y998 Privacy
Policy

1. Who We Are

y998 is the operator of the online betting and casino platform accessible at y998.bet (the "Platform"). In this Privacy Policy, references to "y998", "we", "us", or "our" refer to the operator of the Platform and its authorised data-processing affiliates and service providers. y998 acts as the data controller with respect to the personal data of registered users and visitors to the Platform.

y998 is fully committed to protecting the privacy and personal data of every Pakistani player and visitor who accesses our Platform. Our data handling practices are designed to comply with applicable international data protection standards and the requirements of the gaming licence under which y998 operates.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected, processed, stored, or transferred by y998 in connection with your use of the Platform, including:

• Browsing or accessing y998.bet without creating an Account.
• Registering and maintaining a y998 player Account.
• Making deposits or withdrawals via JazzCash, E asyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20.
• Placing bets on cricket, PSL markets, casino games, slots, or any other wagering product on the Platform.
• Contacting y998 customer support via live chat or email.
• Participating in any y998 promotion, bonus programme, or loyalty scheme.

This Policy should be read alongside the y998 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

3. Data We Collect

y998 collects only the personal data that is necessary for the provision of its services, compliance with legal obligations, and the maintenance of a secure and fair gaming environment. The categories of personal data we collect include:

Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC number, passport copy	Account registration, age verification, KYC compliance
Contact Data	Email address, Pakistani mobile number, residential address	Account communications, 2FA, support correspondence
Financial Data	JazzCash / EasyPaisa account numbers, bank account details, transaction history	Processing PKR deposits and withdrawals, fraud prevention
Technical Data	IP address, device type, browser, operating system, session tokens	Platform security, fraud detection, geo-restriction enforcement
Usage Data	Pages visited, bets placed, games played, session duration, click patterns	Platform improvement, responsible gaming monitoring
Communications Data	Live chat transcripts, support emails, feedback submissions	Customer support, complaint resolution, quality assurance
Marketing Preferences	Promotional opt-in/opt-out status, preferred communication channels	Sending relevant offers and updates where you have consented

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless expressly required for identity verification purposes under applicable anti-money laundering regulations.

4. How We Collect Data

y998 collects your personal data through the following means:

• Direct interactions — data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated technologies — technical and usage data collected automatically when you access the Platform, including cookies, server logs, session tracking, and device fingerprinting.
• Third-party sources — identity verification data received from KYC and anti-fraud service providers; payment data received from payment processors such as JazzCash and EasyPaisa; publicly available data used for fraud screening and compliance checks.
• Responsible gaming monitoring — behavioural data generated by your activity on the Platform that may be analysed to identify patterns associated with problem gambling, in accordance with our Responsible Gaming Policy.

5. Legal Basis for Processing

y998 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are:

• Contractual necessity — processing that is necessary to provide you with the y998 service you have requested, including account management, bet settlement, and payment processing.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and gaming licence conditions.
• Legitimate interests — processing that is necessary for y998's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided such interests are not overridden by your rights and freedoms.
• Consent — processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw consent at any time by updating your Account preferences or contacting support.

6. How We Use Your Data

y998 uses the personal data we collect for the following purposes:

• To create, manage, and maintain your y998 Account, including identity verification and age confirmation.
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20.
• To settle bets and credit winnings to your Account balance.
• To detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited activities.
• To enforce our Terms & Conditions, including geo-restriction and age verification requirements.
• To monitor your gaming activity in connection with our responsible gaming obligations and to apply self-imposed limits or restrictions where requested.
• To provide customer support in English and Urdu-English via live chat and email correspondence.
• To send you transactional notifications about your Account, bets, and payments.
• To send you marketing communications about y998 promotions, bonuses, and new features, where you have provided your consent.
• To improve, personalise, and secure the Platform based on usage analytics and technical data.
• To comply with applicable laws, regulatory requirements, and the conditions of y998's gaming licence.

7. Cookies & Tracking Technologies

y998 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and analyse usage patterns. The types of cookies used on the y998 Platform include:

• Strictly necessary cookies — essential for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled.
• Functional cookies — used to remember your language preference, display settings, and login status between sessions.
• Analytical cookies — used to collect aggregated, anonymised data about how Users interact with the Platform, helping us identify areas for improvement.
• Marketing cookies — used, where you have consented, to deliver relevant promotional content and measure the effectiveness of y998 marketing campaigns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the Platform. A full cookie notice is available within the Platform's cookie consent banner upon first visit.

8. Sharing Your Data

y998 does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 partners receive the financial data necessary to process your transactions.
• Identity verification providers — third-party KYC and AML screening services receive identity documents and related data to fulfil our regulatory verification obligations.
• Technology service providers — hosting, cloud infrastructure, security, and analytics providers who process data on our behalf under strict data processing agreements.
• Game and content providers — licensed casino game suppliers may receive your session data in connection with the delivery of their games on the Platform.
• Regulatory and law enforcement authorities — we are legally required to disclose personal data to competent authorities where mandated by applicable law, court order, or our gaming licence obligations.
• Professional advisers — legal, audit, and compliance advisers acting under professional confidentiality obligations where necessary for y998's business operations.

9. International Data Transfers

As an internationally operated platform serving Pakistani players, y998 may transfer your personal data to countries outside Pakistan, including to the jurisdiction in which y998 holds its gaming licence and to the locations of our technology service providers. Where such transfers occur, y998 ensures that appropriate safeguards are in place, including:

• Transfers to countries recognised as providing an adequate level of data protection under applicable standards.
• Use of standard contractual clauses or equivalent binding data transfer mechanisms with recipient entities.
• Binding corporate rules or equivalent internal data protection policies where data is transferred within the y998 group of companies.

If you have questions about the safeguards applicable to a specific international transfer of your data, you may request further information by contacting us at [email protected].

10. Data Retention

y998 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including the satisfaction of any applicable legal, regulatory, accounting, or reporting requirements. The following retention guidelines apply:

• Account data — retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with AML and gaming licence record-keeping requirements.
• Transaction and financial records — retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity verification documents — retained for the period required by applicable anti-money laundering legislation, typically five (5) years following the end of the business relationship.
• Customer support communications — retained for up to three (3) years from the date of the last communication, unless a longer period is required for complaint resolution or legal proceedings.
• Marketing data — retained until you withdraw your consent or opt out of marketing communications, after which it will be suppressed or deleted within thirty (30) days.
• Technical and usage data — retained in aggregated or anonymised form for analytical purposes for up to two (2) years.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with y998's data destruction policy.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by y998. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request. y998 will respond within thirty (30) calendar days.

• Right of access — you have the right to request a copy of the personal data y998 holds about you and information about how it is used.
• Right to rectification — you have the right to request that y998 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to y998's legal retention obligations.
• Right to restriction of processing — you have the right to request that y998 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being verified.
• Right to data portability — where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to object — you have the right to object to processing carried out on the basis of y998's legitimate interests, including profiling, where you consider that your rights and freedoms override those interests.
• Right to withdraw consent — where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

12. Security Measures

y998 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the y998 Platform.
• Encrypted storage of sensitive personal and financial data at rest on our secured servers.
• Two-factor authentication (2FA) available on all registered y998 Accounts.
• Strict access controls limiting internal staff access to personal data on a need-to-know basis, enforced by role-based access management systems.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Real-time fraud detection systems monitoring transactions and Account activity for anomalies indicative of unauthorised access or fraudulent behaviour.

Despite our best efforts, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, y998 will notify you and the relevant regulatory authority in accordance with applicable legal requirements.

13. Children's Privacy

The y998 Platform is strictly intended for adults aged 21 and above. y998 does not knowingly collect personal data from individuals under the age of 21. If y998 becomes aware that personal data has been collected from an underage individual, the associated Account will be immediately suspended, all data will be securely deleted, and the matter will be handled in accordance with Section 3 of the y998 Terms & Conditions.

If you are a parent or guardian and you believe your child may have provided personal data to y998, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

14. Third-Party Links

The y998 Platform may contain links to third-party websites, payment portals, or service providers. y998 is not responsible for the privacy practices or the content of any such third-party sites. We encourage you to review the privacy policy of every website you visit outside of y998.bet. The inclusion of a link to a third-party site on the y998 Platform does not constitute an endorsement of that site's privacy practices by y998.

15. Changes to This Policy

y998 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, y998 will notify registered Users via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The effective date at the top of this page will be updated whenever this Policy is revised. Your continued use of the y998 Platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure in accordance with the y998 Terms & Conditions.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which y998 processes your personal data, please contact our Data Protection team using the details below. Our Urdu-English speaking support staff are available 24 hours a day, 7 days a week.

y998 aims to acknowledge all privacy-related requests within forty-eight (48) hours and to resolve them fully within thirty (30) calendar days. Where a request is particularly complex or where a high volume of requests has been received, we may extend this period by a further two (2) months, in which case we will inform you of the extension and the reasons for it.