At y3333, protecting the personal data of our players is a core obligation — not a footnote. This Privacy Policy explains in plain terms exactly what personal information y3333 collects from players across Pakistan, why we collect it, how we use and store it, and what your rights are as a data subject.
These six principles underpin every data handling decision y3333 makes. The full legal text follows in the detailed policy sections below.
y3333 collects only the personal data that is strictly necessary to operate your account, fulfil our KYC obligations under our international gaming licence, process your PKR transactions, and deliver the services you use. We do not collect data speculatively.
All personal data held by y3333 is stored on encrypted servers protected by 256-bit SSL, access-controlled environments, intrusion detection systems, and regular independent security audits. Your CNIC data, payment details, and account credentials are never stored in plain text.
y3333 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or any commercial entity for their own marketing purposes. Your information is yours — we use it to serve you, not to monetise you as a data product.
Where y3333 shares data with third parties — such as KYC verification providers, payment processors, or fraud prevention systems — this is strictly limited to what is necessary for that specific function, governed by data processing agreements, and never extends beyond those defined purposes.
You have the right to access, correct, delete, and object to the processing of your personal data held by y3333. Requests are processed within 30 days. These rights are not bureaucratic obstacles — they exist and we honour them.
y3333 retains personal data only for as long as required to fulfil the purposes for which it was collected, or as mandated by our international gaming licence and applicable anti-money-laundering regulations. Data is securely deleted or anonymised once the applicable retention period expires.
1.1 This Privacy Policy is published by y3333, the internationally licensed online gaming platform accessible at y3333.pro. References to "y3333," "we," "us," or "our" throughout this Policy refer to the licensed entity operating the y3333 platform and responsible for the processing of personal data described herein.
1.2 This Policy applies to all personal data processed by y3333 in connection with the registration, maintenance, and closure of player accounts on the y3333 platform, the provision of gaming services (including sports betting, live casino, slots, Jackpot Bingo, Nine, and all other y3333 products), the processing of PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and all communications between y3333 and its players.
1.3 This Policy applies to all players who access y3333 from any location within Pakistan — including Karachi, Lahore, Faisalabad, Islamabad, Peshawar, Multan, and all other cities — as well as any individual whose personal data is submitted to y3333 in connection with account registration or KYC verification.
1.4 This Policy should be read alongside y3333's Terms and Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with the y3333 platform.
Data Controller: y3333 acts as the data controller for all personal data collected from players in connection with their y3333 accounts. Where y3333 engages third-party service providers to process data on its behalf, those providers act as data processors under contractual data processing agreements that bind them to y3333's privacy standards.
y3333 collects the following categories of personal data from players during the lifecycle of their account:
3.1 Directly from you: The majority of personal data y3333 holds is provided by players themselves — at the point of account registration, during KYC verification, when making deposits or withdrawal requests, when contacting support, and when configuring account settings or responsible gaming tools.
3.2 Automatically during platform use: Certain technical and usage data is collected automatically when you access the y3333 platform, including through cookies, server logs, and session analytics tools. This collection is inherent to the operation of any web-based platform and is necessary for security monitoring, fraud detection, and platform performance optimisation.
3.3 From third-party verification services: Where y3333 uses third-party KYC and identity verification providers to validate the authenticity of CNIC documents, y3333 may receive verification results and risk flags from those providers. y3333 does not retain third-party verification data beyond the minimum period required for KYC compliance.
3.4 From payment processors: y3333 receives transaction confirmation data from payment processors (JazzCash, EasyPaisa, and banking partners) to reconcile deposits and withdrawals. Payment card numbers and full bank account details are processed directly by the relevant payment processor under their own security and data protection standards — y3333 does not store full card or account numbers on its own systems.
y3333 processes personal data only where there is a valid legal basis for doing so. The primary legal bases on which y3333 relies are as follows:
| Processing Activity | Legal Basis | Explanation |
|---|---|---|
| Account registration and identity verification | Contractual Necessity | Processing is necessary to enter into and perform the contract between y3333 and the player (the Terms and Conditions). |
| KYC / CNIC document verification | Legal Obligation | y3333 is required to conduct identity and age verification under the terms of its international gaming licence and applicable AML regulations. |
| Payment processing (deposits & withdrawals) | Contractual Necessity | Processing is necessary to perform the financial transaction services that form part of the player-y3333 contract. |
| Anti-money laundering monitoring | Legal Obligation | y3333 is obligated under its international gaming licence to monitor transactions and account activity for AML indicators and to report suspicious activity to relevant authorities. |
| Fraud prevention and security monitoring | Legitimate Interest | y3333 has a legitimate interest in protecting the security and integrity of its platform and protecting other players from fraud. |
| Responsible gaming monitoring | Legal Obligation + Legitimate Interest | Required by gaming licence. y3333 also has a legitimate interest in identifying and protecting players showing signs of gambling harm. |
| Marketing communications | Consent | Marketing communications are sent only to players who have given explicit consent. Consent may be withdrawn at any time without affecting account status. |
| Platform analytics and improvement | Legitimate Interest | y3333 has a legitimate interest in understanding how its platform is used in order to improve service quality and user experience for Pakistani players. |
5.1 y3333 uses the personal data it collects for the following purposes, strictly limited to those for which a valid legal basis exists:
We do not use your data for automated decision-making that produces legally significant effects without human review. Where automated systems flag an account for review (e.g., fraud detection or AML monitoring), a qualified y3333 compliance team member reviews the flag before any account action is taken.
6.1 y3333 does not sell, rent, or commercially share your personal data with third parties. The following limited categories of third-party sharing occur as necessary operational requirements:
y3333 uses regulated third-party KYC verification service providers to process CNIC document authenticity checks and age verification. These providers act as data processors under contractual agreements that restrict their use of your data to the specific verification function only. They are prohibited from using your data for any other purpose.
Transaction data is shared with payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK) to the extent necessary to process your specific deposit or withdrawal transaction. Each payment processor operates under its own regulatory oversight and data protection framework. y3333 is not responsible for the data handling practices of these independent processors.
y3333 may share transaction patterns and account identifiers with fraud prevention and AML screening services to fulfil its compliance obligations. Data shared for these purposes is governed by strict data processing agreements and is used exclusively for fraud and AML screening purposes.
Where live casino games and third-party slot titles are delivered by external game providers integrated into the y3333 platform, limited technical identifiers (non-personally-identifiable session tokens) may be shared with those providers to facilitate gameplay. y3333 does not share player names, CNIC data, or payment details with game providers.
y3333 will disclose personal data to regulatory authorities, law enforcement agencies, or courts when required to do so by a valid legal obligation — including disclosures required under its international gaming licence, AML reporting obligations, or in response to a lawful court order or regulatory investigation. y3333 will not challenge such disclosures where they are legally mandated.
No data is shared beyond these defined categories. y3333 strictly prohibits its staff from sharing player data with third parties for commercial purposes. Any member of the y3333 team found to have done so is subject to immediate disciplinary action and, where applicable, referral to relevant authorities.
7.1 y3333 uses cookies and similar tracking technologies on the y3333 platform for the following purposes:
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Essential Cookies | Maintain your login session, remember your language preferences, and enable core platform functionality. | Session / up to 30 days | No — required for platform operation |
| Security Cookies | Detect fraudulent login attempts, protect against cross-site request forgery, and flag suspicious session activity. | Session | No — required for platform security |
| Analytics Cookies | Understand how players navigate the y3333 platform, identify performance bottlenecks, and improve the user experience. | Up to 12 months | Yes — via cookie preferences |
| Preference Cookies | Remember your game display settings, notification preferences, and responsible gaming tool configurations. | Up to 12 months | Yes — via cookie preferences |
7.2 You can manage your cookie preferences through your browser settings or through the y3333 cookie preference centre accessible in your account settings. Disabling non-essential cookies will not affect your ability to access your account or play games on the y3333 platform.
7.3 y3333 does not use cookies to deliver targeted third-party advertising, and does not share cookie data with advertising networks or data brokers.
8.1 y3333 implements a comprehensive suite of technical and organisational security measures to protect player personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
8.2 While y3333 takes every reasonable precaution to protect your personal data, no internet-based system can be guaranteed to be 100% secure. You play an important role in keeping your account safe by maintaining a strong, unique password and enabling 2FA on your y3333 account.
Security tip for Pakistani players: Be aware of phishing attempts that impersonate y3333 via SMS or WhatsApp. y3333 will never ask for your password, OTP, or CNIC number via SMS, WhatsApp, or unsolicited phone calls. If you receive such a request, do not respond — contact y3333 support immediately via live chat on the official y3333.pro platform.
9.1 y3333 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by legal or regulatory obligation. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data (name, CNIC, DOB, contact details) | 5 years after account closure | International gaming licence obligation and AML regulatory requirement. |
| KYC documents (CNIC copies, selfies, proof of address) | 5 years after account closure | AML and gaming licence compliance mandate retention of identity verification records. |
| Financial transaction records | 7 years after transaction date | AML and financial regulatory record-keeping requirements mandate extended retention of transaction histories. |
| Game history and wagering records | 3 years after account closure | Required for dispute resolution and gaming licence audit purposes. |
| Support communications and correspondence | 3 years after last interaction | Retained to support dispute resolution and quality assurance review. |
| Responsible gaming records (limits, self-exclusion) | 5 years after account closure | Required by gaming licence to prevent circumvention of self-exclusion obligations. |
| Marketing consent records | Duration of account + 3 years | Retained to demonstrate consent compliance and manage opt-out requests. |
| Technical logs (IP, device, session data) | 12 months | Retained for security monitoring, fraud investigation, and platform performance purposes. |
9.2 Upon expiry of the applicable retention period, personal data is either securely deleted from y3333's systems or anonymised in a manner that permanently prevents re-identification of the data subject. Anonymised data may be retained indefinitely for aggregate statistical and analytical purposes.
10.1 As a y3333 player, you have the following rights with respect to your personal data held by y3333. To exercise any of these rights, contact y3333's data support team at [email protected] with the subject line "Data Rights Request," including your account username and a description of your request.
You have the right to request a copy of all personal data y3333 holds about you, along with information about how it is used. y3333 will provide this information within 30 days of a verified request, free of charge for the first request in any 12-month period.
If any personal data y3333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity verification may be required before corrections are made to sensitive data such as your registered name or CNIC details.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to y3333's legal retention obligations — data that must be retained under AML or gaming licence regulations cannot be deleted before the applicable mandatory retention period has expired.
You may request that y3333 restrict the processing of your personal data in certain circumstances — for example, while a correction request is being verified, or where you contest the legal basis on which y3333 is processing your data.
Where data is processed on the basis of consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request its transfer to another service provider where technically feasible.
You have the right to object to processing based on y3333's legitimate interests, including profiling for fraud prevention or responsible gaming purposes. y3333 will comply unless it can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing for direct marketing purposes — this will always be honoured.
Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time by contacting support or updating your account notification settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, and does not affect your account status.
Response timeframe: y3333 aims to respond to all data rights requests within 30 days. For complex or voluminous requests, this may be extended by a further 60 days with notice. If your request is refused, y3333 will provide written reasons and inform you of your right to escalate the matter.
11.1 y3333 operates a strict 21+ age policy. The y3333 platform is not directed at, intended for, or accessible to persons under the age of 21 years. y3333 does not knowingly collect personal data from individuals under 21.
11.2 y3333 employs age verification as a mandatory step in the account registration and KYC process. Date of birth is collected at registration and verified against CNIC documentation. Any account for which y3333 determines the holder is under 21 will be immediately closed, all bonus funds forfeited, and deposits returned in accordance with y3333's underage account closure policy as described in the Terms and Conditions.
11.3 If a parent or guardian believes that a person under 21 has submitted personal data to y3333 in connection with an account registration attempt, they should contact y3333 support immediately at [email protected]. y3333 will investigate the matter and delete any personal data submitted by an underage individual upon confirmation.
Parental advisory: y3333 strongly encourages parents and guardians in Pakistan to use family-safe internet filtering tools to prevent underage individuals from accessing online gaming platforms. y3333 supports parental controls as part of its commitment to responsible gaming and player protection.
12.1 As an internationally licensed gaming operator, y3333 may process or store personal data on servers located outside Pakistan. Where such cross-border transfers occur, y3333 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under y3333's licensing jurisdiction.
12.2 Safeguards used for cross-border data transfers include standard contractual clauses incorporated into data processing agreements with all third-party processors located in other jurisdictions, binding corporate rules where applicable, and transfer only to jurisdictions recognised by y3333's licensing authority as providing an adequate level of data protection.
12.3 Players may request information about the specific safeguards applicable to any cross-border transfer of their personal data by submitting a Data Rights Request as described in Section 10.
13.1 y3333 is subject to anti-money laundering (AML) and counter-terrorist financing (CTF) obligations under the terms of its international gaming licence. In fulfilment of these obligations, y3333 monitors player transactions and account activity for indicators of money laundering, terrorist financing, and other financial crimes.
13.2 Where y3333's AML monitoring systems identify suspicious activity, y3333 is legally obligated to file Suspicious Transaction Reports (STRs) with relevant financial intelligence authorities. y3333 is prohibited by law from informing ("tipping off") the subject of such a report that a report has been made. The filing of STRs constitutes a legal obligation that overrides normal privacy protections — y3333 cannot inform you if such a report has been made in connection with your account.
13.3 y3333 may freeze or suspend account operations and withhold balances where required to do so pending an AML investigation or in response to a regulatory instruction. During such periods, y3333 may be prohibited from disclosing the reason for the account restriction.
13.4 Players whose accounts are subject to AML scrutiny may be required to provide additional source-of-funds documentation as part of y3333's enhanced due diligence procedures. Failure to provide satisfactory documentation within a reasonable timeframe may result in account closure.
14.1 y3333 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law or regulation, changes in y3333's data processing practices, changes to the y3333 platform or its services, or recommendations from y3333's licensing authority or legal advisors.
14.2 Where an amendment materially affects how y3333 uses players' personal data, y3333 will provide advance notice by publishing a prominent notice on the y3333 platform and/or notifying players via their registered email address or mobile number. Non-material amendments — such as clarifications of existing practices or correction of typographical errors — may be made without advance notice.
14.3 The "Last Reviewed" date shown at the top of this Policy will be updated each time this Policy is amended. Continued use of the y3333 platform following the publication of an amended Policy constitutes acceptance of the revised terms. Players who do not accept material changes should contact y3333 support to discuss their options.
15.1 For all privacy-related enquiries, data rights requests, or complaints regarding y3333's handling of your personal data, please contact y3333 through the following channels:
Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
Live Chat: Available 24 hours a day, 7 days a week on the y3333 platform
Response Time: y3333 aims to acknowledge all privacy enquiries within 48 hours and provide a substantive response within 30 days.
15.2 If you are not satisfied with y3333's response to a privacy complaint, you have the right to escalate your complaint to the data protection supervisory authority of the jurisdiction in which y3333 holds its international gaming licence, or to the dispute resolution mechanism provided under y3333's licensing framework.
15.3 y3333 takes all privacy complaints seriously. Every formal privacy complaint received is logged, investigated by a qualified member of the y3333 compliance team, and responded to in writing. y3333 aims to resolve all privacy complaints fairly and transparently.
Play on a platform that takes data protection as seriously as game integrity. y3333 is licensed, regulated, and committed to safeguarding every Pakistani player's personal information. Questions about how we handle your data? Our support team is online 24/7.
Must be 21 years or older. y3333 operates under international gaming regulatory oversight. Play responsibly.