LEGAL REFERENCE

y66 - How We Handle Your Account and Payment Information

At y66, we keep your personal data and payment details secure from the moment you open an account. This policy explains exactly what we collect, how we use...

Account data encryptedPayment details PCI-securePakistan-compliant storage
y66 How We Handle Your Account and Payment Information

What We Collect and Why

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

REACH OUR TEAM

Privacy Questions or Data Requests

Team online

Email Support

Send privacy concerns or data access requests to our compliance team. Responses sent within seven business days to your registered email address.

Live Chat

Chat with our support agent who can escalate privacy matters to our data officer. Available during Pakistan business hours, Monday to Friday.

Account Settings

Update your personal information, phone number, or email address directly in your profile without contacting support. Changes take effect immediately.

SECURITY FRAMEWORK

How We Protect Your Information

SSL Encryption

All data between your device and our servers travels through 256-bit SSL encryption, the same standard used by banks and payment processors worldwide.

PCI-DSS Compliance

Payment Card Industry standards govern how we store and handle card and mobile wallet data. Third-party auditors verify our practices annually.

Password Security

Passwords are hashed using military-grade algorithms. We never store plain-text passwords, and we recommend two-factor authentication for added safety.

Staff Access Controls

Only authorised y66 team members can view account data, and only when necessary to resolve your request. All access is logged and monitored.

Regular Security Audits

We conduct monthly penetration testing and quarterly vulnerability scans to identify and patch potential weaknesses before attackers can exploit them.

Data Breach Protocol

If we discover a breach affecting your information, we notify affected users and authorities within 48 hours and explain remediation steps.

How This Policy Aligns with Your Rights

Data PortabilityYou can request a copy of all your personal data in a standard format and move it to another platform if you choose to leave y66.
Deletion RightsRequest account deletion and we'll remove your profile, gameplay history, and personal details within 30 days, except where law requires retention.
Withdrawal of ConsentYou can opt out of promotional emails and marketing cookies at any time via your account settings without affecting your ability to play.
Dispute ResolutionIf you believe your data has been misused, you can file a complaint with Pakistan's data protection authority after contacting our support team.
Third-Party SharingWe share data with payment processors, fraud-detection services, and legal authorities only when required by law or necessary to protect the platform.
Marketing PreferencesControl how often you hear from us: SMS alerts, email newsletters, and push notifications can each be toggled independently in your preferences.
Children's Privacyy66 accounts are for users 21 and older. We do not knowingly collect data from minors and will delete any account found to be underage upon discovery.

Key Information at a Glance

Regional Compliance

This privacy policy reflects Pakistan's data protection standards and applies to users in supported regions. If you live outside Pakistan, your local law may offer additional protections.

Policy Updates

We update this policy as our platform evolves or regulations change. You'll receive notice of material changes via email and in-app alert.

Retention Timeline

Account data is kept for five years after closure for tax and anti-fraud purposes. Payment records may be retained longer if required by Pakistani financial law.

Cookie Management

Essential cookies keep you logged in and secure. Optional cookies improve your experience by remembering preferences. Disable them anytime in browser settings.

Device Logs

We record your device type, IP address, and login location to detect fraud and prevent unauthorised access. This data is deleted after 12 months of inactivity.

Legal Requests

If Pakistani authorities request your data, we comply only with valid court orders and will notify you unless legally prohibited from doing so.

Frequently Asked Privacy Questions

Payment records from JazzCash, Easypaisa, SadaPay and Raast deposits are retained for five years for regulatory compliance and tax purposes in Pakistan. After account closure, we may keep records longer if required by law.

Yes. Open a support ticket requesting a data export and we'll provide your account information, transaction history, and gameplay logs in a portable format within 14 days at no cost.

No. We never sell or lease your personal data to third parties. We use your information only to operate the platform, prevent fraud, and comply with Pakistani law.

Your personal details and gameplay history are permanently deleted within 30 days of closure, except payment records and identity verification files kept for five years as required by Pakistani financial regulations.

We use essential cookies for login and security, and optional analytics cookies to improve your experience. You can disable non-essential cookies in your browser settings without losing account access.

Passwords are hashed using bcrypt, so even y66 staff cannot see them. If you forget your password, we verify your identity before sending a reset link to your registered email.

Only authorised y66 employees can access your data when processing support requests or investigating fraud. All access is logged and monitored. You can view your own activity anytime in your account dashboard.