y288 Privacy Policy — How We Protect Your Data

1Introduction

y288 operates the online gaming platform at y288.pro and is committed to handling the personal data of its players with care, transparency and respect. This Privacy Policy explains what information we collect when you register, deposit, play or contact us, how that information is used, and what choices you have over your own data.

This policy applies to all players who access y288 from Pakistan and covers data collected through the website, the y288 Android app and any related communications channels including live chat and email support. By registering an account or continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood how your data is handled.

This Privacy Policy should be read alongside the Terms and Conditions. If there is any conflict between the two documents on a data-related matter, this Privacy Policy takes precedence on privacy questions.

2Data We Collect

y288 collects personal data through three main routes: information you provide directly, data generated automatically when you use the platform, and information received from payment processors during deposit and withdrawal transactions.

Information you provide directly:

• Full name and date of birth provided during registration.
• Contact details including email address and phone number.
• Identity verification documents such as national ID or passport submitted during KYC checks.
• Communication content — messages sent via live chat or email to our support team.
• Responsible Gaming preferences including deposit limits, session timers and self-exclusion settings.

Data generated automatically when you use y288:

• IP address and approximate location derived from it.
• Device type, operating system and browser version.
• Session duration, pages visited and features used within the platform.
• Betting history, game activity logs and transaction records.
• Login timestamps and account activity records.

Data received from payment providers:

• Transaction reference numbers from JazzCash, Easypaisa, Raast or bank transfer.
• Confirmation of payment status (success, pending, failed).
• Masked payment identifiers as provided by the processor — full card or account numbers are never stored on y288 servers.

3How We Use Your Data

Personal data collected by y288 is used only for purposes that are directly connected to running your account and delivering the platform experience. We do not use your data for purposes you would not reasonably expect, and we do not sell it to advertisers or data brokers.

Where y288 sends you promotional communications such as bonus offers or game announcements, these are based on your account preferences. You can update your communication preferences from within your account settings or by contacting support.

4Payment Data and PKR Transactions

All financial transactions on y288 are conducted in Pakistani Rupees (PKR). The platform supports deposits and withdrawals via JazzCash, Easypaisa, Raast, standard bank transfer and other mobile wallets as listed in the cashier section.

When you make a deposit or request a withdrawal, your transaction is processed directly by the relevant payment provider. y288 receives only the transaction outcome (approved or declined), a reference number and a masked identifier — for example, the last four digits of a bank account or the registered mobile number format used by JazzCash or Easypaisa. We never receive or store full card numbers, full account numbers or wallet PINs.

Payment data is retained as part of your transaction history for dispute resolution and standard financial record-keeping purposes. Transaction records are kept for a minimum of five years in line with general financial record retention practices.

5Cookies and Tracking Technologies

y288 uses cookies and similar tracking technologies to keep the platform running smoothly, remember your preferences and analyse how the site is used. Cookies are small text files stored in your browser — they do not contain personal information on their own but can be matched to your account when you are logged in.

Types of cookies y288 uses:

• Essential cookies: Required for the platform to function. These handle your login session, keep your account secure and remember settings like language preference. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as game display settings, last visited lobby section or responsible gaming reminder intervals.
• Analytics cookies: Collect anonymised data on how players navigate the platform — which games are most popular, where players drop off, and which features are used most. This helps us improve the experience.
• Security cookies: Used for fraud detection and to identify unusual login patterns that might indicate an account has been accessed without permission.

You can manage cookie settings in your browser. Blocking essential cookies will prevent you from logging in and using the platform. Blocking analytics cookies will not affect your ability to play but will mean we receive less feedback on platform quality.

The y288 Android app uses equivalent local storage mechanisms to maintain your session and preferences. The app does not serve third-party advertising cookies.

6Data Sharing and Third Parties

y288 does not sell, rent or trade your personal data to third parties for marketing or commercial purposes. Data is shared with third parties only where necessary to deliver the platform and its services, and only on a strictly need-to-know basis.

Third parties that may receive limited data include:

• Payment processors: JazzCash, Easypaisa, Raast and bank partners receive only the transaction data required to process your deposit or withdrawal. They operate under their own privacy frameworks.
• Identity verification providers: When KYC verification is required, your submitted documents may be processed by a third-party verification service. These providers are contractually obligated to handle your data securely and use it only for verification purposes.
• Game studios and software providers: Game providers powering the y288 Game Lobby, live casino and fish games may receive anonymised session data to support game performance and fairness auditing. They do not receive your name, contact details or payment information.
• Customer support platforms: Our live chat and email support tools are hosted by third-party platforms. Conversations you have with support agents are stored on those platforms' infrastructure, subject to their own security standards.
• Analytics providers: Anonymised, aggregated usage data may be processed by analytics tools to help us understand how the platform is used and where improvements are needed.

All third-party service providers used by y288 are required to handle data responsibly, implement appropriate security measures and use personal data only for the specific purpose for which it was shared. y288 does not permit third-party providers to use your data for their own marketing or to share it further without our written consent.

In the event that y288 undergoes a business restructure, merger or acquisition, player data may be transferred as part of that process. In such cases, players will be notified in advance and the incoming party will be bound by the terms of this Privacy Policy.

7Data Security

y288 takes the security of your personal data seriously and has put technical and organisational measures in place to protect it against unauthorised access, loss, alteration or disclosure.

• SSL encryption: All data transmitted between your device and y288 servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when using the platform.
• Secure data storage: Personal data is stored on access-controlled servers. Access to player data within the y288 team is limited to staff who need it to perform their job functions.
• Password hashing: Account passwords are stored using one-way cryptographic hashing. This means your actual password is never stored — only a secure representation of it that cannot be reversed.
• Fraud monitoring: Automated systems monitor login activity and transaction patterns for signs of fraud or unauthorised account access. Suspicious activity triggers alerts and may result in a temporary account hold pending verification.
• Regular security reviews: y288 conducts periodic internal reviews of data handling practices and security controls to identify and address potential vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. If you have reason to believe your account has been compromised, change your password immediately and contact our support team. We will investigate and take appropriate action as quickly as possible.

8Data Retention

y288 retains your personal data for as long as your account is active or as long as is necessary to fulfil the purposes described in this Privacy Policy. Different categories of data are kept for different durations based on their purpose and relevant retention standards.

• Account data (name, email, date of birth): Retained for the lifetime of your account and for a period after closure to allow for dispute resolution.
• Transaction and payment records: Retained for a minimum of five years after the transaction date for financial record-keeping and dispute handling purposes.
• Identity verification documents: Retained for the period required to fulfil KYC obligations and for a period thereafter as required for security auditing.
• Support communications: Chat logs and email correspondence are retained for up to two years to allow for follow-up on unresolved matters and quality assurance.
• Gameplay and betting history: Retained for the lifetime of the account and for a reasonable period after closure.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual player.

When data is no longer needed and the applicable retention period has expired, it is securely deleted or anonymised so that it can no longer be associated with your identity.

9Your Data Rights

As a y288 player, you have a number of rights in relation to the personal data we hold about you. These rights can be exercised by contacting our support team. We aim to respond to all data rights requests within five business days.

• Right to access: You can request a copy of the personal data y288 holds about you. This includes your account details, transaction history and any communication records linked to your account.
• Right to correction: If any personal data we hold is inaccurate or out of date, you can ask us to correct it. For example, if your contact number has changed, you can update it directly in your account settings or by contacting support.
• Right to deletion: You can request that your personal data be deleted. Note that this right is subject to limitations — we may need to retain certain records for legal, security or dispute resolution purposes even after an account is closed.
• Right to restrict processing: In certain circumstances, you can ask us to limit how we use your data while a query or complaint is being resolved.
• Right to data portability: You can request your account data in a structured, machine-readable format where technically feasible.
• Right to object: You can object to your data being used for specific purposes such as promotional communications. Opt-out options for marketing emails are available in your account settings.

To exercise any of these rights, contact our support team via live chat or at [email protected] with the subject line "Data Rights Request" along with your registered account email and a description of your request. We may ask for additional verification before processing the request to ensure we are speaking with the account holder.

10Children's Privacy

y288 is strictly an adult platform. Registration is only permitted for individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18.

If we become aware that personal data has been collected from a person under 18 — whether through a misrepresented registration or any other means — that account will be closed, the data deleted, and any deposits returned to the original payment method where technically possible. Winnings accumulated on a minor's account will be voided.

If you are aware of a minor who has registered on y288, please contact our support team immediately at [email protected]. We will investigate and act promptly.

11Changes to This Privacy Policy

y288 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in the services we use, or improvements in our data practices. When material changes are made, registered players will be notified by email at the address on their account, or through a notice displayed on the platform at their next login.

The "Last Updated" date at the top of this page will always reflect when the most recent version was published. We recommend checking back periodically so you remain informed about how your data is being handled.

Continuing to use y288 after an updated Privacy Policy has been published constitutes your acceptance of the changes. If you do not agree with any changes, please contact support to discuss your options, including closing your account if you prefer not to continue.

12Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information is being handled, our team is available to help.

• Email: [email protected] — use the subject line "Privacy Query" for faster routing.
• Live Chat: Available 24/7 through the platform after logging in. For privacy-related matters, our support agents can escalate your query to the relevant team.
• Response time: Most privacy queries are acknowledged within 24 hours and fully resolved within five business days.

For formal data rights requests — such as subject access requests or deletion requests — please contact us by email with your registered account email address, the type of request you are making, and any relevant details. We will verify your identity before processing the request to protect your account security.