Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by yy888 ("yy888", "we", "us", "our") and applies to all personal data collected, processed and stored in connection with your use of the yy888 online gaming platform accessible at yy888.cam, including all associated subdomains, mobile interfaces and support channels.

yy888 acts as the data controller in respect of the personal data it collects directly from users. Where third-party processors handle data on behalf of yy888, those relationships are governed by data processing agreements that require the processor to maintain appropriate technical and organisational safeguards.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein to the extent that consent is required as a legal basis under applicable law. Where we rely on other legal bases — such as contractual necessity or legitimate interests — those are identified in Section 5.

Definitions

In this Policy, the following terms carry the meanings set out below unless context requires otherwise:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, device identifiers, IP address, financial information and any other data that can, directly or indirectly, identify you.
• "Processing" — any operation or set of operations performed on personal data, including collection, storage, use, disclosure, erasure or destruction, whether automated or manual.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For data collected on the Platform, yy888 is the data controller.
• "Data Processor" — a third party that processes personal data on behalf of the data controller under a written agreement.
• "KYC" — Know Your Customer — the identity, age and address verification process required under the operator's licensing obligations.
• "Cookies" — small text files placed on your device by a website to store session state, preferences and analytics data.
• "Platform" — the yy888 online gaming service at yy888.cam and any associated mobile interface or subdomain.

Data We Collect

yy888 collects personal data through multiple channels: directly from you when you register, deposit or contact support; automatically through your interaction with the Platform; and from third-party verification providers during the KYC process. The categories of data collected are described below.

3.1 Account Registration Data

3.2 Financial & Transaction Data

When you make deposits or withdrawals, yy888 and its payment processing partners collect information about the payment method used, transaction amounts in PKR, transaction timestamps and reference identifiers. yy888 does not store full card numbers or bank account credentials — those are handled by PCI-DSS-compliant payment processors.

Familiar payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah may appear in transaction records as method identifiers. These references indicate the channel used and do not imply any endorsement of gambling by those providers.

3.3 Technical & Usage Data

When you access the Platform, the following technical data is collected automatically:

• IP address and approximate geographic location derived from IP;
• Device type, operating system version and browser type;
• Session duration, pages visited and features used;
• Login timestamps and access logs for security monitoring;
• Cookie identifiers and similar tracking tokens (see Section 7).

3.4 Communications Data

If you contact yy888 support by email or Live Chat, we retain records of those communications — including your query, the agent's responses and any attachments — for the purpose of resolving your issue, quality assurance and training. Support sessions conducted in Urdu are handled in English for record-keeping purposes.

3.5 KYC Verification Data

To satisfy licensing obligations, yy888 requires users to submit identity and address documents for verification. Images of these documents are processed through a secure KYC verification portal and may be shared with regulated third-party identity verification providers. Original document images are not retained indefinitely — refer to Section 8 for retention timelines.

How We Use Your Data

yy888 processes personal data only for clearly defined purposes. The principal purposes for which we use your data are set out below. Each purpose is linked to a specific legal basis, as detailed in Section 5.

• Account operation — creating and maintaining your account, processing deposits and withdrawals, recording wagers and game outcomes, and providing access to Platform features;
• Identity and age verification — conducting KYC checks to confirm your identity, age and residential address in compliance with our licensing obligations;
• Fraud prevention and security — detecting, investigating and preventing fraudulent activity, multi-accounting, money laundering, unauthorised account access and other security threats;
• Legal and regulatory compliance — fulfilling obligations under the operator's licensing framework, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required by applicable law;
• Customer support — responding to your queries, complaints and data rights requests through Live Chat, email and the Help Centre;
• Platform improvement — analysing aggregated usage patterns to identify technical issues, improve product features and optimise user experience;
• Responsible gambling — monitoring account behaviour to identify indicators of problem gambling and facilitating access to self-exclusion and limit tools;
• Marketing communications — sending promotional offers and relevant platform updates to users who have not opted out. You may withdraw consent for marketing at any time through account settings or by contacting support.

Legal Basis for Processing

Where data protection law requires yy888 to identify a legal basis for processing, the following bases apply to the principal processing activities described in this Policy:

• Contractual necessity — processing required to perform our contract with you, including operating your account, processing transactions and delivering the services you have requested;
• Legal obligation — processing required to comply with applicable law, including KYC, anti-money laundering obligations and responses to lawful regulatory or law enforcement requests;
• Legitimate interests — processing for fraud prevention, platform security, abuse detection and internal analytics, where those interests are not overridden by your data protection rights;
• Consent — processing for optional marketing communications and certain non-essential cookie categories, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

yy888 does not sell, rent or trade your personal data to any third party for their own independent commercial purposes. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers & Data Processors

yy888 engages third-party processors who handle personal data on our behalf under contractual data processing agreements. These include:

• Payment infrastructure providers — to process deposit and withdrawal transactions. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah reflect payment channel identifiers only and do not indicate data-sharing arrangements specific to those providers;
• KYC and identity verification providers — to verify identity documents and conduct age verification checks;
• Game content providers — who may process minimum technical data (session tokens, stake values) to deliver game rounds;
• Cloud infrastructure and hosting providers — who store Platform data on secure servers subject to appropriate contractual protections;
• Customer support platforms — used to manage Live Chat and email support queues.

6.2 Legal & Regulatory Disclosure

yy888 may disclose personal data to regulatory authorities, law enforcement agencies or courts where required or permitted by applicable law — for example, in response to a lawful court order, anti-money laundering reporting obligation or licensing authority audit. Where legally permitted to do so, yy888 will notify affected users of such disclosures.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets involving yy888, personal data held on the Platform may be transferred to the successor entity. Affected users will be notified of any such transfer and of any material changes to data processing arrangements that result from it.

Cookies & Tracking Technologies

yy888 uses cookies and similar client-side storage technologies on the Platform. The categories of cookies used and their purposes are described below.

• Strictly necessary cookies — required for the Platform to function. These include session authentication tokens, security cookies and load-balancing identifiers. These cannot be disabled without breaking core Platform functionality.
• Analytics cookies — used to collect aggregated, anonymised data about how users navigate the Platform, which pages are most visited and where technical errors occur. This data is used to improve the Platform and is not used to identify individual users.
• Preference cookies — used to remember settings you have configured, such as language preferences or display options, so they persist across sessions.
• Security cookies — used to detect and prevent fraudulent login attempts, credential stuffing and automated access by non-human traffic.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the performance or usability of Platform features. yy888 does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising.

Data Retention

yy888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or licensing obligations. The following general retention principles apply:

• Account data — retained for the duration of your account and for a period after closure as required by the operator's licensing obligations, which typically mandate retention of account records for a minimum of five years following closure;
• Transaction records — retained for a minimum of five years from the date of each transaction to satisfy anti-money laundering record-keeping obligations;
• KYC documents — retained for the period required by the operator's licensing framework, generally aligned with transaction record retention requirements;
• Support communications — retained for a period of up to three years from the date of the interaction, unless a longer period is required to resolve an ongoing dispute or comply with a legal obligation;
• Technical logs — access logs and security event data are retained for up to twelve months for security monitoring and fraud investigation purposes, then deleted or anonymised.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual. Where anonymisation is not technically practicable, data is securely destroyed.

Data Security

yy888 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and the Platform;
• Encryption at rest for sensitive stored data, including identity verification records;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Two-factor authentication options for user accounts and internal system access;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures for the detection, investigation and notification of personal data breaches.

No data transmission over the internet or electronic storage system can be guaranteed as completely secure. While yy888 takes reasonable and proportionate steps to protect your data, we cannot warrant absolute security. You also have a role to play: use a strong, unique password for your yy888 account, enable two-factor authentication, and do not share your login credentials with any third party.

Your Data Rights

Depending on applicable data protection law in the operator's licensing jurisdiction, you may have some or all of the following rights in relation to the personal data yy888 holds about you:

To exercise any of these rights, submit a written request to yy888 support through Live Chat or by email to [email protected] — shown as plain text only. We will verify your identity before processing any data rights request and will respond within a reasonable period. Some rights are subject to legal limitations — for example, we cannot erase data we are required by law to retain.

Children's Privacy

The yy888 Platform is strictly intended for adults aged 18 and above — or the higher minimum age required by the operator's licensing jurisdiction. yy888 does not knowingly collect personal data from persons under the age of 18.

If yy888 becomes aware that personal data has been collected from a person under the applicable minimum age, that account will be closed, all associated funds will be forfeited in accordance with the Terms and Conditions, and all personal data collected will be deleted or anonymised as promptly as technically practicable.

If you are a parent or guardian and believe that your minor child has registered an account on the Platform, please contact yy888 support immediately. Provide your contact details and any information that would help us locate the account so that we can take appropriate action without delay.

Third-Party Links & Services

The yy888 Platform does not include outbound links to third-party websites for navigation or content purposes. However, third-party game content providers whose games are embedded within the Platform may operate under their own privacy practices in relation to technical session data required to deliver game functionality.

yy888 requires game content providers to handle any session data strictly in accordance with the purposes for which it is shared and prohibits those providers from using platform user data for independent profiling, advertising or marketing purposes.

yy888 is not responsible for the privacy practices of third-party providers operating under their own separate agreements. If you have concerns about how a specific game provider handles data, contact yy888 support and we will direct your query appropriately.

Updates to This Policy

yy888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law or the operator's licensing requirements. Where changes are material — meaning they significantly affect your privacy rights or the way we use your data — yy888 will provide advance notice through an on-platform notification or to the email address registered on your account.

The "Last reviewed" date at the top of this document indicates when this Policy was most recently updated. Continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

We encourage you to review this Policy periodically so you remain informed about how yy888 protects and uses your personal data.

Contact Us

For questions, concerns or requests relating to this Privacy Policy or the personal data yy888 holds about you, please contact us through any of the following channels:

• Email: [email protected] — displayed as plain text, not a clickable link. Include "Privacy Request" in your subject line for priority routing.
• Live Chat: Available 24 hours a day, 7 days a week from within the Platform once you are logged in to your account. Urdu language assistance is available on request.
• Help Centre: Self-service articles on account privacy, data deletion and cookie management are available from the Platform's Help Centre section.

When submitting a data rights request, please include your registered account username, a clear description of your request and sufficient information to allow us to verify your identity. We aim to acknowledge all privacy requests promptly and resolve them within a reasonable timeframe consistent with applicable law.