LEGAL REFERENCE

How 11y999 Handles Your Personal Data

We collect only what we need to run your account, process your withdrawals, and keep your sessions secure. This policy tells you exactly what data we hold, why...

Account Data ProtectedPayment Info EncryptedYou Control Your DataRight to Request DeletionPolicy Reviewed Regularly
Explore the Lobby Read FAQ
11y999 How 11y999 Handles Your Personal Data

What This Privacy Policy Covers and Why

This policy applies to every interaction you have with 11y999 in supported regions where local law permits account activity. When you open an account, deposit via JazzCash or Easypaisa, or contact our support team, we record the data needed to complete that action and nothing more. We do not sell your personal data to third parties. Financial transaction records tied to SadaPay

or Raast deposits are retained for the minimum period required by applicable financial regulations. You may request a copy of your data or ask for corrections through the channels listed in this document. Any update to this policy will be communicated via your registered email before it takes effect.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

Our privacy team responds to data requests within 72 hours. Reach us through any of the channels below and quote your account...

Email Support Send your data request or correction query to...
Live Chat Open the chat widget on any page while...
Help Centre Ticket Submit a ticket through your account dashboard under...
HOW WE PROTECT YOUR ACCOUNT

Six Ways We Keep Your Data Safe

Security at 11y999 is built into every layer of your account, from the moment you register to every withdrawal you make through local payment rails in supported Pakistan regions.

Encrypted Storage

All personal records, including payment method references for JazzCash and Easypaisa, are stored using AES-256 encryption so raw data is never exposed, even internally, without access controls in place.

Tokenised Payments

We never store your full JazzCash or Easypaisa account numbers. Payment processors return a token we reference for future transactions, keeping your financial credentials off our servers entirely.

Access Logging

Every internal access to your account record is logged with a timestamp and staff ID. You can request this audit trail at any time, and it is retained for twelve months by default.

Two-Factor Verification

Account logins and withdrawal requests above a set threshold trigger a verification step sent to your registered mobile number, adding a second layer beyond your password.

Data Minimisation

We collect only what each function requires. Browsing sessions do not log personally identifiable data beyond your account ID, and marketing data is kept separate from your financial profile.

Right to Erasure

You may request full account deletion and data erasure at any time. We process erasure requests within seven days and confirm completion by email once your records have been cleared from our systems.

How This Policy Aligns With Our Other Terms

Our privacy commitments are consistent across every part of the 11y999 platform. The table below shows how the privacy policy connects with related sections so you always know...

Cookies Policy
Explains which tracking files we place on your device and how to opt out of non-essential cookies without affecting your account login.
Terms of Service
Sets out the contract between you and 11y999, referencing the data we need to enforce account rules and handle disputes.
Account Security
Covers two-factor authentication, session timeouts, and how we notify you of suspicious login attempts tied to your profile.
Payment Processing
Details how JazzCash, Easypaisa, SadaPay and Raast transaction records are handled and the retention window for each rail.
Marketing Preferences
Lets you control which communications we send and confirms that opting out of marketing does not affect your account data.
Data Retention Schedule
Lists the specific retention period for each data category we hold, from account identifiers to session logs and payment references.
Third-Party Sharing
Names every category of third party that receives any portion of your data and the legal basis under which each transfer occurs.
POLICY LAYOUT KEY ELEMENTS

What Shapes Our Privacy Approach at 11y999

Our privacy framework is structured around four principles: collect only what is needed, store it securely, give you clear control, and delete it when the reason for holding...

Minimal Collection We ask only for data that a specific account function...
Transparent Retention Every data category has a stated retention period published in...
Your Access Rights You can request a full export of your account data...
Breach Notification If a security incident affects your data, we will notify...
Policy Update Notice Any change to this privacy policy is communicated to your...
Independent Review We conduct an internal privacy audit on a regular schedule...

Frequently Asked Questions About Your Data

We collect your name, email address, mobile number, and the payment method reference you use, such as your JazzCash or Easypaisa identifier. We do not collect more than what account operation and payment processing require.

Your payment details are tokenised at the point of entry. We store only the token returned by the payment processor, never your raw account number, so your financial credentials are not held on 11y999 servers.

Yes. Submit a data export request through your account dashboard under Settings then Privacy. We will prepare a structured file containing all data categories we hold and deliver it within five working days.

Active account data is held for the duration of your account plus the regulatory retention window. Transaction records for SadaPay and Raast are kept for the period required by applicable financial rules, then deleted.

We share data only with payment processors needed to complete your transactions, identity verification services, and fraud prevention providers. We do not sell your data or share it for unrelated commercial purposes.

We process erasure requests within seven days of account closure. Certain records, such as transaction logs required by financial regulations in supported regions, are retained for the mandated period before permanent deletion.

We email every account holder at their registered address at least fourteen days before any policy change takes effect. The updated policy is also published on this page with a clear notice of what changed.