y111 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by y111 (hereinafter "y111", "we", "our", or "the Company") in connection with the y111 platform available at y111.biz, including all associated mobile-optimised interfaces, customer support channels, and promotional communications. It applies to all registered players, prospective players who browse the platform, and any individual who contacts y111 for support or enquiry purposes.

y111 acts as the data controller in respect of personal data collected directly through the platform. Where y111 shares data with third-party processors — such as payment processors like JazzCash or EasyPaisa, or identity verification partners — those parties act as data processors under contractual instruction from y111.

By accessing y111.biz or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data in accordance with its terms. This Policy should be read in conjunction with y111's Terms & Conditions.

y111 collects personal data through several channels — directly from you during registration and account use, automatically through platform technology as you interact with our site, and from third-party sources where necessary for regulatory compliance. The categories of personal data we collect are described below:

2.1 Registration & Account Data

• Full legal name (as it appears on your CNIC)
• Pakistani mobile number (used as primary login identifier)
• Date of birth (for mandatory 21+ age verification)
• Chosen username and account password (stored as an irreversible cryptographic hash)
• Residential address (collected at KYC stage)
• Email address (where provided during registration or account updates)

2.2 KYC Identity Verification Data

• CNIC number and a photographic copy of the front and back of your CNIC
• Selfie photograph for liveness verification (where required by our KYC partner)
• Proof of address documentation (where additionally required during enhanced due diligence)

2.3 Financial Transaction Data

• JazzCash and EasyPaisa wallet numbers used for deposits and withdrawals
• Bank account names, account numbers, and bank names for bank transfer transactions
• Transaction amounts, timestamps, reference numbers, and transaction status records
• Deposit and withdrawal history maintained for regulatory and AML compliance purposes

2.4 Gaming & Betting Activity Data

• Bets placed, including market selection, stake amount, odds accepted, and settlement result
• Games played, game titles, session durations, bet sizes, and game outcomes
• Bonus activations, wagering progress records, and promotion claim history
• Responsible gaming settings applied by the player (deposit limits, session alerts, exclusions)

2.5 Technical & Device Data

• IP address and general geolocation (country/city level) at each login
• Device type, operating system, browser type, and version
• Session timestamps, session duration, and pages visited within the platform
• Cookie identifiers and similar tracking technologies (see Section 6)

2.6 Communications Data

• Content of customer support conversations via live chat or email
• Complaint records and formal dispute communications
• Marketing preference records and opt-in/opt-out history

y111 uses the personal data it collects exclusively for the following documented purposes:

y111 does not use personal data for any purpose not listed above. Where a new processing purpose arises that materially differs from those described here, y111 will update this Privacy Policy and, where required, seek fresh consent from affected users.

y111 processes personal data on one or more of the following legal grounds, each of which is described in relation to the relevant processing activity in the table above:

• Contract Performance: Processing is necessary to provide the y111 service you have registered for and to fulfil obligations arising from our Terms & Conditions — including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC/AML requirements imposed by y111's gaming license, responsible gaming obligations, and responses to lawful requests from competent authorities.
• Legitimate Interests: y111 processes certain technical and analytics data on the basis of legitimate business interests — including fraud prevention, platform security, and improving the quality of our services — where those interests are not overridden by your privacy rights.
• Consent: Where processing is based on consent — most notably for direct marketing communications — you retain the right to withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

y111 does not sell or commercially trade your personal data. Data is shared with third parties only in the specific circumstances described below, and exclusively with parties who provide adequate contractual guarantees regarding data protection standards:

5.1 Payment Processors

Transaction data is shared with payment processors — including JazzCash, EasyPaisa, Raast/1LINK, HBL, UBL, Meezan Bank, SadaPay, Nayapay, and other supported PKR payment providers — to the extent necessary to process deposits, withdrawals, and refunds. These parties receive only the data required for payment execution and are prohibited from using it for any other purpose.

5.2 KYC & Identity Verification Partners

CNIC documentation and related identity data is shared with y111's contracted KYC verification partners for the purpose of age confirmation and identity authentication prior to withdrawal processing. KYC partners are bound by strict data processing agreements and are not permitted to retain documentation beyond the period required for verification completion.

5.3 Game Software Providers

Certain technical data (such as anonymised player session identifiers) may be shared with game providers — including PG Soft, Pragmatic Play, Evolution Gaming, and other licensed studios — to the minimum extent necessary for game integrity and certification auditing purposes.

5.4 Regulatory & Law Enforcement Authorities

y111 may be required by law, court order, or regulatory mandate to disclose personal data to relevant governmental, regulatory, or law enforcement authorities. y111 will comply with all lawful requests and will notify affected users where legally permitted to do so.

5.5 Professional Advisors

Legal advisors, auditors, and compliance consultants engaged by y111 may access personal data on a confidential, need-to-know basis in connection with the provision of their professional services. All such advisors are subject to professional confidentiality obligations.

y111 uses cookies and similar browser-based technologies to operate the platform, improve user experience, and monitor security. The following categories of cookies are deployed on y111.biz:

• Strictly Necessary Cookies: Essential for platform functionality. These cookies maintain your login session, remember your language settings, and enable core security features. They cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how players navigate the platform — which pages are visited, how long sessions last, and where errors occur. This data is used exclusively to improve platform design and performance.
• Functional Cookies: Remember your platform preferences — such as display settings and responsible gaming configuration — to personalise your y111 experience between sessions.
• Security Cookies: Used to detect and prevent fraudulent login attempts, identify unusual session behaviour, and enforce account security measures such as re-authentication after extended inactivity.

y111 does not deploy advertising cookies or allow third-party advertising networks to set cookies via y111.biz. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair y111 platform functionality and may prevent you from accessing your account.

y111 is operated from and licensed in a jurisdiction outside Pakistan. Your personal data may therefore be transferred to, stored in, and processed in countries other than Pakistan, including countries where y111's servers, KYC partners, or game providers are located.

Where personal data is transferred internationally, y111 ensures that appropriate safeguards are in place to protect your data to the same standard described in this Privacy Policy, including:

• Contractual data processing agreements incorporating standard data protection clauses with all international data processors.
• Technical and organisational security measures — including encryption at rest and in transit — applied uniformly regardless of where data is stored.
• Transfers to game providers (Evolution, Pragmatic Play, PG Soft, etc.) are limited to anonymised technical session data only; no personally identifiable financial or CNIC data is shared with game providers.

y111 retains personal data for no longer than is necessary for the purpose for which it was collected, subject always to overriding legal retention obligations. The following retention periods apply:

At the end of applicable retention periods, personal data is either permanently and securely deleted from y111 systems or irreversibly anonymised such that it can no longer be linked to an individual. y111 does not retain identifiable personal data beyond regulatory minimums for general commercial purposes.

y111 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security controls include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and y111's servers is encrypted using TLS 1.2 or higher. The y111 platform enforces HTTPS on all pages without exception.
• Encryption at Rest: Sensitive personal data stored on y111 servers — including CNIC data, financial records, and account credentials — is encrypted at the database storage level using AES-256 encryption.
• Password Security: Account passwords are stored as salted cryptographic hashes using industry-standard algorithms. y111 does not store passwords in any reversible form and cannot retrieve your original password.
• Access Controls: Access to personal data within y111's organisation is restricted to staff and systems with a documented operational need. Access permissions are reviewed regularly and revoked immediately upon role change or staff departure.
• Anomaly Detection: y111 operates automated security monitoring to detect unusual login patterns, suspicious transaction activity, and other indicators of potential account compromise, with alerts triggering immediate investigation.
• Penetration Testing: y111's platform and data infrastructure are subject to periodic security assessments, including penetration testing by independent security specialists.
• Incident Response: y111 maintains a documented data breach response procedure. In the event of a confirmed breach affecting personal data, y111 will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

You hold the following rights in respect of your personal data held by y111. These rights can be exercised by contacting y111's support team at [email protected], quoting your registered mobile number and account username for identity verification:

y111 will respond to all verified privacy rights requests within 30 calendar days. Where a request requires additional time due to complexity or volume, y111 will notify you within the initial 30-day period and provide an expected resolution date, not exceeding 90 days in total.

y111 is an adult gaming platform and is strictly prohibited for use by persons under the age of 21 years. y111 does not knowingly collect personal data from individuals under 21. Our mandatory KYC process — requiring CNIC documentation confirming date of birth — is specifically designed to prevent underage access to the platform.

If y111 becomes aware that personal data has been collected from a person under 21, whether through registration misrepresentation or any other means, the following actions will be taken immediately:

• The account will be permanently closed and access revoked.
• All personal data associated with the account will be deleted to the maximum extent permitted by regulatory obligations.
• Any balance remaining in the account will be handled in accordance with applicable regulatory requirements and will not be paid out.
• The matter may be referred to the relevant regulatory authority if circumstances warrant.

y111 may send promotional communications — including bonus offers, new game announcements, PSL betting promotions, and platform updates — to registered players who have provided consent to receive such communications. Marketing communications are sent via SMS to your registered Pakistani mobile number and/or email where provided.

Participation in y111 promotional communications is entirely voluntary. You may withdraw consent to marketing communications at any time by:

• Updating your communication preferences in Account Settings under "Notification Preferences".
• Replying STOP to any SMS marketing message received from y111.
• Contacting y111 support at [email protected] with the subject line "Unsubscribe from Marketing".

Withdrawal of marketing consent takes effect immediately. y111 may continue to send transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — regardless of marketing preferences, as these are necessary for account service delivery and cannot be opted out of while the account remains active.

The y111 platform may contain references to or interfaces with third-party services, including payment processors (JazzCash, EasyPaisa), game providers (Evolution, Pragmatic Play, PG Soft), and other service partners. These third parties operate their own independent platforms and privacy policies, over which y111 has no control and for which y111 accepts no responsibility.

When you interact with a third-party service — for example, completing a JazzCash payment — your interaction is governed by that third party's terms of service and privacy policy, not this y111 Privacy Policy. y111 recommends reviewing the privacy policies of any third-party service you interact with in connection with your y111 account.

y111 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or platform services. Material changes — those that substantially affect how your personal data is used or the rights available to you — will be communicated via a prominent notice on the y111 platform and/or notification to your registered contact details, with at least 14 days' advance notice before taking effect.

Minor or administrative changes that do not materially affect your privacy rights may be updated without advance notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision, whether material or administrative. Your continued use of the y111 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

y111 recommends bookmarking this page and reviewing it periodically, particularly following receipt of any change notification from y111. Previous versions of this Policy are available upon request from [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or believe that y111 has not handled your personal data in accordance with this Policy, please contact our Data Protection team using the details below:

If y111's response to a privacy complaint does not resolve your concern to your satisfaction, you may escalate the matter to the relevant regulatory authority under y111's operating license jurisdiction. Details of the relevant regulatory body are available upon request from y111 customer support.

This Privacy Policy was last reviewed and updated on 1 January 2026. y111 thanks you for taking the time to read and understand how we protect your personal data.