y888 Privacy Policy — How We Handle Your Personal Data

1 Who We Are

y888 is the online gaming platform operated at y888.life. When this Privacy Policy refers to "y888", "we", "us", or "our", it means the company operating y888.life as the data controller responsible for your personal information.

As a data controller, y888 determines the purposes and means of processing the personal data of registered players and website visitors. We process data in accordance with our gaming licence obligations and applicable data protection principles.

If you have any questions about how y888 processes your data, you can contact our Data Protection team directly at support@y888.life. We aim to respond to all privacy-related queries within 5 business days.

2 Personal Data We Collect

y888 collects only the personal data that is necessary to operate the platform safely, process PKR transactions securely, and comply with our gaming licence requirements. The categories of data we collect are:

y888 does not collect sensitive personal data such as religious beliefs, political opinions, biometric data (beyond selfie verification where required), or health information unless specifically required by our licensing authority for responsible gaming purposes.

3 How y888 Collects Your Data

y888 collects personal data through several channels, all of which are transparent and within your reasonable expectation as a user of an online gaming platform:

• Account Registration: When you create your y888 account, you provide identity and contact data directly. This is the primary source of your personal information on the platform.
• Deposits and Withdrawals: PKR payment transactions generate financial and transaction data. Your payment method details are processed by y888's integrated payment gateways (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card processors).
• Gameplay Activity: Every game you play on y888 generates transaction and usage data — which game, at what stake, for how long, with what outcome. This data is used for account management, dispute resolution, and responsible gaming monitoring.
• Device and Browser: When you access y888.life, standard technical data is automatically collected by our servers — your IP address, device type, and browser version. This is standard practice for all websites and is used for security and performance purposes.
• Cookies and Analytics: y888 uses first-party cookies to manage your session and preferences. See Section 6 for full details on cookies used on y888.life.
• Customer Support: When you contact y888 support via live chat or email, the content of that communication is recorded and stored for quality assurance and dispute resolution purposes.
• Identity Verification: For higher withdrawal limits or when required by our licence, y888 may request identity documents. These are collected through a secure upload process within your account.

4 Why y888 Uses Your Personal Data

y888 processes your personal data only for legitimate purposes that are directly connected to operating a licensed gaming platform. The specific legal bases and purposes are:

• Contract Performance: Processing your registration, managing your account, processing PKR deposits and withdrawals, and delivering the games and services you have signed up for. Without this processing, y888 cannot provide its services to you.
• Legal Obligation: y888 is required under its gaming licence to verify player identities (Know Your Customer, or KYC), monitor for money laundering (AML compliance), report suspicious transactions, and maintain records of all financial activity. This processing is not optional — it is a condition of our licence to operate.
• Legitimate Interests: y888 processes certain data based on legitimate business interests, including fraud detection and prevention, platform security monitoring, responsible gaming risk assessment, and product improvement analytics. We balance these interests against your privacy rights and will not process data under this basis where your rights outweigh our interests.
• Consent: Where y888 processes data for marketing communications — such as promotional emails about new games, bonuses, or tournaments — we do so only with your explicit consent. You can withdraw consent for marketing at any time through your account settings or by contacting support@y888.life.

5 Who y888 Shares Your Data With

y888 shares personal data with third parties only to the extent necessary to operate the platform, comply with legal requirements, and protect our players. The categories of recipients are:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors receive the financial data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual obligations to y888 regarding data protection.
• Identity Verification Providers: y888 uses third-party KYC (Know Your Customer) service providers to verify player identities when required. These providers receive the identity documents you submit and return a verification result. They are contractually prohibited from using your data for any purpose other than verification.
• Game Software Providers: Some games on y888 are powered by licensed third-party game studios. These providers may receive anonymised or pseudonymised gameplay data for game performance and fairness auditing purposes. They do not receive your personally identifying information.
• Regulatory and Law Enforcement: y888 is legally obligated to share data with our licensing authority, financial intelligence units, and law enforcement agencies when required by law, court order, or regulatory instruction. y888 does not proactively share data with authorities beyond what is required.
• Professional Advisers: y888's legal, accounting, and compliance advisers may access relevant data in the course of providing professional services. They operate under strict confidentiality obligations.

y888 does not share data with social media platforms, advertising networks, or data brokers. Any data shared with third parties is subject to contractual data protection requirements consistent with y888's obligations under this Privacy Policy.

6 Cookies & Tracking Technologies

y888.life uses cookies and similar technologies to make the platform work correctly and to understand how players use it. Here is a plain-language summary of the cookies y888 uses:

• Essential Cookies: These are required for the platform to function. They keep you logged in during your session, remember your language preference (English or Urdu), and maintain your game state. You cannot opt out of essential cookies without opting out of using y888 entirely.
• Analytics Cookies: y888 uses first-party analytics to understand how players navigate the platform — which pages are most visited, how long players spend in different game categories, and where users encounter difficulties. This data is aggregated and anonymised. It helps y888 improve the platform experience for Pakistani players.
• Security Cookies: y888 uses session cookies to detect and prevent fraudulent logins and to identify devices associated with suspicious activity patterns.

y888 does not use third-party advertising cookies or tracking pixels. When you visit y888.life, advertisers are not able to track your activity on our platform.

You can manage cookie preferences in your browser settings. Disabling essential cookies will affect your ability to log in and use y888 normally.

7 How y888 Secures Your Data

y888 takes the security of your personal data seriously and has implemented technical and organisational measures appropriate to the sensitivity of the data we hold:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and y888's servers is encrypted using industry-standard TLS (Transport Layer Security). This means your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data fields — including payment information and identity document data — are encrypted at rest in y888's databases. Even in the event of an unauthorised database access, this data would not be readable without the encryption keys.
• Access Controls: y888's internal systems operate on a need-to-know basis. Customer-facing staff can access only the account data necessary to assist you. Backend data access is logged, monitored, and reviewed regularly.
• Fraud Monitoring: y888 operates continuous automated monitoring for suspicious account activity, unusual transaction patterns, and login anomalies. Triggered alerts are reviewed by y888's security team around the clock.
• Incident Response: y888 has a documented data breach response procedure. In the unlikely event of a security incident that affects your personal data, y888 will notify affected players within 72 hours and provide clear information about what happened and what we are doing about it.

8 How Long y888 Keeps Your Data

y888 retains personal data for as long as it is necessary for the purpose for which it was collected, and in accordance with our legal and regulatory obligations:

• Active Account Data: While your y888 account is active, we retain all account, transaction, and gameplay data necessary to operate your account.
• After Account Closure: When you close your y888 account, we retain your account and transaction records for a minimum of 5 years from the date of closure. This is a requirement under our gaming licence for AML compliance and dispute resolution purposes.
• Identity Verification Documents: CNIC copies and verification selfies are retained for 5 years from the date of submission, consistent with KYC regulatory requirements.
• Support Communications: Customer support chat transcripts and emails are retained for 3 years from the date of communication.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for 6 years as evidence of compliance with consent requirements.

After the applicable retention period expires, y888 will securely delete or anonymise your personal data so that it can no longer be associated with you.

9 Your Privacy Rights

As a y888 player, you have the following rights over your personal data. These are not theoretical rights — y888 is committed to honouring each of them in practice:

To exercise any of these rights, contact support@y888.life with your full name, registered mobile number, and a description of your request. y888 may need to verify your identity before processing rights requests.

10 Children's Privacy

y888 is strictly an adults-only platform. The minimum age to register and use y888 is 18 years. y888 does not knowingly collect personal data from anyone under the age of 18.

y888 uses age verification checks during registration, including mobile number verification and, where required, CNIC-based age confirmation. If y888 discovers that a registered account belongs to a person under 18, the account will be immediately suspended, all transactions will be reviewed, and any deposits will be returned to the original payment source after the investigation is complete.

If you are a parent or guardian and believe your child has registered on y888, please contact support@y888.life immediately. We will investigate and take appropriate action within 24 hours.

11 Third-Party Links

y888.life does not contain links to third-party websites as a general practice. However, in the event that any third-party link ever appears on the platform — for example, in informational content — y888 is not responsible for the privacy practices of those external websites. This Privacy Policy applies only to y888.life and the y888 platform. Visiting any external website from y888 is at your own risk, and you should review the privacy policy of that website independently.

12 Updates to This Privacy Policy

y888 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, new services added to the platform, or updated regulatory requirements. When this Privacy Policy is updated:

• The "Last Updated" date at the top of this page will be revised to reflect the date of the change.
• For material changes — meaning changes that significantly affect how we use your data or your privacy rights — y888 will notify registered players via SMS to their registered Pakistani mobile number or via in-platform notification at least 7 days before the change takes effect.
• Continued use of y888 after the effective date of a revised Privacy Policy constitutes acceptance of the updated policy.
• If you do not agree with an updated Privacy Policy, you should close your y888 account before the changes take effect. Any balance in your account will be paid out to your verified payment method.

We recommend bookmarking this page and reviewing it occasionally — particularly if you receive a notification from y888 about a policy update.

13 Contact y888 About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how y888 has handled your personal information, please get in touch:

• Email: support@y888.life (for privacy queries, use the subject line "Privacy Query")
• Live Chat: Available 24/7 from your logged-in y888 account
• Language: English or Urdu — whichever is more comfortable for you
• Response Time: Privacy queries are acknowledged within 24 hours and resolved within 5 business days in most cases. Complex requests (such as Subject Access Requests) may take up to 30 days.