This Privacy Policy explains how y998 collects, uses, stores, shares, and protects your personal data. It also sets out the rights available to you as a user and how you may exercise them. Please read this document carefully before using the Platform.
Only information necessary to operate your account, process transactions, and meet legal obligations.
Account management, KYC verification, fraud prevention, responsible gambling, and platform improvement.
Only with regulatory bodies, KYC partners, payment processors — never sold to third parties for marketing.
SSL encryption, access controls, and secure storage to protect your personal information at all times.
Access, rectification, erasure, restriction, portability, and objection rights explained clearly in plain English.
Transparent cookie usage for platform functionality, analytics, and session management with clear consent options.
y998 ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access or use the y998 online betting and casino information platform at https://y998.cam (the "Platform"). This Privacy Policy (the "Policy") sets out how we collect, use, store, transfer, and protect your personal data, and describes the rights available to you under applicable data protection frameworks.
This Policy applies to all visitors and registered account holders on the Platform, regardless of geographic location, including users based in Pakistan and all major Pakistani cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, and Peshawar. By accessing the Platform or registering an Account, you acknowledge that you have read and understood this Privacy Policy in full.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform generally. In the event of any conflict between this Policy and the Terms & Conditions regarding privacy matters, this Policy shall prevail.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, CNIC number, phone number, IP address, and transaction history. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this case, y998. |
| "Data Processor" | A third party that processes personal data on behalf of y998, such as KYC verification providers, payment processors, and IT service providers. |
| "Consent" | Freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data. |
| "Account" | A registered user profile on the Platform enabling access to betting, gaming, and financial services. |
| "KYC" | Know Your Customer — the identity and age verification process required under AML (Anti-Money Laundering) and fraud prevention obligations. |
| "Cookie" | A small text file stored on a user's device by a website to retain session information, user preferences, and analytical data. |
y998 is the Data Controller responsible for personal data collected through the Platform. We determine the purposes for which personal data is collected and the means by which it is processed. Our data protection contact is reachable via the contact details provided in Section 16 of this Policy.
Where y998 engages third-party Data Processors (such as KYC verification services, payment gateway providers, or cloud hosting infrastructure), those processors are engaged under contractual data processing agreements that bind them to process personal data solely on y998's documented instructions and in accordance with applicable data protection standards.
When you create an Account on y998, we collect the following categories of personal data:
To comply with AML and fraud prevention obligations, we may collect:
When you make deposits or withdrawals, we collect transaction records including:
We automatically collect certain technical data when you use the Platform:
When you contact our support team, we collect:
y998 processes personal data on the following legal bases, as applicable to each processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account creation and management, processing deposits and withdrawals, maintaining betting and gaming records, and providing customer support. |
| Legal Obligation | KYC identity verification, AML compliance checks, age verification, fraud prevention, regulatory reporting, and document retention required by applicable law. |
| Legitimate Interests | Platform security and abuse prevention, fraud detection, technical performance monitoring, service improvement, and internal analytics — where not overridden by user rights. |
| Consent | Marketing communications (where applicable), non-essential cookies, and any processing activity for which we have sought and received your explicit agreement. |
y998 uses collected personal data strictly for the following purposes:
y998 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:
We engage the following categories of Data Processor under contractual data processing agreements:
We may disclose personal data to regulators, law enforcement agencies, tax authorities, or other government bodies where required to do so by applicable law, court order, or other legally enforceable demand. We will, where permitted, notify you of any such disclosure.
In the event of a merger, acquisition, restructuring, or sale of assets involving y998, personal data may be transferred to the successor entity. You will be notified of any such transfer and of any resulting material change to this Privacy Policy.
Personal data collected by y998 may be transferred to and stored on servers located outside Pakistan. Where personal data is transferred internationally, y998 takes reasonable steps to ensure that adequate protection is in place, consistent with recognised international data protection standards.
Such steps may include implementing standard contractual clauses with third-party processors, engaging processors located in jurisdictions recognised as providing adequate data protection, or adopting other appropriate safeguards as required by applicable data protection frameworks.
If you would like further information about the specific safeguards applicable to international transfers of your personal data, please contact us using the details set out in Section 16.
y998 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to meet legal, regulatory, and compliance obligations. General retention principles are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account plus up to 5 years post-closure | Legal and regulatory compliance |
| KYC / identity documents | Up to 5 years from account closure | AML regulatory requirements |
| Transaction records | Up to 5 years from the date of transaction | Financial record-keeping obligations |
| Support communications | Up to 3 years from case closure | Dispute resolution and audit |
| Technical / usage logs | Up to 12 months from collection | Security monitoring and fraud detection |
| Marketing consent records | Until consent is withdrawn plus evidence retention period | Consent management compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
Depending on the data protection framework applicable to your location, you may have some or all of the following rights in relation to your personal data held by y998. We will respond to verified rights requests within a reasonable timeframe (typically 30 days) and without undue delay.
Request a copy of the personal data y998 holds about you and information on how it is processed.
Request correction of inaccurate or incomplete personal data held in your Account or our records.
Request deletion of your personal data where we no longer have a lawful basis to retain it, subject to legal retention obligations.
Request that we limit the processing of your personal data in specific circumstances, such as while a dispute is being resolved.
Receive a copy of personal data you have provided to us in a structured, machine-readable format where processing is consent-based or contract-based.
Object to processing of your personal data based on legitimate interests, including direct marketing, at any time.
Withdraw previously given consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
To exercise any of the above rights, please contact y998 using the details provided in Section 16. We may require proof of your identity before processing a rights request to prevent unauthorised disclosure of personal data.
Cookies are small text files placed on your device by websites you visit. They serve a range of functions from keeping you logged in to a session, remembering your preferences, and enabling analytical tracking of Platform usage patterns.
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security controls. Required for the Platform to function. | No — functionally essential |
| Functional / Preference | Remembering language preferences, display settings, and customisation choices. | Consent recommended |
| Analytics | Aggregated, anonymised data on page visits, session duration, and click paths to improve the Platform. | Yes — opt-in consent |
| Marketing / Retargeting | Where applicable — tracking interactions for promotional relevance. Only deployed with explicit consent. | Yes — explicit opt-in |
You may manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may affect the functionality of the Platform. For analytics and marketing cookies, you may withdraw consent at any time through the cookie management centre available on the Platform or through your browser settings.
y998 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed. These measures include, but are not limited to:
The y998 Platform is strictly restricted to individuals aged 18 years or older, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from persons under 18 years of age.
Age verification is conducted as part of the KYC process using government-issued identity documents. If y998 discovers that personal data has been collected from a minor, that Account will be immediately closed, all data will be deleted as required by applicable law, and any funds held in the Account will be handled in accordance with regulatory requirements.
Parents and guardians who believe their minor child may have registered on the Platform should contact y998 support immediately using the contact details in Section 16.
y998 is an English-language platform designed specifically for Pakistani users. The following additional context applies to users accessing the Platform from Pakistan:
Payment method references on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah — are used solely as familiar Pakistani financial services for educational and navigational context. The collection of partial transaction identifiers from these services for payment verification purposes is strictly limited to what is necessary for deposit and withdrawal processing and KYC compliance. y998 does not access or store full credentials, PINs, or complete account numbers for any payment provider.
Pakistan's data protection legislative framework is developing. y998 applies data protection principles in line with internationally recognised standards. Users in Pakistan may wish to seek independent legal advice regarding their specific data rights under applicable Pakistani legislation, including any enacted provisions of the Personal Data Protection framework.
y998 does not claim to be authorised, licensed, or endorsed by the Government of Pakistan, PTA, the State Bank of Pakistan, or any Pakistani provincial or federal authority. Data processing activities described in this Policy are conducted under the operator's applicable license jurisdiction, not under Pakistani regulatory authority.
y998 reserves the right to update or modify this Privacy Policy at any time. Material changes — particularly those that expand the categories of data collected, introduce new third-party processors, or affect your rights — will be communicated to registered users via email or a prominent notice on the Platform prior to taking effect. The "Last Updated" date at the top of this document reflects the date of the most recent revision.
Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the revised Policy, you may close your Account and request erasure of your data in accordance with Section 10 of this Policy.
We recommend reviewing this Policy periodically to stay informed about how y998 handles your personal data. Historic versions of this Policy are available on request from the support team.
For any privacy-related queries, rights requests, data subject access requests, or concerns about how y998 handles your personal data, please contact our team using the following details. We aim to respond to all privacy-related enquiries within 30 days of receipt.
If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to your situation. We encourage users to contact us first so we have the opportunity to address concerns directly.
Our support team is ready to help with any privacy query or data rights request. You can also review our Terms & Conditions or visit the FAQ for quick answers.