y888com Privacy Policy – Pakistan Online Gaming Platform

Important: This Privacy Policy applies to all personal data processed by y888com in connection with your account registration, use of the platform, and any communications between you and y888com. By registering a y888com account you confirm that you have read and understood this policy and consent to the data processing practices described herein.

01Introduction

y888com is an online betting and gaming platform accessible at y888com.ws, designed specifically for the Pakistani market. We offer sports betting — with a strong focus on Pakistan cricket and PSL — alongside gaming products including Teen Patti, Ludo, and fishing games. All services are provided in PKR through payment methods that Pakistani players use daily.

This Privacy Policy describes how y888com collects, uses, stores, shares, and protects the personal data of its members and website visitors. It also explains the rights you have over your data and how to exercise them. We have written this policy in plain, accessible English because we believe privacy documentation should be understandable to the people it most affects — our members in Pakistan.

We review and update this policy at least annually, and whenever there is a material change to how we process personal data. The current version number and effective date are displayed at the top of this page.

---

02What Personal Data y888com Collects

2.1 Data You Provide Directly

When you register an account, make a deposit or withdrawal, contact customer support, or participate in promotions at y888com, you provide us with personal information. This includes:

• Your full legal name as it appears on your CNIC or passport
• Date of birth — collected for mandatory age verification
• Pakistani mobile number — used for account access and transaction verification
• Email address — used for account-related communications and optional marketing
• Identity documents — CNIC, passport, driver's licence — provided during KYC verification
• Payment details — Easypaisa wallet number, JazzCash number, IBFT bank account reference, or card type and last four digits
• Residential address — required for full KYC completion

2.2 Data Collected Automatically

When you access y888com through a browser or mobile device, certain technical data is automatically collected by our systems. This includes:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on different sections of the y888com platform
• Session timestamps — when you logged in and out
• Error logs and technical diagnostics that help identify and fix platform issues

2.3 Data from Third-Party Sources

In limited circumstances y888com may receive data about you from third parties. This typically occurs when:

• Payment processors confirm the status of a deposit or withdrawal transaction
• Identity verification providers confirm the authenticity of a KYC document
• Fraud prevention services flag an account or payment method as associated with known fraudulent activity

---

03How y888com Uses Your Personal Data

The personal data y888com collects is used for the following purposes, all of which are necessary either for the operation of your account, regulatory compliance, or the legitimate interests of y888com in preventing fraud and maintaining platform integrity:

• Account creation and management: Setting up your y888com account, verifying your identity, and maintaining your account throughout your membership
• Processing transactions: Handling your deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard, and processing your withdrawal requests to the same methods
• Customer support: Responding to your queries, resolving disputes, and investigating complaints
• Regulatory compliance: Meeting our obligations under applicable anti-money laundering regulations, including maintaining transaction records and performing customer due diligence
• Fraud prevention and security: Detecting and preventing fraudulent account activity, bonus abuse, payment fraud, and identity theft
• Responsible gaming enforcement: Applying deposit limits, session timers, self-exclusion, and other player protection tools you have activated on your account
• Platform improvement: Using anonymised, aggregated data to understand how y888com is being used and to improve the product experience for Pakistani players
• Marketing communications: Sending you promotional offers, bonus notifications, and product updates — only where you have given consent or where we have a legitimate interest in communicating with existing members about relevant products

---

04Legal Basis for Processing

Every data processing activity at y888com has a legal basis. The principal bases we rely on are:

• Contract performance: Processing necessary to provide the services described in the y888com Terms and Conditions — account operation, transaction processing, game delivery, and customer support
• Legal obligation: Processing required to comply with applicable laws — identity verification, AML record-keeping, regulatory reporting
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics, and member-relevant marketing communications where these interests are not overridden by your privacy rights
• Consent: Processing for optional marketing communications beyond what is covered by legitimate interests. You can withdraw consent for this category at any time without affecting your account

---

05Who y888com Shares Your Data With

y888com does not sell your data. We share personal information only in the following circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive transaction-specific information necessary to process deposits and withdrawals. These parties are contractually obligated to handle your data securely and only for the specific payment purpose.
• Identity verification providers: Third-party KYC services receive the identity documents you submit to verify their authenticity. These services operate under strict data processing agreements with y888com.
• Fraud prevention services: Where a transaction or account behaviour pattern raises fraud indicators, relevant data may be shared with specialist fraud prevention services to confirm or investigate the risk.
• Regulatory authorities: y888com will disclose personal data to competent regulatory or law enforcement authorities when required to do so by a valid legal request. We will notify you of such a disclosure where legally permitted.
• Game technology providers: Aggregated, anonymised performance data may be shared with licensed game providers for technical improvement purposes. Individual member identity is not shared with game providers.

---

06Cookies and Tracking Technologies

y888com uses cookies and similar tracking technologies to operate the platform, maintain your session, and collect anonymised usage data. The categories of cookies used are:

• Essential cookies: Required for basic platform functionality — keeping you logged in, maintaining your session state, and processing secure transactions. These cannot be disabled without breaking the platform.
• Performance cookies: Collect anonymised data about how members navigate y888com — which pages are visited, how long sessions last, where users drop off. This data is used to improve the platform experience.
• Preference cookies: Remember your platform settings — preferred language, display options — so you do not have to reconfigure them each visit.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent y888com from functioning correctly. The platform does not use third-party advertising cookies or cross-site tracking pixels.

---

07Data Security Measures

y888com implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• All data transmission between your device and y888com servers uses TLS 1.3 encryption — the current industry standard for secure web communications
• Sensitive data fields — passwords, payment credentials — are hashed or tokenised and are never stored in plain text on y888com's servers
• Internal access to member data is restricted by role-based access controls. Staff can only access the data categories relevant to their specific job function
• All internal data access events are logged and monitored for anomalies by the y888com security team
• Regular penetration testing and vulnerability assessments are conducted by independent security specialists
• In the event of a data breach that affects personal data, y888com will notify affected members within 72 hours of becoming aware of the incident, where technically feasible

---

08Data Retention

y888com retains personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with legal obligations. The specific retention periods for each data category are summarised in the data table earlier on this page. General principles governing retention at y888com are:

• Financial transaction records are retained for 7 years following the date of the transaction, in line with standard AML regulatory requirements applicable to Pakistani financial services
• Identity and KYC documents are retained for 5 years following account closure
• Technical data including IP logs and device fingerprints is retained on a 12-month rolling basis
• Where you exercise your right to erasure and the request is valid, personal data will be deleted or anonymised within 30 days, except for data that must be retained under a legal obligation

---

09Children's Privacy

y888com is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is performed during account registration and y888com reserves the right to request proof of age from any member at any time. If we discover that an account has been registered by a person under 18, that account will be closed immediately, all activity will be voided, and any deposited funds will be returned to the original payment source after deducting any bonuses claimed.

If you have reason to believe that a minor has registered an account on y888com, please contact our support team immediately so that the matter can be investigated and resolved promptly.

---

10Changes to This Privacy Policy

y888com reviews this Privacy Policy at least once per year and updates it whenever there is a material change to our data processing practices. When changes are made, we will:

• Update the "Last Updated" date at the top of this page
• Send a summary of material changes to your registered email address at least 14 days before they take effect
• Display a notice on the y888com platform homepage for the same 14-day period

Your continued use of y888com after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you may request account closure and withdrawal of your real-money balance before the changes take effect.

---

11How to Contact y888com About Privacy

For all privacy-related queries, data rights requests, or complaints about how y888com handles your personal information, you can contact us through the following channels:

• Live chat: Available 24/7 from the y888com platform
• Email: support@y888com.ws — please include "Privacy Request" in the subject line

We aim to respond to all privacy queries within 5 business days. Data rights requests — access, erasure, portability — will be acknowledged within 5 days and completed within 30 days of receiving a verified request. If your request is particularly complex or you have submitted multiple requests simultaneously, we may extend this period by a further 30 days and will notify you accordingly.