888y Privacy Policy – How We Collect, Use and Protect Your Personal Data in Pakistan

1. Who We Are

888y ("we", "us", "the Platform") operates the online casino and sports betting services available at 888y.io. For the purposes of data protection, 888y is the data controller — meaning we determine why and how your personal data is processed when you use our platform.

This Privacy Policy applies to all personal data collected and processed in connection with your use of 888y's services, including account registration, deposits, gameplay, withdrawals, promotions and customer support interactions. It applies to all players based in Pakistan who access 888y.io through any device.

If you have any questions about this policy or about how 888y handles your personal data specifically, contact our Data Protection team at support@888y.io. We aim to respond to all data-related queries within 5 business days.

2. Data We Collect

888y collects personal data through several routes — some provided directly by you, some generated automatically as you use the platform. Here is a complete breakdown of what we collect and why:

888y does not collect special category data (such as health information, political opinions or biometric data) and does not intend to do so. If you voluntarily disclose such information in a support communication, 888y will not retain it beyond what is necessary to resolve your query.

3. How We Use Your Data

888y uses your personal data for the following specific purposes:

• Account Creation and Management: Registering your account, verifying your identity, managing your account settings and maintaining your account security at 888y.
• Payment Processing: Processing deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard, verifying payment ownership and detecting payment fraud.
• Platform Operation: Providing access to casino games, sports and esports betting markets, live dealer tables, promotions and all other 888y services.
• Legal and Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements, responding to lawful requests from regulatory or law enforcement bodies and maintaining records as required by law.
• Fraud Prevention and Security: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, money laundering and other fraudulent activity that could harm players or the integrity of the 888y platform.
• Responsible Gaming: Monitoring gaming patterns to identify potential signs of problem gambling and providing timely, appropriate intervention or support where required.
• Customer Support: Responding to queries, resolving complaints, processing account changes and providing technical assistance through 888y's 24/7 support channels.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players use 888y, which features are popular and where improvements should be made.
• Marketing Communications (with consent only): Sending promotional emails or SMS messages about new games, offers and events at 888y — but only to players who have explicitly opted in and only until consent is withdrawn.

4. Legal Basis for Processing

888y processes your personal data on the following legal grounds, depending on the specific type of processing involved:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you — including operating your account, processing payments and providing access to games at 888y.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements and responses to lawful regulatory or court orders.
• Legitimate Interests: Processing necessary for 888y's legitimate business interests — including fraud detection, platform security, abuse prevention and internal analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit, freely given consent — primarily for marketing communications. You may withdraw consent at any time without affecting any other aspect of your account.

5. Data Sharing

888y does not sell your personal data. We share it only in the following specific circumstances, and only to the extent necessary for each purpose:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay and bank partners receive the transaction data necessary to process your deposits and withdrawals. These providers process data under their own privacy policies and are contractually bound to maintain appropriate security standards.
• Identity Verification Providers: Third-party KYC providers receive identity documents you submit for verification. These providers are licenced verification services operating under strict data processing agreements with 888y.
• Fraud and AML Screening Services: 888y uses specialist services to detect money laundering, bonus fraud and account compromise. These services receive limited data — typically transaction amounts, patterns and technical identifiers — for automated risk scoring only.
• Game Providers: When you play a game developed by a third-party provider (such as Evolution Gaming or Pragmatic Play), that provider's system processes your gameplay data to operate the game. Game providers do not receive your personal identity or payment data.
• Customer Support Platforms: 888y's live chat and email support tools are provided by third-party platforms. Support staff using these tools can access your account information as needed to resolve your query.
• Legal and Regulatory Authorities: 888y will disclose personal data to law enforcement, regulators or courts when legally compelled to do so, or when we believe disclosure is necessary to prevent imminent harm or fraud.

All third parties with whom 888y shares data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond what is specified in their agreement with 888y.

6. Data Storage & Security

888y takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your data:

• Encryption at Rest: All personal data stored on 888y's servers is encrypted using AES-256 encryption. Database-level encryption ensures that even in the unlikely event of unauthorised physical access to server hardware, your data cannot be read without the encryption keys.
• Encryption in Transit: All data transmitted between your device and 888y's servers uses TLS 1.3 protocol. You can verify this by checking for the padlock icon in your browser's address bar when visiting 888y.io.
• Access Controls: Access to personal data within 888y is restricted on a need-to-know basis. Staff members can only access the data categories necessary for their specific role. All data access is logged and reviewed by our security team.
• Regular Security Audits: 888y conducts regular penetration testing and security audits of its platform and data infrastructure. Identified vulnerabilities are addressed on a prioritised basis.
• Incident Response: 888y maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, 888y will notify affected players and relevant authorities within the timeframes required by applicable law.

7. Cookies & Tracking Technologies

888y uses cookies and similar technologies on 888y.io to make the platform function correctly, improve your experience and understand how players use the site. Here is a breakdown of the types of cookies used:

888y does not use third-party advertising cookies or tracking pixels that profile you across other websites. The only tracking that occurs on 888y.io relates to your use of the 888y platform itself.

You can manage your browser's cookie settings at any time through your browser's privacy or settings menu. Please note that disabling essential cookies will prevent 888y from functioning correctly and may prevent you from accessing your account.

8. Your Data Rights

As a player at 888y, you have the following rights regarding your personal data. These rights can be exercised at any time by contacting support@888y.io or through your account settings where available:

All rights requests are handled by 888y's Data Protection team. We will acknowledge your request within 5 business days and complete it within 30 calendar days. In complex cases we may extend this to 60 days — if so, we will notify you before the initial 30-day deadline.

9. Marketing Communications

888y will only send you promotional communications — including offers, new game announcements and bonus notifications — if you have explicitly opted in during registration or via your account settings. Marketing communications at 888y are entirely opt-in and are never a condition of using the platform.

We communicate via the following channels, each requiring separate opt-in:

• SMS: Promotional messages sent to your registered mobile number
• Email: Newsletter-style updates sent to your registered email address
• Push Notifications: In-browser notifications when you visit 888y.io (browser permission required)

You can opt out of any or all of these channels at any time through your account settings under "Communication Preferences", or by replying STOP to any SMS from 888y, or by clicking the unsubscribe link in any 888y email. Opt-out requests take effect within 48 hours.

10. Data Retention

888y retains personal data for the following minimum periods, after which data is deleted or fully anonymised:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of 5 years after the account is closed, to meet regulatory and AML record-keeping requirements.
• Transaction Records: Retained for a minimum of 7 years from the date of each transaction, as required by applicable financial regulations.
• KYC Documents (CNIC, proof of address): Retained for 5 years from the date the document was submitted or the date the account was closed, whichever is later.
• Support Communication Records: Retained for 3 years from the date of the interaction, unless the communication relates to a complaint or legal dispute, in which case it is retained for the duration of that matter plus 2 years.
• Gaming Activity Data: Retained for 5 years from the date of the activity for responsible gaming monitoring and fraud prevention purposes.
• Technical/Log Data (IP addresses, session logs): Retained for 12 months from collection date.

After the relevant retention period has elapsed, data is securely deleted from 888y's live systems. Backup copies are purged within 90 days of the scheduled deletion date.

11. Children's Privacy

888y is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you may not use 888y's services and you should not provide any personal data to us through 888y.io.

If 888y discovers that it has inadvertently collected personal data from an individual under the age of 18, that data will be deleted immediately and the associated account closed. If a parent or guardian becomes aware that a minor has created an 888y account or provided personal data to 888y, they should contact support@888y.io immediately so that the account can be reviewed and closed.

888y implements age verification checks at registration and during KYC to prevent underage account creation. However, we also rely on the honesty of individuals during registration. If you are aware of a minor attempting to use 888y, please report it to our support team.

12. Policy Updates

888y may update this Privacy Policy periodically to reflect changes in our data practices, new services, regulatory requirements or legal developments. When material changes are made, 888y will notify registered players via email and display a prominent notice on 888y.io for at least 30 days following the update.

The "Last Updated" date at the top of this page reflects when the current version of the policy was published. We recommend reviewing this policy periodically so you remain aware of how 888y handles your data.

Continued use of 888y after notification of material privacy policy changes constitutes your acknowledgment of the updated practices. If you object to material changes, you have the right to close your account and request deletion of your data before the changes take effect.

13. Contact Us About Privacy

For any questions, concerns or requests related to your personal data and 888y's privacy practices, please contact us through the following channels:

• Email (Data Protection): support@888y.io — please include "Privacy Request" in the subject line
• Live Chat: Available 24/7 at 888y.io — ask to speak with the Data Protection team
• FAQ: Common privacy questions are answered at /faq

888y's Data Protection team aims to acknowledge all privacy-related queries within 5 business days and to provide a complete response within 30 calendar days. For complex data access requests, we may require 60 days — in which case we will notify you before the initial 30-day deadline passes.