Data Protection
yoyo99 Privacy Policy — How We Collect, Use, and Protect Your Personal Information
Your privacy matters to yoyo99. This document explains in plain, clear English exactly what personal data we collect from Pakistani players, why we collect it, how we use it, who we may share it with, and what rights you have over your own information at every stage of your yoyo99 account lifecycle.
Document Navigation
Table of Contents
This Privacy Policy is structured into the following sections. Each section addresses a specific aspect of how yoyo99 handles your personal data.
Full Privacy Policy
yoyo99 Privacy Policy — Complete Text
This Privacy Policy explains how yoyo99 ("we", "us", "our") collects, processes, stores, and protects the personal information of users ("you", "your") who register for and use the yoyo99 online casino and sports betting platform at yoyo99.pro. By registering a yoyo99 account, you acknowledge and consent to the data practices described in this document.
Who We Are and Scope of This Policy
yoyo99 is an online casino and sports betting platform operating at yoyo99.pro, offering games, live casino tables, jackpot slots, cricket sportsbook, cockfighting streams, and associated account and payment services to registered users. For the purposes of this Privacy Policy, yoyo99 is the data controller responsible for the personal information collected from and about its users.
This Privacy Policy applies to all personal data processed in connection with:
- The registration and maintenance of a yoyo99 account
- The use of any game, betting market, or entertainment feature on the yoyo99 platform
- All deposit, withdrawal, and payment transactions conducted through yoyo99
- All communications between you and the yoyo99 support team
- Your browsing activity on the yoyo99 website, whether or not you are logged in
- The receipt of marketing and promotional communications from yoyo99, where you have consented to receive them
This Policy does not apply to third-party websites, applications, or services that may be linked to or from the yoyo99 platform. yoyo99 is not responsible for the privacy practices of such third parties, and we encourage you to review their policies separately.
What Personal Data We Collect
yoyo99 collects personal data through several channels, including information you provide directly during registration and account use, data generated automatically by your activity on the platform, and information received from third-party payment and identity verification providers.
Information You Provide Directly:
- Identity Information: Your legal full name, date of birth, and Pakistani CNIC number, collected for the purposes of account registration and mandatory identity verification (KYC).
- Contact Information: Your email address, Pakistani mobile phone number, and mailing address where provided.
- Financial Information: Payment method details necessary to process deposits and withdrawals — including Easypaisa mobile wallet numbers, JazzCash account identifiers, Raast account references, SadaPay account details, and bank account information for HBL, UBL, MCB, and other Pakistani commercial banks. yoyo99 does not store full debit or credit card numbers.
- Account Credentials: Your chosen username and a hashed (encrypted) version of your password. yoyo99 never stores your password in plain text.
- Communications: The content of any messages you send to yoyo99 through live chat, email, or any other communication channel, including support queries, complaints, and feedback.
Information Collected Automatically:
- Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
- Usage Data: Pages visited, games played, bets placed (including stakes and outcomes), session duration, login timestamps, and navigation patterns within the yoyo99 platform.
- Location Data: Approximate geographic location derived from your IP address. yoyo99 does not collect precise GPS-level location data.
- Cookie and Tracking Data: Data collected through cookies and similar technologies as described in Section 6 of this Policy.
Why We Collect Your Personal Data
yoyo99 processes your personal data only for specific, legitimate purposes. We do not collect data speculatively or beyond what is necessary for these stated purposes. The primary purposes for which we process your data are:
- Account Registration and Management: To create, maintain, and administer your yoyo99 account, verify your identity, and ensure the security and integrity of your account and its associated balance.
- Identity Verification (KYC/AML Compliance): To comply with applicable know-your-customer (KYC) and anti-money laundering (AML) obligations, including verifying your age (18+ requirement), identity, and source of funds where required by our compliance framework.
- Payment Processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, Raast, SadaPay, and bank transfer, and to maintain accurate financial records of all transactions on your account.
- Platform Operation and Game Delivery: To provide access to yoyo99's full game catalogue, manage your betting activity, record game results, and maintain your balance and transaction history accurately.
- Customer Support: To respond to your queries, process complaints, and provide account assistance through the yoyo99 support team.
- Responsible Gaming: To administer self-exclusion requests, deposit limit settings, session time tools, and other responsible gaming controls you activate on your account, and to monitor usage patterns for signs of problematic gambling behaviour.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, multiple account creation, and other prohibited activities.
- Legal and Regulatory Compliance: To comply with applicable laws, regulations, and lawful requests from regulatory authorities, law enforcement agencies, and courts.
- Marketing Communications (where consented): To send you promotional offers, bonus notifications, and platform updates by email or push notification, where you have given explicit consent to receive such communications. You may withdraw this consent at any time.
- Platform Improvement: To analyse usage patterns and technical data in aggregated, anonymised form to improve platform performance, game selection, and user experience.
How We Process and Store Your Data
yoyo99 processes your personal data using secure systems hosted on servers with appropriate physical and technical security controls. All data in transit between your device and yoyo99's servers is encrypted using 256-bit Transport Layer Security (TLS/SSL) — the same encryption standard applied by major Pakistani commercial banks including HBL and UBL.
yoyo99 applies the principle of data minimisation: we collect and process only the data that is necessary for the specific, stated purpose for which it is being used. Data is not used for purposes that are incompatible with those stated in this Policy without additional notice to you.
Access to your personal data within the yoyo99 organisation is strictly limited to personnel who have a legitimate operational need to access it — for example, support staff handling your account query, compliance staff conducting KYC verification, or payment operations staff processing your withdrawal. All such personnel are subject to confidentiality obligations.
Who We Share Your Data With
yoyo99 does not sell your personal data to third parties. We do not share your personal information for third-party marketing purposes without your explicit consent. We share your data only in the following limited, specific circumstances:
- Payment Processors: We share the minimum necessary financial and identity information with payment processors required to execute your deposit or withdrawal — for example, Easypaisa, JazzCash, Raast, SadaPay, or your nominated Pakistani bank. These processors operate under their own privacy frameworks and contractual data protection obligations with yoyo99.
- KYC and Identity Verification Providers: We may engage specialised third-party identity verification services to assist with CNIC validation and age verification. These providers process only the identity data strictly necessary for verification and are contractually prohibited from using it for any other purpose.
- Game and Software Providers: Third-party game providers who supply live casino tables, slot games, and other content to the yoyo99 platform may receive anonymised session and technical data necessary to deliver their services. They do not receive identifiable personal information beyond what is operationally necessary.
- Regulatory Authorities and Law Enforcement: yoyo99 will disclose personal data to regulatory bodies, law enforcement agencies, and courts where required to do so by law, court order, or in connection with an investigation into fraud, money laundering, or other illegal activity involving your account.
- Fraud Prevention and AML Agencies: We may share information with specialist fraud prevention and anti-money laundering databases and agencies where required by our compliance obligations or where yoyo99 has reasonable grounds to suspect criminal activity.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of the yoyo99 business or any part of it, your personal data may be transferred to the acquiring entity, subject to equivalent data protection standards being maintained by the acquiring party.
In all cases where we share data with third parties, we require those parties to treat your personal information with the same level of care and security that yoyo99 applies, and to use it only for the specific purpose for which it was shared.
Cookies and Tracking Technologies
yoyo99 uses cookies and similar tracking technologies on its website to support platform functionality, maintain your login session, understand how the platform is being used, and (where consented) deliver relevant promotional content. This section explains the types of cookies yoyo99 uses and your choices regarding them.
- Strictly Necessary Cookies: These cookies are essential for the yoyo99 website to function. They include session management cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure consistent platform performance. These cookies cannot be disabled without impairing core platform functionality.
- Functional Cookies: These cookies remember your preferences — for example, your preferred game lobby layout or language settings — so that the platform behaves consistently across sessions. Disabling these cookies may result in a reduced experience but will not prevent you from using the platform.
- Analytics Cookies: yoyo99 uses anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues arise. This data is used exclusively for platform improvement and is not linked to individual identifiable profiles.
- Marketing Cookies: Where you have given explicit consent, yoyo99 may use cookies to track your engagement with promotional content and to present relevant offers based on your platform usage. You may withdraw your consent to marketing cookies at any time through your account privacy settings.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that blocking strictly necessary cookies will significantly impair your ability to use the yoyo99 platform, including the ability to log in.
Your Data Rights and How to Exercise Them
As a yoyo99 user whose personal data we process, you have a number of rights in relation to that data. yoyo99 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. The following rights are available to you:
- Right of Access: You have the right to request a copy of the personal data that yoyo99 holds about you. We will respond to access requests within 30 days of receiving a valid request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly through your yoyo99 account settings; for more sensitive data such as your CNIC number, contact support.
- Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data. Please note that this right is subject to limitations — yoyo99 is required to retain certain data for compliance, legal, and regulatory purposes for specified periods (see Section 9), and we cannot delete data subject to such obligations.
- Right to Restrict Processing: You have the right to request that yoyo99 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where the processing is unlawful but you prefer restriction to erasure.
- Right to Data Portability: You may request that yoyo99 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
- Right to Object to Marketing: You have the right to opt out of marketing communications at any time, without affecting the lawfulness of any processing carried out prior to your objection. You can unsubscribe from marketing emails via the unsubscribe link in any such communication, or by contacting support directly.
To exercise any of these rights, contact the yoyo99 data protection team via live chat or via the email address displayed in the footer of this page. We will verify your identity before acting on any data rights request to ensure we are responding to the genuine account holder.
Data Security Measures
yoyo99 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, loss, or destruction.
- Encryption in Transit: All data transmitted between your device and the yoyo99 platform is encrypted using 256-bit TLS/SSL, preventing interception by third parties during transmission.
- Encryption at Rest: Sensitive personal data — including identity documents, payment method details, and hashed passwords — is stored in encrypted form on yoyo99's secure infrastructure.
- Access Controls: Access to personal data within yoyo99 is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for administrative systems, and audit logging of all access events.
- Intrusion Detection: yoyo99 operates continuous monitoring for unusual access patterns, intrusion attempts, and data exfiltration activity on all systems that handle personal data.
- Regular Security Reviews: yoyo99's security posture is reviewed and tested on a regular basis, including penetration testing of public-facing systems and internal security audits of data handling procedures.
- Incident Response: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, yoyo99 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.
While yoyo99 takes all reasonable steps to protect your data, no internet-based system is completely immune to security risks. We encourage you to protect your own account by choosing a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with anyone.
Data Retention Policy
yoyo99 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:
- Active Accounts: Personal data associated with an active yoyo99 account is retained for the full duration of the account's existence and for the applicable post-closure retention period described below.
- Financial and Transaction Records: All records of deposits, withdrawals, and account balances are retained for a minimum of five years following the date of the last transaction, in accordance with standard financial record-keeping obligations applicable to payment platforms operating in Pakistan.
- KYC and Identity Verification Records: Identity verification documents including CNIC copies and verification selfies are retained for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
- Support Communications: Records of your communications with the yoyo99 support team are retained for three years following the closure of the relevant support interaction, for complaint management and quality assurance purposes.
- Marketing Consent Records: Records of your consent to (or withdrawal of consent from) marketing communications are retained for the lifetime of your account and for three years thereafter, as evidence of compliance with applicable consent requirements.
- Post-Closure Retention: Following account closure, yoyo99 retains your core identity and financial records for the minimum periods described above for compliance purposes. After the applicable retention period expires, your data is securely deleted or permanently anonymised.
Children's Data and Age Restriction
yoyo99 is strictly an adult platform. The yoyo99 platform is not directed at, and is not intended for use by, any person under the age of 18 years. yoyo99 does not knowingly collect personal data from children under 18.
Age verification using Pakistani CNIC documentation is a mandatory step in the yoyo99 account registration and KYC process. Any account for which age verification reveals that the registered user is under 18 years of age will be immediately closed, and all personal data associated with that account will be securely deleted in accordance with our data retention policy, subject to any overriding legal obligations to retain records of the age verification event itself.
If you are the parent or guardian of a minor and you believe that your child has registered a yoyo99 account or provided personal data to yoyo99, please contact our support team immediately via live chat. We will investigate the matter promptly, close the account if the age restriction has been violated, and delete the minor's personal data to the fullest extent permitted by law.
Changes to This Privacy Policy
yoyo99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform functionality. The current effective version of this Privacy Policy will always be available at yoyo99.pro/privacy-policy.
Where updates are material — meaning they meaningfully affect your rights or how we process your personal data — yoyo99 will notify registered account holders by email to the address registered to their account, and/or by displaying a prominent notice on the yoyo99 platform. The effective date and last-updated date shown at the top of this document and in the hero section above reflect the date of the most recent update.
Minor updates — such as clarifications of existing practices that do not alter their substance — may be made without advance notice. We encourage you to review this Privacy Policy periodically to stay informed about how yoyo99 is handling your personal data. Your continued use of the yoyo99 platform after notification of a material update constitutes your acceptance of the revised Privacy Policy.
Contact Our Data Protection Team
If you have any questions about this Privacy Policy, wish to exercise your data rights under Section 7, want to raise a privacy concern, or need to report a potential data protection issue, please contact the yoyo99 data protection team through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week on the yoyo99 website. Live chat is the fastest way to reach the support team for general account and privacy queries.
- Email: Contact us at the email address displayed as plain text in the footer of this page. Please include "Privacy Request" or "Data Rights" in the subject line of your email to ensure it is routed to the data protection team promptly.
All privacy-related enquiries will receive an acknowledgement within 24 hours and a substantive response within 10 business days. Complex requests involving data access, erasure, or portability may take up to 30 days to fulfil, in accordance with standard data subject request timeframes.
Your Rights at a Glance
Six Data Rights Every yoyo99 Player Holds
As a yoyo99 user, you have meaningful rights over your personal data. These six cards summarise what those rights mean in practical terms for Pakistani players using the platform.
Right to Access Your Data
Request a complete copy of all personal data that yoyo99 holds about your account — including registration information, transaction history, and communication records. We respond to access requests within 30 days.
Right to Correct Inaccurate Data
If any personal information yoyo99 holds about you is wrong or out of date, you have the right to have it corrected. Update most details directly in your account settings, or contact support for identity document corrections.
Right to Erasure
Request deletion of your personal data when it is no longer necessary for the purposes it was collected. Subject to legal retention obligations, yoyo99 will permanently delete your data on request after the mandatory retention periods expire.
Right to Data Portability
Request your personal data in a structured, machine-readable format (such as JSON or CSV) so you can transfer it to another service. yoyo99 will provide this within 30 days of a valid portability request.
Right to Object to Marketing
Opt out of promotional emails and push notifications at any time by clicking the unsubscribe link in any marketing email, or by updating your communication preferences in your yoyo99 account settings. No justification required.
Right to Restrict Processing
Ask yoyo99 to restrict how we use your data in specific circumstances — for example, while an accuracy dispute is being resolved. During the restriction period, we will store your data but not actively process it for other purposes.
Our Data Protection Commitments
How yoyo99 Commits to Protecting Pakistani Players' Privacy
These four commitments represent the practical standards that yoyo99 holds itself to in its handling of your personal data — not aspirations, but day-to-day operating principles.
We Never Sell Your Data
yoyo99 does not sell, rent, or trade your personal information to third-party advertisers or data brokers — ever. Your data is used only for the purposes described in this Policy.
We Collect Only What We Need
yoyo99 applies data minimisation as a core principle. We ask for only the information that is genuinely necessary for a specific, stated purpose — nothing extra, nothing speculative.
We Notify You of Material Changes
When this Privacy Policy changes in a material way that affects your rights, yoyo99 notifies registered account holders by email — not just by quietly updating the page.
We Respond to Rights Requests Promptly
Data rights requests submitted to yoyo99 are acknowledged within 24 hours and substantively resolved within 30 days. No bureaucratic delay, no unjustified refusals.
Privacy Questions? The yoyo99 Team Is Here for You
If you have questions about how your data is used at yoyo99, or want to exercise your data rights, our 24/7 support team is ready to assist. You can also explore the related policy pages below for further guidance.