y788 Privacy Policy —
Your Data, Handled with Care

Introduction

y788 is Pakistan's mobile-first online gaming platform, providing sports betting, live casino, Teen Patti Gold, jackpot slots, and related entertainment services to registered adult users across Pakistan. y788 is the data controller responsible for the personal information collected through its platform.

We understand that privacy is important to our users. Whether you are accessing y788 from Karachi, Lahore, Islamabad, or anywhere else in Pakistan, this Privacy Policy applies equally to your account and the data associated with it. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy should be read alongside y788's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and y788.

Personal Data We Collect

y788 collects personal data through several channels, including account registration, platform usage, payment processing, and customer support interactions. The categories of personal data we collect include the following:

y788 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data unless specifically required by legal obligations (for example, as part of enhanced KYC checks mandated under applicable financial regulations).

How We Use Your Personal Data

y788 uses the personal data we collect for the following purposes:

• Account Management: To create, verify, maintain, and secure your y788 account, including processing your login credentials and managing your PKR wallet balance.
• Payment Processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, HBL, UBL, and other supported payment providers, and to maintain accurate transaction records.
• Identity Verification (KYC): To verify your identity and age as required to comply with applicable regulations and to confirm that all y788 users are 18 years of age or older.
• Responsible Gaming: To monitor account activity for patterns that may indicate problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools you activate on your account.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance in English, 24 hours a day.
• Platform Improvement: To analyse how the y788 platform is used, identify technical issues, and improve the overall user experience for Pakistani players.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the platform.
• Marketing Communications: To send you relevant promotions, bonus offers, and platform updates where you have consented to receive such communications. You may withdraw consent at any time.
• Legal Compliance: To comply with applicable laws, regulatory requirements, and court orders where applicable.

y788 does not use automated decision-making processes that produce legal effects or similarly significant impacts on users without human review of the relevant decision.

Legal Basis for Processing

y788 processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations to you under the y788 Terms & Conditions — for example, managing your account, processing PKR payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, anti-money laundering obligations, and responsible gaming regulations.
• Legitimate Interests: Processing carried out for y788's legitimate business interests, such as fraud detection, platform security, and improving services, provided these interests are not overridden by your fundamental rights.
• Consent: Processing carried out on the basis of your explicit consent, such as sending marketing communications. Where we rely on consent, you have the right to withdraw it at any time by contacting our support team.

Payment Data & PKR Transactions

All financial transactions on y788 are denominated in Pakistani Rupees (PKR). y788 processes PKR deposits and withdrawals via Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB Bank. When you conduct a financial transaction on y788, your payment details are transmitted securely to the relevant payment provider.

y788 does not store complete payment account credentials on its own servers. Payment processing is handled by the respective payment providers, each of which operates under its own data security and privacy standards. y788 retains transaction reference data (such as transaction IDs, amounts in PKR, and timestamps) for the purposes of dispute resolution, regulatory compliance, and account record-keeping.

Where a withdrawal is requested, y788 may require identity verification to confirm that funds are being released to the verified account holder. This is a security measure designed to protect your PKR balance against unauthorised withdrawal attempts.

Cookies & Tracking Technologies

y788 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit y788.app. We use the following types of cookies:

• Essential Cookies: Required for the platform to function correctly. These include session cookies that maintain your login state and cookies that support payment processing. Essential cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to understand how users navigate the y788 platform, which pages are most visited, and where technical issues occur. Analytics data is aggregated and does not personally identify individual users.
• Preference Cookies: Used to remember your settings and preferences on the y788 platform, such as language preferences and display settings.

You may adjust your browser settings to decline non-essential cookies. Note that disabling cookies may affect certain features of the y788 platform. y788 does not use third-party advertising cookies or cross-site tracking technologies to serve targeted advertisements from external networks.

Data Sharing with Third Parties

y788 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of third parties only where necessary and under appropriate data protection agreements:

• Payment Providers: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB Bank, as required to process PKR deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC service providers used to verify your identity and age as part of our compliance obligations.
• Technology & Infrastructure Partners: Cloud hosting and cybersecurity providers who support the operation of the y788 platform under strict contractual confidentiality obligations.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory instruction. y788 will challenge any requests it considers disproportionate or unlawful.
• Fraud Prevention Services: Third-party fraud detection providers used to protect the platform and its users against financial crime and account manipulation.

All third parties with whom y788 shares personal data are required to maintain appropriate data security standards and are prohibited from using the data for any purpose other than that for which it was shared.

Data Retention

y788 retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or for as long as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active y788 account plus a period of five years following account closure, to meet legal and regulatory retention obligations.
• Transaction Records: PKR transaction history is retained for a minimum of five years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC Documentation: Identity verification documents are retained for five years from account closure or from the date of the last transaction, whichever is later.
• Support Communications: Customer support records are retained for two years from the date of the last interaction.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for three years from the date consent was given or withdrawn.

Once retention periods have elapsed, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

Data Security

y788 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Industry-standard TLS/SSL encryption for all data transmitted between your device and the y788 platform.
• Encrypted storage of personal data and PKR wallet information on secured servers.
• Access controls ensuring that only authorised y788 personnel with a legitimate business need can access personal data.
• Regular security assessments and vulnerability testing of the y788 platform infrastructure.
• Two-step verification options for y788 account holders to add an extra layer of protection to their accounts.

No online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, y788 will notify affected users in accordance with applicable notification requirements as promptly as practically possible.

Your Data Rights

As a y788 user, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data y788 holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by y788 be corrected.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction of Processing: You may request that y788 restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a structured, machine-readable copy of your data.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where y788 processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the y788 support team at [email protected]. y788 will respond to all verified data rights requests within 30 days of receipt.

Children's Privacy

The y788 platform is strictly intended for adults aged 18 years and over. y788 does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the y788 account registration process, and y788 may request documentary proof of age at any time.

If y788 discovers that personal data has been collected from a user who is under 18 years of age, the account will be immediately suspended, all associated data will be deleted, and any PKR funds deposited will be returned to the original payment method. If you believe a minor has accessed or registered a y788 account, please contact our support team immediately so that the matter can be addressed without delay.

Responsible Gaming & Data Processing

y788 uses account data and usage patterns to support its responsible gaming obligations. This includes identifying users who may be exhibiting signs of problem gambling based on deposit frequency, session duration, and betting behaviour. Where such patterns are identified, y788 may take proactive steps including:

• Sending responsible gaming reminder communications to the user's registered mobile number or email address.
• Temporarily restricting deposit or betting limits on the account pending a responsible gaming review.
• Contacting the user directly via the y788 customer support team.

This use of personal data for responsible gaming purposes is a legal obligation and a core part of y788's duty of care to its users. It does not constitute marketing and cannot be opted out of. For full details on y788's responsible gaming tools, please refer to the Responsible Gaming page.

Updates to This Privacy Policy

y788 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. Where material changes are made, y788 will provide notice to registered users via email or via a prominent notice on the y788 platform before the updated policy takes effect.

The most current version of this Privacy Policy is always available at y788.app/privacy-policy. The effective date at the top of this document indicates when the current version came into force. Your continued use of the y788 platform following any update constitutes acceptance of the revised Privacy Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way y788 handles your personal data, please contact our team through any of the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 inside your y788 account dashboard after logging in
• Support Hours: 24 hours a day, 7 days a week, in English

y788 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days. For urgent account security matters, the live chat inside your y788 account provides the fastest direct response from our team.