y88i Privacy Policy — How We Handle Your Personal Data

01 Introduction

y88i operates the online gaming and sports betting platform at y88i.win, including the associated mobile app. As part of operating this platform, y88i collects and processes personal data about users — including Pakistani players who use the platform to bet on cricket, PSL fixtures, other sports, or to play casino games.

This Privacy Policy sets out in clear language what personal data we collect, why we collect it, how long we keep it, who we may share it with, and what you can do if you want to access, correct or delete it. We have written this document to be as straightforward as possible for Pakistani players — plain English, not legal jargon.

If you are reading this before creating a y88i account, this is worth reading in full before you register. If you already have an account, it is worth familiarising yourself with it so you understand how your information is managed when you deposit PKR, place a bet or use any feature of the platform.

The data controller for information processed under this policy is y88i. Contact details are in Section 13 of this document.

02 Data We Collect

y88i collects personal data from several sources and through several mechanisms. Here is a breakdown of the categories of data we collect:

Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number (used to verify Pakistani-registered numbers for JazzCash and Easypaisa integration).
• Identity verification documents: CNIC, passport or other government-issued ID documents when required for account verification or withdrawal processing.
• Account preferences: Responsible gaming settings such as deposit limits, session time reminders and self-exclusion status.
• Support communications: Messages, emails or chat transcripts sent to the y88i support team.

Data Collected Automatically

• Device and technical data: IP address, browser type, operating system, device type and screen resolution.
• Usage data: Pages visited, features used, time spent on the platform, game sessions started and completed, bet history and casino game history.
• Session data: Login timestamps, logout timestamps, session duration and navigation patterns within the platform.
• App data: If you use the y88i app, device identifiers, notification preferences and app version information may be collected.

Data from Third Parties

• Payment provider data: Transaction confirmation references and status updates from JazzCash, Easypaisa, Raast and bank transfer processors. y88i does not store full payment credentials — only confirmation data needed to match and process transactions.
• Verification service data: Where identity verification is carried out through a third-party document verification service, the confirmation result may be provided to y88i.

03 How We Use Your Data

y88i uses your personal data for the following purposes:

• Account creation and management: Setting up your y88i account, verifying your identity, and maintaining your account settings and preferences.
• Processing transactions: Handling PKR deposits and withdrawals through JazzCash, Easypaisa, Raast and bank transfers. Transaction data is used to match payments to accounts and resolve any payment disputes.
• Platform operation: Enabling you to place bets on cricket, PSL, football and other sports, and to play casino games including slots, live casino and table games.
• Responsible gaming management: Monitoring your account activity to identify patterns that may indicate problematic gaming behaviour, and applying the restrictions you have set (deposit limits, self-exclusion).
• Security and fraud prevention: Detecting and preventing account fraud, bonus abuse, money laundering and other prohibited activity as defined in the y88i Terms and Conditions.
• Customer support: Responding to queries, resolving account issues and processing responsible gaming requests.
• Platform improvement: Analysing aggregated usage data to understand how the platform is used and to make improvements to the user experience for Pakistani players.
• Marketing communications: Sending promotional offers, bonus notifications and event-specific offers related to PSL season, T20 tournaments or casino promotions — subject to your communication preferences and applicable law.
• Legal compliance: Meeting obligations under applicable laws including identity verification requirements and record-keeping obligations.

y88i does not use your personal data to make automated decisions that have significant legal effects on you without human oversight. Responsible gaming alerts and account flags are reviewed by the y88i team before action is taken.

04 Legal Basis for Processing

y88i processes your personal data on one or more of the following legal bases depending on the purpose:

• Contract performance: Processing necessary to fulfil our contractual obligations to you as a registered y88i player — including processing deposits, settling bets, paying withdrawals and maintaining your account.
• Legal obligation: Processing required to comply with applicable laws — including identity verification requirements and transaction record-keeping.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring and service improvement, where these interests do not override your rights.
• Consent: Where you have specifically opted in to receive marketing communications. You can withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

05 Payment Data

y88i integrates with Pakistani mobile payment providers including JazzCash, Easypaisa and Raast to facilitate PKR deposits and withdrawals. When you make a deposit or request a withdrawal, the transaction is processed by the relevant payment provider using their own security infrastructure.

y88i receives confirmation data from payment providers — such as transaction reference numbers, amounts and status codes — to credit your account or process your withdrawal. y88i does not store your full JazzCash or Easypaisa account credentials, PIN numbers or bank card details on its own servers.

Transaction records — including amounts in PKR, dates, payment method type and transaction references — are retained by y88i in accordance with the retention periods in Section 7 of this policy. These records may be required for dispute resolution, audit purposes or compliance with applicable financial record-keeping obligations.

For bank transfers, y88i may retain the account name and bank reference as provided during the transfer process for the purpose of matching the payment and processing any refund if required.

06 Sharing Your Data

y88i does not sell your personal data to third parties. We do not share your information with advertisers for their own marketing purposes. Data sharing at y88i is limited to what is necessary to operate the platform and meet our obligations.

We may share your personal data with the following categories of third parties:

• Payment providers: JazzCash, Easypaisa, Raast and banking partners as necessary to process your PKR transactions.
• Identity verification services: Third-party services used to verify your CNIC or other identity documents as part of the account verification process.
• Game providers: Casino and sports data providers may receive limited technical data (such as a session token or anonymised player reference) as part of delivering their games or odds feeds to the y88i platform.
• Technology and infrastructure providers: Companies that provide hosting, cloud storage, security and platform infrastructure services to y88i, subject to appropriate data processing agreements.
• Legal authorities: Where y88i is required by a lawful order, court direction or applicable law to disclose information, we will comply with that obligation. Where permitted, we will notify affected users of such requests.

Any third party that processes personal data on behalf of y88i is required to handle that data in accordance with applicable data protection standards and is not permitted to use it for their own unrelated purposes.

07 Data Retention

y88i retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active accounts: Data is retained for the duration of your account being active on the y88i platform.
• Closed accounts: Following account closure, y88i retains certain data for a period consistent with legal, audit and regulatory record-keeping requirements. This typically covers transaction records, identity verification documents and account activity history.
• Self-excluded players: Where you have requested self-exclusion, your data is retained for the duration of the exclusion period to ensure the exclusion remains in effect and cannot be circumvented by re-registration.
• Support communications: Records of support interactions are retained for a reasonable period to enable follow-up and to maintain a history of account decisions.
• Marketing data: Where you have opted out of marketing communications, a record of your opt-out is retained indefinitely to prevent future communications being sent inadvertently.

When data is no longer needed and the retention period has expired, y88i will delete or anonymise it in a secure manner.

08 Security Measures

y88i uses technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• Encrypted data transmission using SSL/TLS protocols for all communications between your device and the y88i platform.
• Secure storage of personal data with access restricted to authorised personnel who require it to perform their role.
• Regular security reviews and testing of the platform infrastructure.
• Account security features including password requirements and session management.
• Fraud detection monitoring for unusual account activity.

No system is completely immune from security threats. In the event of a data security incident that affects your personal data in a material way, y88i will notify affected users as required by applicable law. You can help protect your own account by using a strong, unique password and not sharing your login credentials with anyone.

If you suspect your y88i account has been accessed without your authorisation, contact support immediately at [email protected] so we can investigate and take protective action.

09 Cookies & Tracking Technologies

y88i uses cookies and similar tracking technologies to operate the platform and improve the user experience. A cookie is a small text file stored on your device when you visit the platform.

y88i uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — including session management, login state, account security and payment flow. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, device type preferences and notification opt-ins to provide a more consistent experience across sessions.
• Analytics cookies: Collect aggregated and anonymised data about how the platform is used — which pages are visited most, where users encounter issues and how navigation flows are performing. This data helps y88i improve the platform experience for Pakistani players.
• Marketing cookies: Used to track engagement with promotional communications and to avoid showing the same offer repeatedly. These are only active where you have opted in to marketing communications.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the platform. You can also manage marketing preferences through your y88i account settings.

10 Your Rights

As a y88i player, you have the following rights regarding your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and your registered account details:

• Right of access: You can request a copy of the personal data y88i holds about you. We will provide this in a clear format within a reasonable timeframe.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you can request that it be corrected. Some data — such as identity documents — may require re-verification after correction.
• Right to deletion: In certain circumstances, you can request that y88i delete your personal data. This right is subject to exceptions where retention is required by law or for the legitimate purposes set out in this policy.
• Right to restrict processing: You can ask y88i to restrict how your data is used in certain circumstances — for example while a correction request is being reviewed.
• Right to data portability: Where processing is based on your consent or on a contract with you, you can request a copy of your data in a commonly used machine-readable format.
• Right to object: You can object to processing based on legitimate interests, including direct marketing. If you object to marketing, we will stop sending promotional communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

y88i will respond to data rights requests within a reasonable period. In cases where a request cannot be fulfilled — for example where deletion would conflict with a legal retention obligation — y88i will explain the reason clearly.

11 Minors

y88i is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from individuals under 18 years of age. If you are a parent or guardian and believe that a person under 18 has created a y88i account or provided personal data to the platform, please contact [email protected] immediately so we can investigate and take appropriate action.

Where y88i identifies that an account has been registered by or on behalf of a minor, the account will be closed immediately, all transactions will be voided and any funds held will be returned to the original payment source after investigation. Responsible gaming tools including session limits and self-exclusion are available to help adults manage their own activity — they are not a substitute for appropriate parental controls on shared devices.

12 Policy Updates

y88i may update this Privacy Policy from time to time to reflect changes in the platform, changes in applicable law or improvements in how we explain our data practices. When material changes are made to this policy, we will update the "Last Updated" date at the top of the page and notify registered players via their registered email address.

Minor clarifications or formatting changes that do not alter the substance of the policy may be made without direct notification, though the Last Updated date will always reflect the most recent revision.

Continued use of the y88i platform following a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with an updated version of this policy, you should stop using the platform and request account closure.

13 Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to report a concern about how your personal data is being handled at y88i, please contact us through the following channels:

• Email: [email protected] — use the subject line "Privacy Policy Query" or "Data Rights Request" for faster routing.
• Platform support: Via the support section in your y88i account.

The y88i support team aims to acknowledge all privacy-related queries promptly and provide a substantive response within a reasonable timeframe. Complex requests — such as data access requests that cover a long account history — may take longer to process but you will be kept informed of progress.

This Privacy Policy is provided in English as the primary language. In the event that any part of this document is translated for convenience, the English version takes precedence in case of any discrepancy.