Privacy Policy — y888com Pakistan Online Gaming Platform

This Privacy Policy ("Policy") explains how y888com — operated at https://y888com.biz — collects, uses, stores and protects the personal information of players who register and use the y888com platform in Pakistan and other permitted jurisdictions.

y888com takes privacy seriously. We know that the personal and financial information you share with us when you create an account and deposit PKR is sensitive, and we treat it accordingly. This Policy is written in plain English so that Pakistani players can understand exactly what happens with their data — not buried in legal language designed to obscure rather than explain.

By creating an account on y888com, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described here. This Policy should be read alongside y888com's Terms and Conditions and Responsible Gaming policy.

y888com collects personal data from you in two ways: information you provide directly when using the platform, and information collected automatically as part of normal platform operation.

Information you provide directly:

• Registration data: Your name, date of birth, mobile number, email address and the password you choose when creating your y888com account.
• Identity verification data: When required for age verification or anti-money laundering compliance, we may ask for a copy of your CNIC (Computerised National Identity Card), passport or other government-issued identification.
• Payment information: Your Easypaisa, JazzCash, NayaPay or SadaPay account number, bank account details for IBFT transfers, or card details for Visa/Mastercard transactions. Full card numbers are processed by our payment providers — y888com does not store raw card data.
• Communications data: Records of any messages you send to y888com customer support, including live chat transcripts and emails.
• Responsible gaming data: Any deposit limits, self-exclusion requests or responsible gaming preferences you set within your y888com account.

Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution and mobile network information.
• Usage data: Pages visited on y888com, games played, bets placed, session duration, clickstream data and feature usage.
• Transaction data: Full records of all deposits, withdrawals, bets, game results and bonus activations on your y888com account.
• Cookies and similar technologies: See Section 7 for details on cookies used by y888com.

y888com uses the personal data we collect for the following purposes:

y888com does not use your personal data for any purpose not listed above without first obtaining your explicit consent.

y888com processes your personal data on one or more of the following legal bases:

• Contract performance: Processing your registration, deposits, bets and withdrawals is necessary to fulfil y888com's contractual obligations to you as a player.
• Legal obligation: y888com is required by its gaming licence and applicable law to conduct identity verification, retain transaction records and report suspicious financial activity. These obligations exist regardless of your consent.
• Legitimate interests: y888com has a legitimate interest in preventing fraud, securing the platform, improving the product based on usage data and communicating with players about their accounts. These interests are balanced against your privacy rights.
• Consent: Where y888com sends marketing communications or uses optional tracking technologies, we do so only with your explicit consent. You may withdraw consent at any time — see Section 11.

y888com never sells your personal data to third parties for their own marketing or commercial purposes. Full stop.

y888com shares personal data only in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card processors receive the payment data necessary to process your transactions. These providers operate under strict data processing agreements with y888com.
• Identity verification providers: Where required for age verification or anti-money laundering compliance, your identification documents may be processed by a licensed identity verification service provider.
• Game software providers: The providers of y888com's casino games, live dealer studios and sportsbook software may receive anonymised session data to ensure game fairness and technical performance.
• Fraud prevention and security: y888com may share data with fraud prevention databases and information-sharing initiatives related to sports betting integrity.
• Regulatory and law enforcement authorities: y888com will disclose personal data to regulators, law enforcement agencies or courts when legally required to do so by valid legal process.
• Responsible gaming organisations: In cases of serious problem gambling concern, y888com may share limited data with licensed gambling support organisations, subject to appropriate safeguards.

All third parties with whom y888com shares data are contractually required to protect your information and use it only for the specific purpose for which it was shared.

Because y888com is built specifically for Pakistani players, all financial transactions are processed in PKR through local payment channels. This means your payment data stays within the Pakistani financial system rather than being routed through foreign payment processors who may apply different data standards.

Specific points about payment data at y888com:

• Easypaisa and JazzCash: Your mobile wallet account number is stored securely by y888com to facilitate future withdrawals. Full transaction records are maintained as required by our gaming licence. Easypaisa and JazzCash also maintain their own records of transactions as required by their regulatory obligations.
• Bank IBFT: Your bank account title and IBAN are stored by y888com solely for the purpose of processing your withdrawal requests. Bank records are maintained by your bank in accordance with State Bank of Pakistan requirements.
• Visa and Mastercard: y888com uses a PCI-DSS compliant payment gateway. Full card numbers are not stored on y888com servers — only a tokenised reference is retained to enable future transactions.
• Transaction history: Complete records of all deposits and withdrawals are maintained on your y888com account and accessible to you at any time from your account history section.

y888com uses cookies and similar browser storage technologies to operate the platform, improve your experience and understand how Pakistani players use the site. Here is what each category of cookie does:

• Essential cookies: Required for the platform to function. These manage your login session, remember your preferences and keep your account secure. You cannot opt out of essential cookies while using y888com.
• Performance cookies: Collect anonymised data about how pages are used — which games are most visited, how long sessions last, where navigation errors occur. This data helps y888com improve the platform. No personally identifiable information is included.
• Functional cookies: Remember choices you have made — such as your preferred language — so you do not have to reset them every visit.
• Marketing cookies (optional): Used only if you consent, to track which promotions led to registrations and to show relevant offers. You can opt out at any time.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent y888com from working correctly. Most modern browsers allow you to block third-party cookies while keeping essential cookies active — this is the setting we recommend for players who want enhanced privacy without losing platform functionality.

y888com retains your personal data only for as long as is necessary for the purpose it was collected or as required by applicable law and our gaming licence. The following retention periods apply:

After the applicable retention period, your data is securely deleted or anonymised so it can no longer be linked to you personally.

y888com takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, loss, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and y888com servers. This is the same level of encryption used by major banks.
• Encrypted storage for all sensitive personal data including identity documents and payment credentials.
• Access controls: y888com staff can only access personal data on a strict need-to-know basis relevant to their role. All access is logged and audited.
• Regular security testing including vulnerability assessments and penetration testing to identify and resolve weaknesses before they can be exploited.
• Fraud detection systems that monitor for unusual account activity, login attempts from unrecognised devices and suspicious transaction patterns.
• Two-factor authentication options available to players for additional account security.

While y888com takes every reasonable precaution, no internet-based service can guarantee 100% security. In the unlikely event of a data breach that poses a significant risk to your rights, y888com will notify affected players promptly and take immediate action to contain the breach.

As a y888com player, you have the following rights over your personal data. To exercise any of these rights, contact us at support@y888com.biz. We will respond within 30 days.

y888com may send you information about promotions, bonuses and new features if you have given your consent during registration or subsequently through your account settings. Marketing communications from y888com may be sent by SMS to your registered mobile number, by email or via push notifications if you have enabled them in your browser.

You can withdraw your consent to marketing communications at any time through any of these methods:

• Clicking the unsubscribe link in any marketing email from y888com.
• Updating your communication preferences in your y888com account settings.
• Contacting support at support@y888com.biz and requesting removal from marketing lists.

Withdrawing marketing consent does not affect the service communications y888com must send in connection with your account — for example, deposit confirmation messages, withdrawal notifications and important account security alerts. These are not marketing communications and will continue regardless of your marketing preferences.

y888com is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step in the y888com registration process, and we actively monitor for underage access.

If y888com becomes aware that personal data has been collected from a person under the age of 18, we will immediately close the account, delete all associated personal data and return any funds deposited (subject to anti-money laundering obligations) to the payment source.

If you believe a minor has registered on y888com, please contact us immediately at support@y888com.biz. We treat all such reports as urgent and will investigate and act promptly.

y888com may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes to the services we provide. When we make material changes to the Policy, we will notify you in advance through one or more of the following channels: a notice on the y888com website, an email to your registered address, or a notification within your account.

Minor changes — such as typographical corrections or clarifications that do not affect your substantive privacy rights — may be made without specific advance notice and are effective upon publication. The "Last updated" date at the top of this page will always reflect when the Policy was most recently revised.

Continued use of y888com after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not accept a material change to this Policy, you may close your account — please see the account closure process in our Terms and Conditions.

If you have any questions, concerns or complaints about how y888com handles your personal data, please contact our dedicated privacy team:

• Email: support@y888com.biz
• Subject line: "Privacy Query" — this routes your message directly to the team responsible for data privacy.
• Response time: We acknowledge all privacy queries within 48 hours and provide a substantive response within 14 days.
• Languages: Privacy queries are handled in both Urdu and English.

If you are not satisfied with y888com's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority under the laws of the jurisdiction in which y888com is licensed, or to the independent dispute resolution mechanism provided under y888com's gaming licence.