88f Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for the processing of your personal information is the operating entity behind the 88f platform, accessible at https://88f.lol ("88f", "we", "us", or "our"). 88f holds an international gaming license that imposes binding data protection obligations, including requirements regarding lawful processing, data minimisation, purpose limitation, storage limitation, integrity, and confidentiality.

This Privacy Policy applies to all personal data collected from individuals who visit, register on, deposit to, or otherwise interact with the 88f Platform — including users located across Pakistan (Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities and towns).

88f collects the following categories of personal data from its users. Collection occurs only to the extent necessary for the specific purpose identified:

88f does not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health or gambling harm data is voluntarily provided in the context of a responsible gaming request or complaint.

88f collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering your 88f Account, completing identity verification, making deposits or withdrawal requests, submitting support tickets, or communicating with 88f via any channel.
• Automated Collection: Technical data and gaming activity data collected automatically when you access and use the 88f Platform, including through cookies, web beacons, and server logging.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and blockchain networks (for USDT TRC20) when you make deposits or receive withdrawals.
• Identity Verification Providers: Results of identity and age verification checks conducted through 88f's KYC service providers, as required under our gaming license obligations.
• Fraud Prevention Services: Risk scores, device fingerprint data, and behavioural signals from fraud prevention and anti-money laundering (AML) service providers integrated with the 88f Platform.

88f processes your personal data for the following specific, documented purposes:

1. Account Registration and Management: To create and administer your 88f Account, verify your identity and age, maintain accurate account records, and enable you to access 88f services.
2. Gaming License Compliance: To satisfy our obligations under 88f's international gaming license, including age verification, identity verification, responsible gaming monitoring, and anti-money laundering reporting.
3. Financial Transaction Processing: To process your PKR deposits via JazzCash, EasyPaisa, and bank transfers, to process withdrawal requests, to maintain accurate transaction records, and to manage bonus and promotional credit allocations.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, identity theft, account takeover, money laundering, and other prohibited conduct on the 88f Platform.
5. Responsible Gaming: To monitor gaming activity for signs of potential gambling harm, to administer self-exclusion and deposit limit requests, and to fulfil responsible gaming obligations under our gaming license.
6. Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain records of our communications with you.
7. Platform Improvement: To analyse aggregated, anonymised usage data to improve the 88f Platform's features, performance, game selection, and user experience for Pakistani players.
8. Legal Compliance: To comply with applicable legal obligations, court orders, regulatory directions, and requests from law enforcement authorities.

88f processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and 88f as set out in the Terms & Conditions — including account operation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with 88f's gaming license obligations, applicable anti-money laundering laws, age verification requirements, and any other mandatory legal obligations.
• Legitimate Interests: Processing carried out in pursuit of 88f's legitimate interests in preventing fraud, maintaining Platform security, resolving disputes, and improving Platform services, provided such interests are not overridden by your rights and interests.
• Consent: Where 88f relies on your consent as a legal basis for processing (for example, for optional Platform notifications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

88f does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent necessary for the documented purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network operators receive the minimum transaction data required to process your deposits and withdrawals. These parties process data under their own privacy policies and are subject to applicable financial services regulations.
• Identity Verification Providers: 88f's KYC and age verification service providers receive identity documents and related data solely for the purpose of verifying your eligibility to use the Platform under our gaming license requirements.
• Fraud Prevention and AML Service Providers: Risk assessment and anti-money laundering partners receive limited transactional and behavioural data to enable fraud detection and AML monitoring on 88f's behalf.
• Game Software Providers: Third-party game studios whose titles are available on 88f may receive session and bet data to the extent technically required to deliver game outcomes and resolve disputes. Game providers do not receive your identity or financial data beyond what is technically necessary.
• Regulatory Authorities and Law Enforcement: 88f will disclose personal data to gaming regulators, law enforcement agencies, and courts where required by applicable law, court order, or regulatory direction, including under our gaming license's reporting obligations.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by 88f may access personal data on a need-to-know basis in connection with their services, subject to strict confidentiality obligations.

All third-party recipients of your personal data are required, by contract or by applicable law, to protect that data with appropriate technical and organisational security measures consistent with or exceeding those applied by 88f.

As an internationally licensed gaming platform, 88f may transfer your personal data to service providers, regulators, or infrastructure systems located in countries outside Pakistan. Where such transfers occur, 88f ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses with recipient entities requiring data protection standards equivalent to those applied by 88f.
• Transfer to countries or entities recognised as providing adequate data protection levels under applicable international standards.
• Where required, obtaining your explicit consent to the transfer prior to its occurrence.

By using the 88f Platform and accepting this Privacy Policy, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan. 88f commits that any such transfers will be made with appropriate safeguards as described above.

88f retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active 88f account and for a period following account closure as required by our gaming license and AML obligations (typically five to seven years following closure, depending on applicable regulations).
• Financial Transaction Records: Retained for a minimum of five years from the date of the transaction, consistent with standard financial record-keeping requirements under international AML frameworks.
• Identity Verification Documents: Retained for the duration required under our gaming license obligations following account closure, typically five years.
• Communications and Support Records: Retained for a minimum of two years following resolution of the communication or dispute to which they relate.
• Gaming Activity Logs: Retained for the duration of your account and for up to five years following account closure for regulatory audit and dispute resolution purposes.
• Technical and Log Data: Retained for a maximum of 13 months from the date of collection, unless specific events require extended retention (e.g., an ongoing fraud investigation).

Upon expiry of the applicable retention period, 88f will securely delete or irreversibly anonymise your personal data. Anonymised data — which cannot be used to identify you — may be retained indefinitely for statistical and analytical purposes.

88f implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful processing:

• Transit Encryption: All data transmissions between your device and 88f servers are encrypted using 256-bit SSL/TLS protocols. 88f enforces HTTPS across the entire Platform — unencrypted connections are rejected.
• Password Security: User passwords are processed through industry-standard one-way cryptographic hashing algorithms before storage. Plaintext passwords are never written to any 88f system or log.
• Two-Factor Authentication: 88f offers optional 2FA to all account holders via authenticator application. 88f strongly recommends that all Pakistani users enable 2FA to protect against account takeover.
• Access Controls: Access to personal data within 88f's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and subject to audit.
• Segregated Player Funds: PKR funds held in user Wallets are maintained in accounts segregated from 88f's operational finances, protecting player balances from business-level financial risk.
• Security Monitoring: 88f's platform infrastructure is subject to continuous security monitoring, including intrusion detection, anomaly detection, and DDoS protection mechanisms.
• Vulnerability Management: 88f conducts regular security assessments and penetration tests of its Platform infrastructure. Identified vulnerabilities are prioritised and remediated in accordance with their assessed risk level.

88f uses cookies and similar tracking technologies on its Platform to enable core functionality, maintain session security, and support platform analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the 88f Platform. These cookies enable session management, authentication state, and security features. They cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: Remember your Platform preferences (such as language settings and game display preferences) to provide a more personalised experience across sessions.
• Analytics Cookies: Collect anonymised data about how users navigate and interact with the 88f Platform. This data is used in aggregate form to identify areas for Platform improvement and is not used to identify individual users.
• Security Cookies: Support fraud detection and account security measures, including device recognition and anomaly detection.

88f does not use third-party advertising or targeting cookies. You may adjust cookie settings through your browser's privacy controls. Please note that disabling strictly necessary cookies may prevent you from accessing certain Platform features including account login.

Subject to applicable law and our gaming license obligations, you hold the following rights with respect to your personal data held by 88f:

• Right of Access: You may request a copy of all personal data 88f holds about you. 88f will respond to verified access requests within 30 calendar days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some data corrections (such as name changes) require supporting documentation for verification purposes.
• Right to Erasure: You may request deletion of your personal data in certain circumstances. This right is subject to exceptions where 88f is required to retain data by law or under its gaming license obligations — particularly financial records and AML documentation.
• Right to Restriction: You may request that 88f restrict processing of your data in specific circumstances — for example, where the accuracy of the data is contested or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a copy of the personal data you provided to 88f in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where 88f relies on legitimate interests as the legal basis. 88f will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact 88f support with a clear description of the right you wish to exercise and sufficient information to verify your identity. 88f will not charge a fee for responding to reasonable data rights requests. See Section 15 for contact details.

If 88f becomes aware or has reasonable grounds to believe that personal data has been collected from an individual under 21 years of age — whether as a result of a failed age verification, a third-party report, or any other circumstance — 88f will immediately suspend the relevant Account, delete all associated personal data to the extent permitted by law, and return any deposited funds to the payment source where technically feasible.

Parents and guardians who become aware that a minor has accessed or registered on the 88f Platform should contact 88f support immediately. 88f treats such reports with the highest priority and will act promptly to address the situation.

The 88f Platform may, from time to time, contain references or contextual links to third-party game providers or payment services. 88f does not control the privacy practices of any third-party entity and is not responsible for the privacy policies, data handling practices, or content of any third-party services accessed via or in connection with the 88f Platform.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of 88f — particularly payment service providers such as JazzCash and EasyPaisa, whose own privacy policies govern their handling of your financial data.

88f reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect updates to our gaming license obligations, changes in applicable data protection law, changes to our Platform features and data processing activities, or other operational developments.

Material changes to this Privacy Policy — particularly those that affect your rights or the way 88f uses your personal data — will be communicated via SMS or notification to your registered 88f Account prior to the change taking effect, where reasonably practicable. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the 88f Platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any revision, you should discontinue use of the Platform and contact support to arrange account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or about 88f's handling of your personal data, please contact the 88f support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

88f aims to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days. Where a complaint cannot be resolved directly, you may have the right to escalate to the relevant data protection authority or to the dispute resolution mechanism provided under 88f's gaming license.