88bf Privacy Policy — How We Protect Your Personal Data

88bf ("we", "us", "our", or "the Platform") is an internationally licensed online casino and sports betting platform operating at https://88bf.lol, serving registered players across Pakistan and other permitted jurisdictions. 88bf operates under an international online gaming license, which imposes binding data protection obligations on the platform as a condition of continued licensure.

For the purposes of this Privacy Policy, 88bf is the data controller in respect of the personal information of its registered players, prospective players, and website visitors. As data controller, 88bf determines the purposes for which and the manner in which your personal data is processed.

This Privacy Policy applies to all personal data collected through the 88bf website at https://88bf.lol, the 88bf mobile platform, 88bf customer support communications, and any other 88bf services through which you provide personal information. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

88bf collects personal data in the following categories. We collect only what is necessary for the stated purpose and do not retain data beyond its useful purpose, subject to legal retention obligations.

3.1 Directly from You. The majority of personal data that 88bf holds about you is provided by you directly — when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or update your account settings. This data is collected at the point of interaction and stored in 88bf's secure systems.

3.2 Automatically Through Platform Use. When you access and use the 88bf platform, our systems automatically collect certain technical information about your device and session. This includes your IP address, the type of device and browser you are using, pages visited within the platform, game sessions initiated, time spent on each section of the platform, and error logs. This data is collected via server logs and, where applicable, cookies and similar tracking technologies.

3.3 From Third Parties. In limited circumstances, 88bf may receive personal data from authorised third parties, including:

• Payment processors and mobile wallet providers (JazzCash, EasyPaisa) confirming successful transaction completion;
• Identity verification service providers engaged by 88bf to assist with KYC processes;
• Anti-fraud and anti-money laundering screening services that may provide risk flags against your registered details;
• Regulatory or law enforcement authorities, in circumstances where we are legally required to obtain or cross-check information.

88bf uses your personal data for the following purposes:

• Account Creation and Management: To create, maintain, and administer your 88bf player account, including processing your login credentials, managing your PKR wallet balance, and maintaining your gaming history.
• Identity and Age Verification: To verify that you are 21 years of age or older and that you are who you claim to be, as required under our international gaming license. CNIC data is used exclusively for KYC purposes.
• Transaction Processing: To process your deposits from JazzCash, EasyPaisa, and Pakistani bank accounts, and to execute your withdrawal requests back to your verified payment methods in PKR.
• Legal and Regulatory Compliance: To comply with anti-money laundering (AML) obligations, including customer due diligence, suspicious activity monitoring, and regulatory reporting. This is a non-optional processing purpose required by our gaming license.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling and to administer any responsible gaming tools (deposit limits, loss limits, self-exclusion) that you or 88bf activates on your account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, identity fraud, money laundering, collusion, and other prohibited conduct on the 88bf platform.
• Customer Support: To respond to your support queries, resolve disputes, process complaints, and maintain records of communications for quality assurance and audit purposes.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the 88bf platform's features, game library, user interface, and performance, particularly for Pakistani mobile users.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and news about 88bf products via SMS or in-platform notification. You may withdraw consent at any time.

88bf processes your personal data on the following legal bases:

• Contractual Necessity: The processing of your registration data, financial data, and gaming activity data is necessary for the performance of the contract between you and 88bf (your account Terms & Conditions). Without this processing, we cannot operate your account.
• Legal Obligation: KYC identity verification, AML transaction monitoring, regulatory reporting, and record-keeping are required by law and by our gaming license. We have no discretion to opt out of these processing activities.
• Legitimate Interests: Fraud detection, platform security, abuse prevention, and platform improvement activities are pursued on the basis of 88bf's legitimate interest in operating a secure and fair platform. We have assessed that these legitimate interests are not overridden by your data protection rights in the context of an adult gaming platform with voluntary registration.
• Consent: Marketing communications and optional analytics are processed on the basis of your explicit consent, which you may withdraw at any time without affecting your account.

88bf does not sell, rent, or trade your personal data to third parties. We share personal data only in the following controlled circumstances:

• Payment Service Providers: We share the minimum necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors to facilitate your deposit and withdrawal requests. These providers operate under their own privacy policies and are subject to contractual data protection obligations with 88bf.
• Identity Verification Providers: 88bf may engage authorised third-party KYC verification services to assist in validating your CNIC and identity documents. These providers are contractually prohibited from using your data for any purpose other than verification on behalf of 88bf.
• Gaming Software Providers: Game providers such as Pragmatic Play, PG Soft, and Evolution Gaming may receive limited technical data (session tokens, bet amounts) necessary to operate the game software delivered within 88bf's platform. These providers do not receive your personal registration or identity data.
• Regulatory and Law Enforcement Authorities: 88bf is legally required to share certain data with licensing authorities, financial intelligence units, and law enforcement agencies upon lawful request. We cannot refuse such disclosures where they are required by applicable law or our gaming license.
• Fraud Prevention Networks: 88bf participates in industry fraud prevention systems that may involve sharing limited data (such as anonymised risk indicators) with other licensed gaming operators to prevent cross-platform fraud and money laundering. No directly identifying information is shared in this context without a specific legal basis.
• Professional Advisors: 88bf's lawyers, accountants, auditors, and insurers may have access to player data as necessary for the provision of their professional services to 88bf. All professional advisors are bound by confidentiality obligations.

88bf retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by law and our gaming license:

• Account and KYC Records: Retained for a minimum of five (5) years from the date of account closure, as required by AML regulations and our gaming license obligations.
• Transaction Records: All deposit and withdrawal records in PKR are retained for a minimum of five (5) years from the date of the transaction.
• Gaming and Betting History: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and responsible gaming audit purposes.
• Customer Support Records: Live chat transcripts and email communications are retained for two (2) years from the date of the interaction.
• Technical and Security Logs: Server logs and security event records are retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond the periods above due to an ongoing legal claim, regulatory investigation, or dispute, it will be retained until that matter is concluded and then deleted promptly.

88bf implements security measures consistent with the standards expected of regulated financial services platforms. Our security framework includes:

• Encryption at Rest: All personal data stored on 88bf systems — including CNIC records, account credentials, and financial data — is encrypted using AES-256 symmetric encryption. Plain-text personal data is never stored in our databases.
• Encryption in Transit: All data transmitted between your device and 88bf's servers is protected by TLS 1.3 protocol over HTTPS. There is no HTTP fallback — all connections are encrypted regardless of your device or network.
• Password Security: 88bf does not store plain-text passwords. All passwords are hashed using the bcrypt algorithm with a high cost factor, meaning that even internal personnel cannot retrieve your actual password.
• Access Controls: Access to personal data within 88bf's systems is restricted on a strict need-to-know basis. Personnel who access player data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: 88bf operates real-time monitoring of its systems for unusual access patterns, attempted data breaches, and other security incidents. Automated alerts are generated for investigation by our security team.
• Data Breach Response: In the event of a personal data breach that creates a risk to affected players, 88bf will notify the relevant regulatory authority within 72 hours of discovery, and will notify affected players as soon as reasonably practicable. We maintain an incident response plan that is reviewed and tested regularly.

While 88bf takes all reasonable technical and organisational measures to protect your data, no internet-based system can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your own 88bf account credentials.

9.1 What Cookies 88bf Uses. The 88bf platform uses cookies and similar technologies to operate the site correctly, maintain your login session, remember your preferences, and collect analytics data to improve the platform. 88bf uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication tokens, CSRF protection cookies, and load balancing cookies. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language settings and game display options. Disabling these may affect your user experience.
• Analytics Cookies: Collect anonymised data about how players use the 88bf platform — which sections are visited, how long sessions last, and which games are played. This data is used to improve the platform.
• Security Cookies: Used by our fraud detection and bot prevention systems to distinguish legitimate user sessions from automated activity.

9.2 Managing Cookies. You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, blocking strictly necessary cookies will prevent you from logging in to your 88bf account. 88bf does not use third-party advertising cookies or cross-site tracking cookies.

As a registered 88bf player, you have the following rights in relation to your personal data. These rights may be subject to certain limitations where legal retention obligations or ongoing investigation requirements apply.

The 88bf platform is strictly intended for adults aged 21 years and older. 88bf does not knowingly collect personal data from individuals under the age of 21. All account registrations require active confirmation that the user is 21 or over, and KYC verification via CNIC is required prior to first withdrawal, which independently confirms age.

If 88bf discovers that an account has been created by a person under 21 years of age, that account will be immediately and permanently suspended, any deposits will be returned via the original payment method, and all personal data associated with the account will be securely deleted, except where retention is required for reporting purposes relating to the underage access incident itself.

Parents or guardians who believe that their child may have registered an 88bf account or accessed the platform should contact our support team immediately via live chat. We take all reports of underage access extremely seriously and will prioritise their investigation.

As an internationally licensed online gaming platform, certain 88bf systems and service providers may be located outside Pakistan. Where personal data is transferred to data processors in other countries, 88bf ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by our gaming license.

Safeguards for international transfers may include contractual data protection clauses incorporated into agreements with all third-party processors, data residency requirements for specific categories of sensitive data (including CNIC records), and engagement of processors only in jurisdictions that are assessed as providing adequate data protection standards.

88bf prioritises data processors that maintain data centres with strong privacy regulation track records. We do not transfer CNIC data or other identity verification documents outside our licensed processing environment without explicit technical and contractual controls in place.

13.1 Consent-Based Marketing. 88bf sends promotional SMS messages, in-platform notifications about bonuses and offers, and news about new games or features only where you have explicitly opted in to marketing communications during registration or via your account settings. We do not send unsolicited marketing communications.

13.2 Withdrawing Consent. You may opt out of all 88bf marketing communications at any time by updating your notification preferences in your account settings under Account → Communication Preferences, or by contacting our support team via live chat. Opting out of marketing has no effect on your ability to use the 88bf platform or on any other aspect of your account.

13.3 Transactional Communications. Certain communications are not considered marketing and will continue regardless of your marketing preferences. These include: account security alerts, deposit and withdrawal confirmations, KYC verification requests, responsible gaming notifications, and updates to these Terms or this Privacy Policy. These communications are necessary for the operation of your account.

88bf may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we offer. The date of the most recent update is always displayed at the top of this document.

Where changes to this Privacy Policy are material — for example, where we introduce a new processing purpose or a new category of data sharing — 88bf will provide advance notice to registered players via SMS to their registered Pakistani mobile number or via in-platform notification. We will provide at least fourteen (14) days' notice before material changes take effect.

Your continued use of the 88bf platform following notification of changes to this Privacy Policy constitutes acceptance of the updated Policy. If you do not accept the updated Privacy Policy, you must cease using the 88bf platform and may request account closure in accordance with our Terms & Conditions.

15.1 Contact for Privacy Matters. If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how 88bf has handled your personal data, please contact our support team in the first instance:

• Live Chat: Available 24 hours a day, 7 days a week — the fastest way to raise a privacy concern. Access via the live chat button on any page of the 88bf platform.
• Email: [email protected] (plain text — not a clickable link). Email response within 24 hours during normal periods; within 48 hours during exceptionally busy periods.

15.2 Formal Complaints. If you are not satisfied with how 88bf has responded to a privacy concern, you have the right to escalate the matter to the relevant supervisory authority under 88bf's international gaming license. Details of the relevant authority are available from our support team on request. We encourage players to attempt resolution through 88bf's internal process before escalating, as most issues can be resolved quickly this way.

15.3 Response Timeframes. 88bf is committed to the following response timeframes for privacy-related communications: Initial acknowledgement within 2 business days; substantive response or update within 10 business days; full resolution target within 30 days for all data rights requests.