1. Who We Are
This Privacy Policy applies to y8888 ("y8888," "we," "us," "our"), the operator of the online gaming and sports betting platform accessible at y8888.bio. y8888 is the data controller for all personal information collected through the platform, its related mobile interfaces, and customer support channels.
This Policy applies to all visitors to the y8888 website, all registered account holders, and all persons who interact with y8888 via support channels including live chat, WhatsApp, Telegram, and email. By using any part of the y8888 platform, you confirm that you have read and understood this Privacy Policy.
This Privacy Policy should be read alongside the y8888 Terms and Conditions. Together, they form the complete legal framework governing your use of the platform.
2. Data We Collect
y8888 collects personal information across three categories: information you provide directly, information generated automatically by your use of the platform, and information received from third-party payment processors.
2.1 Information You Provide
- Registration data: Full legal name, date of birth, Pakistani mobile number, email address (optional), and password.
- Identity verification: CNIC number and supporting documents when required at withdrawal or triggered by our KYC process.
- Payment account details: Easypaisa or JazzCash account numbers, NayaPay wallet identifiers, bank account number and IBAN for IBFT, and card details for Visa/Mastercard payments. Raw card numbers are handled exclusively by our certified payment processor — y8888 receives only tokenised references.
- Support communications: Messages, queries, and complaints submitted to the y8888 support team via any channel.
2.2 Automatically Collected Data
- Device and browser data: IP address, device type, operating system, browser version, and screen resolution — used for fraud prevention and session security.
- Session and gameplay data: Login timestamps, pages visited, games played, bets placed, amounts wagered, game outcomes, and session durations.
- Cookie and local storage data: Session tokens, preference settings, and analytics identifiers as described in Section 7.
2.3 Data from Third Parties
y8888 may receive confirmation data from payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT system, Visa/Mastercard network) confirming transaction status. This data is used solely to reconcile deposits and withdrawals against your y8888 balance. y8888 does not purchase personal data from data brokers.
3. How We Use Your Data
y8888 uses the personal data it holds for the following specific purposes only:
| Purpose | Data Used | Basis |
|---|
| Account creation & management | Name, mobile, DOB, password | Contract performance |
| Identity & age verification | CNIC, DOB, name | Legal obligation / contract |
| Processing PKR deposits & withdrawals | Payment account details, transaction data | Contract performance |
| Fraud prevention & security | IP, device data, session data | Legitimate interest |
| Customer support | Account data, support messages | Contract performance |
| Platform improvement | Anonymised usage analytics | Legitimate interest |
| Legal & regulatory compliance | Transaction records, identity data | Legal obligation |
| Marketing communications | Mobile number, email (opt-in only) | Consent |
y8888 does not use your data for automated profiling that produces legal or similarly significant effects on you without human review.
4. Legal Basis for Processing
y8888 processes personal data on one of the following legal grounds depending on the purpose:
- Contract performance: Processing necessary to provide the y8888 service you have signed up for — running your account, processing bets, and handling payments.
- Legal obligation: Processing required by applicable laws, including anti-money-laundering (AML) requirements, age verification obligations, and financial record-keeping regulations.
- Legitimate interests: Processing for fraud prevention, platform security, and anonymised analytics — balanced against your privacy rights and conducted with appropriate safeguards.
- Consent: Processing for optional purposes such as marketing communications and certain non-essential cookies. You can withdraw consent at any time without affecting your y8888 account.
5. Sharing Your Data
y8888 does not sell, rent, or trade personal data. Disclosure of your personal information is limited to the following specific categories of recipients, and only to the extent necessary for the stated purpose:
5.1 Payment Processors
y8888 shares the minimum data required with certified payment processors — including Easypaisa, JazzCash, NayaPay, SadaPay, and Visa/Mastercard acquiring banks — to execute deposits and withdrawals to your y8888 balance. These processors are contractually bound to use your data only for payment execution and are prohibited from using it for any other purpose.
5.2 Identity Verification Services
When CNIC verification is required, y8888 may use a certified identity verification service to cross-check your submitted documents. These services operate under strict data processing agreements and retain verification results for the minimum legally required period.
5.3 Law Enforcement & Regulatory Authorities
y8888 will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, valid legal process, or where disclosure is necessary to protect the rights and safety of y8888 players or the public. y8888 will notify affected users where legally permitted to do so before making such a disclosure.
5.4 Technology & Hosting Providers
y8888 uses third-party infrastructure providers for server hosting, content delivery, and platform monitoring. These providers access data only as necessary to provide their contracted services and are bound by data processing agreements that restrict further use or disclosure.
y8888 does not share your data with advertising networks, data brokers, social media platforms, or any commercial third parties for marketing or profiling purposes. This commitment is unconditional.
6. Payment Data & PKR Transactions
Because y8888 operates entirely in Pakistani Rupees and processes all deposits and withdrawals through Pakistani payment systems, payment data security is a particularly important area of this Privacy Policy.
6.1 What y8888 Stores
y8888 stores the following payment-related information in connection with your account:
- Transaction reference numbers issued by the payment processor
- Transaction amounts in PKR, timestamps, and settlement status
- The name of the payment method used (e.g., "Easypaisa") without raw account credentials
- Masked account identifiers (e.g., last 4 digits of a card or last 4 digits of a mobile number) for display in your transaction history
6.2 What y8888 Does Not Store
y8888 does not store your full Easypaisa or JazzCash PIN, your full mobile number linked to NayaPay, full card numbers, card CVV/security codes, or online banking credentials. This data is handled exclusively within the secure systems of the relevant certified payment processor.
6.3 Transaction Records
y8888 retains transaction records for the period required by applicable financial regulations — typically a minimum of five years from the date of the transaction. This is a legal obligation and applies regardless of whether your y8888 account remains active.
7. Cookies & Tracking Technologies
y8888 uses cookies and similar technologies to keep the platform working correctly and to detect fraudulent activity. y8888 does not use advertising cookies or cross-site tracking technologies.
7.1 Essential Cookies
These cookies are required for the y8888 platform to function. They maintain your login session, store your language and display preferences, and enable the payment flow between y8888 and its payment processors. You cannot opt out of essential cookies while remaining logged in to y8888.
7.2 Security Cookies
y8888 uses session tokens and device fingerprint cookies to detect unauthorised login attempts, identify bots, and prevent multi-accounting and payment fraud. This data is processed internally and is not shared with third-party analytics or advertising platforms.
7.3 Analytics Cookies (Optional)
With your consent, y8888 uses anonymised analytics data to understand how players navigate the platform and to identify areas for improvement. This data does not contain your name, CNIC, payment details, or any directly identifying information. You can opt out of analytics cookies from the cookie preference panel on the y8888 website.
8. Data Retention
y8888 retains personal data for as long as is necessary for the purpose it was collected, subject to minimum retention periods required by law.
| Data Type | Retention Period |
|---|
| Account registration data | Duration of account + 2 years after closure |
| Identity verification documents | 5 years from submission (legal requirement) |
| Transaction records (PKR deposits/withdrawals) | Minimum 5 years (financial regulation) |
| Gameplay & betting history | 3 years from last session |
| Support communication records | 2 years from resolution |
| Marketing consent records | Until consent is withdrawn + 1 year |
| Security & fraud prevention logs | 2 years from creation |
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with you as an individual. y8888 does not retain data "just in case" beyond the periods stated above.
9. Data Security
y8888 implements technical and organisational measures appropriate to the sensitivity of the data held to prevent unauthorised access, loss, alteration, or disclosure. These measures include:
- TLS 1.3 encryption for all data transmitted between your device and y8888 servers
- AES-256 encryption at rest for sensitive data fields stored in y8888 databases
- Role-based access controls limiting which y8888 staff can access which categories of personal data
- Multi-factor authentication required for all y8888 administrative access to production systems
- Regular penetration testing by independent security firms to identify and resolve vulnerabilities before they can be exploited
- Incident response procedures to detect, contain, and notify affected users of any data breach within the timeframe required by applicable regulations
y8888 holds a record of all data processing activities and conducts periodic data protection impact assessments for high-risk processing operations. No security system is infallible, but y8888 applies industry-standard best practices consistently across the platform.
Account security is a shared responsibility. y8888 encourages all players to use a strong, unique password for their y8888 account, enable two-factor authentication where available, and log out fully when using shared or public devices.
10. Your Privacy Rights
As a y8888 player, you have meaningful rights over your personal data. These rights can be exercised at any time by contacting the y8888 support team and will be fulfilled within 7 business days in the majority of cases.
