y988 Privacy Policy

1. Introduction

y988 ("we", "us", "our", or "the Operator") is the owner and operator of the online gaming platform accessible at y988.pro. We are committed to protecting the privacy and personal data of every player who registers on and uses the y988 platform. This Privacy Policy explains what personal data y988 collects, why we collect it, how we use it, who we share it with, and how long we keep it.

This Policy applies to all players who access y988.pro from Pakistan and any other location where the platform is made available. It covers all services offered by y988, including sports betting, live casino, slots, crash games, and any other gaming products accessible through your y988 account.

y988 acts as the data controller for the personal information you provide when registering and using the platform. This means we are responsible for deciding how and why your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to handle your data only on our instructions.

2. Personal Data We Collect

y988 collects the following categories of personal data from players:

2.1 Registration Data

When you create a y988 account, we collect:

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (to verify you are 21 years of age or older)
• Pakistani mobile number (for account verification and two-factor authentication)
• Email address
• Chosen username and password (stored in hashed form — never in plain text)
• Country and city of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad)

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer and Anti-Money Laundering obligations, y988 may request:

• Copy of your Pakistani CNIC (Computerised National Identity Card), passport, or driving licence
• Proof of address (e.g., a recent utility bill or bank statement issued in Pakistan)
• Proof of payment method ownership (e.g., screenshot of registered JazzCash or EasyPaisa account in your name)
• Source of funds documentation for high-value deposits or withdrawals

2.3 Financial Data

When you make deposits or withdrawals on y988, we collect:

• Payment method type (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20)
• Transaction amounts and timestamps
• Mobile wallet number or bank account reference (not full credentials)
• Cryptocurrency wallet address for USDT TRC20 transactions

2.4 Gaming Activity Data

y988 records the following data related to your gameplay activity on the platform:

• Game sessions, bet history, wager amounts, and game outcomes
• Sports betting markets accessed, selections made, and bet settlements
• Bonus and promotional activity, including wagering requirement progress
• Session duration, login frequency, and platform navigation patterns

2.5 Technical & Device Data

y988 automatically collects the following technical information when you access the platform:

• IP address and approximate geographic location derived from it
• Device type, operating system, browser type and version
• Referring URL and pages visited on y988.pro
• Cookie identifiers and session tokens (see Section 7 for full cookie details)

2.6 Communications Data

When you contact y988 customer support via live chat, email, or any other channel, we retain a record of the communication including its content, timestamps, and the nature of the issue raised. This data is used to resolve your query, train support staff, and improve our service quality.

3. How We Collect Your Data

y988 collects your personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically: When you access y988.pro, our servers automatically log technical and device data as described in Section 2.5. Cookies and similar tracking technologies also collect behavioural data as described in Section 7.
• From payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and other payment service providers share transaction confirmation data with y988 to reconcile deposits and withdrawals.
• From identity verification providers: Where y988 uses a third-party KYC verification service, that provider may share the results of identity checks, including document authenticity and age confirmation.
• From fraud prevention services: y988 may receive data from fraud detection partners that help us identify suspicious account activity or payment fraud patterns.

4. How We Use Your Personal Data

y988 uses the personal data we collect for the following purposes:

y988 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or notifying you of the new purpose through an update to this Privacy Policy.

5. Legal Basis for Processing

y988 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and y988 — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing required for y988 to comply with applicable legal requirements, including KYC, AML, responsible gaming regulations, and licensing conditions.
• Legitimate interests: Processing necessary for y988's legitimate business interests, including fraud prevention, platform security, and improving the quality of our services — provided these interests are not overridden by your rights and interests.
• Consent: Processing for which y988 has obtained your explicit consent, including sending marketing communications and placing non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Disclosure

y988 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this Privacy Policy:

6.1 Payment Service Providers

To process your deposits and withdrawals, y988 shares necessary transaction data with certified payment processors including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network infrastructure providers. These providers process your financial data solely to complete the relevant transaction and are contractually prohibited from using it for any other purpose.

6.2 Identity Verification Providers

y988 may share your registration and KYC document data with third-party identity verification providers to automate and expedite the KYC process. These providers verify the authenticity of your documents and confirm your identity and age on y988's behalf.

6.3 Game Providers

To deliver casino games, live dealer games, and crash games on the y988 platform, limited account data (such as a player ID and PKR balance) may be shared with licensed third-party game providers via secure API integration. These providers do not receive your full personal profile or financial data.

6.4 Fraud Prevention & Security Partners

y988 uses specialised fraud detection and cybersecurity service providers to protect the platform and its players. These providers may process device data, IP addresses, and transaction patterns to identify suspicious activity.

6.5 Regulatory & Law Enforcement Authorities

y988 may disclose your personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required to do so by applicable law, a valid legal order, or our licensing obligations. y988 will notify you of such disclosure where legally permitted to do so.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of y988's assets, player personal data may be transferred to the acquiring entity. y988 will notify registered players via email of any such transfer and the privacy terms that will apply thereafter.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you access a website. y988 uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to operate the platform, remember your preferences, analyse traffic patterns, and deliver a personalised experience.

7.2 Types of Cookies Used by y988

7.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your y988 account and using core platform features. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

8. Data Retention

y988 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

• Account and registration data: Retained for the duration of your active y988 account, plus a minimum of five (5) years following account closure, as required by AML regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure, or longer if required by regulatory direction.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each session or bet.
• Customer support communications: Retained for three (3) years from the date of resolution of the relevant support case.
• Marketing consent records: Retained until you withdraw your consent, plus one (1) year thereafter as an audit record.
• Cookie and analytics data: Retained in aggregated, anonymised form with no defined expiry; individual session identifiers are deleted when your browser session ends or within 13 months, whichever is sooner.

Upon expiry of the relevant retention period, y988 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

9. Data Security

y988 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and y988.pro is encrypted using TLS 1.2 or higher.
• Password hashing: Account passwords are stored using a one-way cryptographic hash function. y988 staff cannot view your plain-text password at any time.
• Two-factor authentication (2FA): y988 offers 2FA via your registered Pakistani mobile number for an additional layer of account security.
• Access controls: Access to player personal data within y988's internal systems is restricted on a strict need-to-know basis. All internal access is logged and periodically reviewed.
• Server-side encryption: Sensitive data fields, including KYC document images and payment references, are encrypted at rest using AES-256 encryption.
• Penetration testing: y988's platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: y988 maintains a documented data breach response plan. In the event of a data breach affecting your personal data, y988 will notify affected players within the timeframe required by applicable law.

10. Your Data Rights

As a y988 player, you have the following rights in respect of your personal data:

• Right of Access: You have the right to request a copy of the personal data that y988 holds about you. y988 will provide this information within 30 days of receiving a verified request.
• Right to Rectification: If any personal data y988 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most of your account information directly through the y988 account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that y988 may be unable to delete certain data where retention is required by law or our licensing obligations.
• Right to Restriction: You have the right to request that y988 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, please contact y988 support via the live chat feature in your account dashboard or by emailing [email protected]. y988 may need to verify your identity before processing a data rights request.

11. Children & Minors

The y988 platform is strictly intended for persons who are 21 years of age or older. y988 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed at registration and again during KYC review for all players.

If y988 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, forfeit any gaming activity, and securely delete the personal data in question. Parents or guardians who believe their child may have registered on y988 are encouraged to contact support immediately at [email protected].

y988 also recommends that parents and guardians of minors use parental control software to prevent underage access to online gaming platforms. For further information on tools to protect minors, please visit our Responsible Gaming page.

12. Third-Party Services

The y988 platform integrates with a range of third-party services to deliver its full feature set, including game providers, payment processors, analytics tools, and customer support platforms. While y988 carefully vets all third-party service providers and requires them to adhere to appropriate data protection standards, y988 is not responsible for the privacy practices of third parties operating their own independent services.

Third-party game providers whose games are playable on y988 may receive limited anonymised session data via secure API calls. They do not receive your full personal profile, KYC data, or payment credentials. Their use of any data they receive is governed by their own privacy policies, not this one.

y988.pro does not contain links to external third-party websites. All content and links on y988.pro direct to internal pages within the y988 platform.

13. International Data Transfers

y988 operates under an international gaming licence, and some of the third-party service providers we work with may process your personal data in countries outside Pakistan. Where personal data is transferred internationally, y988 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, or reliance on service providers that operate within certified data protection frameworks.

y988 does not transfer your personal data to countries that do not provide an adequate level of data protection without first putting in place the appropriate contractual or technical safeguards described above.

14. Changes to This Privacy Policy

y988 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our platform services. Where a material change is made to this Privacy Policy, y988 will notify registered players via email to the address on their account, or via an in-platform notification on next login, at least seven (7) days before the change takes effect.

The "Last updated" date at the top of this Policy reflects the most recent revision. Your continued use of the y988 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how y988 protects your personal data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way y988 processes your personal data, please contact us through the following channels:

If you are not satisfied with y988's response to your privacy enquiry, you have the right to escalate your complaint to the relevant data protection authority or gaming regulator in the jurisdiction under which y988 operates.