Privacy Policy – pa888 Online Casino & Betting Platform

pa888 ("the Platform," "we," "us") is committed to protecting the privacy and personal data of all users who access pa888.app or otherwise interact with our services. This Privacy Policy describes our practices in relation to the collection, storage, use, and disclosure of personal information provided by or collected from users in the course of using the pa888 platform.

This policy is incorporated by reference into the pa888 Terms & Conditions. By registering an account with pa888, you consent to the processing of your personal data as described in this policy. We encourage all Pakistani players – whether based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, or elsewhere – to read this document carefully before registering.

pa888 acts as the data controller in respect of personal data collected through the platform. As data controller, pa888 is responsible for determining the purposes and means of processing your personal data.

pa888 collects the following categories of personal data:

pa888 does not knowingly collect special category data (such as health data, political opinions, or biometric data) unless specifically required by applicable law or regulation.

pa888 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC, contacting support, or updating account settings.
• Automated collection: Technical and usage data collected automatically when you access and use the pa888 platform, including via cookies and server logs.
• Payment processors: Transaction reference data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment providers when you make a deposit or withdrawal.
• Identity verification partners: Confirmation data received from third-party identity verification services engaged by pa888 to fulfil its KYC obligations.
• Fraud and security systems: Data generated by pa888's internal security and fraud detection systems in the course of monitoring platform activity.

pa888 uses the personal data we collect for the following purposes:

• To create and manage your pa888 account and process pa888 login authentication, including OTP delivery.
• To process deposits and withdrawals via JazzCash, Easypaisa, and other supported Pakistani payment methods.
• To verify your identity and age in compliance with our KYC obligations.
• To detect, prevent, and investigate fraud, money laundering, and other prohibited activities.
• To provide customer support and resolve disputes.
• To monitor gameplay and account activity for responsible gaming purposes, including identifying players who may be experiencing gambling-related difficulties.
• To communicate service updates, security alerts, and changes to these policies to your registered contact details.
• To improve the pa888 platform based on aggregated usage analysis.
• To comply with legal and regulatory obligations applicable to pa888's operations.

pa888 does not use personal data to send unsolicited commercial marketing communications unless you have explicitly opted in to receiving such communications.

pa888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the pa888 service to you under the Terms & Conditions you accepted at registration, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, such as for optional marketing communications or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pa888 does not sell personal data. We may share personal data with the following categories of third parties, strictly as necessary and subject to appropriate safeguards:

• Payment providers: JazzCash, Easypaisa, and other payment processors receive the transaction data required to process deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers receive identity data necessary to verify your CNIC and document authenticity.
• Game software providers: Licensed game providers (such as PG Soft, Pragmatic Play, Evolution Gaming) receive the minimum data required to deliver game sessions, such as your account session token. They do not receive your full identity or financial data.
• Fraud and security partners: Anti-fraud technology providers may receive technical data for the purpose of detecting fraudulent activity.
• Legal authorities: pa888 will disclose personal data to regulators, law enforcement bodies, or courts where required to do so by applicable law or a binding legal order.

All third-party partners engaged by pa888 are required to handle personal data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

pa888 operates internationally and may process and store personal data on servers located outside Pakistan. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable in your jurisdiction, pa888 implements appropriate transfer safeguards, which may include contractual data protection clauses or equivalent measures, to ensure your data remains protected.

pa888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Specific retention periods include:

• Account data (including registration details): retained for the duration of your account and for a period of at least five (5) years following account closure, in line with standard AML record-keeping requirements.
• KYC documentation (CNIC copies, proof of payment method): retained for at least five (5) years from the date of last transaction, in compliance with applicable AML and financial regulations.
• Transaction records: retained for at least five (5) years from the date of the transaction.
• Support communications: retained for a minimum of two (2) years from the date of the communication.
• Technical and usage logs: retained for up to twelve (12) months, after which they may be anonymised or deleted.

Where pa888 is no longer legally required to retain your data and has no other legitimate purpose for doing so, it will be securely deleted or anonymised.

pa888 uses cookies and similar technologies on pa888.app. Cookies are small text files placed on your device when you visit a website. pa888 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your pa888 login state and enable core platform functionality. These cannot be disabled without rendering the platform inoperable.
• Functional cookies: Used to remember your preferences (such as language settings) to improve your experience. These are set only with your consent.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with pa888, enabling us to improve the platform. Analytics data is not linked to individual identities.

pa888 does not use third-party advertising cookies or cross-site tracking technologies that would allow external advertisers to target you based on your pa888 activity. You can manage non-essential cookies via your browser settings at any time, though disabling strictly necessary cookies may impair your ability to use the platform.

Subject to applicable law, you have the following rights in respect of your personal data held by pa888:

• Right of access: You may request a copy of the personal data pa888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where pa888 has no legal obligation or legitimate basis to retain it.
• Right to restriction: You may request that pa888 restrict the processing of your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of data you have provided to pa888 directly.
• Right to object: You may object to processing of your personal data carried out on the basis of pa888's legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact pa888 support via the in-account live chat or ticket system. We will respond to all requests within 30 days. Please note that certain rights may be limited where pa888 has a legal obligation to retain or process the relevant data.

pa888 is strictly prohibited for individuals under the age of 18. pa888 does not knowingly collect or process personal data from minors. If pa888 becomes aware that personal data has been collected from a person under 18, that data will be deleted promptly and the associated account closed. If you have reason to believe a minor has registered with pa888, please notify us immediately via support.

pa888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pa888 servers.
• Encryption of sensitive data at rest, including passwords (stored as cryptographic hashes) and financial data.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of the pa888 platform infrastructure.
• OTP-based two-factor authentication available to all account holders to protect pa888 login access.

While pa888 takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for keeping your pa888 login credentials confidential and for notifying pa888 support immediately if you suspect your account has been compromised.

pa888 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where changes are material, pa888 will notify registered users via their registered mobile number or email address with reasonable advance notice.

The current version of this Privacy Policy is always available at pa888.app/privacy-policy. The "Last Updated" date at the top of this document reflects when the policy was most recently revised. Continued use of pa888 following notification of changes constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or pa888's data processing practices, please contact the pa888 support team. Support is available 24/7 via the live chat widget or in-account ticket system available after pa888 login.

Email contact (plain text only — not a link): [email protected]

For data access or erasure requests, please raise a ticket through the in-account support system and include "Data Request" in your subject line. We aim to respond to all data-related requests within 30 days of receipt.