Privacy Policy — How 8eef Protects Your Data

At 8eef, we take your privacy seriously. This Privacy Policy sets out in clear, plain language how 8eef — Pakistan's premier licensed online casino and sports betting platform — collects, processes, stores, and protects the personal data of every individual who accesses or uses the 8eef platform at 8eef.org.

This policy applies to all users of the 8eef platform, including guests who browse without registering, registered players, and members of our exclusive Black Diamond VIP Programme. It covers all data processing activities connected to your use of the site, including account registration, deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, sports betting on PSL and international cricket markets, casino gameplay, live dealer sessions, and any communications with our support team.

By accessing the 8eef platform and accepting these terms, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.

The data controller responsible for your personal information is 8eef, the operator of the 8eef online gaming platform. 8eef is a licensed online gaming entity operating under applicable international gaming regulatory frameworks and committed to maintaining full compliance with data protection obligations relevant to our user base.

As data controller, 8eef determines the purposes and means by which your personal data is processed. We are accountable for ensuring that all data processing activities described in this policy are conducted lawfully, fairly, and transparently, and that appropriate technical and organisational security measures are in place at all times.

For any privacy-related enquiries, data subject requests, or complaints regarding how 8eef handles your personal information, please contact our dedicated data protection team using the contact details provided in Section 14 of this policy.

8eef collects only the personal data that is necessary and proportionate to the purposes described in this policy. The categories of data we collect are set out in the table below:

We do not collect or store full payment card numbers. All PKR payment processing is handled through the secure infrastructure of our approved payment partners — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — and 8eef retains only the minimum reference data required for transaction reconciliation and regulatory compliance.

8eef collects personal data through the following means:

• Direct interaction: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a VIP programme communication.
• Automated technologies: Technical data collected automatically when you access the platform, including cookies, web beacons, server logs, and session tracking tools that record your IP address, device type, browser, and navigation behaviour within the site.
• Third-party sources: Identity and fraud-check data received from KYC verification service providers, payment processors, and anti-money-laundering screening databases used by 8eef as part of our compliance obligations.
• Responsible gaming tools: Data generated when you actively configure your own responsible gaming preferences, including deposit limits and self-exclusion requests, which are recorded and maintained as part of your account profile.

8eef processes personal data for the following purposes, each of which is tied to a specific legal basis described in Section 6:

• Account management: Creating, maintaining, and securing your player account, including password recovery, login verification, and two-factor authentication support.
• Identity verification (KYC): Confirming your identity and age (21+) prior to processing withdrawals and at other compliance checkpoints, in accordance with our licensing obligations.
• Payment processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and maintaining accurate financial records for each account.
• Game and sportsbook delivery: Operating the casino games, live dealer tables, slot titles, and PSL cricket betting markets that form the core of the 8eef platform experience.
• Fraud prevention and anti-money-laundering: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and financial crime on the platform.
• Regulatory compliance: Meeting the reporting, record-keeping, and audit requirements of the gaming regulatory authority under whose licence 8eef operates.
• Responsible gaming: Monitoring gaming behaviour patterns, enforcing deposit limits and self-exclusion status, and delivering responsible gaming interventions where account activity suggests potential harm.
• Customer support: Responding to enquiries, resolving disputes, and administering the formal complaints process described in our Terms & Conditions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the platform's performance, game selection, and user experience for Pakistani players.
• VIP Programme administration: Managing tier assignments, communicating exclusive offers, and personalising the Black Diamond VIP experience through your dedicated account manager.
• Marketing communications: Sending promotional emails, bonus notifications, and platform updates — but only where you have given explicit consent and only to the contact details registered on your account.

Every personal data processing activity carried out by 8eef rests on at least one of the following lawful bases:

• Contractual necessity: Processing that is required to perform our contract with you — i.e., to operate your player account, process transactions, and deliver the gaming services you have registered for.
• Legal obligation: Processing that is required for 8eef to comply with applicable laws and regulatory requirements, including KYC verification, anti-money-laundering checks, and regulatory reporting.
• Legitimate interests: Processing that serves 8eef's legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — where those interests are not outweighed by your rights and interests.
• Consent: Processing activities that are based on your freely given, specific, and informed consent, including marketing communications and the use of non-essential cookies. You have the right to withdraw consent at any time.

8eef does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared with third parties only in the following strictly controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum transaction data necessary to process your PKR deposits and withdrawals securely.
• KYC and identity verification providers: Specialist third-party services that assist 8eef in verifying identity documents, screening against sanctions lists, and conducting PEP (Politically Exposed Person) checks as required by anti-money-laundering regulations.
• Fraud prevention and security services: Third-party platforms that assist 8eef in detecting bot activity, multi-accounting, coordinated fraud, and other security threats to the platform.
• Regulatory authorities: Gaming licensing and regulatory bodies that require access to player records, transaction data, and activity logs as part of their oversight and audit functions.
• Law enforcement: Where 8eef is under a legal obligation or court order to disclose information to law enforcement or other governmental authorities.
• IT infrastructure providers: Cloud hosting, server management, and platform maintenance providers who act as data processors under contractual obligations and are not permitted to use your data for any purpose other than providing services to 8eef.

All third parties who receive personal data from 8eef are subject to contractual data processing agreements that impose appropriate data protection obligations. 8eef does not authorise any third party to use your data for their own independent purposes.

8eef retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention guidelines apply:

• Active account data: Retained for the full duration of your account relationship with 8eef, plus a minimum post-closure retention period of five (5) years, as required by standard gaming industry regulatory and anti-money-laundering frameworks.
• KYC and identity documents: Retained for a minimum of five (5) years following the closure or termination of your account, in line with anti-money-laundering record-keeping requirements.
• Financial transaction records: PKR deposit, withdrawal, and betting transaction records are retained for five (5) years post-transaction date, or longer where required by a specific regulatory obligation or ongoing investigation.
• Support communications: Live chat transcripts and email support records are retained for three (3) years from the date of the communication.
• Marketing consent records: Retained for as long as consent remains active, plus two (2) years following withdrawal of consent, to demonstrate compliance.
• Technical and log data: Server logs and technical session data are typically retained for a rolling period of twelve (12) months, after which they are aggregated or deleted.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 8eef's internal data destruction procedures.

8eef implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 128-bit SSL/TLS encryption: All data transmitted between your device and the 8eef platform is encrypted using industry-standard SSL/TLS protocols, protecting your information in transit at all times.
• Encrypted data storage: Sensitive personal and financial data held in 8eef's databases is encrypted at rest using AES-256 encryption, ensuring it cannot be read even in the event of an unauthorised storage access.
• Two-factor authentication (2FA): All registered players are encouraged to enable 2FA on their 8eef accounts. This is available free of charge from the account security settings panel and significantly reduces the risk of unauthorised login.
• Access controls: Personal data is accessible only to 8eef staff who have a legitimate operational need for that access, based on the principle of least privilege. All staff with data access undergo regular data protection training.
• Security monitoring: 8eef operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Vendor security assessments: Third-party processors and technology partners are subject to regular security assessments before and during their engagement with 8eef.

8eef uses cookies and similar tracking technologies to operate the platform effectively, maintain your logged-in session, remember your preferences, and analyse how players interact with the site. Cookies are small text files placed on your device when you visit the platform. They do not carry personal data directly but can be used to link a session to a registered account.

The cookies used on the 8eef platform fall into the following categories:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during a gaming session and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as your chosen language, display settings, and responsible gaming tool configurations. Disabling these may reduce your experience but will not prevent access to the platform.
• Analytics cookies: Anonymised or pseudonymised data collected to help 8eef understand how players navigate the site, which pages are most visited, and where improvements can be made. This data is aggregated and not used to personally identify individual users.
• Marketing cookies: Used only where you have given explicit consent, to personalise promotional communications and display relevant bonus offers based on your account activity profile.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to access and use the 8eef platform.

As a data subject whose personal information is processed by 8eef, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our data protection team using the contact details in Section 14:

The 8eef platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect, store, or process personal data belonging to anyone under the age of 21. Age verification is a mandatory step in the registration and KYC process, and 8eef reserves the right to request proof of age at any point during the account lifecycle.

If 8eef becomes aware that personal data has been collected from an individual who is under 21, we will take immediate steps to delete that data, close the associated account, and refund any real-money balance in accordance with our legal obligations. If you believe that a minor has registered on the 8eef platform, please report this to our support team immediately via live chat or at the email address listed in Section 14.

8eef reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or platform features. When material changes are made, we will notify registered players via email and/or a prominent in-platform notification, and update the "Last Updated" date displayed at the top of this page.

We encourage all 8eef players to review this Privacy Policy periodically so that you remain informed about how we are protecting your personal data and what rights you hold. Your continued use of the 8eef platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

If a proposed change to this policy would require your consent to any new processing activity not previously disclosed, 8eef will seek that consent separately and will not proceed with the new processing until it has been obtained.

For any questions, concerns, or requests relating to this Privacy Policy or the way 8eef handles your personal data, please contact our data protection team through any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line so your message is routed to the correct team.
• Live Chat: Available 24/7 directly on the 8eef platform. Average response time is 3–5 minutes. For data subject requests, our live chat team will log your request and escalate it to the data protection team within one business day.

All written data subject requests received via email will receive an acknowledgement within 48 hours and a substantive response within 30 calendar days. If your request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.