1. Introduction
y388 ("we", "us", "our") operates the Platform accessible at https://y388.cam. This Privacy Policy ("Policy") describes how y388 collects, processes, stores, shares and protects personal data relating to individuals ("User", "you", "your") who access or use the Platform.
This Policy applies to all personal data processed in connection with your use of the Platform, regardless of the device, browser or method of access used. It should be read together with our Terms & Conditions and Responsible Gambling guidelines, both of which are incorporated herein by reference.
By accessing or using the y388 Platform, you confirm that you have read, understood and consent to the data practices described in this Policy. If you do not agree with this Policy, please discontinue use of the Platform immediately.
2. Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
- "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and usage data.
- "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure and destruction.
- "Data Controller" — the entity that determines the purposes and means of processing personal data. y388 is the Data Controller for personal data collected via the Platform.
- "Data Processor" — a third party that processes personal data on behalf of and under the instruction of the Data Controller.
- "Cookies" — small text files placed on a User's device by a website for the purpose of retaining session information, preferences and analytics data.
- "Platform" — the y388 website at https://y388.cam, including all pages, features and content accessible through it.
- "User" — any individual who accesses, browses or uses the Platform in any capacity.
- "Consent" — a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data.
- "Sensitive Data" — a special category of personal data warranting heightened protection, such as data relating to health, religious beliefs or biometrics. y388 does not intentionally collect sensitive data.
3. Data Controller
y388 acts as the Data Controller in respect of personal data collected through the Platform. As Data Controller, y388 is responsible for determining how and why personal data is processed, and for ensuring that processing is carried out lawfully, fairly and transparently.
y388 is an English-language online betting and live casino information platform. It is not a licensed gambling operator and does not process payment transactions or operate gambling accounts. The data processing activities described in this Policy relate solely to your interaction with the y388 information platform, not with any third-party gambling operator you may independently choose to access.
4. Data We Collect
y388 may collect the following categories of personal data when you use the Platform:
4.1 Data You Provide Directly
- Contact information submitted via enquiry or feedback mechanisms (e.g., name, email address);
- Communications and correspondence you send to us, including support queries;
- Any preferences or settings you configure on the Platform.
4.2 Data Collected Automatically
- Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting;
- Usage data: pages visited, time spent on pages, navigation paths, referring URLs and exit pages;
- Session data: login session identifiers (where applicable), clickstream data and interaction logs;
- Cookie data: preferences and session tokens stored via cookies and similar technologies (see Section 8).
4.3 Data We Do Not Collect
y388 does not collect:
- Financial data such as bank account numbers, card details, Easypaisa wallet IDs or JazzCash account credentials;
- Government-issued identity documents such as CNIC numbers, passport details or National Tax Numbers;
- Sensitive personal data including health information, religious beliefs or biometric data;
- Data from individuals under 18 years of age (see Section 13).
| Data Category | Examples | Collection Method | Purpose |
|---|---|---|---|
| Contact Data | Name, email address | User-submitted | Respond to enquiries |
| Technical Data | IP address, device type, browser | Automatic (server logs) | Security, diagnostics |
| Usage Data | Pages visited, session duration | Automatic (analytics) | Platform improvement |
| Cookie Data | Session tokens, preferences | Automatic (cookies) | Session management |
5. Lawful Basis for Processing
y388 processes personal data only where a lawful basis for doing so exists. Depending on the nature of the processing activity, the applicable lawful basis may include one or more of the following:
- Consent: Where you have given explicit, informed consent to the processing of your personal data for a specific purpose (e.g., subscribing to platform updates);
- Legitimate Interests: Where processing is necessary for the purposes of our legitimate interests — such as platform security, fraud prevention, and improving user experience — provided those interests are not overridden by your rights and interests;
- Legal Obligation: Where processing is necessary to comply with a legal obligation applicable to y388;
- Contractual Necessity: Where processing is necessary to perform a contract with you or to take pre-contractual steps at your request.
Where processing is based on consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6. How We Use Your Data
y388 uses the personal data it collects for the following purposes:
- Platform Operation: To deliver, maintain and improve the technical performance of the Platform, including troubleshooting errors and monitoring uptime;
- User Support: To respond to enquiries, feedback and support requests submitted through the Platform;
- Analytics & Improvement: To analyse user behaviour and engagement patterns in aggregate form in order to improve content quality, navigation and user experience;
- Security & Fraud Prevention: To detect, investigate and prevent fraudulent activity, unauthorised access attempts and other security threats;
- Legal Compliance: To comply with any legal obligations, court orders or regulatory requirements applicable to y388;
- Communications: To send you service-related communications where you have provided contact information and consented to receive such communications.
y388 does not use personal data for automated decision-making or profiling in a manner that produces legal or similarly significant effects on Users.
7. Data Sharing & Disclosure
y388 does not sell, rent or trade your personal data to any third party. Personal data may be shared only in the following limited circumstances:
7.1 Service Providers
We may engage trusted third-party service providers to assist in the operation of the Platform — including web hosting providers, analytics platforms and customer support tools. These providers act as Data Processors under contractual obligations that prohibit them from using your data for any purpose other than providing services to y388.
7.2 Legal Requirements
We may disclose personal data where required to do so by applicable law, court order, regulatory direction or government authority request. This includes responses to lawful requests from Pakistani regulatory or law enforcement authorities where y388 determines that such disclosure is legally required.
7.3 Business Transfers
In the event of a merger, acquisition, corporate restructuring or sale of all or part of the y388 business, personal data held by y388 may be transferred to the relevant successor entity, subject to equivalent privacy protections being maintained.
7.4 Payment Reference Context
y388 references familiar Pakistani payment services — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — as contextual information only. y388 does not share any User personal data with these payment providers. These organisations are independent third parties and are not affiliated with y388.
8. Cookies & Tracking Technologies
The y388 Platform uses cookies and similar technologies to support core functionality and to collect usage analytics. A "cookie" is a small text file stored on your device by a website.
8.1 Types of Cookies Used
- Essential Cookies: Necessary for the Platform to function correctly — for example, session management and security tokens. These cannot be disabled without affecting core functionality.
- Analytics Cookies: Used to collect aggregate, anonymised data about how Users interact with the Platform. This helps us identify popular content and improve navigation.
- Preference Cookies: Store User preferences such as language settings or display options across sessions.
8.2 Managing Cookies
You can manage, restrict or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to use certain features of the Platform. Most modern browsers allow you to:
- View the cookies currently stored on your device;
- Delete all or selected cookies;
- Block cookies from specific websites or all websites;
- Configure notifications when cookies are set.
y388 does not use cookies to track your activity across unrelated third-party websites or to build advertising profiles.
9. Data Retention
y388 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or legitimate business need. The following general retention principles apply:
- Contact enquiry data: Retained for a period sufficient to resolve the relevant enquiry, and for a reasonable period thereafter to maintain a record of the interaction;
- Technical and usage data (logs): Typically retained for up to 12 months for security and diagnostic purposes, after which it is anonymised or deleted;
- Cookie data: Session cookies expire when the browser is closed; persistent cookies expire at the end of their defined duration or upon deletion by the User;
- Legal compliance data: Retained for such period as required by applicable law or as necessary to defend against potential legal claims.
When personal data is no longer required for any retained purpose, it is securely deleted or anonymised in accordance with our internal data management procedures.
10. Data Security
y388 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:
- HTTPS/TLS encryption for all data transmitted between your browser and the Platform;
- Access controls limiting personal data access to authorised personnel only;
- Regular security assessments and monitoring of the Platform infrastructure;
- Secure server environments with appropriate physical and logical access restrictions.
Whilst we take reasonable steps to protect personal data, no method of electronic transmission or storage is 100% secure. y388 cannot guarantee absolute security and does not warrant that the Platform will be free from security incidents. In the event of a data breach that is likely to result in a risk to your rights and freedoms, y388 will take appropriate steps in accordance with applicable law.
11. International Data Transfers
y388 operates as an online platform that may utilise hosting infrastructure, analytics tools or service providers located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to, stored and processed in countries other than Pakistan.
Where personal data is transferred internationally, y388 takes reasonable steps to ensure that adequate protections are in place — including contractual clauses, data processing agreements or other safeguards consistent with the applicable data protection framework.
By using the Platform, you acknowledge that your personal data may be processed outside of Pakistan and that the data protection standards in those jurisdictions may differ from those applicable in Pakistan.
12. Your Rights
Subject to applicable law, you have the following rights in relation to your personal data held by y388. To exercise any of these rights, contact us at the details set out in Section 17.
Right of Access
You have the right to request a copy of the personal data we hold about you and to receive information about how it is being used.
Right to Rectification
You have the right to request that inaccurate or incomplete personal data we hold about you is corrected without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful.
Right to Restriction of Processing
In certain circumstances, you may request that we restrict processing of your personal data — for example, whilst you contest the accuracy of the data we hold.
Right to Object
Where processing is based on legitimate interests, you have the right to object to such processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request that personal data you have provided to us be supplied in a structured, commonly used and machine-readable format.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
y388 will respond to data rights requests within a reasonable timeframe, and in any event within 30 days of receipt of a valid request. We may need to verify your identity before processing a request. There is no fee for making a request unless it is manifestly unfounded or excessive.
13. Minors & Age Policy
The y388 Platform is intended for adults only. Access is restricted to individuals who are at least 18 years of age, or the higher minimum age required by the applicable gambling operator or license jurisdiction.
y388 does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data of a minor has been collected without appropriate parental or guardian consent, we will take immediate steps to delete such data.
If you are a parent or guardian and believe that a minor under your care has provided personal data to y388, please contact us at the details set out in Section 17 and we will act promptly to address the situation.
14. Third-Party Platforms
The y388 Platform may contain contextual references to third-party gambling operators, payment services and technology providers. y388 does not operate or control any third-party platform and is not responsible for the privacy practices of third parties.
Each third-party operator — including any gambling platform a User may independently choose to visit — maintains its own privacy policy and data processing practices. Users are strongly advised to review the privacy policy of any third-party platform before registering, depositing funds or providing personal data.
The mention of payment service names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah on this Platform is for contextual familiarity only. y388 does not share User data with these organisations and does not claim any partnership, affiliation or data-sharing relationship with them.
15. Pakistan User Context
y388 is specifically designed for English-language users in Pakistan, including those in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. The Platform is accessible across Pakistan via standard internet connections.
Pakistan does not currently have a comprehensive, standalone data protection statute equivalent to certain international frameworks. However, y388 is committed to upholding the spirit of internationally recognised data protection principles — including purpose limitation, data minimisation, storage limitation, accuracy, integrity and confidentiality — in the handling of all User personal data.
The Prevention of Electronic Crimes Act, 2016 (PECA) and related legislation may have relevance to data stored and processed in connection with Pakistani users. y388 will cooperate with lawful requests from Pakistani authorities in accordance with applicable law.
16. Policy Updates
y388 reserves the right to update or revise this Privacy Policy at any time. Material changes will be indicated by an updated "Last Reviewed" date at the top of this page.
Where changes are significant, we will take reasonable steps to bring them to your attention — for example, by displaying a prominent notice on the Platform. Your continued use of the Platform following any update constitutes your acknowledgement of the revised Policy.
We encourage all Users to review this Privacy Policy periodically to remain informed about how y388 handles personal data.
17. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy — including requests to exercise any of your data rights described in Section 12 — please contact y388 using the following details: