cy999 Privacy Policy

1 Introduction

cy999 ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at cy999.bio. In the course of providing our services to registered players across Pakistan — including cities like Karachi, Lahore, Islamabad, Faisalabad, and beyond — we collect and process certain personal data about you. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This Privacy Policy applies to all personal data processed by cy999 in connection with your use of the cy999 platform, including when you register an account, make a deposit, place a wager, participate in a promotion, contact our support team, or browse our website. It applies to all registered players regardless of their city or region within Pakistan.

By registering a cy999 account and continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the cy999 platform and may request account closure in accordance with our Terms & Conditions.

This Privacy Policy should be read alongside cy999's Terms & Conditions and Responsible Gaming policy, both of which form part of the binding agreement governing your use of the platform.

2 Data We Collect

cy999 collects personal data in two primary ways: data you provide directly to us, and data we collect automatically through your use of the platform. The categories of personal data we collect are as follows:

2.1 Data You Provide Directly

• Registration Data: Full name, date of birth, email address, mobile phone number, and chosen username when you create a cy999 account.
• KYC Verification Data: Government-issued identity documents such as your Pakistani CNIC, passport, or driving licence, including the document number, photograph, and expiry date. This data is collected as part of our mandatory Know Your Customer (KYC) verification process.
• Financial Data: Your preferred payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20), transaction reference numbers, and deposit and withdrawal amounts. We do not store full payment account credentials — these are handled directly by your payment provider.
• Communications Data: The content of messages you send to our support team via live chat or email, including any attachments or screenshots you provide.
• Responsible Gaming Data: Any self-imposed limits, cooling-off periods, or self-exclusion requests you submit through your account settings or via our support team.

2.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type and model, screen resolution, and timezone.
• Usage Data: Pages visited, games played, wager amounts and outcomes, session durations, click patterns, and navigation paths within the cy999 platform.
• Cookie Data: Information collected via cookies and similar tracking technologies as described in Section 6 of this Policy.
• Geolocation Data: Approximate geolocation derived from your IP address, used to verify you are accessing the platform from a permitted jurisdiction and to tailor certain content for the Pakistani market.

3 How We Use Your Data

cy999 uses your personal data exclusively for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected, and we do not engage in the sale of personal data to third-party marketers or advertisers under any circumstances.

• Account Management: To create, maintain, and administer your cy999 player account, including processing your login credentials and account preferences.
• Identity & Age Verification: To verify that you are at least 21 years of age and that you are who you claim to be, in compliance with our international gaming license obligations and responsible gaming standards.
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate financial records of all account activity.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming Compliance: To monitor gameplay patterns for indicators of problem gambling behaviour, to apply and enforce self-exclusion and limit settings, and to fulfil our responsible gaming obligations.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat or email.
• Legal & Regulatory Compliance: To comply with applicable anti-money laundering requirements, gaming license conditions, and any lawful requests from competent regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the cy999 platform, its game offerings, and its user experience for Pakistani players.
• Promotional Communications: To send you information about cy999 bonuses, promotions, and platform updates, where you have consented to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.

4 Legal Basis for Processing

cy999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and cy999 — specifically, to operate your player account, process transactions, and deliver the gaming services you have registered to use.
• Legal Obligation: Processing that is required to comply with our obligations under international gaming license conditions, including KYC/AML requirements, age verification, and record-keeping mandates.
• Legitimate Interests: Processing carried out in pursuit of cy999's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

cy999 does not sell, rent, or trade your personal data to any third party. We share your data only in the specific, limited circumstances described below:

5.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction details with your chosen payment service provider — such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or a USDT TRC20 network operator. These providers operate under their own privacy policies and are responsible for the security of data within their systems.

5.2 Game Software Providers

cy999 integrates games developed by third-party software providers. These providers may receive limited technical and gameplay data (such as session tokens and wager outcomes) necessary to deliver game functionality. They are contractually prohibited from using this data for any purpose other than operating the games.

5.3 KYC & Identity Verification Partners

To fulfil our mandatory age and identity verification obligations, cy999 may share your identity documents with licensed KYC verification service providers. These providers are bound by strict data protection obligations and use your data solely for verification purposes.

5.4 Legal & Regulatory Authorities

cy999 will disclose personal data to competent regulatory authorities, law enforcement agencies, or licensing bodies where required to do so by applicable law, court order, or our gaming license conditions. We will notify you of any such disclosure where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of cy999's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it, with reasonable advance notice.

6 Cookies & Tracking Technologies

cy999 uses cookies and similar technologies — including local storage and session storage — to operate the platform, maintain your session, remember your preferences, and analyse how the platform is used. Cookies are small text files stored on your device by your browser.

The cookies used by cy999 fall into the following categories:

• Strictly Necessary Cookies: These are essential for the cy999 platform to function. They enable session management, login authentication, and security features. They cannot be disabled without breaking the platform. No consent is required for these cookies.
• Functional Cookies: These remember your language preferences, display settings, and responsible gaming tool configurations across sessions. Disabling them may reduce your platform experience.
• Analytics Cookies: These help cy999 understand how players navigate and use the platform, allowing us to identify performance issues and improve the user experience. Analytics data is aggregated and anonymised where possible.
• Marketing Cookies: Where you have consented, these cookies allow cy999 to deliver relevant promotional communications. You may withdraw consent for marketing cookies at any time via your account settings or by contacting support.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing certain core features of the cy999 platform, including your account login.

7 Data Retention

cy999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required under our gaming license and anti-money laundering obligations:

• Account & Identity Data: Retained for a minimum of 5 years from the date of account closure, in compliance with international gaming license record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the completion of the KYC process or from the date of the last transaction, whichever is later.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with anti-money laundering record-keeping standards.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, or longer if the communication is relevant to an ongoing dispute or investigation.
• Technical & Usage Data: Retained for up to 24 months in identifiable form, after which it is anonymised and may be retained indefinitely for aggregate analytics purposes.

Where retention beyond these minimum periods is required by law, regulatory obligation, or ongoing legal proceedings, cy999 will retain the relevant data for as long as necessary to comply with those requirements. Once the applicable retention period has expired, your data is securely deleted or anonymised in accordance with our data destruction procedures.

8 Data Security

cy999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:

• Encryption in Transit: All data transmitted between your device and the cy999 platform is protected using TLS 1.2 or higher encryption. Our platform enforces HTTPS exclusively — unencrypted connections are not permitted.
• Encryption at Rest: Sensitive personal data — including identity documents, financial records, and authentication credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within cy999's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo mandatory privacy and security training and are bound by confidentiality obligations.
• Two-Factor Authentication: cy999 strongly recommends enabling two-factor authentication (2FA) on your account. cy999's own internal administrative systems require 2FA for all staff access to player data systems.
• Penetration Testing & Audits: cy999's platform and data infrastructure are subject to regular security audits and penetration testing by qualified third-party security professionals.
• Incident Response: cy999 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, cy999 will notify affected players and relevant authorities within the timeframes required by applicable obligations.

9 Your Rights

As a cy999 registered player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the cy999 support team via live chat or by email at [email protected]. cy999 will respond to all data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that cy999 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request that cy999 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to Erasure: You have the right to request that cy999 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to our legal retention obligations described in Section 7.
• Right to Restriction: You have the right to request that cy999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while you have objected to processing and the objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on cy999's legitimate interests. You also have the absolute right to object to the use of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10 Children & Minors

The cy999 platform is strictly intended for adults aged 21 years and above. cy999 does not knowingly collect personal data from any person under the age of 21. The mandatory KYC verification process — which requires submission of a valid CNIC, passport, or driving licence — is specifically designed to prevent underage individuals from accessing the platform.

If cy999 becomes aware that an account has been registered by a person under the age of 21, the account will be immediately and permanently closed. Any personal data collected in connection with that underage account will be deleted from our systems as promptly as practicable, subject only to any minimum retention requirements imposed by anti-money laundering or gaming license obligations.

If you are a parent or guardian and you believe that your child has registered a cy999 account without your knowledge, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

11 International Data Transfers

cy999 operates under an international gaming license and its data infrastructure may involve the storage and processing of personal data on servers located outside of Pakistan. Where your personal data is transferred to a jurisdiction that may not provide the same level of data protection as your home jurisdiction, cy999 ensures that appropriate safeguards are in place to protect your data in accordance with the standards described in this Privacy Policy.

Such safeguards include standard contractual clauses with data processors, binding corporate rules where applicable, and contractual obligations requiring recipient organisations to implement data security standards equivalent to those applied by cy999 directly.

By registering a cy999 account and using the platform, you acknowledge and consent to the transfer of your personal data to cy999's international infrastructure as described in this section, subject to the protections set out herein.

12 Third-Party Links

The cy999 platform may contain links to third-party websites or services — for example, links to payment provider portals accessed during the deposit or withdrawal process. This Privacy Policy applies solely to the cy999 platform and does not extend to any third-party website or service, regardless of how you reach it.

cy999 is not responsible for the privacy practices, content, or data security standards of any third-party website. We encourage you to review the privacy policies of any third-party service you access in connection with your use of cy999, including your chosen payment provider.

13 Policy Amendments

cy999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, gaming license conditions, or platform functionality. The effective date at the top of this page will be updated whenever a material change is made.

Where a material change is made to this Privacy Policy, cy999 will notify registered players by email to the address on file, or by a prominent notice posted on the cy999 platform, with reasonable advance notice of the change taking effect. Your continued use of the cy999 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

cy999 recommends that all registered players review this Privacy Policy periodically to remain current with how their personal data is being handled. Previous versions of this Privacy Policy are available on request from the cy999 support team.

This Privacy Policy was last reviewed and updated on 1 January 2026. Version 3.2.

14 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy, the way cy999 handles your personal data, or how to exercise your data rights, please contact our team through any of the following channels:

• Live Chat: Available 24/7 directly within the cy999 platform. Average response time under 2 minutes. The fastest route for urgent privacy concerns.
• Email: [email protected] — responses within 24 hours on business days. For formal Subject Access Requests or erasure requests, please submit by email so we can maintain a clear written record of your request.

cy999 is committed to resolving all privacy-related concerns promptly and in good faith. If you are not satisfied with the outcome of your complaint after engaging with our support team, you may escalate the matter to the relevant supervisory authority or dispute resolution body applicable under the international gaming license framework under which cy999 operates. Further details are available from our support team on request.