Privacy Policy

Last updated: 13 August 2026 · Applies to y1-com.games and the Y1 Game app

1. Scope of this policy

This policy explains how Y1 Game ("we", "us", "the platform") handles personal information belonging to visitors of y1-com.games and members of the Y1 Game app. It covers the website you are reading, the mobile and web clients, our payment flows and the support channels we operate on Telegram.

It does not cover third-party services you reach through us. When you follow an outbound link — including our access link, a payment provider's page, or a Telegram channel — that destination's own privacy policy applies to what happens there.

2. Information we collect

2.1 Information you give us

• Registration details — mobile number, chosen username, password (stored only as a salted hash), and preferred language.
• Identity and verification data — full name, date of birth, and a government-issued photo ID when verification is required before a withdrawal.
• Payment information — UPI ID, bank account or card details as required to process a deposit or payout. Card numbers are handled by our payment partners and are never stored in full on our systems.
• Support correspondence — the content of messages you send to our support desk, including screenshots you choose to attach.
• Preferences — deposit limits, session reminders, self-exclusion settings and marketing choices.

2.2 Information collected automatically

• Device and connection data — device model, operating system version, app version, browser type, screen size, language and IP address.
• Usage data — pages viewed, games opened, session length, timestamps and in-app navigation paths.
• Gameplay and transaction records — stakes, results, balance changes, deposits, withdrawals and bonus activity, retained as a complete auditable record.
• Security signals — login attempts, device fingerprints and patterns used to detect fraud, bonus abuse and account takeover.

2.3 Information from third parties

• Payment processors confirming whether a transaction succeeded, failed or was reversed.
• Identity verification providers confirming whether submitted documents are genuine and match the account.
• Game studios supplying round results and session data for the titles they operate.

3. How we use your information

• To run your account — creating it, authenticating you, maintaining your wallet and showing your history.
• To process money — crediting deposits, paying withdrawals, applying the ₹10,000 welcome bonus and resolving disputed transactions.
• To keep play fair and safe — detecting collusion, multi-accounting, bonus abuse, payment fraud and automated play.
• To meet legal duties — anti-money-laundering checks, age verification, tax reporting where applicable and lawful requests from authorities.
• To support you — answering questions, investigating faults and following up on complaints.
• To improve the platform — understanding which games and flows work, and where the client is slow or failing.
• To communicate — service notices, security alerts and, where you have opted in, promotional messages about bonuses and new games.

We do not make solely automated decisions that produce legal effects for you without a route to human review. Automated systems may flag an account for review, but a person decides the outcome.

4. Lawful basis for processing

• Contract — to deliver the service you signed up for, including gameplay and payouts.
• Legal obligation — identity, age and anti-money-laundering requirements.
• Legitimate interests — securing the platform, preventing fraud, and improving the product, balanced against your privacy rights.
• Consent — optional marketing communications and non-essential analytics, which you can withdraw at any time.

5. Who we share information with

We share personal data only where it is necessary, and only with parties bound to protect it:

• Payment providers and banks — to move money into and out of your wallet.
• Identity verification partners — to confirm that you are who you say you are and are over 18.
• Game studios — the operators of individual titles receive the minimum session data needed to run the game and settle results.
• Infrastructure and analytics providers — hosting, content delivery, error monitoring and product analytics, under written data-processing terms.
• Regulators and law enforcement — where we are legally compelled, or where disclosure is necessary to prevent serious harm or financial crime.
• Professional advisers — auditors and lawyers, bound by confidentiality.

6. Cookies and similar technologies

The website and app use a small number of cookies and equivalent local-storage keys:

• Strictly necessary — session tokens, login state, security and fraud prevention. These cannot be switched off without breaking the service.
• Functional — remembering your language, layout preferences and whether you have dismissed a banner.
• Analytics — aggregated measurement of which pages and games are used, and where errors occur.

You can clear or block cookies through your browser or device settings. Blocking strictly necessary cookies will prevent you from staying logged in.

7. How long we keep your data

• Account and transaction records — for the life of the account and for a minimum of five years after closure, to satisfy financial and anti-money-laundering obligations.
• Verification documents — retained for the statutory period, then deleted.
• Support correspondence — up to 24 months after a case is closed.
• Technical logs — typically 90 days, longer where an investigation is open.
• Self-exclusion records — retained indefinitely, because their purpose is to prevent an account being reopened.

8. How we protect your data

• All traffic is encrypted in transit using TLS 1.2 or above.
• Sensitive fields, including verification documents, are encrypted at rest.
• Passwords are stored only as salted one-way hashes and are never recoverable in plain text.
• Access to member data is limited to staff who need it, logged, and reviewed periodically.
• Payment card data is handled by PCI-DSS compliant processors rather than stored by us.

No system is perfect. If a breach occurs that is likely to affect your rights, we will notify affected members and the relevant authority without undue delay.

9. Your rights

Subject to legal limits, you may ask us to:

• Access a copy of the personal data we hold about you.
• Correct anything inaccurate or incomplete.
• Delete data we no longer have a lawful reason to keep. Financial and anti-money-laundering records cannot be deleted on request within their retention period.
• Restrict or object to certain processing, including profiling for marketing.
• Withdraw consent for marketing at any time, without affecting the lawfulness of what came before.
• Port data you provided to us, in a machine-readable format.
• Complain to a supervisory authority if you believe we have handled your data unlawfully.

To exercise any of these, message the VIP support desk at t.me/bbxxyyz from the account concerned. We respond within 30 days and may ask you to verify your identity first — that step protects you, not us.

10. Under-18s

Y1 Game is strictly for adults aged 18 and over. We do not knowingly collect data from anyone below that age. If we discover an account belongs to a minor we close it immediately, void all associated activity, return any verified deposits to their source and delete the personal data we are not legally obliged to retain.

If you share a device with someone under 18, we strongly recommend enabling device-level parental controls and never saving your login credentials in a shared browser.

11. International transfers

Some of our infrastructure, game studios and support tooling operate outside India. Where personal data is transferred internationally we rely on contractual safeguards requiring the recipient to protect it to the standard described in this policy, and we transfer only the minimum data needed for that service to function.

12. Changes to this policy

We update this policy when the platform, the law or our partners change. The "last updated" date at the top always reflects the current version. Material changes — anything that meaningfully alters what we collect or who we share it with — are announced in-app and on our community channel before they take effect.

13. Contact us

Privacy questions, data requests and complaints all go to the same place:

• VIP Support / Help Desk — t.me/bbxxyyz (private, 24/7)
• Community channel — t.me/yn_games (public announcements only — never post personal data here)
• Website — y1-com.games/contact