88gf Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Who We Are

This Privacy Policy applies to the 88gf online gaming platform, accessible at https://88gf.vip (the "Platform"). In this document, "88gf", "we", "us", and "our" refer to the operator of the 88gf Platform and its affiliated entities responsible for data processing decisions relating to the Platform.

88gf operates under an international gaming licence. As part of our licensing obligations, we are required to implement data protection standards consistent with recognised international frameworks, including the collection of only necessary data, storage limitation, and data subject rights. This policy reflects those obligations as they apply to Pakistani players using the 88gf Platform.

For all privacy-related queries, you may contact our designated Data Support team. Contact details are provided in Section 14 of this Policy.

2. Data We Collect

88gf collects personal data in several categories depending on how you interact with the Platform. The table below summarises the main categories of data we hold and the purpose for which each category is collected:

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the photograph required for CNIC-based KYC verification.

3. How We Collect Your Data

88gf collects personal data through the following channels and methods:

• Direct submission at registration: When you create an 88gf account, you provide your name, email address, date of birth, Pakistani mobile number, and chosen password directly through the registration interface.
• KYC document upload: When you submit your CNIC, selfie photograph, and proof of address documents through the Platform's verification portal, these documents are processed and stored securely as part of your player file.
• Payment transactions: When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or any other accepted payment channel, relevant transaction reference data is recorded on your account.
• Automated technical collection: When you access and navigate the Platform, our servers automatically record your IP address, device identifiers, browser and OS information, session start and end times, and pages accessed. This data is collected passively and does not require any active input from you.
• Cookies and similar technologies: The Platform uses cookies and local storage to maintain your session state, remember preferences, and support analytics functions. See Section 9 for full details.
• Customer support interactions: All communications you initiate with the 88gf support team — whether via live chat, email, or ticket — are recorded and associated with your account for quality assurance and regulatory compliance purposes.
• Third-party verification services: Where additional identity verification is required, 88gf may use third-party KYC service providers to assist in document validation . These providers are contractually bound to process your data only for the stated verification purpose and in accordance with our data protection standards.

4. Why We Use Your Data

88gf uses your personal data only for legitimate, documented purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The specific purposes for which we use each category of data are as follows:

• Account creation and management: To establish and maintain your 88gf player account, authenticate your identity at login, and administer account settings and preferences.
• Age and identity verification: To confirm that you are at least 21 years of age and that the identity information you have provided is accurate, as required under our licensing conditions.
• Payment processing: To execute deposits credited to your Real Money Balance and to process withdrawal requests to your verified payment methods in PKR or USDT TRC20.
• Anti-money laundering and fraud prevention: To monitor transaction patterns, detect unusual activity, verify the source of deposited funds where required, and report suspicious activity to relevant financial intelligence authorities as obligated under our international gaming licence.
• Regulatory compliance and record-keeping: To maintain the records required by our gaming licence authority, including player transaction histories, KYC documentation, and responsible gaming tool usage, for the retention periods specified in Section 8.
• Responsible gaming monitoring: To identify indicators of problem gambling behaviour — such as rapid escalation of deposit amounts, extended session durations, or patterns consistent with self-exclusion evasion — and to intervene in accordance with our responsible gaming obligations.
• Customer support: To respond to your queries, investigate complaints, and resolve disputes in a fair and documented manner.
• Platform improvement and analytics: To understand how players use the Platform, which game categories attract the most engagement, and where the user experience can be improved. Analytics data is processed in aggregate form wherever possible.
• Marketing communications: To send you promotional offers, bonus announcements, and PSL cricket betting updates — but only if you have explicitly opted in to receive marketing communications from 88gf. You may withdraw your consent at any time through your account settings or by contacting support.
• Security and technical integrity: To detect and respond to unauthorised access attempts, bot activity, multi-accounting, and other threats to Platform security.

5. Legal Basis for Processing

88gf processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contract performance: The majority of our data processing is necessary to perform our contractual obligations to you as an 88gf account holder — including maintaining your account, processing payments, and delivering gaming services.
• Legal obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, and regulatory record-keeping — are required by the conditions of our international gaming licence and applicable financial regulations. We cannot offer you full platform access without completing these legally required processes.
• Legitimate interests: We process technical and usage data on the basis of our legitimate interests in securing the Platform, preventing fraud, and improving our services, provided these interests are not overridden by your fundamental privacy rights.
• Consent: Where we process your data for optional purposes — such as sending you marketing communications or using non-essential cookies — we do so only on the basis of your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Third Parties

88gf does not sell your personal data to third parties under any circumstances. We share your data only where strictly necessary for the purposes described in this Policy, and only with parties who are contractually bound to protect it. The categories of third parties with whom we may share data are as follows:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and other accepted payment providers receive the minimum transaction data necessary to execute your deposit or withdrawal. These providers operate under their own privacy policies and regulatory frameworks.
• KYC and identity verification providers: Third-party services that assist in validating CNIC documents and verifying address data. These providers act as data processors under binding data processing agreements and may not use your data for any purpose beyond verification.
• Game software providers: Third-party casino game developers whose software is integrated into the 88gf Platform may receive anonymised or pseudonymised game-play data for purposes of game performance monitoring and RNG certification. They do not receive personally identifiable account data.
• Fraud prevention and AML services: Specialist third-party services used to screen transactions against watchlists and sanctions databases as required under our licensing obligations.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or licensing authority directive, 88gf will disclose player data to competent regulatory bodies or law enforcement agencies. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and who access data only to the extent necessary to provide their services to 88gf.

7. International Data Transfers

As an internationally licensed online gaming operator, 88gf may store or process certain categories of player data on servers located outside Pakistan. Where data is transferred internationally, 88gf takes steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with recognised international data protection principles.

Safeguards we apply to international transfers include contractual clauses that impose binding data protection obligations on the receiving entity, restricting the receiving party's use of the data to the stated processing purpose and requiring equivalent security standards to those maintained on 88gf's primary infrastructure.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact our Data Support team using the details in Section 14.

8. Data Retention

88gf retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your registered account relationship with 88gf, plus a minimum of five (5) years following account closure. This extended post-closure retention is required by our gaming licence conditions for audit and regulatory inspection purposes.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in accordance with international AML record-keeping standards.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with international financial record-keeping obligations applicable to licensed gaming operators.
• Customer support communications: Retained for three (3) years from the date of the interaction, to support dispute resolution and quality assurance reviews.
• Technical and usage data (logs): Retained for up to twelve (12) months from the date of collection, after which they are either deleted or anonymised for aggregate analytics purposes.
• Marketing consent records: Retained for the duration of your consent plus three (3) years thereafter, to demonstrate compliance with consent-based marketing obligations.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents reconstruction of personally identifiable information.

9. Cookies & Tracking Technologies

The 88gf Platform uses cookies and similar client-side storage technologies to deliver core platform functionality and to support analytics. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your platform preferences, such as language settings and display options, so that you do not need to reset them each time you visit. These are set on the basis of your account settings.
• Analytics cookies: Used to collect anonymised data about how players navigate the Platform — which pages are visited most, where players drop off, and how long sessions last. This data informs Platform improvements. Analytics cookies are only set with your consent.
• Security cookies: Used to detect and prevent bot traffic, credential-stuffing attacks, and other automated threats to Platform security. These cookies process device fingerprint data and session behavioural signals.

You may manage your cookie preferences through the cookie consent banner displayed on your first visit to the Platform. You can also manage cookies through your browser's settings. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the Platform.

88gf does not use third-party advertising cookies or cross-site tracking cookies that share your data with external advertising networks.

10. Your Data Rights

As an 88gf player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Support team as described in Section 14. We will respond to all verified requests within thirty (30) calendar days.

• Right of access: You have the right to request a copy of the personal data 88gf holds about you, together with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update certain data fields — such as your email address and contact number — directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Please note that erasure requests are subject to our legal and regulatory retention obligations — we cannot delete data that we are required to retain by our gaming licence authority.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease all marketing communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

11. Children's Privacy

The 88gf Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. All registration attempts are subject to age verification, and accounts whose CNIC-confirmed date of birth indicates the holder is under 21 are immediately declined or suspended upon discovery.

If you are a parent or guardian and believe that a person under the age of 21 in your household has created an 88gf account or submitted personal data to the Platform, please contact our support team immediately. We will investigate the matter promptly, close the account, and arrange deletion of all personal data associated with the underage user in accordance with our retention obligations.

Parents and guardians are encouraged to use parental control and content filtering software on shared devices to restrict access to online gaming platforms. 88gf supports responsible access and will cooperate fully with parental inquiries relating to underage account use.

12. Security Measures

88gf implements technical and organisational security measures proportionate to the sensitivity of the data we process. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption across all data transmission between your browser or device and the 88gf Platform servers, ensuring that data in transit cannot be intercepted by third parties.
• Encrypted storage of sensitive data fields including passwords (stored as salted cryptographic hashes, never in plain text), financial account numbers, and KYC document files.
• Access controls and role-based permissions that restrict 88gf staff access to personal data on a strict need-to-know basis. Only authorised personnel with documented operational reasons may access player personal data.
• Two-factor authentication (2FA) available to all players for account login, and mandatory for all 88gf administrative staff accounts that have access to player data systems.
• Regular security audits and penetration testing conducted by qualified third-party security firms to identify and remediate vulnerabilities in the Platform's infrastructure.
• Intrusion detection systems that monitor Platform infrastructure for anomalous access patterns and generate automated alerts for investigation by the security team.
• Data breach response procedures that define the steps 88gf will take in the event of a security incident, including notification to affected players and relevant regulatory authorities within the timeframes required by applicable obligations.

While 88gf takes all reasonable precautions to secure your data, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your 88gf account, enable 2FA, and notify support immediately if you suspect unauthorised access to your account.

13. Changes to This Policy

88gf may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform features. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Where changes are material — meaning they significantly affect how we use your data or the rights available to you — 88gf will notify registered players via email and via a prominent notice displayed on the Platform upon login. We will provide at least fourteen (14) days' advance notice before material changes take effect, giving you the opportunity to review the updated Policy and, if you do not agree, to close your account and withdraw your Real Money Balance.

Your continued use of the 88gf Platform after the effective date of any Policy update constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how 88gf protects your personal data.

14. Contact Us

For all privacy-related matters — including data rights requests, consent withdrawal, questions about this Policy, or concerns about how your data has been handled — please contact the 88gf Data Support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the chat widget on the 88gf Platform. For data rights requests, ask to be connected to the Data Support team. Average initial response under two minutes.
• Email: support@88gf.vip — please include "Privacy Request" in your subject line along with your registered username so we can locate and action your request promptly.

We will acknowledge all privacy-related requests within 48 hours and aim to resolve them within 30 calendar days. Where a request is complex or involves a large volume of data, we will notify you within the initial 30-day period if an extension is required, and provide an estimated completion date.