Privacy Policy

This Privacy Policy ("Policy") is issued by e88f ("e88f", "we", "us", "our") and applies to all personal data collected from or about users ("User", "you", "your") who access or interact with the e88f website at https://e88f.cam and all associated services ("Platform").

e88f is committed to protecting the privacy and security of your personal information. This Policy explains what personal data we collect, the purposes for which we use it, how long we retain it, with whom we may share it, and the rights available to you in relation to your data.

This Policy should be read alongside our Terms & Conditions, which govern your general use of the Platform and are incorporated by reference herein. In the event of any conflict between this Policy and the Terms & Conditions regarding the handling of personal data, this Policy shall prevail.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, online identifiers and factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure or destruction.
• "Data Controller" means e88f, which determines the purposes and means of Processing of your Personal Data.
• "Data Processor" means any third party that Processes Personal Data on behalf of e88f in accordance with this Policy and applicable data protection obligations.
• "Consent" means any freely given, specific, informed and unambiguous indication of your wishes by which you signify agreement to the Processing of your Personal Data.
• "KYC Data" means identity and verification documentation submitted in the course of the Know Your Customer process, including government-issued identity documents such as a Pakistani CNIC, passport or driving licence.

e88f collects several categories of Personal Data depending on how you interact with the Platform. The main categories are set out in the table below:

e88f collects Personal Data through a number of means:

4.1 Directly from You

• When you register an Account on the Platform, providing registration details including name, email and contact number.
• When you complete KYC verification and submit identity documentation.
• When you make a deposit or withdrawal, providing payment method and transaction details.
• When you contact our support team via live chat, email or the help centre.
• When you set responsible gambling preferences such as deposit limits, loss limits or session timers.

4.2 Automatically from Your Device

• Through cookies, web beacons and similar tracking technologies as you navigate the Platform.
• Through our analytics tools, which capture page interaction data, session duration and feature usage.
• Through server logs that record IP addresses, browser types and access timestamps for security and operational monitoring purposes.

4.3 From Third Parties

• From identity verification service providers engaged to validate KYC documentation.
• From fraud prevention and anti-money laundering (AML) screening services.
• From payment processors in connection with deposit and withdrawal transactions.

e88f processes your Personal Data for the following purposes:

• Account Management: To create, maintain and secure your Account, including identity verification and KYC compliance.
• Service Delivery: To enable you to place bets, access casino games and use Platform features including live sports markets such as PSL cricket and ICC tournament fixtures.
• Payment Processing: To process deposits and withdrawals in PKR, verify transaction legitimacy and prevent fraudulent transactions.
• Customer Support: To respond to queries, complaints and account assistance requests submitted through live chat, email or the help centre.
• Legal and Regulatory Compliance: To fulfil AML obligations, age verification requirements, KYC processes and any other applicable regulatory duties.
• Responsible Gambling: To monitor wagering patterns for responsible gambling indicators, apply limits set by the User and action self-exclusion requests.
• Security and Fraud Prevention: To detect, investigate and prevent fraudulent, abusive or illegal activity on the Platform.
• Platform Improvement: To analyse Platform usage, identify technical issues and improve the user experience for Pakistani users across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.
• Communications: To send you transactional communications such as Account notifications, deposit confirmations and support responses. Promotional communications are sent only where you have given consent or where a legitimate interest applies.

Where applicable data protection law requires e88f to identify a legal basis for the Processing of your Personal Data, we rely on the following bases:

• Contractual Necessity: Processing required to fulfil the contractual obligations in our Terms & Conditions, including Account management, service delivery and payment processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML and age verification obligations.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests, including security monitoring, fraud prevention and Platform analytics, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, informed consent, including the sending of promotional communications. You may withdraw consent at any time by contacting support.

e88f does not sell, rent or trade your Personal Data to any third party for commercial purposes. We may share your Personal Data only in the following circumstances:

7.1 Service Providers and Data Processors

We engage third-party service providers to assist with identity verification, payment processing, fraud detection, analytics and customer support functions. These providers act as Data Processors under our instruction and are contractually bound to process your data only in accordance with this Policy and applicable law.

7.2 Legal and Regulatory Authorities

We may disclose your Personal Data to law enforcement agencies, regulatory bodies or other competent authorities where required by applicable law, a court order or a legally binding governmental request. We will, to the extent permissible by law, notify you of such disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring or sale of assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and your rights under this Policy will continue to apply.

e88f may process or transfer your Personal Data to servers or Data Processors located outside of Pakistan. When such transfers occur, we take appropriate steps to ensure that your data receives a level of protection consistent with this Policy and applicable data protection standards, including the use of contractual safeguards with recipient entities.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan, which may have different data protection laws than those in your home jurisdiction.

e88f retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your Account relationship with us and for a reasonable period thereafter. Specific retention periods are as follows:

• Account and KYC Data: Retained for the duration of Account activity plus a minimum of five (5) years following Account closure, in order to comply with AML and regulatory record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with applicable financial record-keeping requirements.
• Support Communications: Retained for up to three (3) years from the date of the communication, or longer if the matter relates to an unresolved dispute or legal proceeding.
• Technical and Analytics Data: Generally retained for up to twenty-four (24) months from collection, after which it is aggregated or anonymised.
• Marketing Consent Records: Retained until consent is withdrawn plus a reasonable additional period to demonstrate consent history.

Where retention beyond these periods is required by law or legitimate business necessity, we will retain only the minimum data required for that specific purpose and document our justification accordingly.

Subject to applicable law and verification of your identity, you have the following rights in relation to your Personal Data held by e88f:

• Right of Access: You may request a copy of the Personal Data we hold about you.
• Right of Rectification: You may request correction of any inaccurate or incomplete Personal Data.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the Processing of your Personal Data in certain circumstances, for example while we verify the accuracy of data you have disputed.
• Right to Data Portability: Where Processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, commonly used machine-readable format.
• Right to Object: You may object to Processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of Processing prior to withdrawal.

To exercise any of these rights, please contact the e88f support team using the details in Section 15 of this Policy. We will respond to all verifiable requests within a reasonable timeframe. Some requests may be subject to identity verification before action is taken.

e88f uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. A cookie is a small data file placed on your device when you visit a website.

11.1 Types of Cookies Used

• Essential Cookies: Required for the Platform to function. These include session authentication tokens, shopping basket data and security parameters. They cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data on how users interact with the Platform — pages visited, time spent and navigation patterns. This data helps us improve the Platform's performance and usability.
• Functional Cookies: Used to remember your preferences such as language settings and responsible gambling limit selections.
• Marketing and Attribution Cookies: Used to track the origin of visits and measure the effectiveness of promotional campaigns. These are only placed with your consent.

11.2 Managing Cookies

You may manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may impair your ability to use certain Platform features, including Account login and session continuity.

e88f implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including KYC documentation and financial records.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security assessments and vulnerability reviews of Platform infrastructure.
• Incident response procedures to detect, report and manage any personal data breaches in accordance with applicable obligations.

The e88f Platform is strictly intended for adults aged 18 years and above — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect Personal Data from any person under the age of 18. If we become aware that Personal Data belonging to a person under 18 has been collected, we will take immediate steps to delete such data and close the associated Account.

If you believe that a minor has registered an Account or provided Personal Data to e88f, please contact us immediately at the details set out in Section 15 of this Policy.

e88f reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will publish a revised version on this page and update the "Last Updated" date at the top of this Policy. For significant changes affecting your rights or how we use your data, we may provide additional notice through your registered email address or a Platform notification.

Your continued use of the Platform following the publication of any amended Policy constitutes your acceptance of those changes. If you do not accept the amended Policy, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

We encourage you to review this Policy periodically to remain informed about how e88f handles your Personal Data.

If you have any questions, concerns or requests relating to this Privacy Policy or the Processing of your Personal Data, please contact the e88f Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the Platform's Help Centre
• Help Centre: Searchable knowledge base on the Platform covering common privacy questions

Please clearly state "Privacy Request" in your subject line or opening message so that your query is directed to the appropriate team. We will acknowledge your request within a reasonable timeframe and aim to resolve privacy-related matters within thirty (30) days of receipt, where practicable.

Support is available in English at all times. Urdu-language assistance is available during specified hours — please check the Help Centre for current availability.