Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 88gf ("we", "our", "us", "the Platform") collects, processes, stores, shares and protects personal data relating to users ("you", "your") of the 88gf platform available at 88gf.cam.

88gf is an English-language online gaming information and entertainment platform designed for users in Pakistan and other jurisdictions where access is permitted. We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles.

By creating an account or using the Platform, you acknowledge that you have read this Policy and understand how your personal data will be processed. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies a living individual — including names, email addresses, device identifiers, IP addresses and financial account references.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure and destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, 88gf.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "User" means any individual who accesses or uses the Platform, whether or not they hold a registered account.
• "KYC" means Know Your Customer — identity and age verification procedures conducted to satisfy legal and regulatory obligations.
• "Cookies" means small text files placed on your device by a website to store browsing-related information.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data.

3 Data We Collect

We collect the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration & Account Data

• Full legal name;
• Date of birth (required for age verification);
• Email address and password (hashed and stored securely);
• Mobile phone number (where provided);
• City and country of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Peshawar).

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Pakistani CNIC, passport or driving license);
• Proof of address documentation;
• Selfie or liveness check images, where required by the KYC provider.

3.3 Financial & Transaction Data

• Payment method references — for example, a mobile wallet identifier associated with Easypaisa or JazzCash, a Raast ID, or bank account details for HBL, UBL, Meezan Bank or Bank Alfalah. These references are used for transaction matching only;
• Transaction history: deposit amounts in PKR, withdrawal requests, bonus credits and wagering activity;
• Any financial compliance documentation requested under anti-money laundering procedures.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from it;
• Device type, operating system and browser version;
• Session duration, pages visited and click-path data;
• Cookie identifiers and similar tracking technologies.

3.5 Communications Data

• Content of support tickets, live chat transcripts and email correspondence with our support team;
• Feedback and survey responses where voluntarily submitted.

4 How We Collect Your Data

We collect personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC, submitting a support request or filling in a profile form;
• Automated collection: Technical data gathered automatically as you browse the Platform, including cookies, server logs and analytics trackers;
• Third-party sources: Identity verification data returned by our KYC partner; fraud-risk signals from anti-fraud services; and payment-status confirmations from payment processors;
• Publicly available sources: In certain compliance contexts, we may consult publicly available databases such as sanctions lists or politically exposed persons (PEP) registers.

5 Legal Basis for Processing

We rely on the following legal bases to process your personal data:

• Contract performance: Processing necessary to register your account, handle transactions and deliver the services you have requested;
• Legal obligation: Processing required to comply with anti-money laundering (AML) laws, age-verification requirements and other applicable regulations;
• Legitimate interests: Processing for fraud detection, platform security, technical troubleshooting and aggregate analytics — where those interests are not overridden by your rights;
• Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw it at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

Your personal data is used for the following purposes:

• Account management: Creating, maintaining and securing your account; verifying your identity and age; resetting credentials;
• Service delivery: Processing deposits and withdrawals, applying bonuses, tracking wagering requirements and maintaining your transaction history;
• Legal compliance: Fulfilling KYC, AML, counter-terrorism financing (CTF) and responsible gambling obligations imposed by the operator's licensing jurisdiction;
• Responsible gambling tools: Applying deposit limits, loss limits, session timers and self-exclusion instructions you have set;
• Customer support: Responding to queries, resolving disputes and improving service quality based on support interactions;
• Platform improvement: Analysing aggregated, anonymised usage patterns to enhance page performance, navigation and content relevance;
• Security and fraud prevention: Monitoring for suspicious account activity, unusual transaction patterns and potential policy violations;
• Marketing (with consent only): Sending promotional emails or on-platform notifications about relevant bonuses or updates where you have opted in. You may opt out at any time.

7 Data Sharing & Disclosure

88gf does not sell your personal data. We may share it with the following categories of recipients, only to the extent necessary and subject to appropriate contractual safeguards:

7.1 Licensed Operators

Where the Platform connects users with a licensed gambling operator, account and verification data may be shared with that operator to fulfil the service and comply with their regulatory requirements.

7.2 KYC & Identity Verification Providers

We use specialist third-party KYC services to verify user identities and ages. These providers process document images and liveness data under strict data processing agreements.

7.3 Payment Processors

Transaction data is shared with payment service providers solely to execute deposits and withdrawals. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah relate to the payment rails used. None of these providers affiliates with or endorses 88gf.

7.4 Fraud Prevention & Compliance Services

We may share data with fraud-detection platforms, sanctions-screening databases and AML compliance tools where required by law or by the operator's licensing conditions.

7.5 Legal & Regulatory Authorities

We may disclose personal data to competent courts, law enforcement agencies or regulatory bodies where required by applicable law, court order or legal process.

8 International Data Transfers

The Platform may involve the transfer of personal data to servers, processors or service providers located outside Pakistan. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the relevant supervisory authority;
• Transfers to jurisdictions recognised as providing adequate data protection under applicable law;
• Binding corporate rules where transfers are within a corporate group with a unified data protection framework.

Pakistan does not currently have a comprehensive personal data protection law equivalent to the EU GDPR, though the Personal Data Protection Bill has been discussed in the legislature. 88gf applies the substantive principles of internationally recognised data protection standards regardless of jurisdiction, as good practice.

9 Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention principles:

• Active account data is retained for the duration of your account relationship with 88gf plus any period required for dispute resolution;
• KYC and identity verification documents are retained for a minimum of five (5) years from account closure, in compliance with AML regulatory requirements;
• Transaction records are retained for a minimum of five (5) years to satisfy financial record-keeping obligations;
• Support correspondence is retained for three (3) years from the date of the interaction, or longer if relevant to an ongoing dispute;
• Technical and usage logs are typically retained for up to twelve (12) months and then anonymised or deleted;
• Marketing consent records are retained until consent is withdrawn, plus a reasonable period for audit purposes.

When data is no longer required, it is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

10 Cookies & Tracking Technologies

88gf uses cookies and similar technologies to operate and improve the Platform. The categories of cookies we use are:

• Essential cookies: Necessary for the Platform to function. These cannot be disabled without affecting core features such as login sessions and security tokens.
• Functional cookies: Remember your preferences — such as language settings, theme choices and notification preferences — to provide a personalised experience.
• Analytical cookies: Collect aggregated, anonymised data about how users navigate the Platform (page views, session duration, click paths) to help us improve content and performance.
• Security cookies: Support fraud detection, bot prevention and session integrity monitoring.

We do not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements from external ad networks.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from logging in or accessing certain features. Most browsers allow you to block, delete or receive notifications about cookies — consult your browser's help section for guidance.

11 Your Data Rights

Subject to applicable law and certain exceptions (such as AML retention obligations), you have the following rights in relation to your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 calendar days of receiving a valid request. We may need to verify your identity before processing the request.

12 Children's Privacy

The 88gf Platform is strictly for adults aged 18 years or older — or the higher minimum age required by the relevant operator or license jurisdiction. We do not knowingly collect or process personal data from individuals under the age of 18.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on our Platform, please notify us immediately at [email protected].

Our age-verification procedures are designed to prevent minors from accessing gambling-related content and services. Users are required to confirm their age at registration, and KYC checks provide an additional layer of verification.

13 Security of Your Data

We implement a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These include:

• Industry-standard SSL/TLS encryption for all data transmitted between your browser and our servers;
• Encrypted storage of sensitive data at rest, including password hashes and financial identifiers;
• Role-based access controls limiting personal data access to authorised personnel with a specific operational need;
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals;
• Multi-factor authentication (MFA) on internal administrative systems;
• Incident response procedures enabling prompt investigation and notification in the event of a suspected data breach.

Despite these measures, no online platform can guarantee absolute security. If you suspect that your account has been compromised, change your password immediately and contact our support team. 88gf will never ask for your password by email or live chat.

14 Pakistan-Specific Notice

88gf is an English-language platform designed with Pakistani users in mind. The following points are particularly relevant to users located in Pakistan:

• 88gf does not hold a Pakistan gambling license and does not claim any form of approval or authorization from the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any provincial or federal regulatory body;
• Payment method references — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are presented as familiar local references for informational purposes only. None of these payment providers endorses, affiliates with or supports 88gf. Your financial data shared with payment processors is governed by those providers' own privacy policies;
• Pakistan does not currently have a comprehensive personal data protection statute. 88gf voluntarily applies substantive data protection principles consistent with internationally accepted standards as good practice for our Pakistani user base;
• PKR figures used in examples throughout the Platform (e.g., deposit limits, bonus amounts) are illustrative only and do not constitute financial guarantees or commitments unless confirmed by a live operator offer;
• Users are reminded that online gambling may be restricted under the Prevention of Gambling Act, 1977 and other applicable Pakistani law. Use of this Platform is entirely at the user's own legal risk.

15 Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or Platform features. When changes are made:

• The revised Policy will be published on this page with an updated Effective Date;
• Where changes are material — for example, a new category of data collection or a new third-party sharing arrangement — we will endeavour to notify registered users by email or an on-platform notification;
• Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms;
• If you do not agree to the revised Policy, you should discontinue use of the Platform and contact us to arrange account closure and, where applicable, data deletion.

We encourage you to review this Policy periodically. The Effective Date at the top of the page indicates when the current version was published.

16 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact our support team: