1Who We Are
This Privacy Policy applies to y 333, an online casino and sports betting platform accessible at y333.run. When this policy refers to "y 333", "we", "our", or "us", it means the operators of the y 333 platform. When it refers to "you", "your", or "player", it means any individual who accesses, registers on, or uses the y 333 platform in any capacity.
y 333 is the data controller for the personal information you provide to us through the platform. This means we are responsible for determining how and why your personal data is processed. We take this responsibility seriously and have put this Privacy Policy in place to explain our practices clearly.
The y 333 platform is designed specifically for players in Pakistan and all our privacy practices are designed with that audience in mind. If you have any questions about this policy or about how y 333 handles your data, you can reach our data contact at support@y333.run at any time.
2Personal Data We Collect
y 333 collects only the personal data that is necessary for the operation of the platform, compliance with legal obligations, and delivery of a safe and secure gaming experience. The categories of data we collect are described below.
Registration and Account Data
When you create a y 333 account, you provide us with your full name, mobile number, date of birth, and a password. This data is used to create and manage your account and to verify that you meet the age requirement of 18 years or over.
Identity Verification Data
For the purposes of Anti-Money Laundering (AML) compliance and responsible gaming obligations, y 333 may request copies of identity documents including your CNIC (Computerised National Identity Card), proof of address, and evidence of your payment method. This data is collected only when required by our compliance processes.
Financial Transaction Data
y 333 records details of every deposit and withdrawal on your account, including the amount, method (e.g. Easypaisa, JazzCash, IBFT), timestamp, and reference numbers provided by your payment provider. This data is required for payment processing and financial compliance purposes.
Gaming Activity Data
y 333 logs your betting and gaming activity — including which games you played, bet amounts, game outcomes, session duration, and in-play events on sports bets. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvements.
Technical and Device Data
When you access y 333, our systems automatically record certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This data is used for security, fraud prevention, and service optimisation.
Data categories we collect at y 333:
3How We Collect Your Data
y 333 collects your personal data through the following channels:
- Directly from you: When you register an account, complete your profile, submit identity documents, make deposits or withdrawals, contact our support team, or respond to any communication from y 333.
- Automatically through your use of the platform: Our servers and analytics systems record technical data each time you access y 333 — including page visits, game sessions, bet placements, login events, and device information.
- From third-party service providers: y 333 may receive data about you from identity verification services, payment processors, and fraud prevention systems that we use as part of operating the platform.
- Through cookies and similar technologies: y 333 uses cookies and similar tracking technologies on the platform. See Section 7 for full details of our cookie practices.
y 333 does not purchase personal data from data brokers or marketing list providers. All data we hold about you comes from your direct interaction with the y 333 platform or from the technical operation of our services.
4Why We Use Your Personal Data
y 333 uses your personal data for specific, defined purposes. We do not process your data for purposes beyond those listed here without your explicit consent or a clear legal requirement to do so.
5Legal Basis for Processing
y 333 processes your personal data on one or more of the following legal bases depending on the specific processing activity:
- Contract performance: Much of our processing is necessary to perform the contract between y 333 and you as a registered player — specifically, to operate your account, process transactions, and deliver gaming services.
- Legal obligation: Certain processing activities — particularly identity verification (KYC) and transaction monitoring — are required by applicable financial regulations and AML obligations that y 333 is subject to.
- Legitimate interests: y 333 processes some data on the basis of our legitimate interests as a business — for example, fraud detection, security monitoring, and platform analytics — where those interests do not override your rights and freedoms.
- Consent: Where y 333 processes your data for purposes that are not strictly necessary for account operation — such as optional marketing communications, if offered — we will seek your explicit consent first. You may withdraw consent for such processing at any time without affecting the processing carried out before withdrawal.
6Sharing Your Personal Data
y 333 does not sell your personal data to any third party, ever. We share data only where it is necessary to deliver our services, meet legal requirements, or protect the security of the platform. The third parties who may receive your data in limited, defined circumstances are:
- Payment processors: When you make a deposit or withdrawal on y 333, your transaction data is shared with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, bank partners, or card processors — solely to complete the transaction.
- Identity verification services: Where KYC verification is required, y 333 uses third-party verification platforms to check identity documents. These providers process your data only for the purpose of the verification and are contractually bound by confidentiality obligations.
- Game providers: The casino game studios and live dealer providers whose games are available on y 333 may receive limited technical session data to deliver their game content to you. This typically includes session tokens, stake amounts, and game outcome data. No unnecessary personal data is shared.
- Fraud prevention and AML services: y 333 uses specialist fraud detection and anti-money laundering tools that may process account data to identify suspicious patterns.
- Legal and regulatory authorities: y 333 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or a valid legal order. We will notify you of such a disclosure where legally permitted to do so.
All third parties who receive personal data from y 333 are required to handle it in accordance with applicable data protection standards. y 333 does not transfer personal data to parties who do not provide adequate data protection guarantees.
7Cookies and Tracking Technologies
y 333 uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored by your browser when you visit a website. Cookies help y 333 remember your preferences, keep your session active, and analyse how the platform is used.
Types of Cookies Used by y 333
- Essential cookies: These are necessary for the y 333 platform to function. They maintain your login session, remember your language preference, and enable core features like deposit and betting functions. You cannot opt out of essential cookies without ceasing to use the platform.
- Security cookies: Used to detect and prevent fraudulent activity on your y 333 account — including cross-site request forgery protection and session integrity checks.
- Analytics cookies: y 333 uses anonymised analytics tools to understand how players navigate the platform — which pages are visited, where sessions start and end, and how features are used. This data is aggregated and does not identify individual players.
- Preference cookies: These remember settings you have chosen on y 333, such as display preferences, so you do not need to reconfigure them on each visit.
You can control cookie settings through your browser's privacy settings. Blocking certain cookies may affect the functionality of the y 333 platform. Essential and security cookies cannot be disabled without impacting your ability to use the service.
8How y 333 Protects Your Data
y 333 takes the security of your personal data seriously and implements technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:
- Encryption in transit: All data transmitted between your device and y 333's servers is encrypted using TLS (Transport Layer Security). This applies to all platform interactions including login, deposits, withdrawals, and game sessions.
- Encryption at rest: Sensitive personal data stored on y 333's systems — including identity documents and financial records — is encrypted at rest using industry-standard encryption protocols.
- Access controls: Access to personal data within y 333's systems is restricted on a need-to-know basis. Staff and systems can only access the data required for their specific role. All access is logged and monitored.
- Regular security assessments: y 333 conducts periodic reviews of its security posture including vulnerability assessments of the platform infrastructure.
- Secure payment processing: y 333 does not store full payment card details. Card payments are processed by PCI-DSS compliant payment processors who handle card data in accordance with the Payment Card Industry Data Security Standard.
Despite these measures, no online platform can guarantee absolute security. If you believe your y 333 account has been compromised, please contact our support team immediately at support@y333.run so we can act quickly to secure your account.
9Data Retention
y 333 retains your personal data for as long as your account is active and for a defined period after account closure as required by our legal and regulatory obligations. The specific retention periods that apply are:
- Account and identity data: Retained for the duration of your active account on y 333, plus a minimum of five years after account closure. This retention period is required by AML regulations and financial record-keeping obligations.
- Transaction records: Financial transaction records are retained for a minimum of five years from the date of the transaction in accordance with financial compliance requirements.
- Gaming activity data: Betting and gaming session records are retained for a minimum of three years to support dispute resolution and responsible gaming obligations.
- Customer support communications: Support tickets and related communications are retained for three years from the date of resolution.
- Technical and device data: IP address logs and session data are retained for up to twelve months for security and fraud investigation purposes.
After the applicable retention period expires, y 333 will either securely delete your data or anonymise it so that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for aggregate analytical purposes.
10Your Data Rights
As a y 333 player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting y 333 support at support@y333.run. We will respond to all data rights requests within thirty days of receipt.
Exercising your data rights will not affect your ability to use y 333 unless the right exercised — for example, requesting deletion of data that is needed to maintain your account — makes it impossible for y 333 to continue providing services to you. In such cases, y 333 will notify you before taking action.
11Children's Privacy
y 333 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Registration on y 333 requires confirmation of age and we actively verify age through our KYC processes where required.
If you believe a person under the age of 18 has created an account on y 333 or provided us with personal information, please contact us immediately at support@y333.run. Upon confirmation, we will promptly close the account, delete all associated personal data, and reverse any financial transactions where possible.
We also strongly encourage parents and guardians to use parental control tools to restrict access to online gaming platforms as part of responsible digital supervision of children in their care.
12Updates to This Privacy Policy
y 333 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in the services we provide, or changes in applicable law. When we make material changes, we will notify registered players by email to the address on file with your y 333 account, or via a prominent notice displayed when you next log in to the platform.
The date of the most recent update to this policy is shown at the top of the page. We encourage you to review this policy periodically so you are always aware of how your personal data is being handled. Continued use of y 333 following any update constitutes acceptance of the revised policy.
Where changes to this policy require your fresh consent — for example, where we intend to use your data for a new purpose that requires consent — we will seek that consent explicitly before beginning the new processing.
13How to Contact y 333 About Privacy
If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data by y 333, please contact our support team using the details below. We take all privacy queries seriously and aim to provide a substantive response within five business days of receiving your message.
When submitting a data rights request or privacy query, please include your registered mobile number or account reference so we can locate your account quickly. For data access or deletion requests, we may ask you to verify your identity before we action the request — this is to protect you against someone else requesting your data without your knowledge.