y988 Privacy Policy

1 Introduction

y988 ("the Platform", "we", "us" or "our") operates the website at https://y988.cam — an English-language online betting and casino information platform serving Pakistani users. We recognise that your personal information is valuable and deserves careful, responsible handling.

This Privacy Policy ("Policy") describes the types of personal data we collect from users ("you" or "your") of the y988 Platform, the purposes for which that data is processed, how it is stored and protected, with whom it may be shared, how long it is retained, and the rights you may exercise in relation to your personal data.

This Policy should be read in conjunction with our Terms & Conditions. By accessing or using the y988 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Controller" means the entity responsible for determining the purposes and means of processing Personal Data — in this context, y988 and/or its associated Operator.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data.
• "Cookies" means small data files placed on your device by the Platform for the purposes described in Section 9 of this Policy.
• "KYC" means Know Your Customer — identity verification procedures required under applicable anti-money laundering and regulatory frameworks.
• "Platform" means the y988 website at https://y988.cam and all associated pages, features and services.
• "Operator" means the licensed gaming or betting operator associated with the y988 Platform.

3 Data We Collect

y988 collects personal data through several channels, including direct user input during registration, automatic collection through platform interactions, and, where applicable, third-party verification services. The categories of Personal Data we may collect include:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification purposes)
• Gender (where provided voluntarily)
• Government-issued identification document details (e.g., CNIC number, passport number — as required for KYC verification)
• Nationality and country of residence

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, district, province — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)

3.3 Financial Data

• Deposit and withdrawal transaction history
• Payment method identifiers (e.g., partial account references for bank transfer, e-wallet, or other methods available in the cashier)
• Account balance and wagering history

3.4 Technical & Usage Data

• IP address and geolocation data
• Device type, operating system and browser information
• Session duration, pages visited and interaction patterns
• Login timestamps and access logs
• Referral source and UTM parameters where applicable

3.5 Communications Data

• Support queries, complaints and correspondence submitted via email or live chat
• Feedback, survey responses and voluntary communications

4 Data Processing

y988 processes your Personal Data for the following purposes:

5 Legal Basis for Processing

y988 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and the Platform — including account creation, deposit processing, wagering activity and withdrawal administration.
• Legal Obligation: Processing necessary to comply with applicable law, including KYC/AML obligations, age verification requirements and regulatory reporting duties under the Operator's licence jurisdiction.
• Legitimate Interests: Processing undertaken in pursuit of legitimate business interests — including fraud detection, platform security, technical maintenance and responsible gambling monitoring — where such interests are not overridden by your privacy rights.
• Consent: Processing activities for which you have provided explicit consent — including marketing communications, certain cookie categories and optional data collection. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of prior processing.

6 Data Sharing & Disclosure

y988 does not sell, rent or trade your Personal Data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 The Operator

Personal Data is shared with the licensed Operator whose platform powers the y988 Services, for the purposes of account management, transaction processing, KYC compliance, responsible gambling monitoring and regulatory reporting.

6.2 KYC and Identity Verification Providers

Third-party identity verification services may receive identity data (including CNIC details, passport information and proof of address) to perform AML and KYC checks required under the Operator's regulatory obligations.

6.3 Payment Processing Services

Payment service providers involved in processing deposits and withdrawals may receive relevant transaction data. References to familiar Pakistani payment instruments — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are contextual only. These providers operate under their own privacy frameworks and their mention here does not imply endorsement of gambling activities.

6.4 Regulatory and Law Enforcement Authorities

y988 and the Operator may disclose Personal Data to regulatory bodies, law enforcement agencies or other competent authorities where required to do so by applicable law, court order or valid legal process.

6.5 Technology and Analytics Service Providers

Third-party service providers that support platform operations — including hosting, cybersecurity, analytics and customer support systems — may process Personal Data as Data Processors on our behalf, under contractual data processing agreements.

7 Data Retention

y988 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or regulatory reporting obligations.

As a general principle:

• Account Data: Retained for the duration of the Account's active status and for a period following Account closure as required by the Operator's regulatory obligations — typically five (5) years post-closure.
• KYC Documentation: Retained for the minimum period required by applicable AML regulations in the Operator's licence jurisdiction — commonly five (5) to seven (7) years from the date of last transaction.
• Financial Transaction Records: Retained in accordance with applicable financial record-keeping requirements, typically five (5) years.
• Support Communications: Retained for a reasonable period to facilitate dispute resolution and quality assurance — generally two (2) years unless a longer period is required.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it is promptly deleted or anonymised.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

8 Data Security

y988 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction:

• TLS/HTTPS Encryption: All data transmitted between your browser and the Platform is encrypted using Transport Layer Security (TLS), preventing interception of data in transit.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and audit logging.
• Secure Storage: Personal Data is stored on secured servers with appropriate physical and logical access protections and regular security review cycles.
• Fraud Monitoring: Automated systems monitor account activity for indicators of fraudulent behaviour, unauthorised access attempts and suspicious transaction patterns.
• Data Breach Procedures: y988 maintains documented data breach response procedures to detect, contain, assess and — where required — report any personal data breach to the appropriate regulatory authority within the required timeframe.

9 Cookies & Tracking Technologies

y988 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity and gather anonymised analytics. The following categories of cookies may be used:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the Platform. Consent-based cookie categories may be accepted or declined when prompted on your first visit.

10 Your Rights

Depending on the applicable data protection laws of the jurisdiction governing this Policy, you may have some or all of the following rights in relation to your Personal Data:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data held about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, such as during an accuracy dispute or where processing is unlawful.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and the right to object at any time to the processing of your Personal Data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at [email protected]. We will respond to verified requests within a reasonable timeframe in accordance with applicable law. We may require you to verify your identity before processing any data rights request.

11 Minors

The y988 Platform is strictly intended for adults aged 18 years and above, or such higher minimum age as is required by the Operator's applicable licence jurisdiction. We do not knowingly collect, process or store Personal Data relating to any person under the applicable minimum age.

If y988 becomes aware that Personal Data has been collected from a person below the minimum eligible age, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Platform, please contact us at [email protected] without delay.

Age verification measures, including KYC document checks, are implemented as a primary safeguard against underage access. The Platform also strongly recommends the use of parental controls and internet filtering tools to prevent access by minors to gambling-related content.

12 International Data Transfers

y988 and its associated Operator may transfer your Personal Data to, and process it in, countries other than Pakistan or the country in which you are located. These jurisdictions may have data protection laws that differ from those applicable in your country of residence.

Where Personal Data is transferred internationally, y988 ensures that appropriate safeguards are in place to protect your data — including contractual data protection clauses, adequacy decisions where recognised, or other legally approved transfer mechanisms.

Pakistani users should be aware that Pakistan does not currently have a comprehensive, dedicated personal data protection law at the federal level, though legislative developments in this area are ongoing. y988 commits to applying the data protection standards described in this Policy regardless of the jurisdiction of processing.

13 Third-Party Links & Services

The y988 Platform may reference or contextually mention third-party services and payment providers — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — for familiarity and educational purposes. These references are contextual only. None of these third parties endorse or affiliate with gambling operations, and y988 is not responsible for the privacy practices or data handling of any third-party service or platform.

This Privacy Policy applies solely to data processing carried out by y988 through the Platform at https://y988.cam. Users who interact with third-party payment systems, banks or e-wallet services are advised to review the applicable privacy policies of those third-party services independently.

14 Specific Notice for Pakistani Users

y988 is an English-language platform targeting users in Pakistan. We acknowledge the following important considerations relevant to Pakistani users:

• Pakistan currently lacks a comprehensive, enacted Personal Data Protection Act, though the Pakistan Personal Data Protection Bill has been in legislative development. y988 commits to applying internationally recognised data protection standards as described in this Policy.
• Pakistan has gambling-related restrictions under the Prevention of Gambling Act, 1977, and applicable provincial legislation. y988 does not represent that use of the Platform is lawful in Pakistan. Users are solely responsible for ensuring compliance with applicable local law.
• y988 does not claim any form of authorisation, endorsement or regulation by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any provincial authority.
• References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah and other Pakistani payment brands throughout this Platform and this Policy are for contextual familiarity only. These organisations do not endorse, sponsor or affiliate with gambling operations.

15 Policy Amendments

y988 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements or the evolution of the Platform's Services. Material changes will be communicated to registered users by email notification and/or by prominent notice on the Platform.

The date of the most recent revision is displayed at the top of this page ("Last Updated"). We recommend reviewing this Policy each time you use the Platform following an extended absence. Your continued use of the Platform after the posting of an updated Policy constitutes your acceptance of the revised terms.

Where a proposed change materially affects the way in which we process your Personal Data, and where the processing was previously based on your consent, we will seek fresh consent before the change takes effect.

16 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy, or if you wish to exercise any of the data subject rights described in Section 10, please contact the y988 data team using the details below:

Data Enquiries & Subject Access Requests:
[email protected]

Expected Response Time:
We aim to acknowledge all data-related enquiries within 3 business days and to provide a substantive response within 30 days of receiving a verified request, in line with applicable data protection standards.

Support Language:
Primary correspondence is handled in English. Urdu-language support may be available on request — please indicate your language preference when making contact.