yo99 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains in plain terms exactly what data yo99 collects, why we collect it, how we use and secure it, and what rights you hold over your information. This policy applies to all yo99 services accessed via yo99.bio, including casino games, sports betting, the cashier, and all customer support channels.
The cards below summarise the six pillars of the yo99 Privacy Policy. They are provided as a quick-reference overview only. All players are required to read the complete policy below in full before using the yo99 platform.
yo99 collects registration details (name, CNIC, email, mobile number), financial transaction data in PKR, KYC verification documents, device and browser data, and customer support interaction records. We collect only what is necessary to operate a secure, compliant gaming platform for Pakistani users.
Your data is used to manage your yo99 account, process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, verify your identity under KYC requirements, prevent fraud and money laundering, deliver customer support, and — with your consent — send promotional communications about yo99 offers and games.
All data transmitted between your device and yo99 is encrypted using 256-bit SSL technology. Stored personal data is protected by AES-256 encryption at rest. Access to player data within yo99 is restricted to authorised personnel on a strict need-to-know basis. yo99 undergoes regular third-party security audits to verify the integrity of our data protection infrastructure.
yo99 does not sell your personal data. We share data only with trusted third-party service providers strictly necessary for platform operation — including payment processors (JazzCash, EasyPaisa, HBL), identity verification providers, game software suppliers, and fraud-prevention services. All third-party processors are bound by data processing agreements that comply with applicable data protection standards.
You have the right to access the personal data yo99 holds about you, to request correction of inaccurate data, to request deletion of your data (subject to legal retention requirements), to withdraw marketing consent at any time, and to request restriction of processing in certain circumstances. All data rights requests can be submitted to the yo99 support team via live chat or email.
yo99 retains account and financial transaction data for a minimum of five years following account closure, in compliance with anti-money-laundering regulations applicable to internationally licensed gaming operators. KYC documents are retained for the same period. Marketing preference data is retained only for as long as you hold an active yo99 account or until you withdraw consent, whichever comes first.
Summary Statement: yo99 ("we", "us", "the Platform") respects the privacy of every registered player and visitor. This Privacy Policy describes how we collect, use, store, share, and protect personal data in connection with the yo99 platform accessible at yo99.bio. By registering an account or using any yo99 service, you acknowledge that you have read this policy and consent to the data practices described herein.
yo99 operates one of Pakistan's most comprehensive online gaming and sports betting platforms, offering cricket betting, PSL markets, jackpot slots, live dealer casino games, and a full-service PKR cashier. In the course of providing these services to players across Karachi, Lahore, Islamabad, Faisalabad, Peshawar, and beyond, yo99 necessarily collects and processes personal data belonging to its registered users.
yo99 takes its data protection obligations seriously. This Privacy Policy has been prepared in accordance with internationally recognised data protection principles and the applicable regulatory standards governing the yo99 operating licence. It sets out in clear, accessible language precisely how your personal data is handled at every stage of your relationship with the yo99 platform — from initial registration through to account closure.
This policy applies to all personal data collected through the yo99 website at yo99.bio, the yo99 mobile platform, the cashier and payment processing functions, customer support channels including live chat and email, and any promotional or marketing communications sent by yo99 with your consent. It does not apply to third-party websites that may be linked to from the yo99 platform — yo99 is not responsible for the privacy practices of external websites.
Age Policy: yo99 does not knowingly collect or process personal data belonging to individuals under the age of 21. If you are under 21 years of age, you must not register an account or use the yo99 platform. If yo99 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. Please gamble responsibly.
For the purposes of this Privacy Policy, yo99 acts as the data controller in respect of all personal data collected from registered players and platform visitors. As data controller, yo99 determines the purposes for which and the means by which personal data is processed.
Where yo99 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, and fraud-detection services — those third parties act as data processors and are bound by data processing agreements that require them to process personal data only in accordance with yo99's instructions and applicable data protection law.
All data rights requests, privacy complaints, and questions relating to this Privacy Policy should be directed to the yo99 Data Protection contact, reachable via the support channels described in Section 14 of this policy.
When you create a yo99 account, we collect your full legal name as it appears on your CNIC, your date of birth, your registered Pakistani mobile number, a valid email address, and your chosen account username. This information forms the foundation of your player identity on the yo99 platform.
To comply with anti-money-laundering regulations and to verify that all players are 21 years of age or older, yo99 conducts Know Your Customer (KYC) checks on all accounts prior to processing withdrawal requests. KYC verification requires submission of a clear copy of your National Identity Card (CNIC), and in certain cases, a recent proof of address document. These documents are processed securely and retained in accordance with Section 7 of this policy.
yo99 records all deposits, withdrawals, bonus credits, wager placements, and game outcomes associated with your account. Transaction data includes the amount in PKR, the payment method used (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank), the transaction timestamp, and the transaction reference number. yo99 does not store full payment account credentials — payment authentication is handled directly by the respective payment processor.
When you access the yo99 platform, our servers automatically collect certain technical data, including your IP address, device type and model, operating system, browser type and version, session duration, pages visited, and approximate geolocation derived from your IP address. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
When you contact yo99 via live chat or email, we retain a record of the communication, including the content of messages, the date and time of contact, the nature of the query or complaint, and the outcome of the interaction. These records are maintained for quality assurance, training, and dispute resolution purposes.
yo99 records data relating to your gaming activity on the platform, including games played, bet amounts and outcomes, session duration, and responsible gaming tool settings (such as deposit limits and self-exclusion status). This data supports responsible gaming monitoring, fraud detection, and personalisation of the gaming experience where you have provided consent for personalisation.
| Data Category | Examples | Collection Method |
|---|---|---|
| Registration Data | Name, CNIC, DOB, email, mobile | Provided by player at signup |
| KYC Documents | CNIC scan, proof of address | Submitted by player for verification |
| Financial Data | PKR deposits, withdrawals, wagers | Generated automatically via cashier |
| Technical Data | IP address, device, browser, geolocation | Collected automatically on access |
| Support Records | Chat transcripts, email threads | Collected during support interactions |
| Gaming Behaviour | Games played, session length, limits set | Generated automatically during gameplay |
yo99 processes personal data only where a lawful basis for processing exists under applicable data protection law. The primary lawful bases on which yo99 relies are set out below:
The majority of data processing by yo99 is necessary for the performance of the contract between yo99 and the player — namely, the provision of online gaming and sports betting services. This includes processing registration data to create and maintain your account, processing financial data to execute PKR deposits and withdrawals, and maintaining gaming records to resolve disputes and calculate winnings.
yo99 is required by applicable anti-money-laundering regulations, licensing conditions, and financial crime prevention obligations to collect and retain certain categories of personal data, particularly KYC and financial transaction data. Processing carried out under this basis is mandatory and cannot be opted out of — failure to provide required KYC documentation will result in the inability to process withdrawals from your yo99 account.
yo99 processes technical, device, and behavioural data on the basis of its legitimate interests in maintaining the security of the platform, detecting and preventing fraud, identifying and managing problem gambling, and improving the quality and performance of yo99 services. yo99 has assessed that these legitimate interests are not overridden by player privacy rights given the nature, scope, and limited use of the data involved.
Where yo99 sends marketing communications or uses your data for personalisation of the gaming experience beyond what is strictly necessary for service provision, yo99 relies on your freely given, specific, and informed consent as the lawful basis for that processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. See Section 10 for details on managing your marketing preferences.
yo99 does not sell, rent, or trade personal data to any third party for commercial purposes. Data sharing is limited to the following categories of recipient, each of whom receives only the minimum data necessary for their specific function:
No Cross-Border Marketing: yo99 does not share your personal data with third-party marketing networks, data brokers, or advertising platforms. All promotional communications from yo99 are sent directly by yo99 and are only sent to players who have explicitly opted in to receiving marketing communications.
yo99 implements a multi-layered security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key technical and organisational security measures include:
While yo99 takes all reasonable technical and organisational steps to protect your personal data, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own yo99 account login credentials. If you suspect that your account has been compromised, contact the yo99 support team immediately via live chat.
yo99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years post-closure | AML regulatory requirement |
| KYC Documents (CNIC etc.) | 5 years from account closure | AML regulatory requirement |
| Financial Transaction Records | 5 years from transaction date | AML & licensing obligation |
| Gaming History & Session Data | Duration of account + 2 years post-closure | Dispute resolution & responsible gaming |
| Customer Support Records | 3 years from last interaction | Quality assurance & dispute resolution |
| Marketing Consent Records | Until consent withdrawn or account closed | Consent-based processing record |
| Technical / Device Logs | 12 months on a rolling basis | Security monitoring |
At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with yo99's data destruction procedures. Anonymised aggregated data (from which no individual player can be identified) may be retained indefinitely for statistical and analytical purposes.
As a player on the yo99 platform, you hold the following rights in respect of your personal data. Requests to exercise any of these rights should be submitted to the yo99 support team via live chat or to the support email address in Section 14. yo99 will respond to all data rights requests within 30 days of receipt.
You have the right to request a copy of the personal data yo99 holds about you. yo99 will provide this in a structured, commonly used, and machine-readable format. The first access request is provided free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.
If any personal data yo99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Certain data corrections — for example, changes to your registered name — may require submission of supporting documentation to verify the updated information.
You may request that yo99 delete your personal data. This right is subject to important limitations: yo99 is legally required to retain certain categories of data (particularly KYC and financial transaction records) for the periods described in Section 7, and erasure requests cannot override these mandatory retention obligations. Where deletion is not possible due to legal retention requirements, yo99 will restrict processing of the relevant data to the minimum necessary.
In certain circumstances — for example, where you contest the accuracy of data held by yo99, or where you have objected to processing on the basis of legitimate interests — you may request that yo99 restrict its processing of your personal data to storage only while the matter is resolved.
Where processing is carried out on the basis of your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
You have the right to object to the processing of your personal data where yo99 relies on legitimate interests as the lawful basis for processing. yo99 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.
yo99 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit yo99.bio. The following categories of cookies are used:
You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the yo99 platform. yo99 does not use third-party advertising cookies or cross-site tracking technologies.
yo99 may send you promotional communications about bonuses, new games, PSL cricket betting promotions, jackpot events, and VIP programme updates, but only where you have explicitly opted in to receiving such communications during registration or through your account preferences settings.
You may withdraw your consent to receive marketing communications at any time by updating your preferences in the yo99 account dashboard, or by contacting the yo99 support team via live chat or email. Withdrawal of marketing consent does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent as a necessary part of the service and are not subject to opt-out.
yo99 does not share your contact details with third-party marketing organisations and does not engage in the purchase or rental of marketing lists. All promotional communications from yo99 are sent directly by yo99 and will be clearly identified as originating from yo99.
yo99 strictly enforces a 21+ age policy across all platform services. yo99 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. The yo99 registration process includes an explicit age declaration, and all withdrawal requests are subject to CNIC-based age verification.
If yo99 discovers or is notified that personal data has been collected from an individual under the age of 21, yo99 will take the following immediate steps: suspend the relevant account; delete all personal data associated with that account that is not subject to mandatory legal retention; and where appropriate, notify the relevant supervisory authority. Any winnings accumulated in an underage account will be voided.
Parents and guardians who believe a minor may have registered a yo99 account should contact the yo99 support team immediately via live chat or at the support email address in Section 14. yo99 will investigate and act on all such reports promptly and with full confidentiality.
Parental Controls: yo99 recommends that parents and guardians use device-level parental control tools to restrict access to online gaming platforms. yo99 supports responsible gaming at every level and takes the protection of minors extremely seriously. If you are concerned about a young person's access to online gambling, please visit the Responsible Gaming page for further resources.
In certain circumstances, personal data collected by yo99 may be processed by third-party service providers located outside Pakistan. This may occur, for example, in connection with game software suppliers, fraud detection services, or cloud infrastructure providers whose servers are located in other jurisdictions.
Where personal data is transferred outside Pakistan, yo99 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required by applicable data protection law. Such safeguards include contractual data protection clauses with the receiving party, restrictions on further transfer, and requirements for equivalent technical security standards.
By using the yo99 platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data where necessary for the operation of the yo99 platform, subject to the safeguards described above.
yo99 reserves the right to update, amend, or replace this Privacy Policy at any time. Material changes to this policy — for example, changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — will be communicated to registered players via email to the registered address on file, and via a prominent notice on the yo99 platform, no less than 14 days before the changes take effect.
The updated Privacy Policy will display the revised "Effective" date at the top of this page. Your continued use of the yo99 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you must cease using the platform and contact the support team to initiate account closure.
Minor changes — such as corrections of typographical errors, clarifications that do not affect the substance of the policy, or updates to contact information — may be made without advance notice. The current version of this Privacy Policy is always the version published at yo99.bio/privacy-policy.
If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 8, or wish to raise a privacy concern or complaint regarding how yo99 handles your personal data, please contact the yo99 Data Protection team through the following channels:
yo99 will acknowledge receipt of all data rights requests within 48 hours and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, yo99 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.
If you are not satisfied with yo99's response to a privacy complaint or data rights request, you have the right to escalate the matter to the applicable data protection supervisory authority under the jurisdiction of the yo99 operating licence. Details of the relevant authority are available from the yo99 support team upon request.
Identity Verification for Data Requests: To protect the security of player data, yo99 is required to verify the identity of the person submitting a data rights request before disclosing or amending any personal data. You will be asked to confirm account details and, where appropriate, to provide a copy of your CNIC as proof of identity before your request is processed. This verification step is a security measure designed to protect you.
Your data is protected by 256-bit SSL encryption and handled in strict accordance with our Privacy Policy. Explore cricket betting, jackpot slots, and live dealer games — all in PKR, with JazzCash and EasyPaisa. 21+ only. Please gamble responsibly.
Explore yo99 Casino Terms & Conditions