Data Protection Policy

Y2 Game: Personal Data Policy — Collection, Sharing and Your Choices

Read how Y2 Game handles information linked to an account: what is collected, its purpose, the circumstances in which it is shared and the requests members can make about their records.

Last Updated: January 2026
Written in English
🔐

The stated policy prohibits selling personal information and describes 256-bit SSL for data transmitted on the site.

Have a question?

Questions about the handling of your records can be sent to the support team.

View FAQ

Our Commitment in Brief: Account registration and payments involve personal records. Y2 Game states that it neither sells those records nor sends promotional messages without permission. This policy explains when limited sharing is allowed, which settings you can control and how to submit a data request.

1. Introduction

Online gaming at https://y2gamey.com is provided by Y2 Game for members in Bangladesh and elsewhere. Information associated with using those services falls within the scope of this policy.

The following sections explain the categories of information, the reason for collecting them, their permitted uses and the choices available to members.

Opening an account or using the site indicates agreement with these terms. Anyone who does not agree should stop using the service. The platform states that it aims to announce revisions before they take effect.

2. Information We Collect

Collection is described as limited to what the service needs for operation, account protection and legal obligations. Details unrelated to those purposes are not part of the stated collection rule.

Types of Data Example Reason for Collection
Identity Information Name, date of birth, national ID number Age Verification & Identity Confirmation
Contact Information Email address, phone number Account correspondence, security notices and payment messages
Financial Information Payment methods, transaction history Deposit & Withdrawal Processing
Technical Information The connecting IP address, browser information and device details Security & Fraud Prevention
Gaming Information Game history, bet amounts, wins/losses Service Improvement & Responsible Gaming
Cookie & Tracking Information Session data, preferences, usage patterns Experience Enhancement & Analytics

Full card details and PINs are not retained under the stated policy. Payments are routed through gateways described as compliant with PCI-DSS, rather than stored as complete card records by the site.

3. Use of Information

The purposes below define the stated uses of account information. Other unrelated uses are not permitted by this policy.

  • Account Management: Establish accounts, safeguard access and support password recovery.
  • Service Delivery: Process game activity, eligible offers and transfers into or out of the wallet.
  • Verification: Verify a member’s age and identity and confirm the associated payment route.
  • Security: Identify unauthorised entry, fraudulent activity and money-laundering risks.
  • Contact: Send transaction receipts, security warnings and necessary service updates.
  • Service Improvement: For analytics to improve platform quality.
  • Legal Obligations: To comply with regulatory requirements.
  • Responsible Gaming: Recognise potentially harmful play and direct members towards assistance.
4. Information Sharing & Disclosure

Personal records may not be rented or sold. Sharing is limited to the operational and legal situations set out in the following sections.

  • Payment Processors: Transfer providers, including Nagad, Rocket and Mobile Banking, obtain the information necessary to process a payment.
  • Identity Verification Services: KYC service providers receive relevant records to perform the required identity review.
  • Law Enforcement Agencies: A lawful government instruction or valid court order may require disclosure of specified information.
  • Technology Partners: Infrastructure and security partners are given only the records needed to run and safeguard the platform.
  • Business Transfers: A merger or business transfer can include account records, with members notified before that transfer.

Partners are described as subject to confidentiality agreements. Information received from the site may be used only for the purpose agreed with them.

6. Data Security

Several controls are described for stored records, data travelling over a connection and staff permissions. The policy also states that external specialists review security regularly. The listed safeguards are outlined below.

  • SSL Encryption: Data travelling between systems is protected by the stated 256-bit TLS/SSL connection.
  • Data Encryption: Stored sensitive records are described as protected with AES-256 encryption.
  • Two-Factor Authentication (2FA): Members can enable a second authentication step for additional account access control.
  • Firewall & DDoS Protection: Protective server controls help defend the service against external attacks.
  • Regular Security Audits: Reviews by outside cybersecurity professionals are part of the stated security process.
  • Access Controls: Only staff with permission may obtain access to member information.

Suspected account intrusion should be reported to support immediately, together with a password change.

7. Your Rights

Members have several routes to enquire about their records or request changes. Each option remains subject to the applicable conditions described in the policy.

  • Right to Access: Request access to the records held about you, or ask for an explanation of them.
  • Right to Rectification: Request an update when personal details are inaccurate or out of date.
  • Right to Erasure: Request removal of records where the relevant deletion conditions are satisfied.
  • Right to Restrict Processing: Object to certain uses of your information.
  • Right to Data Portability: Ask for an export of personal records or their transfer to a different service.
  • Right to Opt Out of Marketing: Withdraw from promotional email and notification lists using the opt-out controls.

Submit requests concerning these rights through support. The stated response target is 30 days from receipt.

8. Data Retention Period

Records remain only for their applicable retention term. After that period, the policy provides for secure erasure or removal of identifying details.

  • Active Account Data: For as long as the account remains active.
  • Transaction Details: Payment records: retained for five to seven years from the transaction when legally required.
  • Verification Documents: Up to 5 years after account closure.
  • Gaming History: Up to 1 year after account closure.
  • Cookie Information: Session files expire on closing the browser. The listed duration for persistent cookies is one to two years.
9. Minor Protection

The service excludes anyone below 18 and states that it does not deliberately gather information from children.

If an underage user is discovered, the policy provides for closing that account and removing the associated personal records.

Parents and guardians are encouraged to stop children from using this site and comparable gaming services.

10. Policy Changes

Y2 Game may update this policy. Material revisions are described as announced by email or an account notice, together with a revised date on this page.

Using the platform once revised terms are effective indicates acceptance of them. Return to this page when you need the latest published version.

The source lists January 2026 as the revision date and July 2026 as its planned next review.

11. Contact Us

Direct questions about these terms, or requests relating to your personal records, to member support.

Support Hours
7 days a week, 24 hours a day

Account Safeguards and Member Data Controls

An overview of the account controls and security measures set out above.

256-bit SSL Encryption

Information sent through the site is described as encrypted with TLS/SSL. The disclosure section explains the limited cases in which service partners receive relevant records.

No Sale of Data

The policy does not permit selling member data to advertisers. Processing and disclosure are restricted to the service purposes explained in the preceding sections.

Two-Factor Authentication

With 2FA enabled, another verification step is required at login, helping to limit unwanted access.

Restricted Access

Staff need an authorised purpose to access records. Such access is described as recorded and subject to review.

Regular Security Audits

Outside specialists are said to review security regularly. The policy states a 48-hour target for addressing weaknesses found through those reviews.

Your Data, Your Control

Contact the team to request access, corrections or deletion where the applicable rules permit it.

Privacy Guaranteed — Join Now

Understand the Policy Before Registering

Read the data policy before registering. A 150% first-deposit promotion is also advertised here, but its separate offer conditions govern eligibility and use.

Members must be at least 18. Keep spending and playing time within set limits. Responsible Gaming

বাংলা