ya888 Privacy Policy —
How We Protect Your Data

ya888 (referred to throughout this document as "ya888", "we", "us", or "our") operates the online gaming platform accessible at ya888.app. As an operator serving Pakistani players — including users from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and across the country — we are committed to handling all personal data responsibly, transparently, and securely.

This Privacy Policy describes our practices with respect to the collection, use, storage, sharing, and protection of personal information provided by users of the ya888 platform ("you", "your", or "the player"). It covers data collected via the ya888 website, mobile interface, customer support channels, and any other touchpoint through which you interact with ya888.

ya888 processes personal data in compliance with applicable data protection principles and our obligations under our international gaming licence. We apply these standards consistently to all players, regardless of where in Pakistan they are located.

This policy is written in plain, clear English so that every ya888 player — not just legal professionals — can understand how their data is handled. Where we use technical or legal terms, we explain them. If anything in this policy is unclear, please reach out to our support team and we will explain it directly.

ya888 collects two broad categories of data: information you provide to us directly, and information that is generated automatically when you use the platform. The following table sets out the specific data types we collect and their purpose:

ya888 does not collect sensitive personal data beyond what is strictly necessary for identity verification, payment processing, and regulatory compliance. We do not collect racial or ethnic origin data, political opinions, religious beliefs, or biometric data beyond CNIC document verification images.

Where ya888 requests CNIC document images, this is solely to fulfil our Know Your Customer (KYC) obligations as required under anti-money laundering regulations applicable to licensed online gaming operators. These images are never used for any purpose other than identity verification and are never shared with third parties for commercial purposes.

ya888 collects personal data through the following channels and mechanisms:

• Direct Input: Information you provide when registering your ya888 account, completing KYC verification, making deposits or withdrawal requests, submitting support tickets, or filling out any form on the ya888 platform.
• Automated Technologies: When you visit or use the ya888 platform, our servers automatically log technical data including your IP address, device identifiers, browser fingerprint, and session timestamps. This data is collected via server logs, cookies, and similar tracking technologies described in Section 10.
• Payment Processors: When you complete a JazzCash, EasyPaisa, or bank transfer transaction, our payment processing partners share transaction confirmation data with ya888 to allow us to credit your account and maintain accurate financial records.
• Third-Party Identity Verification Services: ya888 uses accredited third-party KYC service providers to assist in verifying CNIC documents. These providers process your identity documents on our behalf and return a verification result. They do not retain your documents beyond the verification process.
• Customer Support Interactions: Any communications you initiate with ya888 via live chat or email are recorded and stored as part of your account record. These records are used for dispute resolution and quality assurance.

ya888 uses your personal data only for specific, clearly defined purposes. We do not use personal data for any purpose beyond those described in this Privacy Policy. The table below sets out our primary data use purposes:

ya888 does not sell your personal data to any third party for their own marketing purposes. ya888 does not use your data to build profiles for sale to data brokers. Every use of your data serves either your direct account needs, our legal obligations, or the security and integrity of the ya888 platform.

ya888 processes your personal data on one or more of the following legal grounds, depending on the purpose of processing:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a ya888 account holder — including account creation, payment processing, and game access. Without this processing, ya888 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML and KYC obligations under ya888's international gaming licence. ya888 cannot waive these legal obligations at a player's request.
• Legitimate Interests: Processing carried out for ya888's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the player experience — provided these interests are not overridden by your privacy rights.
• Consent: Where ya888 relies on your consent as the legal basis for processing — specifically for direct marketing communications — you have the right to withdraw that consent at any time by contacting [email protected] or updating your communication preferences in the account settings panel.

ya888 does not share your personal data with third parties except in the specific circumstances described below. In all cases where data is shared, ya888 ensures that the receiving party is subject to appropriate data protection obligations.

• Payment Processors: Financial data is shared with JazzCash, EasyPaisa, and our banking partners (HBL, UBL, Meezan Bank, Raast / 1LINK) to process your transactions. These processors are bound by their own regulatory data protection obligations.
• KYC & Identity Verification Providers: CNIC document data is shared with accredited third-party KYC verification services for the sole purpose of verifying your identity. These providers act as data processors under contract with ya888 and may not use your data for any other purpose.
• Game Software Providers: Certain gaming data (such as bet records) is processed by ya888's third-party game software providers in order to deliver the casino and sports betting products on the platform. These providers do not receive your identity or financial data.
• Regulatory & Law Enforcement Authorities: ya888 may disclose personal data to relevant financial intelligence units, regulatory bodies, or law enforcement agencies where required to do so by law, court order, or valid regulatory request. ya888 will not notify you of such disclosure where doing so would prejudice the relevant investigation or is prohibited by law.
• Fraud Prevention Networks: In cases of suspected fraud or money laundering, ya888 may share data with shared industry fraud prevention systems to protect the integrity of the online gaming ecosystem.
• Corporate Transfers: In the event of a merger, acquisition, or sale of ya888's business or assets, personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy.

As an internationally licensed online gaming platform, ya888 may process and store personal data on servers located outside Pakistan. When your data is transferred internationally, ya888 ensures that appropriate safeguards are in place to protect it to a standard equivalent to that described in this Privacy Policy.

These safeguards include contractual data processing agreements with all international data processors, requiring them to maintain security standards consistent with industry best practices for licensed online gaming operators. ya888 does not transfer data to jurisdictions that do not provide adequate data protection standards without first implementing additional protective measures.

All data transfers related to payment processing via JazzCash, EasyPaisa, and Pakistani banks are processed within payment infrastructure that operates within the regulatory framework of the State Bank of Pakistan. Financial transaction data for Pakistani payment methods remains within Pakistan-based payment processing systems to the greatest extent possible.

ya888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by our legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, ya888 securely destroys or anonymises your personal data in a manner that prevents reconstruction of any identifiable information. Where data is anonymised rather than deleted, the resulting anonymous data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

Self-excluded players' identity data is retained for the full regulatory period, and the self-exclusion record itself is maintained permanently to prevent re-registration in contravention of the self-exclusion request.

ya888 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. Our security infrastructure includes the following:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ya888 platform is encrypted using industry-standard 256-bit SSL/TLS encryption. This applies to all page loads, ya888 Login sessions, and payment transactions.
• Encrypted Data Storage: Personal and financial data stored on ya888 servers is encrypted at rest. CNIC document images are stored in an isolated, access-controlled environment separate from general account data.
• Access Controls: Access to personal data is restricted on a strictly need-to-know basis. Only authorised ya888 compliance and customer support staff can access identity and financial data, and all access is logged and monitored.
• Two-Factor Authentication: ya888 offers SMS-based 2FA for all player accounts and requires it for access to sensitive compliance functions internally. Players are strongly encouraged to enable 2FA via the account security settings panel.
• Penetration Testing: ya888's platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ya888 maintains a documented data breach response procedure. In the event of a security breach affecting your personal data, ya888 will notify affected players within a reasonable timeframe and take immediate steps to mitigate any harm.

ya888 uses cookies and similar tracking technologies to deliver and improve the platform experience. A cookie is a small text file placed on your device when you visit ya888. Cookies cannot access other files on your device and do not contain executable code.

ya888 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the ya888 platform to function. They manage your ya888 Login session, maintain your game state, and enable payment processes. You cannot opt out of strictly necessary cookies while using ya888, as they are required for the service to operate.
• Functional Cookies: These cookies remember your preferences — such as your preferred game lobby view, notification settings, and language — so you do not have to reconfigure them on each visit.
• Analytics Cookies: ya888 uses first-party analytics cookies to understand how players navigate the platform. This data is aggregated and anonymised — it does not identify individual players and is used solely to improve the platform experience for all Pakistani users.
• Security Cookies: Short-lived security cookies support fraud detection and help ya888 identify suspicious login behaviour, such as access from an unusual geographic location or device.

ya888 does not use third-party advertising or behavioural tracking cookies. There are no retargeting pixels or advertising network trackers on the ya888 platform. ya888 does not participate in cross-site behavioural advertising networks.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using ya888, but may affect the quality of your experience. Disabling strictly necessary cookies will prevent ya888 from functioning correctly.

As a ya888 player, you have the following rights with respect to your personal data. ya888 is committed to facilitating the exercise of these rights promptly and without unnecessary obstacles:

• Right of Access: You have the right to request a copy of all personal data that ya888 holds about you. ya888 will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any personal data ya888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, correction may require re-submission of verification documents.
• Right to Erasure: In certain circumstances, you may request that ya888 delete your personal data. This right is subject to limitations where ya888 is required by law to retain data — for example, AML regulations require us to retain account and transaction records for 5 years regardless of account closure.
• Right to Restrict Processing: You may request that ya888 temporarily restricts its processing of your data — for example, while a dispute about accuracy is being resolved — without requiring full deletion.
• Right to Data Portability: You may request that ya888 provides your personal data in a machine-readable format, allowing you to transfer it to another service provider if you wish.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on ya888's legitimate interests, though ya888 may be able to demonstrate compelling grounds that override your objection in certain cases.
• Right to Withdraw Consent: Where ya888 relies on your consent to process data — specifically for marketing communications — you may withdraw that consent at any time with immediate effect.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". ya888 will verify your identity before processing the request and will respond within 30 calendar days. There is no charge for exercising your data rights.

The ya888 platform is strictly for adults aged 21 years and above. ya888 does not knowingly collect personal data from any person under the age of 21. Age verification via CNIC is a mandatory step in the account registration process, and accounts belonging to individuals under 21 are permanently closed immediately upon detection.

If ya888 discovers that personal data has been collected from a person under the age of 21, we will delete that data immediately and close the associated account. Any deposits made by or on behalf of an underage user will be returned to the originating payment source, minus any bonuses used.

If you are a parent or guardian and believe that your child has attempted to register or use ya888, please contact us immediately at [email protected]. ya888 takes underage gambling prevention extremely seriously and will act on all such reports without delay.

The ya888 platform may contain links to third-party websites, payment processors, or game providers' information pages. This Privacy Policy applies solely to the ya888 platform and does not cover the data practices of any third-party websites or services, even if they are accessed via a link on ya888.

ya888 does not control and is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of ya888, particularly the privacy policies of JazzCash, EasyPaisa, and your banking provider when initiating payment transactions.

Within the ya888 platform itself, all links are internal — directing you to other sections of ya888.app — and are not directed to external third-party websites for commercial or advertising purposes.

ya888 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the features and services available on the platform. The "Effective Date" at the top of this document indicates when the current version took effect.

When ya888 makes material changes to this Privacy Policy — meaning changes that significantly affect your privacy rights or how your data is used — we will notify you by email to your registered address and/or by displaying a prominent notice when you next log in via ya888 Login. We will provide at least 14 days' notice before material changes take effect.

For minor, administrative, or clarificatory updates, ya888 may update the policy immediately and reflect the change in the Effective Date. Continued use of ya888 after any policy update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should discontinue use of ya888 and close your account.

The most current version of this Privacy Policy is always available on the ya888 platform. Previous versions are available on request by contacting [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or how ya888 handles your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing to our data protection team. Responses within 24 hours.
• Live Chat: Available 24/7 directly from the ya888 platform after ya888 Login. For sensitive data rights requests, email is recommended to ensure a written record.

For formal data rights requests (access, erasure, portability, rectification), use the subject line "Data Rights Request — [Your Username]" in your email. ya888 will verify your identity before processing the request and will respond within 30 calendar days as described in Section 11.