ya888 Privacy Policy

ya888 is an internationally licensed online casino and sports betting platform operating at ya888.org and primarily serving Pakistani players. ya888 operates under an international gaming licence and is committed to full compliance with applicable data protection frameworks governing the handling of player information.

For the purposes of this Privacy Policy, ya888 acts as the data controller in respect of personal data collected from users who register accounts, make deposits, place bets, or otherwise interact with the ya888 platform. As data controller, ya888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

ya888 is headquartered and licensed internationally. Pakistani players access ya888.org under this international licensing framework. All data collected from Pakistani users is handled in accordance with the principles set out in this Policy, which are aligned with internationally recognised data protection standards.

ya888 collects personal data from you in the following ways: directly from you when you register and use the platform; automatically through your use of the ya888 website and mobile interface; and from third-party verification and payment service providers. The categories of personal data ya888 collects include:

ya888 uses the personal data it collects for specific, clearly defined purposes. The table below summarises the primary purposes for which ya888 processes personal data and the data categories involved in each:

• Account Management: Creating, maintaining, and operating your ya888 player account, including password resets, login security, and account preference management.
• KYC & Age Verification: Verifying your identity, confirming you are 21 years of age or older, and confirming your eligibility to hold a ya888 account in accordance with our Terms & Conditions.
• Payment Processing: Processing deposits via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and bank transfer; processing withdrawal requests; and maintaining a complete transaction record for your account.
• Fraud Prevention & AML Compliance: Monitoring account activity for signs of fraudulent behaviour, money laundering, or match-fixing; complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under ya888's licensing requirements.
• Customer Support: Responding to your queries, complaints, and support requests through live chat and email, and maintaining records of all support interactions.
• Responsible Gaming: Monitoring gameplay patterns that may indicate problem gambling behaviour; enforcing deposit limits, self-exclusion periods, and cooling-off periods you have set; and proactively contacting you if our responsible gaming monitoring identifies a concern.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the ya888 platform, user interface, game selection, and overall player experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS where you have provided your explicit consent to receive such communications. You may withdraw your marketing consent at any time via your account settings.
• Legal & Regulatory Compliance: Complying with court orders, regulatory requests, and legal obligations applicable to ya888 under its international gaming licence and applicable laws.

ya888 will not use your personal data for any purpose that is incompatible with the purposes stated in this Policy without first notifying you and, where required, obtaining your consent.

ya888 processes personal data only where a valid legal basis exists for doing so. The legal bases ya888 relies upon are as follows:

• Contractual Necessity: Processing required to perform the contract between you and ya888 — i.e., to operate your account, process payments, and deliver gaming services — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations — such as KYC verification, AML/CTF monitoring, and the retention of financial records — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of ya888's legitimate interests, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications is carried out solely on the basis of your explicit, freely given consent. You may withdraw marketing consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ya888 does not sell, rent, or trade your personal data to any third party. ya888 may share your personal data with the following categories of recipient strictly on a need-to-know basis and for the purposes described in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other payment processors integrated with ya888 receive the minimum financial data required to process your deposit or withdrawal transaction.
• KYC & Identity Verification Partners: Third-party identity verification service providers engaged by ya888 to carry out CNIC verification, liveness checks, and document authentication. These partners process your identity data solely on ya888's instructions.
• Fraud Prevention & Risk Management Partners: Third-party risk and fraud management platforms that assist ya888 in detecting and preventing fraudulent account activity, bonus abuse, and AML risks.
• Technology & Hosting Providers: Cloud hosting and infrastructure providers who host the ya888 platform and player data under strict data processing agreements that prohibit independent use of your personal data.
• Game Content Providers: Third-party game studios whose casino games are integrated into the ya888 platform may receive limited session and gameplay data required for game delivery and fairness auditing. These providers do not receive your full identity or financial data.
• Regulatory & Law Enforcement Authorities: ya888 will disclose personal data to regulators, law enforcement agencies, courts, or other government authorities where required to do so by applicable law, court order, or regulatory direction. ya888 will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and accountants engaged by ya888 may access personal data on a confidential basis where required to provide professional services to ya888.

ya888 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit ya888.org. The categories of cookies used by ya888 are as follows:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without preventing ya888 from operating properly.
• Functional Cookies: Used to remember your preferences, language settings, and display options so that you do not need to re-enter them each time you visit ya888. These cookies improve your experience but are not strictly required for the platform to function.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with ya888.org. This data helps ya888 identify areas for improvement and optimise the user experience. Analytics cookies do not identify you personally.
• Security Cookies: Used to detect and prevent fraudulent login attempts, unusual account activity, and automated bot traffic. These cookies are essential to the security infrastructure of the ya888 platform.

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will affect the functionality of ya888 and may prevent you from logging in or accessing certain features. ya888 does not use third-party advertising cookies or behavioural tracking cookies for purposes unrelated to the operation of the platform.

ya888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place at ya888 include:

• TLS 1.3 Encryption: All data transmitted between your browser or device and ya888 servers is encrypted using Transport Layer Security (TLS) version 1.3, which is the current industry standard for secure web communications.
• AES-256 Data Encryption at Rest: Sensitive personal and financial data stored on ya888's infrastructure is encrypted at rest using AES-256 encryption. This includes CNIC data, payment method details, and identity verification documents.
• Access Controls: Access to systems holding personal data is restricted to authorised ya888 personnel on a strict need-to-know basis. All internal access is logged and subject to regular review.
• Two-Factor Authentication: ya888 offers two-factor authentication (2FA) for player accounts and requires it for internal staff accessing production systems containing personal data.
• Regular Security Audits: ya888 engages independent cybersecurity firms to conduct penetration testing and security audits of its platform and infrastructure on a regular basis.
• Incident Response: ya888 maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, ya888 will notify affected users and the relevant regulatory authority within the timeframes required by applicable law.

While ya888 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. Please refer to the Account Security section of our Terms & Conditions for your security obligations as a ya888 account holder.

ya888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce agreements. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active ya888 account is retained for the duration of the account's active life and for a minimum of 5 years following account closure, in compliance with anti-money laundering regulations applicable to ya888's licensing jurisdiction.
• KYC & Identity Documents: CNIC scans, passport copies, proof of address documents, and liveness check images are retained for a minimum of 5 years after the account to which they relate is closed, or longer where required by regulatory direction.
• Financial Transaction Records: Full records of all deposits, withdrawals, and gameplay transactions are retained for a minimum of 5 years following the date of the transaction, in compliance with financial record-keeping requirements under ya888's licence.
• Customer Support Records: Live chat transcripts and email support correspondence are retained for 3 years from the date of the interaction, unless the content relates to an ongoing dispute or regulatory matter.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for the duration of your account plus 3 years, to enable ya888 to demonstrate compliance with consent obligations.
• Technical & Log Data: Server logs, IP address logs, and session data are retained for 12 months for security and fraud prevention purposes, after which they are deleted or anonymised.

On expiry of the applicable retention period, ya888 will securely delete or anonymise your personal data in accordance with industry-standard secure deletion practices.

As a ya888 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ya888 at [email protected] with the subject line "Privacy Request":

• Right of Access: You have the right to request a copy of all personal data ya888 holds about you. ya888 will provide a response within 30 days of receiving a valid access request, including a structured summary of all data categories held.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data ya888 holds about you. Where you identify an error in your account data, you may also correct certain details directly via your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that ya888 may be required to retain certain data for regulatory compliance purposes even following an erasure request.
• Right to Restriction of Processing: You have the right to request that ya888 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you do not wish the data to be deleted.
• Right to Data Portability: You have the right to receive the personal data you have provided to ya888 in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to ya888's processing of your personal data where that processing is based on legitimate interests. ya888 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

ya888 is strictly an adult platform. ya888's services are not directed at or intended for persons under the age of 21. ya888 does not knowingly collect personal data from individuals under 21 years of age.

ya888 operates a rigorous age verification process at the point of registration and as part of the KYC verification workflow. Any account found to have been opened by a person under 21 will be immediately closed. Any personal data collected in connection with such an account will be securely deleted following the completion of any mandatory regulatory retention obligations.

If you are a parent or guardian and have reason to believe that a minor under your care has created a ya888 account or submitted personal data to ya888 without your knowledge, please contact ya888 immediately at [email protected]. ya888 will investigate and take immediate action to close the account and delete any data associated with the minor.

ya888 operates under an international gaming licence, and your personal data may be transferred to and processed in countries outside Pakistan. Where such international transfers occur, ya888 takes the following steps to ensure that your data receives an adequate level of protection:

• ya888 ensures that all international data transfers are governed by appropriate data transfer mechanisms, such as standard contractual clauses or equivalent safeguards recognised under applicable data protection frameworks.
• All third-party processors located outside Pakistan who receive ya888 player data are required to sign data processing agreements that impose binding obligations to protect personal data to standards equivalent to those applied by ya888.
• ya888 conducts due diligence on the data protection practices of all international third-party processors before engaging their services.

By registering a ya888 account and accepting this Privacy Policy, you acknowledge that your personal data may be transferred internationally for the purposes described in this Policy, subject to the safeguards described above.

The ya888 platform integrates with a number of third-party services to deliver its full functionality to Pakistani players. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), identity verification providers, game content studios, and customer support tools. Each of these third parties operates under its own privacy policy in respect of data they collect directly from you through their own interfaces.

ya888 is not responsible for the privacy practices of third-party services that operate independently of the ya888 platform. Where a third party operates within the ya888 platform as a data processor under ya888's instructions (for example, a KYC verification provider), they are bound by a data processing agreement with ya888 and may not use your data for their own purposes.

ya888 does not embed social media plugins, third-party advertising scripts, or data broker tracking pixels on ya888.org. Links to third-party websites or services — where they appear on ya888.org — do not imply ya888's endorsement of or responsibility for the privacy practices of those third parties.

ya888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. The most current version of this Policy will always be available at ya888.org/privacy-policy and will display the date on which it was last updated.

Where changes to this Policy are material — meaning they significantly affect the way ya888 processes your personal data or your rights in relation to that data — ya888 will notify you by email to the address registered on your account at least 14 days before the updated Policy takes effect. For non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy), the updated version will take effect upon publication without prior notice.

Your continued use of ya888 following notification of a material change will constitute your acceptance of the updated Privacy Policy. If you do not agree with a material change, you must stop using ya888 and may close your account by contacting customer support.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a concern about the way ya888 has handled your personal data, please contact ya888's privacy team using the details below:

• Email: [email protected] — use subject line "Privacy Request" for data rights requests and "Privacy Complaint" for complaints.
• Response Time: ya888 will acknowledge all privacy-related emails within 2 business days and provide a substantive response within 30 calendar days.
• Support Hours: 8:00 AM – 12:00 Midnight PKT, seven days a week including public holidays. Live chat support is available within your logged-in ya888 account dashboard during these hours.
• Language: Privacy requests may be submitted in English or Urdu. ya888 customer support operates bilingually for Pakistani users.

If you are not satisfied with ya888's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority under whose jurisdiction ya888 operates. Details of the applicable authority are available upon request from the ya888 privacy team.