8888y Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") is issued by 8888y ("8888y", "we", "us", "our"), the operator of the online gaming platform accessible at 8888y.one. This Policy describes how 8888y collects, processes, stores, discloses, and protects personal information relating to individuals who visit our website, register an account, or otherwise interact with our Services ("you", "your", "Player").

This Policy applies to all personal data processed by 8888y in connection with the platform and its Services, regardless of the channel through which that data is provided — including through website registration, customer support communications, payment processing, and KYC verification procedures. It should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

8888y is committed to handling personal data responsibly and in compliance with applicable data protection obligations under its international gaming licence framework. By registering an account with 8888y or by using the platform's Services, you acknowledge that you have read and understood this Policy.

Personal Data We Collect

8888y collects the following categories of personal data in connection with the registration, operation, and administration of player accounts:

8888y does not collect sensitive personal data categories — such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information — unless specifically required to fulfil an anti-money laundering or responsible gaming obligation, in which case collection will be explicitly notified to you at the time.

How We Collect Your Data

8888y collects personal data through the following channels:

• Direct registration: when you complete the 8888y account registration form, you provide identity, contact, and payment information directly to the platform
• KYC verification: when you submit identity documents, selfies, or payment method screenshots as part of the account verification process
• Payment processing: when you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank
• Platform use: technical and usage data is collected automatically as you navigate and interact with the 8888y platform
• Customer support: when you contact 8888y via Live Chat, Messenger, Viber, or email, communications data is recorded
• Cookies and similar technologies: as described in Section 08 of this Policy
• Third-party sources: in limited circumstances, 8888y may receive data from identity verification service providers, fraud prevention databases, and payment processing partners where this is required for compliance purposes

Lawful Basis for Processing

8888y processes your personal data on the following lawful bases, depending on the category of data and the purpose for which it is processed:

• Contractual necessity: processing required to perform the contract between 8888y and you as a registered player — including account management, payment processing, and game provision
• Legal obligation: processing required to comply with 8888y's obligations under its international gaming licence, including KYC verification, AML compliance, age verification, and responsible gaming record-keeping
• Legitimate interests: processing carried out for purposes that reflect 8888y's legitimate business interests, including fraud detection, platform security, and customer service quality improvement, provided these interests are not overridden by your fundamental rights
• Consent: processing carried out on the basis of your explicit consent, including the use of non-essential cookies and the sending of optional promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal

How We Use Your Data

8888y uses the personal data it collects for the following specific purposes:

• Creating, managing, and maintaining your 8888y account
• Processing deposits and withdrawals in PKR via your registered payment methods
• Verifying your identity and age (21+) in compliance with licensing obligations
• Detecting, investigating, and preventing fraud, money laundering, and other financial crime
• Administering and settling your bets, casino game sessions, and fishing game play
• Providing customer support in English and Urdu via all available channels
• Sending service notifications — such as deposit confirmations, withdrawal updates, and account security alerts — via SMS, email, or in-platform notification
• Applying and monitoring your responsible gaming tool settings, including deposit limits, session limits, and self-exclusion status
• Complying with requests from competent regulatory authorities, law enforcement agencies, or courts
• Improving platform performance, user experience, and game library composition based on aggregated usage analytics
• Sending promotional communications — where you have provided consent and have not opted out — about 8888y bonuses, new game releases, and platform updates

8888y does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where such processing is required as part of our fraud detection or AML compliance programme and where we notify you accordingly.

Data Sharing & Disclosure

8888y does not sell your personal data to any third party. We share personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transactional data necessary to process your deposits and withdrawals. These providers are independent data controllers in respect of their own platform data
• Identity verification providers: 8888y uses certified third-party KYC and identity verification services. These providers process identity and document data solely for verification purposes under contractual data processing agreements with 8888y
• Gaming content providers: game providers supplying content to the 8888y platform receive session and game-round data necessary to deliver and settle game outcomes. No identity data is shared beyond what is required for technical integration
• Fraud prevention and AML databases: 8888y may share data with recognised fraud prevention and anti-money laundering databases as required by licensing obligations
• Regulatory and legal authorities: 8888y will disclose personal data to competent regulatory authorities, licensing bodies, law enforcement agencies, or courts where required by law or valid legal process, without prior notice to the player where prohibited by applicable law
• Business successors: in the event of a merger, acquisition, or sale of all or substantially all assets of 8888y, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations

KYC & Identity Verification

As an internationally licensed gaming platform, 8888y is required to implement Know Your Customer (KYC) procedures for all registered players. KYC verification serves to confirm your identity, verify your age (confirming you are 21 or above), and validate the payment methods linked to your account.

KYC verification may be triggered at any of the following points:

• At account registration, where basic identity confirmation is required
• Before your first withdrawal request is processed
• Where cumulative deposits or withdrawals exceed defined thresholds under AML monitoring rules
• Where unusual account activity or a change in account behaviour triggers a compliance review
• At any time 8888y deems necessary to fulfil its regulatory obligations

Documents submitted for KYC purposes — including copies of government-issued identity documents, utility bills, and payment account screenshots — are stored securely in encrypted form and are accessible only to authorised compliance personnel. KYC documents are retained for the period required under 8888y's licensing obligations and are then securely destroyed. Failure to complete KYC verification when requested may result in restriction or suspension of withdrawal functionality until verification is satisfactorily completed.

Cookies & Tracking Technologies

8888y uses cookies and similar tracking technologies on its platform. Cookies are small data files placed on your device that help us maintain session security, remember your preferences, and understand how players use the platform. The types of cookies used by 8888y are described below:

• Essential cookies: strictly necessary for the platform to function — including session authentication tokens, security cookies, and CSRF protection. These cannot be disabled
• Functional cookies: remember your preferences such as language settings and responsible gaming tool configurations
• Analytics cookies: collect aggregated, anonymised data about how players navigate the platform, which game categories are most accessed, and where users experience friction — used to improve the platform experience
• Security cookies: assist in fraud detection and prevention by identifying unusual patterns in session behaviour

Non-essential cookies are only placed on your device where you have provided consent through the cookie preference centre available on the platform. You may update your cookie preferences at any time. Note that disabling functional or analytics cookies may reduce the quality of your platform experience but will not prevent you from accessing core Services.

Data Security

8888y implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and 8888y's servers
• Encryption of sensitive data at rest, including identity documents, payment data, and account credentials
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function
• Regular security audits and vulnerability assessments of platform infrastructure
• Multi-factor authentication for all administrative access to data systems
• Incident response procedures that include player notification in the event of a data breach that is likely to result in a risk to your rights and interests

While 8888y employs robust security practices, no online platform can guarantee complete immunity from security incidents. Players are strongly advised to use a strong, unique password for their 8888y account, to enable any two-factor authentication option offered on the platform, and to notify 8888y immediately at [email protected] if they suspect any unauthorised access to their account.

Data Retention

8888y retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to any longer retention period required by applicable law or licensing regulation. The general retention framework applied by 8888y is as follows:

• Active accounts: all personal, financial, and gaming data is retained for the duration of the active account relationship
• Closed accounts: identity and KYC data, financial transaction records, and gaming history are retained for a minimum of five (5) years following account closure, as required under anti-money laundering and gaming licence obligations
• Communications data: customer support correspondence is retained for two (2) years following the last interaction, or longer where the correspondence relates to an ongoing or unresolved dispute
• Technical and usage data: server logs and session data are retained for a maximum of twelve (12) months, after which they are anonymised or deleted
• Marketing consent records: retained until you withdraw consent and for one (1) year thereafter as an audit record

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

Your Data Rights

As a data subject, you have the following rights in relation to your personal data held by 8888y. All rights requests should be submitted to [email protected] and will be acknowledged within 5 business days and actioned within 30 days of receipt.

Children & Underage Players

The 8888y platform is strictly restricted to individuals aged 21 and above. 8888y does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If 8888y becomes aware that personal data has been submitted by or collected from a person under the age of 21, the relevant account will be immediately and permanently closed, all data associated with that account will be deleted as soon as permitted under applicable legal retention obligations, and the matter will be reported to the relevant authority where required under licensing rules.

If you are a parent or guardian and believe that a minor has registered an account with 8888y or submitted personal data to the platform, please contact 8888y immediately at [email protected] so that appropriate action can be taken without delay.

International Data Transfers

8888y operates under an international gaming licence framework and may process or store personal data on servers located outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, 8888y ensures that appropriate transfer safeguards are in place, including:

• Standard contractual clauses approved by the relevant data protection authority for transfers to third-party service providers
• Binding corporate rules where applicable within 8888y's group of companies
• Adequacy decisions where the destination jurisdiction has been recognised as providing an equivalent level of protection

All international transfers of personal data by 8888y are conducted with appropriate safeguards in place and are limited to the minimum data necessary for the specific transfer purpose.

Amendments to This Policy

8888y reserves the right to update or replace this Privacy Policy at any time to reflect changes in data processing practices, platform features, legal obligations, or regulatory requirements. Where changes are material, 8888y will notify registered players via the contact details associated with their account not less than seven (7) days before the updated Policy takes effect.

The current version of this Privacy Policy is always accessible at 8888y.one/privacy-policy, with the effective date and last updated date clearly stated at the top of the document. Your continued use of the 8888y platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using the platform and may request account closure as described in the Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 8888y processes your personal data, please contact the 8888y support team using the details below. All privacy-related correspondence is handled with strict confidentiality.

• Privacy & Data Enquiries: [email protected]
• Live Chat: Available 24/7 directly within the 8888y platform
• Messenger & Viber: Bilingual support in English and Urdu, available around the clock
• Response Time: All privacy-related requests are acknowledged within 5 business days and resolved within 30 days

8888y's support team serves players across Pakistan — including Karachi, Lahore, Islamabad, and Faisalabad — and is fully equipped to handle data rights requests, KYC queries, marketing opt-outs, and any other privacy concern you may have. We take every enquiry seriously and are committed to resolving your concern promptly and professionally.