Privacy Policy – How 888com Protects Your Personal Data

888com is the operating brand of the online gaming platform accessible at 888com.life. The platform is built specifically for the Pakistan market and is operated by a team with offices across Pakistan's major cities. For the purposes of this Privacy Policy, 888com is the data controller — the entity that determines why and how your personal data is collected and used.

If you have any questions about this Policy, or wish to exercise any of your data rights described in Section 9, you can contact the 888com data team via the live chat support function on the platform or by emailing support@888com.life. We aim to respond to all data-related enquiries within five business days.

888com collects only the personal data that is necessary to operate your account, process your transactions, comply with legal obligations and keep the platform secure. We do not collect data for its own sake. The categories of personal data we may hold about you are:

888com does not collect sensitive personal data such as health records, political opinions or religious beliefs. We do not collect data from children — the minimum age for an 888com account is 18 years.

888com collects your personal data through the following channels:

• Registration form: When you create your 888com account, you provide your name, date of birth, mobile number and contact details directly.
• Deposits and withdrawals: When you add funds or withdraw winnings, your payment details are captured and associated with your account to process the transaction and comply with anti-money laundering requirements.
• Identity verification: When 888com requests KYC documents, you upload them directly through the secure verification section of your account.
• Platform usage: Technical data such as your IP address, device type and session information is collected automatically as you use the 888com platform.
• Support interactions: When you contact the support team via live chat or email, the content of that interaction is recorded and stored.
• Cookies and tracking technologies: As described in Section 7, cookies and similar technologies collect limited technical data about how you interact with the platform.

888com uses your personal data only for purposes that are necessary, proportionate and clearly stated. The legal basis and purpose for each category of use is as follows:

• Account management: Your identity and contact data is used to create and maintain your 888com account, verify your identity and communicate with you about your account.
• Processing transactions: Your financial data is used to process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard, and to maintain an accurate record of your account balance.
• Legal compliance: 888com is required to collect and retain certain data to comply with anti-money laundering (AML) regulations, know-your-customer (KYC) obligations and any applicable reporting requirements.
• Fraud prevention and security: Technical data and gaming data are used to detect and prevent unauthorised account access, fraudulent transactions, bonus abuse and other prohibited conduct as defined in the Terms and Conditions.
• Responsible gaming: Gaming data — session duration, bet frequency, loss patterns — is monitored to identify potential problem gaming behaviour and to make responsible gaming tools available where appropriate.
• Platform improvement: Aggregated, anonymised technical and gaming data is used to improve the 888com platform, fix bugs and develop features that better serve Pakistani players.
• Customer support: Communication data is used to handle your support requests, investigate disputes and improve support quality.
• Marketing (opt-in only): If you have opted in to marketing communications, your contact details are used to send promotional messages about 888com offers. You can opt out at any time from your account settings.

888com does not sell, rent or trade your personal data. We share personal data with third parties only where it is necessary to operate the platform or comply with legal requirements. The categories of recipients are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT providers and Visa/Mastercard networks receive the minimum financial data required to process your transaction. These processors are bound by their own data protection obligations.
• Game providers: Where games are provided by licensed third-party studios, those providers may receive limited technical data necessary to deliver the game to your device. No personally identifiable data beyond a session token is shared for this purpose.
• Identity verification services: Third-party KYC verification providers receive copies of your identity documents solely for the purpose of completing verification. Documents are not retained by these providers beyond the verification process.
• Security and fraud prevention partners: Aggregated or pseudonymised data may be shared with fraud-detection services to identify patterns of abuse across the platform.
• Legal and regulatory authorities: 888com will disclose personal data to law enforcement, regulatory bodies or courts where required by law or where disclosure is necessary to prevent serious harm. We will not disclose more than is legally required.

888com retains personal data only for as long as it is necessary for the purposes described in this Policy or as required by applicable law. The general retention periods are:

• Account data: Retained for the lifetime of your account plus five years following closure, to satisfy AML and KYC regulatory obligations.
• Transaction records: Financial transaction records are retained for a minimum of five years in accordance with standard financial record-keeping requirements.
• Support communications: Live chat transcripts and email correspondence are retained for three years to support dispute resolution and service quality review.
• Technical logs: IP address logs and session data are retained for 90 days and then anonymised or deleted, except where a security investigation requires extended retention.
• Marketing preferences: If you opt out of marketing, a record of your opt-out is retained indefinitely to ensure you are not contacted in future.

When personal data is no longer needed and the retention period has passed, 888com deletes or anonymises it securely. We do not retain data "just in case" — retention is reviewed and justified on an ongoing basis.

The 888com platform uses cookies and similar technologies to make the platform work properly, keep your session secure and understand how the platform is used. Cookies are small text files stored on your device. They do not give 888com access to your device or other files on it.

The categories of cookies used on 888com are:

• Essential cookies: Required for the platform to function — session management, login state, security tokens. These cannot be disabled without breaking core platform functions.
• Functional cookies: Remember your preferences such as display settings, language and responsible gaming limits you have set.
• Analytics cookies: Collect anonymised data about how pages are used — which games are most visited, how long sessions last — to help improve the 888com platform. No personally identifiable data is included in analytics reports.

You can manage or block cookies through your browser settings. Please note that disabling essential cookies will affect platform functionality and may prevent you from logging in. Analytics cookies can be disabled without affecting your ability to use the platform.

888com takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the 888com platform
• Encryption of personal data and payment information at rest on 888com servers
• Role-based access controls — staff can only access the personal data they need to perform their specific role
• Two-factor authentication available to all players for account login
• 24/7 security monitoring with automated alerts for unusual access patterns
• Regular security audits and penetration testing by independent third parties
• Staff data protection training and confidentiality obligations

No data security system is completely impenetrable. In the unlikely event of a data breach that poses a risk to your rights, 888com will notify affected players as required by applicable law and take immediate steps to contain and remedy the breach.

As a player whose personal data is held by 888com, you have the following rights. To exercise any of these rights, contact the support team via live chat or email at support@888com.life. We will respond within five business days.

Requests to exercise your data rights will be handled free of charge. 888com may need to verify your identity before processing the request to ensure we are disclosing or acting on data belonging to the correct individual.

888com reviews this Privacy Policy at least annually and whenever there are material changes to how personal data is collected or used. When the Policy is updated, the "Last Updated" date at the top of the page changes. For material changes that affect your rights, 888com will send a notification to your registered mobile number or email address at least seven days before the changes take effect.

Continued use of the 888com platform after a policy update constitutes acceptance of the revised Policy. If you do not accept an updated Policy, you should close your account and withdraw any remaining balance before the effective date of the changes.

For all privacy-related enquiries, data rights requests or concerns about how 888com handles your personal data, please contact us through any of the following channels:

• Live chat: Available 24/7 from the 888com platform — the fastest way to reach the support team
• Email: support@888com.life — responses within five business days for data-related enquiries