y 888 Privacy Policy — Your Data, Explained Clearly

1. Who We Are

This Privacy Policy applies to y 888 ("we", "us", "the Platform"), the online betting and gaming platform available at y888-bangla.com. y 888 is operated specifically for players based in Pakistan and all transactions are processed in Pakistani Rupees (PKR).

In the context of this policy, y 888 acts as the data controller — meaning we determine the purposes for which personal data is processed and the means by which that processing is carried out. If you have questions about how y 888 handles your personal information, contact us at support@y888-bangla.com at any time.

By registering an account at y 888 or using the platform in any capacity, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the processing of your personal data as described here, please do not register or use the platform.

2. Data We Collect

y 888 collects personal data through several channels — registration, account activity, customer support interactions, payment processing and platform usage. Here is a clear breakdown of what we collect and where it comes from.

Information You Provide Directly

• Identity data: Full name, date of birth, CNIC number (for verification purposes), gender.
• Contact data: Email address, mobile number, city and province of residence.
• Account credentials: Username, password (stored as an encrypted hash — never in plain text).
• Verification documents: Copies of CNIC, proof of address or payment method confirmation submitted during account verification.
• Support communications: Messages, emails and live chat transcripts from any interaction with the y 888 customer support team.

Information Generated by Your Activity

• Transaction data: Deposit amounts and methods, withdrawal requests, amounts and destination accounts (Easypaisa number, JazzCash number, bank account details).
• Betting and gaming data: All bets placed, markets selected, game sessions, results, bonus claims and wagering activity.
• Session data: Login timestamps, session durations, frequency of play and responsible gaming tool usage.

Technical Data Collected Automatically

• Device information: Device type, operating system version, browser type and version, screen resolution.
• Network data: IP address, mobile network operator, approximate geographic location derived from IP.
• Usage data: Pages visited, features used, time spent on sections of the platform, referral source.
• Cookie data: Session identifiers, preference settings and analytics identifiers. See Section 6 for full cookie details.

3. How We Use Your Personal Data

y 888 uses the personal data it holds about you for the following purposes. Each purpose is paired with its legal basis in Section 4.

y 888 does not use personal data to make fully automated decisions that have significant legal or financial effects on your account without human review. Where automated risk scoring is used (for example in fraud detection), decisions that affect your account are reviewed by a member of the y 888 compliance team before action is taken.

4. Legal Basis for Processing

y 888 processes personal data on the following legal grounds, depending on the specific purpose:

• Performance of a contract: The majority of processing at y 888 — running your account, processing PKR deposits and withdrawals, settling bets — is necessary to carry out the contract between you and y 888. Without this processing, the service simply cannot be provided.
• Legal obligation: Age verification, anti-money-laundering checks, responsible gaming monitoring and the retention of transaction records are required by applicable legal and regulatory obligations. y 888 cannot opt out of this processing.
• Legitimate interests: y 888 processes some data on the basis of legitimate business interests, including platform security monitoring, fraud detection and aggregate analytics used to improve the service. Where this basis applies, y 888 has assessed that its interests do not override your privacy rights.
• Consent: Where y 888 sends you promotional emails, SMS or push notifications about offers, new games or PSL betting markets, this is done on the basis of your consent given at registration or subsequently. You can withdraw consent at any time using the unsubscribe mechanism in any communication or by contacting support.

5. Payment Data and PKR Transactions

Given that y 888 operates exclusively in PKR and processes payments through local Pakistani payment methods — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments — this section explains specifically how financial data is handled.

What Payment Data We Hold

y 888 stores records of all deposit and withdrawal transactions including the amount in PKR, the payment method type (e.g. Easypaisa), a masked identifier for the account used (e.g. last four digits of a mobile number or card number) and the transaction timestamp. y 888 does not store full mobile wallet PINs, full card numbers or bank account passwords.

Payment Method Verification

As part of account verification and the withdrawal process, y 888 confirms that the payment method on file is registered in the same name as the y 888 account. This is a fraud prevention measure that also protects players from having their winnings sent to an account they do not control. During this process, y 888 may process additional personal information provided on the payment method documentation.

Third-Party Payment Processors

Actual payment processing for Easypaisa, JazzCash and card transactions is handled by third-party payment processors under contract with y 888. These processors operate under their own privacy policies and security standards. y 888 has contractual obligations from all payment processors requiring them to handle player data securely and use it only for the purpose of processing y 888 transactions.

6. Cookies and Tracking Technologies

y 888 uses cookies and similar tracking technologies to operate the platform correctly and understand how players use it. Here is a straightforward breakdown of the cookie types used.

Essential Cookies

These are required for the platform to function. They maintain your login session, remember your bet slip contents, manage security tokens and keep your language and odds format preferences. Without these cookies, y 888 cannot work. They are set automatically when you access the platform and cannot be disabled without breaking core functionality.

Analytics Cookies

y 888 uses analytics tools to understand aggregate patterns of platform usage — which sections players visit most, how long sessions typically last, which pages have technical issues and how players navigate from landing pages to registration. This data is processed in aggregate and is not used to profile individual players. You can opt out of analytics cookies without affecting your ability to use the platform.

Functional Cookies

These cookies remember your preferences — such as your preferred sports view, live casino favourites or odds display format — so you do not have to reset them every session. They are set on your first interaction with a feature and persist until cleared or they expire.

7. Sharing Your Data

y 888 does not sell, rent or trade your personal data to third parties for their own marketing purposes. This is a firm commitment. The only circumstances in which y 888 shares your personal data with external parties are the following:

• Payment processors: To facilitate PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card networks. Sharing is limited to the data required to complete the transaction.
• Identity verification providers: Third-party services used to verify CNIC details and confirm player age and identity. These providers process verification data under strict data processing agreements with y 888.
• Fraud prevention and compliance services: y 888 may share transaction and identity data with fraud detection and anti-money-laundering compliance services as required to meet legal obligations.
• Legal and regulatory authorities: y 888 will disclose personal data to law enforcement agencies, regulatory bodies or courts where required to do so by applicable law or a valid legal process. y 888 will notify you of any such disclosure where permitted to do so.
• IT and hosting providers: Technical infrastructure providers who host the y 888 platform process some personal data as part of providing those services. These providers operate under data processing agreements requiring them to maintain confidentiality and security.

All third parties with whom y 888 shares personal data are required by contract to use that data only for the specified purpose, maintain appropriate security measures and not disclose it further without y 888's authorisation.

8. Data Retention

y 888 retains personal data for as long as it is needed for the purpose for which it was collected, subject to any longer retention periods required by law. The following general retention schedule applies:

• Account data (active accounts): Retained for the lifetime of the account plus a minimum of 5 years after account closure, in compliance with financial record-keeping requirements.
• Transaction records: All deposit and withdrawal records in PKR are retained for a minimum of 7 years from the date of the transaction. This is a standard financial compliance retention period.
• Betting and gaming records: Retained for 5 years from the date of the bet or game session for dispute resolution and compliance purposes.
• Customer support communications: Chat logs and email records are retained for 3 years from the date of the interaction.
• Identity verification documents: CNIC copies and supporting verification documents are retained for the duration of the account plus 5 years after closure.
• Marketing consent records: Records of consent and opt-out are retained for 3 years after the most recent consent interaction, to demonstrate compliance.

When data is no longer required and the retention period has elapsed, y 888 securely deletes or anonymises it so that it can no longer be linked to an individual player.

9. Security Measures

y 888 takes the security of player data seriously. The following technical and organisational measures are in place to protect personal data against unauthorised access, loss or disclosure.

• SSL/TLS encryption: All data transmitted between your device and y 888 servers is encrypted using current SSL/TLS standards. This applies to login, account management, payment pages and all other areas of the platform.
• Password hashing: Account passwords are never stored in plain text. They are processed using industry-standard one-way hashing algorithms, meaning y 888 staff cannot read your password.
• Access controls: y 888 staff access to personal data is restricted to those who need it for their specific role. All staff with access to personal data are subject to confidentiality obligations and receive data security training.
• Intrusion detection: y 888 operates monitoring systems that detect and alert on unusual access patterns, potential brute-force attempts and other security events.
• Payment security: y 888 does not store full card numbers, CVVs or wallet PINs. Payment processing uses tokenisation and secure payment gateway integrations that meet industry security standards.

In the event of a data security incident that is likely to result in a risk to your rights or freedoms, y 888 will notify affected players without undue delay, describing what happened, what data was involved and what steps y 888 is taking to address it.

10. Your Privacy Rights

As a y 888 player, you have the following rights in relation to your personal data. These are genuine rights that y 888 is committed to facilitating — not formalities buried in a legal document.

• Right to access: You can request a copy of all personal data y 888 holds about you. We will provide this in a clear, readable format within 30 days of the request.
• Right to rectification: If any personal data y 888 holds about you is inaccurate or incomplete, you have the right to have it corrected. Contact support with the correction and supporting evidence where applicable.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected. Note that certain data — particularly transaction records — must be retained for legal compliance purposes regardless of an erasure request.
• Right to restriction: In certain circumstances you can ask y 888 to restrict processing of your data — for example while the accuracy of data is being contested, or while an objection is being assessed.
• Right to data portability: You may request a copy of the personal data you provided to y 888 in a structured, machine-readable format so that it can be transferred to another provider.
• Right to object: You can object to processing based on legitimate interests at any time. You also have an absolute right to object to processing for direct marketing purposes — see Section 12.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing based on consent before the withdrawal.

To exercise any of these rights, contact y 888 at support@y888-bangla.com with the subject line "Privacy Rights Request". y 888 will acknowledge your request within 3 business days and provide a full response within 30 days.

11. Children and Minors

y 888 is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from individuals under 18 years of age. If y 888 becomes aware that a registered account belongs to someone under 18, the account will be closed immediately, all balances reviewed and any personal data associated with the account deleted from active systems (subject to legal retention obligations for compliance purposes).

If you are a parent or guardian and believe a minor has registered an account at y 888, please contact support@y888-bangla.com immediately with the details. y 888 will investigate and close the account promptly.

12. Marketing Communications

y 888 may send you promotional communications about new games, PSL betting markets, platform features, bonus offers and other relevant updates — but only if you have given consent to receive them. Consent can be given or withdrawn at any stage.

How to Opt Out

You can unsubscribe from marketing communications at any time by:

• Clicking the "unsubscribe" link at the bottom of any promotional email from y 888.
• Updating your communication preferences in your y 888 account settings under the notifications section.
• Contacting y 888 support at support@y888-bangla.com and requesting removal from all marketing lists.

Opting out of marketing communications does not affect the operational communications y 888 must send you — such as account verification requests, transaction confirmations, withdrawal notifications and security alerts. These are part of the contract between you and y 888 and cannot be opted out of while your account is active.

13. Changes to This Privacy Policy

y 888 may update this Privacy Policy from time to time as the platform evolves, regulations change or new data processing activities are introduced. When material changes are made, y 888 will:

• Update the "Last Updated" date shown at the top of this page.
• Send an email notification to all registered players summarising the key changes at least 14 days before they take effect.
• Display a notice on the y 888 platform highlighting the update for at least 14 days.

Continued use of the y 888 platform after the effective date of any Privacy Policy update constitutes acceptance of the revised policy. If you do not agree to the changes, you may close your account by contacting customer support.

14. Contact Us About Privacy

For any privacy-related queries, rights requests or concerns about how y 888 handles your personal data, reach the team directly:

y 888 takes all privacy communications seriously. If you feel your concern has not been addressed adequately, you also have the right to raise the matter with the relevant data protection authority in your jurisdiction.