Privacy Policy – y4444 Data Protection Statement

1 Introduction

y4444 ("the Platform", "we", "us", "our") operates the online gaming and sports betting service accessible at y4444.app. We are committed to protecting the privacy and personal data of all registered players, including the large proportion of our user base located across Pakistan – in cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and Multan.

This Privacy Policy ("Policy") describes the types of personal information y4444 collects, the purposes for which it is used, the conditions under which it may be shared, and the rights available to data subjects in connection with their personal information held by the platform.

By registering an account or continuing to use the y4444 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the y4444 Terms & Conditions.

2 Data Controller

y4444 is the data controller responsible for the personal data of players using the y4444.app platform. As data controller, y4444 determines the purposes and means by which personal data is processed.

For all data protection enquiries, subject access requests, or data deletion requests, players should contact y4444 using the details provided in Section 15 of this Policy. We aim to respond to all data-related requests within 30 calendar days of receipt.

3 Personal Data We Collect

y4444 collects personal data through several channels including account registration, identity verification, payment processing, platform usage, and communications with our support team. The categories of personal data we collect include:

y4444 does not collect sensitive personal data (as defined under applicable data protection frameworks) beyond what is strictly required for identity verification and responsible gaming compliance purposes.

4 How We Use Your Personal Data

Personal data collected by y4444 is used exclusively for the following purposes:

• Account Management: Creating and maintaining your y4444 account, verifying your identity, and managing account security including two-step SMS verification;
• Payment Processing: Facilitating PKR deposits via JazzCash, Easypaisa, and bank transfers, and processing withdrawal requests to verified payment accounts;
• Gaming Operations: Providing sports betting, live casino, slot, and fishing arcade services; settling bets; and maintaining game session records;
• Legal Compliance: Fulfilling obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) requirements;
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and administering self-exclusion requests;
• Customer Support: Responding to enquiries, resolving disputes, and processing complaints submitted via live chat or email;
• Platform Security: Detecting and preventing fraud, account takeover attempts, bonus abuse, and other unauthorised platform activity;
• Service Improvement: Analysing aggregated and anonymised usage data to improve platform performance and user experience.

5 Legal Basis for Processing

y4444 processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the services set out in the y4444 Terms & Conditions, including account operations, payment processing, and game provision;
• Legal Obligation: Processing required to comply with AML, KYC, and other applicable legal and regulatory requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent: Where we have obtained your express consent for a specific processing activity, for example optional marketing communications. Consent may be withdrawn at any time by contacting support.

6 Payment Data & Pakistani Mobile Wallets

When you make a deposit or withdrawal using JazzCash, Easypaisa, or a Pakistani bank account (HBL, UBL, Meezan Bank, Bank Alfalah), y4444 collects and processes the minimum financial data necessary to complete the transaction. This includes your wallet mobile number or bank account details and the transaction reference number provided by the payment provider.

Financial transaction records are retained for a minimum of five (5) years for compliance with AML obligations. USDT (TRC20) transaction data including wallet addresses and transaction hashes is similarly retained for compliance purposes.

Your financial data is shared only with the payment processors directly involved in executing your transaction and with regulatory authorities where legally required. It is not shared with any third party for commercial purposes.

7 Cookies & Technical Tracking

y4444 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and analyse usage patterns. The categories of cookies in use include:

• Strictly Necessary Cookies: Required for the platform to function, including session management and security tokens. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language, odds format, and interface layout settings.
• Analytics Cookies: Used to collect anonymised data about how players navigate the platform, helping us identify and fix usability issues. Analytics data is aggregated and does not identify individual users.

y4444 does not use third-party advertising or tracking cookies that monitor your behaviour across external websites. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies may affect platform functionality.

8 Data Sharing & Third Parties

y4444 shares personal data with third parties only where strictly necessary for the provision of services or to comply with legal obligations. Categories of third parties with whom data may be shared include:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT network validators – solely for transaction processing;
• Identity Verification Providers: KYC service providers engaged to verify CNIC documents and other identity materials;
• Game Software Providers: Providers such as JILI, PG Soft, Pragmatic Play, and Habanero receive the minimum session data required to operate games and settle results;
• Regulatory and Law Enforcement Authorities: Where required by law or court order, y4444 may disclose player data to relevant authorities;
• IT Infrastructure Providers: Hosting, cloud, and security providers operating under strict data processing agreements with y4444.

All third-party processors engaged by y4444 are subject to contractual data protection obligations consistent with this Policy. y4444 does not engage third parties located in jurisdictions with materially inadequate data protection standards without appropriate safeguards in place.

9 Data Retention

y4444 retains personal data only for as long as necessary for the purposes described in this Policy or as required by applicable law. Standard retention periods are as follows:

• Account Data: Retained for the duration of your account and for five (5) years following account closure;
• Transaction Records: Retained for a minimum of five (5) years for AML compliance;
• KYC Documents: Retained for five (5) years from the date of verification;
• Gaming / Bet History: Retained for five (5) years from the date of each transaction;
• Support Communications: Retained for three (3) years from the date of the interaction;
• Technical / Log Data: Typically retained for twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Data Security

y4444 implements technical and organisational measures designed to protect your personal data against unauthorised access, loss, destruction, or disclosure. Key security measures include:

• TLS 1.3 encryption for all data transmitted between your device and the y4444 platform;
• Encryption at rest for sensitive personal and financial data stored on y4444 servers;
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access player data;
• Regular security assessments and penetration testing of the platform infrastructure;
• Two-factor authentication for all internal administrative access to production systems.

11 Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by y4444:

• Right of Access: You may request a copy of the personal data y4444 holds about you (subject access request);
• Right of Rectification: You may request correction of inaccurate or incomplete personal data;
• Right of Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances;
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes.

To exercise any of these rights, submit your request to [email protected] with sufficient information to verify your identity. We aim to respond within 30 calendar days. Note that some rights may be limited by our legal obligations – for example, we cannot delete transaction records required for AML compliance within the mandatory retention period.

12 Third-Party Services & Links

The y4444 platform may reference or link to third-party game providers and payment services. These third parties operate under their own privacy policies and y4444 is not responsible for their data practices. When you interact directly with a third-party payment interface (such as the JazzCash or Easypaisa payment screens), you are subject to that provider's own privacy policy in respect of any data entered there.

y4444 recommends reviewing the privacy policies of any third-party services you use in connection with the platform, including your mobile wallet provider and bank.

13 Children & Minors

y4444 is strictly an 18+ only platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data to the platform, we will immediately suspend the account, delete the associated data, and reverse any transactions to the extent practicable.

Parents and guardians concerned about minors accessing online gaming platforms are encouraged to use device-level parental control software to restrict access to gambling-related websites.

14 Updates to This Privacy Policy

y4444 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via the platform notification system or SMS to your registered mobile number at least 7 days prior to the effective date of the change, where reasonably practicable.

The date of the most recent update is displayed at the top of this Policy. Your continued use of the y4444 platform following the effective date of any change constitutes acceptance of the updated Policy.

15 Contact & Data Requests

For all privacy-related enquiries, subject access requests, data deletion requests, or concerns about how y4444 handles your personal data, please contact us:

y4444 takes data protection obligations seriously. If you are unsatisfied with our response to a data protection concern, you may have the right to raise the matter with the applicable data protection supervisory authority in your jurisdiction.