888 g99 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

The following definitions apply throughout this Privacy Policy. These terms carry the same meaning as in the 888 g99 Terms & Conditions where they are defined in both documents.

This Privacy Policy applies to all Personal Data collected by 888 g99 in connection with the operation of the 888 g99 Platform, regardless of whether the data was collected via the website, via support communications, via payment processing, or through any other channel of interaction between you and 888 g99.

888 g99 is the Data Controller in respect of all Personal Data collected from players and visitors to the 888 g99 Platform. As the Data Controller, 888 g99 is responsible for determining the purposes and means by which your Personal Data is processed, and for ensuring that processing is conducted lawfully, fairly, and transparently.

If you have any questions about how 888 g99 processes your Personal Data, or if you wish to exercise any of your data rights as described in Section 11 of this Policy, you may contact the 888 g99 Data Protection team via the contact details provided in Section 14 of this Policy.

888 g99 collects the following categories of Personal Data from players and Platform visitors. The specific data points collected may vary depending on the nature of your interaction with the Platform and the stage of the account lifecycle you are at.

888 g99 collects Personal Data through the following channels and mechanisms:

• Direct provision by you: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or participating in promotions.
• Automated technical collection: Technical Data (IP address, device identifiers, browser information, session activity) is collected automatically via standard web server logging and analytics when you visit the 888 g99 Platform.
• Cookies and tracking technologies: 888 g99 uses cookies and similar technologies to enhance your Platform experience, maintain session continuity, and gather aggregated usage statistics. See Section 8 for full details.
• Third-party payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, or a bank transfer, the relevant payment processor may share transaction confirmation data with 888 g99 to reconcile the transaction against your Account.
• Identity verification services: 888 g99 may use third-party KYC service providers to verify the authenticity of identity documents submitted by players. These providers process your identity data on 888 g99's behalf under strict data processing agreements.

888 g99 processes your Personal Data on the following legal bases. Each processing activity is linked to one or more of these bases, which are recognised grounds for lawful data processing:

• Contractual necessity: Processing that is necessary to perform the contract between you and 888 g99 — including account creation, deposit processing, game provision, and withdrawal execution. Without this processing, 888 g99 cannot provide you with the Platform services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC obligations, fraud prevention, and financial record-keeping.
• Legitimate interests: Processing that serves 888 g99's legitimate business interests — such as fraud detection, platform security monitoring, responsible gaming compliance, and improving the quality of services — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — such as sending you optional marketing communications about 888 g99 promotions. You may withdraw your consent to marketing communications at any time by contacting support or using the unsubscribe mechanism in any marketing email.

888 g99 uses your Personal Data for the following purposes. All processing is conducted in accordance with the legal bases described in Section 5:

• Account management: Creating, maintaining, and securing your 888 g99 account, processing your login credentials, managing your PKR balance, and maintaining your account history.
• Payment processing: Processing PKR deposits via Easypaisa, JazzCash, and bank transfers; processing PKR withdrawals to your verified payment accounts; reconciling transaction records; and detecting and preventing payment fraud.
• Identity verification: Conducting KYC verification to confirm your identity, age (18+), and payment account ownership as required for first withdrawals and ongoing compliance.
• Responsible gaming: Operating deposit limits, session alerts, cooling-off periods, and self-exclusion tools; identifying patterns of play that may indicate problem gambling and intervening where appropriate; maintaining records of responsible gaming tool usage.
• Customer support: Responding to your support enquiries via Live Chat, WhatsApp, Telegram, and email; resolving account disputes; and maintaining support interaction records.
• Platform improvement and analytics: Analysing aggregated usage data to improve Platform performance, game selection, and user experience for Pakistan players.
• Fraud prevention and security: Detecting and preventing unauthorised access, bonus abuse, money laundering, collusion, and other prohibited activities; maintaining Platform integrity.
• Marketing communications (with consent): Sending you information about 888 g99 promotions, bonus offers, and new game launches where you have consented to receive such communications.

888 g99 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. Your Personal Data is shared with third parties only in the following limited and specific circumstances:

• Payment processors: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB receive only the data necessary to execute your specific deposit or withdrawal transaction. These providers are not authorised by 888 g99 to use your data for any other purpose.
• KYC and identity verification providers: Third-party identity verification services may process your CNIC, passport, or selfie photograph for the purpose of verifying your identity and age. These providers operate as data processors under contractual data processing agreements with 888 g99.
• Game software providers: Game studios and live casino operators (such as PG Soft, Pragmatic Play, and Evolution) receive your account identifier and bet history in an anonymised or pseudonymised format necessary for game provision and fairness auditing. Full personal identity data is not shared with game providers.
• Legal and regulatory authorities: 888 g99 may be required to disclose Personal Data to law enforcement, financial intelligence units, or regulatory authorities in Pakistan or other relevant jurisdictions in response to lawful requests, court orders, or legal obligations including anti-money laundering reporting requirements.
• Professional advisors: Legal, financial, or technical advisors engaged by 888 g99 may access Personal Data on a strictly need-to-know basis, subject to professional confidentiality obligations.

888 g99 uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device by a website to store information about your session and preferences. 888 g99 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication cookies that keep you logged in to your 888 g99 account during a browsing session. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your preferences such as language settings and last-visited game category to improve your experience on returning visits to 888 g99.
• Analytics cookies: Collect aggregated and anonymised data about how Pakistan players use the Platform — including pages visited, session duration, and features used — to help 888 g99 identify and improve areas of the Platform experience.
• Security cookies: Help 888 g99 detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

888 g99 takes the security of your Personal Data seriously and has implemented the following technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• All data transmitted between your device and the 888 g99 Platform is encrypted using 256-bit SSL/TLS — the same standard used by Pakistan's major commercial banks for online banking.
• Personal Data at rest is stored in encrypted form on secure servers with restricted physical and logical access controls.
• Access to Personal Data within the 888 g99 organisation is restricted to authorised personnel who need it to perform their job functions. Access is logged and audited on a regular basis.
• Passwords are stored as one-way cryptographic hashes — 888 g99 cannot see your plaintext password and will never ask you to share it.
• 888 g99 conducts regular security reviews and vulnerability assessments of the Platform infrastructure.
• In the event of a data breach that is likely to result in risk to your rights, 888 g99 will notify affected players within 72 hours of becoming aware of the breach, in accordance with applicable notification obligations.

888 g99 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to different categories of data:

• Account and financial data (including KYC records, deposit and withdrawal history, and transaction records) are retained for a minimum of five years following account closure, in accordance with financial record-keeping obligations applicable to online gaming platforms.
• Responsible gaming records (including self-exclusion history and deposit limit settings) are retained for a minimum of five years following account closure, to maintain the integrity of exclusion commitments and regulatory compliance.
• Support communication records are retained for two years following the resolution of the relevant matter, for quality assurance and dispute resolution purposes.
• Technical and analytics data (including anonymised usage statistics) may be retained for longer periods in aggregated, non-personally-identifiable form for Platform improvement purposes.
• Marketing consent records are retained until you withdraw your consent and for one year thereafter, to demonstrate compliance with consent requirements.

Following the expiry of the applicable retention period, 888 g99 will securely delete or anonymise your Personal Data so that it can no longer be associated with you as an individual.

As an individual whose Personal Data is processed by 888 g99, you hold the following rights in respect of your data. 888 g99 will respond to all rights requests within 14 calendar days of receipt. To exercise any of these rights, contact 888 g99 via the details in Section 14.

888 g99 is strictly an adults-only platform. The 888 g99 Platform is not directed at individuals under the age of 18, and 888 g99 does not knowingly collect Personal Data from persons under 18 years of age.

Age verification is a mandatory component of the 888 g99 KYC process. All players are required to provide government-issued identity documentation confirming they are 18 or older before their first withdrawal is processed. 888 g99 may request age verification at any point during the account lifecycle where there is reasonable grounds to do so.

888 g99 may update this Privacy Policy from time to time to reflect changes in platform operations, applicable regulations, or data processing practices. When material changes are made, 888 g99 will notify registered players via their registered email address or via a prominent in-platform notification prior to the change taking effect.

The "last updated" date at the top of this page will always reflect the date of the most recent version. We encourage you to review this Privacy Policy periodically to stay informed about how 888 g99 handles your Personal Data.

For all privacy-related enquiries, data rights requests, or concerns about how 888 g99 handles your Personal Data, please contact the 888 g99 Data Protection team using the channels below. All communications are handled in English by our 24/7 support team:

• Email: [email protected] — please use the subject line "Privacy Request" for data-related enquiries.
• Live Chat: Available within the 888 g99 Platform when logged in to your account.
• WhatsApp & Telegram: Contact details are published in the 888 g99 Platform support section.

888 g99 will acknowledge all privacy-related enquiries within 48 hours and provide a substantive written response within 14 calendar days. Complex requests involving large volumes of data or cross-departmental review may require up to 30 days — in such cases, 888 g99 will notify you of the extended timeline within the initial 14-day period.

If you are dissatisfied with the way 888 g99 has handled your privacy concern or data rights request, you have the right to escalate the matter to 888 g99 senior management by clearly stating so in your correspondence. 888 g99 takes all privacy escalations seriously and treats them with priority handling.