Privacy Policy — How 888y Handles Your Personal Data

This Privacy Policy is issued by 888y ("888y", "we", "our", or "us"), the operator of the online gaming and sports betting platform accessible at 888y.bar. 888y is an internationally licensed online gaming platform serving Pakistani players and is the data controller responsible for the personal information you provide when registering and using the 888y platform.

This Policy applies to all personal data processed in connection with the 888y platform, including the website at 888y.bar, any mobile-optimised interface, and all products offered on the platform — including cricket betting, live casino games, Dragon Tiger Luck, dice games, and slot games.

By creating an 888y account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the 888y platform immediately.

888y collects personal data from you directly — when you register an account, make a deposit, request a withdrawal, contact support, or interact with the platform — and indirectly through automated means such as cookies and server logs. The categories of personal data we collect include:

We do not collect sensitive personal data such as biometric data, religious beliefs, political opinions, or medical records. We do not collect data from players who have not yet completed the account registration process, except for the Technical Data that is automatically recorded when any visitor accesses 888y.bar.

888y uses your personal data for the following clearly defined purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent:

• Account Management: To create, maintain, and administer your 888y account, including processing your 888y Login credentials and enabling access to all platform features.
• Identity Verification (KYC): To verify your identity and confirm that you meet the 888y minimum age requirement of 21 years, in compliance with applicable regulatory requirements.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all account activity.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct on the 888y platform.
• Responsible Gaming: To monitor gaming patterns and identify potential problem gambling behaviour, and to enforce responsible gaming tools including deposit limits and self-exclusion requests.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance when you contact the 888y support team.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and user experience of the 888y platform for all players.
• Promotional Communications: To send you relevant bonus offers and platform updates, where you have opted in to receive marketing communications. You may opt out at any time by contacting [email protected].

888y processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual Necessity: Processing that is necessary to fulfil the contract between you and 888y — specifically, operating your account, processing transactions, and providing access to platform features — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and regulatory reporting obligations, is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is conducted on the basis of 888y's legitimate interests, provided those interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications is conducted solely on the basis of your explicit consent. You retain the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

888y does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data with third parties only in the following strictly defined circumstances:

• Payment Processors: We share the minimum financial data necessary with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process your PKR deposits and withdrawals. These processors are contractually bound to handle your data securely and only for the purpose of processing your transactions.
• Identity Verification Providers: We may share your identity documents with licensed KYC verification service providers to confirm your eligibility to use the 888y platform and to verify your age against the 21+ requirement.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally obligated to do so, or where disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.
• Technology and Hosting Providers: We work with data processors — including cloud hosting and platform infrastructure providers — who access personal data solely as necessary to maintain and operate the 888y platform under strict data processing agreements.
• Professional Advisors: We may share data with legal advisors, auditors, or compliance consultants where strictly necessary and subject to professional confidentiality obligations.

All third parties with whom 888y shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond that for which it was shared.

888y uses cookies and similar tracking technologies on the 888y.bar platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and improve your experience. We use the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the 888y platform to function. They manage your login session, maintain your PKR wallet balance display, and ensure secure access following 888y Login. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, notification settings, and responsible gaming limits — so you do not need to reconfigure them on each visit.
• Performance and Analytics Cookies: We use anonymised analytics data to understand how players interact with the 888y platform, which pages are most visited, and where technical issues arise. This data is aggregated and does not identify individual players.

888y does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts. You can manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the 888y platform, including the ability to maintain your logged-in session.

888y retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active 888y account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: PKR transaction records including deposit and withdrawal history are retained for a minimum of five (5) years from the date of the transaction.
• Identity Verification Documents: KYC documents (e.g. CNIC copies, passport scans) are retained for a minimum of five (5) years following account closure or the completion of the verification process, whichever is later.
• Support Communications: Records of customer support interactions are retained for two (2) years from the date of the last communication in the relevant case.
• Technical and Usage Data: Server logs and usage analytics are retained in anonymised or aggregated form for up to two (2) years.
• Marketing Consent Records: Records of your consent or opt-out preference for marketing communications are retained for the duration of your account to maintain an accurate audit trail.

When personal data is no longer required and the applicable retention period has expired, 888y securely deletes or irreversibly anonymises that data in accordance with our internal data disposal procedures.

888y implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in Transit: All data exchanged between your device and the 888y platform is encrypted using TLS (Transport Layer Security) with a minimum of TLS 1.2.
• Encryption at Rest: Sensitive personal and financial data stored on 888y servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within 888y is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection and Monitoring: 888y operates continuous security monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Penetration Testing: The 888y platform undergoes regular security assessments and penetration testing conducted by qualified third-party security specialists.
• Incident Response: In the event of a confirmed data breach, 888y maintains a formal incident response procedure. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

As an 888y player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected]. 888y will respond to all valid requests within thirty (30) days:

• Right of Access: You have the right to request a copy of all personal data that 888y holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 888y's legal data retention obligations. Note that we are required to retain certain records for regulatory compliance and cannot delete these on request.
• Right to Restriction of Processing: You have the right to request that 888y restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive the personal data you provided to 888y in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is based on legitimate interests, including direct marketing communications. Where you object to marketing, we will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

888y will not charge a fee to exercise any of the above rights in ordinary circumstances. If a request is manifestly unfounded or excessive, 888y may charge a reasonable administrative fee or decline to act on the request, in which case you will be informed of the reasons.

The 888y platform is strictly intended for adults aged 21 years and above. 888y does not knowingly collect personal data from any individual under the age of 21. The 888y registration process requires all applicants to confirm their date of birth and to submit to identity verification to confirm that the 21+ age requirement is met.

If 888y becomes aware or has reasonable grounds to suspect that personal data has been collected from a player under the age of 21, the relevant account will be immediately suspended, all associated data will be reviewed, and the account will be closed in accordance with the 888y Terms & Conditions. Any funds associated with an underage account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that a minor in your care may have created an 888y account without your knowledge, please contact the 888y support team at [email protected] immediately. We will investigate and take appropriate action without delay.

888y reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the features and services offered on the platform. When material changes are made, 888y will notify registered players by displaying a prominent notice on the 888y.bar platform and, where technically feasible, by sending a notification to the registered email address associated with your account.

The updated Privacy Policy will clearly state the revised effective date at the top of the document. We encourage all players to review this Policy periodically to stay informed about how 888y protects their personal data.

Continued use of the 888y platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you must discontinue use of the platform and may request the closure of your account by contacting [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 888y processes your personal data, please contact the 888y data protection team through the following channel:

• Email: [email protected]
• Response Time: 888y aims to respond to all privacy-related enquiries within two (2) business days.
• Subject Line: For faster routing, please use the subject line "Privacy Request — [your full name]" when contacting us about a data subject rights request.

Our support team is available around the clock and can handle enquiries from players across Pakistan — whether you are based in Karachi, Lahore, Islamabad, Faisalabad, Multan, Rawalpindi, or elsewhere. All privacy communications are handled in English. There is no telephone line for privacy enquiries; all communications must be submitted via email to ensure a proper written record is maintained.

888y is committed to resolving all privacy concerns fairly and transparently at the first point of contact. If you remain unsatisfied with our response, you retain the right to escalate your complaint to the relevant supervisory authority in the jurisdiction in which 888y holds its international gaming licence.