y333 Privacy Policy

This Privacy Policy ("Policy") is published by y333 ("y333", "we", "us", "our") and applies to all personal data collected from individuals ("you", "player", "user") who visit, register on, or otherwise interact with the y333 online gaming platform at y333.biz.

y333 is Pakistan's premier online gaming destination, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. As part of operating a platform that handles financial transactions in Pakistani Rupees (PKR) and processes identity documentation for KYC compliance, y333 necessarily collects and processes certain categories of personal information. This Policy sets out, in transparent and plain terms, exactly what that means for you as a y333 player.

y333 processes personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. Where the laws of Pakistan or any other applicable jurisdiction impose additional or stricter requirements, y333 will comply with those requirements.

y333 collects personal data across several categories depending on how you interact with the platform. The table below summarises the main categories of data collected and typical examples within each category.

y333 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, health data, or biometric data, beyond what is strictly required for identity verification purposes under applicable KYC and anti-money-laundering obligations.

y333 collects personal data through the following means:

• Direct provision by you: When you register a y333 account, complete the y333 login process, submit KYC documents, make a PKR deposit or withdrawal, contact y333 support, or participate in a promotion, you directly provide us with personal data.
• Automated technical collection: When you access the y333 platform, our servers automatically log technical data including your IP address, device identifiers, browser type, and session activity. This occurs regardless of whether you are logged into your y333 account.
• Cookies and similar technologies: y333 uses cookies, web beacons, and local storage objects to maintain session state, personalise your experience, and collect analytics data. See Section 08 for full details of y333's cookie practices.
• Third-party identity verification providers: Where y333 engages a third-party KYC or document verification service to validate your identity documents, that provider may return enriched identity data to y333 as part of the verification result.
• Payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, your payment provider may share transaction confirmation data with y333 to verify that a deposit or withdrawal has been completed successfully.

y333 processes your personal data only for defined, legitimate purposes. Each purpose is supported by a legal basis for processing, as set out below:

• Account creation and management — To create and maintain your y333 account, authenticate your identity during the y333 login process, and manage your account preferences. Legal basis: Contract performance.
• PKR payment processing — To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records. Legal basis: Contract performance and legal obligation.
• KYC and regulatory compliance — To verify your identity and age (21+), comply with anti-money-laundering obligations, and fulfil reporting requirements to regulatory and law enforcement authorities where legally required. Legal basis: Legal obligation.
• Fraud detection and platform security — To monitor transactions and platform activity for signs of fraud, multi-accounting, bonus abuse, and other prohibited conduct. Legal basis: Legitimate interests.
• Responsible gaming — To monitor player activity for signs of problem gambling, apply deposit limits or self-exclusion where requested, and fulfil y333's responsible gaming obligations. Legal basis: Legal obligation and legitimate interests.
• Customer support — To respond to your queries, complaints, and requests submitted via y333 support channels. Legal basis: Contract performance and legitimate interests.
• Personalisation and analytics — To improve the y333 platform experience, analyse game preferences, and optimise platform performance for Pakistani players. Legal basis: Legitimate interests.
• Marketing communications — To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. Legal basis: Consent.

y333 will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for doing so.

y333 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. y333 may share your data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial data necessary to process your PKR deposits and withdrawals. Each payment provider is bound by its own data protection obligations.
• KYC and identity verification providers: y333 may engage licensed third-party identity verification services to assist with document authentication and age verification (21+). These providers process your data strictly on y333's instructions.
• Fraud prevention and security services: y333 may share technical and behavioural data with fraud detection platforms to protect the integrity of the y333 gaming environment and prevent financial crime.
• Regulatory and law enforcement authorities: y333 will disclose personal data to Pakistani law enforcement agencies, financial intelligence units, or international regulatory bodies where legally compelled to do so, or where disclosure is necessary to prevent or report a crime.
• Game content providers: Where you play a third-party game title hosted on the y333 platform (such as a live casino or slot game), the game provider's server may receive technical session data necessary to run the game. No personally identifiable data beyond a session token is shared for this purpose.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of y333's business, your personal data may be transferred to the acquiring entity as part of that transaction. y333 will notify affected players of any such transfer in advance where practicable.

y333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active account data: Personal data associated with an active y333 account is retained for the full duration of the account's active period plus a minimum of five (5) years following account closure, in order to satisfy anti-money-laundering record-keeping requirements.
• KYC documents: Identity documents submitted for KYC verification (CNIC copies, passport scans) are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: PKR transaction records, including deposits and withdrawals via JazzCash, EasyPaisa, and bank transfers, are retained for a minimum of five (5) years from the transaction date.
• Support communications: Records of customer support interactions are retained for up to three (3) years following the resolution of the relevant query.
• Marketing data: Marketing preference data and consent records are retained until you withdraw your consent, plus a reasonable period thereafter to demonstrate compliance with consent obligations.
• Technical and usage logs: Server logs and session data are retained for up to twelve (12) months from the date of collection, unless a longer retention period is required for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, y333 will securely delete or anonymise your personal data so that it can no longer be linked to your identity.

y333 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the y333 platform.
• AES-256 encryption for sensitive data at rest, including stored KYC documents and financial records.
• Role-based access controls ensuring that y333 staff can only access personal data relevant to their specific job function.
• Multi-factor authentication (MFA) for all y333 internal systems that hold player data.
• Regular independent security audits and penetration testing of the y333 platform infrastructure.
• Comprehensive logging and monitoring of all access to personal data held by y333.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, y333 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

y333 uses cookies and similar tracking technologies on the y333 platform. A cookie is a small text file placed on your device by a website when you visit it. The following categories of cookies are used by y333:

• Strictly necessary cookies: These cookies are essential for the y333 platform to function correctly. They maintain your y333 login session, remember your account preferences, and ensure that security features operate as intended. These cookies cannot be disabled.
• Analytics cookies: y333 uses analytics cookies to understand how players interact with the platform — which pages are most visited, which game categories are most popular, and how Pakistani players navigate between sections such as cricket betting and slots. This data is aggregated and anonymised.
• Functional cookies: These cookies remember your platform preferences such as language settings, preferred PKR display format, and notification settings, so that you do not need to re-enter them on each visit.
• Marketing cookies: Where you have given consent, y333 may use cookies to track whether you have interacted with a y333 promotional campaign. This helps y333 avoid showing you promotions you have already seen and to measure the effectiveness of its marketing activity.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the y333 platform from functioning correctly, including the y333 login process. For more information on managing cookies, refer to the help documentation for your specific browser.

As a y333 player, you hold the following rights in relation to your personal data. y333 will respond to all valid rights requests within a reasonable timeframe and at no charge to you:

• Right of access: You may request a copy of all personal data that y333 holds about you. y333 will provide this in a structured, commonly used format.
• Right to rectification: If any personal data y333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details directly through your y333 account dashboard.
• Right to erasure: You may request that y333 delete your personal data. y333 will comply where there is no overriding legal obligation or legitimate interest that requires the data to be retained (for example, AML record-keeping obligations may prevent immediate erasure of financial transaction data).
• Right to restrict processing: You may request that y333 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of y333's legitimate grounds.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that y333 provide your personal data in a machine-readable format suitable for transfer to another service.
• Right to object: You have the right to object to y333 processing your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests, though y333 may be able to demonstrate compelling grounds that override your objection.
• Right to withdraw consent: Where y333 processes your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

To exercise any of the rights listed above, contact y333's support team. y333 may request verification of your identity before processing a rights request to ensure that data is not disclosed to or deleted at the request of an unauthorised party.

y333 implements age verification controls at the point of registration and throughout the KYC process to prevent minors from accessing the platform. Where y333 discovers or has reasonable grounds to suspect that an account has been registered by an individual under 21 years of age, y333 will immediately suspend the account, commence an investigation, and delete any personal data collected from that individual to the maximum extent permitted by applicable law and anti-money-laundering obligations.

If you are a parent or guardian and believe that a minor in your care has registered a y333 account, please contact y333 support immediately at [email protected]. y333 will treat all such reports as a priority and act promptly to investigate and, where confirmed, close the account and delete associated data.

y333 operates as an internationally licensed gaming platform. As a result, personal data collected from Pakistani players may be transferred to and processed in countries outside Pakistan where y333's servers, third-party processors, or licensing authorities are located.

Where such transfers occur, y333 ensures that appropriate safeguards are in place to protect your personal data at the destination, including contractual protections requiring the recipient to handle your data to at least the same standard as y333 applies in Pakistan. y333 will not transfer personal data to a jurisdiction where adequate protections cannot be assured.

If you have concerns about the international transfer of your personal data, please contact y333 support at [email protected]. y333 will provide further information about the specific transfer mechanisms applicable to your data upon request.

y333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or y333's data processing practices. The effective date shown at the top of this page indicates when the current version of the Policy came into force.

Where changes to this Policy are material — meaning they affect your rights or the way y333 processes your personal data in a significant way — y333 will notify registered players by posting a prominent notice on the y333 platform and, where practicable, by sending a notification to your registered email address or mobile number.

Your continued use of the y333 platform following the publication of an updated Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes to this Policy, you should stop using the y333 platform and may request account closure in accordance with the y333 Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how y333 handles your personal data, please contact y333's support team through the following channels:

• Email: [email protected] — for data access requests, erasure requests, consent withdrawals, and privacy-related enquiries.
• Support page: Visit y333.biz/support for live chat and additional contact options available 24/7.

When submitting a data rights request, please include your full name, registered email address, and a description of your request. y333 may require you to verify your identity before fulfilling the request to ensure the security of your personal data.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the y333 Privacy Policy. y333 — Pakistan's premier online gaming platform.