f888 Privacy Policy

f888 is an internationally licensed online gaming platform operating at f888.lol, offering casino games, live dealer tables, sports betting including cricket betting covering the PSL and international fixtures, and proprietary game titles including Mines Grand and MG Live. f888 serves players across Pakistan, including those in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and other major cities, as well as players in other jurisdictions where access to the platform is lawful.

For the purposes of this Privacy Policy, f888 acts as the data controller in respect of the personal data it collects from players and platform visitors. This means that f888 is responsible for determining the purposes and means by which your personal data is processed. Where f888 engages third-party service providers to process personal data on its behalf — for example, payment processors handling JazzCash or EasyPaisa transactions — those providers act as data processors under f888's instructions and are bound by contractual data protection obligations.

f888 collects personal data across several categories depending on how you interact with the platform. The following table summarises the main categories of data collected:

3.1 Directly From You

The majority of personal data f888 holds about you is provided directly by you during the account registration process, during KYC verification, when you contact f888 support via live chat or email, when you make deposits or withdrawal requests, or when you set responsible gaming preferences within your account settings.

3.2 Automatically During Platform Use

When you access the f888 platform, certain technical data is automatically collected by f888's systems. This includes your IP address, the device and browser you are using, the pages or games you visit, the duration of your session, and any errors or technical events that occur during your visit. This data is collected using standard server logging technologies and, where applicable, cookies and similar tracking mechanisms described in Section 7 of this Policy.

3.3 From Third-Party Service Providers

f888 may receive personal data about you from third-party service providers where this is necessary for platform operation. For example, payment service providers such as JazzCash and EasyPaisa may share transaction confirmation data with f888 to verify deposits and withdrawal processing. Identity verification service providers engaged for KYC purposes may share verification outcomes with f888. f888 only receives data from third parties that is strictly necessary for the purpose stated and subject to appropriate data sharing agreements.

3.4 Fraud Prevention and AML Sources

In connection with its anti-money laundering and fraud prevention obligations, f888 may access commercially available databases and screening services to verify player identity, check against sanctions lists, and screen for politically exposed persons status. Access to these databases is carried out only to the extent required by f888's regulatory and licensing obligations.

f888 uses your personal data for the following purposes:

• Account Registration and Management: To create, maintain, and manage your f888 player account, including processing your login credentials, maintaining your PKR balance, and administering your account preferences and settings;
• Identity and Age Verification: To verify that you are who you say you are and that you meet the minimum age requirement of 21 years at the time of registration, as part of f888's KYC process;
• Payment Processing: To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, and to process your withdrawal requests to your nominated payment method in PKR or equivalent;
• Gaming Services Delivery: To provide access to casino games, live dealer tables, cricket and sports betting markets, Mines Grand, MG Live, and all other platform features available to registered f888 players;
• Bonus and Promotion Administration: To issue, track, and manage bonus credits, free spins, cashback offers, loyalty rewards, and tournament entries associated with your f888 account;
• Responsible Gaming Compliance: To monitor gaming activity for indicators of problem gambling behaviour, to enforce player-set deposit and loss limits, and to process self-exclusion requests in accordance with f888's responsible gaming obligations;
• Anti-Money Laundering and Fraud Prevention: To monitor transactions and gaming activity for suspicious patterns, to comply with AML screening requirements, and to investigate and prevent fraudulent activity on the platform;
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email, and to maintain records of communications for quality assurance and dispute resolution;
• Platform Security: To detect and prevent unauthorised account access, credential theft, and security breaches using IP monitoring, device fingerprinting, and session security controls;
• Marketing Communications: Where you have provided consent, to send you information about promotions, new games, and special offers available on f888 via your registered contact details. You may opt out of marketing communications at any time through your account settings;
• Legal and Regulatory Compliance: To meet f888's obligations under applicable law and its international gaming licence, including record-keeping requirements, reporting obligations, and cooperation with regulatory and law enforcement authorities where required.

f888 processes your personal data on the following legal bases, which correspond to the purposes described in Section 4:

• Contractual Necessity: Processing that is necessary for the performance of the agreement between you and f888, including account management, payment processing, and gaming services delivery;
• Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, AML screening, record retention obligations under f888's international gaming licence, and cooperation with regulatory authorities;
• Legitimate Interests: Processing carried out for f888's legitimate business interests where these are not overridden by your data protection rights — including fraud prevention, platform security, and improving the quality of f888's services;
• Consent: Processing for which your explicit consent has been obtained — primarily marketing communications. Where consent is the basis for processing, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

f888 does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes. f888 shares your personal data only in the following circumstances and only to the extent necessary for each stated purpose:

6.1 Payment Service Providers

f888 shares necessary financial and identity data with payment processors including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network operators for the sole purpose of processing your deposit and withdrawal transactions. These providers are contractually prohibited from using your data for any other purpose.

6.2 Identity Verification Providers

As part of the KYC process, f888 may share identity documentation and personal information with third-party identity verification service providers. These providers verify the authenticity of documents and confirm identity on f888's behalf and are bound by strict data processing agreements.

6.3 Game Technology Providers

f888 works with certified third-party casino game providers — including suppliers of slot games, live dealer tables, and sports betting technology. These providers may receive limited technical data (such as session identifiers and stake amounts) necessary for game delivery and result verification. Game providers are prohibited from using this data to identify or market to f888 players independently.

6.4 Regulatory and Law Enforcement Authorities

f888 may disclose personal data to applicable regulatory bodies, law enforcement agencies, courts, or other public authorities where required by law, court order, or in connection with the investigation or prevention of fraud, money laundering, or other criminal activity. f888 will only make such disclosures to the extent required by applicable legal obligation.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of f888's business assets, personal data held by f888 may be transferred as part of that transaction. In such circumstances, f888 will take reasonable steps to ensure that the receiving entity continues to process personal data in accordance with this Privacy Policy or provides players with appropriate notice and choices prior to the transfer.

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the f888 platform. They enable the platform to remember your preferences, maintain your login session, and collect anonymised analytical data about how the platform is used. f888 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

7.2 Types of Cookies Used by f888

• Essential Cookies: Required for the f888 platform to function correctly. These include session management cookies that maintain your login state and security tokens. These cookies cannot be disabled without impairing platform functionality;
• Analytical Cookies: Used to understand how players navigate and use the f888 platform, which pages are visited most frequently, and where technical errors occur. This data is collected in aggregate and anonymised form and is used to improve the platform;
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and game lobby configurations across sessions;
• Security Cookies: Used to detect fraudulent login attempts, unusual account activity, and security threats such as session hijacking or cross-site request forgery attacks.

7.3 Managing Cookies

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the f888 platform. Disabling analytical or functional cookies will not prevent platform access but may reduce the quality of your user experience. f888 does not currently use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes.

f888 retains your personal data for as long as your account remains active and for a defined period thereafter, as required by f888's legal and regulatory obligations. The following retention periods apply as general guidelines:

• Account Data: Retained for the duration of your f888 account and for a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering and gaming licence record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required for AML and financial regulatory compliance;
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the date of last transaction, whichever is later, in compliance with regulatory obligations;
• Support Communications: Retained for a minimum of three (3) years from the date of the communication, for quality assurance and dispute resolution purposes;
• Technical Logs: Retained for a maximum of twelve (12) months from the date of generation, unless a longer period is required for active security investigation or legal proceedings.

Upon expiry of the applicable retention period, f888 will securely delete or irreversibly anonymise the relevant personal data, unless a longer retention period is required by applicable law or ongoing legal proceedings.

f888 implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: Applied to all data transmitted between your device and f888's servers, including login sessions, deposit transactions, and game play communications;
• Encrypted Data Storage: Personal data stored on f888's servers is encrypted at rest using industry-standard encryption algorithms;
• Access Controls: Access to personal data is restricted to f888 personnel and authorised service providers who have a legitimate need to access it for the purposes described in this Policy. All access is logged and subject to audit;
• Firewalls and Intrusion Detection: f888's server infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring;
• Session Security: f888 employs session timeout controls, unusual activity detection, and device recognition technology to identify and prevent unauthorised account access;
• Vulnerability Management: f888 conducts regular security assessments and promptly remediates identified vulnerabilities in accordance with its security management programme.

Subject to applicable law and f888's regulatory obligations, you have the following rights in relation to the personal data that f888 holds about you:

To exercise any of these rights, please contact f888 support via live chat or email as detailed in Section 14. f888 will respond to all data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by up to a further sixty (60) days, with notification to you of the extension and reasons. Note that certain rights may be limited where f888 is required to retain or process your data to comply with legal obligations such as AML record-keeping requirements.

As an internationally licensed platform, f888's servers and those of certain service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, f888 implements appropriate safeguards to ensure that your data receives a level of protection equivalent to that applied in the jurisdiction of collection. These safeguards include contractual data protection clauses in agreements with service providers and, where applicable, reliance on adequacy frameworks recognised under f888's licensing jurisdiction.

By using the f888 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Pakistan, and you consent to such transfer where required for the provision of f888's services.

f888 reserves the right to amend this Privacy Policy at any time to reflect changes in data processing practices, applicable legal requirements, regulatory obligations, or platform features. Where changes to this Policy are material, f888 will notify active players via their registered contact details or via a prominent notice on the platform, with a minimum of fourteen (14) days' notice before changes take effect.

Where changes are required immediately by applicable law or regulatory direction, they may take effect without advance notice. Your continued use of the f888 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. The current version of this Privacy Policy, including its effective date and version number, is always available on the f888 Privacy Policy page. If you do not agree with the revised Policy, you should cease using the platform and request account closure before the changes take effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or f888's handling of your personal data, or if you wish to exercise any of your data protection rights, please contact the f888 Data Privacy team using the details provided below. All privacy-related requests should be submitted in writing for proper documentation and tracking.

f888 is committed to handling all privacy queries and data rights requests professionally, transparently, and within the timeframes stated in this Policy.

When submitting a data rights request, please include your registered f888 mobile number, a description of your request, and (for erasure or access requests) a copy of an identity document to allow f888 to verify your identity before processing the request. This step is necessary to protect your data from being disclosed to, amended by, or deleted at the request of an unauthorised party.