Privacy Policy – y333 Casino

y333 (operating at y333.club) acts as the data controller in respect of the personal data collected from players using the y333 platform. When we refer to "y333", "we", "us", or "our" in this Privacy Policy, we are referring to the operator of the y333.club platform.

For all data-related queries, access requests, or complaints, please contact our Data Protection team at: [email protected]

y333 collects the following categories of personal data from players:

y333 collects personal data through the following mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC, making deposits or withdrawals, or contacting customer support.
• Automated collection: Technical and behavioural data collected automatically via server logs, cookies, and session tracking as you use the y333 platform.
• Third-party payment processors: Financial transaction data relayed from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah during deposit and withdrawal processing.
• Identity verification providers: Where y333 uses a third-party KYC service to validate CNIC documents or cross-reference identity data for compliance purposes.
• Fraud detection systems: Device and behavioural signals collected to detect and prevent fraudulent account activity and bonus abuse.

y333 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your y333 account, processing login sessions, and enabling platform access.
• Identity verification: Conducting KYC checks to confirm your identity and age before processing withdrawals, as required by our compliance obligations.
• Payment processing: Facilitating deposits and withdrawals through your chosen PKR payment method, maintaining accurate transaction records, and resolving payment disputes.
• Platform operations: Delivering casino games, sports betting markets, live dealer services, and all other products available on y333.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent accounts, multi-accounting, payment fraud, and bonus abuse.
• Responsible gaming: Monitoring play patterns to identify signs of problem gambling and applying responsible gaming interventions where appropriate, including enforcing self-exclusion periods.
• Customer support: Responding to your queries, complaints, and account requests via live chat and email.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates where you have provided consent or where a legitimate interest applies. You may opt out at any time.
• Legal compliance: Meeting applicable legal, regulatory, and anti-money laundering obligations.
• Analytics and improvement: Analysing aggregated, anonymised usage data to improve the y333 platform, user experience, and product offering.

y333 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms and Conditions governing your y333 account, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law, including identity verification, anti-money laundering checks, and responsible gaming obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and internal analytics where these interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications where you have given explicit consent. You may withdraw consent at any time by contacting [email protected].

6.1 y333 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any applicable legal retention obligations.

6.2 Account data for active accounts is retained for the duration of the account relationship. Following account closure, y333 retains identity, financial, and transaction data for a minimum period of five years to meet anti-money laundering and financial record-keeping obligations.

6.3 Responsible gaming records, including self-exclusion history and limit-setting logs, are retained for a minimum of seven years to enable enforcement of self-exclusion periods and to comply with responsible gaming regulatory requirements.

6.4 Technical log data and session records are retained for a maximum of 24 months from the date of collection for security and fraud investigation purposes.

6.5 Following the expiry of all applicable retention periods, personal data is securely deleted or anonymised.

y333 does not sell your personal data to third parties. y333 may share personal data with the following categories of third-party recipients where necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services that process your CNIC and address documentation to complete the KYC process.
• Game software providers: Casino game providers such as Pragmatic Play, JILI, PG Soft, and Evolution Gaming receive technical session data necessary to deliver games to your account. These providers operate under strict data processing agreements with y333.
• Fraud detection services: Third-party fraud prevention and device fingerprinting tools that help y333 identify and prevent fraudulent activity.
• Legal and regulatory authorities: y333 may disclose personal data to relevant law enforcement, regulatory, or judicial authorities where required by applicable law or a valid legal order.
• Professional advisers: Legal, accounting, or audit professionals engaged by y333, subject to professional confidentiality obligations.

All third-party data processors engaged by y333 are contractually required to process personal data only on y333's instructions and to maintain appropriate technical and organisational security measures.

8.1 y333 uses cookies and similar tracking technologies on the y333.club platform. Cookies are small text files stored on your device that help the platform function correctly and allow y333 to understand how players use the site.

8.2 y333 uses the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your y333 account and security cookies that help prevent CSRF attacks. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limit preferences, and game lobby layout choices.
• Analytics cookies: Collect anonymised data about how players navigate the y333 platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve the platform.
• Marketing cookies: Used where you have consented to receive targeted promotional communications related to y333 products and bonuses. These cookies are not used to track your activity on external websites.

8.3 You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your y333 account.

y333 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL encryption on all data transmitted between your device and the y333 platform.
• Encryption at rest for all sensitive personal data including CNIC numbers and financial account details stored in y333 databases.
• Access controls limiting personal data access to authorised y333 personnel and approved third-party processors on a need-to-know basis.
• Regular security audits and penetration testing of the y333 platform infrastructure.
• Two-factor authentication available to all registered players to protect account access.
• Automated anomalous login detection that flags unusual access patterns and triggers additional verification steps.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your y333 account credentials. Please notify y333 immediately at [email protected] if you believe your account has been compromised.

As a y333 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected]:

• Right of access: You have the right to request a copy of the personal data that y333 holds about you. Requests will be fulfilled within 30 days.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held by y333.
• Right to erasure: You may request deletion of your personal data where y333 no longer has a lawful basis for retaining it. Note that legal retention obligations (as set out in §6) may prevent immediate deletion of certain data categories.
• Right to restrict processing: You may request that y333 restrict processing of your personal data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you provided to y333 in a structured, machine-readable format.
• Right to object: You have the right to object to processing of your personal data on the basis of legitimate interests, including for direct marketing purposes. Objections to direct marketing will be honoured immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The y333 platform is strictly intended for adults aged 18 years and above. y333 does not knowingly collect personal data from persons under 18. If y333 discovers that personal data has been collected from a person under 18, the account will be immediately closed and all associated data will be deleted. If you believe a person under 18 has created a y333 account, please notify us immediately at [email protected].

y333 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or in-platform notification at least 7 days before the updated policy takes effect. Your continued use of the y333 platform after the effective date of any change constitutes acceptance of the revised policy. The date of the most recent revision is displayed at the top of this page.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by y333, please contact our team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 via the y333 platform

y333 will respond to all data rights requests within 30 calendar days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint through the applicable dispute resolution procedure referenced in our Terms & Conditions.