Privacy Policy

1.Introduction

This Privacy Policy ("Policy") is issued by cy999.app ("cy999," "we," "us," or "our") and describes the practices governing the collection, processing, storage, and disclosure of personal data in connection with your use of the cy999 website, games, sports betting markets, and all associated services (collectively, "Services").

cy999 is committed to protecting the personal information of all registered players, including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and across Pakistan. By creating a cy999 account or using any part of our Services, you consent to the data practices described in this Policy. If you do not agree, you must discontinue use of cy999 immediately.

This Policy should be read in conjunction with the cy999 Terms & Conditions. Where there is any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy prevails.

2.Personal Data We Collect

cy999 collects personal data through two primary channels: information you provide directly, and information collected automatically through your use of the Services.

cy999 does not collect full payment card numbers. Financial data collected is limited to references necessary for transaction verification and fraud prevention.

3.How We Use Your Personal Data

cy999 processes your personal data only for legitimate, specified purposes. The primary uses are as follows:

• Account Management: To register, authenticate, and maintain your cy999 account, including identity verification (KYC) as required by our operating standards.
• Transaction Processing: To process deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT; to reconcile PKR balances; and to prevent financial fraud.
• Service Delivery: To provide access to casino games, live tables, crash games, and sports betting markets including PSL, T20 internationals, and UFC events.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling and to enforce player-set limits, self-exclusion requests, and cooling-off periods.
• Customer Support: To respond to queries, complaints, and escalations submitted via live chat or email.
• Legal & Regulatory Compliance: To fulfil any reporting obligations, respond to lawful requests from regulatory bodies, and maintain records as required by applicable law.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the cy999 interface, game library, and payment flows for Pakistani players.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in. You may opt out at any time through your account notification settings.

4.Legal Basis for Processing

cy999 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil your cy999 account agreement, including identity verification, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations.
• Legitimate Interest: Processing necessary for fraud prevention, platform security, and the improvement of cy999 Services, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have explicitly opted in. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5.Data Sharing & Disclosure

cy999 does not sell personal data to third parties. We may share your data in the following limited circumstances:

• Payment Processors: Transaction data is shared with JazzCash, Easypaisa, and banking partners (HBL, UBL, Meezan Bank, Bank Alfalah) solely for the purpose of processing your deposits and withdrawals.
• Game Providers: A unique player identifier (not your name or CNIC) may be shared with licensed casino game studios to enable game session management and RTP reporting.
• Identity Verification Services: KYC documents may be processed by a third-party verification provider operating under strict data processing agreements with cy999.
• Legal & Regulatory Authorities: cy999 will disclose personal data to law enforcement, regulatory bodies, or courts when legally required to do so, or to protect the rights and safety of cy999 and its players.
• Corporate Transfers: In the event of a merger, acquisition, or sale of cy999 assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom cy999 shares data are contractually bound to process personal data only for the specified purpose and in accordance with applicable data protection standards.

6.Cookies & Tracking Technologies

cy999 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary: Session authentication, security tokens, load balancing. These cannot be disabled as they are essential for the Services to function.
• Functional: Language preferences, game lobby settings, last visited game category. These improve your experience on cy999 but are not strictly required.
• Analytical: Anonymised usage data to understand how players interact with the cy999 interface and to identify areas for improvement.
• Marketing: Used only where you have provided consent to receive personalised promotional content. These can be disabled via your browser settings or the cy999 cookie preference panel.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use cy999 Services.

7.Data Retention

cy999 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and identity data: retained for the duration of the account relationship and for a minimum of 5 years following account closure, to comply with AML/KYC obligations.
• Financial transaction records: retained for a minimum of 7 years from the date of each transaction.
• Responsible gaming records (self-exclusion, limit history): retained for the full duration of any exclusion period plus 5 years.
• Marketing consent records: retained until consent is withdrawn and for 12 months thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8.Security Measures

cy999 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption on all pages, payment flows, and API communications.
• Optional two-factor authentication (2FA) via SMS OTP for all cy999 player accounts.
• Automated anomaly detection on login and transaction activity to flag unusual behaviour.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security audits and penetration testing of cy999 infrastructure.

While cy999 takes all reasonable precautions, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable 2FA on their cy999 accounts.

9.Your Data Rights

As a cy999 player, you have the following rights with respect to your personal data:

• Right of Access: Request a copy of the personal data cy999 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to our legal retention obligations. Note that erasure may not be possible while regulatory retention periods are in effect.
• Right to Restriction: Request that cy999 limit the processing of your personal data in certain circumstances.
• Right to Data Portability: Receive a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: Object to processing based on legitimate interest or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the cy999 data team at the email address listed in Section 12. We will respond to all legitimate requests within 30 days.

10.Children's Privacy

cy999 is strictly an adult platform. The Services are not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If cy999 becomes aware that personal data has been collected from a minor, the associated account will be immediately suspended, all data securely deleted, and any deposits returned to the originating payment method. If you believe a minor has created a cy999 account, contact support immediately.

11.Changes to This Privacy Policy

cy999 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file or via a prominent notice on the cy999 platform, no fewer than 7 days before the revised Policy takes effect. The "Effective" date at the top of this document reflects the date of the most recent revision. Continued use of cy999 Services following the effective date of any amendment constitutes your acceptance of the updated Policy.

12.Contact & Data Enquiries

For any privacy-related queries, data access requests, or concerns regarding cy999's handling of your personal information, please contact our data protection team. Email address (plain text — not a clickable link):

Alternatively, reach us via live chat 24/7 from within your logged-in cy999 account. Average response time is under 2 minutes.