming records: Records related to self-exclusion and cooling-off periods are retained to prevent re-registration during exclusion and to maintain a history of responsible gaming interactions.
  • Marketing data: Where you withdraw consent to marketing, your contact details are removed from active marketing lists promptly. A suppression record may be retained to ensure you are not inadvertently contacted again.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer identify you.

8. How We Protect Your Data

y9998 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse or alteration. These include:

  • Encryption of data in transit using TLS (Transport Layer Security)
  • Encryption or strong hashing of sensitive stored data including passwords
  • Access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis
  • Regular security reviews of platform infrastructure and third-party integrations
  • Monitoring systems to detect and respond to unusual account activity or attempted breaches

You also play a role in keeping your account secure. Use a strong, unique password for your y9998 account and do not share your credentials with anyone. If you believe your account has been compromised, contact support immediately to have your account secured.

Data Breach Response: In the event of a personal data breach that poses a risk to your rights, y9998 will notify affected users promptly and take all reasonable steps to contain and mitigate the breach. We will act quickly and communicate clearly if this situation ever arises.

9. Cookies and Tracking Technologies

The y9998 website uses cookies and similar tracking technologies. Cookies are small text files stored on your device by your browser. We use them for the following purposes:

  • Essential cookies: Required for the platform to function — maintaining your logged-in session, remembering your language preferences and keeping your bet slip intact while you browse. These cannot be disabled without affecting your ability to use the platform.
  • Performance cookies: Collect anonymised data about how pages are used, which features are accessed most and where errors occur. This helps us improve the platform experience for all users.
  • Functional cookies: Remember your preferences such as display settings and notification choices.

You can manage cookie preferences through your browser settings. Most browsers allow you to see which cookies have been set, block cookies from specific sites or clear all cookies. Disabling essential cookies will prevent you from logging in or using the full platform functionality.

The y9998 mobile app uses device identifiers and local storage for equivalent purposes — session management, performance monitoring and security. These are managed through the app itself and your device's privacy settings.

10. Minors and Under-18 Users

The y9998 platform is strictly for adults aged 18 and over. We do not knowingly collect or process personal data from anyone under the age of 18. During registration, date of birth is collected and verified to enforce this requirement.

If we become aware that a user is under 18, the account will be closed immediately, any funds will be returned to the payment method of origin and all personal data associated with the account will be deleted as promptly as possible.

If you believe someone under the age of 18 has registered a y9998 account, please contact customer support immediately with the relevant details so we can act quickly.

11. Your Rights Over Your Personal Data

You have the following rights in relation to your personal data held by y9998. To exercise any of them, contact customer support through live chat or email:

Right to Access

You can request a copy of the personal data y9998 holds about you. We will respond within a reasonable timeframe and provide the information in a clear format.

Right to Correction

If any personal data we hold about you is inaccurate or incomplete, you can ask us to correct it. Basic account details such as your address or contact number can be updated directly in your account settings.

Right to Deletion

In certain circumstances you can request that we delete your personal data. Note that some data — particularly transaction records — may need to be retained for legal and record-keeping reasons even after account closure.

Right to Restrict Processing

You can ask us to limit how we process your personal data in certain situations — for example, while we resolve a dispute about its accuracy.

Right to Data Portability

Where technically feasible, you can request a copy of your personal data in a structured, machine-readable format for transfer to another service.

Right to Withdraw Consent

Where processing is based on your consent — primarily marketing communications — you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12. Marketing Communications

y9998 may send promotional communications — including details of bonuses, promotions, PSL betting offers and new features — by email or SMS where you have explicitly opted in to receiving them during registration or via your account settings.

You can opt out of marketing communications at any time by:

  • Updating your communication preferences in the notifications section of your account settings
  • Contacting customer support and requesting removal from marketing lists

Opting out of marketing does not affect transactional communications — notifications about your account, deposits, withdrawals, bet settlements and security alerts will continue regardless of your marketing preferences, as they are necessary for account management.

13. Changes to This Privacy Policy

y9998 may update this Privacy Policy from time to time to reflect changes in the platform, applicable requirements or our data handling practices. When we make material changes, we will notify registered users via email or an in-platform notice with at least 14 days before the changes take effect, except where immediate changes are necessary for security or legal reasons.

The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy periodically. Continued use of the platform after the effective date of an updated policy constitutes your acceptance of the changes.

14. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data has been handled, please contact the y9998 team:

  • Via live chat available when logged in to your y9998 account — fastest response
  • Via email at [email protected] — include "Privacy" in your subject line to route your message to the right team

We aim to respond to all privacy-related requests within 30 days. For access requests or other formal data rights exercises, we may need to verify your identity before processing the request.

This Privacy Policy was last reviewed in June 2026 and supersedes all previous versions.

Ready to Join y9998? Your Data Is Safe With Us

Register your free account, deposit in PKR and start betting on cricket, PSL and live casino — knowing exactly how your data is handled.