oy888 Privacy Policy

This Privacy Policy applies to all personal data processed by oy888 in connection with the operation of oy888.net and all products and services offered through that domain, including sports betting, live casino, slot games, lottery services, and all account management functions.

For the purposes of this Policy, "oy888", "we", "us", and "our" refer to the licensed operator of the oy888 platform. oy888 acts as the data controller with respect to the personal data of registered players and visitors to oy888.net. Where oy888 engages third-party processors to handle personal data on its behalf, it does so only under written agreements that impose equivalent data protection obligations.

This Policy applies to all individuals who register an account with oy888, visit oy888.net, use oy888 services, or otherwise interact with oy888 in connection with its platform. By using oy888, you acknowledge that you have read and understood this Privacy Policy.

oy888 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in some circumstances from third-party verification providers. The categories of personal data oy888 collects include:

oy888 does not collect sensitive personal data — such as racial or ethnic origin, religious beliefs, or health information — except where directly relevant to responsible gaming obligations (for example, where a player voluntarily discloses a gambling-related health condition in the context of requesting self-exclusion). Such data is handled with additional safeguards and is not used for any commercial purpose.

oy888 processes your personal data for the following purposes:

• Account Registration and Management: Creating and maintaining your oy888 account, verifying your identity and age eligibility, managing your PKR wallet, and enabling login and authentication.
• Service Delivery: Processing your bets and wagers, crediting winnings, operating live casino and slot game sessions, and delivering lottery services.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and debit card, and processing withdrawal requests to verified payment methods.
• Regulatory and Legal Compliance: Fulfilling our obligations under our gaming licence, including KYC verification, anti-money laundering (AML) screening, sanctions checking, and submission of required reports to regulatory authorities.
• Responsible Gaming: Monitoring account activity to identify patterns indicative of problem gambling, administering deposit limits, loss limits, session controls, and self-exclusion requests in accordance with our responsible gaming obligations.
• Security and Fraud Prevention: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, multi-accounting, and any other prohibited conduct outlined in the oy888 Terms and Conditions.
• Customer Support: Responding to queries, resolving disputes, processing complaints, and providing technical assistance.
• Service Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, payment options, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time through your account settings.

oy888 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between oy888 and the player — including account management, bet settlement, payment processing, and customer support.
• Legal Obligation: Processing required to comply with oy888's obligations under its gaming licence, applicable AML legislation, and regulatory reporting requirements. This includes KYC verification, sanctions screening, and transaction monitoring.
• Legitimate Interests: Processing conducted for oy888's legitimate business interests, including fraud detection, security monitoring, platform analytics, and responsible gaming monitoring, where those interests are not overridden by the player's fundamental rights and freedoms.
• Consent: Processing for optional activities where your consent has been specifically requested, such as marketing communications and non-essential cookies. You may withdraw consent for such processing at any time without affecting the lawfulness of processing prior to withdrawal.

oy888 does not sell or rent personal data to third parties. Personal data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and debit card processing networks — for the purpose of executing deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and AML screening services engaged by oy888 to verify player identity and screen against sanctions lists and politically exposed persons (PEP) databases.
• Game Content Providers: Licensed casino game providers and live dealer studios who supply game content integrated into the oy888 platform. These providers receive only the technical data necessary to operate game sessions.
• Regulatory Authorities: Gaming licensing bodies, financial intelligence units, and law enforcement agencies, where oy888 is legally obligated to disclose information or has received a valid legal order.
• Technology Service Providers: Cloud hosting, cybersecurity, customer support software, and analytics platform providers operating under data processing agreements with oy888.
• Legal Advisers: External legal counsel, auditors, and professional advisers where necessary for legal proceedings, compliance reviews, or regulatory correspondence.

oy888 operates as an international platform and some of the third-party service providers engaged by oy888 may process personal data in jurisdictions outside Pakistan. Where personal data is transferred internationally, oy888 ensures that such transfers are subject to adequate safeguards, which may include:

• Transfers to countries recognised as providing an adequate level of data protection by the relevant regulatory framework.
• Standard contractual clauses or equivalent data transfer mechanisms incorporated into agreements with the receiving party.
• Binding corporate rules where applicable within a group of companies.

If you have questions about the safeguards applied to any specific international transfer of your personal data, you may submit a written request to the oy888 data protection contact address set out in Section 13 of this Policy.

oy888 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained beyond the stated periods for statistical and analytical purposes, as it no longer constitutes personal data.

oy888 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. These measures include:

• Encryption: All data transmitted between your device and oy888.net is encrypted using TLS (Transport Layer Security). Sensitive data at rest — including financial records and identity documents — is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within oy888's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication: oy888 offers 2FA for player account access and mandates it for internal administrative access to systems containing personal data.
• Regular Security Assessments: oy888 conducts periodic security assessments, vulnerability testing, and penetration testing of its platform and supporting infrastructure.
• Incident Response: oy888 maintains a documented data breach incident response procedure. In the event of a breach that poses a risk to your rights and freedoms, oy888 will notify affected individuals and relevant regulatory authorities in accordance with applicable legal obligations.

oy888.net uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. The categories of cookies used include:

• Essential Cookies: Strictly necessary for platform functionality, including session management, login authentication, and security features. These cookies cannot be disabled without impacting platform operation.
• Performance Cookies: Used to collect anonymised data about how visitors use oy888.net, enabling oy888 to identify performance issues, improve page load times, and optimise the betting and casino interfaces.
• Functional Cookies: Used to remember your preferences — such as language settings, preferred payment method display, and game lobby layout — to provide a more personalised experience on return visits.
• Analytics Cookies: Used with your consent to analyse aggregated user behaviour patterns for the purpose of platform development and content improvement. These cookies do not identify you individually.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will prevent certain oy888 features from functioning correctly, including the ability to log in and maintain an active betting session. oy888 does not use cookies to track your activity on third-party websites outside of oy888.net.

Subject to applicable legal limitations — including regulatory retention obligations under oy888's gaming licence — you have the following rights in relation to the personal data oy888 holds about you:

To exercise any of the above rights, please submit a written request to the contact address in Section 13. oy888 will respond to all data rights requests within thirty (30) days of receipt. Where a request is complex or numerous, oy888 may extend this period by a further sixty (60) days and will notify you accordingly. Identity verification may be required before a request is actioned to ensure personal data is not disclosed to unauthorised parties.

If you are a parent or guardian and believe that a minor has provided personal data to oy888 or created an oy888 account, please contact us immediately at the address set out in Section 13. oy888 takes under-age gambling prevention seriously and will act on all credible reports promptly.

oy888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or platform services. Material changes will be communicated to registered players via the email address or mobile number on file, or via a prominent notice on oy888.net, no less than fourteen (14) days before the amended policy takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this page periodically. Continued use of the oy888 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

For any questions, data rights requests, or concerns about how oy888 processes your personal data, please contact the oy888 data protection team using the following details:

oy888 will acknowledge all privacy-related correspondence within five (5) business days and will endeavour to resolve your concern within thirty (30) days. If you are not satisfied with oy888's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to oy888's gaming licence, or to the dispute resolution body specified in oy888's licensing terms.

For general account queries, platform support, and responsible gaming assistance, please refer to the FAQ page or the Responsible Gaming page.