yes800 Privacy Policy — Your Data, Our Responsibility

yes800 ("yes800", "we", "us", "the Platform") operates the online casino and sports betting website available at yes800.net. yes800 is operated under an international gaming licence issued by a recognised gaming authority. For the purposes of this Privacy Policy, yes800 acts as the data controller in respect of the personal data of its registered players and site visitors.

This Privacy Policy applies to all personal data collected by yes800 through the yes800.net website, any associated mobile applications, customer support channels, and all other digital touchpoints operated by yes800. It governs data collected from users located in Pakistan and all other jurisdictions where yes800 services are accessed.

yes800 collects personal data from you in several ways — information you provide directly, information generated automatically through your use of the platform, and information obtained from trusted third parties for verification purposes. The categories of personal data we collect are described in the table below.

yes800 does not collect special categories of sensitive personal data (such as health data, biometric data, political opinions or religious beliefs) except where expressly required by regulatory mandate or with your explicit prior consent. Where special category data is collected for responsible gaming purposes (for example, self-declared problem gambling disclosures), it is processed with strict access controls and is never used for marketing purposes.

yes800 uses the personal data we collect for the following specific purposes. We will never use your data for a purpose that is incompatible with the original purpose for which it was collected without obtaining your consent or establishing an alternative legal basis.

• Account Registration and Management: to create and maintain your yes800 player account, verify your identity during KYC, process your login credentials securely and manage your account preferences and responsible gaming settings.
• Payment Processing: to process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL and Meezan Bank, to verify payment method ownership and to maintain transaction records for dispute resolution.
• Regulatory Compliance: to meet the anti-money laundering, know-your-customer and player protection obligations imposed by yes800's international gaming licence, including the monitoring of unusual transaction patterns and the filing of regulatory reports where required.
• Platform Security and Fraud Prevention: to detect, investigate and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering and other prohibited conduct as defined in the yes800 Terms and Conditions.
• Customer Support: to respond to your enquiries, resolve disputes, process complaints and provide technical assistance via the yes800 support channels.
• Responsible Gaming: to monitor player activity for indicators of problem gambling, to enforce deposit limits, session limits and self-exclusion requests, and to provide appropriate responsible gaming interventions where our algorithms or staff identify patterns of concern.
• Marketing Communications: to send you promotional offers, bonus notifications and platform updates via email or SMS where you have given consent to receive such communications. You may withdraw consent at any time via your yes800 account settings or by contacting support.
• Platform Improvement: to analyse aggregate usage data to improve yes800's game offering, interface design, payment processing efficiency and overall player experience. Aggregate analytics data is anonymised and cannot be used to identify individual players.

yes800 processes personal data only where a lawful basis for processing exists. The legal bases we rely upon for processing player data are as follows:

• Contract Performance: Processing is necessary to perform the contract between yes800 and you as a registered player — including account management, payment processing and game operation.
• Legal Obligation: Processing is necessary to comply with yes800's anti-money laundering, KYC, tax reporting and regulatory obligations under its international gaming licence.
• Legitimate Interests: yes800 processes certain data on the basis of its legitimate interests as a gaming operator, including fraud detection, platform security, responsible gaming monitoring and aggregate analytics. We have assessed that these legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and certain optional personalisation features is based on your freely given, specific and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

yes800 does not sell, rent, or trade personal data with third parties for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: yes800 shares necessary financial data with JazzCash, EasyPaisa, HBL, UBL and Meezan Bank solely to process your PKR deposits and withdrawals. These providers are contractually bound to process data only as required to complete your transactions.
• KYC and Identity Verification Providers: yes800 may use third-party identity verification service providers to assist with CNIC verification and KYC document processing. These providers are bound by strict data processing agreements and are prohibited from using your data for their own purposes.
• Game Software Providers: Technical usage data (such as session identifiers and game round data) may be shared with yes800's licensed game software providers for the purpose of game operation, fairness auditing and dispute resolution. No personally identifiable information beyond pseudonymous player IDs is shared with game providers.
• Regulatory and Law Enforcement Authorities: yes800 will disclose personal data to gaming regulators, financial intelligence authorities and law enforcement agencies where required to do so by applicable law, court order or regulatory mandate. yes800 will notify you of such disclosures where legally permitted to do so.
• Professional Advisors: yes800 may share limited personal data with its lawyers, auditors, accountants and insurers on a strictly confidential basis where necessary for the provision of professional services.

yes800 uses cookies and similar technologies (including local storage and session tokens) on yes800.net to provide platform functionality, maintain your login session, prevent fraud and collect aggregate analytics data. The categories of cookies used by yes800 are described below:

• Strictly Necessary Cookies: These cookies are essential for yes800 to function correctly. They maintain your login session, apply your security settings and enable basic platform navigation. These cookies cannot be disabled without preventing access to yes800.
• Functional Cookies: These cookies remember your platform preferences — such as language settings and responsible gaming limit configurations — to provide a more personalised experience on return visits to yes800.
• Analytics Cookies: yes800 uses aggregate analytics cookies to understand how players navigate the platform, which game categories are most popular and where technical issues occur. All analytics data is processed in aggregate and cannot identify individual players.
• Fraud Prevention Cookies: yes800 uses device fingerprinting and session integrity cookies to detect and prevent multi-accounting, automated bot activity and fraudulent transactions. These cookies are essential to platform security.

yes800 does not use third-party advertising or behavioural targeting cookies. You can manage non-essential cookie preferences through your browser settings. Clearing or disabling cookies may affect your ability to log in and use certain features of yes800.

yes800 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, to meet regulatory obligations or to resolve disputes. The following retention periods apply to the principal categories of player data held by yes800:

Following the expiry of the applicable retention period, yes800 will securely delete or anonymise personal data such that it can no longer be attributed to an identified or identifiable individual. Where anonymisation is applied, the resulting aggregate data may be retained indefinitely for statistical and platform improvement purposes.

yes800 respects your rights in relation to your personal data. Depending on your jurisdiction and the legal basis for processing, you may hold some or all of the following rights in relation to the personal data yes800 holds about you:

• Right of Access: You have the right to request a copy of the personal data yes800 holds about you, together with information about how that data is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by yes800 about you.
• Right to Erasure: You have the right to request deletion of your personal data where yes800 no longer has a legitimate basis to retain it. This right is subject to override by regulatory retention obligations as set out in Section 7 above.
• Right to Restriction: You have the right to request that yes800 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is pending.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of yes800's legitimate interests. yes800 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

yes800 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. Key security measures include:

• All data transmitted between your browser or application and yes800 servers is encrypted using TLS 1.2 or higher. yes800.net is served exclusively over HTTPS.
• Sensitive data at rest — including KYC documents, CNIC images and financial records — is encrypted using AES-256 or equivalent encryption.
• Access to player personal data within yes800's internal systems is restricted to authorised personnel on a documented need-to-know basis. All internal access is logged and subject to periodic audit.
• yes800 conducts regular security assessments and vulnerability testing of its platform infrastructure.
• Player account credentials are stored as salted cryptographic hashes. yes800 staff cannot retrieve your password in plain text under any circumstances.
• Two-factor authentication is available to all yes800 account holders and is strongly recommended to protect against unauthorised account access.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, yes800 will notify you and the applicable regulatory authority within the timeframes required by applicable data protection law. Notification will be sent to your registered email address and posted on yes800.net where appropriate.

yes800 is strictly an adults-only platform. yes800 services are available exclusively to persons aged 21 years or older. yes800 does not knowingly collect personal data from individuals below the age of 21. Age verification via CNIC is a mandatory step in the yes800 account registration process.

If yes800 becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all associated personal data will be deleted (subject to any overriding regulatory retention obligations), and any deposited funds will be returned to source. If you believe that yes800 has inadvertently collected personal data from a minor, please notify us immediately at the support contact details provided in this policy.

yes800 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements or platform functionality. When material changes are made, yes800 will notify you by posting a prominent notice on yes800.net and, where appropriate, by sending a notification to your registered email address.

The effective date at the top of this policy indicates when the current version was last reviewed and approved. We recommend reviewing this Privacy Policy periodically, particularly before making a new deposit or submitting new personal documentation to yes800. Continued use of the yes800 platform following notification of material changes constitutes your acceptance of the updated Privacy Policy.

For all privacy-related matters — including data subject access requests, consent withdrawal, data deletion requests, security concerns or general enquiries about this Privacy Policy — please contact the yes800 privacy and data protection team using the details below. All communications must be submitted in English and must include sufficient information to verify your identity as a registered yes800 account holder.

Support and Privacy Contact:
Email (plain text): [email protected]
Response time: within 5 business days for general enquiries; within 30 calendar days for formal data subject requests.

If you are not satisfied with yes800's response to your privacy concern or data subject request, you have the right to escalate your complaint to the data protection supervisory authority or gaming regulatory body applicable under yes800's international gaming licence. Details of the applicable supervisory authority are available on request from the yes800 privacy team.