pa888 Privacy Policy

pa888 is an internationally licensed online casino and sports betting platform operating at pa888.bio. pa888 serves Pakistani players across all major cities — from Karachi and Lahore to Islamabad, Faisalabad, Rawalpindi, and Peshawar — providing cricket betting, PSL markets, live casino games, slots, and instant win products.

For the purposes of this Privacy Policy, pa888 acts as the data controller in respect of the personal information you provide when registering an account, making a deposit, placing a bet, contacting support, or otherwise using the pa888 Platform. As data controller, pa888 is responsible for determining why and how your personal data is processed.

If you have any questions about this Privacy Policy or how pa888 handles your data, please reach out to our support team. Contact details are provided in Section 14 of this document.

2.1 Identity & Account Data

When you register a pa888 account, we collect your full legal name, date of birth, Pakistani CNIC number or passport number, a username of your choosing, and a password that you set yourself. This information is required to create and maintain your account and to fulfil our Know Your Customer (KYC) obligations under our gaming licence.

2.2 Contact Data

We collect your email address, Pakistani mobile number (Jazz, Zong, Ufone, Telenor, or Warid), and optionally your city and province of residence. Contact data is used for account notifications, deposit and withdrawal confirmations, promotional communications (if you have opted in), and support correspondence.

2.3 Financial & Payment Data

To process deposits and withdrawals, pa888 collects references associated with your payment methods — such as your registered JazzCash or EasyPaisa mobile number, your bank account number and title (for HBL, UBL, or Meezan Bank transfers), or your USDT wallet address. pa888 does not store full debit/credit card numbers or CVV codes on its own servers.

2.4 Technical & Device Data

pa888 automatically collects certain technical information when you access the Platform, including your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), referring URL, and time zone. This data is used for security monitoring, fraud detection, and Platform optimisation — particularly important given that a large proportion of pa888's Pakistani players access the Platform via mobile browsers on low-bandwidth connections.

2.5 Usage & Behavioural Data

pa888 records your activity on the Platform, including bet placement history, game session durations, deposit and withdrawal transaction records, login timestamps, and responsible gaming tool usage. This data serves multiple purposes including account security, dispute resolution, regulatory reporting, and the personalisation of your pa888 experience.

2.6 Communications Data

Any communications you have with pa888 — via live chat, email, or any other support channel — are recorded and retained. This includes complaints, account queries, bonus enquiries, and feedback. These records allow pa888 to maintain accurate service histories and to defend against or resolve disputes where necessary.

3.1 Directly From You

The majority of personal data pa888 holds is provided directly by you during the account registration process, during KYC verification, when you make a deposit or withdrawal request, or when you contact our support team. You are always aware when you are providing personal data to pa888 because it happens through deliberate actions you take on the Platform.

3.2 Automatically Through the Platform

Technical data such as your IP address, device information, session durations, and clickstream data is collected automatically via server logs and standard web tracking technologies as you browse and interact with the pa888 Platform. This collection is passive and does not require any action on your part beyond visiting the site.

3.3 From Third-Party Verification Providers

pa888 works with licensed third-party KYC and identity verification service providers to confirm the authenticity of the documents you submit and to cross-reference data against sanctions and politically exposed persons (PEP) databases as required under our gaming licence. The data returned by these providers is used solely for compliance purposes.

3.4 From Payment Processors

When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT networks, pa888 receives transaction confirmation data from the relevant payment processor. This typically includes transaction reference numbers, amounts, timestamps, and the registered account identifier of the sending account.

pa888 processes your personal data only where a legitimate legal basis exists. The following table summarises the primary legal bases applicable to our key processing activities:

• Contractual Necessity: Processing your identity data, contact data, financial data, and usage data to fulfil the contract between you and pa888 — i.e., to provide you with a functioning betting and gaming account. Without this processing, pa888 cannot deliver its services to you.
• Legal Obligation: Processing identity data and financial data to comply with our KYC, anti-money laundering (AML), and counter-terrorist financing (CTF) obligations under our international gaming licence. This processing is not optional — it is a mandatory regulatory requirement.
• Legitimate Interests: Processing technical and behavioural data for fraud detection, security monitoring, Platform stability, and responsible gaming monitoring. pa888's legitimate interest in operating a secure, compliant Platform does not override your fundamental privacy rights.
• Consent: Processing your contact data for direct marketing communications, and placing non-essential cookies on your device. You may withdraw consent for these activities at any time without affecting the lawfulness of processing that occurred before withdrawal.

pa888 uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your account, authenticate your identity at login, and maintain your account in good standing throughout your time as a pa888 player.
• KYC and Age Verification: To verify that you are 21 years of age or older and that you are who you say you are, as required under our licensing obligations. All pa888 players must meet the 21+ age requirement before real-money activity is permitted.
• Payment Processing: To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT in a timely and accurate manner, and to maintain records of all financial transactions for audit and regulatory purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other forms of abuse on the pa888 Platform. Our security systems analyse patterns in IP addresses, device fingerprints, and betting behaviour to flag anomalous activity.
• Responsible Gaming Monitoring: To monitor your gameplay patterns for signs of problem gambling behaviour and to enforce any responsible gaming limits or self-exclusion measures that you have set on your account.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide general assistance with your pa888 account.
• Legal and Regulatory Compliance: To meet our obligations to our licensing authority, including the submission of required reports and the cooperation with any investigations conducted by authorised regulatory bodies.
• Marketing Communications (with consent): To send you information about pa888 promotions, new games, PSL betting specials, and other offers relevant to Pakistani players — but only where you have explicitly opted in to receive such communications.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the pa888 Platform, optimise performance for Pakistani mobile users on low-bandwidth connections, and develop new features that better serve our player community.

6.1 Who We Share Data With

pa888 does not sell or commercially transfer your personal data to any third party. We do, however, share specific data with trusted third-party service providers where it is necessary to deliver our services or to meet our legal obligations. These categories of recipients include:

• KYC and Identity Verification Providers: Licensed identity verification services that confirm the authenticity of your CNIC or passport and screen against sanctions and PEP lists.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT network operators, who receive only the minimum data necessary to process your specific transaction.
• Fraud Detection and Security Services: Specialist cybersecurity and fraud analytics providers who process technical and behavioural data to protect the integrity of the pa888 Platform and its player community.
• Game Content Providers: Licensed game studios such as Pragmatic Play and NetEnt, whose game engines process in-game transaction data for RNG certification and dispute resolution purposes only.
• Regulatory and Licensing Authorities: pa888's licensing authority and any government or law enforcement body that has a legitimate legal basis to request player data.

6.2 Data Processing Agreements

All third parties who process personal data on behalf of pa888 are bound by written data processing agreements that impose strict confidentiality, security, and purpose-limitation obligations. pa888 only engages third-party processors who can demonstrate adequate data protection standards.

7.1 What Are Cookies

Cookies are small text files placed on your device by the pa888 Platform when you visit. They allow the Platform to recognise your device on subsequent visits and to remember certain preferences and session information. pa888 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

7.2 Types of Cookies Used

• Strictly Necessary Cookies: These are essential for the pa888 Platform to function. They manage your login session, maintain your account security, and ensure that the Platform behaves correctly. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your preferences such as your chosen language, display settings, and responsible gaming limits, so you do not have to re-enter them on every visit.
• Analytics Cookies: These collect anonymised data about how players use the Platform — which pages are visited most, where players drop off, and how long sessions last. This data helps pa888 improve the Platform experience for Pakistani mobile users. Analytics cookies require your consent.
• Marketing Cookies: These are used to display relevant pa888 promotions and to track the effectiveness of our marketing campaigns. Marketing cookies require your explicit consent and can be withdrawn at any time via the cookie settings panel.

7.3 Managing Cookies

You can manage your cookie preferences through the cookie consent panel accessible from the pa888 Platform footer. You may also configure your browser to block or delete cookies, though doing so may impair certain Platform functions. Blocking strictly necessary cookies will prevent you from logging in to your pa888 account.

pa888 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable law or our gaming licence. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account's active status on pa888, plus a minimum of 5 years following account closure, as required under our gaming licence's AML record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction for regulatory and audit purposes.
• Support and Communications Records: Retained for 3 years from the date of the interaction, or longer where the communication relates to an unresolved dispute or legal proceeding.
• Technical and Log Data: Session logs, IP address records, and device fingerprint data are retained for up to 24 months for security and fraud prevention purposes.
• Marketing Consent Records: Retained for the duration of your marketing consent, plus 3 years after withdrawal to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, pa888 will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual.

pa888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security infrastructure includes:

• SSL/TLS 1.3 Encryption: All data in transit between your device and pa888 servers is protected by the latest transport layer security protocols. The pa888 domain maintains a valid SSL certificate at all times.
• AES-256 Encryption at Rest: Sensitive personal data stored in pa888 databases, including CNIC references, payment method identifiers, and KYC document scans, is encrypted at rest using Advanced Encryption Standard 256-bit encryption.
• Access Controls: Internal access to personal data is governed by role-based access control (RBAC). Staff members can only access the data their specific job function requires. All internal data access is logged and audited.
• Two-Factor Authentication (2FA): pa888 offers and strongly encourages 2FA for player accounts. Internal staff access to systems containing personal data requires mandatory multi-factor authentication.
• Penetration Testing: pa888's Platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: pa888 maintains a documented data breach response plan. In the event of a data breach affecting your personal data, pa888 will notify affected players and relevant regulatory authorities within the timeframe required by our licensing conditions.

As a pa888 player, you have the following rights in respect of the personal data we hold about you. pa888 is committed to honouring these rights promptly and without unnecessary friction.

• Right of Access: You have the right to request a copy of the personal data pa888 holds about you, along with information about how that data is being used. pa888 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data pa888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For routine corrections such as address updates, you can make changes directly in your pa888 account settings.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies — you may request that pa888 delete your personal data. Note that this right is not absolute: we may be required to retain certain data to comply with our legal and regulatory obligations.
• Right to Restriction: You may request that pa888 restrict the processing of your data — for example, while a correction request is being assessed, or where you have objected to processing and we are determining whether our legitimate interests override your rights.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on pa888's legitimate interests, including profiling for responsible gaming monitoring purposes, where your individual circumstances warrant such an objection.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

pa888 operates a strict 21+ age policy. The pa888 Platform is not directed at, and must not be used by, any person under the age of 21. pa888 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

All new account registrations on pa888 are subject to mandatory age verification as part of the KYC process. Where pa888 has reasonable grounds to suspect that a registered player may be under 21, the account will be suspended immediately and subjected to enhanced age verification before access is restored. Any real-money balance held in an account subsequently confirmed as belonging to an underage player will be refunded via the original deposit method and the account will be permanently closed.

If you are a parent or guardian and believe that your child has registered an account on pa888, please contact our support team immediately at [email protected]. pa888 will investigate and take appropriate action without delay.

pa888 may send you marketing communications about promotions, bonuses, new game launches, PSL betting specials, and other offers where you have provided explicit consent at the time of registration or at a later date. Marketing communications may be delivered via email or SMS to your registered Pakistani mobile number.

pa888 will never send unsolicited marketing communications to players who have not opted in. The frequency of marketing communications is managed to avoid causing nuisance, and all communications include a clearly visible and functional opt-out mechanism.

12.1 How to Opt Out

You can opt out of pa888 marketing communications at any time by:

• Clicking the "Unsubscribe" link present in the footer of any pa888 marketing email.
• Replying "STOP" to any marketing SMS received from pa888.
• Updating your communication preferences directly within your pa888 account settings under the "Notifications" section.
• Contacting pa888 support directly and requesting removal from all marketing lists.

Opting out of marketing will not affect your receipt of transactional messages, which include deposit confirmations, withdrawal notifications, account security alerts, and important platform notices. These transactional communications are sent on the basis of contractual necessity and cannot be disabled while your account remains active.

pa888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in our licensing requirements. When material changes are made to this Policy, pa888 will notify registered players via the email address associated with their account at least 14 days before the changes take effect.

The "Effective Date" shown at the top of this Privacy Policy indicates when the current version came into force. We encourage you to review this page periodically so that you remain informed about how pa888 protects your personal data. Your continued use of the pa888 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or pa888's handling of your personal data, please contact our dedicated data protection support team using the details below. We are committed to responding to all data-related enquiries within 5 business days.

When contacting pa888 about a data rights request, please include your registered email address, your pa888 username, and a clear description of your request. For identity verification purposes, pa888 may request additional confirmation before processing sensitive data access or deletion requests.