Privacy Policy – cy999 Platform

1. Introduction

cy999 ("cy999", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the cy999 Platform at cy999.club ("Platform"). This Privacy Policy ("Policy") describes the types of personal information we collect, how we use it, with whom we share it, and the rights available to you as a data subject.

This Policy applies to all registered players, guest visitors, and any individual whose personal data is processed by cy999 in connection with the Platform's services, including sports betting, online casino, live dealer games, and slot games. By using the cy999 Platform or by completing the registration process, you acknowledge that you have read and understood this Policy.

If you do not agree with any aspect of this Policy, you should not access or use the cy999 Platform. Questions or concerns regarding this Policy may be directed to the cy999 data protection contact detailed in Section 12.

2. Personal Data We Collect

cy999 collects personal data from you in the following ways and categories:

2.1 Registration Data. When you create a cy999 account, we collect:

• Full name as it appears on your official identification.
• Date of birth (to verify that you are 18 years of age or older).
• Email address (used as your primary cy999 login identifier and for account communications).
• Mobile phone number.
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad).
• Username and password (password stored in encrypted form only; cy999 does not store plaintext passwords).

2.2 Identity Verification (KYC) Data. To comply with anti-money laundering (AML) obligations and to verify your age and identity, cy999 may collect:

• Copies of government-issued identification, including your CNIC (Computerised National Identity Card).
• Proof of address documentation.
• Source of funds documentation where required by compliance processes.

2.3 Financial Data. When you make deposits or withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, or Bank Alfalah, cy999 collects transaction metadata including transaction reference numbers, amounts, timestamps, and the payment method used. cy999 does not store full bank account numbers or mobile wallet PINs.

2.4 Usage Data. cy999 automatically collects technical and behavioural data when you access the Platform, including:

• IP address, device type, operating system, and browser type.
• Pages visited, time spent on the Platform, and navigation paths.
• Game sessions, bet history, and wagering patterns.
• Login timestamps and session duration data associated with your cy999 login activity.

2.5 Communications Data. Records of your correspondence with the cy999 support team, including live chat transcripts and email exchanges, are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How cy999 Uses Your Personal Data

cy999 uses the personal data it collects for the following purposes:

• Account Management: To create, administer, and maintain your cy999 account, process deposits and withdrawals, and manage your cy999 login credentials.
• Service Delivery: To provide access to sports betting, casino, slot, and live dealer services on the Platform.
• Identity & Age Verification: To confirm that you are 18 or older and to verify your identity in accordance with KYC and AML obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other illegal activities on the cy999 Platform.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour and to administer deposit limits, self-exclusion requests, and cool-off periods.
• Customer Support: To respond to your queries, complaints, and support requests in a timely manner.
• Legal Compliance: To comply with applicable anti-money laundering laws, licensing obligations, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated usage data (in anonymised or pseudonymised form) to improve the performance, functionality, and user experience of the cy999 Platform.
• Marketing Communications: With your consent, to send you promotional emails or notifications about cy999 offers, bonuses, and events. You may withdraw consent at any time by updating your account communication preferences.

4. Legal Basis for Processing

cy999 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to provide you with the services described in the cy999 Terms & Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with AML legislation, age verification regulations, and lawful regulatory requests.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent.

5. Data Sharing & Third Parties

5.1 Service Providers. cy999 shares personal data with carefully selected third-party service providers who assist in delivering the Platform, including payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah), game content providers, identity verification services, and cloud infrastructure providers. These parties are contractually obligated to process data only on cy999's instructions and in accordance with applicable data protection standards.

5.2 Regulatory & Law Enforcement. cy999 may disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, or where cy999 determines in good faith that such disclosure is necessary to protect the rights, property, or safety of cy999, its players, or the public.

5.3 No Sale of Data. cy999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all assets of cy999, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

6. Cookies & Tracking Technologies

cy999 uses cookies and similar tracking technologies to enhance your Platform experience and to collect usage data as described in Section 2.4. The categories of cookies used include:

• Essential Cookies: Required for the Platform to function, including session management and cy999 login state persistence. These cannot be disabled.
• Analytics Cookies: Used to collect anonymised data about how players interact with the Platform, enabling cy999 to improve performance and usability.
• Preference Cookies: Used to remember your Platform settings and preferences across sessions.

You can control non-essential cookies via your browser settings. Disabling certain cookies may affect the functionality of some Platform features. cy999 does not use third-party advertising cookies or cross-site tracking technologies for external ad targeting.

7. Data Retention

cy999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following:

• Account data is retained for the duration of your active cy999 account and for a minimum of five years after account closure, in accordance with AML record-keeping requirements.
• KYC documentation is retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• Support communications are retained for two years from the date of the communication.
• Marketing consent records are retained until consent is withdrawn and for a period thereafter sufficient to demonstrate compliance.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with cy999's internal data lifecycle procedures.

8. Your Data Rights

Subject to applicable laws, you have the following rights with respect to your personal data held by cy999:

• Right of Access: To request a copy of the personal data cy999 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data, subject to cy999's legal retention obligations.
• Right to Restrict Processing: To request that cy999 limit how it uses your data in certain circumstances.
• Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: To object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes.
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the cy999 data protection team at [email protected]. cy999 will respond to verified requests within 30 days. cy999 reserves the right to require identity verification before processing any data rights request.

9. Data Security

cy999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Measures include 256-bit SSL encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel only, and regular security assessments of the cy999 Platform infrastructure.

Notwithstanding these measures, no method of transmission over the internet or electronic storage is 100% secure. cy999 cannot guarantee absolute security but commits to promptly notifying affected players of any confirmed data breach that poses a material risk to their rights and interests, in accordance with applicable notification requirements.

Players are responsible for maintaining the security of their cy999 login credentials. cy999 will never ask you for your password via email, SMS, or live chat.

10. Children's Privacy

The cy999 Platform is strictly intended for individuals aged 18 and over. cy999 does not knowingly collect personal data from persons under the age of 18. If cy999 becomes aware that it has collected personal data from a minor, it will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on cy999, please notify the cy999 support team immediately.

11. Changes to This Privacy Policy

cy999 reserves the right to update this Privacy Policy at any time to reflect changes in legal obligations, Platform functionality, or data processing practices. Where changes are material, cy999 will notify registered players via the email address associated with their cy999 account. The last-updated date at the top of this page will reflect the most recent revision. Your continued use of the cy999 Platform following notification of changes constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or cy999's data processing practices, you may contact the cy999 data protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the cy999 Platform in English.

cy999 will use reasonable efforts to respond to all privacy-related enquiries within 10 business days.