88tf Privacy Policy — How We Protect Your Personal Data

88tf ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all users of its online casino and sports betting services ("you", "your", "the User"). This Privacy Policy has been prepared in accordance with applicable international data protection standards and the requirements of the regulatory framework under which 88tf holds its gaming licence.

This document explains: (a) the categories of personal data that 88tf collects; (b) the purposes for which that data is collected and used; (c) the legal basis upon which 88tf processes your personal data; (d) the third parties with whom data may be shared; (e) how long data is retained; and (f) the rights you hold as a data subject and how to exercise them.

88tf serves a predominantly Pakistani user base, including players in Karachi, Lahore, Islamabad, Faisalabad, and other cities across Pakistan. All data practices described in this Policy apply equally to all users regardless of geographic location within the platform's accessible territories.

For the purposes of applicable data protection legislation, 88tf is the data controller in respect of all personal data collected through the platform. As data controller, 88tf determines the purposes and means by which your personal data is processed.

Certain data processing activities — particularly those relating to payment processing (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20) and identity verification — are carried out by third-party service providers acting as data processors on behalf of 88tf under contractual data processing agreements. These processors are bound by strict data handling obligations consistent with this Privacy Policy.

For all data protection enquiries, please contact 88tf at [email protected] with the subject line "Privacy — Data Controller Query".

88tf collects and processes the following categories of personal data, depending on the nature of your interaction with the platform:

88tf does not collect special category sensitive data (such as health data, religious beliefs, or political opinions) unless specifically required by responsible gaming obligations or regulatory mandate in a particular circumstance, in which case explicit consent will be sought separately.

88tf collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, submit a complaint, or participate in a promotion.
• Automatically through your use of the platform: Technical and behavioural data is collected automatically when you access the 88tf website or mobile platform — including IP addresses, device identifiers, session data, and navigation logs. This collection occurs through cookies, web beacons, and server-side logging systems.
• From third-party service providers: Identity verification data may be cross-referenced with third-party KYC/AML databases as part of the verification process. Payment providers may share transaction confirmation data with 88tf for reconciliation purposes.
• From publicly available sources: In cases where AML screening requires it, 88tf may consult publicly available records including sanctions lists and politically exposed persons (PEP) databases.

88tf processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual necessity: Processing required to perform the contract between 88tf and you — including account management, bet settlement, payment processing, and customer support delivery.
• Legal obligation: Processing required to comply with applicable law — including KYC/AML obligations under the gaming licence conditions, regulatory reporting requirements, and tax record obligations.
• Legitimate interests: Processing carried out for 88tf's legitimate business interests, where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, responsible gaming monitoring, and analytics for platform improvement.
• Consent: Where no other legal basis applies, 88tf will seek your explicit consent before processing your data — including for direct marketing communications beyond transactional notifications. You may withdraw consent at any time by contacting 88tf support.

88tf uses your personal data exclusively for the following purposes:

• Account creation and management: To register, maintain, and administer your 88tf account, including authentication, balance management, and account settings.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 — and to maintain accurate transaction records.
• KYC and AML compliance: To verify your identity, confirm your age (21+), screen against sanctions and PEP lists, and meet the anti-money laundering obligations imposed by 88tf's gaming licence.
• Bet and game settlement: To process, settle, and record all sports betting and casino game activity on the platform.
• Bonus and promotion administration: To track wagering requirements, validate bonus eligibility, and deliver promotional rewards.
• Customer support: To respond to enquiries, investigate complaints, and resolve disputes.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour, enforce player-elected deposit limits and self-exclusion settings, and meet licence-mandated responsible gaming obligations.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, chargeback abuse, and other prohibited conduct.
• Platform analytics and improvement: To understand how Pakistani players use 88tf and to improve the platform's functionality, reliability, and content offering.
• Legal and regulatory compliance: To maintain records required by our gaming licence authority and to respond to lawful requests from regulatory bodies.
• Direct marketing (where consent has been given): To send you relevant promotional communications about 88tf bonuses, sports events, and platform features. You can opt out at any time.

88tf does not sell your personal data. Data is shared with third parties only in the circumstances described below, and always under contractual data protection obligations consistent with this Privacy Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processing partners receive the minimum financial and identity data necessary to process your PKR transactions. These providers operate under their own privacy frameworks and applicable financial regulation.
• KYC and identity verification providers: 88tf may use accredited third-party identity verification services to cross-check the documents and information you provide during KYC. These providers process data under strict contractual data processing agreements with 88tf.
• Gaming software providers: Game data (stakes, results, session duration) may be shared with certified game providers (including live dealer studios) for game delivery, settlement, and audit purposes. These providers are certified by independent testing laboratories.
• Regulatory and law enforcement authorities: 88tf is obligated to share information with its gaming licence authority, financial intelligence units, and law enforcement bodies when required by applicable law, a court order, or licence condition. Such sharing is conducted strictly within legal parameters.
• Group companies: Where 88tf operates within a corporate group structure, data may be shared with affiliated entities for internal administrative, compliance, or technical support purposes, subject to the same data protection standards.

88tf uses cookies and similar tracking technologies on its platform for operational, security, and analytical purposes. Cookies are small data files stored on your device that help the platform function correctly, maintain your login session, and understand how players use the platform.

The following categories of cookies are used on 88tf:

• Strictly necessary cookies: Required for the platform to function — including session management, login authentication, and security token validation. These cannot be disabled without making the platform non-functional.
• Functional cookies: Store your preferences — such as language settings, display options, and last-accessed game categories — to personalise your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the platform — which sections are most visited, how long sessions last, and where users experience friction. This data is used exclusively to improve the 88tf platform.
• Security cookies: Detect and prevent fraudulent access attempts, credential stuffing, and bot activity. These are a core component of 88tf's account security architecture.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using core 88tf functions, but may affect the availability of some personalisation features. 88tf does not use third-party advertising or cross-site tracking cookies.

88tf implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 88tf servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• AES-256 encryption at rest for sensitive data fields including identity documents, financial records, and authentication credentials stored in 88tf databases.
• Role-based access controls (RBAC) limiting internal access to personal data to only those 88tf staff members whose job function requires it, with all access events logged in an immutable audit trail.
• Two-factor authentication (2FA) available and encouraged for all player accounts as an additional layer of identity verification at login.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals to identify and remediate weaknesses before they can be exploited.
• Incident response procedures that ensure any suspected data breach is investigated promptly, contained, and — where required — reported to the relevant regulatory authority and affected users within the timeframe mandated by applicable law.

While 88tf takes all reasonable technical and organisational measures to protect your data, no internet-based platform can guarantee absolute security. You also have a role to play — safeguarding your 88tf account credentials and enabling 2FA significantly reduces your personal risk exposure.

88tf retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely and permanently destroyed using methods appropriate to the data format and storage medium. Where partial anonymisation is possible and sufficient for the remaining operational purpose, anonymised aggregated data may be retained beyond the personal data retention period.

As a user of the 88tf platform, you hold the following rights in respect of your personal data. These rights are exercisable by contacting 88tf at [email protected] with the subject line "Privacy — Data Subject Rights Request":

88tf will respond to all data subject rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by up to two further months, with notice provided. 88tf may request proof of identity before processing a data subject rights request to prevent unauthorised disclosure.

Please note that certain rights — particularly the right to erasure — may be limited where 88tf is required to retain data by its gaming licence conditions or applicable financial regulation. In such cases, 88tf will explain the specific legal obligation that prevents full erasure.

As an internationally licensed online gaming platform, 88tf may process and store personal data in countries outside Pakistan, including in the jurisdiction where 88tf's gaming licence is issued and where its data centre infrastructure is located.

Where personal data is transferred internationally, 88tf ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within Pakistan and the licensing jurisdiction. Safeguards used include contractual clauses obligating recipient parties to maintain data protection standards consistent with this Privacy Policy, and the use of certified service providers operating under recognised international data protection frameworks.

Third-party payment providers — including JazzCash, EasyPaisa, and Pakistani banking partners — process payment data within Pakistan under local financial regulation. Cross-border data flows relating to these providers are limited to what is necessary for international settlement purposes.

The 88tf platform is strictly restricted to individuals aged 21 years and above. 88tf does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the KYC process, and no withdrawal will be processed from an account where age has not been verified to the satisfaction of the 88tf compliance team.

If 88tf becomes aware, at any point, that personal data has been collected from an individual under the age of 21 — whether through misrepresentation during registration or otherwise — the following actions will be taken immediately:

• The account will be suspended and all pending activity halted.
• The account will be permanently closed following investigation.
• Any balance on the account will be subject to the treatment prescribed in the 88tf Terms & Conditions for underage account closures.
• The matter will be reported to the relevant regulatory authority in accordance with licence conditions.

If you are a parent or guardian and believe that a minor has registered with 88tf using false information, please contact [email protected] immediately with the subject line "Underage Account Report" and we will investigate and act with urgency.

Where you have given your consent during registration or subsequently through your account settings, 88tf may send you direct marketing communications about platform promotions, new game releases, PSL season bonuses, and other offers relevant to your 88tf account activity.

You may opt out of direct marketing communications at any time by:

• Using the unsubscribe link included in every marketing email sent by 88tf;
• Updating your communication preferences in your 88tf account settings under the Notifications section; or
• Contacting support at [email protected] with a request to be removed from marketing communications.

Opting out of marketing communications does not affect transactional notifications — including deposit confirmations, withdrawal status updates, KYC request notifications, and responsible gaming alerts — which are sent as a necessary part of operating your account and cannot be disabled.

88tf reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in: (a) applicable data protection law or regulatory guidance; (b) 88tf's data processing activities; (c) new services or features introduced on the platform; or (d) changes in third-party service provider arrangements.

When material changes are made to this Privacy Policy, 88tf will notify registered users via their registered email address and will update the "Effective Date" at the top of this document. The revised Policy will be published on this page and will take effect from the stated effective date.

Your continued use of the 88tf platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with material changes to the Privacy Policy, you may close your account in accordance with the account closure procedure in the 88tf Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 88tf holds about you, please contact the 88tf data protection team using the details below:

• Email: [email protected] (Subject line: "Privacy — [Nature of Enquiry]")
• Live Chat: Available 24/7 through your logged-in 88tf account. For privacy-related matters, live chat can initiate a formal data request which will then be handled by the compliance team.
• Response Commitment: All privacy enquiries will receive an acknowledgement within 48 hours and a substantive response within 30 calendar days, unless the complexity of the request requires an extension under applicable law.