At 88eff, your privacy is not a checkbox — it is a core operational commitment. This Privacy Policy explains precisely what data we collect, why we collect it, how we use and protect it, and what rights you hold over your personal information at all times.
This Privacy Policy ("Policy") is issued by 88eff ("88eff", "we", "us", "our") and applies to all personal data processed in connection with the 88eff platform accessible at 88eff.org, including all gaming products, account management services, customer support interactions, and payment processing operations. By registering an account or continuing to use the 88eff platform, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.
This Policy governs the collection, processing, storage, transfer, and deletion of personal data by 88eff in connection with your use of the 88eff platform. 88eff acts as the data controller in respect of all personal data processed as described in this Policy — meaning 88eff determines the purposes and means of processing your personal data.
This Policy applies to:
This Policy does not apply to the data practices of third-party websites, applications, or services linked from the 88eff platform. 88eff is not responsible for the privacy practices of any third-party operator.
If you have questions about who controls your data or wish to exercise your data rights, please contact 88eff Data Support at [email protected]. Plain text email address — not a clickable link.
88eff collects personal data across several categories, depending on the nature of your interaction with the platform. The following table summarises the primary categories of personal data we process:
| Category | Examples of Data | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC/Passport number, nationality, photograph | Account registration; KYC verification |
| Contact Data | Mobile phone number, email address, city/province of residence | Account registration; support interactions |
| Financial Data | JazzCash/EasyPaisa account reference, bank account details, transaction history, deposit and withdrawal records (in PKR) | Deposit processing; withdrawal requests; KYC |
| Gaming Activity Data | Bet history, game session logs, wagering amounts, win/loss records, product usage patterns, login timestamps | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser type, screen resolution, geolocation (approximate), cookie identifiers | Each platform visit and session |
| Communications Data | Live chat transcripts, support email correspondence, complaint records, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, cooling-off period records, reality check configurations | When Responsible Gaming tools are accessed or activated |
| Marketing Preference Data | Communication opt-in/opt-out status, promotion participation records, bonus claim history | Account registration; ongoing platform interaction |
88eff does not collect or process special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where the collection of health-related information is strictly necessary for the administration of responsible gaming tools — for example, where a User voluntarily discloses information about problem gambling in the course of a support interaction.
88eff collects personal data through the following primary channels:
Data you provide directly to 88eff when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, submitting a complaint or feedback, claiming a promotion, or updating your account profile. This is the primary source of identity, contact, and financial data.
Data collected automatically as you use the 88eff platform through server logs, session tracking technologies, and browser cookies. This includes your IP address, device identifiers, session duration, pages visited, game sessions opened, and clickstream data. This data is collected using first-party technical tools and, in some cases, compliant third-party analytics partners operating under contractual data processing agreements with 88eff.
When you make a deposit or request a withdrawal, your payment provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard, or USDT processor) shares transaction confirmation data with 88eff. 88eff does not receive or store full payment credentials such as full card numbers or banking PINs — these remain with the payment processor at all times.
During KYC verification, 88eff may use licensed third-party identity verification services to validate identity documents and cross-reference data against commercially available databases. These services process data solely for verification purposes under contractual data processing agreements with 88eff.
88eff processes your personal data only for the purposes described in this Policy. The primary purposes for which we process personal data are:
88eff processes personal data on the following legal bases, as applicable to each processing purpose:
88eff does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data may be shared with third parties only in the following circumstances:
88eff engages trusted third-party service providers who process personal data on 88eff's behalf under contractual data processing agreements. These providers include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, card processors, and USDT gateways), identity verification services, cloud infrastructure providers, game content providers (e.g., Pragmatic Play, Evolution), customer support platform providers, and anti-fraud technology vendors. All such providers are contractually prohibited from using your data for their own purposes.
88eff may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or other competent public authorities where required by applicable law, court order, or regulatory direction. 88eff will notify affected Users of such disclosures where legally permissible to do so.
Where a User has initiated a self-exclusion on the 88eff platform, relevant self-exclusion data may be shared with affiliated responsible gaming registries or other licensed operators participating in cross-operator exclusion schemes, for the purpose of enforcing the User's exclusion request across participating platforms.
In the event of a merger, acquisition, reorganisation, or sale of 88eff's business assets, personal data held by 88eff may be transferred to the acquiring entity as part of that transaction. Affected Users will be notified prior to any such transfer and will retain their data rights under this Policy.
Reminder: 88eff never sells your personal data. Sharing only occurs as described above — for service provision, regulatory compliance, fraud prevention, and where legally required.
88eff retains personal data only for as long as is necessary for the purpose for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Gaming licence AML/KYC requirements |
| Financial Transaction Records | Duration of account + 5 years after closure | Gaming licence and financial record-keeping obligations |
| Gaming Activity Logs | Duration of account + 3 years after closure | Regulatory compliance; dispute resolution |
| Customer Support Records | 3 years from last interaction | Legitimate interest; dispute resolution |
| Self-Exclusion Records | Permanent (no deletion) | Responsible gaming obligations; regulatory requirement |
| Marketing Preferences | Until consent withdrawal + 1 year | Consent; proof of opt-out compliance |
| Technical / Log Data | Up to 12 months | Security monitoring; fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 88eff's data deletion procedures. Where data is anonymised rather than deleted, the resulting data no longer constitutes personal data and may be retained indefinitely for aggregate analytics purposes.
Self-Exclusion Exception: Self-exclusion records are permanently retained regardless of any deletion requests. This is a mandatory responsible gaming obligation — retaining exclusion records ensures that self-excluded individuals cannot inadvertently re-register without oversight.
88eff implements a multi-layered technical and organisational security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:
While 88eff applies industry-standard security measures, no digital platform can guarantee absolute security. Users are strongly encouraged to use a strong, unique password for their 88eff account, to enable two-factor authentication where available, and to report any suspected unauthorised account access immediately via live chat.
The 88eff platform uses cookies and similar tracking technologies to operate core platform functions, maintain your authenticated session, remember your preferences, and analyse aggregate usage patterns. The following cookie categories are used:
These cookies are essential for the operation of the 88eff platform and cannot be disabled. They include session authentication tokens (which keep you logged in during your gaming session), security cookies that protect against cross-site request forgery (CSRF), and load balancing cookies that ensure platform stability. No consent is required for strictly necessary cookies as they are functionally indispensable.
These cookies remember your account preferences — such as your preferred language, last-selected game category, and notification settings — to provide a more personalised experience. They do not track your activity outside the 88eff platform.
88eff uses first-party analytics cookies and, in some cases, privacy-compliant third-party analytics tools to collect aggregate, anonymised data about how Users interact with the platform — which pages are visited most, typical navigation paths, session durations, and mobile versus desktop usage. This data is used exclusively to improve the platform and contains no individual-level personally identifiable information in the reports we review.
You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into or using the 88eff platform. Disabling functionality or analytics cookies will not affect your ability to use the platform but may reduce the quality of your experience. Cookie preferences can be managed through your browser settings on any device.
As a data subject whose personal data is processed by 88eff, you hold the following rights. You may exercise any of these rights by contacting the 88eff support team via live chat or by emailing [email protected]. 88eff will respond to all verified data rights requests within thirty (30) calendar days of receipt, unless the complexity or volume of requests requires an extension, in which case you will be notified of the revised timeline.
Important: 88eff may need to verify your identity before actioning any data rights request, to ensure that personal data is not disclosed to or modified by an unauthorised third party. Verification may require submission of a copy of your CNIC or other acceptable identity document.
The 88eff platform is strictly prohibited for persons under the age of 21. 88eff does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory component of the 88eff KYC process — all Users must confirm their age at registration and provide documentary proof of age before any withdrawal is processed.
If 88eff discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 — whether through registration, age verification failure, or report — 88eff will immediately:
Parents and guardians who become aware that a person under 21 has accessed the 88eff platform should report this immediately to the 88eff support team via live chat or at [email protected].
88eff may send direct marketing communications — including promotional emails, SMS notifications, and in-platform messages about new games, bonuses, loyalty programme updates, and platform features — only to Users who have opted in to receive such communications during registration or subsequently through Account Settings.
You can opt out of all direct marketing communications at any time by:
Opting out of marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification requests — which are essential service communications sent regardless of marketing preference settings.
Users who are self-excluded from the 88eff platform will automatically be removed from all direct marketing lists. Self-excluded Users will not receive any promotional communications from 88eff for the duration of their exclusion period.
The 88eff platform integrates with various third-party services to deliver its full product offering. The primary third-party service categories and their data processing roles are as follows:
Live casino, slot, and poker game content is provided by licensed third-party studios including Pragmatic Play, Evolution, and other providers. These providers process limited game session and betting data necessary to operate their games. Game providers are contractually prohibited from using this data for purposes beyond game delivery and fair play auditing.
JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, card processors, and USDT gateway providers each process transaction data as independent data controllers for their respective payment networks. Their data processing practices are governed by their own privacy policies. 88eff only receives transaction confirmation data from payment processors — not full payment credentials.
Third-party KYC and identity verification services process identity document data as processors on 88eff's behalf under contractual data processing agreements. Verification data is not retained by these providers beyond the period required to complete the verification process.
Platform analytics and fraud detection tools process technical and usage data to help 88eff improve platform performance and prevent prohibited conduct. All such providers process data under contractual agreements that restrict use to the specified service purpose.
88eff reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, 88eff's data processing practices, or platform features. The effective date of the current version is displayed at the top of this page and in the "Last Updated" badge.
Where a proposed change materially affects your rights under this Policy — for example, a new processing purpose, a new category of third-party sharing, or a change to retention periods — 88eff will provide reasonable advance notice to registered Users via email or in-platform notification before the change takes effect. Continued use of the 88eff platform following such notice constitutes acceptance of the revised Policy.
For changes that are non-material — such as clarifications of existing practices, corrections of typographical errors, or restructuring of the document for readability — 88eff may update the Policy without prior notice. We encourage you to review this page periodically to stay informed of any changes.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how 88eff has handled your personal data, please contact us through any of the following channels:
88eff undertakes to acknowledge all privacy-related correspondence within five (5) business days and to provide a substantive response within thirty (30) calendar days of receiving a verified request. Where the complexity or volume of requests requires an extended response period, 88eff will notify you of the revised timeline and the reasons for the extension.
Escalation: If you are dissatisfied with 88eff's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution mechanism available under 88eff's gaming licence. Details of the applicable supervisory authority are available from the 88eff support team upon request.
This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all previous versions of the 88eff Privacy Policy.
Six core rights every 88eff player holds over their personal data — always available, always enforceable.
Request a copy of all personal data 88eff holds about you.
Correct any inaccurate or incomplete personal data on your account.
Request deletion of your data where no legal retention obligation applies.
Pause processing of your data in specified circumstances.
Receive your data in a machine-readable format for transfer.
Object to processing based on legitimate interests or for marketing.
Six layers of protection — built into the 88eff platform from day one, not retrofitted as an afterthought.
Every connection to the 88eff platform — login, deposit, withdrawal, game session — is protected by 256-bit SSL/TLS encryption. The same security standard used by international banks and major financial platforms operating in Pakistan.
88eff never stores your full card number, CVV, banking PIN, or JazzCash/EasyPaisa PIN. Payment credentials remain exclusively with PCI-DSS compliant payment processors. 88eff only receives transaction confirmation — nothing more.
Access to your personal data within 88eff's systems is restricted to authorised personnel with a documented, verified need to process it. All administrative access is logged, monitored, and protected by multi-factor authentication.
88eff deploys real-time fraud detection technology that monitors for suspicious account access patterns, anomalous transaction behaviour, and identity fraud indicators — protecting your account even if your credentials are compromised elsewhere.
88eff does not sell, rent, or trade personal data to any third party for commercial gain — full stop. Data sharing occurs only with service providers operating under contractual agreements, and with regulators as legally required.
In the event of a confirmed data breach that affects your personal data, 88eff maintains a documented incident response plan — including timely notification to affected Users and relevant authorities in accordance with applicable obligations.
Our support team is available 24/7 — whether you want to exercise a data right, review your account's responsible gaming settings, or simply have a question about how your information is used. Log in to access live chat instantly.