y339 Privacy Policy
At y339, your privacy is a fundamental commitment — not a legal formality. This Privacy Policy explains exactly what personal data y339 collects from players across Pakistan, why we collect it, how we use and protect it, who we may share it with, and what rights you hold over your own information. Please read this document carefully before registering or using any feature of the y339 platform.
How y339 Protects Your Data
These six principles summarise y339's approach to data privacy. They do not replace the full legal text below — please read the complete Privacy Policy for all details.
Secure Data Storage
All personal data collected by y339 is stored on encrypted, access-controlled servers. We apply industry-standard security measures including TLS encryption for data in transit and AES-256 encryption for data at rest. Your details are never stored in plain text.
No Data Sales
y339 does not sell, rent, or trade your personal data to any third-party marketing companies or data brokers. Your information is used exclusively to operate the y339 platform, process your transactions, and deliver customer support.
Your Data Rights
Registered y339 players have the right to access, correct, and request deletion of their personal data. You can also restrict processing, withdraw consent for marketing communications, and request a portable copy of your data at any time by contacting [email protected].
AML Compliance
y339 collects identity and payment verification data in fulfilment of its anti-money laundering (AML) obligations. This data is handled with strict confidentiality and is only disclosed to regulatory or law enforcement authorities where legally required.
Marketing Opt-Out
y339 will only send promotional emails and SMS notifications to players who have actively opted in. You can withdraw your marketing consent at any time from your account settings or by emailing [email protected]. Opt-out requests are processed within 72 hours.
Defined Retention Periods
y339 does not retain your personal data indefinitely. Retention periods are defined by purpose and legal requirement. Transaction records are retained for a minimum of five years in line with AML obligations. Marketing data is deleted promptly upon opt-out. Full retention schedules are detailed in Section 10 of this policy.
Who We Are
This Privacy Policy is issued by y339 ("y339", "we", "us", "our"), the operator of the online gaming platform available at y339.org and any associated mobile or web-based interfaces. y339 is an internationally licensed online gaming operator dedicated to providing sports betting, live casino, slot games, bingo, and related entertainment services to players across Pakistan.
For the purposes of this Privacy Policy, y339 acts as the data controller in respect of the personal data collected from registered players and website visitors. As data controller, y339 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
This Privacy Policy applies to all registered players, prospective players who have initiated but not completed registration, and general website visitors who interact with any part of the y339.org platform. By accessing or using the y339 platform, you confirm that you have read and understood this Privacy Policy.
Data We Collect
y339 collects personal data that is necessary to operate the platform, comply with legal obligations, and deliver the services you request. The categories of personal data y339 may collect include the following:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport number, gender | Mandatory |
| Contact Data | Email address, mobile number, residential address (city, province) | Mandatory |
| Financial Data | JazzCash / EasyPaisa wallet number, bank account details (HBL, UBL, Meezan Bank), transaction history, deposit and withdrawal records in PKR | Mandatory |
| Verification Documents | Scanned CNIC, proof of address (utility bill, bank statement), selfie for liveness verification | Mandatory for KYC |
| Gaming Activity Data | Bets placed, games played, win/loss records, session durations, responsible gaming limit settings | Automatic |
| Technical Data | IP address, device type, browser type and version, operating system, time zone, login timestamps | Automatic |
| Communications Data | Support chat logs, email correspondence, feedback submissions | When you contact us |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS, and push notifications | Optional |
y339 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data used for identification purposes beyond liveness verification, or health data — except where you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion or problem gambling support request.
How We Collect Your Data
y339 collects personal data through the following channels:
- Registration: When you create a y339 account, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
- Identity Verification (KYC): When prompted to complete Know Your Customer verification, you upload identity documents including your CNIC or passport. This is mandatory before any withdrawal can be processed.
- Deposits and Withdrawals: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency, y339 receives transaction reference data and, in some cases, partial payment account details from the relevant payment processor.
- Platform Usage: y339's systems automatically log your gaming activity, session data, IP address, and device information each time you access the platform.
- Customer Support: When you contact y339 support by email or live chat, the content of those communications is recorded and stored for quality assurance and dispute resolution purposes.
- Cookies and Analytics: y339 uses cookies and similar tracking technologies to collect technical data about how you interact with the platform. See Section 7 for full details.
- Third-Party Verification Providers: y339 may receive identity verification results from licensed KYC service providers to whom document uploads are securely transmitted for authentication purposes.
Why We Use Your Data
y339 uses the personal data it collects for the following purposes. Each purpose is linked to a specific legal basis which is described in full in Section 5 of this Privacy Policy.
- Account Registration and Management: To create and maintain your y339 account, authenticate your identity at login, and manage your account settings and preferences.
- Age and Identity Verification: To confirm that you are at least 21 years of age before allowing access to real-money gaming features, in compliance with y339's strict 21+ policy.
- Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and supported cryptocurrencies, and to reconcile transaction records.
- Anti-Money Laundering (AML) Compliance: To monitor account activity for indicators of money laundering, fraud, or other financial crime, and to fulfil reporting obligations to relevant authorities where required by law.
- Platform Operations: To deliver the games, betting markets, live casino, and bingo services you access, and to maintain the technical performance and security of the y339 platform.
- Responsible Gaming: To administer deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion requests activated by you through the responsible gaming tools.
- Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of communications for dispute resolution.
- Promotions and Bonuses: To determine eligibility for PSL cricket bonuses, welcome offers, and other promotional campaigns on the y339 platform, for players who have opted in to marketing communications.
- Fraud Prevention and Security: To detect and prevent unauthorised access, account fraud, bonus abuse, and other forms of platform misuse.
- Legal Compliance: To comply with applicable laws, regulations, and lawful requests from courts, regulators, and law enforcement authorities.
- Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving the y339 platform, personalising your experience, and developing new features.
Legal Basis for Processing
y339 processes personal data only where a valid legal basis exists. The legal bases y339 relies upon are as follows:
- Contractual Necessity: Processing that is necessary to perform the contract between you and y339 — including registration, account management, payment processing, and delivery of gaming services — is carried out on the basis of contractual necessity.
- Legal Obligation: Processing carried out to comply with y339's legal obligations — including AML checks, age verification, identity verification, and regulatory reporting — is carried out on the basis of legal obligation.
- Legitimate Interests: Processing carried out for fraud prevention, platform security, dispute resolution, and general platform improvement is based on y339's legitimate interests, where those interests are not overridden by your rights and freedoms.
- Consent: Processing for optional purposes — including sending marketing emails, SMS promotions, and PSL betting notifications — is carried out only where you have given explicit, freely given, and revocable consent. You may withdraw your consent at any time by contacting [email protected] or updating your account preferences.
Data Sharing and Disclosure
y339 does not sell your personal data. y339 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only where necessary for the purposes described in Section 4:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processors receive the minimum transaction data necessary to process your deposits and withdrawals in PKR.
- Identity Verification Providers: Licensed KYC and AML screening providers receive identity documents and personal data to verify your age and identity and to conduct sanctions and PEP (Politically Exposed Person) screening.
- Gaming Software Providers: y339's third-party casino game and sports data providers may receive your Player ID and session data to deliver live dealer games, slots, and cricket betting markets. These providers do not receive your full identity data.
- Regulatory and Law Enforcement Authorities: y339 will disclose personal data to competent regulatory bodies, financial intelligence units, courts, or law enforcement agencies where required to do so by applicable law, a valid court order, or a lawful regulatory request.
- IT and Security Service Providers: y339's infrastructure, hosting, and cybersecurity service providers may have access to encrypted data for the purpose of maintaining and securing the platform. All such providers are bound by confidentiality obligations.
- Professional Advisers: Lawyers, auditors, and compliance consultants engaged by y339 may access personal data on a confidential, strictly need-to-know basis in connection with legal or regulatory matters.
All third parties with whom y339 shares personal data are required to process that data in accordance with applicable data protection standards and are contractually prohibited from using your data for any purpose other than the specific purpose for which it was shared.
Cookies and Tracking Technologies
y339 uses cookies and similar tracking technologies on the y339.org platform. Cookies are small text files placed on your device when you visit a website. They help the platform function correctly, remember your preferences, and collect analytical data about how players interact with the site.
y339 uses the following categories of cookies:
- Strictly Necessary Cookies: These cookies are essential for the y339 platform to function. They maintain your authenticated session, remember your responsible gaming settings, and ensure that security features operate correctly. These cookies cannot be disabled without preventing you from using the platform.
- Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and last-visited game category — to improve your experience on return visits.
- Analytics Cookies: y339 uses anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where technical issues may occur. This data is aggregated and does not identify you personally.
- Marketing Cookies: Where you have consented to receive personalised promotions, y339 may use cookies to understand which PSL cricket betting offers, slot promotions, or casino bonuses are most relevant to your playing preferences. You can withdraw this consent at any time.
You can control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the y339 platform, including the ability to maintain a persistent login session.
Your Data Rights
As a registered y339 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact y339 at [email protected] with the subject line "Data Rights Request" and include your registered username and a clear description of your request. y339 will respond within 30 days.
Right of Access
You have the right to request a copy of the personal data that y339 holds about you, along with information about how that data is being processed and on what legal basis.
Right to Rectification
If any personal data y339 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact [email protected] with the corrected information and any supporting documentation.
Right to Erasure
In certain circumstances, you may request the deletion of your personal data. Note that y339 is required by law to retain transaction and identity records for a minimum of five years for AML compliance purposes; erasure requests cannot override this legal obligation.
Right to Restrict Processing
You may request that y339 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you object to processing based on legitimate interests.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that y339 transmit that data to another controller, where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where that processing is based on y339's legitimate interests, including profiling for marketing purposes. y339 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on your consent — such as marketing communications about PSL cricket promotions or bonus offers — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Data Security
y339 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include but are not limited to:
- TLS (Transport Layer Security) encryption for all data transmitted between your device and the y339 platform.
- AES-256 encryption for personal and financial data stored at rest on y339's servers.
- Multi-factor authentication requirements for administrative access to systems that process personal data.
- Role-based access controls ensuring that only authorised y339 staff with a legitimate operational need can access player personal data.
- Regular security audits, vulnerability assessments, and penetration testing of the y339 platform infrastructure.
- Comprehensive staff training on data protection obligations and information security best practices.
- Incident response procedures to detect, contain, and report data breaches in a timely manner.
Despite these measures, no internet-based platform can guarantee absolute security. y339 strongly recommends that you use a strong, unique password for your y339 account, enable any available two-factor authentication options, and contact [email protected] immediately if you suspect any unauthorised access to your account.
Data Retention Periods
y339 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Identity and KYC documents | 5 years from account closure | AML legal obligation |
| Financial transaction records (PKR deposits, withdrawals) | 5 years from transaction date | AML and financial record-keeping legal obligation |
| Account registration data | Duration of account + 5 years | Contractual necessity and legal obligation |
| Gaming activity logs | 3 years from session date | Legitimate interests (dispute resolution) |
| Customer support communications | 3 years from last communication | Legitimate interests (dispute resolution) |
| Marketing preferences and consent records | Until consent is withdrawn, then deleted within 72 hours | Consent |
| Technical / server logs (IP, device data) | 13 months from collection | Legitimate interests (security and fraud prevention) |
| Responsible gaming limit and self-exclusion records | Duration of exclusion + 5 years | Legal obligation and player protection |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be used to identify any individual.
Children and Minors
y339 operates a strict 21+ policy. The y339 platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21. Age verification is a mandatory step in the y339 registration and KYC process. Any account found to belong to a person under 21 years of age will be immediately closed, and the personal data associated with that account will be deleted to the extent permitted by law.
If you are a parent or guardian and you believe that a minor in your care has registered a y339 account or provided personal data to y339 without your knowledge, please contact us immediately at [email protected]. y339 will investigate and take prompt action to close the account and delete the associated data.
Amendments to This Privacy Policy
y339 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the way we operate the y339 platform. When material changes are made, y339 will notify registered players by email to the address on file and by displaying a prominent notice on the platform for a minimum of seven (7) days prior to the revised policy taking effect.
The effective date at the top of this document will be updated each time a new version of the Privacy Policy is published. We encourage you to review this page periodically. Continued use of the y339 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
Contact and Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about the way y339 has handled your personal data, please contact our support team:
Email: [email protected]
Response time: within 24–48 hours for standard queries; within 30 days for formal data rights requests.
Language: English and Urdu. Our support team is available 24/7 including Pakistani public holidays.
y339 takes all data privacy complaints seriously. If you submit a formal complaint, y339 will acknowledge receipt within 24 hours and provide a substantive response within 30 days. Where a complaint is complex or requires investigation, y339 will keep you informed of progress at regular intervals.
Questions About Your y339 Privacy Settings?
Log in to your y339 account to manage your marketing preferences, download your personal data, or update your responsible gaming limits. Our support team is available 24/7 in English and Urdu. Strictly 21+ only.
Cricket, Live Casino, Slots & More — All in PKR
From PSL cricket betting to live dealer tables and Fortune Bingo — y339 delivers a secure, PKR-based gaming experience built for players across Karachi, Lahore, Islamabad, and Faisalabad.