88ff Privacy Policy – How We Handle Your Data

88ff operates an online gaming platform — including fish games, live casino, slots and sports betting — accessible through our website at 88ff.plus and via our dedicated mobile app. To run the platform properly and keep your account secure, we need to collect and process certain personal information.

We take data privacy seriously. This policy is written in plain language so you know exactly what information we hold about you, why we hold it and what we do with it. We don't collect more than we need, and we don't keep it longer than necessary. If you have questions about anything in this policy, reach out to our support team at any time.

This policy should be read alongside the Terms and Conditions, which form the broader agreement governing your use of 88ff.

We collect personal data through several channels — directly from you when you register or contact us, automatically as you use the platform, and from third parties involved in payment processing or identity verification.

We do not collect sensitive personal data such as health information, religious beliefs or biometric data unless specifically required for a legal or compliance purpose, in which case we will ask for your explicit consent beforehand.

88ff processes your data only for clearly defined purposes. We do not use your information in ways you would not reasonably expect. The main purposes for which we process personal data are:

• Account management: Creating and maintaining your account, verifying your identity and keeping your profile up to date.
• Processing transactions: Handling PKR deposits via JazzCash, Easypaisa, Raast, bank transfer and card, and processing withdrawal requests to your registered payment method.
• Platform operation: Enabling you to play games, place sports bets, participate in promotions and access all platform features.
• Fraud prevention and security: Detecting suspicious activity, preventing duplicate accounts and protecting your account from unauthorised access.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling behaviour, applying deposit limits and self-exclusion settings.
• Customer support: Responding to your queries, resolving disputes and following up on account issues.
• Marketing communications: Sending bonus offers, promotions and platform news — only if you have opted in. You can withdraw consent at any time.
• Legal compliance: Meeting obligations under applicable financial, anti-money laundering and data protection requirements.

We do not use automated decision-making in a way that produces legal or similarly significant effects on your account without human review being available.

88ff does not sell your personal data. We share information with third parties only where it is necessary to operate the platform or where we are legally required to do so. Categories of recipients include:

• Payment processors: JazzCash, Easypaisa, Raast and bank partners receive transaction data to process your deposits and withdrawals. They handle this data under their own privacy terms.
• Identity verification providers: Third-party KYC services may receive your identity documents to verify your account during registration or when processing large withdrawals.
• Game providers: Your gaming session data is shared with the game provider whose title you are playing, to the extent required to run the game and record outcomes.
• Fraud and security services: Providers that help us detect multi-accounting, bonus abuse and suspicious financial activity may receive limited data to perform these checks.
• Legal and regulatory authorities: Where required by law — for example, in response to a valid legal request — we may disclose account or transaction data to relevant authorities.

When you make a deposit or request a withdrawal, 88ff processes payment information through regulated payment gateways. We store only the minimum payment reference data needed to match transactions to your account — we do not store full card numbers, mobile wallet PINs or bank account passwords on our servers.

All PKR transactions — whether through JazzCash, Easypaisa, Raast, bank transfer or debit/credit card — are processed over encrypted connections. Your payment method reference (such as a JazzCash mobile number or bank account last four digits) is stored to allow withdrawal routing and to verify that deposits and withdrawals are made using the same registered method.

• Deposit records: Transaction amounts, timestamps and payment method references are retained as part of your account history for security and dispute resolution purposes.
• Withdrawal verification: For large withdrawals, we may need to confirm your identity and payment method ownership before releasing funds. This is a security measure.
• Third-party payment terms: When you use JazzCash or Easypaisa, your interaction with those services is also governed by their own privacy policies. 88ff is not responsible for how those providers handle data outside of our direct integration.

88ff uses cookies and similar tracking technologies on our website and app to improve your experience, keep you logged in and understand how the platform is being used. A cookie is a small text file stored on your device when you visit a website.

• Essential cookies: Required for the platform to function. These keep your session active and maintain your login state. You cannot opt out of these while using the platform.
• Analytics cookies: Help us understand which pages and game categories are most popular, how long sessions last and where players typically drop off. This data is aggregated and not linked to individual identities.
• Preference cookies: Remember your settings such as language preference, notification choices and deposit limit configurations.
• Security cookies: Used to detect and prevent suspicious login attempts, bot activity and fraudulent transactions.

You can manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your ability to use the core platform features, though some personalisation settings may reset.

We keep your personal data for as long as your account is active and for a reasonable period afterwards, depending on the category of data and the purpose for which it was collected. Below is a general guide to our retention approach:

• Account and identity data: Retained for the full duration of your account plus a minimum of five years after account closure, to meet financial record-keeping requirements.
• Transaction records: Deposit and withdrawal history is retained for a minimum of five years from the date of each transaction.
• Gaming activity logs: Session and betting records are retained for up to three years from the date of activity.
• Support communications: Chat transcripts and email records are retained for up to two years to allow dispute resolution and quality review.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever comes first.

When data is no longer required for the purpose it was collected and no legal obligation requires us to keep it, we securely delete or anonymise it.

Keeping your personal information secure is a priority at 88ff. We use a combination of technical and organisational measures to protect data from unauthorised access, loss, alteration or disclosure.

• Encryption in transit: All data transferred between your device and our servers is encrypted using TLS (Transport Layer Security). You will always see HTTPS in the address bar when using the 88ff website.
• Encryption at rest: Sensitive data stored on our servers — including identity documents and payment references — is encrypted at the storage level.
• Access controls: Internal access to personal data is restricted to staff and systems that genuinely need it. Access logs are maintained and reviewed regularly.
• Two-factor authentication: We support and encourage the use of two-factor authentication (2FA) on your 88ff account for an added layer of login security.
• Incident response: In the unlikely event of a data breach that affects your personal information, we will notify you promptly and take immediate steps to contain the issue.

You have meaningful rights over your personal information. 88ff respects these rights and will respond to any valid request within a reasonable timeframe. Here is what you can ask for:

To exercise any of these rights, contact our support team through the in-platform chat or by email. We will verify your identity before processing the request to ensure we are responding to the genuine account holder.

The 88ff platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered an account on our platform, please contact our support team immediately. We will investigate and take appropriate action, including closing the account and deleting associated data.

During registration, users are required to confirm that they are 18 or older. We may request documentary proof of age — such as a CNIC — if there is reason to suspect that an account holder does not meet the minimum age requirement.

We may update this Privacy Policy from time to time to reflect changes in how we operate, new services we introduce or evolving data protection practices. When we make material changes, we will notify active account holders by email or through an in-platform notification at least 7 days before the updated policy takes effect.

The "Last updated" date at the top of this page always shows when the current version was published. We recommend checking this page periodically — especially before making a deposit or sharing additional personal information with us.

Continuing to use the 88ff platform after a policy update takes effect means you accept the revised terms. If you disagree with changes to the policy, you may close your account by contacting our support team.

If you have any questions about this Privacy Policy, want to exercise your data rights or need to report a privacy concern, our support team is available to help. You can reach us through:

• In-platform live chat: Available 24/7 from within your account dashboard on the app or website.
• Email: [email protected] — include your registered mobile number (without sharing your password) so we can locate your account quickly.

We aim to respond to all privacy-related requests within 5 business days. Complex requests such as full data exports may take up to 30 days. We will keep you updated on progress if a request is taking longer than usual.