Privacy at a Glance
This Policy explains what personal data 888fb collects from users, why we collect it, how it is processed, who it may be shared with, and what rights you hold over your data. This summary is for orientation only — the full clauses below govern your relationship with 888fb.
Clause 1
Introduction
This Privacy Policy ("Policy") describes how 888fb ("the Platform", "we", "us", "our"), accessible at https://888fb.cam, collects, uses, stores, shares and protects the personal data of users ("you", "User") who access or use the Platform. It also describes the rights you hold in relation to your personal data and how to exercise those rights.
By registering an account on 888fb, accessing the Platform or submitting personal data through any Platform channel, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy forms part of the overall agreement between you and 888fb and must be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.
Users accessing 888fb from Pakistan should note that while this Policy is written to reflect internationally recognised data protection principles, Pakistan's data protection legal framework — including the Personal Data Protection Bill and related regulatory guidance — is evolving. 888fb endeavours to align its data practices with applicable requirements but this Policy does not constitute legal advice under Pakistani law.
No Data Sale: 888fb does not sell your personal data to third parties for their own marketing or commercial purposes. Data sharing, where it occurs, is limited to the purposes set out in this Policy.
Clause 2
Definitions
For the purposes of this Policy, the following terms have the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. In the context of this Policy, 888fb acts as the Data Controller in respect of user data collected on the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller under a contractual obligation. |
| "KYC Data" | Identity verification documentation, including but not limited to national identity cards (such as Pakistan CNIC), passports, proof of address and payment method verification documents. |
| "Cookies" | Small data files placed on a User's device by the Platform to facilitate session management, analytics and personalisation. |
| "Consent" | A freely given, specific, informed and unambiguous indication by the User of their agreement to the processing of their personal data for a stated purpose. |
Clause 3
Data Controller Identity
888fb operates the Platform at https://888fb.cam and acts as the Data Controller in respect of personal data collected from registered users and visitors to the Platform. For all data protection enquiries, privacy rights requests and complaints, Users may contact the 888fb privacy team using the contact details provided in Clause 16 of this Policy.
Where 888fb engages third-party service providers — such as payment processors, game content suppliers, fraud prevention vendors or KYC verification providers — those third parties act as Data Processors under contractual data processing agreements that require them to handle personal data only on 888fb's instructions and in accordance with applicable data protection requirements.
Clause 4
Categories of Personal Data We Collect
888fb collects the following categories of personal data from users, depending on the nature of the interaction:
4.1 Identity and Contact Data
- Full legal name as it appears on official identity documents.
- Date of birth (to verify minimum age eligibility).
- Email address and contact telephone number.
- Residential address (city, province, country). For Pakistani users, this may include city references such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar.
- Username and account credentials (password stored in encrypted form only; 888fb does not store passwords in plain text).
4.2 KYC and Verification Data
- Copies of government-issued identity documents. For Pakistani users, this typically means a valid Computerised National Identity Card (CNIC), although passport or driving licence may also be accepted.
- Proof of residential address documents (utility bill, bank statement or equivalent), no older than three months.
- Payment method verification documentation, which may include screenshots or statements confirming ownership of the payment method used for deposits.
- Selfie or video verification where required by the operator's KYC procedures.
4.3 Financial Data
- Deposit and withdrawal transaction records, including amounts in PKR or other currencies, transaction dates and payment method references.
- Payment method identifiers (e.g., partial account or wallet numbers, card last four digits). Full payment credentials such as card numbers are not stored on the 888fb Platform — these are handled by accredited payment processors.
- Bonus and promotional activity records, including wagering history relevant to bonus completion.
4.4 Usage and Behavioural Data
- Betting and gaming activity records, including markets wagered on, game types played, session durations and frequency of play.
- Responsible gambling tool usage, including deposit limit settings, session time alerts and self-exclusion requests.
- Platform navigation data, including pages visited, features used and time spent per section.
4.5 Technical and Device Data
- IP address and approximate geographic location derived from IP data.
- Device type, operating system, browser type and version.
- Session identifiers and cookie data as described in Clause 10.
4.6 Communications Data
- Content of support communications submitted via live chat or email, including account queries, complaints and responsible gambling requests.
- Records of marketing communications sent to the User and User opt-in or opt-out preferences.
Special Category Data: 888fb does not intentionally collect special category personal data (such as health information, religious beliefs or biometric data) except where such data is incidentally included in documents submitted for KYC. Where this occurs, such data is treated with enhanced protection and processed only to the extent necessary for verification purposes.
Clause 5
How Personal Data Is Collected
888fb collects personal data through the following channels:
- Direct Submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support or adjusting account settings.
- Automated Collection: Technical and usage data collected automatically when you access the Platform, via cookies, server logs and analytics tools.
- Third-Party Sources: Where permitted by applicable law, 888fb may receive personal data from third-party sources including KYC verification providers, fraud prevention services and payment processors, for the purpose of verifying your identity and protecting the integrity of the Platform.
- Responsible Gambling Tools: Data collected through your use of responsible gambling controls, including limit settings and self-exclusion requests, which is retained to enforce those controls effectively.
Clause 6
Data Processing Purposes
888fb processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining and administering your 888fb account, including authentication and security. |
| Identity Verification (KYC) | Verifying your identity and age in compliance with the operator's licensing obligations and anti-money laundering requirements. |
| Payment Processing | Facilitating deposits and withdrawals, recording transaction history and preventing payment fraud. |
| Service Delivery | Providing access to sports betting, live casino, slots and other Platform features in accordance with the Terms & Conditions. |
| Responsible Gambling | Implementing and enforcing deposit limits, loss limits, session controls and self-exclusion in accordance with the Responsible Gambling Policy. |
| Fraud & AML Prevention | Detecting, investigating and preventing fraudulent activity, money laundering, multi-accounting and other prohibited conduct. |
| Legal Compliance | Complying with legal obligations imposed by applicable law, regulatory requirements and licensing conditions. |
| Customer Support | Responding to account queries, complaints, technical issues and responsible gambling requests. |
| Marketing (with consent) | Sending promotional communications, bonus notifications and personalised offers where you have opted in to receive such communications. |
| Platform Improvement | Analysing aggregated usage data to improve Platform performance, user experience and content quality. |
Clause 7
Legal Basis for Processing
888fb processes personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to perform the contract with you (e.g., operating your account, processing deposits and withdrawals, providing access to the Platform's features).
- Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC, AML obligations and licensing conditions.
- Legitimate Interests: Processing conducted on the basis of 888fb's legitimate interests, including fraud prevention, platform security, responsible gambling enforcement and business analytics, where those interests are not overridden by your rights.
- Consent: Processing of personal data for optional purposes, including marketing communications, where you have provided explicit, freely given consent. You may withdraw marketing consent at any time by contacting support or updating your account preferences.
Clause 8
Data Sharing with Third Parties
888fb does not sell personal data to third parties. We may share personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:
- Payment Processors: To facilitate deposits and withdrawals, 888fb shares relevant transaction data with payment processing partners. These partners process payment data under their own privacy policies and applicable financial regulations. References to payment services familiar in Pakistan — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as contextual examples only; actual payment partners are confirmed in the live cashier and are subject to change.
- KYC and Identity Verification Providers: 888fb may use third-party identity verification services to process KYC documentation. These providers act as Data Processors under contractual agreements with 888fb.
- Fraud Prevention and AML Services: Personal and transactional data may be shared with fraud detection and anti-money laundering screening providers to protect the Platform and comply with legal obligations.
- Game Content Providers: Limited usage data may be shared with game software suppliers to facilitate game delivery and resolve technical issues.
- Legal and Regulatory Authorities: Where required by applicable law, court order or regulatory authority direction, 888fb will disclose personal data to the relevant authority. 888fb will inform the User of such a requirement to the extent legally permissible.
- Corporate Transactions: In the event of a merger, acquisition or asset sale involving the Platform, personal data held by 888fb may be transferred as part of that transaction, subject to the same privacy obligations set out in this Policy.
Data Processor Contracts: All third-party Data Processors engaged by 888fb are required to comply with data protection requirements at least equivalent to those applied by 888fb, and are prohibited from using personal data for their own purposes beyond the contracted processing activity.
Clause 9
Data Retention
888fb retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting obligations. The following indicative retention periods apply:
- Account and KYC Data: Retained for the duration of the account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements applicable to the operator's licensing jurisdiction.
- Transaction and Betting Records: Retained for a minimum of five years following each transaction, for regulatory compliance and dispute resolution purposes.
- Support Communications: Retained for up to three years following the resolution of the relevant query or complaint.
- Self-Exclusion Records: Retained for the duration of the self-exclusion period and for a minimum of five years thereafter, to prevent re-registration in breach of the exclusion.
- Marketing Consent Records: Retained for as long as the consent remains active and for a reasonable period thereafter to demonstrate compliance.
Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised, such that it can no longer be associated with an identifiable individual.
Clause 10
Cookies & Tracking Technologies
888fb uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you access the Platform. They enable the Platform to recognise your device across sessions, maintain your login state, record preferences and collect analytics data.
10.1 Types of Cookies Used
- Strictly Necessary Cookies: Required for the Platform to function, including session authentication and security. These cannot be disabled without impairing Platform functionality.
- Analytics Cookies: Used to collect aggregated information about how users navigate the Platform, including pages visited, session duration and device type. This data is used to improve Platform performance.
- Functional Cookies: Store user preferences, such as language settings and responsible gambling limit configurations.
- Marketing Cookies: Used to deliver personalised promotional content and measure the effectiveness of marketing campaigns, where you have consented to such use.
10.2 Managing Cookies
You may manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to use the Platform. Instructions for managing cookies are available in your browser's help documentation.
Clause 11
Data Security
888fb implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:
- SSL/TLS encryption for data transmitted between your device and the Platform.
- Encryption of passwords at rest using industry-standard hashing algorithms.
- Access controls limiting personal data access to authorised personnel only, on a need-to-know basis.
- Regular security assessments and vulnerability monitoring of Platform infrastructure.
- Contractual security obligations imposed on third-party Data Processors.
Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Users are responsible for maintaining the security of their own account credentials and for notifying 888fb immediately of any suspected unauthorised access.
Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 888fb will notify affected users without undue delay and will report the breach to the relevant supervisory authority where required by applicable law.
Clause 12
Your Data Rights
Subject to applicable data protection law and certain legal limitations, you hold the following rights in respect of your personal data held by 888fb:
You may request a copy of the personal data 888fb holds about you, along with information about how it is processed.
You may request correction of inaccurate or incomplete personal data held by 888fb.
You may request deletion of your personal data where it is no longer necessary for the original purpose, subject to legal retention obligations.
You may request that processing of your data be restricted in certain circumstances, such as when you contest its accuracy.
Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
You may object to processing based on legitimate interests, including direct marketing. Objection to marketing will always be honoured.
Where processing relies on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.
You have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction of the operator's license.
To exercise any of the above rights, please submit a written request to 888fb using the contact details in Clause 16. We will respond to verifiable requests within 30 days. Identity verification may be required before we process a data rights request to protect against unauthorised disclosure.
Clause 13
Minors and Age Verification
888fb is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or under the higher minimum age required by the operator's licensing jurisdiction.
Where 888fb has reason to believe that a registered user is below the minimum age threshold, the account will be suspended immediately, all real money functionality will be disabled, and the matter will be investigated. Winnings accrued by a user who was underage at the time of play may be voided.
If you believe that a minor has registered an account on 888fb or that a child may have accessed the Platform, please contact us immediately at the details provided in Clause 16 so that we can take prompt action.
Parents and guardians are encouraged to use internet filtering software to restrict minors' access to gambling platforms. Satisfying an 18+ age criterion does not, in itself, make online gambling lawful in all jurisdictions, including Pakistan.
Clause 14
Cross-Border Data Transfers
888fb may transfer personal data to countries outside of Pakistan or outside the jurisdiction in which the data was collected, including to countries in which 888fb's service infrastructure, payment processors or KYC vendors are based. Where such transfers occur, 888fb will ensure that appropriate safeguards are in place to protect personal data in accordance with applicable data protection requirements.
Appropriate safeguards may include contractual data transfer agreements based on internationally recognised standard contractual clauses, or reliance on adequacy decisions where available. Users who wish to obtain further information about cross-border transfer mechanisms applicable to their data may contact 888fb using the details in Clause 16.
Clause 15
Policy Amendments
888fb reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform features or data processing practices. Where amendments are material, 888fb will endeavour to provide reasonable advance notice to registered users through in-platform messaging or email notification.
The current version of this Policy is always accessible at https://888fb.cam/privacy-policy. The "Effective Date" and "Last Reviewed" shown at the top of this document indicate the version in force. Continued use of the Platform following the publication of an amended Policy constitutes acceptance of the revised terms.
Clause 16
Contact Us
For all data protection queries, privacy rights requests, consent withdrawal, data breach notifications or complaints regarding this Privacy Policy, please contact the 888fb privacy and support team through the following channels:
When submitting a data rights request, please state clearly the nature of your request, provide your registered email address and, where applicable, the account username associated with the data in question. Identity verification will be required before personal data is disclosed or deleted.