y998 Privacy Policy – How We Protect Your Data

1 Who We Are

y998 is an online gaming and sports betting platform operating at y998.win, offering services including Sports Betting, Live Casino, Slot Games, VIP rewards and promotional offers to players in Pakistan.

This Privacy Policy applies to all users of the y998 website and mobile app. When we say "y998", "we", "us" or "our" in this document, we mean the entity operating the y998 platform. When we say "you" or "your", we mean you as a registered player or visitor to the y998 platform.

By creating a y998 account or continuing to use the platform, you acknowledge that you have read this Privacy Policy and understand how your personal data is handled. If you have any concerns about how your data is used, please review the relevant sections below or contact the support team.

2 Data We Collect

y998 collects only the personal information that is necessary to provide a functional, secure and personalised gaming experience. Below is a breakdown of the categories of data we collect:

We do not collect sensitive data such as biometric information, religious beliefs or political opinions. We do not knowingly collect data from individuals under the age of 18.

3 How We Collect Your Data

y998 collects personal data through several channels depending on how you interact with the platform:

• Direct registration: When you create a y998 account, you provide your name, date of birth, contact details and choose login credentials. This information is submitted voluntarily by you.
• Identity verification (KYC): If requested, you may upload a government-issued ID or other documents to verify your identity before withdrawals are processed.
• Payment transactions: When you make a PKR deposit or withdrawal via JazzCash, Easypaisa, Raast, bank transfer or card, transaction reference data is captured by our payment processing partners and passed to y998.
• Automated technical data: When you visit y998 or use the mobile app, certain technical data is collected automatically — including your IP address, device identifiers, browser type and session activity — using cookies and server logs.
• Customer support interactions: When you contact the y998 support team via live chat or email, the content of those communications is recorded and stored for service quality and dispute resolution purposes.
• Promotions and surveys: If you participate in promotions, competitions or optional surveys on y998, any information you submit during those activities is collected and stored.

4 How We Use Your Data

y998 uses the personal data we collect for the following purposes. We do not use your data for anything beyond what is described here without your prior consent:

• To create, manage and maintain your y998 account.
• To verify your identity and comply with know-your-customer (KYC) requirements before processing significant withdrawals.
• To process PKR deposits and withdrawals via your chosen payment method — JazzCash, Easypaisa, Raast, bank transfer, cards or mobile wallets.
• To detect and prevent fraud, money laundering, account takeover attempts and other suspicious activity.
• To personalise your experience on y998, including showing relevant promotions, cricket betting markets during PSL and T20 seasons, and recommended slot titles.
• To send you account-related notifications such as deposit confirmations, withdrawal updates, security alerts and support responses.
• To monitor your gaming activity as part of our responsible gaming commitments, including identifying patterns that may indicate problem gambling behaviour.
• To improve the y998 platform by analysing aggregated, anonymised usage data.
• To resolve disputes between players or between a player and y998.
• To send marketing communications if you have opted in to receive them (see Section 12).

5 Legal Basis for Processing

y998 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to deliver the services described in the y998 Terms and Conditions — such as account management, payment processing and game provision.
• Legitimate interests: Processing carried out to protect the platform and its users from fraud, maintain security, improve the platform and operate responsible gaming monitoring — provided those interests are not overridden by your rights.
• Legal obligation: Processing required to comply with identity verification, anti-money laundering and other applicable regulatory requirements.
• Consent: Processing for marketing communications and optional personalisation features, where you have explicitly opted in. Consent can be withdrawn at any time.

6 Sharing Your Data

y998 does not sell or rent your personal data to any third party. We share data only in the following limited and necessary circumstances:

• Payment processors: JazzCash, Easypaisa, Raast, bank networks and card payment gateways receive the transaction data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy and security standards.
• Identity verification providers: If you are required to complete KYC, your identity documents may be shared with a third-party identity verification service for document validation.
• Game providers: When you play games sourced from third-party providers on y998, limited session data may be shared with those providers to deliver and log the game session.
• Fraud and security services: Anonymised or pseudonymised technical data may be shared with fraud detection and cybersecurity service providers to help protect the platform.
• Legal and regulatory requirements: y998 may disclose personal data if required to do so by a lawful order, court direction or other binding legal obligation.

All third-party service providers that handle personal data on behalf of y998 are bound by data processing agreements and are required to maintain appropriate security standards.

7 Data Retention

y998 retains your personal data for as long as your account is active and for a defined period after account closure, as required to meet our operational and compliance obligations.

• Active accounts: Data is retained for the full duration your y998 account remains open.
• Closed accounts: Following account closure, core account and transaction records are retained for a minimum period necessary to fulfil financial record-keeping obligations and to handle any disputes that may arise after closure.
• KYC documents: Identity documents submitted for verification are retained for the period required under applicable anti-money laundering standards.
• Support communications: Chat transcripts and email records are retained for a reasonable period to support dispute resolution and service quality review.
• Marketing data: If you withdraw your marketing consent, your details are removed from active marketing lists promptly, though a suppression record may be kept to prevent future accidental contact.

When data is no longer required and the retention period has passed, it is securely deleted or anonymised so it can no longer be linked to you as an individual.

8 Cookies

y998 uses cookies and similar tracking technologies on the website and mobile app. Cookies are small text files placed on your device that help the platform function correctly and remember your preferences between sessions.

The following types of cookies are used on y998:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in while navigating y998 and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings and display options, so you do not need to reset them each visit.
• Analytical cookies: Collect anonymised data about how players navigate y998 — such as which pages are visited most and where errors occur — to help improve the platform experience.
• Security cookies: Used by our fraud detection systems to identify unusual login patterns or suspicious device behaviour.

y998 does not use third-party advertising cookies or cross-site tracking cookies for retargeting purposes. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect your ability to use parts of the platform.

9 Security Measures

y998 takes data security seriously and has implemented multiple layers of protection to safeguard your personal information and account:

• 256-bit SSL encryption protects all data in transit between your device and y998 servers.
• Password hashing: Account passwords are never stored in plain text. They are processed using industry-standard one-way hashing before storage.
• Access controls: Internal access to player data within y998 is restricted to staff with a genuine business need. Access is logged and audited.
• Fraud detection systems: Automated systems monitor account activity in real time, flagging unusual login attempts, device changes and suspicious transaction patterns.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their y998 account for an additional layer of login security.
• Regular security reviews: y998 conducts periodic reviews of its security practices and infrastructure to identify and address vulnerabilities.

While y998 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. If you ever suspect your account has been compromised, contact y998 support immediately so the account can be secured.

10 Your Rights Over Your Data

As a y998 player, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact the y998 support team with your account details and a description of your request:

• Right of access: You can request a copy of the personal data y998 holds about you.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you can request that it be corrected. For basic details, you may be able to update these directly in your account settings.
• Right to erasure: You can request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that this right may be limited where y998 has a legal obligation to retain certain records.
• Right to restrict processing: You can ask y998 to pause processing of your data in certain situations, such as while a dispute about its accuracy is being resolved.
• Right to object: You can object to processing based on legitimate interests, including direct marketing. If you object to marketing, we will stop sending marketing communications promptly.
• Right to data portability: In certain cases you can request a copy of your data in a structured, machine-readable format.

y998 aims to respond to all data rights requests within 30 days of receipt. For complex requests, this may be extended, but you will be notified of any delay.

11 Children's Privacy

y998 is strictly an adult platform for users aged 18 and above. We do not knowingly collect, store or process personal data from anyone under the age of 18. If you believe a minor has registered on y998 or provided personal data to the platform, please contact us immediately so the account can be closed and the data removed.

Age verification is conducted as part of the registration and KYC process. y998 reserves the right to request proof of age at any point during a player's use of the platform.

12 Marketing Communications

y998 may send you promotional emails or app notifications about new games, upcoming cricket betting markets for PSL and T20 tournaments, bonus offers and platform updates — but only if you have opted in to receive marketing communications.

• You can opt in or out of marketing communications at any time through your account settings or by contacting support.
• Opting out of marketing will not affect essential account communications such as deposit confirmations, withdrawal updates or security alerts — those are sent regardless as they are necessary for the operation of your account.
• y998 does not share your contact details with third-party marketers.
• If you receive a marketing communication from y998 that you did not expect, please contact support and the issue will be investigated and resolved.

13 Updates to This Privacy Policy

y998 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we offer, or to remain current with data protection best practices. When material changes are made, we will notify active players via email or a prominent notice on the platform.

The "Last Updated" date shown at the top of this page will always reflect when the most recent revision was made. We encourage you to check this page periodically so you are always aware of how your data is being handled.

Continuing to use y998 after an updated Privacy Policy has been published and you have been notified constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the platform and contact support to close your account.

14 Contact Us

If you have any questions, concerns or requests related to this Privacy Policy or the way y998 handles your personal data, the support team is available 24/7 via live chat inside the platform.

You can also reach the team by email — the support address is displayed in the Footer of this page. Please include your registered username and a clear description of your query so the team can assist you quickly and accurately.

For matters specifically related to your data rights — such as access requests, correction requests or deletion requests — please mark your message clearly as a "Data Rights Request" so it is directed to the appropriate team member without delay.

For responsible gaming support and self-exclusion options, please visit the Responsible Gaming page.