y88 Privacy Policy — How We Handle Your Data

1About This Privacy Policy

This Privacy Policy describes how y88 collects, uses, stores, and protects the personal information of players who register and use the y88 platform — including the website at y88.bz and the y88 mobile app available for Android and iOS. It applies to all account holders, including those who use the platform for sports betting, slot games, fish games, live casino, or any other service offered on y88.

By creating an account on y88, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described here. This policy should be read alongside the Terms and Conditions, which govern your overall use of the platform.

y88 is committed to handling personal data responsibly. The platform collects only what is necessary to operate effectively, process PKR transactions, maintain account security, and provide a good experience to Pakistan players. We do not collect data beyond what is needed for these purposes.

2Data We Collect

y88 collects personal data through several channels — when you register an account, when you make deposits or withdrawals in PKR, when you contact support, and automatically through your use of the platform. The table below outlines the main categories of data collected:

y88 does not collect sensitive data such as religious beliefs, political opinions, or biometric data beyond what is required for standard identity verification. All identity documents submitted during verification are handled with strict confidentiality and are not visible to general support staff.

3How We Use Your Data

The personal data y88 holds is used for specific, clearly defined purposes. We do not use your data in ways that go beyond what is described here without your consent:

• Account management: To create, maintain, and secure your y88 account. This includes verifying your identity, processing login activity, and managing account settings.
• Transaction processing: To handle PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfers, cards, and mobile wallets. Payment data is used solely to complete and record transactions.
• Platform operation: To deliver sports betting markets, cricket and PSL odds, slot games, fish games, live casino, and VIP programme features correctly and without interruption.
• Customer support: To respond to enquiries, investigate disputes, process responsible gaming requests (such as deposit limits or self-exclusion), and resolve account issues.
• Security and fraud prevention: To detect and prevent unauthorised account access, bonus abuse, duplicate accounts, and suspicious transaction patterns. Technical and gaming activity data is used for this purpose.
• Responsible gaming: To monitor account activity and identify patterns that may indicate problem gaming behaviour, in line with our Responsible Gaming commitments. This is done to support player welfare, not for commercial profiling.
• Marketing communications: To send promotional offers, bonus notifications, and updates about new features — but only to accounts where marketing opt-in is active. You can opt out at any time through your account settings.
• Platform improvement: Aggregated, anonymised usage data is used to improve platform performance, game selection, and user experience. This data cannot be traced back to individual accounts.

4Data Sharing and Third Parties

y88 does not sell personal data. Your information is not passed to advertisers, data brokers, or marketing networks. Data sharing is limited to the following categories of recipients, and only for the purposes described:

• Payment processors: PKR transaction data is shared with payment service providers — including JazzCash, Easypaisa, Raast, and banking partners — to process deposits and withdrawals. These providers operate under their own data protection policies and are used solely for transaction fulfilment.
• Game providers: Third-party game studios that supply slot games, fish games, and live casino content may receive minimal session data necessary to deliver and verify game results. Game providers do not receive your registration details or payment information.
• Identity verification services: Where KYC verification is required, identity documents may be processed by a verification partner operating under strict confidentiality obligations.
• Technology and infrastructure providers: Hosting, database, and security technology vendors may have limited access to platform data as part of their service delivery. All such vendors are bound by data processing agreements that restrict how they can use the data.
• Legal and compliance obligations: y88 may disclose data where required by a valid legal process or where there is an obligation to report certain activity. In such cases, only the minimum data necessary is disclosed.

When data is shared with any third party, y88 ensures appropriate contractual protections are in place. No third party is permitted to use your data for purposes beyond what y88 has authorised for that specific purpose.

5Cookies and Tracking Technologies

y88 uses cookies and similar tracking technologies on its website and mobile app. These are small data files stored on your device that help the platform function correctly and improve your experience.

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against fraudulent requests. Disabling essential cookies will prevent the platform from working correctly.
• Functional cookies: Store your preferences such as language settings and notification preferences so you do not need to reset them each session.
• Analytics cookies: Collect anonymised data about how users navigate the platform — which sections are visited most, session length, and general interaction patterns. This data is used in aggregated form only and is not linked to individual accounts.
• Marketing cookies: Used to show relevant promotional content within the platform based on your activity. These are only active where you have opted into marketing communications.

You can manage cookie preferences through your browser settings. Blocking essential cookies will affect platform functionality. For the y88 mobile app, tracking preferences can be managed through your device's privacy settings.

6Data Security

y88 takes the security of your personal data and PKR transaction history seriously. The platform employs multiple layers of technical and organisational security measures:

• TLS encryption: All data transmitted between your device and y88's servers is encrypted in transit using industry-standard TLS protocols. This applies to login sessions, deposits, withdrawals, and support communications.
• Encrypted storage: Sensitive data including passwords and payment references is encrypted at rest. Passwords are hashed using modern one-way algorithms — y88 staff cannot read your password.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Support agents see only the data necessary to help with your query. Full payment data and identity documents are accessible only to authorised personnel.
• Session security: Accounts are protected by session timeout controls. Suspicious login attempts — such as access from an unrecognised location or device — may trigger additional verification steps.
• Security monitoring: y88's systems are monitored continuously for unusual activity patterns, unauthorised access attempts, and potential data breaches.

While y88 implements strong security measures, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password, do not share your login credentials, and contact support immediately if you notice any unusual activity on your account.

7Data Retention

y88 retains personal data only for as long as it is needed for the purposes described in this policy. The following general retention principles apply:

• Active accounts: All account data is retained while your account remains open. This includes registration information, transaction history in PKR, gaming activity records, and communication logs.
• Closed accounts: When an account is closed — whether voluntarily or by y88 — core account and transaction data is retained for a defined period for operational, dispute resolution, and record-keeping purposes. The standard retention period after account closure is up to five years unless a shorter or longer period is required by applicable obligations.
• Identity verification documents: KYC documents are retained for the period required to support ongoing account verification and dispute resolution. Documents are deleted securely once retention requirements are met.
• Support communications: Live chat transcripts and email records are retained for a period sufficient to resolve any ongoing or potential disputes related to the interaction.
• Marketing data: If you opt out of marketing, your opt-out preference is retained to ensure no further communications are sent. It is not used for any other purpose.

When data reaches the end of its retention period, it is deleted or anonymised in a secure manner. Anonymised data — which cannot be linked back to an individual — may be retained indefinitely for statistical and platform improvement purposes.

8Your Privacy Rights

As a y88 account holder, you have the following rights in relation to your personal data. Requests can be submitted through live chat or by emailing the support team:

• Access: You can request a copy of all personal data y88 holds about your account. This will be provided in a readable format within a reasonable timeframe.
• Correction: If any data y88 holds about you is inaccurate or incomplete, you can request that it be corrected. Contact support with the correct information and we will update your records.
• Deletion: You can request deletion of your personal data. Note that certain data may need to be retained for a period after account closure for operational and record-keeping reasons, as described in Section 7.
• Restriction: You can ask y88 to restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being verified following a correction request.
• Portability: You can request your data in a structured, machine-readable format where technically feasible.
• Object: You can object to the use of your data for marketing purposes at any time. This will be actioned immediately and will not affect your access to the platform.

y88 aims to respond to all data rights requests within 30 days. Where a request is complex or involves a large volume of data, the response period may be extended — you will be notified if this is the case.

9Children's Privacy

y88 is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or use y88 in any way.

If y88 discovers or has reasonable grounds to believe that a registered account belongs to a person under 18, the account will be suspended immediately, access will be restricted, and any associated funds will be withheld pending investigation. This is a firm platform policy and is not subject to appeal on the basis of parental consent.

If you are a parent or guardian and believe a person under 18 has registered on y88 using false information, please contact support immediately. Provide as much detail as possible and the account will be reviewed and actioned without delay.

For guidance on restricting access to online gaming platforms on shared or family devices, visit the Responsible Gaming page.

10Updates to This Privacy Policy

y88 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in data practices, or other relevant developments. When material changes are made, registered players will be notified via the email address associated with their account or through a notice displayed upon next login.

The updated policy will always be published on this page with a revised effective date at the top. The most current version of the Privacy Policy is the version that applies to your account. Continued use of y88 after an updated policy has been published constitutes acceptance of the revised version.

If you disagree with any changes to this policy, you should contact support before the effective date to discuss your options, including closing your account if you no longer wish to use the platform under the revised terms.

11Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how y88 has handled your personal information, you can reach the team through the following channels:

• Live chat: Available 24 hours a day, 7 days a week through the y88 website and mobile app. This is the fastest way to get a response.
• Email: Send your query to [email protected]. Include your registered account email and a description of your request. Privacy and data requests are handled by a dedicated team and are treated with full confidentiality.

When submitting a data rights request, please include your full name, registered email address, and a clear description of the request so the team can verify your identity and action your request efficiently.

For general questions about platform rules, bonuses, or account management, please refer to the FAQ page or the Terms and Conditions.