y111 Privacy Policy – How We Protect Your Data in Pakistan

y111 is an online betting and casino platform accessible at y111.im. y111 is the data controller for personal data collected through the platform. As data controller, y111 is responsible for determining how and why personal data is processed and for ensuring that processing is carried out lawfully and transparently.

y111 serves players in Pakistan, operating entirely in Pakistani Rupees and offering products across cricket betting, football betting, esports betting, crash games, the Aviator game, live casino, and promotions. All data processing described in this Policy relates to the operation of these services for Pakistani players.

If you have any questions about this Policy or about how y111 handles your data, the primary contact is:

y111 collects personal data in three main ways: information you provide directly, data generated automatically when you use the platform, and information received from third parties such as payment processors and identity verification services.

y111 does not collect sensitive personal data such as biometric data, political opinions, or religious beliefs. The identity verification data collected (CNIC, passport) is used strictly for age and identity verification and is handled with heightened security controls.

y111 does not collect data without a clear purpose. Every category of data collected has a specific reason tied to providing, operating, or improving the y111 service. The primary purposes are set out below.

• Account creation and management: Registration data is needed to create your y111 account, verify your identity, and maintain your account throughout its lifetime. Without this data, y111 cannot provide the service.
• Processing bets and transactions: Financial and payment data is processed to handle deposits, settle bets, and pay out winnings in PKR. This processing is essential to the core service y111 provides.
• Identity and age verification: y111 is obligated to verify that every player is at least 18 years old and is who they claim to be. This is required before processing withdrawals and may be required at other stages of account use.
• Fraud prevention and security: Technical and behavioural data is used to detect and prevent fraud, money laundering, multiple account creation, bonus abuse, and other activities that violate y111's Terms and Conditions. This protects honest players as well as the platform.
• Responsible gaming monitoring: Behavioural data — deposit patterns, session length, and betting frequency — is used to identify players who may be showing signs of problematic gambling. This data powers the responsible gaming tools available on y111.
• Customer support: Communications and account data are used to resolve support queries efficiently. y111 support cannot assist without access to relevant account information.
• Platform improvement: Aggregated, anonymised usage data is analysed to understand how y111 is used and to improve the product. This does not involve identifying individual players.
• Legal and regulatory compliance: y111 may be required to retain and share certain data with authorities as part of legal obligations. This is limited to what is specifically required and does not extend to routine information sharing.

y111 does not sell, rent, or share personal data for commercial purposes. Data is shared with third parties only where it is operationally necessary or legally required. The categories of third party who may receive relevant data are described below.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard networks receive transaction data to process deposits and withdrawals. They receive only what is required to process the specific transaction.
• Identity verification providers: When y111 requests identity documents, a certified verification partner processes these documents to confirm their validity. The provider receives document images and returns a verification outcome — they do not retain documents beyond what is required for this purpose.
• Game and platform providers: Live casino and crash game providers — who supply certified game titles running on y111 — may receive a session identifier to authenticate your game session. They do not receive your full account details.
• Fraud detection services: Technical data such as IP addresses, device fingerprints, and session patterns may be processed by fraud prevention systems to identify and block fraudulent activity.
• Legal authorities: Where required by applicable law or in response to a valid legal request, y111 may share account and transaction data with regulatory bodies or law enforcement agencies. y111 will comply with lawful requests but will not share data beyond what is specifically required.

y111 uses cookies and similar tracking technologies to provide platform functionality, maintain your session, and understand how players use the site. A cookie is a small data file stored on your device by your browser.

y111 does not use cookies for advertising targeting or to track your activity across third-party websites. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent y111 from functioning correctly and you will not be able to log in or place bets.

y111 implements technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include the following.

• TLS encryption: All data in transit between your device and y111 is encrypted using TLS. This includes registration data, login credentials, payment information, and all betting activity.
• Encrypted storage: Sensitive data — including identity documents and payment details — is stored in encrypted form. Encryption keys are managed separately from the data they protect.
• Access controls: Internal access to player data is restricted to authorised personnel who require it to perform their job function. Access is granted on a least-privilege basis and is logged.
• Password security: Account passwords are stored using one-way hashing. y111 employees cannot see your password — only you know it. If you forget your password, it must be reset rather than retrieved.
• Regular security reviews: y111 conducts periodic reviews of its data security practices and responds to identified vulnerabilities promptly.

While y111 takes security seriously, no online platform can guarantee absolute security. Players should also take steps to protect their own account — use a strong, unique password, do not share login credentials, and log out from shared devices. If you believe your account has been compromised, contact support@y111.im immediately.

y111 retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. Retention periods vary by data type.

• Account and registration data: Retained for the duration of your account and for a minimum of five years after account closure, to meet legal and dispute resolution obligations.
• Transaction records: Financial transaction records — deposits, bets, and withdrawals — are retained for a minimum of five years for fraud prevention and regulatory purposes.
• Identity verification documents: Retained for the minimum period required by applicable anti-money laundering and know-your-customer obligations. Documents are deleted securely once this period expires.
• Support communications: Chat logs and emails are retained for up to two years, or longer if they relate to an unresolved dispute.
• Behavioural and analytical data: Aggregated analytics data — which does not identify individual players — may be retained for longer periods for platform improvement purposes.

When data is no longer required and retention obligations have been met, y111 securely deletes or irreversibly anonymises the data so that it can no longer be linked to an individual.

As a y111 player, you have the following rights in relation to your personal data. These rights are genuine and y111 will act on them. To exercise any right, contact support@y111.im with the subject line "Privacy Request" and describe what you are requesting. y111 will respond within 14 days.

y111 is strictly an adults-only platform and does not knowingly collect personal data from individuals under the age of 18. y111's products — including all betting, casino, and crash game services — are intended exclusively for adults.

Parents and guardians who share devices with minors are advised to use browser-level parental controls and to keep y111 login credentials private. y111 is not liable for unauthorised access by minors where the registered adult failed to secure their account credentials. Responsible Gaming tools, including self-exclusion, are available to all registered adult players on the Responsible Gaming page.

y111 may update this Privacy Policy from time to time to reflect changes in how the platform operates, the data it collects, or applicable legal requirements. When changes are made, the "last updated" date at the top of this page is revised.

For significant changes that materially affect your rights or how y111 uses your data, y111 will make reasonable efforts to notify registered players via email or an in-platform notification before the change takes effect. For minor updates — such as clarifications of existing practices — no prior notification will be sent, but the updated policy will be available on this page immediately.

Continued use of y111 after a Privacy Policy update constitutes your acceptance of the revised Policy. If you do not accept a change, you should stop using the platform and request account closure and data handling information by contacting support@y111.im.

If you have any questions, concerns, or requests related to this Privacy Policy or to how y111 handles your personal data, please get in touch using the details below. y111 takes privacy seriously and will respond to every legitimate enquiry.

When contacting y111 about a privacy matter, please include your registered email address or mobile number so that we can locate your account. For data access or deletion requests, identity verification may be required before y111 can act on the request.