llyy Privacy Policy

1. Overview and Scope

This Privacy Policy ("Policy") is issued by llyy ("llyy," "we," "us," or "our"), the operator of the online betting and gaming platform accessible at llyy.win. This Policy applies to all personal data collected from individuals ("you," "User," or "Data Subject") who access or use the llyy website, platform, mobile interface, or any related services.

llyy is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account or using the llyy platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside llyy's Terms & Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and the Terms & Conditions on matters relating specifically to personal data, this Policy shall prevail.

2. Personal Data We Collect

llyy collects personal data in several categories, depending on how you interact with the platform. The following table summarises the main categories of data collected:

llyy does not collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) except where strictly required by applicable law or explicitly provided by you in connection with a specific responsible gaming request.

3. How llyy Uses Your Personal Data

llyy processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your llyy account, including identity verification, login authentication, and account security.
• Service Delivery: To provide access to cricket betting markets (including PSL), the llyy Casino, slots, and all other platform features.
• Payment Processing: To process deposits and withdrawals via JazzCash, Easypaisa, and other supported payment methods in PKR.
• KYC and AML Compliance: To verify your identity, conduct enhanced due diligence where required, and comply with anti-money laundering obligations.
• Responsible Gaming: To monitor account activity for indicators of problem gambling and to administer deposit limits, self-exclusion requests, and cooling-off periods.
• Customer Support: To respond to your enquiries, complaints, and support requests via live chat or email.
• Platform Improvement: To analyse usage patterns and improve the llyy platform, user experience, and service quality. This analysis is performed on aggregated or pseudonymised data where possible.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other security incidents.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from competent regulatory authorities.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about llyy offers and events.

llyy does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except as strictly required for fraud detection purposes.

4. Legal Basis for Processing

llyy relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing required to enter into or perform the contract established by our Terms & Conditions – including account creation, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing for fraud detection, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent (e.g., for marketing communications), you may withdraw consent at any time by contacting support or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Third Parties

llyy does not sell or rent your personal data to third parties. llyy may share your data with the following categories of recipients where necessary and proportionate:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, UnionPay, and USDT TRC20 payment infrastructure providers – solely for transaction processing.
• Game Providers: Casino and slot game providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) receive session data necessary to deliver game results and RNG certification. These providers operate under strict data processing agreements.
• Identity Verification Services: Third-party KYC providers engaged to verify identity documents and conduct enhanced due diligence checks.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory obligation, llyy may disclose your data to competent authorities.
• Professional Advisers: Lawyers, auditors, and insurers under obligations of confidentiality, where necessary for llyy's business operations.

All third-party service providers engaged by llyy are contractually required to process your data only for specified purposes, to implement appropriate security measures, and not to disclose it to further parties without llyy's authorisation.

6. Data Retention

llyy retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. In general terms:

• Account and identity data is retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction and betting history data is retained for a minimum of five (5) years from the date of the transaction.
• Technical and usage data collected automatically is retained for up to twenty-four (24) months and then deleted or anonymised.
• Support communications are retained for a period of three (3) years from the date of last interaction.
• Where llyy is required by law to retain data for a longer period, the longer period shall apply.

Upon expiry of the applicable retention period, llyy will securely delete or anonymise your personal data so that it can no longer be associated with you as an identified individual.

7. Data Security

llyy implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your browser and llyy servers.
• Encryption at rest for sensitive data including identity documents and financial account details.
• Role-based access controls limiting employee access to personal data strictly on a need-to-know basis.
• Intrusion detection systems, firewall protection, and regular penetration testing of platform infrastructure.
• Two-step verification (2SV) options available to all llyy account holders to protect login credentials.
• Regular staff training on data protection obligations and security practices.

Notwithstanding these measures, no data transmission over the internet or data storage system can be guaranteed as completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, llyy will notify you and relevant authorities in accordance with applicable legal requirements.

8. Cookies and Tracking Technologies

llyy uses cookies and similar technologies on the llyy.win platform. Cookies are small text files placed on your device that help the platform function correctly and allow llyy to understand how the platform is being used.

llyy uses the following categories of cookies:

• Essential Cookies: Required for core platform functionality including login session management, security tokens, and bet slip state. These cannot be disabled without affecting platform operation.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with llyy pages and features. This data informs product improvement decisions. No personally identifiable information is shared with analytics providers.
• Preference Cookies: Used to remember your language, display, and notification preferences so you do not have to reset them on each visit.

llyy does not use third-party advertising cookies or permit advertising networks to set tracking cookies on llyy.win. You may adjust cookie preferences through your browser settings. Disabling essential cookies may impair your ability to log in or use core llyy features.

9. Your Data Rights

Subject to applicable law and certain legal exceptions, you have the following rights in relation to your personal data held by llyy:

• Right of Access: You may request a copy of the personal data llyy holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to llyy's legal retention obligations.
• Right to Restriction: You may request that llyy restrict the processing of your data in certain circumstances, for example while a correction request is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on llyy's legitimate interests. You may also withdraw consent for marketing communications at any time.
• Right not to be Subject to Automated Decisions: You have the right not to be subject to decisions based solely on automated processing that produce significant legal effects, subject to applicable exceptions.

To exercise any of these rights, contact llyy's support team via live chat on the platform or at [email protected] (plain text – not a clickable link). llyy will respond within 30 days. We may require identity verification before actioning a data request.

10. Minors and Age Restriction

llyy is strictly an 18+ platform. llyy does not knowingly collect or process personal data from individuals under the age of 18. If llyy discovers or is notified that personal data has been collected from a minor, llyy will immediately suspend the associated account, delete the minor's personal data, and void any associated transactions. If you are a parent or guardian and believe your child has registered on llyy, contact support immediately at [email protected] (plain text – not a link).

11. Contact and Policy Updates

For questions, concerns, or requests relating to this Privacy Policy or llyy's data practices, contact the llyy privacy team via live chat (available 24/7 on the platform) or by email at [email protected] (plain text – not a clickable link). Please include "Privacy" in your subject line to ensure prompt routing to the appropriate team.

llyy reserves the right to amend this Policy at any time. Where changes are material, llyy will notify registered users via the platform or by email to their registered address. The current version of this Policy is always accessible at llyy.win/privacy-policy. Continued use of the llyy platform following any update constitutes acceptance of the revised Policy.