Privacy Policy

This Privacy Policy ("Policy") describes how y88i ("we", "us", "our", "the Platform") collects, uses, stores, discloses and otherwise processes personal data in connection with the operation of the y88i website at https://y88i.cam and all associated services ("Platform").

y88i serves an English-speaking audience including users in Pakistan. We are committed to handling your personal data responsibly, transparently and in compliance with applicable data protection legislation. By using the Platform, you acknowledge that you have read and understood this Policy.

This Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and individuals who contact us through support channels. It applies in addition to, and should be read alongside, our Terms & Conditions.

The following terms carry specific meanings throughout this Policy:

y88i collects personal data across several categories depending on your level of interaction with the Platform. The categories and specific data points collected are set out below:

3.1 Account Registration Data

• Full legal name and date of birth
• Email address and chosen username
• Country of residence and city (e.g., Karachi, Lahore, Islamabad, Rawalpindi)
• Account password (stored in hashed, non-reversible form — never in plain text)
• Preferred language and currency settings (including PKR where applicable)

3.2 Identity Verification (KYC) Data

• Government-issued identity documents, including Pakistani CNIC, passport or other applicable national ID
• Proof of address documentation (recent utility bill, bank statement or similar)
• Payment method ownership verification documents where required
• Selfie or biometric photo where required by the KYC process

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts (PKR or other currencies), timestamps and method references
• Payment method identifiers — for example the last four digits of a bank card, a mobile wallet reference for Easypaisa or JazzCash, or a bank account number for HBL, UBL, Meezan Bank or Bank Alfalah transfers (referenced for transaction purposes only — y88i does not store full card or account numbers)
• Wagering history, including game sessions, bet amounts, outcomes and account balance changes

3.4 Technical & Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system and browser version
• Session timestamps, pages visited and feature interactions
• Cookie identifiers and similar tracking data (see Section 8)

3.5 Communications Data

• Contents of support ticket submissions, live chat transcripts and email correspondence
• Feedback and survey responses submitted voluntarily

Personal data is collected through the following mechanisms:

• Direct Submission: Data you provide when registering an account, completing the KYC process, making deposits or withdrawals, or contacting our support team.
• Automated Collection: Technical and device data collected automatically when you access the Platform, including through cookies, web beacons and server log files.
• Payment Providers: Transaction reference data received from payment processing partners when you initiate a deposit or withdrawal. y88i references familiar Pakistani payment options such as Easypaisa, JazzCash, Raast and bank transfers for transaction context only — these providers are not affiliated with or endorsing this Platform.
• Third-Party Verification Services: Identity and fraud screening data received from third-party KYC and anti-money laundering (AML) service providers engaged to assist with regulatory compliance.
• Analytics Providers: Aggregated usage and performance data from analytics tools used to improve Platform functionality and user experience.

y88i processes your personal data for the following specific purposes:

y88i relies on the following lawful bases for processing your personal data, as applicable under relevant data protection legislation:

• Contractual Necessity: Processing required to perform the contract between you and y88i — including account creation, transaction processing and service delivery under the Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC requirements and responses to lawful regulatory demands.
• Legitimate Interests: Processing carried out for our legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, Platform security, responsible gambling monitoring and service improvement through aggregated analytics.
• Consent: Processing of personal data for marketing communications, non-essential cookies and certain analytics tracking, where we have obtained your freely given, specific and informed consent. You may withdraw consent at any time without prejudice to the lawfulness of prior processing.

y88i does not sell, rent or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. We may share personal data only in the following circumstances and only to the extent necessary:

• Service Providers & Data Processors: We engage third-party service providers acting as data processors — including payment processors, KYC verification providers, fraud screening services, cloud hosting providers and customer support tools — who are contractually required to process data only on our documented instructions and to maintain appropriate security standards.
• Payment Processing Partners: Transaction data is shared with payment processors to facilitate deposits and withdrawals. Payment references for Pakistani users may include routing through mobile wallet services or bank transfer gateways. Such providers are not endorsed by, or in a gambling-support relationship with, y88i.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies or courts where we are legally required to do so by applicable law, court order or valid regulatory request.
• AML & Fraud Screening Agencies: Personal data may be shared with authorised anti-money laundering databases and fraud screening services in the course of mandatory compliance screening.
• Business Transfers: In the event of a merger, acquisition or sale of all or substantially all of the Operator's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.
• Affiliated Group Entities: Personal data may be shared within the Operator's affiliated corporate group for internal administrative purposes, subject to binding intra-group data sharing agreements.

y88i uses cookies and similar tracking technologies (including web beacons, pixels and local storage) to operate and improve the Platform. The categories of cookies we use are described below:

You can manage non-essential cookie preferences through your browser settings. Note that restricting certain cookies may affect your ability to use some Platform features. For detailed guidance on how to manage cookies in your specific browser, refer to your browser's help documentation.

y88i retains personal data only for as long as necessary to fulfil the purposes for which it was collected and for the minimum period required under applicable regulatory and legal obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with the Platform, plus any regulatory retention period that applies after account closure.
• KYC & Identity Documents: Retained for a minimum period as required by applicable AML regulations in the Operator's licence jurisdiction — typically five (5) years from account closure or the last transaction, whichever is later.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years to comply with financial reporting and AML record-keeping requirements.
• Support Communications: Records of support interactions are retained for a reasonable period to support dispute resolution and service quality monitoring, typically two (2) years.
• Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data. Raw analytics logs are typically retained for no more than twenty-six (26) months.
• Marketing Consent Records: Records of consent to marketing communications are retained for as long as you hold an active account and for a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of your data in certain circumstances — see Section 11 (Your Rights) for details.

y88i implements a range of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and our Platform is encrypted using TLS (Transport Layer Security) protocols.
• Encryption at Rest: Sensitive personal data — including KYC documents and payment references — is encrypted at rest using industry-standard encryption algorithms.
• Password Hashing: Account passwords are stored in hashed, salted form using a secure hashing algorithm. y88i staff cannot view your password in plain text.
• Access Controls: Access to personal data within our systems is restricted to authorised personnel on a need-to-know basis, subject to role-based access controls and audit logging.
• Security Monitoring: Automated systems monitor the Platform for suspicious activity, potential intrusions and anomalous access patterns on an ongoing basis.
• Vendor Security: Third-party data processors are required to demonstrate and maintain security standards appropriate to the data they process on our behalf.

Subject to applicable data protection law and certain regulatory limitations, you have the following rights in relation to your personal data held by y88i:

To exercise any of these rights, submit a request through the Platform's Help Center. We will verify your identity before actioning the request and will respond within the timeframe required by applicable law — typically thirty (30) calendar days, with extension possible for complex requests.

The y88i Platform is strictly an adults-only service. We do not knowingly collect personal data from individuals under the age of 18 — or the higher minimum age required by the Operator's licence jurisdiction — and we do not permit minors to register accounts or participate in any gambling activity on the Platform.

If you are a parent or guardian and believe that a minor under your care has submitted personal data to y88i or has accessed the Platform without authorisation, please contact our support team immediately via the Help Center. Upon verification of the report, we will take prompt steps to delete the relevant data and close any associated account.

y88i operates internationally and your personal data may be transferred to, stored and processed in countries other than your country of residence, including countries outside Pakistan. The data protection laws in these countries may differ from those in your jurisdiction.

Where personal data is transferred to third countries, y88i takes appropriate safeguards to ensure that your data receives a level of protection consistent with this Policy and applicable data protection standards. Such safeguards may include:

• Transfer to countries that have been assessed as providing an adequate level of data protection by the relevant regulatory authority.
• Use of standard contractual clauses or other recognised transfer mechanisms with data processors located in third countries.
• Application of binding corporate rules or equivalent intra-group transfer agreements where data is shared within the Operator's corporate group.

y88i reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or operational requirements. Updated versions will be published on this page with a revised effective date.

Where a material change affects your rights or how we process your personal data, we will notify registered users via account notification or to the email address on file, where reasonably practicable, prior to the change taking effect. Your continued use of the Platform after the effective date of an updated Policy constitutes your acknowledgement of the revised terms.

We recommend reviewing this Policy periodically to stay informed about how y88i protects your personal data.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please use the following contact channels:

• Help Center & Data Requests: Submit data access, rectification, erasure and other rights requests through the Platform's Help Center. Include "Data Privacy Request" in your subject line for expedited routing to the appropriate team.
• Live Chat: Available 24 hours a day, 7 days a week, for general privacy questions. English and Urdu-language support available.
• Email (privacy enquiries): [email protected] — please note this address is displayed as plain text only and is not a clickable link. Copy it manually to compose your email.

We aim to acknowledge data rights requests within five (5) business days and to provide a substantive response within thirty (30) calendar days of receipt, with extension possible where permitted by applicable law.