y889 Privacy Policy

y889 operates the online casino and sports betting platform available at y889.ws, offering Pakistani players a comprehensive suite of entertainment products including slot games, live dealer tables, fish arcade titles such as God Fish Slicing and Gold Toad Fishing, and real-time cricket and sports betting markets. All financial transactions on y889 are conducted in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment channels.

As part of operating this platform, y889 necessarily collects and processes certain personal data relating to the individuals who register and play on y889. This Privacy Policy sets out in plain English — and where relevant, with reference to Pakistani-English usage — exactly what data we collect, why we collect it, how long we keep it, who we may share it with, and what rights you have in relation to your own personal data.

This Privacy Policy applies to all users of y889.ws, including registered players, prospective players who browse the site without registering, and any individual who contacts y889 support via email, live chat, or any other channel. By accessing y889.ws or registering a y889 account, you acknowledge that you have read and understood this Privacy Policy.

y889 collects the following categories of personal data in connection with the operation of your account and your use of the y889 platform:

y889 does not collect special-category sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data unless specifically required by a lawful regulatory obligation applicable to our operating jurisdiction.

y889 collects your personal data through the following channels and mechanisms:

• Direct Registration: When you create a y889 account, you provide your name, email address, mobile number, date of birth, and residential city directly through the registration form.
• KYC Verification: When y889 requests identity verification, you upload copies of your CNIC or other identity documents directly through the secure document upload portal within your account settings.
• Payment Transactions: When you make a deposit or withdrawal via JazzCash, EasyPaisa, or bank transfer, y889 receives confirmation data from the respective payment processor that includes your registered wallet or account number and transaction reference.
• Platform Usage: y889's servers automatically log technical and usage data each time you visit y889.ws or interact with any game or betting market on the platform. This data is collected through server logs, session cookies, and analytics scripts.
• Customer Support: When you contact y889 support via live chat or email, your communications are recorded and stored as part of your account support history.
• Responsible Gaming Tools: When you set deposit limits, loss limits, or self-exclusion periods, the settings and timestamps associated with those choices are recorded as part of your responsible gaming profile.

y889 processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and operate your y889 player account, including processing your login credentials, managing your PKR wallet balance, and maintaining your transaction history.
• Identity Verification (KYC): To verify that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your payment accounts are registered in your own name. This is a legal obligation under applicable anti-money laundering regulations.
• Payment Processing: To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported channels. y889 shares only the minimum necessary financial data with payment processors to execute each transaction.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct on the y889 platform. This includes automated risk-scoring of account activity patterns.
• Responsible Gaming: To monitor your gameplay patterns for indicators of problem gambling behaviour, to enforce deposit and loss limits you have set, and to implement self-exclusion periods you have requested. y889 takes its duty of care to Pakistani players seriously.
• Customer Support: To respond to your support queries, complaints, and feedback in a personalised, contextually accurate manner. Support agents access your account history to provide effective assistance.
• Legal and Regulatory Compliance: To meet y889's obligations under applicable laws and regulations, including record-keeping requirements, mandatory disclosure to regulatory and law enforcement authorities, and court orders.
• Platform Improvement: To analyse anonymised and aggregated usage data in order to improve the y889 platform, optimise game performance, and enhance the overall player experience for Pakistani users.
• Promotional Communications: If you have opted in to receive marketing communications, y889 may send you information about new games, upcoming promotions, PSL cricket betting markets, and special offers by email or SMS. You may opt out at any time.

y889 processes your personal data on the following legal bases:

• Contractual Necessity: The majority of personal data processing by y889 is necessary for the performance of your player account agreement — without processing your identity data, payment details, and gameplay history, y889 cannot operate your account or provide the services you have contracted for.
• Legal Obligation: Certain data processing activities — including KYC identity verification, anti-money laundering transaction monitoring, and mandatory record retention — are required by applicable law. y889 has no discretion to exempt individual players from these requirements.
• Legitimate Interests: y889 processes certain technical and usage data on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform. This includes fraud detection, security monitoring, and anonymised platform analytics. y889's legitimate interests do not override your fundamental privacy rights.
• Consent: Where y889 sends you optional marketing communications or installs non-essential cookies on your device, we do so only on the basis of your explicit prior consent. You may withdraw this consent at any time without affecting the legality of processing carried out before withdrawal.

y889 does not sell or rent your personal data to any third party. However, y889 does share certain personal data with the following categories of trusted third parties, strictly on a need-to-know basis and under contractual data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive the minimum necessary data (name, account number, transaction amount) to process your deposits and withdrawals. These providers are independently regulated financial institutions.
• Identity Verification Providers: y889 may use specialist KYC verification services to assist in verifying CNIC documents and confirming player identity. These providers process your identity data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Game Studios and Content Providers: Game software providers whose titles are hosted on y889 — including the studios behind God Fish Slicing, Gold Toad Fishing, and slot titles — may receive anonymised session data for the purpose of game performance monitoring. No personally identifiable information is shared with game studios.
• Regulatory and Law Enforcement Authorities: y889 will disclose player data to competent regulatory authorities, financial intelligence units, or law enforcement agencies where required to do so by a valid legal order. y889 will not provide prior notice to the affected player where legally prohibited from doing so.
• Fraud Prevention Networks: y889 participates in industry-standard fraud prevention networks. Where an account is found to have engaged in fraudulent activity, relevant identifying information may be shared with other participating operators to prevent repeat fraud across the industry.
• Professional Advisers: y889's legal counsel, auditors, and compliance consultants may access relevant player data in the course of providing professional services to y889. All such advisers are bound by strict confidentiality obligations.

y889 uses cookies and similar lightweight tracking technologies on y889.ws. A cookie is a small text file placed on your device by a website server that allows the site to recognise your device on subsequent visits. y889 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for y889.ws to function correctly. They maintain your login session, store your language preference (English or Urdu), and ensure your account balance displays accurately. These cookies cannot be disabled without fundamentally breaking the platform experience.
• Performance and Analytics Cookies: y889 uses anonymised analytics cookies to understand aggregate traffic patterns on y889.ws — for example, which game categories are most visited, what device types Pakistani players use, and how long typical play sessions last. No individually identifiable data is processed by these cookies.
• Security Cookies: y889 deploys security cookies to detect and prevent fraudulent login attempts, enforce geographic access controls, and identify anomalous account activity that may indicate unauthorised access to your y889 account.

y889 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not be tracked across other websites as a result of visiting y889.ws.

You may configure your browser to refuse all cookies or to alert you when cookies are being placed. Please note that disabling strictly necessary cookies will impair your ability to log in to y889 and use core platform features. Browser-level cookie settings vary by browser — consult your browser's help documentation for instructions specific to your browser and device.

y889 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes the following:

• Transport Layer Security: All data in transit between your browser or mobile device and y889's servers is encrypted using TLS 1.2 or higher, providing a minimum of 256-bit encryption strength — equivalent to the standard applied by Pakistan's major commercial banks.
• Encrypted Data Storage: Sensitive personal data stored on y889 servers — including CNIC numbers, payment account details, and hashed passwords — is encrypted at rest using AES-256 encryption. Raw passwords are never stored; only cryptographically hashed representations are retained.
• Access Controls: Access to personal data within y889's internal systems is governed by a strict role-based access control (RBAC) policy. Only personnel with a documented operational need to access specific categories of personal data are granted that access. All access events are logged and subject to periodic audit.
• Intrusion Detection: y889's network infrastructure is monitored 24 hours a day by automated intrusion detection systems. Suspicious access patterns trigger immediate alerts to the security operations team for investigation.
• Penetration Testing: y889 commissions periodic independent security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, y889 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

y889 retains your personal data for no longer than is necessary for the purpose for which it was collected, subject to any minimum retention periods imposed by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted from y889 systems or anonymised such that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

Subject to applicable law, you have the following rights in relation to the personal data that y889 holds about you:

• Right of Access: You may request a copy of all personal data that y889 holds about you. y889 will provide this information within 30 days of receiving a valid request.
• Right to Rectification: If any personal data y889 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Most contact details can be updated directly within your y889 account settings.
• Right to Erasure: You may request that y889 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent, or where you object to processing based on legitimate interests. Note that y889 may be legally required to retain certain categories of data for the retention periods specified in Section 09 above, even following an erasure request.
• Right to Restriction: You may request that y889 temporarily suspend processing of your personal data — for example, while the accuracy of data is being contested — rather than deleting it entirely.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to y889, suitable for transfer to another service provider.
• Right to Object: You may object to y889 processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Where you object to marketing communications, y889 will cease sending them immediately.
• Right to Withdraw Consent: Where y889 processes your data on the basis of consent — for example, for optional marketing communications — you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

y889 operates a strict minimum age policy of 21 years. The y889 platform is not directed at, and must not be used by, any person under the age of 21. y889 does not knowingly collect personal data from individuals under 21 years of age.

If y889 becomes aware — through identity verification, third-party reporting, or any other means — that personal data belonging to a person under the age of 21 has been collected, y889 will immediately and permanently close the associated account, forfeit all balances, and securely delete the collected data to the extent not required to be retained under applicable legal obligations.

y889 recommends that parents and guardians in Pakistan make use of parental control tools available on shared devices to prevent minors from accessing online gaming platforms. Responsibility for ensuring age-appropriate internet use ultimately rests with the adults in each household.

y889.ws may contain links to third-party websites or services — for example, links to responsible gaming resources such as GamCare. y889 has no control over the privacy practices of third-party websites and is not responsible for the content or data handling practices of any website that is not operated by y889.

When you click a link to a third-party website from y889.ws, you leave the y889 environment. y889 strongly recommends that you review the privacy policy of any third-party website you visit before providing any personal data to that site. The fact that y889 links to a third-party website does not constitute an endorsement of that site's privacy practices.

Payment service providers such as JazzCash and EasyPaisa operate under their own privacy policies and are independently regulated financial institutions in Pakistan. When you interact with these payment channels to fund or withdraw from your y889 account, your data is also subject to the respective provider's privacy terms. y889 recommends reviewing the privacy policies of your chosen payment provider for full transparency.

y889 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or data processing practices. When y889 makes material changes to this Privacy Policy, we will notify registered players by email to the address associated with their y889 account and by posting a prominent notice on y889.ws.

The updated Privacy Policy will take effect 14 days after the date of notification, unless a shorter notice period is required by law. Your continued use of y889.ws or your y889 account following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, you must close your y889 account prior to the effective date.

The "Last Updated" date displayed at the top of this page and in the table of contents sidebar reflects the most recent revision of this Privacy Policy. y889 recommends reviewing this page periodically to stay informed of any changes.

If you have any questions, concerns, or complaints about how y889 handles your personal data, or if you wish to exercise any of your data rights as described in Section 10, please contact the y889 Data Privacy team using the following details:

y889 takes all privacy complaints seriously. Upon receipt of a formal complaint, y889 will acknowledge receipt within 5 business days and provide a substantive response within 30 days of receipt. For urgent matters — such as suspected unauthorised access to your account or a potential data breach — please use the live chat function for the fastest possible response.

If you are not satisfied with y889's response to your complaint, or if you believe that y889's data processing activities do not comply with applicable privacy law, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. y889 will cooperate fully with any investigation conducted by a competent supervisory authority.