888y Privacy Policy – How We Protect Your Data

Who We Are § 1

888y is an online gaming platform operating at 888y.run, providing casino games, sports betting, poker, fishing games and associated services to players in Pakistan. When this Privacy Policy refers to "888y", "we", "us" or "our", it means the operator of the 888y platform and the entity responsible for the personal data you provide when you register or use our services.

888y is the data controller for all personal information collected through this platform. As data controller, 888y determines the purposes and means by which your personal data is processed, and is responsible for ensuring that processing is carried out lawfully, fairly and transparently.

For any privacy-related queries, the designated point of contact is the 888y Data Protection team, reachable at support@888y.run or via the live chat on the platform.

What Personal Data We Collect § 2

888y collects personal data from you in several categories, depending on how you interact with the platform. We only collect data that is genuinely necessary for the purposes described in this policy. Below is a detailed breakdown of what we collect and why each category is needed.

How We Collect Your Data § 3

888y collects personal data through three main channels. Understanding these channels helps you know exactly what information is captured and at what point.

• Directly from you: When you register your account on 888y, fill in your profile, contact customer support, submit a withdrawal request, or participate in a promotion, you provide data directly. This is the most significant source of personal data at 888y.
• Automatically during use: When you browse or play on 888y, our systems automatically log certain technical information — your IP address, device and browser type, pages visited, games opened, bet history and session timestamps. This data helps us keep the platform running correctly and detect unusual activity that might indicate fraud or account compromise.
• From third parties: Where you use a third-party payment service such as Easypaisa, JazzCash or NayaPay to deposit, we receive a transaction reference and confirmation from that provider. KYC verification may involve a third-party identity verification service that confirms the accuracy of the identity documents you provide. We only receive the minimum information necessary from these third parties — never full payment credentials.

888y does not purchase data about you from data brokers or list providers. We do not collect data from your social media profiles unless you have directly and voluntarily shared information in a manner that reaches us.

Why We Use Your Data § 4

888y uses the personal data we collect for specific, defined purposes. We do not use your data for purposes beyond what is described below, and we do not retain data longer than is necessary for these purposes (see Section 8 on Data Retention).

• Account management: To create and maintain your 888y account, verify your identity and age, process your password and profile settings, and ensure only you can access your account.
• Payment processing: To process deposits, handle withdrawals in PKR, verify that payment methods are registered in your name, and maintain accurate financial records for each transaction.
• Legal compliance and KYC: To fulfil our obligations under applicable anti-money laundering requirements and Know Your Customer regulations. This includes verifying identity documents and reporting obligations where legally required.
• Platform security and fraud prevention: To detect and investigate suspicious account activity, prevent unauthorised access, identify multi-accounting, and protect the integrity of games and financial transactions on 888y.
• Customer support: To respond to your queries, resolve account or payment issues, investigate complaints, and maintain records of our communications for quality assurance.
• Responsible gaming: To monitor gaming activity patterns that may indicate problem gambling behaviour, enforce self-exclusion and deposit limit settings you have applied to your account, and send responsible gaming communications where triggered by your account activity.
• Promotions and marketing (with consent): If you have opted in to receive promotional communications, we use your contact details to send you information about 888y offers, bonuses and news. You can opt out of marketing communications at any time by contacting support or using the unsubscribe option in any email we send.
• Platform improvement: Aggregated, anonymised usage data helps us understand which games and features Pakistani players use most, identify technical issues, and improve the overall 888y experience. This analysis never identifies individual players.

Who We Share Your Data With § 5

888y does not sell your personal data to third parties. Period. We share data only in the following limited, controlled circumstances — and only to the extent necessary for the specific purpose described:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT facilitators and card payment processors receive only the transaction data required to execute your deposit or withdrawal. They do not receive your gaming history or full profile.
• KYC and identity verification providers: When you are asked to verify your identity, your submitted documents are processed by a certified identity verification partner. This provider confirms validity and returns a pass/fail result to 888y. Original documents are not retained by 888y beyond the minimum legally required retention period.
• Fraud detection and security services: Technical data such as IP addresses, device fingerprints and transaction patterns may be shared with fraud detection service providers to identify and prevent fraudulent activity. These providers operate under strict data processing agreements with 888y.
• Legal and regulatory authorities: Where 888y is legally required to disclose information — for example, under a court order, regulatory investigation or anti-money laundering reporting obligation — we will provide the minimum information required to comply. We do not volunteer information to authorities beyond what is legally mandated.
• Game software providers: Third-party game studios whose software runs on 888y may receive anonymised gameplay data for quality assurance and game performance purposes. They do not receive personally identifiable information about individual players.

All third parties with whom 888y shares personal data are required to handle that data in accordance with applicable data protection standards and are bound by contractual data processing agreements. 888y does not permit these third parties to use your data for their own marketing purposes.

Cookies & Tracking Technologies § 6

888y uses cookies and similar tracking technologies to make the platform work correctly and to understand how players use it. A cookie is a small text file stored on your device that helps us recognise your session, remember your preferences and maintain your login state.

• Strictly necessary cookies: These are required for the platform to function. They maintain your login session, remember your game settings and ensure security features work correctly. You cannot disable these without breaking the platform.
• Performance and analytics cookies: These help us understand aggregated usage patterns — which pages receive the most visits, how long sessions last and where technical errors occur. This data is anonymised and used only for platform improvement.
• Functional cookies: These remember your preferences such as language settings and display options so you don't need to set them again every visit.
• Security cookies: Short-lived cookies that support fraud detection by helping verify that account activity is coming from a device consistent with your previous sessions.

You can manage cookie preferences through your browser settings. Note that disabling cookies beyond strictly necessary ones may affect your experience on 888y — some features and personalisation settings may not work as intended.

Data Security § 7

888y takes the security of your personal data seriously. We have implemented a comprehensive set of technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction.

• Encryption in transit: All data transferred between your device and 888y's servers is protected by 256-bit SSL/TLS encryption. This applies to login credentials, payment information, personal data and all other communications.
• Encryption at rest: Sensitive personal data stored in 888y's databases — including payment method details and identity documents — is encrypted at rest using industry-standard protocols.
• Access controls: Access to personal data within 888y's systems is restricted on a strict need-to-know basis. Staff members only access the minimum data required for their specific role. All staff with data access are bound by confidentiality obligations.
• Security monitoring: 888y's systems are continuously monitored for intrusion attempts, unusual access patterns and other security indicators. Automated alerts are configured to escalate suspicious activity immediately.
• Regular security reviews: 888y conducts periodic security assessments to identify and address vulnerabilities before they can be exploited.

Despite these measures, no system is completely invulnerable. In the unlikely event of a data breach that affects your personal information, 888y will notify you and relevant authorities as required by applicable law and will take immediate steps to contain and remediate the breach.

You also play a role in keeping your account secure. Use a strong, unique password for your 888y account. Do not share your login credentials with anyone. If you suspect your account has been compromised, contact 888y support immediately via live chat.

Data Retention § 8

888y retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply to different categories of data:

When data is no longer needed and no legal obligation requires its retention, 888y securely deletes or anonymises it. Anonymised data — from which you cannot be identified — may be retained indefinitely for statistical analysis and platform improvement purposes.

Your Privacy Rights § 9

As an 888y player, you have meaningful rights over your personal data. These rights are genuine — not nominal — and 888y is committed to responding to any request you make within a reasonable time, typically within 30 days of receipt.

To exercise any of these rights, contact 888y's support team by email at support@888y.run or via live chat. Please state clearly which right you are exercising and provide sufficient identification to allow us to locate your account securely. We will acknowledge your request within 24 hours and respond fully within 30 days.

Children's Privacy § 10

888y's platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account or use the 888y platform in any way.

If 888y becomes aware that a registered account holder is under 18, the account will be immediately suspended, all personal data associated with the account will be deleted as soon as legally permissible, and no winnings or bonuses will be payable. Any deposits made will be returned to the payment method they came from after verification.

If you are a parent or guardian and have reason to believe a child under your care has registered on 888y, please contact us immediately at support@888y.run so we can take appropriate action promptly.

Third-Party Links & Services § 11

The 888y platform may contain references to third-party payment services such as Easypaisa, JazzCash, NayaPay and SadaPay. When you navigate to these services to complete a payment, you leave the 888y platform and are subject to the privacy policies of those third-party providers.

888y is not responsible for the privacy practices of third-party services. We recommend reviewing the privacy policies of any payment provider you use before submitting personal or financial information to them. The fact that 888y integrates with a payment service does not constitute an endorsement of that service's broader data practices.

888y's platform does not contain links to external advertising networks, affiliate sites or unaffiliated gaming platforms. All links and buttons on 888y lead to pages within the 888y platform or to the payment services described above.

Changes to This Privacy Policy § 12

888y may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or the services we offer. When we make material changes, we will notify registered account holders by placing a prominent notice on the 888y platform homepage and, where practically possible, by sending an in-platform notification to your account.

• The "Last updated" date at the top of this page will always reflect when the current version was published.
• Minor clarifications and corrections that do not change the substance of this policy may be made without formal advance notice.
• Material changes — those that significantly affect how your data is used or what rights you have — will be notified a minimum of 14 days before they take effect.
• Your continued use of 888y after a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with changes, you should contact 888y support to close your account and arrange return of your remaining balance.

We encourage you to check this page periodically to stay informed about how 888y is protecting your information.

How to Contact Us § 13

If you have any questions, concerns or requests relating to this Privacy Policy or the way 888y handles your personal data, please get in touch through any of the following channels. Our team responds in both Urdu and English.

For formal data subject requests (access, deletion, rectification), please mark your email clearly as "Data Subject Request" to ensure it is routed to the 888y Data Protection team without delay. Please include your registered mobile number so we can locate your account securely.