b888bet Privacy Policy — How We Protect and Handle Your Data

b888bet ("we", "us", or "the Company") is committed to protecting the privacy and personal information of every player who registers and uses the b888bet platform. This Privacy Policy describes in clear and plain English how b888bet collects, processes, stores, shares, and protects personal data in connection with the b888bet Casino, sports betting services, payment processing, and all other features available through b888bet.games.

This policy applies to all registered b888bet players regardless of their geographic location, including all players accessing b888bet from Pakistan. By creating a b888bet account and using the platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy.

This Privacy Policy should be read in conjunction with b888bet's Terms & Conditions, which are available at b888bet.games/terms-and-conditions and are incorporated into the overall legal framework governing your use of the b888bet platform.

For the purposes of this Privacy Policy, b888bet acts as the data controller in respect of all personal data collected from players using the b888bet platform. As data controller, b888bet determines the purposes for which personal data is processed and the means by which such processing is carried out.

b888bet is operated under an international gambling licence. Queries regarding data protection matters may be directed to b888bet's dedicated data protection contact, details of which are set out in Section 15 of this policy.

b888bet collects personal data from players in the following categories:

• Full legal name as it appears on government-issued identification.
• Date of birth (used for 18+ age verification).
• Residential address.
• CNIC number or passport number where provided during verification.
• Photograph of identity document where required for enhanced verification.

• Email address registered at account creation.
• Pakistan mobile number (used for account security, SMS OTP, and where applicable for Easypaisa or JazzCash wallet linking).

• PKR deposit and withdrawal amounts and timestamps.
• Payment method type (Easypaisa, JazzCash, MCB Bank, HBL, SadaPay, Raast, card).
• Tokenised payment identifiers provided by payment processors — b888bet does not store raw card numbers, CVV codes, or full bank account numbers.
• Transaction reference numbers for all deposit and withdrawal records.

• Games played, bet amounts, game outcomes, session durations.
• Bonus credits claimed and wagering progress.
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status).

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser type.
• Session timestamps and login history.
• Cookie identifiers and analytics data (see Section 6).

b888bet uses the personal data it collects for the following purposes:

b888bet processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your b888bet account, process deposits and withdrawals, and deliver the gaming services you have registered for.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements, fraud prevention obligations, and other applicable regulatory duties.
• Legitimate interests: Processing for platform security, fraud monitoring, and responsible gaming supervision, where b888bet's interests in operating a safe and fair platform do not override your privacy interests.
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent for marketing at any time by contacting b888bet's support team or using the unsubscribe mechanism in any marketing communication.

b888bet uses cookies and similar tracking technologies on the b888bet platform to deliver and improve the player experience. The categories of cookies used by b888bet are as follows:

These cookies are essential for the b888bet platform to function. They enable account login, session management, and security functions including CSRF protection. These cookies cannot be disabled without preventing access to core platform features.

Functional cookies allow b888bet to remember your preferences — such as your selected language, preferred game category, and responsible gaming tool settings — so you do not have to re-enter them at each b888bet login.

b888bet uses analytics cookies to understand how players use the platform — which pages are visited most frequently, where players encounter difficulties, and how the platform can be improved. Analytics data is aggregated and anonymised wherever possible. b888bet does not use analytics data to build individual player marketing profiles.

b888bet does not sell, rent, or trade personal data to third parties for their own commercial purposes. b888bet shares personal data with third parties only in the following limited circumstances:

• Payment processors: b888bet shares the minimum necessary financial data with Easypaisa, JazzCash, MCB Bank, HBL, SadaPay, Raast, and card processing partners to execute deposits and withdrawals in PKR. These processors receive only the data required to complete the specific transaction and are bound by their own data protection obligations.
• Identity verification providers: Where enhanced identity verification is required, b888bet may share identity documents with third-party KYC (Know Your Customer) verification services. These providers process identity data solely for verification purposes and are contractually prohibited from using the data for any other purpose.
• Game software providers: b888bet's casino games are provided by third-party game developers. These providers receive anonymised session and gameplay data to enable their games to function but do not receive personally identifiable information that would allow them to identify individual b888bet players.
• Regulatory and law enforcement authorities: b888bet will disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where required to do so by applicable law or by a valid legal order.
• Business succession: In the event of a merger, acquisition, or sale of b888bet's business, personal data held by b888bet may be transferred to the acquiring entity, subject to equivalent data protection commitments.

b888bet implements a layered data security programme designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. The key technical and organisational measures in place at b888bet include:

• 256-bit SSL/TLS encryption for all data in transit between players' devices and b888bet's servers.
• Encryption of sensitive data at rest on b888bet's storage infrastructure.
• Tokenisation of payment method details — raw card numbers and bank account information are never stored on b888bet's systems.
• Two-Factor Authentication (2FA) available for all player accounts and mandatory for internal b888bet staff systems.
• Role-based access controls ensuring that b888bet employees can only access personal data necessary for their specific job function.
• Regular third-party security audits and penetration testing of b888bet's platform and infrastructure.
• Formal incident response procedures including mandatory breach notification processes.

Despite these measures, no internet-based system can guarantee absolute security. b888bet will notify affected players and relevant authorities in the event of a personal data breach in accordance with applicable regulatory requirements.

b888bet retains personal data for the period necessary to fulfil the purpose for which it was collected, or for such longer period as required by law or regulation. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. b888bet's data retention schedules are reviewed annually to ensure continued compliance with applicable regulatory requirements.

Registered b888bet players have the following rights in relation to their personal data, subject to applicable legal limitations:

• Right of access: You may request a copy of the personal data b888bet holds about you. b888bet will provide this within 30 days of a verified request.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by b888bet. Requests relating to name, date of birth, or identity document data may require supporting documentation.
• Right to erasure: In certain circumstances you may request deletion of your personal data. This right does not apply where b888bet is required to retain data for regulatory compliance purposes.
• Right to restriction: You may request that b888bet restrict processing of your personal data in certain circumstances — for example, while a correction request is being verified.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that b888bet provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of b888bet's legitimate interests. b888bet will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — such as for direct marketing — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact b888bet's support team using the contact details in Section 15. b888bet may request proof of identity before processing a data rights request to ensure that personal data is not disclosed to unauthorised individuals.

b888bet may send marketing communications to registered players regarding promotions, bonus offers, new game launches, and platform updates. Such communications are sent by email and, where a player has provided consent, by SMS to their registered Pakistan mobile number.

b888bet will only send marketing communications where the player has provided explicit consent, or — in jurisdictions where permitted — where the player is an existing customer and the communication relates to similar services to those already used. b888bet will always provide a clear and functional opt-out mechanism in every marketing communication.

Players who have opted out of marketing communications will still receive essential transactional communications relating to their account, including deposit confirmations, withdrawal notifications, security alerts, and responsible gaming notifications.

b888bet does not send marketing communications to any player who has an active self-exclusion on their account. b888bet's marketing suppression processes are reviewed regularly to ensure self-excluded players are not inadvertently contacted.

b888bet does not knowingly collect personal data from individuals under the age of 18. The b888bet platform is strictly an adult platform and registration is limited to individuals who are 18 years of age or older.

b888bet conducts age verification as part of the registration process and reserves the right to request documentary proof of age — such as a CNIC or passport — at any point during a player's account lifecycle. This is a regulatory requirement and is not negotiable.

b888bet operates as an international platform and may process or store personal data on servers located outside Pakistan. Where personal data is transferred internationally, b888bet ensures that appropriate safeguards are in place to protect the data to a standard equivalent to this Privacy Policy.

These safeguards may include standard contractual clauses, data processing agreements with sub-processors that incorporate equivalent data protection obligations, or other recognised transfer mechanisms. By using the b888bet platform, players consent to the international transfer of their personal data subject to the protections described in this section.

b888bet reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, applicable law, or regulatory requirements. Where material changes are made, b888bet will notify registered players via email to the address held on record, providing at least 14 days' advance notice before the changes take effect.

The current version of this Privacy Policy is always accessible at b888bet.games/privacy-policy. The "Last Updated" date at the top of the policy document reflects when the most recent changes were made. Players are encouraged to review this policy periodically.

Continued use of the b888bet platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised policy. Players who do not agree with a material change may close their b888bet account before the effective date by contacting b888bet's support team.

For questions regarding this Privacy Policy, to exercise your data protection rights, or to report a suspected privacy concern, please contact b888bet using the following details:

b888bet will verify your identity before processing any data rights request to ensure that personal data is disclosed only to the account holder. Identity verification may require submission of a CNIC or passport copy for confirmation purposes.