y789 Privacy Policy

This Privacy Policy is issued by y789 (referred to throughout as "y789", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at y789.bio. y789 operates under an international gaming licence and is responsible for the processing of personal data collected through the Platform.

y789 acts as the data controller in respect of all personal data collected from users of y789.bio. This means y789 determines the purposes for which your personal data is processed and the means by which it is processed, and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about this Privacy Policy or about how y789 handles your personal data, you may contact our dedicated support team at [email protected]. All privacy-related enquiries are handled by our compliance team and will receive a substantive response within five (5) business days.

y789 collects personal data through several channels: directly from you when you register or use the Platform, automatically through your interaction with y789.bio, and from third-party identity verification and payment service providers. The categories of personal data y789 may collect are set out below.

y789 does not collect or process any special categories of personal data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless you have voluntarily disclosed such information in the context of a responsible gaming or support interaction, in which case it will be treated with the highest level of confidentiality.

y789 uses the personal data it collects for the following purposes:

• Account Registration and Management: To create, maintain, and administer your y789 Account, including processing deposits, withdrawals, and bet settlements.
• Identity and Age Verification (KYC): To verify that you are at least 21 years of age and to confirm your identity in accordance with our anti-money laundering obligations and licensing requirements.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and to verify that payment methods are registered in your name.
• Platform Operation and Improvement: To maintain and improve the technical performance of y789.bio, detect and resolve bugs, and develop new features based on usage patterns.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through our live chat and email support channels.
• Responsible Gaming: To monitor gambling behaviour, enforce self-exclusion requests, apply deposit and loss limits, and identify players who may be experiencing gambling-related harm.
• Regulatory Compliance: To meet our legal and licensing obligations, including transaction reporting, audit requirements, and cooperation with lawful regulatory inquiries.
• Direct Marketing (with consent): To send you promotional offers, bonus notifications, and news about y789 products and features, where you have provided your explicit consent and have not subsequently withdrawn it.

y789 processes your personal data on one or more of the following legal bases, depending on the purpose of the processing:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and y789, specifically the Terms and Conditions governing your use of the Platform. This applies to Account management, payment processing, and game operation.
• Legal Obligation: Processing is required for y789 to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering obligations, and reporting requirements imposed by y789's licensing authority.
• Legitimate Interests: Processing is necessary for the legitimate interests pursued by y789, including fraud prevention, Platform security, responsible gaming monitoring, and the general improvement of our services, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where y789 relies on your consent as the legal basis for processing — in particular for direct marketing communications — you have the right to withdraw that consent at any time by contacting [email protected] or updating your communication preferences within your Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

y789.bio uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to gather analytics data that helps us improve user experience for Pakistani players.

y789 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing cookies. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and display settings to personalise your experience on y789.bio.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with y789.bio, including which pages are most visited and where users encounter difficulties. This data helps y789 improve the Platform for all users.
• Security Cookies: Used for fraud prevention, bot detection, and account security purposes, including device fingerprinting to identify suspicious login attempts.

You can control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of y789.bio, including your ability to log in or access certain game features. y789 does not use third-party advertising or behavioural tracking cookies for external ad networks.

y789 does not sell, rent, or trade your personal data to any third party. Personal data is shared only in the following limited and necessary circumstances:

• Payment Processors: Your financial data is shared with payment service providers (including JazzCash, EasyPaisa, and banking partners) solely for the purpose of processing your deposit and withdrawal transactions. These providers are contractually bound to handle your data securely and in accordance with applicable financial regulations.
• KYC Verification Providers: Identity and age verification data (including CNIC, passport, or driving licence images) may be shared with our accredited KYC service provider for the purpose of identity confirmation. KYC providers are required to process data under strict confidentiality obligations.
• Game Content Providers: Where you play games hosted by third-party game studios on the y789 Platform, limited technical data (such as session tokens and bet amounts) is shared with those providers to operate the game correctly. Personal identity data is not shared with game studios.
• Regulatory Authorities: y789 may be required by law or by its licensing authority to disclose personal data to regulatory or law enforcement bodies. y789 will comply with all lawful orders and requests for data disclosure.
• Anti-Fraud and AML Services: Aggregated or flagged transaction data may be shared with anti-money laundering screening services as required by y789's compliance obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of y789's assets, personal data held by y789 may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third parties with whom y789 shares personal data are required to respect the security of your data and to treat it in accordance with applicable data protection law. y789 does not permit third-party service providers to use your data for their own independent marketing purposes.

y789 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, as required by anti-money laundering and licensing regulations.
• Transaction and Bet Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping requirements.
• KYC Documents: Retained for five (5) years from Account closure or from the date of the last transaction, whichever is later.
• Support and Communications Records: Retained for three (3) years from the date of the communication, or longer where the communication relates to an unresolved dispute or regulatory matter.
• Marketing Consent Records: Retained for the duration of your marketing consent plus two (2) years after withdrawal of consent, as evidence of the consent history.

After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymised data is retained for analytical or statistical purposes, it is no longer considered personal data and is not subject to the provisions of this Privacy Policy.

As a player on y789, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected].

• Right to Access: You may request a copy of the personal data y789 holds about you. We will provide this within thirty (30) days of receiving your verified request.
• Right to Rectification: If any personal data y789 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Where possible, you may also update certain personal details directly within your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that y789 delete your personal data. This right is subject to limitations where y789 is required to retain data to comply with legal obligations, resolve disputes, or enforce our Terms and Conditions.
• Right to Restrict Processing: In certain circumstances, you may request that y789 temporarily suspend the processing of your personal data — for example, while the accuracy of the data is being verified.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request that y789 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data where y789 relies on legitimate interests as the legal basis. y789 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where y789 processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

y789 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two (2) months, in which case y789 will inform you of the extension and the reasons for it within the initial thirty-day period.

y789 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your browser and y789.bio
• AES-256 encryption for sensitive data at rest, including financial records and KYC documents
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Regular penetration testing and third-party security audits of the Platform infrastructure
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Intrusion detection and 24-hour security monitoring of all production systems
• Formal data breach response procedures with defined escalation and notification timelines

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, y789 will notify affected players without undue delay, providing details of the nature of the breach, the categories of data affected, and the steps y789 has taken or proposes to take in response.

You can further protect your Account by using a strong and unique password, enabling any two-factor authentication options available within your Account settings, and promptly reporting any suspected unauthorised access to [email protected].

If you are a parent or guardian and believe that your child or a minor in your care may have registered an Account or provided personal data to y789, please contact us immediately at [email protected]. y789 will investigate the report promptly, close the Account if the individual is confirmed to be under 21, and ensure that any personal data relating to the minor is securely deleted from our systems.

y789 employs age verification measures during the registration process and may conduct further KYC age verification checks at any time. These measures are part of our commitment to responsible gaming and the protection of vulnerable individuals.

y789 processes payment data in connection with deposits and withdrawals made via JazzCash, EasyPaisa, HBL Bank Transfer, UBL Bank Transfer, Meezan Bank Transfer, Visa, and Mastercard. The handling of payment data is subject to the following specific provisions:

• y789 does not store full card numbers, CVV codes, or complete bank account credentials on its own servers. Where card or banking data is required, it is processed directly by our PCI-DSS compliant payment processing partners.
• Payment references and transaction identifiers are stored by y789 for the purposes of transaction reconciliation, dispute resolution, and AML compliance.
• All deposits must be made from a payment method registered in your own name. y789's AML procedures include verification of payment method ownership, and any deposit identified as originating from a third-party payment method may trigger an Account review.
• Transaction data, including the amount, method, and timestamp of every deposit and withdrawal, is retained for a minimum of five (5) years as required by financial regulatory obligations applicable to y789's licensed operations.

By using y789's payment services, you acknowledge that your payment data will be processed and stored in accordance with this Privacy Policy and the privacy policies of the relevant payment service providers.

With your prior consent, y789 may send you direct marketing communications by email regarding bonuses, promotions, new game launches, PSL cricket betting markets, and other platform news relevant to Pakistani players.

y789 will only send marketing communications where you have clearly opted in during registration or through your Account communication preferences. We will never send unsolicited marketing emails or share your contact details with third-party marketers for their own promotional purposes.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email from y789
• Updating your communication preferences within your y789 Account settings
• Contacting our support team at [email protected] and requesting removal from marketing communications

Withdrawal of marketing consent will not affect your ability to receive transactional and operational communications from y789, such as Account confirmation emails, deposit confirmations, withdrawal notifications, and security alerts. These communications are necessary for the operation of your Account and cannot be opted out of while your Account remains active.

y789 operates under an international gaming licence and, as a result, your personal data may be processed or stored on servers located outside of Pakistan. Where personal data is transferred internationally, y789 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Such safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses
• Transfer to jurisdictions that maintain an adequate level of data protection as recognised by relevant regulatory frameworks
• Technical and organisational security measures applied consistently across all data processing locations

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact [email protected] and our compliance team will respond to your enquiry.

y789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. The effective date of the current version of this Privacy Policy is clearly stated at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your data is used — y789 will notify registered Players by email to their registered address at least fourteen (14) days before the revised Policy takes effect. Your continued use of y789.bio after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how y789 is protecting your personal information. The most current version of this Policy will always be accessible at y789.bio/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way y789 processes your personal data, please contact us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the Platform

y789 aims to acknowledge all privacy-related enquiries within twenty-four (24) hours and to provide a full response within thirty (30) days. For data subject rights requests, where additional time is required, y789 will inform you within the initial thirty-day period and provide an estimated timeline for resolution.

For matters related to responsible gaming, self-exclusion, or deposit limit management, please visit the Responsible Gaming page or contact our live support team directly.