Privacy Policy — yan168

1. Introduction

yan168 is committed to handling your personal data with care, transparency, and respect. We recognise that the members who choose to play on our platform entrust us with sensitive information, and we take that responsibility seriously. This Policy sets out our obligations in plain language so that you understand exactly what happens to your data at every stage of your relationship with yan168.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and yan168. If you have any questions about this Policy that are not answered here, contact us at [email protected].

2. Personal Data We Collect

yan168 collects personal data through several channels: directly from you when you register or use our services, automatically as you interact with the platform, and in limited cases from third-party sources such as payment providers. The categories of data we collect are as follows.

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the 21+ age requirement).
• Residential address, including city, district, and postcode.
• Email address and mobile phone number.
• Username and hashed password (passwords are never stored or accessible in plain text).

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National Identity Card, passport, or driving licence).
• Proof of address documents issued within the last three months (utility bill, bank statement, or official correspondence).
• Proof of payment method ownership (screenshots showing your registered bKash, Nagad, Rocket, or Upay mobile number).
• Source of funds documentation where required for high-value transactions.

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references.
• Transaction histories associated with your account balance.
• Payment method identifiers (mobile wallet numbers, bank account references) — we do not store full card numbers or banking credentials.
• Currency and conversion details where applicable.

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, browser type, and version.
• Session timestamps, pages visited, and navigation paths within the platform.
• Game play logs including bets placed, games accessed, session durations, and outcomes.
• Cookies and similar tracking technologies (see Section 8 for full cookie details).

2.5 Communications Data

• Records of support interactions via live chat, email, or other support channels.
• Feedback, complaints, and dispute correspondence.
• Marketing preferences and consent records.

3. How We Use Your Data

yan168 processes personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes listed below. The legal bases on which we rely to process your data are: performance of contract, compliance with legal obligations, legitimate interests, and — where required — your explicit consent.

Our Privacy Commitments

Six principles that guide every data decision we make at yan168.

4. Data Sharing & Third Parties

yan168 does not share your personal data with any third party except where strictly necessary to provide our services, comply with a legal obligation, or protect the safety and security of the platform and its members. The limited categories of third party with whom we may share data are described below.

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive only the transactional data required to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• Game Content Providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and bet data necessary to serve game content. They do not receive your full identity or contact details.
• Identity Verification Services: Third-party KYC providers may process copies of your identity documents for the purpose of age and identity verification. All such providers are bound by strict data processing agreements.
• Fraud Prevention & Security Services: We may share IP address, device fingerprint, and behavioural signals with fraud-detection services to protect the platform against cheating, multi-accounting, and financial crime.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where we are legally required to do so or where we believe disclosure is necessary to prevent fraud or protect the rights of yan168 or its members.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of yan168's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

5. Data Security

yan168 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include the following.

• Encryption at Rest and in Transit: All stored personal data is encrypted at rest. All data in transit between your device and our servers is protected using TLS/SSL encryption with current cipher standards.
• Hashed Passwords: Account passwords are stored using a one-way cryptographic hash function. yan168 staff cannot view your password in plain text under any circumstances.
• Access Controls: Access to personal data within our internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo regular security training.
• Server Security: Our servers are hosted in secure, access-controlled data centres with firewall protections, intrusion detection systems, and regular security audits.
• Fraud Monitoring: Automated systems monitor accounts and transactions in real time for suspicious activity patterns consistent with account takeover or financial fraud.
• Incident Response: In the unlikely event of a data breach that poses a risk to your rights and freedoms, yan168 will notify affected members and relevant authorities as promptly as practicable.

Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for reporting any suspected unauthorised access to your account to [email protected] immediately.

6. Cookies & Tracking Technologies

yan168 uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the platform, remember your preferences, maintain your login session, prevent fraud, and understand how members use our services. The categories of cookies we use are as follows.

You may control cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the platform, but some features may function less smoothly. Essential security cookies cannot be disabled without preventing platform access entirely.

7. Your Data Rights

As a yan168 member, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with your account username and a clear description of your request. We will respond within 30 days.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to limitations where we are required to retain data for legal or regulatory compliance purposes.
• Right to Restrict Processing: You may ask us to restrict the processing of your data in specific circumstances, for example while a dispute is being investigated.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. We will honour all valid marketing opt-out requests immediately.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a structured, machine-readable copy of your personal data.
• Right to Withdraw Consent: Where we rely on your consent as the basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

8. Data Retention & Minors

yan168 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. Our standard retention schedules are as follows.

• Active account data is retained for the duration of your membership and for a minimum of 5 years following account closure.
• Transaction records are retained for a minimum of 5 years from the date of the transaction in accordance with standard financial record-keeping practice.
• KYC verification documents are retained for a minimum of 5 years following account closure or the date of last transaction, whichever is later.
• Support correspondence is retained for 3 years from the date of last interaction unless related to an unresolved legal matter.
• Marketing consent records are retained until consent is withdrawn, plus 1 year as evidence of consent history.

9. Policy Updates & Contact

yan168 may update this Privacy Policy from time to time to reflect changes in our services, technology, or applicable legal requirements. When we make material changes, we will notify registered members via the email address on file and update the effective date at the top of this page. We encourage you to review this Policy periodically.

Continued use of the yan168 platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not agree with any update to this Policy, you must stop using the platform and may request account closure by contacting support.

For all privacy-related queries, data rights requests, or concerns about how your personal data is handled, contact the yan168 data team at [email protected]. Our support team is available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6). We aim to acknowledge all privacy enquiries within 24 hours and resolve them within 30 days.