888cx Privacy Policy – How We Handle Your Personal Data

1. Introduction

888cx ("we", "us", "the Platform") takes the privacy and security of its users' personal information seriously. This Privacy Policy is intended to provide a clear and transparent account of the personal data that 888cx collects from players registered in Pakistan and elsewhere, the purposes for which that data is processed, and the rights that users hold over their own information.

888cx operates as an online betting and casino platform accessible at 888cx.app. Our primary user base comprises adult players in Pakistan who use the platform to bet on cricket — including PSL fixtures — and to access live casino and slot games. Because our services involve financial transactions, identity verification and real-money wagering, the careful and lawful handling of personal data is not merely a regulatory obligation for 888cx: it is fundamental to the trust our players place in the platform.

This policy should be read alongside the 888cx Terms & Conditions and our Responsible Gaming policy, both of which contain provisions that interact with how we handle your data.

2. Personal Data We Collect

888cx collects the following categories of personal data from users:

2.1 Identity and Contact Data

• Full legal name as shown on a valid Pakistani CNIC or passport.
• Date of birth (used to verify the 18+ age requirement).
• Pakistani mobile number (used for account authentication, OTP delivery and payment method linkage with JazzCash or Easypaisa).
• Residential address (city and province level, e.g. Karachi, Lahore, Islamabad, Rawalpindi or Faisalabad).
• Email address where provided during registration.

2.2 Identity Verification Documents

• Scanned or photographed copies of CNIC (Computerised National Identity Card), passport or other government-issued identification submitted during KYC verification.
• Proof of address documents such as a utility bill or bank statement.
• Proof of payment method (e.g. screenshot of JazzCash wallet, bank account statement).

2.3 Financial and Transaction Data

• Deposit amounts, deposit timestamps and the payment method used (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, card or USDT).
• Withdrawal requests, amounts and destination payment details.
• PKR balance history and bonus wallet activity.

2.4 Betting and Gaming Data

• All bets placed — including sport, market, selection, stake in PKR, odds and outcome.
• Casino and slot game session records, including game title, session duration, wager amounts and results.
• VIP tier status, loyalty point accumulation and reward redemption history.

2.5 Technical and Usage Data

• IP address, device type, operating system and browser type at the time of each session.
• Login timestamps, session duration and feature interaction data.
• Cookies and similar tracking technologies (see Section 8).

3. How We Collect Your Data

888cx collects personal data through the following means:

• Direct registration: Information you provide when creating your 888cx account, including your mobile number, name and date of birth.
• KYC verification process: Documents you submit in response to identity verification requests.
• Platform activity: Data generated automatically as you use 888cx — placing bets, making deposits, playing casino games and navigating the interface.
• Payment processors: Transaction confirmation data received from JazzCash, Easypaisa, HBL and other payment partners when you make deposits or withdrawals.
• Cookies and analytics tools: Behavioural and technical data collected via cookies placed on your browser or mobile device during visits to 888cx.app.
• Responsible gaming self-assessments: Information you voluntarily provide when setting deposit limits, requesting cooling-off periods or applying for self-exclusion.

4. Purposes for Which We Process Your Data

888cx processes personal data for the following purposes:

• To create, verify and administer your 888cx account.
• To process deposits and withdrawals in PKR through your chosen payment method.
• To verify your age and identity in compliance with our obligations to prevent underage gambling and money laundering.
• To operate and maintain the betting, casino and slots services you use on 888cx.
• To detect, investigate and prevent fraud, collusion, money laundering and other prohibited activities.
• To deliver customer support services when you raise a query or complaint.
• To send you account-related communications including OTPs, withdrawal confirmations and security alerts.
• To administer bonuses, promotions and VIP programme benefits applicable to your account.
• To operate our responsible gaming programme, including monitoring for signs of problem gambling and enforcing self-exclusion requests.
• To improve the platform through analysis of aggregated, anonymised usage data.

5. Legal Basis for Processing

888cx processes personal data on the following legal bases:

• Contract performance: Processing is necessary to provide the betting and gaming services you have contracted for by accepting the 888cx Terms & Conditions.
• Legal obligation: Processing is required to fulfil our obligations under anti-money laundering regulations, age verification requirements, and any applicable licensing conditions.
• Legitimate interests: Processing for fraud prevention, security monitoring and platform improvement, where these interests do not override your fundamental rights.
• Consent: Where you have provided explicit consent, such as for optional marketing communications. You may withdraw consent at any time by contacting us.

6. Data Sharing and Third Parties

888cx does not sell your personal data to third parties. We may share personal data with the following categories of recipient where strictly necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah and card processors receive the minimum data necessary to execute your transactions.
• KYC and identity verification providers: Third-party services used to verify CNIC authenticity and screen against sanctions lists.
• Game content providers: JILI, PG Soft, Pragmatic Play and Evolution receive session and wagering data in connection with games hosted on their platforms and accessible through 888cx.
• Regulatory authorities: Where we are legally required to disclose data to a governmental or regulatory body.
• Law enforcement: Where disclosure is required by a valid court order or law enforcement request under applicable Pakistani law or the law of our licensing jurisdiction.
• Fraud prevention agencies: Where we have reasonable grounds to suspect fraudulent activity on your account.

All third parties with whom 888cx shares data are required to handle it in accordance with confidentiality obligations and to use it only for the purposes for which it was shared.

7. Data Retention

888cx retains personal data for as long as is necessary to fulfil the purposes described in this policy and to comply with applicable legal obligations. In practice:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering requirements.
• KYC documents are retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Betting and gaming records are retained for five (5) years.
• Technical log files are typically retained for twelve (12) months, unless required for an ongoing investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Cookies and Tracking Technologies

888cx uses cookies and similar technologies on 888cx.app to maintain session continuity, enable security features, and gather anonymised analytics data. The categories of cookies used include:

• Strictly necessary cookies: Required for the platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, display settings and previously entered information to improve your experience.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with 888cx.app to help us improve the platform. No personally identifiable information is included in analytics reports.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 888cx platform on your device.

9. Data Security

888cx implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and 888cx.app.
• Encrypted storage of sensitive fields including passwords (stored as salted hashes, never in plain text) and payment details.
• SMS-based two-factor authentication (2FA) available to all registered 888cx users and strongly recommended.
• Access controls ensuring that 888cx staff can only access personal data on a need-to-know basis.
• Regular security audits and penetration testing of the platform infrastructure.

Despite these measures, no digital platform can guarantee absolute security. If you become aware of any security vulnerability or suspect that your 888cx account has been compromised, please notify us immediately through the platform's Help section.

10. Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data that 888cx holds about you:

• Right of access: You may request a copy of the personal data 888cx holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your 888cx account.
• Right to erasure: You may request deletion of your personal data, subject to our retention obligations under anti-money laundering and other applicable laws.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances, for example where you contest its accuracy.
• Right to data portability: Where processing is based on consent or contract, you may request that we provide your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact 888cx through the platform's official support channel. We will respond to verifiable requests within thirty (30) days. Identity verification may be required before we act on a data request.

11. Children's Privacy and the 18+ Requirement

888cx is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a user account belongs to a minor, we will immediately close the account, forfeit any balances in accordance with our Terms & Conditions, and securely delete the minor's personal data to the extent permitted by our retention obligations. If you are a parent or guardian and believe that a minor has registered with 888cx, please contact us immediately through the platform's Help section.

12. Updates to This Privacy Policy

888cx may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. Material updates will be communicated to registered users via SMS to the mobile number on file or via a notification within the 888cx platform. The "Last Updated" date at the top of this page indicates when the most recent revision took effect. Continued use of 888cx following notification of any material update constitutes acceptance of the revised policy.

13. How to Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by 888cx, please contact our support team through the Help section of the platform. Our support email is displayed in the footer of this page as plain text — it is not a clickable link. We aim to acknowledge all privacy-related enquiries within two business days and to resolve them within thirty days.