Privacy Policy — f8888

01Data Controller

The data controller responsible for your personal information is the operating entity behind the f8888 platform, accessible at f8888.im. As the data controller, f8888 determines the purposes and means by which your personal data is processed. All data processing activities described in this Privacy Policy are carried out under our international gaming licence, which mandates compliance with data protection standards equivalent to internationally recognised frameworks.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data f8888 holds about you, please contact our Data Protection team using the details provided in Section 15 of this document.

02Personal Data We Collect

f8888 collects the following categories of personal data in connection with the operation of the platform and the fulfilment of our legal and regulatory obligations:

2.1 Identity & Registration Data

• Full legal name as it appears on your Pakistani CNIC
• Date of birth (for age verification — you must be 21 or over)
• Pakistani CNIC number
• Gender (where provided during registration)
• Nationality and country of residence

2.2 Contact Data

• Email address
• Pakistani mobile phone number
• Residential address (city, province)

2.3 Financial Data

• JazzCash or EasyPaisa account number associated with your registered mobile number
• HBL, UBL, Meezan Bank, or SadaPay account details (account title and account number, where provided for withdrawal purposes)
• USDT TRC20 wallet address (where applicable)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used

2.4 Gaming & Behavioural Data

• Game session history, including games played, wagers placed, and outcomes
• Betting history across all f8888 cricket betting markets
• Bonus redemption and wagering requirement fulfilment records
• Responsible gaming settings you have configured (deposit limits, session reminders, self-exclusion status)

2.5 Technical & Device Data

• IP address at the time of registration and each subsequent login
• Device type, operating system, and browser version
• Unique device identifiers
• Login timestamps and session duration
• Geolocation data (city-level, derived from IP address)

2.6 KYC Document Data

• Scanned copy or photograph of your Pakistani CNIC (front and back)
• Proof of address documents (e.g., utility bill, bank statement) where requested
• Selfie photograph where enhanced identity verification is required

03How We Collect Your Data

f8888 collects personal data through the following channels:

• Directly from you: During account registration, KYC submission, deposit and withdrawal requests, support interactions, and when you update your account profile.
• Automatically through the platform: Technical and device data is collected automatically when you access f8888.im through your browser or mobile device, including IP address, session data, and cookies (see Section 7).
• From third-party service providers: Where we use identity verification partners to confirm CNIC authenticity or cross-check against sanctions screening databases, these providers may return verified data points to us. Similarly, our payment processing partners confirm transaction outcomes.
• From our gaming content providers: Game session data, including round outcomes and RTP records, is transmitted to f8888 by our licensed game software providers for auditing and dispute resolution purposes.

04Purposes & Legal Basis for Processing

The following table summarises the primary purposes for which f8888 processes your personal data and the corresponding legal basis for each processing activity:

05Data Sharing & Disclosure

f8888 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data may be shared only in the following circumstances:

5.1 Service Providers

f8888 works with a limited number of carefully selected third-party service providers who process data on our behalf under strict data processing agreements. These include:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network operators — solely for transaction processing purposes.
• KYC and identity verification providers: For confirming CNIC authenticity and conducting sanctions and politically exposed persons (PEP) screening.
• Game software providers: Licensed content studios whose games are hosted on the f8888 platform — limited to game session data necessary for game operation and auditing.
• Customer support platform providers: Who process contact and interaction data solely to facilitate support ticket management.
• IT infrastructure and cloud hosting providers: Who store and process platform data in accordance with our security standards.

5.2 Regulatory and Legal Disclosure

f8888 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are legally compelled to do so, or where we have a good-faith belief that disclosure is necessary to:

• Comply with a legal obligation or court order.
• Report suspected money laundering, fraud, or other financial crime to relevant authorities.
• Protect the rights, property, or safety of f8888, its players, or the general public.
• Respond to a lawful request from our gaming licensing authority.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of f8888's business, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance where legally permissible, and any acquiring entity will be required to honour the commitments set out in this Privacy Policy.

06International Data Transfers

f8888 operates under an international gaming licence, and some of our service providers and infrastructure partners may process data in jurisdictions outside Pakistan. Where personal data is transferred internationally, f8888 takes steps to ensure that equivalent data protection standards apply, including:

• Contractual clauses requiring recipient parties to process data in a manner consistent with the standards set out in this Privacy Policy.
• Technical security controls, including data encryption in transit and at rest, applied regardless of where data is processed.
• Restricting international transfers to jurisdictions or service providers that meet our internal data protection assessment criteria.

By using the f8888 platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan as part of the lawful and necessary operation of the platform and its licensed services.

07Cookies & Tracking Technologies

f8888 uses cookies and similar tracking technologies on the f8888.im website to ensure the platform functions correctly, to maintain your login session, to detect fraudulent activity, and to understand how players interact with our platform so we can improve the experience.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to operate. These include session authentication cookies, security tokens, and load balancing identifiers. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming reminders, and game lobby filters. These enhance your experience but are not essential.
• Analytical Cookies: Used internally by f8888 to understand platform usage patterns, identify performance issues, and improve the player experience. These do not track you across third-party websites.
• Security Cookies: Support our fraud detection and account security systems by identifying unusual login patterns or suspicious device behaviour.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the f8888 platform, particularly session management and responsible gaming preference recall. f8888 does not use third-party advertising or retargeting cookies.

08Data Retention

f8888 retains your personal data for as long as your account is active and for a defined period following account closure, in accordance with our regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, as required by anti-money laundering regulations applicable under our gaming licence.
• Financial transaction records: Retained for a minimum of 5 years post-transaction, in line with financial record-keeping requirements.
• Gaming session data: Retained for a minimum of 3 years for dispute resolution, audit, and fairness verification purposes.
• KYC documents: Retained for 5 years following account closure or the completion of the last transaction, whichever is later.
• Support interaction records: Retained for 2 years from the date of the interaction, unless linked to an ongoing dispute or regulatory matter.
• Marketing consent records: Retained for 3 years from the date of consent, or until withdrawal of consent — whichever comes first.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

09Security Measures

f8888 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption in transit: All data transmitted between your device and the f8888 platform is encrypted using TLS (Transport Layer Security) protocols.
• Encryption at rest: Sensitive personal data, including KYC documents and financial details, is stored using AES-256 encryption within access-controlled environments.
• Access controls: Strict role-based access controls limit which f8888 team members can access personal data, and all access is logged and audited.
• Two-factor authentication: Available to all players for account login and strongly recommended. F8888 internally requires multi-factor authentication for all staff accessing sensitive data systems.
• Penetration testing and vulnerability assessments: Regular independent security testing is conducted on the f8888 platform infrastructure.
• Incident response procedures: f8888 maintains a documented data breach response plan, with defined escalation, containment, notification, and remediation procedures.

10Your Data Rights

As an f8888 player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request." f8888 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.