Privacy Policy – y88 Online Gaming Platform

1 Introduction

This Privacy Policy applies to all players and visitors who use the y88 platform, including the website at y88.ad, the y88 Android app and all related services. It explains what personal data we collect from you, why we collect it, how it is used, and the rights you have regarding that data.

y88 is committed to handling personal data responsibly. We collect only what is necessary, use it only for the purposes described in this policy, and take reasonable steps to keep it secure. If you have questions about anything in this policy, the support team is available 24/7.

This policy should be read alongside the Terms and Conditions and the Responsible Gaming policy, both of which form part of your agreement with y88.

2 Data We Collect

When you register, use and interact with y88, we collect personal data in several categories. The table below gives an overview of what is collected and why.

We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs or health information unless specifically required by law or for responsible gaming self-exclusion purposes at your own request.

3 How We Use Your Data

y88 uses the personal data collected for the following purposes. We will not use your data for any purpose not listed here without first informing you and, where required, obtaining your consent.

• Account management: Creating, maintaining and securing your y88 account, including password recovery and account verification processes.
• Processing transactions: Handling PKR deposits via JazzCash, Easypaisa, Raast, Bank Transfer and other supported methods, and processing withdrawal requests to your registered payment method.
• Fraud prevention and security: Monitoring account activity to detect unusual patterns, prevent unauthorised access, identify bonus abuse and protect both you and the platform.
• Customer support: Responding to your queries, resolving disputes and providing assistance through our support channels.
• Platform improvement: Analysing aggregated usage data to improve game performance, loading times, navigation and the overall player experience.
• Responsible gaming: Monitoring gaming behaviour to flag potential problem gambling indicators and making self-management tools accessible as described in the Responsible Gaming policy.
• Promotions and communications: Sending relevant offers, bonus notifications and platform updates to your registered contact details. You can opt out of marketing communications at any time through your account settings.
• Legal and regulatory compliance: Retaining records as required to meet legal obligations, including Anti-Money Laundering (AML) requirements.

4 Payment Data

y88 processes payments in PKR through established payment infrastructure. When you make a deposit or request a withdrawal via JazzCash, Easypaisa, Raast, Bank Transfer or a debit card, the transaction is handled through the relevant payment provider's own secure systems.

y88 does not store your full JazzCash or Easypaisa account PINs, card CVV numbers, full debit card numbers or online banking credentials. What we do retain is:

• A tokenised or masked reference to your payment method (e.g., last four digits of an account number) for the purpose of routing future transactions and withdrawals.
• Transaction amounts, timestamps and status records, which are kept for account management and legal compliance purposes.
• The name associated with the payment method, to verify that it matches the registered account holder — a standard anti-fraud and anti-money-laundering measure.

All payment data in transit between your browser or app and y88's servers is encrypted using industry-standard TLS protocols. Payment providers used by y88 maintain their own security standards and privacy policies for data processed on their respective platforms.

5 Data Sharing

y88 does not sell your personal data to third parties. Data is shared only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

• Payment processors: JazzCash, Easypaisa, Raast and bank partners receive the transaction data they need to process your deposits and withdrawals. Each provider handles data under their own privacy policy.
• Identity verification services: Where verification is required, details may be shared with third-party verification providers to confirm your identity and age. These providers are contractually bound to use the data only for verification purposes.
• Fraud prevention and security partners: Technical data such as IP addresses and device fingerprints may be shared with security services that help detect and prevent fraud and bot activity across the platform.
• Legal and regulatory authorities: y88 will disclose personal data where required to do so by applicable law, court order or to cooperate with law enforcement investigations — for example, in connection with AML obligations.
• Platform infrastructure providers: Hosting, content delivery and analytics partners may process technical data on our behalf under data processing agreements that restrict them from using your data for their own purposes.

6 Data Retention

y88 retains personal data for as long as is necessary for the purposes described in this policy, and in accordance with legal requirements. The general retention approach is as follows:

• Active accounts: Personal and account data is retained for the duration of your account being open and active on the platform.
• Closed accounts: Following account closure, core identity and transaction records are typically retained for a minimum of five years to satisfy anti-money-laundering and financial record-keeping requirements. This period may be extended if there is an ongoing dispute, investigation or legal obligation.
• Marketing data: If you have opted in to marketing communications, your contact preferences are retained until you withdraw consent or request deletion.
• Technical and usage logs: Server logs and technical data are generally retained for a shorter period, typically 90 days, unless flagged for security investigation.

When data is no longer needed and there is no legal obligation to retain it, y88 deletes or anonymises it in a secure manner. If you would like to know how long specific data about you has been retained, contact the support team.

7 Cookies & Tracking

y88 uses cookies and similar tracking technologies on the website and within the app to enable core platform functionality and to understand how players use the service. The main types of cookies used are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that help protect your account. These cannot be disabled without affecting your ability to use the platform.
• Analytics cookies: Used to collect aggregated, anonymised information about how players navigate the platform — which pages are visited most, where users drop off, and how features are used. This data helps us improve the experience. No personally identifying information is included in analytics reports.
• Preference cookies: Store your platform settings such as language preferences, notification settings and display options so you do not need to reset them every visit.

Most browsers allow you to control cookies through their settings. Blocking essential cookies may impact your ability to log in or use core features. Analytics and preference cookies can generally be disabled without affecting your access to the platform.

8 Data Security

y88 takes data security seriously and implements a range of technical and organisational measures to protect your personal information. These include:

• TLS encryption for all data transmitted between your device and y88 servers.
• Encryption of sensitive data fields at rest, including passwords (stored as hashed values only).
• Role-based access controls limiting which staff members can access player data and for what purpose.
• Regular security assessments and vulnerability reviews of platform infrastructure.
• Automated monitoring systems that flag unusual account activity in real time.
• Secure data centres with physical access controls for servers holding player data.

No system is completely immune from risk, and y88 cannot guarantee absolute security. However, we take all reasonable precautions to minimise the risk of unauthorised access, disclosure or loss of your personal data.

In the event of a data breach that poses a risk to your rights or interests, y88 will notify affected players as promptly as possible and take immediate steps to contain and remediate the incident.

9 Your Rights

As a y88 player, you have the following rights over your personal data. To exercise any of these rights, contact the support team through the platform's live chat or by emailing the address shown in the footer.

10 Minors

y88 is strictly for adults aged 18 and above. The platform does not knowingly collect or process personal data belonging to anyone under the age of 18. If you have reason to believe that a minor has registered an account on y88, please contact support immediately so the account can be closed and the data deleted.

Age verification measures are applied during registration and may be requested at any time during your use of the platform. Providing false information about your age to bypass these checks is a breach of the Terms and Conditions and will result in account closure.

11 Policy Updates

y88 may update this Privacy Policy from time to time to reflect changes in the platform, data practices or legal requirements. The effective date shown at the top of this page indicates when the current version was last revised.

For material changes — those that meaningfully affect how your data is used — we will make reasonable efforts to notify registered players via platform notification or email. We encourage you to review this page periodically so you remain informed about how y88 handles your data.

Continued use of y88 following an update to this policy constitutes acceptance of the revised version. If you disagree with changes, you may close your account by contacting support.

12 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how your personal data is handled by y88, please get in touch. Our support team is available 24 hours a day, seven days a week and will respond to privacy-related queries as a priority.

You can reach us via the live chat feature within the platform or by emailing the address shown in the footer of this page. For data access, rectification or deletion requests, please include your registered account email and a brief description of your request so we can process it efficiently.

For general questions about using the platform, bonuses or payment methods, the FAQ page covers the most common topics and is typically the fastest way to get an answer.