yy888 Privacy Policy

1. Who We Are

yy888 (referred to throughout this Privacy Policy as "yy888", "we", "us", or "our") is an internationally licensed online casino and sports betting platform operating at yy888.ws. yy888 is the data controller in respect of the personal data collected through the yy888 website, mobile applications, and any associated digital services.

This Privacy Policy applies to all individuals who visit the yy888 platform, register an account, place bets, access customer support, or otherwise interact with yy888's digital products and services, including players based in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan.

This policy should be read alongside the yy888 Terms & Conditions, which govern the overall relationship between yy888 and its registered players.

2. Data We Collect

yy888 collects the following categories of personal data from users of the platform:

• Identity Data: Full legal name, date of birth, CNIC or passport number, photograph (where required for identity verification), and nationality.
• Contact Data: Email address, mobile phone number, and city or region of residence within Pakistan.
• Financial Data: Payment account references for JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, and USDT TRC20 wallets; deposit and withdrawal transaction records; and balance history.
• Technical Data: IP address, browser type and version, device type, operating system, time zone, cookie identifiers, and session logs.
• Usage Data: Platform navigation data, games accessed, bets placed and settled, PSL or cricket betting activity, session durations, win and loss records, and bonus usage history.
• Communications Data: Records of your correspondence with yy888 support, including live chat transcripts, emails, and feedback submissions.
• Marketing Preference Data: Your consent or objection to receiving promotional communications from yy888, including details of offers and bonuses.

yy888 does not collect special category data (as defined by applicable data protection legislation) unless strictly necessary for compliance purposes — for example, processing a responsible gaming self-exclusion request that may involve health-related context.

3. How We Collect Data

yy888 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account on yy888, completing identity verification, making a deposit or withdrawal via JazzCash or EasyPaisa, contacting support, or updating your profile settings.
• Automated technologies: Technical and usage data collected automatically when you access the yy888 platform, through cookies, server logs, pixel tags, and similar technologies. This includes data collected when you browse the yy888 website, open the mobile application, or interact with in-platform features.
• Third-party sources: Identity verification and KYC data from licensed verification service providers; fraud screening data from risk management partners; and payment confirmation data from payment processors including mobile wallet operators active in Pakistan.

4. How We Use Your Data

yy888 uses the personal data it collects for the following purposes, each supported by a corresponding legal basis:

1. Account registration and management — to create and maintain your yy888 player account, verify your identity, enforce the 21+ age restriction, and authenticate your login sessions. Legal basis: contract performance.
2. Payment processing — to process your deposits via JazzCash, EasyPaisa, HBL, UBL, and other supported methods, and to facilitate withdrawals to your verified payment account. Legal basis: contract performance.
3. Regulatory compliance — to comply with Anti-Money Laundering (AML) obligations, Know Your Customer (KYC) requirements, and any reporting duties imposed by yy888's international gaming licence. Legal basis: legal obligation.
4. Responsible gaming — to monitor your gaming activity for indicators of problem gambling behaviour, administer self-exclusion or deposit limit requests, and provide responsible gaming tools. Legal basis: legal obligation and legitimate interest.
5. Fraud detection and platform security — to detect, investigate, and prevent fraudulent activity, bonus abuse, and unauthorised account access. Legal basis: legitimate interest.
6. Customer support — to respond to your queries, process your complaints, and maintain records of communications for quality assurance. Legal basis: contract performance and legitimate interest.
7. Platform improvement — to analyse usage patterns and improve the functionality, design, and game offering of the yy888 platform. Legal basis: legitimate interest.
8. Marketing communications — to send you promotional offers, bonus notifications, and news about yy888 if you have opted in to receive such communications. Legal basis: consent.

5. Sharing Your Data

yy888 does not sell your personal data to any third party. yy888 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to binding data processing agreements:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and Raast, solely to process your financial transactions.
• Identity verification providers: Licensed KYC and AML screening services used to verify player identities and screen against sanctions and politically exposed person (PEP) databases.
• Fraud prevention and risk management partners: Third-party services that assist yy888 in detecting fraudulent activity, multi-accounting, and bonus abuse.
• Regulatory authorities: yy888's gaming licence regulator and any relevant law enforcement or government authority where disclosure is required by applicable law or court order.
• IT and platform service providers: Cloud hosting, data storage, and software service providers who support the technical operation of the yy888 platform, all subject to strict data processing agreements.
• Professional advisors: Legal, accounting, and auditing firms engaged by yy888 on a confidential basis where necessary for the operation of the business.

6. Data Retention

yy888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under applicable financial regulation.
• Communications data: Support and live chat records are retained for up to two (2) years from the date of the interaction, unless the communication relates to an ongoing dispute or regulatory matter.
• Technical and usage data: Generally retained for up to twelve (12) months from collection, unless required for longer periods for fraud investigation purposes.
• Marketing preference data: Retained until you withdraw your consent or request deletion.

Upon expiry of the applicable retention period, yy888 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.

7. Data Security

yy888 takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational security measures to protect your information from unauthorised access, accidental loss, destruction, or disclosure:

• All data transmitted between your device and yy888 servers is encrypted using TLS (Transport Layer Security) protocols.
• Sensitive data, including financial records and identity documents, is stored in encrypted form at rest using industry-standard encryption algorithms.
• Access to personal data within yy888 is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• The yy888 platform undergoes regular penetration testing and independent security audits conducted by qualified third-party security specialists.
• Automated monitoring systems are in place to detect and respond to potential security incidents in real time.

In the event of a personal data breach that poses a material risk to your rights and freedoms, yy888 will notify affected players and, where required, the relevant regulatory authority within the timeframe mandated by applicable law.

8. Cookies & Tracking Technologies

The yy888 platform uses cookies and similar tracking technologies to improve your user experience, maintain your login session, and analyse platform usage. The categories of cookies used by yy888 are as follows:

• Strictly necessary cookies: Required for the platform to function correctly — these include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your experience on yy888.
• Analytical cookies: Collect anonymised data about how players use the platform — which games are most popular, where users navigate, and how long sessions last — to help yy888 improve the platform experience.
• Responsible gaming cookies: Used to maintain session time data that powers the Reality Check and Session Reminder responsible gaming tools.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the yy888 platform, particularly features that require an active login session. yy888 does not use third-party advertising cookies and does not participate in cross-site behavioural advertising networks.

9. Your Rights

As a player on the yy888 platform, you hold the following rights in respect of your personal data, subject to applicable legal exceptions:

• Right of access: You have the right to request a copy of the personal data yy888 holds about you, together with information about how that data is processed.
• Right to rectification: You have the right to request correction of any personal data held by yy888 that is inaccurate or incomplete.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where yy888 no longer needs the data for the purpose for which it was collected and no legal retention obligation applies.
• Right to restriction: You have the right to request that yy888 restrict the processing of your data while a rectification or objection request is being assessed.
• Right to portability: Where processing is based on your consent or contract performance, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interest, including profiling for responsible gaming monitoring purposes. yy888 will assess such objections on a case-by-case basis.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the yy888 Data Protection team via live chat in the account dashboard or by email at [email protected]. yy888 will respond to data rights requests within thirty (30) days of receipt.

10. Marketing Communications

yy888 will only send you marketing communications — including promotional offers, bonus alerts, and platform news — where you have given your explicit consent to receive such communications at the time of registration or through your account settings.

You can withdraw your consent to receive marketing communications at any time by updating your notification preferences in the yy888 account dashboard, or by contacting yy888 support. Withdrawal of marketing consent does not affect your ability to continue using the platform or receiving transactional communications such as payment confirmations, security alerts, and regulatory notifications.

yy888 does not engage in unsolicited bulk email marketing. We do not share your contact details with third-party marketers for the purpose of sending you advertising communications from other brands.

11. Minors & Age Policy

The yy888 platform is strictly intended for adults aged 21 years and above. yy888 does not knowingly collect personal data from individuals under the age of 21. All registration attempts are subject to age verification checks as part of the yy888 KYC process.

If yy888 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated data will be deleted as soon as is legally permissible, and any funds in the account will be handled in accordance with the yy888 underage account policy.

12. International Data Transfers

As an internationally licensed platform, yy888 may transfer your personal data to data processors and service providers located outside Pakistan. Where such transfers occur, yy888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Safeguards used by yy888 for international transfers include binding data processing agreements with all third-party processors, contractual clauses that require recipient parties to process data only for the purposes specified by yy888 and to apply security standards consistent with those maintained by yy888 itself.

13. Third-Party Links

The yy888 platform does not contain links to external third-party websites for general browsing purposes. Any links to third-party service documentation (such as payment provider terms) are provided solely to assist you in understanding the services used in connection with yy888's platform. yy888 is not responsible for the privacy practices or content of any third-party websites, and this Privacy Policy applies solely to the yy888 platform.

14. Changes to This Privacy Policy

yy888 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how yy888 processes your personal data or the rights available to you — will be communicated to registered players by email and through a prominent notice on the yy888 platform at least seven (7) days before taking effect.

Non-material changes, such as typographical corrections, clarifications, or updates that do not alter the substance of this policy, may take effect immediately upon publication. The version number and "Last Updated" date at the top of this policy will always reflect the current version. We encourage you to review this Privacy Policy periodically to stay informed about how yy888 protects your personal data.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how yy888 has handled your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 in the yy888 account dashboard.
• Email: [email protected] — please include "Privacy Request" in the subject line for data rights queries.

yy888 is committed to resolving all privacy-related concerns promptly and fairly. We will acknowledge your query within two (2) business days and provide a substantive response within thirty (30) days of receipt.