Cookie Notice Alignment
Cookie categories described in the separate cookie notice map directly to the data purposes named here — analytics, security, and session management only.
LEGAL REFERENCE
How y99com Handles Your Personal Data
At y99com, your account information stays under our care — collected only for the purpose of running your account, processing your transactions through JazzCash, Easypaisa, SadaPay, or Raast...
No data sellingEncrypted storagePakistani payment data protectedAccount-level access controlsTransparent collection scope
What Data We Collect and Why We Keep It
When you open an account at y99com, we collect the information you submit during registration — your name, contact details, and the payment identifiers linked to JazzCash, Easypaisa, SadaPay, or Raast. We also log session activity, device type, and IP address to detect unauthorised access and maintain account integrity. This data is retained only as long as your account remains active or
as required under applicable law in supported regions. You may request a copy of your stored data or ask us to correct inaccurate records by contacting our support team. Where local law permits, we process cross-border data transfers using standard contractual protections.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
POLICY INTEGRITY SIGNALS
Why You Can Rely on This Privacy Policy
Our privacy commitments are not marketing language — they are operational standards we apply to every account, every transaction, and every data point we hold. The six signals below reflect how we...
Encrypted at Rest
All account data, including payment identifiers tied to JazzCash and Easypaisa, is encrypted in storage using AES-256. Keys are rotated on a defined schedule and never stored alongside the data they protect.
No Third-Party Sale
y99com does not sell, lease, or broker your personal data to advertisers, data aggregators, or analytics vendors. Sharing occurs only with payment processors and compliance partners named in this policy.
Access Controls
Account data is accessible only to staff with a verified operational need. Access events are logged, reviewed on a regular cycle, and any anomalous access triggers an internal alert within minutes.
Data Minimisation
We collect only what is necessary to run your account and process Pakistani payment rails. Fields that are not required for account operation are not stored, even if submitted during registration.
Correction Rights
You may request a correction to any inaccurate personal record we hold. Corrections to payment identifiers such as your SadaPay or Raast reference are processed within five business days of verification.
Policy Review Cycle
This policy is reviewed internally on a defined cycle and updated whenever a change in data handling practice or applicable law in supported regions requires a revision. The effective date at the top of the page reflects the current version.
POLICY CONSISTENCY CHECK
How This Policy Aligns Across y99com Pages
Our data handling standards are consistent whether you are reading this page, the cookie notice, or the account terms. The seven points below show where this privacy policy connects with and reinforces...
Account Terms Cross-Reference
The account terms reference this policy for data handling obligations. Both documents agree on retention periods and your right to request deletion.
Payment Rails Consistency
JazzCash, Easypaisa, SadaPay, and Raast are named in the same way across the payment page and this policy, so there is no ambiguity about which processors handle your funds.
Support Channel Parity
The contact paths listed in the support section above match the channels published on the main contact page — no hidden-only routes exist for privacy queries.
Retention Period Match
The retention periods stated here are the same figures applied in our internal data-lifecycle schedule, so what you read is what we actually enforce.
Regional Scope Phrasing
Every page on y99com that discusses access uses the phrase 'supported regions' consistently, so the scope of this policy matches what you see elsewhere on the site.
Update Notification
When this policy changes in a material way, a notice appears inside the account dashboard before the new version takes effect — consistent with the notification method described in the account terms.
Key Elements of Your Privacy Profile at y99com
Your privacy profile at y99com is structured around the data points that make your account work — nothing extra, nothing redundant. The six elements below define...
Registration Identity
Your name and contact details submitted at account opening are held in an encrypted record linked to your account ID. This record is the anchor for all data-access and correction requests you submit.
Session Audit Log
Each login event is recorded with a timestamp, device type, and IP address. These logs are retained for a defined period to support account recovery and detect unauthorised access attempts.
Transaction References
Payment references from JazzCash, Easypaisa, SadaPay, and Raast are stored as tokenised identifiers, not raw account numbers. The tokens are used only to reconcile deposits and withdrawals on your account ledger.
Preference Data
Language, region, and display preferences saved in your account settings are stored as account-level flags. They are not shared with third parties and are deleted when your account is closed.
Communication History
Support chat transcripts and email exchanges related to data or account queries are retained for audit purposes. You may request a copy of your own communication history at any time.
Deletion Workflow
When you request account closure, a structured deletion workflow removes your personal data from active systems within a defined window, with confirmation sent to your registered contact address.
Common Questions About Your Data at y99com
We collect your name, contact details, and the payment identifiers you register — such as a JazzCash or Easypaisa number. We also log session data like IP address and device type for account security purposes.
We share data only with the payment processors you use — JazzCash, Easypaisa, SadaPay, and Raast — and with compliance partners required by applicable law. We do not share data with advertisers or data brokers.
Most personal data is removed from active systems within a defined period after account closure. Some records may be retained longer where required by law in supported regions, and you will be informed of this.
Yes. Submit a data-access request through the Privacy Request form in Account Settings or contact our support team. We will provide a copy of your stored data within the timeframe required by applicable law.
Payment identifiers are stored as tokenised references, not raw account numbers. All stored data uses AES-256 encryption, and access to payment records is restricted to authorised staff with a verified operational need.
We follow a defined incident-response process. If a breach affects your personal data, we will notify you through your registered contact method and provide details of what was affected and what steps we have taken.
Use the data-deletion option inside Account Settings or contact the privacy desk directly. Once verified, a structured deletion workflow removes your active records and sends a confirmation to your registered contact address.