888com Privacy Policy – How We Handle Your Data

1. Who We Are and Why This Policy Exists

888com, operating at https://888com.world, is an online sports betting and live casino platform built specifically for Pakistani players. When you create an account, deposit funds, place a bet or interact with our platform in any way, we collect and process certain personal information about you. This Privacy Policy explains how that process works from start to finish.

We take privacy seriously. This is not a legal document designed to be unreadable — it is a genuine explanation of how 888com handles your personal data, written to be understood by a regular player in Pakistan. The goal is that by the end of reading this, you know exactly what information we hold about you, why we hold it, who might see it and what you can do about it.

By registering an 888com account or continuing to use the platform, you confirm that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions and Responsible Gaming policy.

2. What Data We Collect

888com collects personal information in several ways — directly from you when you register and use the platform, and automatically through the technical systems that keep the site running. Here is a full breakdown:

2.1 Information You Provide Directly

• Registration details: Full name, date of birth, mobile number and email address
• Identity verification: CNIC number, CNIC scan or photograph, and a selfie where required for age and identity verification
• Payment information: Easypaisa or JazzCash account number, NayaPay/SadaPay details, IBAN for bank transfers, or masked card details (we do not store full card numbers)
• Communication records: Transcripts of live chat sessions with our support team, email correspondence and any complaints you raise
• Account preferences: Responsible gaming limits you set, notification preferences and any other settings you configure

2.2 Information Collected Automatically

• Device information: Device type, operating system, browser version and screen resolution
• Connection data: IP address, approximate location derived from IP, and network type (mobile data vs Wi-Fi)
• Usage data: Pages visited, games played, bets placed, sessions started and ended, and clicks on promotional content
• Cookies and similar technologies: Session cookies, persistent preference cookies, analytics tokens and fraud-prevention fingerprints — covered in detail in Section 7

2.3 Information from Third Parties

In some cases, 888com receives data about you from trusted third parties:

• Identity verification providers: Services that cross-check your CNIC against official records to confirm your age and identity
• Payment processors: Transaction confirmation, status updates and fraud signals from Easypaisa, JazzCash and card processing networks
• Fraud prevention services: Risk scores and device fingerprint data used to protect all players from account takeover and payment fraud

3. How 888com Uses Your Data

We use the personal data we collect for specific, legitimate purposes. We do not use data for any purpose that you have not been informed about in this policy. Here is exactly what we do with your information:

3.1 Running Your Account

Your name, mobile number, email and identity documents are used to create and maintain your 888com account, verify your identity and age, and communicate with you about your account activity — including balance updates, withdrawal confirmations and security alerts.

3.2 Processing Payments

Payment information is used solely for the purpose of processing your deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card networks. 888com does not store full payment credentials. Transaction records are retained for the period required by financial regulations.

3.3 Responsible Gaming and Compliance

Betting history and session data are analysed to identify patterns that may indicate problem gambling, in accordance with our Responsible Gaming commitments. This data is also used to comply with anti-money laundering obligations and to cooperate with regulatory or law enforcement requests where legally required.

3.4 Platform Improvement

Anonymised and aggregated usage data is used to improve the 888com platform — understanding which features players use most, identifying technical issues and testing new features before full release. This analysis does not identify individual players.

3.5 Marketing Communications

With your consent, 888com sends promotional emails and SMS notifications about new offers, promotions, PSL odds boosts and other platform news. You can withdraw this consent at any time by clicking "unsubscribe" in any marketing email, adjusting your notification preferences in your account settings, or contacting our support team.

3.6 Fraud Prevention and Security

Device fingerprints, IP addresses and behavioural data are used to detect and prevent fraudulent account activity, bonus abuse and payment fraud. This protects all 888com players and the integrity of the platform.

4. Legal Basis for Processing

888com processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, identity verification and payment information is required to enter into and perform the contract represented by your 888com account agreement
• Legal obligation: Retaining transaction records and cooperating with regulatory and law enforcement requests is required by applicable financial and anti-money-laundering regulations
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring and anonymised analytics serve the legitimate interests of 888com and its players without overriding your privacy rights
• Consent: Marketing communications and optional analytics cookies are processed only with your explicit consent, which you may withdraw at any time

5. Who We Share Your Data With

888com does not sell your personal data. We share it only where necessary with carefully selected categories of third parties, each bound by strict confidentiality obligations:

5.1 Payment Processors

Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, banking networks and card processors solely for the purpose of completing your deposits and withdrawals. These processors are independently regulated and operate under their own security standards.

5.2 Identity Verification Services

Your CNIC number and identity documents may be shared with certified KYC (Know Your Customer) verification providers to confirm your age and identity. These providers do not retain your documents beyond the verification process.

5.3 Fraud Prevention and Security Providers

Device, IP and behavioural signals are shared with specialist fraud prevention services to protect your account and the platform. These services process data strictly for fraud detection and do not use it for any other purpose.

5.4 Legal and Regulatory Bodies

Where required by law, 888com will disclose personal data to relevant authorities, regulatory bodies or law enforcement agencies. We will notify you of any such disclosure where legally permitted to do so.

5.5 Group Companies

Within the 888com corporate group, limited operational data may be shared between affiliated entities for platform management, technical infrastructure and legal compliance purposes only.

6. How We Handle Payment Data

Payment security at 888com is handled with particular care given the sensitivity of financial information. Here is specifically what happens with your payment data:

• 888com never stores full Easypaisa or JazzCash PINs. Your mobile wallet credentials are entered directly in the payment processor's secure environment — they never pass through 888com's systems.
• For card payments, only the last four digits of your card number, the card type and expiry month/year are stored for display purposes in your account. Full card numbers are handled exclusively by PCI-DSS certified payment processors.
• Bank account numbers provided for IBFT withdrawals are stored in encrypted format and are accessible only to the payments team for the specific purpose of processing your withdrawal.
• All payment records are retained for a minimum of 7 years in accordance with financial record-keeping requirements. After this period, records are securely deleted.

Every PKR deposit and withdrawal processed through 888com is subject to transaction monitoring to detect unusual activity. If a transaction is flagged, we may temporarily hold a withdrawal pending verification — we will contact you via your registered mobile number or email if this happens.

7. Cookies and Tracking Technologies

888com uses cookies and similar technologies on the platform. A cookie is a small text file stored on your device when you visit a website. We use four categories of cookies, described below:

You can manage optional cookies through your browser settings. Disabling cookies beyond the required category may affect some platform features. Most browsers allow you to block cookies for specific sites without affecting others.

8. How Long We Keep Your Data

888com keeps your personal data for as long as is necessary for the purpose it was collected, or as required by law. The general retention periods are set out in the table in Section 2. Here is additional context on the main categories:

• Account data: Retained for the lifetime of your account and for 5 years after closure, to comply with regulatory requirements and to resolve any retrospective disputes
• Financial records: Retained for a minimum of 7 years from the transaction date in accordance with financial regulation requirements in Pakistan
• Support communications: Chat transcripts and email records are retained for 3 years from the date of the last interaction, enabling us to handle escalated complaints
• Device and session logs: Retained on a rolling 12-month basis and then deleted. These logs are used primarily for fraud investigation and technical support
• Marketing consent records: Retained until you withdraw consent, to demonstrate that we had a valid basis for sending communications

When data reaches the end of its retention period, it is securely and permanently deleted from all 888com systems, including backup systems within 90 days of the deletion cycle running.

9. Security Measures at 888com

888com implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. Specific measures include:

• 256-bit SSL/TLS encryption on all connections between your device and our servers — the same standard used by major banks
• Encrypted databases for sensitive personal data including identity documents, payment records and account credentials
• Multi-factor authentication for internal staff accessing personal data systems, with access granted on a strict need-to-know basis
• Regular penetration testing by independent security firms to identify and address vulnerabilities before they can be exploited
• Intrusion detection systems monitoring platform traffic in real time for unusual patterns or known attack signatures
• Secure data centres with physical access controls, redundant power supplies and environmental monitoring

Despite these measures, no internet-connected system can guarantee 100% security. If you become aware of any suspicious activity on your 888com account, contact our support team immediately via live chat.

10. Your Privacy Rights

As an 888com player based in Pakistan, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@888com.world with the subject line "Privacy Request" and we will respond within 30 days.

Please note that some requests may be limited where 888com has a legal obligation to retain data — for example, financial records required for regulatory compliance cannot be deleted on request. We will explain clearly if a request falls into this category.

11. Children and Minors

888com is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18 years of age. If you are a parent or guardian and believe that a minor has registered an account on 888com, please contact us immediately at support@888com.world with as much detail as possible. We will investigate, close the account and delete all associated personal data without delay.

As part of our age verification process, we may request CNIC or other official identity documents from any player. Accounts that fail to provide satisfactory age verification will be suspended until verification is complete.

12. Changes to This Privacy Policy

888com may update this Privacy Policy from time to time. When material changes are made — such as adding a new category of data collection or a new third-party sharing arrangement — registered players will be notified via email or an in-platform notification at least 7 days before the change takes effect.

Minor changes, such as correcting a typographical error or clarifying existing language without changing the substance, may be made without prior notice. The "last updated" date at the top of this page always reflects the most recent revision.

The current version of this policy is always available at /privacy-policy. If you continue using 888com after a change takes effect, you are deemed to have accepted the updated policy.

13. Contact Us About Privacy

For any questions, concerns or formal requests related to this Privacy Policy or the personal data 888com holds about you, please get in touch through any of the following channels:

• Email: support@888com.world — use the subject line "Privacy Request" for data rights requests
• Live chat: Available 24 hours a day, 7 days a week, directly from the 888com platform when you are logged in
• FAQ: /faq — covers the most common questions about accounts, payments and data handling

We aim to acknowledge privacy requests within 2 business days and to provide a full response within 30 days. For complex requests, we may require up to 60 days, in which case we will notify you within the initial 30-day window and explain the reason for the extension.