y998 Privacy Policy — Your Data, Your Rights

y998 is an online entertainment platform operating at y998.onl, offering Casino games, Live Casino tables, Slots, a Game Lobby and Sports Betting to adult players. The platform is designed for users based in Pakistan, with PKR as the primary transaction currency and support for local payment methods including JazzCash, Easypaisa, Raast and Bank Transfer.

For the purposes of this Privacy Policy, "y998", "we", "us" and "our" refer to the operator of the y998 platform. "You" and "your" refer to any individual accessing or using the platform — whether as a visitor or as a registered account holder.

This policy covers all data collection and processing activities connected to the y998 platform, including the website at y998.onl and the y998 mobile application available for Android and iOS.

We collect personal data in several ways — directly from you when you register or use the platform, automatically through your device and browser, and occasionally from third parties during identity verification. Here is a breakdown of the categories of data we collect:

We only collect data that is necessary for a clear and specific purpose. We do not collect sensitive categories of data such as biometric information, health records or political opinions.

y998 uses your personal data for the following purposes, each of which is tied to a legitimate basis for processing:

• Account creation and management — to register your account, verify your identity, maintain your profile and process your login credentials.
• Processing deposits and withdrawals — to handle PKR transactions via JazzCash, Easypaisa, Raast, Bank Transfer and other supported methods, and to maintain accurate financial records.
• Delivering the platform experience — to present the Casino, Live Casino, Slots, Game Lobby and Sports Betting features correctly on your device.
• Bonus and VIP programme management — to credit bonuses, track wagering progress, calculate VIP points and deliver tier rewards.
• Customer support — to respond to your queries, resolve account issues and process responsible gaming requests such as deposit limits or self-exclusion.
• Fraud prevention and security — to detect suspicious activity, prevent unauthorised access and identify duplicate accounts.
• Legal and compliance obligations — to meet anti-money laundering (AML) record-keeping requirements and respond to lawful requests from authorities.
• Platform improvement — to analyse how players use y998 and improve game performance, loading times and navigation.
• Communications — to send you account-related notifications such as deposit confirmations, withdrawal updates and security alerts. Marketing emails are only sent where you have opted in, and you can unsubscribe at any time.

We do not use your data to build advertising profiles or pass it to third-party marketers. If we ever need to use your data for a new purpose that is not listed here, we will update this policy and notify you in advance.

All financial transactions on y998 are conducted in PKR. When you make a deposit or request a withdrawal through JazzCash, Easypaisa, Raast, a bank account or a debit card, we collect and store the reference information needed to process that transaction and maintain your account ledger.

We do not store complete card numbers, CVV codes or full mobile wallet PINs on our own servers. Payment credentials are handled by our payment processing partners through encrypted, secure channels. We retain transaction records — including amounts, dates and payment method references — for the period required by financial record-keeping obligations.

If a payment is disputed or a chargeback is raised, y998 may share relevant transaction records with the payment provider or relevant financial institution to resolve the matter. This is a standard fraud-prevention measure and does not represent a breach of your privacy rights.

y998 uses cookies and similar technologies to make the platform work correctly and to understand how it is being used. A cookie is a small text file placed on your device when you visit a website. Here is how we use them:

• Essential cookies — required for the platform to function. These handle session management, login state and security tokens. You cannot opt out of these without stopping use of the platform.
• Functional cookies — remember your preferences such as language settings, last visited game category or notification preferences.
• Analytics cookies — collect aggregated, anonymised data about how pages and features are used, helping us improve the platform experience. No personally identifiable information is included in analytics reports.
• Performance cookies — monitor loading speeds, error rates and responsiveness across different devices and network conditions in Pakistan.

y998 does not use third-party advertising cookies or retargeting pixels. You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies will affect platform functionality.

y998 does not sell your personal data. We share data only where it is necessary to operate the platform or where we are legally required to do so. The categories of third parties who may receive data are:

• Payment processors — JazzCash, Easypaisa, Raast and banking partners receive the transaction data they need to process your deposits and withdrawals.
• Identity verification providers — third-party KYC services may receive copies of your ID documents to verify your identity as part of our account security and compliance process.
• Platform infrastructure providers — hosting, cloud storage and content delivery services that power y998. These providers process data only under our instructions and are contractually bound to protect it.
• Game content providers — game studios whose titles appear in the y998 Casino, Slots and Game Lobby may receive anonymised session data for game performance reporting. No personally identifiable information is shared with game studios.
• Legal and regulatory authorities — if required by law, we may disclose account or transaction data to authorities investigating financial crime, fraud or other legal matters. We will only do so where lawfully compelled.

y998 retains your personal data for as long as your account is active and for a defined period after account closure, in line with financial record-keeping and anti-money laundering requirements. The general retention guidelines are:

• Active accounts — all account data is retained for the full duration of the account's life.
• Closed accounts — identity and financial transaction records are typically retained for a minimum of five years after account closure to meet AML and audit obligations.
• Support communications — chat transcripts and email records are retained for up to two years after the conversation is resolved.
• Analytics and usage data — aggregated, anonymised data may be retained indefinitely for platform improvement purposes. Individually identifiable usage logs are deleted after 12 months.

When data is no longer required and the retention period has elapsed, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

You have meaningful rights over the personal data that y998 holds about you. These rights can be exercised by contacting our support team at any time. We will acknowledge your request promptly and aim to fulfil it within a reasonable timeframe.

y998 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 18. Registration on y998 requires users to confirm that they are 18 or older, and we may require age verification documentation at any point during the account lifecycle.

If we become aware that a person under the age of 18 has registered an account or submitted personal data to y998, we will close the account immediately and securely delete all associated data. If you are a parent or guardian and you believe a minor in your household has accessed or registered on y998, please contact our support team straight away so we can take action.

Protecting your personal data and account information is a core operational priority at y998. We implement a range of technical and organisational security measures, including:

• SSL/TLS encryption on all data transmitted between your device and the y998 platform.
• Encrypted storage for passwords — we store only hashed versions of account passwords, never plain text.
• Access controls — only authorised y998 staff with a specific operational need can access your personal data, and all such access is logged.
• Secure payment channels — PKR transactions via JazzCash, Easypaisa, Raast and bank partners are processed through PCI-compliant or equivalent secure payment gateways.
• Session management — inactive sessions are automatically timed out to reduce the risk of unauthorised access on shared or unattended devices.
• Regular security reviews — y998's technical infrastructure is reviewed periodically for vulnerabilities.

While we take every reasonable step to protect your data, no digital platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password, do not share your login credentials and log out from shared devices after every session. If you suspect your account has been compromised, contact support immediately.

y998 may update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes to applicable data protection standards or changes in the payment methods and services we offer. The "Last updated" date at the top of this page will always reflect the most recent revision.

Where a change is material — for example a significant change to how we use your data or who we share it with — we will make reasonable efforts to notify registered players in advance, such as via in-app notification or email to your registered address.

Continued use of y998 after a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with any update, you should stop using the platform and contact support to request account closure and data deletion in line with Section 8 above.

If you have any questions about this Privacy Policy, want to exercise any of your data rights or have a concern about how y998 has handled your personal information, please get in touch with our support team. We are available 24/7 through the in-app live chat — this is the fastest route to a response.

You can also contact us by email — the support address is shown in the footer of this page. When reaching out about a privacy matter, please include your registered username and a clear description of your request so we can locate your account and assist you as efficiently as possible.