Privacy Policy —
y888 online Platform

1What Personal Information We Collect

When you use y888 online, we collect several categories of personal information. The specific data we hold about you depends on how you interact with the platform.

Identity & Contact Information

When you register, we collect your full name, date of birth, email address, and any other details you provide during the sign-up process. If identity verification is required — for example before your first withdrawal is approved — we may also collect a copy of your national identity document (such as your CNIC) and a selfie or proof-of-address document.

Financial Information

To process PKR deposits and withdrawals, we collect the details necessary to complete transactions via your chosen payment method. This may include your JazzCash or Easypaisa mobile number, your bank account details for Raast or bank transfer, or masked card numbers for debit or credit card payments. We do not store full card numbers on our servers.

Account Activity Data

We record information related to your use of the platform — including login history, session duration, bets placed (across sports like cricket, PSL, T20, and football), game rounds played, bonus claims, and transaction history. This data is necessary to operate your account, calculate payouts, and maintain accurate financial records.

Device & Technical Data

When you access y888 online via a browser or our Android application, we automatically collect certain technical information. This includes your IP address, device type, operating system version, browser type, and approximate location derived from your IP. This information is used for security purposes, fraud prevention, and to optimise the platform experience on Pakistani mobile networks.

Communications

If you contact our support team via email or in-platform chat, we retain records of those communications. This helps us resolve disputes, improve our service, and maintain a record of any commitments made.

2How We Collect Your Information

y888 online collects personal information through the following means:

• Directly from you: Information you submit when registering, updating your profile, making a deposit, requesting a withdrawal, or contacting support.
• Automatically: Technical and behavioural data collected when you use the website or Android app, including through cookies and server logs.
• From payment providers: Transaction confirmations and status updates from JazzCash, Easypaisa, Raast, banks, and card networks when you make a deposit or withdrawal.
• From identity verification services: Where we use a third-party service to verify the authenticity of documents you submit, that provider may return a verification result to us.
• From fraud prevention tools: We may cross-reference data with fraud and risk databases to protect the platform and its users from dishonest activity.

We do not purchase personal data from third-party data brokers or list providers for marketing or any other purpose.

3How We Use Your Personal Information

The table below summarises the main purposes for which y888 online uses your personal data and the lawful basis for each:

We do not use your personal data for automated decision-making that produces significant legal effects on you without human review. Where automated fraud-risk scoring flags your account for review, a member of the y888 online team will assess the situation before any account action is taken.

4Sharing & Disclosure of Your Data

y888 online does not sell your personal data. We share it only in the following limited circumstances:

• Payment processors: We share the minimum necessary financial data with JazzCash, Easypaisa, Raast, banks, and card networks to process your transactions. These providers operate under their own privacy policies and are contractually required to protect your data.
• Identity verification providers: Where a third-party service is used to verify documents you submit, your identity documents are shared with that provider for verification purposes only and are not retained by them beyond what their own policy permits.
• Game and platform technology providers: Some games on y888 online are powered by third-party software providers. These providers may receive gameplay data in anonymised or pseudonymised form to deliver game outcomes and calculate returns. They do not receive your full identity information.
• Legal and regulatory obligations: We may be required to disclose personal data to law enforcement or regulatory authorities if we receive a valid legal request or if we are required to do so to comply with applicable law. We will notify you where we are legally permitted to do so.
• Business transfers: In the event that y888 online is involved in a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify affected users and explain their options before any such transfer takes effect.

5Cookies & Tracking Technologies

y888 online uses cookies and similar technologies when you access the platform via a web browser. Here is a plain breakdown of what we use and why:

• Essential cookies: Required for the platform to function. These keep you logged in during your session, maintain your wallet state, and ensure your bets and game rounds are recorded correctly. You cannot opt out of essential cookies without stopping use of the platform.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or automated bot activity.
• Analytics cookies: Used to understand how users navigate the platform — for example, which pages are visited most frequently or where users experience difficulty. This data is aggregated and does not identify you personally. We use this information to improve the platform experience.
• Preference cookies: Store your in-platform settings such as language preferences and display options so they persist between sessions.

The y888 online Android application does not use browser cookies but may use equivalent device-level identifiers for session management and security purposes.

You can manage browser cookies through your browser settings at any time. Blocking essential cookies will affect your ability to use the platform. Blocking analytics cookies will not prevent you from playing or transacting.

6Data Security

y888 online takes the security of your personal information seriously. We have implemented the following technical and organisational measures to protect your data:

• All data transmitted between your browser or app and our servers is encrypted using TLS (Transport Layer Security).
• Passwords are stored in hashed form using strong cryptographic algorithms. Plaintext passwords are never stored.
• Access to personal data within our organisation is restricted on a need-to-know basis. Staff are trained on data handling practices.
• We regularly review and test our security infrastructure to identify and address vulnerabilities.
• Payment card data is handled in accordance with industry security standards. Full card numbers are not stored on y888 online servers.

Despite these measures, no internet-based service can guarantee absolute security. In the unlikely event of a data breach that affects your personal information, we will notify you as required and take immediate steps to contain and assess the situation.

7Data Retention & Deletion

We retain your personal data for as long as your account is active and for a period thereafter as required by applicable legal and financial record-keeping obligations. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your account plus a minimum post-closure period as required for financial and legal compliance.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• Communications: Support communications are retained for up to two years after the date of the last message in a thread, or longer if the communication relates to an unresolved dispute.
• Technical logs: IP address logs and access logs are retained for up to 12 months and then automatically deleted unless required for an ongoing security investigation.

When data is no longer required and has passed any applicable retention period, it is securely deleted or anonymised so that it can no longer be linked to you personally. Anonymised or aggregated data — which cannot identify you — may be retained indefinitely for platform analytics and reporting purposes.

If you request the deletion of your account, we will close it and delete or anonymise your personal data, subject to any legal obligation that requires us to retain specific records. We will confirm the outcome of your deletion request in writing.

8Your Rights Over Your Personal Data

You have meaningful rights regarding the personal information y888 online holds about you. These rights are summarised below. To exercise any of them, contact us at [email protected].

We will acknowledge all data rights requests promptly and aim to fulfil them within 30 days. In complex cases, we may require an additional 30-day extension and will notify you if that is the case. We may need to verify your identity before acting on a data request to ensure we are not disclosing or deleting data at the request of an unauthorised third party.

9Children's Privacy

y888 online is strictly an adult platform. We do not knowingly collect personal information from anyone under the age of 18. Registration requires users to confirm that they are 18 or older, and we may request age-verification documentation at any stage of account use.

If we discover that personal data has been collected from a person under the age of 18, we will close the account immediately, delete all associated personal data, and reverse any transactions where possible. If you are a parent or guardian and believe your child has registered an account on y888 online, please contact us immediately at [email protected].

10Policy Updates & How to Contact Us

This Privacy Policy may be updated from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data practices. When we update this policy, we will revise the "Last Updated" date at the top of the page. For significant changes, we will notify registered users via email or an in-platform message.

We encourage you to review this page periodically. Continued use of y888 online after a policy update is posted constitutes your acceptance of the revised policy. If you do not agree with any change, you may close your account and withdraw your available PKR balance.

If you have any questions about this Privacy Policy, want to exercise a data right, or want to raise a concern about how your data has been handled, please reach out to us:

• Email: [email protected]
• Availability: 24 hours a day, 7 days a week
• Expected response time: Within 48 hours for privacy-related queries