Privacy Policy

1. Introduction

y889 ("y889", "we", "us", "our") operates the online sports betting and casino platform accessible at y889.club. In the course of providing our services — including cricket betting, the y889 Casino, EVO Live tables, slots, the Rewards programme and all associated deposit and withdrawal functionality — y889 collects and processes personal data relating to registered players and platform visitors.

This Privacy Policy explains in clear terms what personal data y889 collects, why it collects it, how long it keeps it, who it may share it with, and what rights you have over your data. We have written this policy to be as straightforward as possible for our Pakistani players, covering all key aspects of how y889 handles your information.

This policy applies to all y889 services, including access via desktop browsers and any mobile interfaces associated with the y889.club platform. It applies to all registered players, including those based in Karachi, Lahore, Faisalabad, Islamabad and elsewhere across Pakistan.

2. Data Controller

For the purposes of applicable data protection laws and principles, y889 acts as the Data Controller in respect of the personal data it collects and processes in connection with the y889 platform. This means y889 determines the purposes for which, and the means by which, your personal data is processed.

Where y889 engages third-party service providers to process personal data on its behalf — such as KYC verification partners or payment processors — those parties act as Data Processors under contract with y889 and are required to handle your data only in accordance with y889's documented instructions and applicable data protection standards.

If you have any questions about how y889 processes your personal data, or wish to exercise any of the rights described in this policy, you may contact y889's support team via the live chat function available 24/7 on the platform, or via the contact details set out in Section 15 of this policy.

3. Personal Data We Collect

y889 collects the following categories of personal data in connection with your use of the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify compliance with the 21+ age requirement)
• Pakistani national identity card (CNIC) number or passport number
• Residential address (city, province, postal code)
• Email address
• Pakistani mobile phone number
• Username and encrypted password hash

3.2 KYC & Verification Data

• Scanned or photographed copies of your CNIC, passport or other government-issued photo identification
• Proof of address documentation (utility bill, bank statement or equivalent)
• Selfie or liveness-check image where required by y889's KYC verification process
• Proof of payment method ownership documentation

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and dates
• Payment method type used (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, bank transfer)
• Transaction reference numbers and processing status records
• Account balance history sufficient for audit and compliance purposes

3.4 Betting & Gaming Activity Data

• Bet placement records including sport, market, stake amount in PKR and outcome
• Casino and slot session records including game titles, session duration and results
• Bonus and reward redemption history
• Responsible gaming tool settings including deposit limits and self-exclusion records

3.5 Technical & Device Data

• IP address at time of registration, login and material account activity
• Device type, operating system and browser version
• Session timestamps and duration
• Geolocation data at account level (country/region only, not precise GPS coordinates)

3.6 Communications Data

• Records of support interactions via live chat, email or other support channels
• Correspondence relating to disputes, complaints or account queries
• Records of marketing preference settings and consent status

4. How We Collect Your Data

y889 collects personal data through the following channels:

• Directly from you — when you register a y889 account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or update your account settings.
• Automatically during platform use — via server logs, session management systems and analytics tools that record technical data about your device and usage patterns each time you access the y889 platform.
• From third-party verification partners — y889's KYC and identity verification providers may return verification results and data flags to y889 as part of the account verification process. These providers operate under data processing agreements with y889.
• From payment processors — y889's payment processing partners return transaction confirmation data and status updates that are recorded against your y889 account transaction history.
• Via cookies and similar technologies — as described in Section 10 of this policy.

5. How We Use Your Personal Data

y889 uses the personal data it collects for the following purposes:

y889 does not use your personal data for any purpose that is materially incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

6. Legal Basis for Processing

y889 processes your personal data on the following legal bases under applicable data protection principles:

• Contractual necessity: Processing required to create and manage your y889 account, process transactions, settle bets and fulfil y889's obligations to you as a registered player under the Terms and Conditions.
• Legal obligation: Processing required for y889 to fulfil its compliance obligations including KYC verification, anti-money laundering screening, responsible gaming obligations and regulatory reporting requirements.
• Legitimate interests: Processing conducted for fraud prevention, platform security, abuse detection and general improvement of the y889 platform, where y889's legitimate interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have given explicit and freely withdrawable consent. You may withdraw consent for marketing at any time by updating your account notification preferences or contacting y889 support.

7. Data Sharing & Third Parties

y889 does not sell your personal data. y889 may share your personal data with the following categories of third party only where strictly necessary and under appropriate contractual or legal frameworks:

• KYC & Identity Verification Providers: Third-party identity verification partners who process your documentation to confirm your identity and age in connection with y889's compliance obligations.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and bank transfer processing partners who handle the technical execution of deposits and withdrawals to and from your y889 account.
• Fraud & AML Screening Services: Third-party compliance technology providers who assist y889 in screening transactions and account activity against anti-money laundering and fraud indicators.
• IT & Infrastructure Providers: Cloud hosting, server management and platform technology providers who maintain the technical infrastructure on which the y889 platform operates. These providers act as data processors under contract.
• Regulatory & Law Enforcement Authorities: y889 may disclose personal data to applicable regulatory or law enforcement bodies where required to do so by law, court order or binding regulatory instruction.
• Game Content Providers: Where technically necessary, limited session and account-tier data may be shared with y889's game content providers (such as Evolution Gaming or Pragmatic Play) to deliver live casino and slot content. These providers do not receive full player profiles.

8. Data Retention

y889 retains your personal data only for as long as is necessary for the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the full duration of your y889 account's active status.
• KYC and verification records: Retained for a minimum of 5 years from the date of verification, in accordance with standard anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction for audit and compliance purposes.
• Betting and gaming activity records: Retained for a minimum of 3 years from the date of activity for dispute resolution and responsible gaming monitoring purposes.
• Support and communications records: Retained for 2 years from the date of last communication unless longer retention is required for an unresolved dispute.
• Marketing consent records: Retained for as long as the consent is active, plus a reasonable period thereafter to demonstrate compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with y889's internal data lifecycle procedures. Anonymised or aggregated data that cannot be used to identify you may be retained indefinitely for statistical and platform improvement purposes.

9. Data Security

y889 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it holds. These measures include, but are not limited to:

• Encryption of personal data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive personal data at rest within y889's infrastructure.
• Role-based access controls restricting internal access to personal data to authorised staff with a legitimate operational need.
• Multi-factor authentication requirements for internal systems that process personal data.
• Regular security assessments and vulnerability reviews of the y889 platform infrastructure.
• Incident response procedures for managing and notifying affected parties of any personal data breach, in accordance with applicable obligations.

Despite these measures, no online platform can guarantee absolute security. In the event y889 becomes aware of a personal data breach that poses a material risk to registered players, y889 will take prompt action to contain the breach and notify affected players in accordance with its incident response procedures.

You also play a role in keeping your data safe. Please ensure your y889 account password is strong and unique, and that you log out of your account when using shared devices. If you suspect your y889 account has been accessed without your authorisation, contact y889 support immediately via live chat.

10. Cookies & Tracking Technologies

y889 uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, detect fraud, and understand how players interact with the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session management cookies that maintain your logged-in state on y889 and security cookies that support fraud detection. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your platform preferences, such as language settings and responsible gaming tool configurations, to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated information about how players navigate and use the y889 platform, helping y889 identify areas for improvement. Analytics data is processed at an aggregated, non-personally-identifiable level.
• Security & Fraud Prevention Cookies: Used to identify unusual or potentially fraudulent activity patterns across sessions, supporting y889's security and AML obligations.

y889 does not use third-party advertising or retargeting cookies that share your data with external advertising networks. You may manage cookie preferences via your browser settings, however please be aware that disabling strictly necessary cookies will affect your ability to use the y889 platform.

11. Your Data Rights

As a y889 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact y889 support via live chat or the contact details in Section 15. y889 will respond to all valid data rights requests within 30 calendar days of receipt.