b888 Privacy Policy – How We Handle Your Personal Data in Pakistan

1. Who We Are

b888 is an online gaming and betting platform serving players in Pakistan. The b888 platform offers cricket betting, PSL betting, an online casino, Teen Patti, real-money Ludo games, and free live cricket scores. All transactions on b888 are conducted in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, b888 is the data controller — meaning b888 is the entity that determines why and how your personal data is processed. When you register a b888 account, make a deposit, place a bet, or interact with any part of the b888 platform, you are sharing personal data with b888 as data controller.

This Privacy Policy applies to all personal data collected through the b888 website, mobile-optimised browser interface, and any communications between b888 and registered players. It does not apply to third-party websites or services that may be linked from b888, and b888 is not responsible for the privacy practices of those third parties.

2. What Personal Data b888 Collects

b888 collects personal data in two broad categories: data you provide directly when registering or using the platform, and data generated automatically when you interact with b888's systems.

2.1 Data You Provide to b888

• Identity data: Full name, date of birth, national identity card (CNIC) number (where required for KYC verification).
• Contact data: Pakistani mobile phone number, email address.
• Financial data: Payment method details including Easypaisa or JazzCash account numbers, NayaPay or SadaPay wallet IDs, bank account details for IBFT transfers, and Visa/Mastercard card numbers (last four digits only stored; full card data is processed by the payment provider, not stored on b888 servers).
• Verification documents: Copies of CNIC or other identity documents submitted during KYC or withdrawal verification.
• Communications: Records of correspondence with b888 support via chat, email, or SMS.

2.2 Data Generated Automatically

• Usage data: Pages visited on b888, games played, bets placed, bet amounts, deposit and withdrawal history, session duration, and navigation patterns.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Location data: Approximate geographic location derived from IP address. b888 does not collect GPS-level precise location data.
• Cookie data: Session identifiers, preference cookies, and analytics identifiers. See Section 8 for full cookie details.

3. How b888 Collects Your Data

b888 collects personal data through the following channels:

• Direct input: When you complete the b888 registration form, submit KYC documents, make deposits or withdrawals, or contact support.
• Automated tracking: b888's servers automatically log technical and usage data when you access the platform, including IP addresses, page requests, and session timestamps.
• Cookies and local storage: b888 uses cookies and browser local storage to maintain session state, store preferences, and gather anonymised analytics. See Section 8 for details.
• Payment processors: When you make a transaction, b888 receives confirmation data from payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, and card networks. b888 receives transaction confirmation and reference numbers; full payment credentials are handled by the processor.
• Identity verification services: b888 may use third-party identity verification services to confirm the authenticity of documents submitted during KYC. These services return a pass/fail result to b888 and do not retain your documents beyond their own stated data retention policies.

4. Why b888 Uses Your Personal Data

b888 does not collect data for its own sake. Every category of data b888 collects serves a specific operational, legal, or safety purpose. The table below outlines the primary purposes for which your data is used at b888.

b888 uses anonymised, aggregated usage data to improve platform performance, identify popular games, and optimise the interface for Pakistani mobile users. This aggregated data cannot be used to identify any individual player and is not shared externally in identifiable form.

5. Legal Basis for Processing

b888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil b888's obligations to you as a registered player — including account management, payment processing, bet settlement, and customer support. Without this processing, b888 cannot provide its services.
• Legal obligation: Processing required to comply with applicable Pakistani law and financial regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, and platform analytics — where b888's legitimate interest in operating a safe and commercially viable platform outweighs any privacy impact, taking into account the reasonable expectations of players.
• Consent: Processing for promotional communications (marketing emails and SMS) where you have opted in. You may withdraw consent for promotional communications at any time through your account settings without affecting your ability to use the b888 platform.

6. Who b888 Shares Your Data With

b888 does not sell, rent, or trade your personal data to any third party for commercial purposes. Period. The limited sharing that does occur is either necessary to provide the b888 service, required by law, or in your direct interest.

6.1 Payment Processors

To process your deposits and withdrawals, b888 shares necessary transaction data with payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, and Visa/Mastercard payment networks. Each of these processors operates under its own privacy policy and applicable financial data protection regulations. b888 shares only the minimum data required to process each transaction.

6.2 Identity Verification Providers

Where b888 uses third-party identity verification services to process KYC documents, those service providers receive a copy of the document you submit. They are contractually bound to use that data only for the verification purpose and to delete it after processing. b888 selects KYC providers that maintain appropriate data security standards.

6.3 Fraud Prevention and Security Services

b888 uses third-party fraud detection services that receive anonymised technical data (IP addresses, device fingerprints, behavioural signals) to identify suspicious activity. These services do not receive your name, payment details, or other directly identifying information unless a specific fraud investigation requires it.

6.4 Legal and Regulatory Authorities

b888 will disclose personal data to Pakistani law enforcement, financial intelligence units, or other regulatory authorities when required to do so by law, court order, or lawful regulatory directive. In most cases, b888 will not notify you of such disclosures unless legally permitted to do so.

7. How Long b888 Retains Your Data

b888 retains personal data only for as long as necessary for the purposes it was collected, subject to any legal obligations that require longer retention.

• Active account data: Retained for the lifetime of your b888 account and for a period of five years following permanent account closure.
• Financial transaction records: Retained for a minimum of seven years following each transaction, in compliance with applicable Pakistani financial record-keeping requirements.
• KYC documents: Retained for five years from the date of verification or from account closure, whichever is later.
• Support communications: Retained for three years from the date of the last communication in a given case.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked to any individual player.

After the applicable retention period has expired, b888 will securely delete or anonymise your personal data so that it can no longer be used to identify you. Data subject to ongoing legal proceedings or regulatory investigations may be retained for the duration of those proceedings regardless of the standard retention period.

8. Cookies and Tracking Technologies

b888 uses cookies and similar browser-based technologies to operate the platform, remember your preferences, and understand how the platform is being used. Here is a breakdown of the cookies b888 uses and why.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect platform functionality. Disabling analytics and preference cookies will not affect your ability to bet, deposit, or withdraw on b888.

9. How b888 Protects Your Data

Data security is a core operational priority at b888, not an afterthought. The following measures are in place to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Encryption in transit: All data transmitted between your device and b888's servers is encrypted using 256-bit TLS (the same standard used by major Pakistani banks for online transactions).
• Encryption at rest: Sensitive personal data stored on b888's servers — including identity documents and financial records — is encrypted at rest.
• Access controls: b888 staff access to player data is restricted on a strict need-to-know basis. Customer support agents can view your account status and transaction history; they cannot access your payment credentials or KYC document images without specific authorisation.
• Two-factor authentication: b888 supports and encourages the use of two-factor authentication (OTP via SMS) on all player accounts. Players who enable 2FA significantly reduce the risk of unauthorised account access.
• Regular security audits: b888 engages third-party security specialists to conduct penetration testing and vulnerability assessments on a regular basis.
• Incident response: In the event of a confirmed data breach that affects player data, b888 will notify affected players through their registered contact details as promptly as operationally possible and will take immediate steps to contain the breach and prevent further exposure.

10. Your Rights Regarding Your Personal Data

b888 respects your rights over your personal data. As a b888 player, you have the following rights, which you can exercise by contacting b888 support:

To exercise any of these rights, contact b888 at support@b888-bangla.com. b888 will acknowledge your request within 5 business days and complete it within 30 days. For complex requests, b888 may extend the processing period by a further 30 days with prior notice.

11. Children's Privacy

b888 is strictly a platform for adults aged 18 and above. b888 does not knowingly collect personal data from anyone under the age of 18. The b888 registration process includes age verification checks specifically to prevent under-18s from creating accounts.

If b888 discovers that personal data has been collected from a person under 18, the account will be immediately closed, all deposits returned (minus any winnings, which are voided), and the personal data deleted in accordance with b888's data retention policy. If you have reason to believe that a minor has registered on b888, please contact support immediately so that the account can be investigated and closed.

12. Updates to This Privacy Policy

b888 reviews this Privacy Policy regularly and updates it when our data practices change, when relevant laws or regulations change, or when we add new features to the b888 platform that involve personal data in new ways.

When we make material changes to this Privacy Policy — changes that meaningfully affect how your data is used or your rights regarding that data — b888 will notify you via your registered email or mobile number at least 14 days before the changes take effect. A notice will also be displayed prominently on the b888 platform during that notice period.

Minor updates — such as corrections to typographical errors or clarifications that do not alter the substance of any provision — may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Continued use of the b888 platform after the effective date of any updated Privacy Policy constitutes acceptance of those updates. If you do not agree with any updates, you may request account closure in accordance with Section 8 of the b888 Terms and Conditions.