Your privacy matters to us. This Privacy Policy explains exactly what personal information xy999 collects from players across Pakistan, how we use it, who we may share it with, and the controls you have over your own data.
xy999 uses 256-bit SSL encryption and strict data handling protocols to keep your personal and financial information secure at all times.
Six core principles that guide how we collect, protect, and respect your personal data on the xy999 platform.
xy999 only collects the personal data that is strictly necessary to operate your account, process payments, and meet our legal compliance obligations. We do not collect data for its own sake.
All data stored by xy999 is protected using industry-standard encryption, secure server infrastructure, and strict internal access controls. Only authorised personnel can access your account data.
You have the right to access, correct, and request deletion of your personal data held by xy999 at any time. We respect your data rights and respond to all valid requests promptly.
Financial details processed through EasyPaisa, JazzCash, HBL, UBL, and other payment channels are handled by certified payment processors. xy999 never stores your full card or wallet credentials on our servers.
xy999 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely for operating and improving the xy999 platform.
We explain clearly what data we collect, why we collect it, and who may see it. No hidden data practices — if it is in this Privacy Policy, it is exactly what happens. Nothing more.
xy999 ("we", "us", "our", or "xy999") is Pakistan's premier online gaming platform, offering cricket betting, live casino games, slot titles, and fishing games to players across the country. We are committed to protecting the privacy of our registered players and all individuals who interact with the xy999 platform, website, and support channels.
This Privacy Policy sets out in plain, clear language exactly how xy999 collects, uses, stores, shares, and protects personal data. It also explains the rights you hold over your own data and how to exercise those rights. The policy applies to all xy999 platform users regardless of whether they access the platform from a desktop browser, a mobile browser, or a mobile app on a device registered in Pakistan or elsewhere.
This Privacy Policy should be read alongside the xy999 Terms & Conditions and Responsible Gaming Policy, both of which form part of the broader agreement between you and xy999. Where there is a conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall take precedence on matters of platform use, and this Privacy Policy shall take precedence on all matters specifically relating to personal data handling.
xy999 operates under international gaming compliance standards and applies data protection principles consistent with globally recognised frameworks. We take our obligations to players across Pakistan seriously and have designed our data practices accordingly.
xy999 collects personal data through several distinct channels: directly from you when you register an account, through your ongoing use of the platform, through payment processing interactions, and through our customer support communications. Below is a comprehensive breakdown of the categories of personal data we collect.
When you create an xy999 account, we collect the following information:
As part of our Know Your Customer (KYC) obligations, xy999 may request and collect:
When you make deposits or request withdrawals, xy999 collects:
xy999 does not store full bank account numbers or complete wallet credentials on our own servers. Payment processing is handled by certified third-party payment processors.
We maintain detailed records of your gaming activity on the xy999 platform, including:
When you access xy999, our systems automatically collect certain technical data:
When you contact xy999 Support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the support agent who handled your query. This data is used for quality assurance, dispute resolution, and platform improvement purposes.
xy999 uses the personal data we collect for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, device data |
| Age verification (21+ compliance) | Date of birth, KYC documents |
| Processing deposits and withdrawals | Financial and transaction data |
| Anti-money laundering (AML) compliance | KYC data, transaction data, gaming activity |
| Fraud prevention and security monitoring | Technical data, transaction data, IP address |
| Responsible gaming monitoring | Gaming activity, session data, responsible gaming tools usage |
| Customer support and dispute resolution | Communications data, account data, gaming activity |
| Promotional communications (where consented) | Email address, phone number, gaming preferences |
| Platform analytics and improvement | Technical data, gaming activity (aggregated/anonymised) |
| Legal and regulatory compliance | All categories, as required by applicable frameworks |
xy999 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. Where automated tools are used — for example, in fraud detection — a human compliance team member reviews any resulting account restrictions before they are applied.
xy999 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:
Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by updating your notification preferences in your xy999 account settings or by contacting xy999 Support via live chat. Withdrawing consent for promotional communications does not affect the lawfulness of processing carried out before withdrawal.
Given the financial nature of the xy999 platform, payment data and KYC documentation are handled with the highest level of care. All KYC documents submitted to xy999 — including CNIC copies and proof of address — are stored on secure, encrypted servers with strict access controls. Only trained members of the xy999 compliance team are authorised to access KYC documents.
Payment method verification — for example, confirming that the EasyPaisa or JazzCash account used for a deposit is registered under your own name — is carried out as part of our AML and fraud prevention obligations. This is not optional and applies to all players on the xy999 platform regardless of deposit volume.
For USDT TRC20 cryptocurrency transactions, xy999 records the wallet address used for deposits and withdrawals. Blockchain transaction hashes may also be retained for audit trail purposes. xy999 does not control or operate any blockchain network and is not responsible for transaction delays caused by network congestion.
xy999 uses cookies and similar tracking technologies to operate the platform, remember your login session, and analyse how players interact with different areas of the site. Below is a summary of the types of cookies we use.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Session | Maintain your login session and keep the platform functional during your visit | Session (deleted on browser close) |
| Preferences | Remember your language, display settings, and responsible gaming timer preferences | Up to 12 months |
| Analytics | Understand which pages and features are most used to improve the xy999 platform | Up to 24 months |
| Security | Detect fraudulent logins and flag suspicious device or IP activity | Up to 30 days |
Essential cookies are required for the xy999 platform to function and cannot be disabled without preventing you from using the service. Analytics and preference cookies can be managed through your browser settings. Most modern browsers — including Chrome on Android, which is widely used across Pakistan — allow you to block or delete cookies through the browser's privacy settings menu.
xy999 does not use third-party advertising cookies or serve behavioural advertising based on your xy999 activity to external ad networks.
xy999 does not sell, rent, or trade your personal data to any third party. We share your personal data only in the limited and specific circumstances described below.
Transaction data is shared with our payment processing partners — including EasyPaisa integration services, JazzCash, HBL, UBL, Meezan Bank, SadaPay, and Raast — solely for the purpose of processing your deposits and withdrawals. These processors are bound by their own data protection obligations and are not permitted to use your data for any other purpose.
KYC document verification may be carried out by a specialist third-party identity verification service. This provider receives only the documents and data necessary to confirm your identity and is prohibited from retaining or using that data beyond the scope of the verification service.
xy999 hosts games from third-party providers, including slot and live casino content. These providers may receive anonymised or pseudonymised session data for the purpose of ensuring fair game operation and technical troubleshooting. Game providers do not receive your full personal identity data, financial data, or contact details.
xy999 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities if required to do so by a lawful order, warrant, or legal obligation. We will also disclose data where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or serious harm.
In the event that xy999 undergoes a merger, acquisition, or sale of substantially all its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via your registered email address prior to your data being transferred, and the acquiring entity will be required to honour this Privacy Policy.
xy999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or to comply with applicable legal and compliance obligations. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML compliance, legal obligations |
| KYC documents | Duration of account + 5 years after closure | Regulatory and AML requirements |
| Transaction records | 7 years from transaction date | Financial compliance and audit requirements |
| Gaming activity logs | 3 years from last activity | Responsible gaming, dispute resolution |
| Support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical / session data | 12 months | Security monitoring, fraud prevention |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of lawful basis for marketing |
After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical and platform analytics purposes.
As a player on the xy999 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact xy999 Support via live chat or email us at [email protected].
You have the right to request a copy of all personal data xy999 holds about you. We will respond to valid access requests within 30 days. The response will include a summary of all data categories held, the purposes for which they are processed, and details of any third parties with whom your data has been shared.
If you believe that any personal data xy999 holds about you is inaccurate or incomplete, you have the right to request that we correct it. For data that you can update directly — such as your email address or contact number — please do so through your account settings. For data that requires manual correction by the xy999 team (such as name corrections backed by a CNIC), please contact Support.
You may request that xy999 delete your personal data. We will honour erasure requests where there is no overriding legal obligation to retain the data. Please note that due to our AML, KYC, and financial compliance obligations, we are required to retain certain categories of data for the retention periods set out in Section 8, even if you close your xy999 account. Data subject to these obligations cannot be deleted upon request during the applicable retention period.
You have the right to ask xy999 to suspend the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction to erasure. Where processing is restricted, we will continue to store your data but will not actively use it until the restriction is lifted.
You have the right to object to the use of your personal data for direct marketing purposes at any time. You can withdraw your consent for promotional communications by updating your notification preferences within your xy999 account settings or by contacting Support. Once you opt out, xy999 will cease sending marketing communications within 5 business days.
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, machine-readable format and to request that we transmit it directly to another data controller where technically feasible. Contact xy999 Support to submit a portability request.
xy999 takes its age restriction obligations seriously. Age verification through CNIC submission is a mandatory part of the KYC process and is specifically designed to prevent underage individuals from accessing the platform. If you believe a minor has accessed or registered on xy999, please contact xy999 Support immediately via live chat so that appropriate action can be taken.
xy999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
Despite these measures, no internet-based platform can guarantee absolute security. You play an important role in keeping your xy999 account secure by using a strong, unique password, enabling OTP verification, and never sharing your login credentials with anyone. xy999 Support will never ask for your password.
The xy999 platform integrates with a limited number of third-party services necessary for its operation. These include payment processors, identity verification providers, and game content providers. Each of these third parties is carefully vetted by xy999 and is required to demonstrate adequate data protection practices before integration.
xy999 does not integrate with social media platforms, external advertising networks, or data analytics companies in a way that shares identifiable player data with those platforms. Any analytics tools used by xy999 operate on anonymised or pseudonymised data only, ensuring that no individual player can be identified in any analytics output.
Links to other websites — where they appear on the xy999 platform — are provided for informational purposes only. xy999 is not responsible for the privacy practices of third-party websites and encourages you to review the privacy policies of any external sites you visit.
xy999 operates under international gaming compliance frameworks, and some of the third-party service providers we work with — including identity verification and game content providers — may process data on servers located outside Pakistan. Where such transfers occur, xy999 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy.
Safeguards used for international transfers may include contractual data protection clauses agreed between xy999 and the receiving party, or reliance on the receiving party's participation in recognised international data protection frameworks. If you have questions about specific international transfers of your data, please contact xy999 Support.
xy999 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable legal requirements, or improvements to the xy999 platform. The date shown in the "Last Updated" notice at the top of this page reflects when the current version came into effect.
Where changes to this Privacy Policy are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — xy999 will notify registered players by email to their registered address and by displaying a prominent notice on the xy999 platform prior to the changes taking effect.
Your continued use of the xy999 platform following any update to this Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree to any material change, you have the right to close your xy999 account and request deletion of your data (subject to the retention obligations described in Section 8) before the updated policy takes effect.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how xy999 has handled your personal data, please contact us through the following channels:
xy999 aims to resolve all privacy-related queries and complaints within 30 days of receipt. For complex requests, we may require additional time and will notify you of any extension within the initial 30-day period. We take all privacy complaints seriously and will work with you in good faith to reach a satisfactory resolution.
If you are not satisfied with xy999's response to your complaint, you have the right to escalate the matter to the relevant data protection authority or gaming regulatory body under whose framework xy999 operates. xy999 will cooperate fully with any regulatory investigation into our data handling practices.
Join thousands of players from Karachi, Lahore, Islamabad, and Faisalabad on xy999. Instant deposits via EasyPaisa and JazzCash, live cricket betting, slots, and more — all in a secure, 21+ verified environment.