y88888 Privacy Policy

y88888 (referred to in this Policy as "y88888", "we", "us" or "our") is the data controller responsible for the personal data collected through the y88888 platform at y88888.site. As data controller, y88888 determines the purposes and means of processing your personal data in accordance with the obligations imposed by our international gaming licence authority.

For all privacy-related enquiries, data subject requests, or complaints regarding how y88888 handles your personal information, our dedicated Data Protection team can be contacted via our platform's live chat support or by written correspondence addressed to the Data Protection Officer at the contact details published in the platform's support section.

Throughout this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, mobile number, CNIC number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on personal data — including collection, storage, use, transmission, disclosure, and deletion.
• "Data Subject" means the individual whose personal data is being processed — in this context, you as a y88888 player or platform user.
• "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of personal data for a stated purpose.
• "Third Party" means any person or organisation other than y88888 or the data subject — including game providers, payment processors, and regulatory bodies.
• "KYC" means Know Your Customer — the identity verification process y88888 is obligated to conduct under its gaming licence terms.

y88888 collects the following categories of personal data from players accessing the platform:

We do not collect sensitive personal data categories — such as health information, religious beliefs, or political opinions — as part of normal platform operations. Where any sensitive data is voluntarily disclosed in a support interaction, it will be handled with heightened confidentiality and will not be retained beyond the immediate purpose for which it was shared.

y88888 processes personal data for the following specific purposes:

1. Account Registration and Management. To create and maintain your y88888 account, verify your identity, associate your payment methods, and provide you access to the platform's gaming and betting services.
2. Age and Identity Verification (KYC). To confirm that you are aged 21 or above and are who you claim to be — as required by y88888's gaming licence obligations. CNIC verification is mandatory for all accounts.
3. Payment Processing. To process deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawals to your verified payment method. This includes sharing necessary payment reference data with payment processing partners.
4. Gaming and Betting Services. To deliver the casino games, live dealer tables, slot products, sports betting markets, and PSL cricket betting services you access on y88888 — including saving your game history, tracking bonus wagering progress, and settling bets.
5. Fraud Prevention and Security. To detect and prevent fraudulent activity, money laundering, multiple account creation, bonus abuse, and other security threats to the platform and its players.
6. Regulatory Compliance. To comply with y88888's obligations under its international gaming licence — including Anti-Money Laundering (AML) obligations, responsible gaming requirements, and reporting obligations.
7. Customer Support. To respond to your support requests, resolve account disputes, handle complaints, and provide 24/7 assistance in English and Urdu.
8. Responsible Gaming. To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce player-set deposit and session limits, and to manage self-exclusion requests.
9. Marketing Communications. To send you promotional offers, bonus notifications, and platform updates — where you have provided your consent to receive such communications. Marketing consent can be withdrawn at any time.
10. Platform Improvement. To analyse aggregated, anonymised usage data to improve platform performance, game selection, and user experience. This analysis does not result in decisions based solely on individual automated profiling.

y88888 processes personal data under the following legal bases, as defined by the data protection framework applicable under our licensing authority's jurisdiction:

• Contract Performance. Processing necessary to provide the services you have contracted for — account management, payment processing, game delivery, and bet settlement.
• Legal Obligation. Processing required by y88888's gaming licence — including KYC, AML compliance, age verification, and regulatory reporting.
• Legitimate Interests. Processing necessary for y88888's legitimate business interests where these are not overridden by your interests — including fraud prevention, platform security, and anonymised platform analytics.
• Consent. Processing for marketing communications and optional profiling features — where you have given specific, informed consent. Consent-based processing can be withdrawn by you at any time without affecting the lawfulness of prior processing.

y88888 does not sell your personal data. We share personal data with third parties only in the following specific circumstances and only to the extent necessary for the stated purpose:

1. Payment Processors. JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank) receive necessary payment reference data to process deposits and withdrawals. These parties process data only for payment execution and are bound by their own financial data security obligations.
2. Game Providers. Licensed game studios — including Pragmatic Play, PG Soft, and others — receive technical session data necessary to deliver their games to your account. Game providers do not receive your identity or payment data.
3. KYC and Identity Verification Partners. y88888 may engage specialist identity verification services to assist with CNIC and document verification. These partners process KYC data solely for verification purposes under binding data processing agreements.
4. Regulatory and Law Enforcement Authorities. y88888 is legally obligated to disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required by applicable law — including in response to valid legal process.
5. Fraud Prevention Services. y88888 may share limited technical identifiers (IP addresses, device fingerprints) with industry fraud prevention services to identify and block known fraudulent actors. No identity data is shared in this context.
6. Corporate Transactions. In the event of a merger, acquisition, or sale of y88888's operating entity, personal data may be transferred to the successor entity, subject to the same privacy protections set out in this Policy.

y88888 uses cookies and similar tracking technologies on its platform. These technologies serve the following purposes:

• Strictly Necessary Cookies: Essential for platform operation — session management, login state, account authentication, and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences — preferred language, last-used game lobby filters, and interface settings — so these are remembered between sessions.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — pages visited, time on page, and feature usage — to help y88888 improve the platform experience. No individual profiling is conducted via analytics cookies.
• Security Cookies: Support fraud detection and bot prevention systems by establishing baseline device behaviour patterns associated with your account.

y88888 does not deploy third-party advertising or retargeting cookies that track your activity across other websites. You may manage cookie preferences via your browser settings. Disabling non-essential cookies will not prevent you from accessing y88888's core services.

y88888 operates under an international gaming licence and may process and store personal data on servers located outside Pakistan. Where personal data is transferred internationally, y88888 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by applicable data protection authorities;
• Data processing agreements imposing equivalent data protection obligations on recipient parties;
• Transfer to jurisdictions that the licensing authority has determined provide an adequate level of data protection.

Your personal data will never be transferred to a recipient that does not provide adequate contractual or regulatory protection. Where you have questions about the specific safeguards applied to international transfers involving your data, you may contact our Data Protection Officer via the platform's live chat or support email.

y88888 retains personal data only for as long as is necessary for the purposes described in this Policy or as required by our licensing authority's data retention obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from y88888's systems or anonymised in a manner that makes re-identification impossible. Anonymised data may be retained indefinitely for aggregate platform analytics purposes.

y88888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and y88888's servers is encrypted using TLS 1.2 or higher, enforced via 256-bit SSL certificates. HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive personal data — including identity documents, payment references, and authentication credentials — is encrypted at rest within y88888's database infrastructure.
• Access Controls: Access to personal data within y88888's internal systems is restricted to authorised personnel with a documented business need. All internal access is logged, and access rights are reviewed regularly.
• Password Security: Account passwords are stored as salted cryptographic hashes — meaning y88888 staff cannot retrieve your plain-text password. You are responsible for choosing a strong password and keeping it confidential.
• Penetration Testing: y88888 engages independent security specialists to conduct regular penetration tests of its platform infrastructure and to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: y88888 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, y88888 will notify affected players and relevant authorities in accordance with applicable obligations.

As a y88888 player, you hold the following rights in relation to your personal data, exercisable by contacting our Data Protection Officer via the platform's live chat or support contact:

All data rights requests will be acknowledged within five (5) business days and completed within thirty (30) days. Where a request is complex or involves a large volume of data, y88888 may extend this period by a further 30 days, with notification provided to you.

y88888 may send marketing communications — including promotional bonus offers, PSL betting specials, new game announcements, and platform updates — to players who have provided consent to receive such communications during registration or at a later point via account settings.

1. Consent Basis. Marketing communications are sent only to players who have opted in. Consent is recorded with a timestamp and is maintained in our marketing preference database.
2. Withdrawal of Consent. You may withdraw marketing consent at any time by updating your notification preferences in the y88888 account settings, or by contacting support. Withdrawal takes effect within five (5) business days. Transactional communications — such as account verification messages, deposit confirmations, and withdrawal notifications — are not affected by marketing opt-out.
3. Communication Channels. y88888 sends marketing communications via the mobile number and email address registered to your account. We do not use third-party marketing networks or data brokers to target players through external channels.

If y88888 becomes aware — through KYC verification or any other means — that personal data has been collected from an individual under the age of 21, all data associated with that individual will be deleted and the account will be permanently closed. Any deposits will be returned to the originating payment source, and all associated winnings will be void.

If you believe a minor has registered a y88888 account, please contact our support team immediately via live chat so we can investigate and take appropriate action without delay.

The y88888 platform may contain links to third-party game providers, payment processor interfaces, or informational resources. This Privacy Policy applies solely to personal data processed by y88888 via the y88888.site platform. y88888 is not responsible for the privacy practices of third-party websites or services accessed via links from the y88888 platform.

When you launch a game from a third-party provider within the y88888 lobby, a technical session is established with that provider's gaming server. The provider receives the minimum technical data required to deliver the game — typically a session token and your account denomination. They do not receive your name, CNIC, mobile number, or payment details.

y88888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulatory requirements, or platform functionality. The effective date and version number at the top of this document will be updated accordingly.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — y88888 will notify active account holders via the platform's notification system or by direct communication to your registered mobile number or email address at least fourteen (14) days before the changes take effect.

For any privacy-related question, data subject rights request, or complaint regarding y88888's handling of your personal data, please contact us via:

• Live Chat: Available 24/7 in English and Urdu via the platform at y88888.site — our fastest response channel for privacy enquiries.
• Support Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered mobile number for identity verification.

y88888 will acknowledge all privacy complaints within five (5) business days and provide a substantive response within thirty (30) days. If you are not satisfied with y88888's response to your complaint, you have the right to escalate the matter to the data protection supervisory authority under the jurisdiction of y88888's gaming licence, or to the dispute resolution body specified in the Terms & Conditions.

We take all privacy complaints seriously. Our Data Protection Officer reviews every complaint personally and ensures that systemic issues identified through complaints are used to improve our data handling practices on an ongoing basis.