88ef Privacy Policy — How We Collect, Use & Protect Your Data

1.1   This Privacy Policy is issued by 88ef, the internationally licensed online gaming platform accessible at 88ef.bio (hereinafter referred to as "88ef", "we", "us", or "the Platform"). 88ef operates under an international gaming licence and provides online casino games, sports betting, cricket betting, and related gaming services primarily to English-speaking players based in Pakistan.

1.2   For the purposes of data protection law, 88ef acts as the data controller in respect of personal data collected from users of the 88ef platform. This means we determine the purposes and means by which your personal data is processed.

1.3   This Privacy Policy applies to all personal data collected through the 88ef website at 88ef.bio, the 88ef mobile platform, any 88ef customer support interactions, and all related services offered under the 88ef brand. By registering an account or continuing to use the 88ef platform, you acknowledge that you have read and understood this Privacy Policy.

2.1   88ef collects personal data that falls into the following categories. The specific data points collected in each category are described below:

2.2   88ef does not collect or process special categories of personal data (as defined under applicable data protection frameworks) — including racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data — except where the collection of health-related information is strictly necessary in connection with responsible gaming assessments and is handled in accordance with the heightened protections applicable to such data.

3.1   88ef collects your personal data through the following channels and methods:

• Direct submission: Information you provide when registering an 88ef account, completing KYC verification, submitting a withdrawal request, contacting our support team, or responding to a survey.
• Automated technical collection: Data collected automatically when you access the 88ef platform, including IP address, device identifiers, browser information, and session activity logs, collected through server logs and first-party cookies.
• Payment processors: Confirmation data returned by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners when you initiate or complete a financial transaction.
• Third-party game providers: Game session and outcome data shared with 88ef by integrated game providers (such as live casino and slot software suppliers) in order to credit winnings, apply bonus wagering progress, and maintain accurate account balances.
• Identity verification partners: Results of identity and document verification checks conducted by 88ef's third-party KYC service providers on the basis of documents you submit.
• Fraud and risk platforms: Risk signals and fraud indicators provided by third-party fraud detection services that 88ef employs to protect the integrity of the platform and prevent financial crime.

3.2   88ef does not purchase personal data from data brokers, list providers, or any other third-party commercial data sources. All personal data held by 88ef originates from one of the sources listed above.

4.1   88ef processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and 88ef — including account management, game delivery, payment processing, bonus administration, and customer support.
• Legal obligation: Processing required to comply with 88ef's obligations under its international gaming licence, anti-money laundering regulations, and other applicable legal requirements — including KYC verification, transaction monitoring, and the retention of financial records.
• Legitimate interests: Processing carried out in pursuit of 88ef's legitimate business interests, where those interests are not overridden by your rights and interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4.2   Where 88ef relies on legitimate interests as a legal basis for processing, we have conducted a balancing test to confirm that our legitimate interests are not outweighed by your fundamental rights and freedoms. Details of these assessments are available on request via the contact details in Section 15.

5.1   88ef uses the personal data it collects for the following specific purposes:

• Account creation and management: Establishing and maintaining your 88ef account, verifying your identity at registration, and managing your account preferences and settings.
• Service delivery: Enabling you to access and play games, place cricket and sports bets, claim bonuses, make deposits via JazzCash and EasyPaisa, and process withdrawals to your verified PKR payment method.
• KYC and regulatory compliance: Verifying your age (21+), identity, and source of funds as required under our gaming licence and anti-money laundering obligations. This processing is a mandatory regulatory requirement and cannot be opted out of.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, multi-accounting, and other prohibited conduct on the 88ef platform.
• Responsible gaming: Monitoring your gaming activity for indicators of problem gambling behaviour, administering self-exclusion requests and deposit limit restrictions, and proactively offering support tools where appropriate.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated usage data to improve the performance, features, and user experience of the 88ef platform — on an anonymised basis where possible.
• Marketing communications: Where you have provided consent, sending you promotional emails or SMS messages about 88ef offers, new game releases, and relevant promotions. You may opt out at any time.
• Legal proceedings: Using and disclosing data as necessary to establish, exercise, or defend legal claims involving 88ef.

6.1   88ef does not sell, rent, or commercially trade your personal data. We share your personal data only with the following categories of recipients, and only to the extent necessary for each stated purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners — shared for the sole purpose of processing your deposits and withdrawals. These providers are bound by their own regulatory obligations regarding data security.
• KYC and identity verification providers: Third-party identity verification platforms used by 88ef to process and validate the documents you submit as part of the KYC process.
• Game software providers: Online casino and sports betting software suppliers whose games are integrated into the 88ef platform. Data shared is limited to that required to facilitate game sessions and record outcomes.
• Fraud detection and risk management services: Third-party platforms that assist 88ef in identifying and preventing fraudulent activity, money laundering, and other prohibited conduct on the platform.
• Regulatory and licensing authorities: Our gaming licensing authority and, where required by law, other regulatory bodies such as financial intelligence units. Disclosure to these entities is a mandatory legal obligation that 88ef cannot waive or restrict.
• Law enforcement and courts: Where 88ef is required to disclose personal data by a valid court order, subpoena, or other lawful enforcement request, we will comply with that requirement after conducting appropriate legal review.
• Professional advisers: Legal counsel, auditors, and accountants retained by 88ef, bound by professional duties of confidentiality.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of 88ef's business assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

6.2   All third-party data processors engaged by 88ef are subject to contractual data processing agreements that impose obligations consistent with applicable data protection requirements and restrict those processors from using your data for any purpose other than providing services to 88ef.

7.1   As an internationally licensed gaming platform serving Pakistani users, 88ef may transfer personal data to servers, processors, and service providers located outside of Pakistan. Such transfers may include data processed by game software providers, KYC verification platforms, or cloud infrastructure partners based in other jurisdictions.

7.2   Where 88ef transfers personal data internationally, we ensure that appropriate safeguards are in place to protect that data, which may include:

• Transfers to countries that provide an adequate level of data protection as determined by the relevant authority.
• Execution of standard contractual clauses or equivalent data transfer agreements with the recipient organisation.
• Binding corporate rules where the recipient is part of a corporate group with established intra-group data transfer policies.

7.3   Details of the specific safeguards applied to any particular international transfer are available upon written request to the contact address specified in Section 15 of this Privacy Policy.

8.1   88ef retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gaming licence conditions. The following retention periods apply as a general guide:

8.2   At the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 88ef's data disposal procedures. Anonymised data that can no longer be linked to an individual may be retained indefinitely for statistical and analytical purposes.

9.1   The 88ef platform uses cookies and similar tracking technologies to ensure the proper functioning of the platform, maintain session security, and (where consent has been obtained) to analyse platform usage and deliver relevant content. The categories of cookies used by 88ef are as follows:

• Strictly necessary cookies: Essential for the operation of the 88ef platform. These include session cookies that maintain your logged-in state, security tokens, and load-balancing cookies. These cookies do not require your consent and cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences (such as language settings and responsible gaming limit configurations) across sessions. These cookies improve your experience but are not strictly necessary. They are deployed only upon consent.
• Analytics cookies: First-party analytics tools used by 88ef to understand how users interact with the platform — including pages visited, session duration, and error rates. Data collected is aggregated and anonymised. Deployed only upon consent.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and security threats on the 88ef platform. These cookies form part of our security infrastructure and are strictly necessary.

9.2   88ef does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies on its platform. Your gaming activity on 88ef is not shared with advertising networks.

9.3   You may manage your cookie preferences at any time via the cookie settings panel accessible in the footer of the 88ef platform. Withdrawing consent for non-essential cookies will not affect your ability to use the core features of the platform.

10.1   88ef implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the 88ef platform is encrypted using TLS 1.3 (Transport Layer Security). This applies to all platform interactions including account login, deposits, and KYC document uploads.
• Encryption at rest: Personal data stored on 88ef servers — including identity documents, financial data, and account information — is encrypted using AES-256 encryption.
• Access controls: Access to personal data by 88ef personnel is governed by a strict role-based access control policy. Staff access to personal data is limited to what is necessary for their specific job function and is subject to regular review and audit.
• Two-factor authentication: 88ef's internal systems require multi-factor authentication for all staff who have access to personal data or administrative platform functions.
• Penetration testing and vulnerability assessments: The 88ef platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities.
• Incident response: 88ef maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, 88ef will notify affected users without undue delay and in accordance with applicable regulatory requirements.

11.1   Subject to applicable data protection law and certain limited exceptions, you hold the following rights in respect of personal data that 88ef processes about you:

• Right of Access: You may request a copy of the personal data that 88ef holds about you, together with information about how it is processed. 88ef will respond to verified access requests within 30 calendar days.
• Right to Rectification: If personal data held by 88ef about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances — for example where processing is no longer necessary for the purpose it was collected — you may request that 88ef delete your personal data. This right is subject to overriding legal and regulatory retention obligations.
• Right to Restriction of Processing: You may request that 88ef restrict the processing of your personal data in certain defined circumstances, such as where the accuracy of the data is contested or where you have objected to processing pending outcome of a legitimate interests assessment.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of your personal data for transfer to another data controller.
• Right to Object: You have the right to object at any time to the processing of your personal data on the basis of legitimate interests. 88ef will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Rights in relation to automated decision-making: Where 88ef makes decisions about you based solely on automated processing (including profiling) that produce legal or similarly significant effects, you have the right to request human review of that decision.

11.2   To exercise any of the above rights, please submit a written request to the contact details provided in Section 15. We may be required to verify your identity before processing your request. 88ef will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

12.1   The 88ef platform is strictly restricted to individuals aged 21 years and above. 88ef does not knowingly collect, solicit, or process personal data from any individual under the age of 21. Age verification is a mandatory component of the 88ef registration and KYC process.

12.2   If 88ef becomes aware that personal data has been collected from an individual who is under 21 years of age — whether through a registration bypass, falsified age information, or any other means — the relevant Account will be immediately suspended, all balances will be frozen, and the personal data of the underage individual will be securely deleted from 88ef's systems as rapidly as is practicable, subject to any mandatory regulatory reporting obligations.

13.1   88ef may send you promotional communications — including information about new games, bonus offers, PSL betting markets, and platform updates — via email or SMS, but only where you have expressly consented to receive such communications at the time of registration or subsequently through your Account settings.

13.2   You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in every 88ef marketing email.
• Updating your notification and marketing preferences in your 88ef Account Settings panel.
• Contacting 88ef customer support via live chat or the email address in Section 15 and requesting removal from marketing lists.

13.3   Withdrawal of marketing consent will be processed within 5 business days. Note that withdrawing marketing consent does not affect your receipt of transactional and account-related communications (such as deposit confirmations, withdrawal notifications, and KYC verification requests), which are sent on the basis of contractual necessity rather than consent.

13.4   88ef applies responsible marketing practices and does not send unsolicited gaming promotions to individuals who have self-excluded or who are subject to active responsible gaming restrictions on their accounts.

14.1   88ef reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time to reflect changes in our data processing practices, applicable law, or our gaming licence requirements. The effective date at the top of this policy will be updated to reflect the date of the most recent revision.

14.2   Where a revision materially affects the way in which 88ef processes your personal data, we will notify registered users by email to the address on file and/or via a prominent notice upon next login to the 88ef platform, no less than 14 days before the revised policy takes effect. Non-material clarifications and administrative updates may be published without advance notice.

14.3   Your continued use of the 88ef platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of, and where required, your renewed consent to, the updated practices described therein. If you do not agree with any update to this Privacy Policy, you should cease using the 88ef platform and may request account closure by contacting support.

15.1   If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 88ef processes your personal data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the 88ef platform — the fastest way to reach our support team for any data-related query.
• Email: support@88ef.bio — for formal data rights requests, privacy complaints, and written enquiries. Please mark the subject line clearly (e.g., "Data Access Request" or "Privacy Complaint") to ensure prompt routing to the appropriate team member.

15.2   88ef is committed to resolving all privacy-related complaints internally. If, however, you are not satisfied with our response to your complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority or gaming regulator in the jurisdiction applicable to your circumstances.

15.3   For responsible gaming concerns — including requests for self-exclusion, deposit limit adjustments, or account cooling-off periods — please contact our support team via live chat and identify your request as a responsible gaming matter. These requests are prioritised and acted upon immediately upon receipt, without waiting for formal written procedures.