hy888 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to all personal data collected and processed by hy888 in connection with your use of the hy888 website (hy888.onl), the hy888 Casino platform, the sportsbook, live dealer services, slot games, and all related account management, payment, and customer support functions.

This Policy applies to all current and former registered players, prospective players who have visited or submitted information on the hy888 platform, and individuals who communicate with hy888 via live chat, email, or any other supported channel. By using any part of the hy888 platform, you confirm that you have read this Privacy Policy and understand how your data will be handled.

For the purposes of this Privacy Policy, the data controller is hy888, the operator of the online gaming platform accessible at hy888.onl. hy888 operates under an international gaming licence and is subject to regulatory oversight that includes requirements regarding the processing and protection of player personal data.

hy888 has designated a responsible team for data protection matters. Any queries, data access requests, or complaints relating to the handling of your personal data should be directed to the hy888 support team as described in Section 14 of this Policy.

hy888 collects and processes the following categories of personal data, limited to what is necessary for the specific purposes described in Section 5 of this Policy:

hy888 collects personal data through the following methods:

• Direct submission — information you provide during account registration, KYC verification, cashier transactions, or when contacting hy888 support
• Automated technical collection — data collected automatically when you access the hy888 platform, including IP addresses, device identifiers, browser data, and session logs
• Cookies and similar technologies — as described in Section 9 of this Policy
• Payment processors — transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processing partners in connection with your deposits and withdrawals
• Identity verification services — data received from third-party KYC and fraud prevention service providers engaged by hy888 for compliance purposes

hy888 processes your personal data as necessary for the performance of the contractual relationship between hy888 and you as a registered player. This includes: creating and managing your hy888 account; processing deposits and withdrawals; delivering casino and sportsbook services; administering bonuses and promotions; and providing customer support.

hy888 processes personal data as required to comply with its obligations under its international gaming licence, including: Know Your Customer (KYC) identity verification; Anti-Money Laundering (AML) screening and monitoring; age verification to ensure compliance with the 21+ access restriction; and reporting obligations to regulatory authorities.

Where not overridden by your rights, hy888 processes certain data on the basis of legitimate interests, including: fraud detection and prevention; platform security and integrity monitoring; improving hy888 services based on anonymised usage analytics; and responsible gaming monitoring to identify and support players displaying signs of problem gambling behaviour.

Where hy888 relies on your consent to process personal data — for example, in relation to receiving marketing communications — you have the right to withdraw that consent at any time by updating your communication preferences in your hy888 account settings or by contacting hy888 support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

hy888 does not sell, rent, or otherwise commercially transfer your personal data to third parties. hy888 may share your data with the following categories of recipients only where strictly necessary:

• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processing partners, solely to facilitate your deposit and withdrawal transactions
• KYC and identity verification providers — third-party services engaged by hy888 to perform identity verification and fraud screening as required by our regulatory obligations
• Game content providers — certified casino game developers may receive anonymised session data necessary for game delivery and technical support; they do not receive your personal identity information
• Regulatory authorities — hy888's licensing authority and any law enforcement or regulatory body where hy888 is legally required or compelled to disclose player data
• Security and fraud prevention services — service providers engaged to protect the integrity and security of the hy888 platform and its players

All third-party service providers who receive hy888 player data are bound by contractual data protection obligations and are prohibited from using your data for any purpose beyond the specific service they provide to hy888.

hy888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. The following general retention principles apply:

• Active accounts — your personal data is retained for the duration of your active hy888 account relationship
• Closed accounts — following account closure, hy888 retains player records including identity documents, transaction history, and gaming logs for a minimum of five (5) years from the date of closure, as required by our regulatory obligations
• AML and KYC records — identity verification documents and AML screening records are retained for the minimum period mandated by our licensing authority, which may extend beyond general account retention periods
• Support communications — live chat transcripts and email correspondence are retained for a period of two (2) years from the date of the last communication for quality assurance and dispute resolution purposes

Upon expiry of the applicable retention period, hy888 will securely delete or anonymise your personal data in accordance with our data destruction procedures.

hy888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and hy888 servers
• AES-256 encryption for personal and financial data stored at rest on hy888 infrastructure
• Two-factor authentication (2FA) available on all hy888 player accounts
• Continuous real-time security monitoring with automated anomaly detection on account activity
• Strict internal access controls — hy888 staff access to player data is limited to what is necessary for their specific role and is subject to access logging and periodic review
• Regular security assessments and penetration testing of hy888 platform infrastructure
• Separate storage of player funds from hy888 operational accounts

Whilst hy888 takes all reasonable precautions to protect your personal data, no digital transmission or storage system is entirely immune from breach. In the event of a data security incident that materially affects your personal data, hy888 will notify affected players as required by applicable regulatory obligations.

The hy888 website and platform use cookies and similar tracking technologies to provide essential functionality, improve the user experience, and support our security and analytics capabilities. The following categories of cookies are used by hy888:

These cookies are strictly necessary for the hy888 platform to function and cannot be disabled without breaking core functionality. They include session management cookies that maintain your login state, security tokens, and geographic restriction enforcement cookies. You cannot opt out of essential cookies without ceasing use of the hy888 platform.

hy888 uses first-party analytics cookies to collect anonymised information about how players interact with the platform — including pages visited, session duration, and navigation patterns. This data is used exclusively to improve the hy888 player experience and platform performance. These cookies do not collect personally identifiable information.

Functional cookies remember your preferences — such as language settings, display preferences, and previously selected game categories — to provide you with a more personalised hy888 experience across sessions.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the hy888 platform, including login persistence and game lobby personalisation.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to the personal data that hy888 holds about you:

• Right of Access — you may request a copy of the personal data hy888 holds about your account and how it is being used
• Right to Rectification — you have the right to have inaccurate personal data corrected and incomplete data completed
• Right to Erasure — subject to our legal retention obligations, you may request deletion of your personal data following account closure
• Right to Restriction — you may request that hy888 restrict processing of your personal data in certain circumstances
• Right to Object — you may object to processing based on legitimate interests; hy888 will cease such processing unless it can demonstrate compelling grounds that override your interests
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing

To exercise any of the above rights, please contact hy888 support via live chat or email at [email protected]. hy888 will respond to data rights requests within 30 days. Requests may require identity verification before processing.

The hy888 platform is strictly for individuals aged 21 years and above. hy888 does not knowingly collect or process personal data relating to individuals under the age of 21. If hy888 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.

If you believe that hy888 has inadvertently collected personal data from a person under the minimum age requirement, please contact our support team immediately. hy888 takes age restriction enforcement extremely seriously and operates age verification procedures in accordance with our regulatory licence obligations.

hy888 may transfer your personal data to servers or service providers located outside Pakistan where this is necessary for the delivery of hy888 services. Such transfers are made in accordance with the requirements of hy888's international gaming licence and applicable data protection standards.

Where personal data is transferred to third-party service providers outside Pakistan, hy888 ensures that appropriate contractual safeguards are in place to maintain the protection of your data at a standard equivalent to that described in this Policy. These safeguards include data processing agreements with binding data protection obligations on all recipient parties.

hy888 reserves the right to update or revise this Privacy Policy at any time. Any material changes to the Policy will be communicated to registered players via in-platform notification or email prior to the changes taking effect. The updated Policy will also be published on this page with a revised effective date at the top of the document.

Your continued use of the hy888 platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with material changes to this Policy, you should cease using the hy888 platform and may request account closure in accordance with the hy888 Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by hy888, please use the following contact channels:

• Live Chat: Available 24/7 within your hy888 account. Average response time under 3 minutes. Live chat is the fastest channel for data access requests and urgent account security concerns.
• Email Support: [email protected] (plain text — not a clickable link). Email responses are provided within 5 business days.

When submitting a data rights request, please include your registered username or mobile number and a clear description of the request you are making. hy888 may require verification of your identity before processing any data access, deletion, or correction request to prevent unauthorised access to your account information.

hy888 is committed to resolving all privacy queries and data rights requests fairly and promptly. If you are not satisfied with hy888's response to a data complaint, you may have the right to escalate the matter to a relevant supervisory authority under the applicable regulatory framework.