y111 Casino – Privacy Policy

1. Personal Data We Collect

y111 collects personal data that is necessary to provide our Services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of personal data we may collect include:

• Identity Data: Full legal name as it appears on a government-issued identity document (CNIC for Pakistani players), date of birth, nationality, and gender.
• Contact Data: Pakistani mobile number (used as your primary account identifier and for OTP delivery), and email address if provided.
• KYC Verification Data: Scanned or photographed copies of CNIC (front and back), selfie photographs submitted for identity verification, and any additional documents requested as part of enhanced due diligence.
• Financial Data: JazzCash or Easypaisa mobile wallet identifiers, bank account details (IBAN, bank name) for bank transfer withdrawals, USDT TRC20 wallet addresses, and transaction history. We do not store full card numbers or CVV codes.
• Account Activity Data: Login timestamps, IP addresses, device identifiers, browser type, session duration, game history, sports bet records, bonus usage, and account settings.
• Communications Data: Records of live chat conversations, email exchanges, and support tickets submitted to y111's customer support team.
• Technical Data: IP address, device type, operating system, browser version, and connection type (relevant for fraud prevention and platform optimisation on Pakistani mobile networks including Jazz, Zong, and Telenor).

2. How We Collect Personal Data

y111 collects personal data through the following means:

• Direct Provision: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account profile.
• Automated Collection: Technical and activity data collected automatically when you access or use the y111 platform, including through cookies, session tracking, and server logs.
• Payment Partners: Confirmation and transaction reference data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other integrated payment providers when processing your deposits and withdrawals.
• Third-Party Verification Services: Identity and age verification data received from KYC service providers used to authenticate documents submitted during the verification process.

3. How We Use Your Personal Data

y111 uses personal data for the following purposes:

• Account Management: Creating and maintaining your y111 account, authenticating your identity at login, and personalising your platform experience.
• Service Delivery: Processing deposits and withdrawals, settling bets and game outcomes, crediting bonuses, and providing access to all platform features.
• KYC & Compliance: Verifying your age and identity as required prior to processing withdrawals, and fulfilling obligations under applicable anti-money laundering and counter-financing of terrorism frameworks.
• Customer Support: Responding to queries, resolving disputes, and providing technical assistance in English and Urdu.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited activities.
• Responsible Gaming: Monitoring play patterns to identify signs of problem gambling behaviour, sending responsible gaming reminders, and administering self-exclusion requests.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience for Pakistani players.
• Communications: Sending account-related notifications, deposit confirmations, withdrawal updates, and, where you have opted in, promotional messages about offers and new features.

4. Legal Basis for Processing

y111 processes personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to deliver the Services described in our Terms & Conditions, including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable regulatory obligations, including KYC identity verification, transaction monitoring, and record-keeping requirements.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes such as promotional communications, where we have obtained your explicit consent. You may withdraw consent at any time by contacting support or adjusting your account notification settings.

5. Data Sharing & Disclosure

y111 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share personal data with the following categories of recipients only to the extent necessary:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard networks, and USDT TRC20 infrastructure providers, solely to process your financial transactions.
• KYC & Identity Verification Providers: Third-party document verification services used to authenticate CNIC and identity documents submitted during the verification process.
• Game Software Providers: Certified game developers (including Pragmatic Play, Evolution, PG Soft, JILI, Spribe, and Microgaming) may receive necessary session data to deliver game functionality. These providers operate under data processing agreements with y111.
• Legal & Regulatory Authorities: Where required by law, court order, regulatory direction, or lawful request from competent authorities, y111 will disclose personal data as required and permitted by applicable law.
• Professional Advisers: Lawyers, accountants, and auditors acting in a professional capacity who are bound by confidentiality obligations.

6. Data Retention

y111 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements:

• Active Accounts: All account data is retained for the duration of the active account relationship.
• Closed Accounts: Following account closure, y111 retains transaction records, KYC documentation, and account activity logs for a minimum of five (5) years in accordance with standard financial record-keeping practice and anti-money laundering compliance requirements.
• Self-Excluded Accounts: Data associated with self-excluded accounts is retained for a minimum of five (5) years to prevent re-registration and to honour the self-exclusion commitment.
• Underage Accounts: Data associated with accounts closed due to underage identification is retained only for the period required to complete the investigation and report to relevant authorities, after which it is securely deleted or anonymised.

7. Data Security

7.1 Technical Measures. y111 implements industry-standard technical security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive personal data at rest, and access controls limiting data access to authorised personnel only.

7.2 Organisational Measures. y111 staff with access to personal data are subject to confidentiality obligations. Access to personal data is restricted on a need-to-know basis. Internal data handling procedures are reviewed periodically.

7.3 Breach Notification. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, y111 will notify affected Players without undue delay, providing details of the breach, the likely consequences, and the measures taken or proposed to address it.

7.4 Player Responsibility. The security of your y111 account also depends on your own practices. You are responsible for keeping your login credentials confidential, using a strong password, enabling two-factor authentication (2FA), and logging out from shared devices. y111 is not liable for data breaches arising from your failure to follow reasonable security practices.

8. Cookies & Tracking Technologies

8.1 What We Use. y111 uses cookies and similar technologies (including session storage and local storage) to operate the platform, maintain your logged-in session, remember language and display preferences, and measure aggregate platform performance metrics.

8.2 Types of Cookies. We use strictly necessary cookies (required for the platform to function), functional cookies (storing your preferences), and analytics cookies (measuring anonymised usage patterns). We do not use third-party advertising or retargeting cookies.

8.3 Your Control. You can manage and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using core platform features including account login. Browser settings for cookie management vary by browser – consult your browser's help documentation for instructions.

9. Your Privacy Rights

Depending on applicable law and your circumstances, you may have the following rights in relation to your personal data held by y111:

• Right of Access: You may request a copy of the personal data y111 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Note that corrections to KYC-verified identity data may require re-submission of documentation.
• Right to Erasure: You may request deletion of your personal data in certain circumstances. This right is subject to y111's legal retention obligations, particularly regarding transaction and KYC records, and to the requirements of active self-exclusion measures.
• Right to Object: You may object to processing of your personal data for purposes based on legitimate interests, or for direct marketing purposes. Objecting to direct marketing will be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact y111 support via live chat or by email at [email protected]. y111 will respond to all data rights requests within 30 days. Requests may require identity verification before processing.

10. Children's Privacy

y111 is strictly an 18+ platform. We do not knowingly collect personal data from any individual under 18 years of age. The y111 registration process requires confirmation of age and is backed by KYC verification prior to any withdrawal. If y111 becomes aware that an account has been registered by or on behalf of a person under 18, the account will be immediately closed, all associated personal data will be deleted or anonymised (subject to any legal obligations to retain evidence of the underage access), and the matter will be referred to relevant authorities where required. If you believe that a minor may have registered an account at y111, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

y111 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, we will notify registered Players via the mobile number or email address associated with their Account, or via a prominent notice on the y111 platform, with a minimum of 14 days' notice before the new Policy takes effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the y111 platform following the effective date of any update constitutes your acceptance of the revised Policy.

12. Contact & Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data y111 holds about you, please contact our support team through the following channels:

• Live Chat: Available 24/7 in English and Urdu via the y111 platform.
• Email: [email protected]

We aim to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 days. Where a request involves complex data processing questions, we will keep you informed of progress.