88df Privacy Policy

88df is the operator of the online gaming platform accessible at 88df.bid, providing casino gaming, sports betting, live dealer, and related services to registered users. For the purposes of applicable data protection law, 88df is the data controller in respect of all personal data collected from users of the 88df platform.

As data controller, 88df determines the purposes and means of processing your personal data. 88df operates under an international gaming licence that includes data protection obligations as part of its licensing conditions. Our compliance team oversees all data protection matters including this Policy, data subject rights requests, and security incident response.

For any data protection queries or to exercise your data rights, please contact the 88df support team via live chat on 88df.bid or by emailing [email protected]. The support team is available 24/7 in Urdu and English.

88df collects personal data from you in the following circumstances: when you register an account, when you use the platform to play games or place bets, when you make deposits or withdrawals, when you submit KYC verification documents, when you contact customer support, and passively through your use of the website (via cookies and server logs). The categories of data we collect are set out below.

• Full legal name (as it appears on your CNIC);
• Date of birth (for age verification purposes — 21+ requirement);
• Pakistani mobile number (JazzCash or EasyPaisa registered number used as primary login identifier);
• Password (stored in hashed form — 88df does not have access to your plain-text password);
• Email address (if provided during registration);
• City of residence (e.g. Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, or other);
• Account preferences and communication settings.

• Scanned copy or photograph of your Pakistani CNIC (both sides);
• CNIC number;
• Proof of payment method ownership (e.g. screenshot of JazzCash or EasyPaisa account showing name and number);
• Proof of address (may be requested for large withdrawal reviews);
• Source of funds documentation (may be requested for high-value account activity);
• Facial verification data (where liveness checks are required as part of the KYC process).

• Deposit amounts, dates, and payment methods used;
• Withdrawal amounts, dates, recipient accounts, and processing status;
• Account balance history;
• Bonus credits received and wagering progress;
• VIP tier and loyalty points history;
• Transaction reference numbers from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK.

• Game sessions played (game title, duration, stake, result);
• Sports bets placed (market, selection, stake, odds, outcome);
• Live dealer table participation history;
• Win/loss records across all game types;
• Responsible gaming limit settings and self-exclusion records.

• IP address at time of login and during active sessions;
• Device type (mobile, desktop, tablet), operating system, and browser type;
• Session duration and activity timestamps;
• Geolocation data (city/region level, derived from IP — not precise GPS coordinates);
• Error logs and platform usage data for debugging purposes.

• Live chat transcripts with 88df support agents;
• Email correspondence with the support team;
• Complaint records and dispute resolution documentation;
• Voluntary feedback or survey responses.

88df uses your personal data only for legitimate, defined purposes related to the operation of the platform and our obligations as a licensed gaming operator. The table below summarises the primary uses of your data:

88df may send promotional messages (bonus offers, new game alerts, PSL season promotions) to your registered mobile number or email address where you have opted in to receive such communications. You may opt out of marketing messages at any time by contacting 88df support via live chat or by updating your communication preferences in your account settings. Opting out of marketing communications does not affect transactional or service messages (e.g. deposit confirmations, withdrawal notifications, security alerts) which will continue to be sent as necessary for account management.

88df processes personal data on the following legal bases, as applicable under internationally recognised data protection principles:

• Contractual Necessity: Processing necessary for the performance of the contract between you and 88df — including account registration, payment processing, game access, and customer support;
• Legal Obligation: Processing required by applicable law and 88df's international gaming licence — including KYC verification, anti-money laundering (AML) monitoring, responsible gaming obligations, and regulatory reporting;
• Legitimate Interests: Processing for purposes in 88df's legitimate business interests, provided those interests are not overridden by your data protection rights — including fraud prevention, platform security, dispute resolution, and anonymised analytics;
• Consent: Processing based on your freely given, specific consent — including marketing communications and certain optional cookies. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

88df does not sell, rent, or trade your personal data. We share your data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

To process your deposits and withdrawals, 88df must share relevant transaction data with your chosen payment service provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK). The data shared is limited to what is necessary to authenticate and complete the specific transaction — typically your registered mobile number, transaction amount in PKR, and a transaction reference. Your payment provider's own privacy policy governs their handling of this data.

88df may use trusted third-party identity verification providers to assist with the KYC process, including document authenticity checks and, where applicable, liveness verification. These providers act as data processors on 88df's instructions and are contractually bound to use your data only for the purpose of identity verification on behalf of 88df.

Third-party game studios and live dealer providers that supply content to the 88df platform may receive anonymised session data (e.g. game rounds played, stakes, outcomes) for game performance monitoring and audit purposes. These providers do not receive personally identifiable information about individual players beyond what is necessary for game session authentication.

88df may disclose personal data to regulatory authorities, gaming licensing bodies, law enforcement agencies, or courts where required by applicable law, a court order, or as necessary to comply with 88df's legal and licensing obligations. We will notify you of any such disclosure where we are legally permitted to do so.

As a licensed gaming operator, 88df has obligations to report suspicious financial activity to relevant authorities. Where such reporting is required, personal and transaction data may be disclosed without prior notice to you, in compliance with applicable AML law and our licensing conditions.

In the event of a merger, acquisition, reorganisation, or sale of all or part of 88df's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material change to the applicable privacy terms prior to completion of the transfer, where reasonably practicable.

88df uses cookies and similar tracking technologies on the 88df.bid website. Cookies are small text files stored on your device by your browser when you visit the site. 88df uses the following categories of cookies:

These cookies are essential for the 88df website to function and cannot be disabled. They include session management cookies that keep you logged in during your visit, security cookies that detect unusual login patterns, and cookies that remember your responsible gaming settings. You cannot opt out of strictly necessary cookies as they are required for the service to operate.

88df uses anonymised analytics data to understand how players use the platform — which game categories are most visited, where users encounter navigation difficulties, and how the platform performs on different devices and Pakistani network speeds. This data is aggregated and anonymised and does not identify individual users. These cookies are set only with your consent.

Preference cookies remember your settings and choices on the 88df platform — such as your preferred game lobby view, language preference, and whether you've acknowledged the responsible gaming notice. These improve your experience but are not essential to core functionality.

On your first visit to 88df.bid, you will be presented with a cookie consent notice that allows you to accept or decline non-essential cookies. You can also manage your cookie preferences at any time through your browser settings. Note that disabling performance cookies does not affect your ability to play games or make transactions on 88df.

88df implements a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption at Rest: All stored personal data, including CNIC copies, mobile numbers, and financial records, is encrypted using AES-256 encryption;
• Encryption in Transit: All data transmitted between your device and 88df servers is protected by 256-bit TLS (Transport Layer Security);
• Access Controls: Access to personal data within 88df is restricted on a need-to-know basis. Staff members can only access data relevant to their specific role. All staff access is logged and audited;
• Two-Factor Authentication: All 88df administrative systems require multi-factor authentication. Players are also encouraged to enable 2FA on their accounts;
• Intrusion Detection: 88df employs automated intrusion detection systems that monitor for unusual access patterns and potential security threats in real time;
• Password Security: Account passwords are stored in hashed form using strong cryptographic hash functions. 88df never stores or has access to plain-text passwords;
• Regular Security Audits: 88df's security infrastructure undergoes regular independent security reviews and penetration testing;
• Incident Response: 88df maintains a formal data breach incident response plan. In the event of a data breach affecting your personal data, we will notify affected users and relevant authorities in accordance with applicable obligations.

88df retains your personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal and regulatory retention obligations. The general retention principles that apply to different categories of data are as follows:

Upon expiry of the applicable retention period, 88df will securely delete or anonymise the relevant personal data. Where deletion is requested by you before the end of the retention period, we will delete all data that we are not legally required to retain, and we will inform you of any data categories that we are obligated to retain and the legal basis for doing so.

You have the following rights in relation to your personal data held by 88df. To exercise any of these rights, please contact the support team via live chat on 88df.bid or by email at [email protected]. We will respond to all valid requests within 30 calendar days of receipt:

The 88df platform is strictly for adults aged 21 years and over. 88df does not knowingly collect personal data from any person under the age of 21. The KYC verification process, which requires submission of a valid Pakistani CNIC, serves as the primary mechanism for verifying that all account holders meet the minimum age requirement.

If 88df discovers or is notified that an account has been registered by or is being used by a person under the age of 21, the following steps will be taken immediately:

• The account will be suspended pending investigation;
• All gaming activity and winnings associated with the account will be voided;
• Any deposited funds will be returned to the original deposit source after verification;
• The account will be permanently closed;
• The matter will be reported to the relevant regulatory authority as required by 88df's licensing conditions.

88df's servers and data processing infrastructure may be located in jurisdictions outside Pakistan. Where your personal data is transferred outside Pakistan, 88df ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the data protection principles applicable to our gaming licence.

Safeguards used for international data transfers include contractual clauses with data recipients that impose obligations equivalent to those set out in this Privacy Policy, and transfer only to jurisdictions that maintain recognised data protection standards. Specific KYC data, particularly CNIC copies, is processed in accordance with data localisation requirements applicable to identity verification in the international gaming context.

Where your data is transferred to payment service providers such as JazzCash, EasyPaisa, or Pakistani banks (HBL, UBL, Meezan Bank), that processing occurs within Pakistan and is subject to Pakistani financial regulation governing the handling of customer data by regulated financial institutions.

88df reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Any changes will be published on this page at 88df.bid/privacy-policy, with the "Last Updated" date revised accordingly.

Where changes to the Policy are material — meaning they significantly affect how we process your personal data or your rights in relation to it — 88df will notify active account holders via the registered mobile number or email address on the account at least 14 days before the changes take effect. Your continued use of the 88df platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree to a revised Privacy Policy, you may request closure of your 88df account prior to the effective date of the changes by contacting the support team. Funds in your account at the time of closure will be returned to your verified payment method subject to standard KYC requirements.

To exercise any of your data rights, submit a privacy-related complaint, request information about 88df's data processing practices, or ask any question about this Privacy Policy, please contact the 88df support team through the following channels:

• Live Chat: Available 24/7 via the 88df.bid on-site chat widget — Urdu and English support. Fastest response channel for all account and data queries. Average response: 3–5 minutes;
• Email: [email protected] — for non-urgent privacy queries and formal data rights requests. Please include "Privacy Request" in the subject line and provide your registered mobile number (without sharing your password) to help us locate your account;
• Formal Data Request: To submit a formal Subject Access Request (SAR), Right to Erasure request, or data portability request, please contact us via live chat or email with "Formal Data Rights Request" as the subject. We will acknowledge all formal requests within 5 business days and provide a full response within 30 calendar days.