y888 Privacy Policy

Who We Are

y888 is an internationally licensed online gaming and sports betting platform accessible at https://y888.cam. For the purposes of this Privacy Policy, "y888", "we", "us", and "our" refer to the licensed entity operating the y888 platform. "You" and "your" refer to any individual who accesses, browses, registers on, or otherwise uses the y888 platform.

y888 acts as the data controller in respect of all personal information collected through the y888 platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers who process data on our behalf, those providers act as data processors and are contractually bound to process your data only in accordance with our documented instructions.

Data We Collect

y888 collects personal information from you in the following categories. We collect only what is necessary for the purposes described in Section 3 of this Privacy Policy.

y888 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes (beyond standard KYC facial matching), or health data, except where you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request.

How We Use Your Data

y888 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your consent or notifying you of the new purpose.

• Account Registration & Management: To create, verify, and maintain your y888 player account, including processing your y888 Login credentials and account settings.
• Identity & Age Verification (KYC): To confirm that you are who you say you are, that you are at least 21 years of age, and that you are not on any self-exclusion or regulatory exclusion list.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other supported payment method, and to maintain an accurate transaction history for your account.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for suspicious activity, report where required to relevant authorities, and fulfil our obligations under our international gaming licence.
• Fraud Prevention & Platform Security: To detect and prevent unauthorised account access, bonus abuse, duplicate account creation, and any other activity that violates the y888 Terms & Conditions.
• Customer Support: To respond to your queries, complaints, and responsible gaming requests through live chat, email, and other support channels.
• Responsible Gaming: To administer deposit limits, session reminders, reality checks, and self-exclusion tools where you have activated them, and to proactively identify players who may be exhibiting signs of problem gambling.
• Marketing Communications: To send promotional emails or SMS messages about bonuses, new games, and y888 platform updates — but only where you have explicitly opted in to receive such communications.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the y888 website, game selection, and user experience.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.

Legal Basis for Processing

y888 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary for y888 to perform its contractual obligations to you under the y888 Terms & Conditions — specifically, to create and manage your account and to process deposits and withdrawals.
• Legal Obligation: KYC/AML verification, age verification, transaction monitoring, and data retention for regulatory audit purposes are all required by the obligations imposed on y888 by its international gaming licence and applicable financial crime prevention frameworks.
• Legitimate Interests: y888 processes Technical Data and Gameplay Data on the basis of its legitimate interest in maintaining platform security, preventing fraud, improving the platform, and ensuring the integrity of its gaming and betting products. We have assessed that these interests are not overridden by your privacy rights.
• Consent: Marketing communications via email or SMS are sent only where you have provided explicit, freely given, and informed consent. You may withdraw this consent at any time by updating your marketing preferences in your account settings or by contacting support.

Cookies & Tracking Technologies

y888 uses cookies and similar tracking technologies on the y888 website to ensure the platform functions correctly, to remember your preferences, and to understand how players interact with the site. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the y888 platform to function. They enable core features such as maintaining your y888 Login session, remembering your language preference, and securing your account. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players navigate the y888 website — such as which pages are visited most frequently and whether error messages are encountered. This data is used solely to improve the platform and is never used to identify individual players.
• Functional Cookies: These cookies remember choices you make on the y888 platform — such as your preferred game category or notification settings — to provide a more personalised experience.

Third-Party Sharing

y888 does not sell, rent, or trade your personal data. We share your personal information only with the categories of third parties listed below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment service provider integrated into the y888 cashier receive the financial data necessary to process your deposits and withdrawals. Each payment processor operates under their own privacy policy and applicable Pakistani financial regulations.
• Identity Verification Providers: y888 uses third-party KYC service providers to verify your identity and age as required by our gaming licence. These providers receive only the identity documents and data strictly necessary to complete verification.
• Game Software Providers: The studios whose games appear on y888 may receive anonymised gameplay data for the purpose of game performance monitoring and RTP auditing. No personally identifiable data is shared with game studios.
• Customer Support Platform: Our live chat and support ticket infrastructure is provided by a third-party tool. Support communications are stored within this platform in accordance with a data processing agreement.
• Regulatory & Law Enforcement Authorities: y888 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or in connection with a legal dispute involving y888.

All third-party service providers engaged by y888 are required to enter into a data processing agreement that obligates them to protect your personal data to the same standard as y888 and to process it only for the purposes specified by y888.

International Data Transfers

y888 operates under an international gaming licence and may process or store some player data on servers or with service providers located outside Pakistan. Where personal data is transferred internationally, y888 takes appropriate steps to ensure that your data receives an equivalent level of protection, including through the use of standard contractual clauses, data processing agreements, and transfers only to jurisdictions or organisations that provide adequate data protection standards.

By registering an account with y888 and accepting these terms, you acknowledge that your personal data may be transferred to and stored in jurisdictions outside Pakistan. y888 will always act in accordance with this Privacy Policy regardless of where your data is processed.

Data Retention

y888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by our regulatory obligations:

• Account & Identity Data: Retained for a minimum of 5 years from the date of account closure, as required by anti-money laundering regulations applicable to internationally licensed gaming operators.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations under our gaming licence.
• Gameplay & Betting Records: Retained for a minimum of 3 years from the date of each session or wager, for the purposes of dispute resolution and regulatory audit.
• Customer Support Records: Retained for 2 years from the date of the support interaction, or for the duration of any ongoing dispute, whichever is longer.
• Marketing Preference Data: Retained for the lifetime of your account plus 1 year, in order to honour opt-out requests in the event you re-register.

On expiry of the applicable retention period, your personal data will be securely and permanently deleted or irreversibly anonymised so that it can no longer be associated with your identity. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Your Data Rights

As a y888 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the y888 support team via live chat or by emailing [email protected]. y888 will respond to all verified data rights requests within 30 days.

Children's Privacy

The y888 platform is strictly for individuals aged 21 years or older. y888 does not knowingly collect, process, or store any personal data from individuals under the age of 21. If y888 becomes aware that personal data has been collected from a person under 21, that data will be immediately and permanently deleted and the associated account will be closed.

If you are a parent or guardian and believe that a minor under your care has registered on y888 or submitted personal data to y888, please contact our support team immediately via live chat or at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.

y888 employs robust age verification procedures — including CNIC/passport-based KYC checks — to prevent underage access to the platform. These checks are mandatory before any deposit, withdrawal, or real-money gameplay is permitted.

Security Measures

y888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes, but is not limited to, the following measures:

• Encryption: All personal data is encrypted at rest using AES-256 encryption. All data transmitted between your browser and the y888 platform is encrypted using TLS 1.3 protocol, indicated by the padlock icon in your browser's address bar.
• Access Controls: Access to player personal data within the y888 organisation is restricted on a strict need-to-know basis. All internal access events are logged and subject to regular audit.
• Secure Password Storage: y888 Login passwords are never stored in plain text. Passwords are hashed using a modern, one-way cryptographic hashing algorithm with per-user salting.
• Two-Factor Authentication: y888 offers optional two-factor authentication (2FA) for your y888 Login to provide an additional layer of account security.
• Penetration Testing: y888's platform infrastructure undergoes regular third-party security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, y888 will notify affected players and relevant regulatory authorities within 72 hours of becoming aware of the breach, in accordance with our licence obligations.

Marketing Communications

y888 may send you promotional communications about bonuses, new games, PSL cricket betting markets, special offers, and platform updates. These communications are sent only where you have provided explicit opt-in consent during registration or subsequently through your account settings.

Marketing communications from y888 may be delivered via the following channels, subject to your stated preferences:

• Email to the address registered on your y888 account.
• SMS to the mobile number registered on your y888 account.
• In-platform notifications displayed when you are logged in to y888.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email sent by y888.
• Updating your notification preferences in the account settings section of the y888 platform.
• Contacting y888 live chat support and requesting to be removed from all marketing communications.

Please note that opting out of marketing communications does not affect transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent regardless of your marketing preferences as they are necessary for the operation of your account.

Changes to This Privacy Policy

y888 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal and regulatory obligations. When we make material changes to this policy, we will notify registered players by email or through a prominent notice on the y888 platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this Privacy Policy will always reflect the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how y888 protects your personal data.

Your continued use of the y888 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any revision to this policy, you should cease using the platform and may request account closure by contacting our support team.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way y888 handles your personal data, please contact our Data Protection team using the details below:

• Live Chat: Available 24/7 via the y888 platform — our fastest response channel.
• Support Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line so your query is routed to the correct team.

y888 aims to respond to all privacy-related enquiries within 5 business days and to resolve all formal data rights requests within 30 days of identity verification. Where a request is complex or relates to a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with y888's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or to the dispute resolution body designated by y888's international gaming licensing authority.