88bbat Privacy Policy —
Your Data, Your Rights, Our Obligations

1 Who We Are

88bbat operates an online casino and sports betting platform accessible at 88bbat.com ("the Platform"). For the purposes of this Privacy Policy, 88bbat is the data controller responsible for determining how and why your personal data is processed.

If you have questions about this Policy or about how 88bbat handles your personal data, you can contact our dedicated data protection contact via email at [email protected] with the subject line "Privacy Enquiry." All privacy-related correspondence is handled by authorised 88bbat personnel and responded to within 30 calendar days.

2 Personal Data We Collect

88bbat collects the following categories of personal data from players who register accounts and use our services:

We do not collect sensitive personal data beyond CNIC information, which is collected solely for the mandatory age and identity verification required by our responsible gaming obligations.

3 How We Collect Your Data

88bbat collects personal data through the following channels:

• Direct collection during registration: When you create your 88bbat account, you provide your name, Pakistani mobile number, email address, date of birth, and CNIC details directly through the registration form.
• KYC verification: When you complete identity verification prior to your first withdrawal, you provide scanned copies or photographs of your CNIC. These documents are processed by 88bbat's KYC team and retained securely.
• Payment transactions: When you deposit or withdraw PKR via Easypaisa, JazzCash, Raast, or bank transfer, your payment account identifiers and transaction details are recorded as part of the transaction processing workflow.
• Platform interaction: As you use the 88bbat platform — placing bets, playing casino games, accessing account settings — gaming activity data and technical data are generated automatically and recorded in your account history.
• Support interactions: When you contact 88bbat support via live chat or email, the content of those communications is recorded and stored as part of your account record.
• Cookies and tracking technologies: 88bbat uses cookies and similar technologies on the platform browser interface as described in Section 6 of this Policy.

4 Legal Basis for Processing

88bbat processes your personal data on the following legal bases:

• Contractual necessity: Processing your identity data, contact data, financial data, and gaming activity data is necessary to perform the contract between you and 88bbat — specifically, to operate your account, process PKR transactions, settle bets, and deliver platform services.
• Legal obligation: Processing your CNIC data, transaction history, and gaming records is required to comply with age verification, anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations.
• Legitimate interests: Processing technical data and communications data for fraud detection, security monitoring, and platform performance optimisation serves 88bbat's legitimate interests in maintaining a safe and functional platform, provided those interests are not overridden by your data protection rights.
• Consent: Processing your data for marketing communications is based solely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5 How 88bbat Uses Your Personal Data

88bbat uses the personal data we collect for the following specific purposes:

• Account operation and maintenance: Creating, managing, and securing your 88bbat Login and associated PKR wallet, including processing deposits, withdrawals, and bonus credits.
• Identity and age verification: Verifying that you are at least 18 years of age and that the identity information you have provided matches your CNIC before allowing PKR withdrawals.
• Anti-fraud and AML compliance: Monitoring transaction patterns for evidence of fraud, money laundering, or misuse of the 88bbat platform, and reporting suspicious activity to appropriate authorities where legally required.
• Responsible gaming monitoring: Reviewing gaming activity data to identify patterns consistent with problem gambling behaviour and, where appropriate, making proactive contact or applying account restrictions in accordance with our responsible gaming policy.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and delivering support services via live chat and email in English.
• Platform improvement: Analysing aggregated, anonymised gaming activity data to improve game offerings, user interface design, payment processing performance, and responsible gaming tools.
• Marketing communications (with consent only): Sending you 88bbat promotional offers, bonus notifications, and platform updates via email or SMS where you have provided explicit consent to receive such communications.
• Security and fraud prevention: Using technical data including IP addresses, device fingerprints, and login behaviour to detect and prevent unauthorised access to your 88bbat account and protect your PKR balance.

6 Cookies & Tracking Technologies

88bbat uses cookies and similar browser-based technologies on the platform interface. Cookies are small data files stored on your device that help the platform function correctly and allow 88bbat to analyse usage patterns.

Types of cookies used by 88bbat:

• Strictly necessary cookies: Required for the 88bbat Login session to function, for your PKR balance to be displayed correctly, and for in-game functionality. These cannot be disabled without breaking core platform features.
• Functional cookies: Remember your language preferences, device settings, and account display preferences between sessions. Disabling these cookies may affect your platform experience.
• Analytics cookies: Collect anonymised data about which areas of the platform are used most frequently, how long sessions last, and what games are most accessed — used to improve platform performance. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent access attempts, including session hijacking and cross-site request forgery attacks.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the 88bbat platform. 88bbat does not use third-party advertising cookies or sell cookie data to advertising networks.

7 Sharing Your Personal Data

88bbat shares your personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, Raast, and bank partners receive your payment account identifiers and transaction amounts in PKR to process deposits and withdrawals. These providers are bound by their own privacy policies and applicable Pakistani financial data protection requirements.
• Game providers: Licensed game providers including Evolution Gaming, Pragmatic Play, JILI Games, and others receive your 88bbat player ID and PKR bet data to deliver live casino games, slots, and other game products. No full identity data is shared with game providers.
• KYC and fraud detection services: Third-party identity verification and fraud screening services may process your CNIC data and transaction patterns as part of 88bbat's compliance workflow. These providers operate under binding data processing agreements with 88bbat.
• Legal and regulatory authorities: 88bbat may disclose your personal data to Pakistani law enforcement, financial intelligence authorities, or other regulatory bodies where required by applicable law, court order, or legitimate law enforcement request. 88bbat will notify you of such requests where legally permitted to do so.
• Platform infrastructure providers: Cloud hosting, database, and platform security providers who process data on 88bbat's behalf under binding data processing agreements with strict access controls.

8 International Data Transfers

Some of 88bbat's service providers — including game platform providers and cloud infrastructure services — may be located outside Pakistan and may process your data in other countries. Where your data is transferred internationally, 88bbat ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Policy.

These safeguards include contractual data processing agreements incorporating standard data protection clauses, and where applicable, technical security measures including encryption of data in transit and at rest. 88bbat does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing compensating safeguards.

9 Data Retention Periods

88bbat retains your personal data in accordance with the following schedule:

• Active account data: Retained for the duration of your active 88bbat account plus a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC and identity data (CNIC): Retained for a minimum of five years following the last transaction on your account, or longer where required by applicable AML or regulatory obligations.
• Transaction records (PKR deposits and withdrawals): Retained for a minimum of five years following each transaction to comply with financial record-keeping obligations.
• Gaming activity records: Retained for a minimum of three years following the end of each game session, or longer where the records are relevant to an open dispute or responsible gaming investigation.
• Support communications: Retained for two years following the close of each support interaction, or longer where communications are relevant to a pending dispute.
• Marketing consent records: Retained for the duration of consent and for two years after withdrawal of consent to document compliance with marketing opt-in requirements.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with 88bbat's data destruction procedures.

10 Your Data Rights

As a registered 88bbat player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data 88bbat holds about you. 88bbat will provide a response in English within 30 calendar days of a valid request.
• Right to rectification: If any personal data held by 88bbat about you is inaccurate or incomplete, you may request that it be corrected. Contact 88bbat support via live chat or email to submit a rectification request.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request deletion of your personal data. This right is subject to limitations where 88bbat is required to retain data for legal compliance purposes, including AML record-keeping and responsible gaming obligations.
• Right to restrict processing: You may request that 88bbat restrict processing of your data in certain circumstances, such as while the accuracy of data is being verified or while an objection is being assessed.
• Right to data portability: You may request that certain personal data provided by you to 88bbat be returned to you in a structured, machine-readable format.
• Right to object: You may object to the processing of your data for marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 88bbat's assessment of whether those interests are overridden by your rights.
• Right to withdraw consent: Where processing is based on your consent — specifically, marketing communications — you may withdraw that consent at any time via your account settings or by contacting 88bbat support.

To exercise any of these rights, contact 88bbat at [email protected] with the subject line "Data Rights Request," including your account username and a description of the right you wish to exercise. 88bbat will respond in English within 30 calendar days.

11 Security Measures

88bbat implements a layered security architecture to protect your personal data and PKR balance from unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the 88bbat platform — the same encryption standard used by HBL and major Pakistani banking institutions.
• Encryption at rest for sensitive data fields including CNIC numbers, payment account identifiers, and password hashes stored in 88bbat's databases.
• Access controls: Strict role-based access controls limiting 88bbat personnel access to player data on a need-to-know basis, with full audit logging of all data access events.
• Two-factor authentication available to all players for their 88bbat Login, and mandatory for all 88bbat administrative personnel who access player data systems.
• Intrusion detection and monitoring: Continuous monitoring of platform infrastructure for anomalous access patterns, brute-force login attempts, and data exfiltration indicators.
• Penetration testing: Regular independent security assessments of the 88bbat platform infrastructure and application security.

12 Children's Data — Under-18 Protection

The 88bbat platform is strictly intended for adults aged 18 years and over. 88bbat does not knowingly collect, process, or retain personal data from individuals under the age of 18.

Age verification via CNIC is a mandatory step in the 88bbat account lifecycle, specifically to prevent minors from accessing gambling services. Where 88bbat identifies that a registered account belongs to an individual under 18 years of age — through CNIC verification, third-party age verification checks, or any other means — the account will be immediately suspended and all funds returned to the source payment method after deduction of any bonus credits. All personal data associated with such an account will be deleted promptly following the account closure process.

If you have reason to believe that a minor has registered an 88bbat account, please contact 88bbat support immediately at [email protected].

13 Responsible Gaming & Personal Data

88bbat's responsible gaming programme relies on the analysis of gaming activity data — including PKR bet amounts, session frequency, deposit patterns, and game category preferences — to identify players who may be experiencing gambling-related harm.

This monitoring is carried out as part of 88bbat's legal obligations under responsible gaming standards and is a legitimate interest of 88bbat that directly benefits player welfare. Where the monitoring system identifies patterns consistent with problem gambling behaviour, authorised 88bbat responsible gaming staff may review your account and, where appropriate, make proactive contact or apply account protections such as deposit limits or cooling-off periods.

This data processing is distinct from and independent of your marketing consent preferences. It cannot be opted out of as a condition of using the 88bbat platform, as it forms part of 88bbat's core duty of care obligations to its players. For full information about 88bbat's responsible gaming tools and policies, visit our Responsible Gaming page.

14 Changes to This Privacy Policy

88bbat may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. The effective date at the top of this Policy indicates when the current version came into force.

Where changes are material — meaning they significantly affect how we process your data or alter your privacy rights — 88bbat will notify you via the email address or mobile number registered to your account at least 14 calendar days before the changes take effect. Continued use of the 88bbat platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

If you disagree with any changes to this Policy, you may request closure of your 88bbat account in accordance with the account closure provisions in the 88bbat Terms & Conditions.

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 88bbat, please contact us:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live chat: Available 24/7 on the 88bbat platform — English language
• Response time: All privacy enquiries responded to within 30 calendar days of receipt

If you are not satisfied with 88bbat's response to a privacy complaint, you may escalate the matter to the 88bbat senior compliance team by requesting escalation in your follow-up correspondence. 88bbat takes all privacy complaints seriously and will investigate each one fully.