y222 Privacy Policy

For the purposes of this Privacy Policy, the data controller — the entity that determines the purposes and means of processing your personal data — is the legal entity operating the y222 platform under its international gaming licence.

y222 operates the platform at y222.ws and is responsible for ensuring that all personal data collected through the platform is processed lawfully, fairly, and transparently in accordance with applicable data protection laws and the requirements of its gaming licence.

y222 collects the following categories of personal data from players, depending on the stage of the player relationship and the features used:

y222 does not collect sensitive data such as racial or ethnic origin, religious beliefs, or health data except where directly relevant to a responsible gaming assessment voluntarily initiated by the player.

y222 collects personal data through the following channels and mechanisms:

• Direct provision by you: When you complete the y222 registration form, submit KYC documents, initiate deposits or withdrawals, contact support, or update your account settings, you provide data directly to y222.
• Automated technical collection: When you visit the y222 platform, our web servers and analytics systems automatically record certain technical data including your IP address, browser fingerprint, device type, and session behaviour. This collection occurs on every platform visit regardless of login status.
• Payment processor data: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency, our payment processing partners transmit transaction confirmation data and payment identifiers to y222 to enable crediting and reconciliation of your account balance.
• KYC verification partners: y222 works with third-party identity verification service providers to validate the authenticity of KYC documents and confirm identity matches. These providers may return verification scores and flags to y222 as part of the KYC process.
• Cookies and tracking technologies: y222 uses cookies and similar technologies as described in Section 9 of this Policy to maintain session state, detect fraud, and analyse platform usage patterns.

y222 processes your personal data only for the following specific, legitimate purposes:

• Account creation and management: To register your y222 account, authenticate your identity at login, manage your account preferences, and communicate with you regarding account-related matters.
• KYC identity verification: To verify your identity and age (21+ requirement strictly enforced), confirm ownership of payment methods, and comply with the anti-money-laundering obligations under y222's international gaming licence.
• Payment processing: To process deposits and withdrawals in PKR and other supported currencies via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels, and to maintain accurate transaction records.
• Game and betting services delivery: To provide cricket betting, live casino, slots, and all other y222 platform features in a functional and personalised manner.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the y222 Terms and Conditions.
• Regulatory compliance and reporting: To fulfil y222's obligations under its international gaming licence, including record-keeping, suspicious activity reporting, and audit requirements.
• Responsible gaming: To operate deposit limits, loss limits, session reminders, and self-exclusion tools; to monitor player behaviour for signs of problem gambling where required by y222's licensing framework; and to communicate responsible gaming resources where relevant.
• Customer support: To respond to queries, resolve complaints, and maintain records of support interactions for quality and compliance purposes.
• Platform improvement: To analyse aggregated, anonymised usage patterns to improve the performance, security, and features of the y222 platform.
• Promotional communications (opt-in only): To send you information about bonuses, promotions, and platform updates, but only where you have explicitly opted in to receive such communications during registration or through account settings.

y222 processes personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between y222 and you (the y222 Terms and Conditions) — including account management, payment processing, KYC verification, and game service delivery.
• Legal obligation: Processing required to comply with y222's legal and regulatory obligations under its international gaming licence — including anti-money-laundering checks, suspicious activity reporting, and age verification.
• Legitimate interests: Processing necessary for y222's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, technical analytics, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent — including the sending of promotional communications. Consent-based processing can be withdrawn by you at any time without affecting the lawfulness of prior processing.

y222 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Licensed service providers: y222 engages third-party service providers to support platform operations — including KYC verification partners, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processors), game software suppliers, fraud detection specialists, and cloud infrastructure providers. All such providers are contractually bound to process your data solely in accordance with y222's instructions and applicable data protection obligations.
• Regulatory and licensing authorities: y222 may be required to disclose player data to its gaming licensing authority, financial intelligence units, or other competent regulatory bodies as required under its gaming licence conditions or applicable law. Such disclosures are made only to the extent strictly necessary to satisfy the relevant legal obligation.
• Law enforcement: Where y222 is served with a valid legal order, court order, or law enforcement request compelling disclosure of player data, y222 will comply to the extent required by law. y222 will notify the affected player of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of y222's assets, player personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified prior to such a transfer, and the acquiring entity will be required to honour the commitments in this Privacy Policy.
• With your explicit consent: In any other circumstance not listed above, y222 will share your personal data with third parties only with your prior, explicit, and informed consent.

y222 operates under an international gaming licence and utilises global technology infrastructure. As a result, your personal data may be transferred to, stored in, and processed in countries other than Pakistan. Such transfers occur in the following circumstances:

• When your data is processed by cloud infrastructure providers hosting y222's platform servers.
• When KYC verification is conducted by identity verification partners operating in multiple jurisdictions.
• When game data is processed by y222's third-party game software suppliers, who may operate servers in various jurisdictions.

y222 ensures that all international transfers of personal data are subject to appropriate safeguards — including contractual data processing agreements with receiving parties that impose data protection standards equivalent to those applied within y222's licensing jurisdiction. y222 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing such contractual safeguards.

y222 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

Where y222 is required by law or its licensing authority to retain data for longer than the periods stated above, the legally mandated retention period will apply.

y222 uses cookies and similar tracking technologies on the y222 platform. Cookies are small text files stored on your device that help y222 recognise your browser, maintain your login session, and analyse platform usage. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to function correctly. These include session cookies that maintain your login state and security tokens that protect your account from unauthorised access. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your account preferences such as display language, preferred currency display, and notification settings to personalise your platform experience.
• Analytics cookies: Used by y222's internal analytics system to collect aggregated, anonymised data about how players navigate and use the platform. This data is used exclusively to improve platform performance and user experience.
• Fraud detection cookies: Used to detect suspicious access patterns, multiple account creation attempts, and other indicators of fraudulent activity or terms violations.

You may configure your browser to refuse all cookies or to alert you when cookies are being sent. Note that disabling strictly necessary cookies will prevent you from logging in to your y222 account. Analytics and functional cookies can be disabled through your browser settings without affecting login functionality.

As a player whose personal data is processed by y222, you hold the following rights. All rights requests should be submitted to y222 support via live chat or by email at support@y222.ws. y222 will respond within 30 calendar days of receiving a valid request.

Please note that certain rights may be limited where y222 is required to retain or process your data to comply with regulatory obligations under its gaming licence, such as AML record-keeping requirements. Where a rights request is refused in full or in part, y222 will provide a written explanation.

y222 implements technical and organisational security measures commensurate with the sensitivity of player personal data and the risks inherent in operating an online gaming platform. Key security measures include:

• Encryption: All personal data is encrypted at rest using AES-256 encryption. All data transmitted between your browser and the y222 platform is encrypted in transit using TLS 1.3.
• Access controls: Access to player personal data by y222 staff is governed by role-based access control (RBAC). Only personnel with a defined operational need are granted access, and all access is logged and audited.
• Two-factor authentication: y222 internal systems that store player personal data are protected by multi-factor authentication for all staff accounts.
• Penetration testing: y222's platform infrastructure undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Data breach response: y222 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, y222 will notify you and the relevant regulatory authority within the timeframe required by applicable law.
• KYC document security: Identity documents submitted for KYC verification are stored in a dedicated, access-controlled document management system, separately from general account data, with additional access restrictions.

While y222 implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your y222 account login credentials and for notifying y222 immediately if you suspect any unauthorised access to your account.

Age verification is a mandatory step in the y222 KYC process. Every player must submit valid government-issued identification confirming that they are aged 21 or older before any withdrawal can be processed. Where y222 has reason to suspect that a registered account belongs to a minor, the account will be suspended immediately pending age verification, and any balance held in the account will be withheld pending resolution.

If y222 discovers that personal data has been collected from an individual under the age of 21 without appropriate age verification having been completed, y222 will delete that data without delay and close the associated account. Any funds deposited by an underage player will be handled in accordance with y222's licensing authority's requirements regarding underage gambling.

Parents and guardians in Pakistan who believe their child may have accessed the y222 platform should contact y222 support immediately via live chat or at support@y222.ws. y222 will act on such notifications as a matter of priority.

The y222 platform integrates with a number of third-party service providers to deliver its full range of features. Each of these providers processes certain player data as part of their service. y222 carefully vets all third-party providers and requires them to enter into data processing agreements that bind them to appropriate data protection standards.

• Game software providers: y222 sources casino games and sports betting products from licensed third-party game studios and platform aggregators. These providers may process anonymised session and game outcome data for the purpose of operating the games and ensuring RNG certification compliance.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment processors receive the minimum financial and identity data required to process your deposit or withdrawal transaction. Payment processors operate under their own privacy policies and regulatory obligations.
• KYC and identity verification: y222's KYC verification partner receives copies of identity documents and processes identity verification checks. Verification results are returned to y222. The KYC provider does not retain your documents beyond the period required to complete the verification check.
• Cloud infrastructure: y222's platform is hosted on enterprise-grade cloud infrastructure. The infrastructure provider processes data as a data processor under y222's instructions and does not have independent access to player data.

y222 is not responsible for the privacy practices of third-party websites that may be accessible via links on the y222 platform. This Privacy Policy applies solely to data processed by y222 and its contracted service providers in connection with the y222 platform.

y222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, y222's data processing practices, or the features of the y222 platform. The effective date at the top of this page will be updated whenever a new version is published.

Where changes are material — meaning they significantly affect how y222 processes your personal data or alter your rights — y222 will notify you by email to the address registered on your account, or via a prominent notice displayed on the platform when you next log in. Your continued use of the y222 platform following notification of material changes constitutes your acknowledgement of the updated Privacy Policy.

y222 recommends that you review this Privacy Policy periodically, particularly before making a deposit or submitting KYC documents, to ensure you are aware of the current version in effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about how y222 has handled your personal data, please contact y222 through the following channels:

• Live Chat: Available 24/7 inside your y222 account dashboard. This is the fastest route for all data-related queries and rights requests.
• Email: support@y222.ws — responses within 2 business hours during normal operating hours. Please include "Privacy Request" in your subject line to ensure your query is routed to the correct team.

y222 aims to resolve all privacy-related queries and complaints promptly and to your satisfaction. If you remain unsatisfied with y222's response to a privacy complaint after having first raised the matter directly with y222 support, you may escalate the matter to the data protection supervisory authority or complaints body designated under y222's licensing framework.