y998 Privacy Policy

y998 ("we", "us", "y998") is the data controller in respect of the personal information collected through the y998 Platform at y998.org. Our primary contact for data protection matters is our support team, reachable at [email protected].

This Privacy Policy applies to all users of the y998 Platform, including registered account holders and visitors who access the site without registering. It covers the collection of personal data through the website, account registration process, deposits and withdrawals, gaming activity, and correspondence with our support team.

y998 collects personal data through several routes. The categories of data we collect include:

2.1 Registration Data. When you create a y998 account, we collect your full legal name, date of birth, email address, Pakistani mobile number, and residential address. This information is required to open an account and to perform mandatory age and identity verification.

2.2 Identity Verification Documents. For KYC purposes, y998 may collect copies of government-issued identification documents such as your CNIC or passport, and proof of address documentation. These documents are used solely for verification and compliance purposes.

2.3 Financial Data. We collect information relating to your deposits and withdrawals, including your JazzCash or Easypaisa mobile number, bank account details used for transfers via HBL, UBL, Meezan Bank or Bank Alfalah, and USDT TRC20 wallet addresses. We do not store complete card numbers or full financial instrument credentials.

2.4 Transaction & Gaming History. y998 maintains records of all deposits, withdrawals, bets placed, casino game sessions, and bonus activity associated with your account. These records are maintained for regulatory compliance and responsible gaming monitoring purposes.

2.5 Technical & Usage Data. We automatically collect IP addresses, browser type and version, device identifiers, operating system information, session timestamps, and pages visited. This data helps us maintain platform security, detect fraud, and improve the user experience.

2.6 Communication Data. If you contact y998 support, we retain records of that correspondence including your name, account reference, and the content of your messages.

y998 uses the personal data it collects for the following purposes:

• To create and manage your y998 account and verify your identity and age
• To process deposits and withdrawals in PKR via your chosen payment method
• To deliver the y998 Platform services including cricket betting, live casino, and slots
• To detect and prevent fraud, money laundering, and prohibited account activity
• To comply with applicable legal and regulatory obligations
• To administer responsible gaming tools including deposit limits and self-exclusion
• To communicate with you regarding your account, transactions, and support requests
• To send you promotional communications where you have opted in to receive them
• To analyse platform usage and improve the performance and design of y998

4.1 Contractual Necessity. The majority of data processing by y998 is necessary to perform the contract between you and y998 – specifically, to provide you with access to the Platform and to process your gaming and financial transactions.

4.2 Legal Obligation. y998 processes identity verification data and transaction records in order to comply with applicable anti-money laundering (AML) regulations and responsible gaming obligations.

4.3 Legitimate Interest. y998 processes technical and usage data on the basis of legitimate interest in maintaining platform security, detecting fraud, and improving services.

4.4 Consent. Where y998 sends you marketing communications, this is based on your prior opt-in consent. You may withdraw consent at any time by contacting [email protected].

y998 does not directly process or store payment card data. Deposits and withdrawals are handled through third-party payment gateways and mobile money providers including JazzCash and Easypaisa. The processing of your payment data by these providers is governed by their respective privacy policies.

For bank transfers via HBL, UBL, Meezan Bank or Bank Alfalah, y998 retains the minimum account information necessary to process and reconcile transactions. USDT TRC20 wallet addresses submitted for cryptocurrency withdrawals are stored securely and used only for processing the specific withdrawal request.

6.1 Essential Cookies. y998 uses session cookies that are strictly necessary for the operation of the Platform, including maintaining your login session and storing your language and currency preferences. These cookies cannot be disabled without affecting platform functionality.

6.2 Analytical Cookies. y998 may use analytical cookies to understand how users interact with the Platform, which pages are visited most frequently, and where errors occur. This data is processed in aggregate and is used to improve y998's services.

6.3 Managing Cookies. You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the y998 Platform, including the ability to maintain your login session.

y998 does not sell personal data to third parties. We share personal data only in the following circumstances:

7.1 Payment Processors. Transaction data is shared with payment gateway and mobile money providers as necessary to process deposits and withdrawals.

7.2 Identity Verification Providers. KYC documents may be shared with regulated third-party identity verification services engaged by y998 to fulfil age and identity verification obligations.

7.3 Regulatory Authorities. y998 may be required to disclose personal data to law enforcement or regulatory authorities in response to lawful requests, court orders, or legal proceedings.

7.4 Service Providers. y998 engages third-party service providers for IT infrastructure and platform hosting. These providers operate under data processing agreements and may not use your data for any purpose other than providing services to y998.

y998 retains personal data for as long as your account is active and for a period thereafter as required by applicable law and our regulatory obligations. Transaction and KYC records are typically retained for a minimum of five years following account closure. Technical and usage logs may be retained for shorter periods depending on their purpose.

Where you request deletion of your account and personal data, y998 will process your request subject to any overriding legal obligations that require continued retention of certain categories of data.

y998 implements technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• HTTPS/TLS encryption for all data in transit between your device and y998 servers
• Encrypted storage of passwords – y998 never stores passwords in plain text
• Access controls limiting internal access to personal data to authorised personnel only
• Login attempt rate limiting and session management to prevent brute-force attacks
• Optional two-factor authentication (2FA) for your y998 account

Despite these measures, no system is completely secure. y998 encourages all users to maintain strong, unique passwords for their y998 account and to enable 2FA through account settings after login.

Subject to applicable law, you have the following rights in respect of your personal data held by y998:

• Right of Access: Request a copy of the personal data y998 holds about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data, subject to y998's legal retention obligations
• Right to Restriction: Request that y998 restrict processing of your personal data in certain circumstances
• Right to Object: Object to processing of your personal data based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, contact y998 at [email protected] with your registered email address and a description of your request. We will respond within a reasonable timeframe.

y998 is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that an account has been registered by a person under 18, we will immediately suspend the account, void any associated gaming activity, and delete the associated personal data subject to applicable legal requirements.

If you believe a person under 18 has registered an account on y998, please contact us immediately at [email protected].

y998 uses gaming activity data, deposit patterns and session history to monitor for signs of problem gambling behaviour. Where responsible gaming concerns are identified, y998 may contact you proactively and may apply account restrictions in accordance with our responsible gaming obligations.

Data relating to self-exclusion requests and cool-off periods is retained for the duration of the restriction period and for a further period as required to demonstrate compliance with our responsible gaming commitments. This data is treated with the highest level of confidentiality.

y998 may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. Material changes will be communicated to registered users via the email address held on their account. The date of the most recent revision is shown at the top of this page. Continued use of y998 following notification of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by y998, please contact our support team:

Email: [email protected]
Support Hours: 24/7 (Pakistan Standard Time, UTC+5)