88ef Privacy Policy

This Privacy Policy is published by 88ef (hereinafter referred to as "88ef," "we," "our," or "the Platform"), an internationally licensed online casino and sports betting operator serving the Pakistan market. 88ef operates the website accessible at https://88ef.lat and any associated mobile applications (collectively, "the Platform").

For the purposes of this Privacy Policy, 88ef acts as the data controller with respect to all personal data collected from users ("you," "the Player," or "the Data Subject") through the Platform. As data controller, 88ef determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles under its international gaming licence.

88ef collects personal data in several categories. The specific data collected from you depends on the nature of your interaction with the Platform:

We do not intentionally collect sensitive personal data beyond what is required for identity verification (CNIC) and regulatory compliance. Where the collection of such data is unavoidable, it is handled with heightened protective measures.

88ef collects personal data through the following methods:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, submit feedback, or interact with any feature that requires you to input information.
• Automatically through platform use: Technical and behavioural data is collected automatically through cookies, log files, session tracking, and similar technologies each time you access the 88ef website or mobile application. See Section 7 for full details on cookies and tracking.
• From payment providers: When you process a transaction via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, or USDT TRC20, our payment processing partners transmit transaction confirmation data to 88ef for the purpose of crediting or debiting your account balance.
• From identity verification partners: Where 88ef uses third-party KYC service providers to assist in verifying identity documents (such as CNIC validation), those providers may return verification results and data flags to 88ef.
• From fraud detection systems: Automated fraud detection and anti-money laundering systems may cross-reference data against relevant databases and return signals that are logged against your account record.

88ef processes your personal data for the following specific purposes:

• Account creation and management: To register your 88ef account, maintain your player profile, process your login credentials, and administer your account settings and preferences.
• Identity and age verification: To confirm that you are who you say you are, that you are at least 21 years of age, and that you are not registering under a prohibited identity. CNIC-based KYC is a regulatory requirement under 88ef's international gaming licence.
• Payment processing: To process deposits, withdrawals, bonus credits, and any other financial transactions on your 88ef account. This requires sharing relevant payment identifiers with our payment processing partners.
• Fraud prevention and anti-money laundering (AML): To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited activities as defined in the 88ef Terms and Conditions.
• Regulatory compliance: To fulfil 88ef's obligations under its international gaming licence, including player due diligence, transaction monitoring, suspicious activity reporting, and record-keeping requirements.
• Responsible gaming monitoring: To monitor player behaviour for indicators of problem gambling, to enforce self-imposed and platform-imposed limits, and to identify players who may benefit from responsible gaming interventions.
• Customer support: To respond to your support requests, resolve disputes, and maintain a record of communications for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the 88ef platform, optimise the mobile experience for Pakistani network conditions, and develop new product features.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in notifying you of directly relevant offers. You may opt out of marketing communications at any time via your Account Settings.

88ef processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary for the performance of the contract between you and 88ef — specifically, the provision of the betting and casino services you have registered for. This covers account management, payment processing, game delivery, and support.
• Legal obligation: Processing is required for 88ef to comply with its regulatory and legal obligations under its international gaming licence, including KYC, AML, transaction monitoring, and record-keeping obligations.
• Legitimate interests: Processing is necessary for 88ef's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and improving the service — provided these interests do not override your fundamental rights and freedoms.
• Consent: Where 88ef relies on your consent as the legal basis for processing (primarily for marketing communications and non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent may be effected via Account Settings or by contacting support.

88ef does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data is shared only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 wallet infrastructure providers receive only the data necessary to execute the specific transaction you have requested. These providers operate under their own privacy policies and are contractually prohibited from using your data beyond the scope of the transaction.
• KYC and identity verification providers: Third-party identity verification services that assist 88ef in validating CNIC documents and confirming age eligibility. These partners process identity data strictly for verification purposes under data processing agreements with 88ef.
• Software and game providers: Licensed game software providers whose titles are available on the 88ef platform may receive anonymised session identifiers to facilitate game delivery and RNG certification auditing. They do not receive your personally identifiable data.
• Fraud detection and AML systems: Automated fraud screening platforms that process transaction metadata to identify suspicious patterns. Data processed by these systems is handled under strict confidentiality and data minimisation obligations.
• Regulatory authorities: Where 88ef is legally required to disclose data to a gaming regulator, financial intelligence unit, law enforcement agency, or court under its international gaming licence or applicable law, such disclosures will be made. 88ef will notify the affected player of such disclosures where legally permitted to do so.
• Group companies: Where 88ef operates within a corporate group, limited data may be shared with affiliated entities for consolidated compliance and risk management purposes, under intra-group data sharing agreements.

88ef uses cookies and similar tracking technologies on its website and mobile application. Cookies are small data files stored on your device that help the platform function correctly and enable certain features. The categories of cookies used by 88ef are:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without preventing core platform functionality. No consent is required for their use.
• Functional cookies: Enable personalised platform features such as remembering your language preference, display settings, and preferred deposit method. These are set with your implicit consent upon account creation.
• Analytics cookies: Used by 88ef's internal analytics systems to understand how players navigate the platform, which features are used most frequently, and where technical errors occur. Analytics data is aggregated and does not identify individual players. These require your consent and can be disabled via your browser or device settings.
• Marketing cookies: Where applicable, used to track the effectiveness of promotional campaigns and to avoid showing the same offer to a player who has already seen it. These are only set with your explicit consent and can be withdrawn at any time via Account Settings.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. Disabling analytics or marketing cookies will not affect your ability to use the 88ef platform or access your account.

88ef implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the 88ef platform is encrypted using TLS 1.3 with 256-bit SSL certificates. This applies to website sessions, mobile app communications, and payment processing calls.
• Encryption at rest: Sensitive personal data stored in 88ef's databases — including identity documents, payment method details, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within the 88ef organisation is restricted to employees and systems with a documented operational need. Role-based access controls and multi-factor authentication are enforced for all internal data system access.
• Audit logging: All access to personal data records by internal systems and staff is logged with timestamps and user identifiers. Logs are retained for security audit purposes and reviewed regularly for anomalous access patterns.
• Penetration testing: The 88ef platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Incident response: In the event of a confirmed data breach affecting your personal data, 88ef will notify affected players and relevant regulatory authorities within the timeframes required by applicable law, and will provide full details of the nature, scope, and remediation of the incident.

88ef retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by regulatory and legal obligations. The following general retention schedule applies:

• Active account data: Personal data associated with an active 88ef account is retained for the duration of the account relationship and for a period of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping requirements under 88ef's international gaming licence.
• KYC and identity documents: CNIC documents and identity verification records are retained for a minimum of five (5) years following account closure or the last transaction, as required by AML regulations. After this period, identity documents are securely deleted.
• Transaction records: Financial transaction records, including deposits, withdrawals, and bet history, are retained for a minimum of five (5) years for regulatory compliance purposes.
• Support communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the communication, for dispute resolution and quality assurance purposes.
• Technical and behavioural data: Session logs, IP address records, and behavioural analytics data are retained for twelve (12) months, after which they are deleted or anonymised.
• Marketing consent records: Records of your marketing consent or withdrawal of consent are retained for the lifetime of your account plus five (5) years, to provide evidence of compliance with consent obligations.

Where retention beyond these periods is required for the defence of legal claims or ongoing regulatory proceedings, data may be retained for longer with appropriate safeguards applied. Upon expiry of the applicable retention period, data is permanently and securely deleted from all 88ef systems.

As a player on 88ef, you have the following rights with respect to your personal data. To exercise any of these rights, please contact 88ef support via in-app live chat or by email at [email protected]:

• Right of Access: You have the right to request a copy of all personal data 88ef holds about you, including transaction history, account data, and communication records. Subject Access Requests (SARs) are acknowledged within 5 business days and fulfilled within 30 calendar days.
• Right to Rectification: If any personal data held by 88ef about you is inaccurate or incomplete, you have the right to request correction. This includes updating your contact details, correcting a name discrepancy, or amending an erroneously recorded transaction note.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Where no overriding legal obligation requires retention (such as AML record-keeping requirements), 88ef will action deletion requests within 30 days. Deletion requests cannot override mandatory regulatory retention obligations.
• Right to Restriction: You may request that 88ef restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the lawfulness of processing.
• Right to Data Portability: You may request an export of your personal data in a structured, commonly used, machine-readable format (CSV or JSON), to allow transfer to another service provider.
• Right to Object: You have the right to object to processing of your data carried out on the basis of legitimate interests, including any profiling for responsible gaming monitoring or marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time via Account Settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

88ef is an adults-only platform. The minimum age to register and use the 88ef platform is twenty-one (21) years. We do not knowingly collect personal data from individuals under the age of 21.

At registration, all players must confirm that they are 21 years of age or older. Identity verification (CNIC) is mandatory before withdrawal and is used to confirm age. If 88ef discovers or is notified that personal data has been collected from a player who is under 21 years of age, the following actions will be taken immediately:

• The account will be suspended and then permanently closed
• All personal data associated with the underage account will be securely deleted, except to the extent that retention is required by regulatory obligations
• Any real-money deposits will be refunded to the payment method used, where technically possible
• Any winnings accumulated during the period of underage use will be permanently forfeited

Parents or guardians who become aware that a minor in their household has registered on the 88ef platform are encouraged to contact 88ef support immediately via in-app live chat or email at [email protected].

As an internationally operated platform, 88ef may transfer your personal data to, and process it in, countries outside of Pakistan. This may occur where 88ef's infrastructure, third-party service providers (including payment processors or KYC partners), or affiliated entities are located in other jurisdictions.

Where such transfers occur, 88ef ensures that appropriate safeguards are in place to maintain the protection of your personal data at a level equivalent to the standards applied within Pakistan and under 88ef's international gaming licence obligations. These safeguards may include:

• Contractual data protection clauses (equivalent to Standard Contractual Clauses) with all third-party recipients of transferred data
• Transfers only to jurisdictions where equivalent data protection standards apply
• Intra-group data sharing agreements where data is transferred to affiliated entities within the 88ef corporate structure

By using the 88ef platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards outlined above.

88ef reserves the right to amend or update this Privacy Policy at any time. Changes may be made to reflect updates in applicable law or regulation, changes in 88ef's data processing activities, improvements in platform functionality, or updated guidance from relevant regulatory authorities.

When material amendments are made to this Privacy Policy, 88ef will notify registered players via their registered email address or via an in-platform notification prior to the changes taking effect. The updated Privacy Policy will be published on this page with a revised "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how 88ef handles your personal data. Your continued use of the 88ef platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms, to the extent permitted by applicable law.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 88ef, please contact us through the following channels:

• In-app live chat: Available 24/7 from within your logged-in 88ef account. This is the fastest channel for most privacy and data-related queries, including Subject Access Requests and consent withdrawal.
• Email: [email protected] — for formal written data rights requests, Privacy Policy queries, and data breach notifications. Please include your registered mobile number and the specific nature of your request.

88ef has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations under its international gaming licence. Formal data rights requests, escalated privacy complaints, and data breach notifications should be directed to the DPO via the email address above, with the subject line "Data Protection — [Nature of Request]".

If you believe 88ef has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction, or with the regulatory body overseeing 88ef's international gaming licence.