Privacy Policy – y222 Online Gaming Platform Pakistan

1 Introduction

This Privacy Policy explains how y222 ("we," "us," "our," "the Platform") collects, uses, stores, and protects the personal information of registered users ("you," "your," "the Player") who access y222 at y222.onl or through the y222 mobile application.

y222 is an online gaming and sports betting platform built specifically for the Pakistan market. All PKR transactions, account operations, and gaming activity generate data that is processed in accordance with this policy. By registering an account with y222, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described here.

This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming guidelines, both of which are incorporated by reference into the overall agreement between you and y222.

We review and update this policy periodically. The "Last Updated" date at the top of this page always reflects the most recent version. We will notify registered players of significant changes through their account contact details or via a notice on the platform.

2 What We Collect

We collect the following categories of personal information from players and visitors:

We do not collect sensitive personal data such as biometric information, religious beliefs, or political opinions. We do not collect data from social media profiles unless you choose to contact us through a social channel.

3 How We Collect Your Data

y222 collects personal data through several channels:

Direct Collection

• Registration: When you create an account on y222, you provide your name, contact number, email address, and date of birth.
• Account settings: When you update your profile, change your password, or add a payment method, we collect the updated details.
• Verification submissions: When you submit identity documents for KYC (Know Your Customer) review before processing withdrawals.
• Support interactions: When you contact our support team via live chat or email, the content of those communications is retained.

Automatic Collection

• Cookies and tracking pixels: When you visit y222.onl or use the app, cookies and similar technologies collect technical and usage data. See Section 7 for full details.
• Server logs: Our servers automatically record IP addresses, request timestamps, browser types, and referring URLs for every page visit.
• In-app activity: Gaming sessions, bet placements, deposits, withdrawals, and navigation within the platform are logged to your account activity record.

Third-Party Sources

In some cases, we may receive information about you from third parties, including:

• Payment processors (JazzCash, Easypaisa, Raast, banks) who confirm transaction status and payment account details.
• Identity verification service providers who assist with KYC document checks.
• Fraud prevention and anti-money laundering screening services.

4 How We Use Your Data

y222 uses your personal data only for legitimate, clearly defined purposes. The table below outlines each use and the basis on which we process it:

We will never use your data for any purpose not listed above without first obtaining your explicit consent or notifying you of the new purpose and its legal basis.

5 Sharing Your Data

y222 does not sell, rent, or share your personal data with third parties for their own marketing purposes. We share data only in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who process data on our behalf. These include payment processors, identity verification partners, cloud hosting providers, and customer support software vendors. All such providers are contractually bound to handle your data securely and to use it only for the specific service they provide to y222.

Game Software Providers

When you play games on y222, your session data — such as bet amounts, game round results, and session timestamps — may be processed by the relevant game software provider. This is necessary for the game to function correctly and for dispute resolution. Game providers do not receive your full identity details.

Legal and Regulatory Requirements

We may disclose your personal data when required to do so by law, court order, or in response to a legitimate request from a law enforcement body. In such cases, we disclose only the minimum information required to comply with the request.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of y222's business, player data may be transferred as part of that transaction. You will be notified of any such transfer and your rights regarding your data will be maintained.

6 Payment Data

All PKR transactions on y222 are processed through trusted, encrypted payment channels. The following applies to your financial data:

• y222 does not store your full JazzCash, Easypaisa, or bank account credentials on our own servers. Payment details are tokenised and handled by our payment processing partners.
• Transaction records — including deposit amounts, withdrawal requests, and timestamps — are retained for the purpose of account management, dispute resolution, and financial record-keeping.
• Payment verification data (such as account name and transaction reference) is used to confirm that payments are sent and received by the same account holder, in line with our anti-fraud policy.
• Supported payment channels include: JazzCash, Easypaisa, Raast, Bank Transfer, debit and credit cards, and mobile wallets. Each channel has its own privacy and data handling practices; we recommend reviewing the privacy policy of your chosen payment provider as well.

If you believe there has been an unauthorised transaction on your y222 account, please contact our support team immediately through your account dashboard.

7 Cookies & Tracking Technologies

y222 uses cookies and similar technologies to make the platform work properly, improve performance, and provide a better experience for Pakistan players.

Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit, security tokens, and load-balancing cookies. You cannot opt out of these without preventing the site from working.
• Performance cookies: Collect anonymised data about how players use the platform — which pages are visited most, where errors occur, and how long sessions last. This helps us improve the platform for all users.
• Functional cookies: Remember your preferences, such as your preferred language, display settings, and last-used payment method, so you do not have to re-enter them on each visit.
• Analytics cookies: We use anonymised analytics to understand overall platform usage trends. No personally identifiable information is shared through analytics.

Managing Cookies

Most browsers allow you to control cookies through their settings. You can choose to block or delete cookies at any time. However, blocking essential cookies will affect your ability to log in and use the platform normally. For best results, we recommend keeping essential cookies enabled.

The y222 mobile app may use similar tracking mechanisms appropriate to the mobile environment, including device identifiers used for fraud prevention and session management.

8 Data Retention

y222 retains your personal data for as long as your account is active and for a reasonable period thereafter, in line with our operational and legal requirements.

• Active accounts: All account data is retained for as long as your account remains open and active.
• Closed accounts: After you close your account, we retain basic identity and transaction records for a period necessary to meet our legal and financial record-keeping obligations. This period is typically several years from the date of the last transaction.
• KYC documents: Identity verification documents are retained for the period required by applicable financial regulations from the date of your last transaction on the platform.
• Support communications: Chat logs and email correspondence with our support team are retained for up to 2 years from the date of the interaction.
• Deleted accounts: When an account is permanently deleted at your request, we remove your personal data from our active systems as quickly as practicable, subject to retaining the minimum records required by our legal obligations. Backups are purged in line with our standard backup rotation schedule.

9 Security Measures

y222 takes the security of your personal data seriously and applies multiple layers of protection:

• Encryption in transit: All data transmitted between your device and y222 servers is protected using TLS (Transport Layer Security) encryption.
• Encryption at rest: Sensitive data stored on y222 servers — including identity documents and financial records — is encrypted using strong, industry-standard algorithms.
• Access controls: Access to personal data within y222's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with data access are bound by confidentiality obligations.
• Fraud monitoring: Automated systems continuously monitor accounts and transactions for unusual activity patterns that may indicate fraud, account takeover, or abuse.
• Secure password storage: Passwords are never stored in plain text. They are processed using secure, one-way hashing algorithms.
• Regular security reviews: We conduct periodic security assessments of our platform, infrastructure, and data handling practices to identify and address potential vulnerabilities.

Despite these measures, no online system can guarantee absolute security. If you become aware of any unauthorised access to your account, please notify our support team immediately so we can take appropriate action.

10 Your Rights

As a y222 player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting our support team through your account dashboard:

We aim to respond to all data rights requests within 30 days. In complex cases, this may be extended to 60 days, and we will inform you if an extension is needed. There is no fee for making a data rights request.

11 Minors & Age Policy

y222 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes an age declaration, and we reserve the right to request proof of age at any stage.

If we discover that an account has been registered by someone under 18, we will immediately close the account, void any transactions, and securely delete the personal data associated with that account in line with our data retention policy for underage registrations.

If you are a parent or guardian and believe your child has accessed or registered on y222, please contact our support team immediately through the account dashboard or via the contact details in Section 13.

12 Policy Updates

y222 may update this Privacy Policy from time to time to reflect changes in our data practices, new services we introduce, or changes in applicable law. When we make updates, we will:

• Update the "Last Updated" date shown at the top of this page.
• Notify registered players of material changes via the contact details associated with their account or through an in-app notice.
• Where changes require your fresh consent — such as a new use of your data that was not previously disclosed — we will request that consent explicitly before proceeding.

Your continued use of y222 following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. We recommend checking this page periodically, particularly if you are an active player.

13 Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please get in touch with our support team:

• Support Dashboard: Log in to your y222 account and use the live chat or support ticket system. This is the fastest way to reach us.
• FAQ: Many common privacy and account questions are answered on our FAQ page.
• Email: [email protected]

For data rights requests (access, deletion, correction, portability), please contact us through the support dashboard and include "Data Rights Request" in your message so our team can prioritise and route it correctly. We will acknowledge your request within 3 business days and aim to resolve it within 30 days.