yy888 Privacy Policy
How We Collect, Use, and Protect Your Personal Data

1. Introduction

yy888 ("we", "us", "our") is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy sets out in clear, plain English how yy888 collects, uses, stores, shares, and protects your personal information when you access or use the yy888 online casino and sports betting platform.

We understand that Pakistani players value both their privacy and their security. That is why yy888 has built its data practices around the principle of collecting only what is genuinely necessary, protecting what we hold to the highest technical standard, and being fully transparent about everything we do with your information.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with yy888.

2. Data Controller

For the purposes of applicable data protection law, yy888 is the data controller responsible for the personal data of players using the yy888 platform. yy888 operates under an internationally recognised gaming licence and processes personal data in accordance with the data protection requirements attached to that licence.

If you have any questions, concerns, or requests relating to your personal data and how yy888 handles it, you may contact our Data Protection team directly at [email protected].

3. Data We Collect

yy888 collects the following categories of personal data from players and platform visitors. We only collect data that serves a specific, legitimate purpose in operating the yy888 platform safely and fairly.

3.1 Identity & Registration Data

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (used for mandatory 21+ age verification)
• Pakistani National Identity Card (CNIC) number or passport number
• Gender (where provided voluntarily during registration)
• Nationality and country of residence

3.2 Contact Data

• Email address (used for account communication, transaction confirmations, and support)
• Pakistani mobile phone number (used for account verification and transaction alerts)
• Residential address (collected as part of KYC verification where required)

3.3 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet number (used for PKR deposits and withdrawals)
• Bank account details provided for HBL, UBL, or Meezan Bank transfers (account title and IBAN, where applicable)
• Transaction history — all deposits, withdrawals, bets placed, and game outcomes on the yy888 platform
• USDT wallet addresses provided for cryptocurrency transactions

Important: yy888 does not store complete payment card numbers. All payment processing for card-based methods is handled externally by our licensed payment processing partners, who operate to PCI-DSS standards.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• yy888 session data including login timestamps, session duration, and platform navigation patterns
• Crash reports and error logs generated during platform use

3.5 Behavioural & Gaming Data

• Betting history across all yy888 markets including cricket, PSL, slots, live casino, and Tower games
• Bonus and promotion usage history
• Responsible gaming tool settings, including deposit limits and self-exclusion requests
• Customer support interaction records and chat logs

3.6 KYC Verification Documents

• Scanned or photographed copies of government-issued identity documents (CNIC, passport)
• Proof of address documents where requested
• Source of funds documentation where required by our anti-money laundering obligations

4. How We Collect Your Data

yy888 collects personal data through the following channels:

• Directly from you — when you register a yy888 account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or respond to a survey or promotion.
• Automatically — through cookies, web beacons, and server logs that record your interactions with the yy888 platform and website.
• From third-party verification partners — identity verification services and fraud detection providers may share information with us as part of the KYC and anti-money laundering process.
• From payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT network providers share transaction confirmation data with yy888 to reconcile deposits and withdrawals.

5. How We Use Your Personal Data

yy888 uses the personal data we collect for the following purposes:

Purpose	Data Used
Creating and managing your yy888 account	Identity data, contact data, registration data
Age verification (21+ requirement)	Date of birth, KYC identity documents
Processing PKR deposits and withdrawals	Financial data, transaction data, payment method details
Fraud prevention and anti-money laundering	Identity data, financial data, device data, KYC documents
Delivering customer support	Contact data, account data, support interaction records
Responsible gaming monitoring	Gaming data, deposit history, session data, self-exclusion records
Sending account and transaction notifications	Contact data, transaction data
Platform improvement and analytics	Technical data, behavioural data (anonymised where possible)
Regulatory compliance and reporting	Identity data, financial data, KYC documents
Promotional communications (where consented)	Contact data, gaming preferences, promotion history

6. Legal Basis for Processing

yy888 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account creation, game provision, and payment processing.
• Legal obligation: Processing required to comply with our obligations under our gaming licence, anti-money laundering regulations, and applicable data protection law — including KYC verification and transaction reporting.
• Legitimate interests: Processing carried out for yy888's legitimate business interests, such as fraud prevention, platform security, and improving the yy888 gaming experience, provided these interests do not override your fundamental rights.
• Consent: Processing based on your explicit consent — for example, sending you promotional emails about yy888 bonuses, PSL betting offers, or new game releases. You may withdraw consent for marketing communications at any time by contacting support.

7. Data Sharing & Disclosure

yy888 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

7.1 Service Providers

yy888 engages trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include identity verification and KYC providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay), fraud detection services, customer support platform providers, and cloud infrastructure providers. All service providers are contractually prohibited from using your data for any purpose beyond the specific service they provide to yy888.

7.2 Regulatory Authorities

yy888 may be required to disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or other competent authorities in response to lawful requests, court orders, or as required by the terms of our gaming licence. In such cases, yy888 will disclose only the minimum data necessary to comply with the legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of yy888's business, personal data held by yy888 may be transferred as part of the transaction. In such circumstances, yy888 will notify affected players via their registered email address and ensure the receiving entity is bound by privacy obligations no less protective than those set out in this policy.

7.4 With Your Consent

yy888 may share your personal data with other parties in circumstances not described above where you have given your specific, informed consent for such sharing. You may withdraw consent at any time.

8. Data Retention

yy888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention principles apply:

• Active accounts: Personal data is retained for the full duration of your active relationship with yy888, plus any applicable statutory period thereafter.
• Closed accounts: Following account closure, yy888 retains identity, transaction, and KYC data for a minimum of five years in compliance with anti-money laundering record-keeping requirements under our gaming licence.
• Self-excluded accounts: Where a player requests self-exclusion, yy888 retains sufficient data to enforce the self-exclusion and prevent re-registration for the duration of the exclusion period.
• Support records: Customer support interactions are retained for up to three years following the most recent interaction to allow for dispute resolution and service quality review.
• Marketing data: Where you have withdrawn consent for marketing communications, your preference is recorded and retained indefinitely to ensure we honour your opt-out.

Once the applicable retention period has expired, yy888 will securely delete or anonymise your personal data in a manner that prevents recovery or reconstruction.

9. Security Measures

yy888 takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures to protect your information against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmissions between your device and yy888 servers.
• Encrypted data storage for sensitive personal data including identity documents and financial records, using AES-256 encryption at rest.
• Access controls — yy888 staff access to personal data is role-based and strictly limited to those who require it to perform their job function. All access is logged and audited.
• Two-factor authentication available for all yy888 player accounts and mandatory for all internal staff accounts.
• Regular security testing including penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures — in the event of a data breach affecting your personal data, yy888 will notify you and the relevant regulatory authority within the timeframe required by applicable law.

While yy888 takes every reasonable precaution to secure your data, no internet-based platform can guarantee absolute security. You also play a role in protecting your own data by keeping your yy888 login credentials confidential and notifying us immediately of any suspected unauthorised access.

10. Cookies & Tracking Technologies

yy888 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and improve the overall yy888 gaming experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the yy888 platform. These cookies enable login sessions, game functionality, and secure payment processing. They cannot be disabled without significantly impairing platform performance.
• Functional cookies: Used to remember your preferences such as language settings, display options, and responsible gaming tool configurations on the yy888 platform.
• Analytical cookies: Used by yy888 to understand how players interact with the platform — including which games are most popular, which features are used most often, and where technical issues occur. This data is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account security threats on the yy888 platform.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect the functionality of the yy888 platform. yy888 does not use third-party advertising cookies to track you across other websites.

11. Your Data Rights

As a yy888 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account details and a clear description of your request.

• 👁️
  Right of Access — You may request a copy of all personal data yy888 holds about you, including your registration data, transaction history, KYC records, and gaming data.
• ✏️
  Right to Rectification — If any personal data yy888 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• 🗑️
  Right to Erasure — You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that we may be required to retain certain data under our gaming licence and anti-money laundering obligations even after an erasure request.
• ⏸️
  Right to Restriction — You may request that yy888 temporarily restrict processing of your personal data in certain circumstances, such as while a dispute regarding its accuracy is being resolved.
• 📦
  Right to Portability — You may request your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider where technically feasible.
• 🚫
  Right to Object — You may object to yy888 processing your personal data on the grounds of legitimate interests, including for direct marketing purposes. Where you object to marketing, we will stop immediately.
• ↩️
  Right to Withdraw Consent — Where yy888 processes your data based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

yy888 will respond to all verifiable data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

12. Minors & Age Protection

The yy888 platform is strictly intended for adults aged 21 years and above. yy888 does not knowingly collect personal data from individuals under the age of 21. If yy888 discovers that personal data belonging to a minor has been collected — whether through a misrepresentation of age during registration or any other means — the account will be closed immediately, all collected data will be deleted promptly, and any deposited funds will be returned to the payment source after appropriate verification.

Parents and guardians who believe that a minor may have registered on yy888 or provided personal data to yy888 are encouraged to contact us immediately at [email protected] so that we can take prompt corrective action.

13. International Data Transfers

yy888 is an internationally licensed gaming platform. Accordingly, your personal data may be processed by yy888 or its service providers in countries outside Pakistan. Where personal data is transferred internationally, yy888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Such safeguards may include contractual data protection clauses, adequacy decisions, or the equivalent binding commitments from the receiving party.

By using the yy888 platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject always to the protections outlined in this Privacy Policy.

14. Changes to This Privacy Policy

yy888 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations under our gaming licence, or applicable data protection requirements. When we make material changes, we will notify registered players by email to their registered address and display a prominent notice on the yy888 platform for a reasonable period following the change.

The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of yy888 following notification of changes constitutes your acceptance of the revised policy.

15. Contact & Data Requests

For any privacy-related queries, data rights requests, concerns about how yy888 handles your personal information, or to report a suspected privacy incident, please contact our Data Protection team through the following channel:

• Email: [email protected]
• Live Chat: Available 24 hours, 7 days a week via the yy888 platform
• Response Time: yy888 aims to acknowledge all privacy-related requests within 48 hours and provide a full response within 30 days.