888pak Privacy Policy

Welcome to the 888pak Privacy Policy. 888pak ("888pak", "we", "us", "our") operates the online gaming platform accessible at https://888pak.org, offering sports betting on PSL cricket and other markets, casino games, live dealer tables, and slot products to registered players in Pakistan and other permitted jurisdictions.

We understand that Pakistani players — whether placing a PSL match bet from Lahore, spinning a slot from Karachi, or accessing live baccarat from Islamabad — expect their personal information to be handled with genuine care and transparency. This Privacy Policy fulfils that expectation. It is written in plain English and is intended to be genuinely useful, not just a legal checkbox.

This Privacy Policy applies to all personal data collected by 888pak through the https://888pak.org website, the 888pak mobile site, and any communications you have with 888pak's customer support team. It does not apply to third-party websites that may be linked from the 888pak platform — those sites operate under their own privacy policies.

By registering an 888pak account or using the 888pak platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Privacy Policy should be read alongside the 888pak Terms & Conditions and Responsible Gaming Policy.

For the purposes of applicable data protection legislation, 888pak is the data controller responsible for the personal data collected through the 888pak platform. As data controller, 888pak determines the purposes for which and the means by which personal data is processed.

888pak operates under an international online gaming license. The licensing authority's jurisdiction provides the applicable legal framework for data protection obligations that govern 888pak's operations. Where 888pak engages third-party processors — such as payment service providers, KYC verification companies, or analytics platforms — those processors act solely on 888pak's instructions and are bound by data processing agreements that require them to maintain appropriate security standards.

If you have any questions about how 888pak acts as a data controller, or wish to understand how a specific processing activity is governed, please contact us at the details provided in Section 15 of this Policy.

888pak collects the following categories of personal data from players and visitors to the platform:

888pak does not collect sensitive special-category personal data (such as racial or ethnic origin, religious beliefs, or health data) unless specifically required by our responsible gaming obligations — for example, where a player voluntarily discloses a gambling-related health concern when requesting self-exclusion.

888pak collects personal data through the following means:

• Direct interactions — Data you provide when registering your account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a 888pak survey or promotion;
• Automated technologies — Technical and usage data collected automatically when you access the 888pak platform, including through cookies, server logs, and session tracking (see Section 11 on Cookies);
• Third-party sources — Identity and fraud-risk data received from KYC verification providers (such as document authentication services), payment processors, and, where applicable, publicly available sources for AML screening purposes.

888pak does not purchase or acquire personal data from data brokers, social media platforms, or unrelated third-party list providers for marketing or profiling purposes.

888pak processes your personal data on the following legal bases:

• Performance of a contract — Processing necessary to register your account, accept your bets and wagers, process your PKR deposits and withdrawals, and deliver the 888pak gaming services you have requested;
• Legal obligation — Processing required to comply with our international gaming license conditions, anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and applicable data retention obligations;
• Legitimate interests — Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics that are necessary for the safe and lawful operation of the 888pak platform, provided these interests are not overridden by your rights and interests;
• Consent — Processing for direct marketing communications (such as PSL bonus offers, new game announcements, and promotional emails), where you have given your explicit opt-in consent during or after account registration. You may withdraw this consent at any time.

888pak uses the personal data collected for the following specific purposes:

• To register and maintain your 888pak player account;
• To verify your identity and age (21+ requirement) as mandated by our gaming license;
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and other accepted payment methods;
• To detect, investigate, and prevent fraudulent transactions, multi-accounting, and money laundering activity;
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling and proactively offering support tools;
• To settle bets, apply bonus promotions, and communicate account-related information including balance updates and transaction confirmations;
• To provide customer support and resolve disputes relating to your 888pak account or transactions;
• To comply with reporting obligations to our international licensing authority;
• To send you promotional communications about 888pak bonuses, PSL cricket betting offers, new casino games, and platform updates — but only where you have given your consent or where we have a legitimate interest to do so;
• To improve the 888pak platform through aggregated, anonymised usage analytics.

888pak does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without human review, except where required by our AML screening obligations.

888pak may share your personal data with the following categories of recipients:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and cryptocurrency gateway providers, solely for the purpose of processing your financial transactions;
• KYC and identity verification providers — Third-party services used to authenticate government-issued identity documents (CNIC, passport) and confirm your age and residential address;
• Fraud prevention and AML screening services — Specialist providers that screen player activity against financial crime databases as required by our licensing obligations;
• Game software providers — Casino and slot game providers who may receive anonymised session data to operate their games within the 888pak platform; no identifiable personal data is shared with game providers beyond what is technically necessary;
• Licensing authority and regulators — 888pak's international gaming regulator and, where legally required, Pakistani or international law enforcement authorities;
• IT infrastructure providers — Cloud hosting, content delivery, and cybersecurity providers who process data solely for the purpose of operating and securing the 888pak platform.

All third-party data processors engaged by 888pak are required to sign data processing agreements that prohibit them from using 888pak player data for their own purposes and require them to maintain security standards at least equivalent to those applied by 888pak.

As an internationally licensed gaming operator, 888pak may store and process your personal data on servers located outside Pakistan. Where personal data is transferred to jurisdictions that do not provide equivalent data protection standards to those applicable in 888pak's licensing jurisdiction, 888pak implements appropriate safeguards including:

• Contractual clauses binding the recipient to process data only as instructed by 888pak and to maintain appropriate security measures;
• Transfers only to jurisdictions or organisations that have been assessed as providing an adequate level of data protection for the purpose of the specific transfer;
• Regular review of third-party processor data protection standards as part of 888pak's vendor management programme.

By using the 888pak platform and providing your personal data, you acknowledge that your data may be transferred to and processed in countries outside Pakistan as described in this section. If you have concerns about a specific transfer, please contact 888pak support for further information.

888pak retains personal data for only as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by our gaming license and AML obligations:

• Account and KYC data — Retained for a minimum of five (5) years from the date of account closure or the last transaction, whichever is later, in accordance with standard AML record-keeping requirements;
• Transaction and betting records — Retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications — Retained for three (3) years from the date of the communication;
• Marketing consent records — Retained for the duration of your account plus three (3) years after account closure to demonstrate compliance with consent obligations;
• Technical and session logs — Retained for twelve (12) months for security and fraud investigation purposes, then anonymised or deleted.

After the applicable retention period has expired, 888pak securely deletes or irreversibly anonymises your personal data. Where data must be retained beyond standard periods due to an active dispute, legal proceedings, or regulatory investigation, it will be held only for the duration of that matter and then deleted.

888pak implements a multi-layered security programme to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit — All data transmitted between your browser or device and 888pak servers is encrypted using TLS 1.3 (Transport Layer Security);
• Encryption at rest — Sensitive personal data including financial details and identity documents is encrypted at rest using AES-256 encryption;
• Password security — Account passwords are stored as bcrypt-hashed values. 888pak staff cannot see your password in plaintext. If you forget your password, it must be reset — not retrieved;
• Access controls — Access to player personal data within the 888pak organisation is restricted to staff who require it for their specific role, governed by role-based access controls and logged for audit purposes;
• Infrastructure security — 888pak servers are hosted in ISO-certified data centres with 24/7 physical and cyber security monitoring, DDoS protection, and regular penetration testing;
• Incident response — 888pak maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected players will be notified without undue delay.

While 888pak implements robust security measures, no system is entirely immune to risk. You play an important role in account security by using a strong, unique password, not sharing your login credentials, and logging out after each session — especially on shared devices.

888pak uses cookies and similar tracking technologies on the https://888pak.org website. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the 888pak platform:

• Strictly necessary cookies — These cookies are required for the 888pak platform to function. They maintain your login session, remember your language preference, and enable secure in-play betting. These cookies cannot be disabled;
• Functional cookies — These cookies remember your preferences (such as your preferred casino lobby view or favourite PSL betting market) to enhance your experience. They can be disabled, but doing so may affect platform functionality;
• Analytics cookies — 888pak uses first-party analytics cookies to understand how players navigate the platform — which games are most popular, how long sessions last, and where technical issues occur. This data is aggregated and anonymised;
• Responsible gaming cookies — Session time and activity cookies are used to power responsible gaming features including session duration reminders and cool-off period enforcement.

888pak does not place third-party advertising or social media tracking cookies on the platform without your explicit consent. You can manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies may prevent you from accessing your 888pak account.

As an 888pak player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting 888pak support at the details in Section 15:

888pak will respond to all valid privacy rights requests within 30 calendar days of receipt. In complex cases, this may be extended by a further 60 days, with notice provided. 888pak will not charge a fee for processing a request unless it is manifestly unfounded or excessive. We may need to verify your identity before processing a request to protect against unauthorised data disclosure.

To unsubscribe from 888pak marketing emails, you may click the unsubscribe link in any marketing email, or adjust your notification preferences in your account dashboard at any time. This does not affect transactional communications (such as deposit confirmations or withdrawal notifications) which are necessary for account operation.

If 888pak becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be permanently closed, and any funds deposited by the minor will be returned to the source payment method. If you are a parent or guardian and believe your child may have registered an account with 888pak, please contact us immediately at the details in Section 15.

888pak's KYC verification process — which requires submission of a government-issued photo ID confirming the player's date of birth — is the primary mechanism for preventing underage registration. Additional age verification checks may be triggered by responsible gaming monitoring systems that identify patterns inconsistent with an adult player profile.

888pak may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or updates to the 888pak platform. When material changes are made, 888pak will notify registered players by email to the address associated with their account and/or by a prominent notice on the platform for a minimum of seven (7) days before the updated policy takes effect.

The "Effective Date" shown at the top of this document reflects the date on which the current version of the Privacy Policy came into force. We encourage you to review this page periodically to stay informed of how 888pak handles your personal data. Your continued use of the 888pak platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms.

If you object to any changes to this Privacy Policy, you should cease using the 888pak platform and contact support to close your account in accordance with the account closure procedure set out in the 888pak Terms & Conditions.

For any privacy-related query, Subject Access Request, correction request, deletion request, or complaint about how 888pak handles your personal data, please contact the 888pak support team using the details below:

888pak takes all privacy complaints seriously. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant supervisory authority in the jurisdiction governing our gaming license.