y988 Privacy Policy

This Privacy Policy ("Policy") describes how y988 ("y988", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("User", "you", "your") who access, register with, or use the y988 online betting and casino platform available at https://y988.org and any associated sub-domains or mobile-optimised versions thereof.

y988 is committed to handling personal data responsibly and in accordance with applicable data protection principles. By creating a y988 account or using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the y988 Terms & Conditions, which govern the overall relationship between y988 and its players.

If you do not agree with any aspect of this Policy, you should discontinue use of the y988 platform. For Pakistani players, this Policy governs all data processing activities in connection with your use of y988.

y988 collects personal data that is necessary to provide its services, comply with regulatory obligations, and maintain a safe, fair gaming environment. The categories of personal data y988 may collect include:

• Identity Data: Full legal name, date of birth, gender, and copies of government-issued identification documents (such as Pakistan CNIC, passport, or driving licence) collected during Know Your Customer (KYC) verification.
• Contact Data: Residential address (including city — Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, or other Pakistani cities), email address, and mobile phone number.
• Account Data: Username, encrypted password, account preferences, communication settings, self-exclusion status, and responsible gaming limit configurations.
• Financial Data: Deposit and withdrawal records, transaction amounts in PKR, payment method details (e.g., JazzCash account reference, Easypaisa wallet identifier, bank account or card details as applicable for HBL, UBL, Meezan Bank, or Bank Alfalah transactions), and KYC-related financial documents.
• Transactional Data: Complete betting and gaming history including bet amounts, selections, outcomes, bonus usage, and game session data.
• Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, time zone, and other standard technical metadata collected automatically when you access y988.
• Usage Data: Page views, navigation patterns, session durations, features accessed, search queries within the platform, and in-play betting interaction data.
• Communications Data: Records of all communications between you and y988, including support enquiries, complaint correspondence, and responses.

y988 collects personal data through the following means:

• Direct Collection: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, pixel tags, server logs, and similar tracking technologies when you browse or interact with the y988 platform.
• Third-Party Sources: Identity and address verification data may be cross-referenced with third-party identity verification services and fraud prevention databases as part of our KYC and anti-money laundering compliance obligations.
• Payment Processors: Transaction confirmation and status data received from payment providers including JazzCash, Easypaisa, and banking partners when you process deposits or withdrawals.

y988 processes your personal data only where a lawful basis exists. The primary purposes for which y988 processes personal data, and the corresponding legal bases, are as follows:

y988 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. y988 may share your personal data only in the following circumstances:

• Service Providers: Third-party processors who provide services to y988 on a contracted basis, including payment processing, KYC and identity verification, fraud prevention, cloud hosting, analytics, and customer support infrastructure. All processors are bound by data processing agreements requiring equivalent data protection standards.
• Game Providers: Casino and slot software providers (e.g., Pragmatic Play, Evolution, PG Soft, JILI) receive the minimum data necessary to deliver game functionality and maintain responsible gaming records.
• Regulatory & Legal Authorities: Where required by applicable law, regulation, court order, or legitimate regulatory enquiry, y988 may disclose personal data to competent authorities, law enforcement agencies, or financial regulators.
• Responsible Gaming Organisations: In cases of confirmed self-exclusion or escalated responsible gaming intervention, limited data may be shared with affiliated responsible gaming programmes as required.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of y988's assets, player data may be transferred to the successor entity subject to equivalent privacy protections.

y988 uses cookies and similar technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and where consented to, deliver relevant promotions. The categories of cookies used by y988 are:

• Strictly Necessary Cookies: Essential for the platform to function — session authentication, security tokens, and load balancing. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your language preference, in-play display settings, and account configuration choices to improve your y988 experience.
• Analytics Cookies: Aggregate, anonymised data on how players navigate y988 — used to identify areas for improvement. No individual player is identified in analytics reports.
• Marketing Cookies: Used only with your consent to track promotional campaign effectiveness and personalise offers. These can be disabled via your account communication preferences.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the y988 platform fully.

y988 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Retention periods include:

• Active Accounts: All account data is retained for the duration of the account relationship.
• Closed Accounts: Identity, financial, and transactional data is retained for a minimum of five (5) years following account closure to meet AML record-keeping obligations.
• KYC Documents: Identity verification documents are retained for the period required under applicable anti-money laundering regulations, which is typically five years from the end of the account relationship.
• Support Communications: Correspondence records are retained for three (3) years following resolution of the matter.
• Technical Logs: Server and security logs are retained for a rolling period of up to twelve (12) months.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

y988 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the y988 platform
• Encryption of sensitive data at rest, including payment information and identity documents
• Access controls restricting personal data to authorised personnel with a need-to-know basis
• Regular security assessments and penetration testing of platform infrastructure
• Two-factor authentication (2FA) available to all y988 account holders
• Incident response procedures for timely detection and notification of data breaches where required

While y988 applies industry-standard security practices, no method of transmission over the internet or electronic storage is completely infallible. You should also take steps to protect your own account by using a strong, unique password and enabling 2FA on your y988 account.

Subject to applicable law, you hold the following rights in respect of your personal data held by y988:

• Right of Access: You may request a copy of the personal data y988 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Basic account details can be updated directly within your y988 account settings.
• Right to Erasure: You may request deletion of your personal data where y988 no longer has a lawful basis for retaining it. Note that mandatory retention obligations (e.g., AML requirements) may prevent immediate or complete deletion.
• Right to Restrict Processing: You may request that y988 restricts the processing of your data in certain circumstances, for example while accuracy is contested.
• Right to Data Portability: Where processing is based on consent or contract, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact y988 by email at the address listed in the footer of this page. y988 will respond within a reasonable timeframe, typically within 30 days of receipt of a verified request.

y988 is strictly an adult platform. The y988 service is not directed at, and y988 does not knowingly collect personal data from, individuals under the age of 18. If y988 becomes aware that personal data has been collected from a person under 18, such data will be deleted and the associated account permanently closed. If you believe a minor has registered on y988, please notify the support team immediately by email.

y988 may process or store your personal data on servers located outside Pakistan. Where such transfers occur, y988 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. This may include contractual clauses between y988 and its processors, standard data protection contractual provisions, or transfers to jurisdictions that maintain adequate data protection standards as assessed by y988.

y988 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. When material changes are made, y988 will notify registered users via email to the registered address and/or through a prominent notice on the y988 platform. The updated Policy will be identified by a revised "Last Updated" date at the top of this page. Continued use of y988 following notification of amendments constitutes acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by y988, please contact the y988 support and data team by email. The contact email address is displayed in the footer of every page on this website. y988's support team is available 24 hours a day, 7 days a week. Please include your registered account username and the specific nature of your privacy enquiry so your request can be handled promptly and accurately.