Privacy Policy

1 Controller Identity

For the purposes of this Privacy Policy, the data controller responsible for your personal information is y1111 Gaming Operations, operating the website and services accessible at y1111.club (collectively, the "Platform").

References to "y1111", "we", "us", or "our" throughout this document refer to y1111 Gaming Operations and any entities acting on its behalf in connection with the Platform. References to "you", "your", or "user" refer to any individual who accesses, registers with, or otherwise interacts with the y1111 Platform.

If you have questions about how your data is handled, you may contact us at any time. Contact details are provided in Section 12 of this Policy.

2 Data We Collect

y1111 collects personal data through a number of channels — directly from you when you register, deposit, or contact support; automatically through your use of the Platform; and from third parties where permitted. The specific categories of data we collect are described below.

2.1 Registration and Account Data

When you create a y1111 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the minimum age requirement of 21 years)
• Email address (used for account communications and identity verification)
• Mobile phone number (used for OTP-based authentication)
• Residential address in Pakistan
• Username and encrypted password
• Preferred currency (PKR is the default for all Pakistani accounts)

2.2 Identity Verification (KYC) Data

In accordance with our Know Your Customer (KYC) obligations under applicable anti-money laundering regulations, y1111 may collect the following at account verification or withdrawal stage:

• Scanned copy or photograph of a valid government-issued identity document (CNIC, Passport, or NICOP)
• Proof of address (utility bill, bank statement, or similar document issued within 90 days)
• Selfie photograph or liveness check video for biometric verification
• Source of funds documentation where required by regulatory thresholds

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and method
• JazzCash or EasyPaisa account numbers associated with transactions
• Bank account details (HBL, UBL, Meezan Bank, Allied Bank) used for transfers
• USDT wallet addresses where cryptocurrency transactions are used
• Bonus eligibility status and bonus claim history

2.4 Technical and Usage Data

When you access the y1111 Platform, our servers automatically collect:

• IP address and approximate geolocation derived theref rom
• Device type, operating system, and browser version
• Session start and end timestamps
• Pages visited, games launched, and features accessed within the Platform
• Referring URL (the page you visited immediately before arriving at y1111.club)
• Connection type and mobile network operator (relevant for JazzCash and EasyPaisa users)

2.5 Communications Data

• Contents of support tickets, live chat transcripts, and email correspondence with y1111 staff
• Survey responses and feedback submissions
• Responsible gaming self-assessment responses where voluntarily provided

3 How We Use Your Data

y1111 uses the personal data we collect for the following defined purposes:

y1111 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Responsible gaming flags and fraud alerts generated algorithmically are always reviewed by a qualified member of the y1111 operations team before any account action is taken.

4 Legal Basis for Processing

y1111 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create and maintain your account, execute transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, KYC regulations, and reporting obligations under international gaming regulations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing for optional communications such as promotional offers and newsletters, where you have explicitly opted in. You may withdraw consent at any time by contacting support.

5 Data Sharing

y1111 does not sell your personal data. We share data only in the following limited, controlled circumstances:

5.1 Payment Processors

To process deposits and withdrawals, y1111 shares the minimum necessary financial data with our payment partners including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and Raast. Each processor is contractually bound to handle your data in compliance with applicable data protection standards and may not use it for any independent commercial purpose.

5.2 Identity Verification Providers

y1111 may engage third-party KYC and identity verification services to validate government-issued documents and conduct liveness checks. These providers process only the data necessary for verification and are prohibited from retaining or repurposing your identity documents beyond the verification task.

5.3 Regulatory and Law Enforcement Authorities

y1111 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or legitimate regulatory inquiry. We will notify affected users of such disclosures where legally permitted to do so.

5.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all assets of y1111 Gaming Operations, user data may be transferred to the successor entity. You will be notified in advance of any such transfer and will retain your data rights throughout.

6 Cookies & Tracking Technologies

y1111 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for core Platform functionality including session management, authentication tokens, and security verification. These cannot be disabled without breaking basic site functionality.
• Functional cookies: Used to remember your preferences such as language settings, preferred game categories, and display options. These improve your experience but are not required for the Platform to operate.
• Analytics cookies: Used to understand aggregate usage patterns — which pages are visited most often, average session duration, and common user journeys through the Platform. This data is anonymised and used solely to improve the y1111 product.

y1111 does not use third-party advertising cookies or cross-site tracking pixels. You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not affect your ability to place bets, play games, or process transactions on y1111.

7 Data Retention

y1111 retains personal data for as long as is necessary for the purpose it was collected and to comply with our legal obligations:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for five (5) years following account closure or the completion of the last transaction, whichever is later.
• Support communications: Retained for two (2) years from the date of the interaction unless part of an ongoing dispute or regulatory matter.
• Technical/usage logs: Retained for thirteen (13) months on a rolling basis for security and fraud prevention purposes, then deleted.

When retention periods expire, y1111 securely deletes or anonymises personal data so that it can no longer be associated with an identified individual.

8 Your Rights

As a y1111 user, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of all personal data y1111 holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your y1111 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose collected, subject to our legal retention obligations under AML regulations.
• Right to restriction: You may request that y1111 restrict processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: You may request a structured, machine-readable export of personal data you have provided to y1111, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (such as promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, where your individual circumstances justify such objection.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". y1111 will respond within thirty (30) calendar days of receiving a valid, verifiable request. Identity verification will be required before any data is disclosed or deleted.

9 Data Security

y1111 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and y1111 servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• OTP-based two-factor authentication on all account logins and withdrawal requests
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular third-party penetration testing and vulnerability assessments of the Platform
• Dedicated data breach response procedures with a target notification window of 72 hours for material incidents

While y1111 takes all reasonable and industry-standard precautions to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your y1111 account password and for enabling OTP authentication on your account. If you suspect unauthorised access, contact y1111 support immediately.

10 Children & Minors

The y1111 Platform is strictly intended for adults aged 21 years and above. y1111 does not knowingly collect personal data from individuals under the age of 21. Age is verified at the point of registration and again at the first withdrawal request.

If y1111 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete all related personal data to the extent permitted by our legal retention obligations, and report the incident where required by applicable regulations.

If you are a parent or guardian and believe that a minor has created a y1111 account using false information, please contact us immediately at [email protected] so that we may take prompt action.

11 Changes to This Policy

y1111 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operations, applicable law, or regulatory requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Send a notification to your registered email address at least fourteen (14) days before the changes take effect
• Display a prominent notice on the y1111 Platform during the notice period

Your continued use of the y1111 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure and data deletion in accordance with Section 8 of this Policy.

12 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by y1111, please contact our data protection team using the details below:

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry / Data Rights Request
• Response Time: Within 30 calendar days for formal data rights requests; within 3 business days for general enquiries

All correspondence regarding data protection must be submitted in writing via email. y1111 does not accept verbal data rights requests. You will be required to verify your identity before any personal data is disclosed, amended, or deleted.