Privacy Policy – How y888 com Protects Your Data

01 About This Policy

This Privacy Policy applies to all players who register, visit or interact with the y888 com platform at y888com.win, including through the y888 com mobile app available for Android and iOS. It sets out how we collect, use, store and protect your personal information.

By creating an account or continuing to use our platform, you confirm that you have read and understood this policy. If you do not agree with how we handle personal data, you should not use the platform. Where we make significant changes to this policy, we will notify registered players before those changes take effect.

This policy should be read alongside our Terms and Conditions and Responsible Gaming page, both of which contain additional information relevant to your account and how the platform operates.

02 Information We Collect

y888 com collects personal information in several ways — directly from you when you register or use the platform, automatically as you interact with the site or app, and from third parties such as payment providers where necessary to verify transactions.

Information you provide directly:

• Full name, date of birth and contact details (phone number and email address) provided at the point of registration.
• Identity verification documents — such as a CNIC or passport — submitted when requested as part of the Know Your Customer (KYC) process.
• Payment account details including your JazzCash or Easypaisa number, Raast ID or bank account information used for deposits and withdrawals in PKR.
• Communications you send to our customer support team through in-app chat or email.
• Preferences and settings you configure in your account, including responsible gaming limits and notification settings.

Information collected automatically:

• Device information including device model, operating system version and unique device identifiers.
• IP address and approximate location data derived from it.
• Browser type and version when accessing via a web browser.
• Session data including login times, pages visited, games played, bets placed and in-app navigation patterns.
• Cookies and similar tracking technologies as described in Section 6.

03 How We Use Your Data

We use the information we collect strictly for the purposes set out below. We do not use your data in ways you would not reasonably expect given the nature of a gaming platform.

We do not use your data for automated decision-making that produces legal effects — for example, we do not use an algorithm to permanently close your account without human review.

04 Legal Basis for Processing

Every use of your personal data at y888 com rests on at least one of the following legal grounds:

• Contract performance: Processing your registration details, verifying your identity and handling your deposits and withdrawals are all necessary to provide the service you signed up for.
• Legitimate interests: We process session data, device identifiers and usage patterns to detect fraud, prevent account abuse and improve the security and performance of the platform. These interests do not override your fundamental privacy rights.
• Legal obligation: KYC verification and transaction record-keeping are required to meet anti-money laundering and financial compliance obligations.
• Consent: Marketing emails, promotional SMS and personalised offers are only sent where you have explicitly opted in. You can withdraw consent at any time through your account settings.

05 Payment Data

All financial transactions at y888 com are processed in PKR through third-party payment providers including JazzCash, Easypaisa, Raast, direct bank transfer and debit or credit cards. y888 com does not store your full card numbers or mobile wallet PINs on its own servers.

When you make a deposit or request a withdrawal, your payment details are transmitted directly to the relevant payment provider using encrypted channels. The provider processes the transaction and returns a confirmation status to y888 com. We retain transaction references, amounts, timestamps and the payment method used for the purposes of account management, dispute resolution and compliance record-keeping.

• Payment data shared with providers is governed by each provider's own privacy policy in addition to this one.
• y888 com will never ask you for your full JazzCash PIN, Easypaisa mPIN or bank account password through any channel, including live chat or email. If you receive such a request, it is not from y888 com.
• Withdrawal requests are only processed to a payment account registered in your own name. Third-party payment is not permitted.

06 Cookies and Tracking

y888 com uses cookies and similar technologies on the web version of the platform. Cookies are small text files stored on your device that help us deliver a consistent, secure and personalised experience.

Types of cookies we use:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, game lobby filters and responsible gaming limits you have set.
• Analytics cookies: Help us understand how players navigate the platform so we can improve performance and usability. Data collected by analytics cookies is aggregated and anonymised wherever possible.
• Marketing cookies: Used only where you have opted in to personalised promotions. These help us show you offers that are relevant to the games and sports you follow, such as Cricket, PSL or Casino.

You can manage or withdraw cookie consent at any time through your browser settings or the cookie preference panel in the platform. Disabling non-essential cookies will not prevent you from using the core features of the site.

07 Sharing Your Information

y888 com does not sell your personal data. We share information only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: JazzCash, Easypaisa, Raast and other payment partners receive the data needed to process your PKR transactions. Each provider operates under its own privacy and data security standards.
• Identity verification services: Where KYC verification is required, your identity documents may be shared with a third-party verification service. These providers are bound by strict confidentiality obligations.
• Fraud prevention and security: We may share device fingerprints, IP data and account activity patterns with fraud detection partners to protect the platform and its players.
• Legal and regulatory obligations: We may disclose personal data where required by applicable law, court order or in connection with a legitimate investigation by an authorised authority.
• Business transfers: In the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

All third parties who receive personal data from y888 com are required to handle it securely and use it only for the specific purpose for which it was shared.

08 Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to fulfil the purposes described in this policy. Specific retention periods are guided by the following principles:

• Active accounts: Data is retained for the full duration of your account activity and for a minimum period following account closure to allow for dispute resolution and any outstanding transactions to be settled.
• Transaction and financial records: PKR deposit and withdrawal records, bonus history and betting records are retained for the period required by financial compliance obligations, which is typically a minimum of five years from the date of the transaction.
• KYC documents: Identity verification documents are retained for the period required by applicable anti-money laundering rules. After this period, they are securely deleted.
• Marketing data: If you withdraw marketing consent and have closed your account, marketing-specific data is deleted within 90 days of your request.
• Support communications: Chat logs and email correspondence with support are retained for up to two years for quality assurance and dispute resolution purposes.

When data is no longer needed and no legal obligation requires its retention, it is securely deleted or anonymised so that it can no longer be linked to you personally.

09 Your Rights

As a registered player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the details in Section 13.

• Right of access: You may request a copy of the personal data we hold about you at any time. We will respond within a reasonable timeframe.
• Right to rectification: If any of your personal information is inaccurate or out of date, you can update it directly in your account settings or by contacting support.
• Right to erasure: You may request deletion of your personal data where there is no legal or contractual reason for us to retain it. Certain financial and compliance records must be retained for a minimum period regardless of deletion requests.
• Right to restrict processing: You can ask us to pause processing of your data in certain circumstances — for example, if you have contested the accuracy of the data while we investigate.
• Right to data portability: You may request your personal data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests. We will review your objection and cease processing unless we can demonstrate compelling grounds that override your interests.

10 Children and Minors

y888 com is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register, attempt to register or use this platform in any way.

If we discover or are notified that we have collected personal data from a person under 18, we will immediately close the associated account, void any transactions and securely delete all data associated with that account.

If you believe a minor has registered on the platform, please contact support immediately so we can investigate and take appropriate action without delay.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. For further guidance on protecting younger family members, please visit our Responsible Gaming page.

11 Security Measures

y888 com takes the security of your personal data seriously. We maintain a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration or destruction.

• TLS encryption: All data transmitted between your device and y888 com is encrypted using Transport Layer Security (TLS). This applies to registration, login, deposits, withdrawals and all other interactions with the platform.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a strong cryptographic algorithm before storage.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff with access to sensitive data undergo security training and are subject to confidentiality obligations.
• Two-factor authentication: Players are encouraged to enable two-factor authentication on their accounts for an additional layer of login security.
• Security monitoring: Our systems are monitored for unusual activity patterns that may indicate a breach attempt, account takeover or fraudulent behaviour.

While we take all reasonable steps to protect your data, no system is completely immune to security threats. In the unlikely event of a data breach that affects your personal information, we will notify you as soon as practicable and provide guidance on any steps you should take to protect yourself.

12 Changes to This Policy

y888 com may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer or applicable legal requirements. The "Last Updated" date at the top of this page will always show when the most recent revision was made.

For significant changes — particularly those that affect your rights or how your data is used — registered players will be notified via their account email address or through an in-app notification before the changes take effect. Minor updates such as clarifications or corrections may be made without prior notice.

Continued use of the y888 com platform after any update to this policy constitutes your acceptance of the revised version. If you do not agree with the updated policy, you should stop using the platform and may request account closure as described in Section 9.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights or need to report a privacy concern, please get in touch with our support team. Including "Privacy Query" in your message subject will help us route your request to the right team quickly.

For urgent account security matters — such as suspected unauthorised access or identity theft — please use the in-app live chat for the fastest response. VIP players receive priority routing on all support and privacy queries.

For general questions about your data rights, our team will acknowledge your request promptly and aim to resolve it within 30 days. We are committed to handling every privacy query with the seriousness it deserves.