At y388, your privacy is not an afterthought — it is built into how we operate. This Privacy Policy explains exactly what personal data y388 collects from Pakistani players, why we collect it, how we use it, who we share it with, and what rights you hold over your own information. We encourage you to read it in full.
These six principles guide every data decision we make at y388. Your information is handled with the same care and discretion you expect from a premium gaming platform.
All personal data stored by y388 is protected using industry-standard encryption at rest and in transit. Your y388 Login credentials, financial details, and identity documents are never stored in plain text.
y388 will never sell, rent, or trade your personal information to third-party marketing firms or data brokers. Your data belongs to you — we use it only to operate your account and improve our services.
y388 collects only the personal data that is genuinely necessary for account operation, payment processing, KYC compliance, and responsible gaming obligations. We do not collect data for its own sake.
This Privacy Policy clearly documents every category of data we collect, the lawful basis for processing it, and the specific purposes it serves. There are no hidden data practices at y388.
y388 retains personal data only for as long as required by applicable law or as necessary to fulfil the purposes described in this policy. Data that is no longer required is securely deleted or anonymised.
y388 recognises your rights to access, correct, delete, and port your personal data. We have clear processes in place to handle data subject requests promptly and without undue friction.
y388 is an online gaming platform accessible at y388.org, offering cricket betting, live casino tables, premium slot titles, colour game, and instant-win products to players in Pakistan. Throughout this Privacy Policy, references to "y388", "we", "us", or "our" refer to the operators of the y388 platform. References to "you", "your", or "Player" refer to any individual who accesses, registers on, or interacts with the y388 platform.
y388 is the data controller in respect of the personal information collected through the y388 platform. This means y388 determines the purposes for which, and the manner in which, your personal data is processed.
This Privacy Policy applies to all personal data collected through the y388 website, mobile interface, customer support channels, and any other touchpoints through which you interact with y388. It should be read alongside the y388 Terms & Conditions.
y388 collects personal data from you in two principal ways: information you provide directly when registering or using our services, and information collected automatically as you use the y388 platform.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, CNIC, date of birth | Registration form, KYC submission |
| Contact Data | Mobile number, address | Registration form |
| Financial Data | JazzCash / EasyPaisa details, bank account | Deposit / withdrawal forms |
| Technical Data | IP address, device type, browser | Automatically on platform access |
| Gaming Data | Bet history, game sessions, wins/losses | Automatically during gameplay |
| Communications Data | Support chat logs, complaint records | Customer support interactions |
y388 uses your personal data strictly for the purposes set out below. We do not process your data for any purpose that is incompatible with these stated purposes without first obtaining your consent or being required to do so by law.
y388 processes your personal data only where we have a valid legal basis to do so. The primary legal bases on which y388 relies are set out in the table below:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract with you |
| Payment processing (deposits and withdrawals) | Performance of a contract with you |
| KYC identity and age verification | Legal obligation; legitimate interest |
| Fraud and money laundering prevention | Legal obligation; legitimate interest |
| Responsible gaming monitoring and enforcement | Legal obligation; legitimate interest |
| Customer support | Performance of a contract with you |
| Platform security and abuse prevention | Legitimate interest |
| Marketing communications | Consent (freely given, withdrawable at any time) |
| Regulatory record-keeping | Legal obligation |
Where y388 relies on legitimate interest as the legal basis, we have assessed that our interests are not overridden by your fundamental rights and freedoms, taking into account the reasonable expectations of a player registering for a gaming platform.
y388 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the specific circumstances described below, and only to the extent necessary for each purpose.
To process your PKR deposits and withdrawals, y388 shares relevant financial data with authorised payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These processors operate under their own privacy policies and are independently regulated financial institutions in Pakistan.
y388 may use regulated third-party KYC service providers to verify your identity and CNIC details. These providers process your identity documents solely for verification purposes and are contractually prohibited from using your data for any other purpose.
y388 shares certain technical and transactional data with fraud detection and anti-money laundering service providers to protect the integrity of the y388 platform and comply with financial crime prevention obligations.
y388 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a lawful court order, or where y388 believes disclosure is necessary to protect the rights, property, or safety of y388, its players, or others.
In the event of a merger, acquisition, or sale of all or substantially all of y388's assets, personal data held by y388 may be transferred to the successor entity. Players will be notified of any such transfer and any material change to the terms under which their data is processed.
y388 never shares your personal data with advertisers, social media companies, or unrelated third-party businesses. Any sharing that occurs is strictly limited to operational necessity and legal compliance as described above.
y388 uses cookies and similar technologies to ensure the platform functions correctly, to maintain your login session, and to collect analytical data about how players use the platform. Below is a summary of the types of cookies y388 uses:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Session | Maintain your y388 Login session and enable core platform functions. These cannot be disabled without breaking the platform. | Session (deleted on browser close) |
| Functional | Remember your language preferences, display settings, and last-visited game category. | Up to 12 months |
| Analytical | Collect aggregated data on page views, navigation paths, and game engagement to improve the y388 platform. | Up to 24 months |
| Security | Detect fraudulent login attempts, bot activity, and suspicious device behaviour. | Up to 12 months |
You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using y388, but may affect the quality of your experience. Note that essential cookies cannot be disabled as they are strictly necessary for the platform to operate.
y388 retains your personal data for as long as your account remains active, and for such additional period as is required by applicable law or legitimate business purposes thereafter. The key retention periods applied by y388 are as follows:
Upon expiry of the applicable retention period, y388 will securely delete or anonymise your personal data so that it can no longer be attributed to you.
y388 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While y388 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your y388 Login and to never share your credentials with anyone.
y388 respects your rights in relation to your personal data. The rights available to you and the process for exercising them are set out below.
You may request a copy of the personal data y388 holds about you at any time. y388 will respond to access requests within 30 days.
If any personal data y388 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
You may request that y388 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
Where processing is based on your consent or a contract, you may request your personal data in a structured, machine-readable format for transfer to another provider.
You have the right to object to processing based on legitimate interest, including direct marketing. y388 will cease such processing unless it can demonstrate compelling grounds to continue.
To exercise any of your data rights, please contact the y388 support team via the 24/7 live chat facility on the platform or by emailing [email protected]. y388 will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days with prior notice to you.
y388's gaming services are strictly restricted to individuals aged 21 years and above. y388 does not knowingly collect personal data from anyone under the age of 21 and will never do so intentionally. The age restriction is enforced through our KYC verification process, which requires proof of age before a y388 account can be fully activated.
21+ STRICT ENFORCEMENT: If y388 discovers that a registered account belongs to a person under 21 years of age, the account will be immediately closed, all funds will be forfeited, and any personal data collected will be deleted in accordance with our data minimisation obligations, except where retention is required by law. The matter may also be referred to the relevant authorities.
Parents and guardians who believe their child may have registered on y388 are encouraged to contact y388 support immediately at [email protected] so that the account can be investigated and closed without delay.
y388 operates primarily for Pakistani players with data infrastructure designed to serve the Pakistani market. In some cases, personal data may be processed or stored on servers located outside of Pakistan — for example, where y388 uses cloud-based service providers or third-party KYC verification platforms with infrastructure in other jurisdictions.
Where personal data is transferred outside Pakistan, y388 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan. These safeguards may include:
If you have questions about the specific safeguards applied to any particular international transfer of your data, you may contact y388 support to request further information.
y388 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. The date at the top of this document indicates when the policy was most recently revised.
Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — y388 will notify registered Players via their registered contact details or through a prominent on-site notice prior to the changes taking effect. Non-material changes, such as typographical corrections or clarifications that do not alter the substance of the policy, may be made without prior notice.
Your continued use of the y388 platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. We encourage you to review this page periodically to remain informed about how y388 protects your personal information.
If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which y388 processes your personal data, please do not hesitate to get in touch with us through the following channels:
When submitting a data subject request, please include your full name, your registered y388 account details, and a clear description of the request or concern so that we can handle it efficiently. y388 may need to verify your identity before processing a data access, erasure, or portability request to ensure we do not disclose or delete data belonging to another person.
y388 is committed to resolving all privacy-related queries fairly and promptly. If you are not satisfied with y388's response to a privacy complaint, you retain the right to escalate your concern to the relevant data protection authority in your jurisdiction.
Now that you understand how y388 handles your personal data, join Pakistan's most trusted online gaming platform. Enjoy cricket betting, live casino, and premium slots — all with PKR-native payments and 24/7 local support. Players must be 21 or above.