Privacy Policy – 8ffd Online Casino Pakistan

8ffd ("the Platform", "we", "us" or "our") operates the online casino and sports betting service available at 8ffd.win. When you register an account, use any part of the platform or communicate with us, you share personal information with us. This Privacy Policy explains clearly what we collect, why we collect it, how it is used, who it may be shared with and how long we keep it.

This Policy applies to all registered players on 8ffd, including Pakistani players using the platform via mobile browser or any other means of access. By registering an account on 8ffd, you acknowledge that you have read this Privacy Policy and agree to the collection and use of your information as described here.

The personal data we collect falls into several categories depending on how you interact with the platform:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health records, and we have no reason to do so in the context of operating an online gaming platform.

We collect data directly from you (during registration, deposits, withdrawal requests and when you contact support), automatically through your use of the platform (technical and usage data), and from third-party verification services when KYC checks are performed.

The personal data we hold is used for specific, defined purposes. We do not use your data for purposes beyond those listed below without notifying you:

• Account creation and management: Your name, contact details and date of birth are used to create and maintain your 8ffd account and to verify that you meet the minimum age requirement of 18 years.
• Processing deposits and withdrawals: Financial data and payment account references are used to credit your PKR deposits, process your withdrawal requests and maintain your transaction history. This includes interactions with JazzCash, Easypaisa, Raast and bank transfer systems.
• Identity verification (KYC): Your CNIC and other submitted documents are used to verify your identity as required before processing withdrawals and as part of anti-money laundering (AML) compliance procedures.
• Fraud prevention and security: Technical data including IP addresses, device information and session patterns is used to detect and prevent fraudulent activity, unauthorised account access, multi-accounting and other prohibited conduct defined in our Terms and Conditions.
• Customer support: Communications data is used to respond to your support enquiries, resolve account issues and maintain records of support interactions.
• Platform improvement: Aggregated and anonymised usage data helps us understand how the platform is used and make improvements to the interface, game availability and overall experience.
• Legal and compliance obligations: We may be required to retain and use certain data to comply with financial record-keeping, AML, and other regulatory obligations applicable to our operations.
• Communications about your account: We may send you transactional communications — such as deposit confirmations, withdrawal status updates and security alerts — to your registered mobile number or email address. These are essential service communications, not marketing.

We do not sell, rent or trade your personal data to any third party for marketing purposes. We share data only with the following categories of recipients, and only to the extent necessary for the purpose stated:

• Payment processors: PKR payment services — including JazzCash, Easypaisa and Raast network operators — receive the financial data needed to process your deposit and withdrawal transactions. These providers operate under their own privacy and security frameworks.
• KYC and identity verification services: Third-party identity verification providers may receive copies of your submitted identity documents to perform automated or manual verification checks as part of our AML compliance process.
• Game and content providers: Platform game providers whose content is hosted on 8ffd may receive limited technical session data (such as a session token and bet amounts in PKR) necessary to run games and settle results. They do not receive your full identity or contact information.
• Technology and infrastructure providers: Cloud hosting, security and platform infrastructure suppliers may have access to data stored on systems they operate on our behalf. These providers are bound by data processing agreements that restrict how they can use any data they access.
• Legal and regulatory authorities: We may be required to disclose account or transaction data to law enforcement, financial regulatory bodies or other authorities when required by a lawful request or where we are legally obligated to do so — for example, in the context of a fraud investigation or AML reporting obligation.

Because 8ffd processes real-money PKR transactions — including deposits via JazzCash, Easypaisa, Raast and bank transfer — the financial data we hold is particularly sensitive and is handled with additional care. The specific rules that apply to payment data are as follows:

• Full payment account numbers (JazzCash wallet numbers, bank account numbers) are stored only in masked or tokenised form after initial processing. We do not retain full, unmasked payment credentials beyond what is strictly necessary for transaction processing.
• All payment data is transmitted over encrypted connections. Payment processing is handled through certified payment service providers — we do not store raw card data on our own servers in any case where cards are used.
• Withdrawal requests are cross-referenced against your registered deposit methods as part of our fraud prevention process. This is why we require deposits and withdrawals to use the same PKR payment account wherever possible.
• Your full transaction history — deposits, withdrawals and any fees or adjustments — is accessible in your 8ffd account at all times. You can review this at any point after logging in.

If you believe that any unauthorised transaction has occurred in your account, contact 8ffd support immediately. Prompt reporting reduces the risk of further exposure and allows us to investigate the incident and take protective action on your account.

8ffd uses cookies and similar browser storage technologies to make the platform function correctly and to improve the user experience. Here is a plain explanation of what we use and why:

• Session cookies: These are temporary cookies that keep you logged in during an active browsing session. Without them, you would be logged out every time you navigate between pages. They are deleted automatically when you close your browser.
• Authentication cookies: These confirm your identity after login and persist for the duration of your session or, if you use a "remember me" option, for a defined period. They are essential to account security.
• Preference cookies: These remember settings you have applied on the platform such as display preferences. They make your next visit more convenient.
• Analytics cookies: Aggregated, anonymised data about how different parts of the platform are used helps us identify pages or features that need improvement. No personally identifiable information is included in analytics data.
• Fraud prevention tokens: Certain device or session identifiers are retained to help identify suspicious access patterns, such as multiple accounts being accessed from the same device.

You can control cookies through your browser settings. Blocking essential session and authentication cookies will prevent you from being able to log into your account. Blocking analytics or preference cookies has no effect on core platform functionality.

We do not keep your personal data for longer than is necessary for the purposes for which it was collected. The general retention periods that apply to different categories of data on 8ffd are as follows:

• Account and identity data: Retained for the duration of your account and for a period after account closure to satisfy legal and compliance obligations including AML record-keeping requirements. Specific retention periods vary based on applicable regulatory requirements.
• Transaction and financial records: PKR transaction records — deposits, withdrawals and bet history — are retained for a minimum period required by applicable financial record-keeping standards. These records may be required in the event of a dispute, a fraud investigation or a regulatory audit.
• KYC documents: Identity verification documents submitted as part of KYC are retained for the period required by AML compliance obligations, typically several years beyond the closure of an account.
• Technical and usage data: Anonymised session logs used for analytics are retained in aggregate form. Individual-level technical logs are retained for shorter periods based on their operational purpose — typically months rather than years.
• Support communications: Records of support interactions are retained for a period sufficient to resolve ongoing issues and handle any subsequent related enquiries or disputes.

8ffd implements technical and operational security measures to protect the personal data we hold against unauthorised access, loss, alteration or disclosure. The key measures in place include:

• SSL/TLS encryption: All data transmitted between your device and the 8ffd platform is protected by SSL encryption. This applies to login, deposits, withdrawals and all account management actions. The padlock icon in your browser address bar confirms the encrypted connection is active.
• Access controls: Personal account data is accessible only to authorised platform staff who have a legitimate operational need to view it. Access is logged and restricted by role.
• Password hashing: Your account password is not stored in plain text. It is stored as a one-way cryptographic hash, which means that even internal access to the database does not expose your actual password.
• Fraud detection systems: Automated systems monitor for access patterns consistent with account compromise, credential stuffing attacks and unauthorised logins. Suspicious activity triggers security responses including session termination and account review.
• Payment tokenisation: Payment account references are stored in tokenised or masked form rather than as full, usable credentials.

While we take every reasonable measure to protect your data, no internet-connected system is completely immune to risk. You also play an important role in keeping your account secure: use a strong, unique password, do not share your login credentials with anyone, and do not share OTP codes sent to your registered Pakistani mobile number.

As a player whose personal data is held by 8ffd, you have the following rights in relation to that data:

• Right to access: You can request a copy of the personal data we hold about you. Your transaction history and most account data are directly accessible from your account dashboard without needing to make a formal request.
• Right to correction: If any personal data we hold about you is inaccurate or incomplete, you can request that it be corrected. Contact support with the specific correction required and appropriate documentation.
• Right to deletion: You can request deletion of your personal data. Note that this right is subject to our legal and compliance obligations — financial transaction records, KYC documents and other data required for AML or fraud investigation purposes may need to be retained even after an account is closed.
• Right to object to processing: Where we process your data based on legitimate interests rather than contractual necessity, you can object to that processing. We will assess the objection and respond with either a confirmation that processing will stop or an explanation of why the processing must continue.
• Right to data portability: You can request your personal data in a structured, commonly used format to transfer it or use it elsewhere, where technically feasible.

To exercise any of these rights, contact the 8ffd support team at [email protected]. We will respond to requests within a reasonable period. Note that identity verification may be required before we can action a privacy rights request, to ensure we are responding to the legitimate account holder.

8ffd is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been created by or for a person under 18, the account will be closed immediately, any deposits will be returned and any winnings will be forfeited.

If you are a parent or guardian and believe that a minor has accessed or registered on 8ffd using your device or payment details, please contact support immediately so the account can be reviewed and closed. Provide the registered mobile number or email address associated with the account when making contact.

If you share a device with younger family members, log out of your 8ffd account after each session and keep your login credentials private. Do not store your password in a shared browser or leave your account open on a shared device.

8ffd may update this Privacy Policy from time to time to reflect changes in how we operate, in the services we use, or in applicable legal and compliance requirements. When changes are made, the updated Policy will be published on this page with a revised "Last Updated" date at the top.

Material changes — those that significantly affect how your data is used or your privacy rights — will be communicated to registered players through a notice on the platform at the time of login. For minor clarifications or administrative updates that do not change the substance of how data is handled, we may update the page without a separate notification.

If you have any questions about this Privacy Policy, about how your personal data is being handled, or if you want to exercise any of your privacy rights, please contact the 8ffd team:

[email protected]

Please include your registered Pakistani mobile number or account email address in your message so we can identify your account and respond to your query accurately. We aim to respond to all privacy-related enquiries within five business days.

For account-specific issues such as suspicious activity, unauthorised transactions or a request to close your account, the same contact address applies — please mark the subject line clearly so the query is directed to the right team member promptly.