Contents
1 About This Privacy Policy
This Privacy Policy applies to all personal data processed by 888f in connection with your use of the 888f platform, including account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and promotional communications. It applies whether you access 888f via desktop browser, mobile browser, or any other means.
This Privacy Policy forms part of the 888f Terms & Conditions. By registering an account with 888f or by continuing to use the 888f platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to any provision of this Privacy Policy, you should not register an account with 888f or submit any personal information to us.
Data Controller: 888f operates as the data controller in respect of the personal data of registered account holders. For all data protection queries, you may contact us at the email address set out in Section 15 of this Policy. This Policy is presented in English. In any conflict arising from translation, the English version prevails.
2 Personal Data We Collect
888f collects the following categories of personal data from or about you in the course of providing its services:
| Category | Specific Data Points |
|---|---|
| Identity Data | Full name, date of birth, CNIC number, gender, nationality |
| Contact Data | Mobile number, email address, city/province of residence |
| Financial Data | JazzCash/EasyPaisa account number, HBL/UBL/Meezan account details, USDT wallet address, transaction history, deposit and withdrawal amounts |
| KYC Documentation | CNIC copy (front and back), selfie photograph for liveness verification, source-of-funds declaration where required |
| Account Data | Username, hashed password, account creation date, account preferences, responsible gaming limits set |
| Gameplay Data | Game session logs, bet amounts, game outcomes, win/loss records, sports betting selections |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps |
| Communications Data | Records of support chat conversations, email correspondence, promotional opt-in and opt-out preferences |
888f collects only the minimum personal data necessary for the purpose for which it is collected. We do not collect special category data (such as health data or biometric data beyond liveness checks required for KYC) unless specifically required by our licensing obligations.
3 How We Collect Your Data
888f collects your personal data through the following methods:
- Direct submission by you: When you register an 888f account, you provide your name, date of birth, mobile number, and email address. When you complete KYC verification, you upload your CNIC and selfie photograph. When you make a deposit or withdrawal, your payment method details are processed. When you contact customer support, the content of that interaction is recorded.
- Automated collection: When you access and use the 888f platform, our servers automatically record technical data including your IP address, device identifier, browser type, session start and end times, pages visited, and actions taken within the platform. This data is collected via server logs and first-party session cookies.
- Payment processors: When you deposit or withdraw funds, your payment processor (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT network) confirms transaction details to 888f to allow us to credit or debit your account accurately.
- KYC verification providers: Where 888f uses third-party identity verification services to assist with CNIC and liveness checks, those providers return a verification status and relevant extracted data to 888f.
- Gameplay systems: All gameplay activity on 888f — including individual bets, game selections, outcomes, and session duration — is automatically logged by the platform's gaming engine for integrity, dispute resolution, and regulatory reporting purposes.
4 Purposes for Which We Process Your Data
888f processes your personal data for the following specific purposes:
- Account creation and management: To register your 888f account, verify your identity and age, maintain your account profile, and manage your account preferences and responsible gaming settings.
- KYC and AML compliance: To verify your identity in accordance with our international gaming license's Know Your Customer and Anti-Money Laundering obligations. This includes verifying your CNIC, confirming your date of birth to enforce the 21+ age restriction, and where required, assessing the source of funds used for deposits.
- Payment processing: To process your deposits and withdrawals through your chosen payment method, reconcile transaction records, and investigate any payment discrepancies or disputes.
- Service delivery: To provide access to 888f's gaming platform, record gameplay sessions for dispute resolution purposes, maintain your game history, and calculate and credit winnings to your account balance.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
- Customer support: To respond to your queries, handle complaints, and maintain records of interactions with our support team for quality assurance and dispute resolution purposes.
- Responsible gaming: To implement and enforce responsible gaming controls you have set (deposit limits, self-exclusion, session reminders), and to identify patterns of play that may indicate problem gambling behaviour requiring intervention.
- Regulatory reporting: To fulfil reporting obligations imposed on 888f by its international gaming license, including the provision of player data to regulatory authorities where lawfully required.
- Marketing and promotions: Where you have explicitly opted in, to send you promotional offers, bonus notifications, and platform news by mobile message or email. You may withdraw your consent to marketing communications at any time through your account settings.
- Platform improvement: To analyse aggregate, anonymised usage patterns to improve the 888f platform's performance, user experience, and game offering.
5 Legal Basis for Processing
888f processes your personal data on the following legal bases, depending on the category of data and the purpose of processing:
- Performance of a contract: Processing necessary to provide the 888f gaming service to you, including account management, gameplay, and payment processing, is carried out on the basis that it is necessary for the performance of the contract between you and 888f.
- Legal obligation: Processing carried out to fulfil 888f's KYC, AML, regulatory reporting, and licensing compliance obligations is carried out on the basis that it is required by applicable law or the conditions of 888f's international gaming license.
- Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics is carried out on the basis of 888f's legitimate interest in operating a safe, secure, and compliant gaming platform.
- Consent: Processing for marketing and promotional communications is carried out on the basis of your explicit, freely-given consent at the time of opt-in. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.
Where processing is based on your consent, you have the right to withdraw that consent at any time by updating your account settings or contacting 888f support. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
6 Data Sharing & Third Parties
888f does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. 888f shares your personal data with third parties only in the following circumstances:
- Payment processors: Your payment method details and transaction information are shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and other payment processors as necessary to process your deposits and withdrawals. These processors handle your data under their own privacy policies and applicable banking regulations.
- Identity verification providers: Your CNIC data and selfie photograph may be shared with licensed third-party identity verification service providers for the purpose of completing KYC checks. These providers are contractually bound to process your data only for this specific purpose and in accordance with applicable data protection law.
- Game software suppliers: Data necessary for game session logging (such as bet amount, game identifier, and outcome) may be shared with 888f's licensed game software providers for RNG auditing and game integrity purposes. Identifiable player data shared with game providers is minimised where possible.
- Regulatory authorities: 888f is required by its international gaming license to provide player data to its licensing authority and, where lawfully required by court order or regulatory demand, to law enforcement or other government agencies. 888f will notify you of any such disclosure where permitted by law to do so.
- Fraud prevention agencies: In cases of suspected fraud, money laundering, or other financial crime, 888f may share relevant data with specialist fraud prevention and financial intelligence organisations.
- Professional advisers: 888f's legal, financial, and auditing advisers may have access to your personal data to the extent necessary to provide their professional services to 888f, subject to binding confidentiality obligations.
All third parties with whom 888f shares personal data are contractually required to implement appropriate technical and organisational security measures and to use the data only for the specified purpose for which it was disclosed.
7 International Data Transfers
888f's servers and those of some of its third-party service providers may be located outside Pakistan. Where your personal data is transferred to, stored in, or processed in a jurisdiction outside Pakistan, 888f will ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections that would apply within Pakistan.
Appropriate safeguards for international transfers may include: standard data protection contractual clauses agreed between 888f and the relevant data recipient; reliance on adequacy determinations where applicable; and binding corporate rules where processing occurs within a group of companies subject to shared data governance policies.
By registering an account with 888f and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan on the basis of the safeguards described above.
8 Data Retention
888f retains your personal data for only as long as is necessary for the purposes for which it was collected, taking into account applicable legal retention obligations and the legitimate operational needs of the business. The following general retention principles apply:
- Active accounts: Personal data associated with your active 888f account is retained for the full duration of your account relationship with 888f plus the applicable post-closure retention period described below.
- Closed accounts: Following the closure of your 888f account, 888f retains your personal data — including identity verification records, transaction history, and gameplay records — for a minimum of five (5) years from the date of closure, in accordance with the AML compliance and regulatory record-keeping obligations of our international gaming license. This retention period may be extended if an investigation, claim, or regulatory inquiry is ongoing at the time of account closure.
- KYC documentation: CNIC copies and identity verification records are retained for a minimum of five (5) years post account closure as required under AML regulations.
- Support communications: Customer support chat logs and email records are retained for three (3) years from the date of the interaction.
- Marketing consent records: Records of marketing opt-in and opt-out are retained for the duration of your account relationship and for six (6) months post account closure to evidence compliance with consent requirements.
Upon expiry of the applicable retention period, 888f will securely delete or irreversibly anonymise your personal data so that it can no longer be used to identify you.
9 Your Data Protection Rights
As a data subject, you have the following rights in respect of the personal data 888f holds about you:
- Right of access: You may request a copy of the personal data 888f holds about you. 888f will respond to such requests within 30 days of receipt, subject to verification of your identity.
- Right to rectification: If you believe that any personal data 888f holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Basic account data (such as mobile number or email address) can be updated directly from your account settings.
- Right to erasure: You may request the deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent and there is no other lawful basis for processing; or the data has been processed unlawfully. This right is subject to legal retention obligations — 888f cannot delete data it is required by law or licensing regulation to retain.
- Right to restriction: You may request that 888f restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you oppose deletion.
- Right to object: You may object to processing of your personal data carried out on the basis of 888f's legitimate interests, including processing for fraud prevention analytics. 888f will consider your objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
To exercise any of the above rights, please contact 888f's support team at the contact details set out in Section 15 of this Policy. We will verify your identity before processing any data rights request.
Please note that certain data rights are subject to legal and regulatory limitations. In particular, 888f cannot erase personal data that it is required to retain under its AML and KYC compliance obligations, even where a deletion request is received.
10 Cookies & Tracking Technologies
888f uses first-party session cookies and persistent cookies to operate the platform. These cookies do not collect personally identifiable information beyond what you have already provided during account registration. 888f uses the following cookie categories:
- Strictly necessary cookies: These are essential for the 888f platform to function correctly. They include session authentication cookies that keep you logged in between page navigations and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking the platform.
- Functional cookies: These remember your platform preferences, such as your preferred game lobby view, language settings, and responsible gaming limit configurations between sessions.
- Analytics cookies:888f uses first-party analytics cookies to understand aggregate usage patterns — such as which game categories are most visited and at what times of day. This data is used only in aggregate, anonymised form to improve the platform. 888f does not use third-party advertising tracking technologies.
You may configure your browser to block or delete cookies. However, blocking strictly necessary cookies will prevent you from logging in to your 888f account and using the platform. Functional and analytics cookies can be disabled without affecting core platform access.
11 Security Measures
888f implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption: All data transmitted between your device and the 888f platform is encrypted using 256-bit SSL/TLS protocols — the same encryption standard used by major Pakistani banks for online banking.
- Hashed password storage: Your account password is never stored in plain text. It is stored as a cryptographically hashed value using industry-standard one-way hashing algorithms.
- Data access controls: Access to your personal data within 888f's internal systems is restricted to authorised personnel who require access for their specific job functions. Access is logged and audited.
- Secure KYC document storage: Identity documents uploaded for KYC verification are stored in encrypted document vaults with strict access controls, separate from general account data.
- Login anomaly detection: 888f's platform monitors for unusual login patterns — repeated failed attempts, logins from unfamiliar locations, or rapid sequential attempts — and can trigger temporary account locks or additional verification requirements.
- Regular security assessments: 888f conducts periodic security assessments of its platform infrastructure to identify and address potential vulnerabilities before they can be exploited.
While 888f takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights, 888f will notify you without undue delay in accordance with applicable data breach notification requirements.
12 Minors
888f's platform is strictly restricted to persons who are 21 years of age or older. 888f does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the 888f account registration and KYC process.
If 888f discovers that personal data has been collected from a person who is under 21 years of age, it will immediately close the relevant account, return any funds deposited, and delete the associated personal data in accordance with applicable data protection law, subject to any legal retention obligations.
21+ Age Restriction: If you are a parent or guardian and you believe that a person under 21 in your care has registered an 888f account, please contact us immediately at the details in Section 15 so that we can take prompt action.
13 Third-Party Links
The 888f platform does not include links to third-party websites as part of its core content or navigation. In the event that any reference to a third-party service or resource is made in the context of specific promotions or informational content, 888f is not responsible for the privacy practices of any third-party website or service. This Privacy Policy applies exclusively to personal data processed by 888f in connection with https://888f.pro.
If you follow a link to a third-party website from any 888f communication, 888f encourages you to read that website's privacy policy before submitting any personal information. 888f accepts no responsibility or liability for the privacy practices of third parties.
14 Changes to This Privacy Policy
888f reserves the right to update or amend this Privacy Policy at any time. When material changes are made, 888f will notify you by one or more of the following means: a notification displayed at your next 888f login; an email or SMS notification to your registered contact details; or a prominent notice on the 888f website.
Where a proposed change materially affects the way in which 888f processes your personal data and where consent is the legal basis for that processing, 888f will seek your fresh consent before the change takes effect.
Your continued use of the 888f platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised Policy. The "Last Updated" date at the top of this document reflects the date of the most recent revision. The current version published at https://888f.pro/privacy-policy is the operative version.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 888f processes your personal data, please contact the 888f data protection team through the following channel:
Email: [email protected] (plain text — this is not a clickable mailto link)
Subject line: Please include "Privacy Policy Query" or "Data Rights Request" in your subject line to ensure prompt routing to the correct team.
Response time: 888f will acknowledge all data protection queries within 5 business days and provide a substantive response within 30 days of receipt.
When submitting a data rights request, please include your registered mobile number or username so that we can identify your account and verify your identity before processing the request. We may request additional identity verification documentation before fulfilling data access or deletion requests to protect against unauthorised access to account data.
For questions about responsible gaming controls, self-exclusion, or deposit limits, please visit our Responsible Gaming page, where those tools are directly accessible from your account settings. For general platform queries, please visit our FAQ page.