Privacy Policy – d888 Pakistan Data Protection & Your User Rights

1Who We Are — The Data Controller

d888 is the data controller for all personal information collected through its platform. This means d888 is responsible for deciding how and why your personal data is processed. For the purposes of this Privacy Policy, "d888", "we", "us" and "our" all refer to the d888 platform and its operating entity.

d888 operates as a sports betting platform specifically designed for Pakistani users. The platform covers cricket, PSL, football, esports and other sports, with all transactions conducted in Pakistani Rupees (PKR) through locally integrated payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and Visa/Mastercard.

2What Personal Data d888 Collects

d888 collects only the personal data that is necessary to operate your account and provide the services you have registered for. We do not collect data unnecessarily. The categories of data we collect are described below:

3Why d888 Collects Your Data — Lawful Purposes

d888 collects and processes personal data only for the following specific, legitimate purposes. We do not use your data for anything outside these stated purposes:

• Account creation and management: Your name, date of birth, mobile number and email are required to create and maintain your d888 account, authenticate your identity when you log in, and communicate with you about your account activity.
• Processing transactions: Deposit and withdrawal processing requires your payment method details and transaction references. This data is used to confirm payments, trace transactions in the event of a dispute, and fulfil your withdrawal requests promptly.
• Age and identity verification: d888 is legally and ethically obligated to verify that all users are at least 18 years old. CNIC details are used for this purpose, and may also be required for enhanced verification on accounts withdrawing above specified thresholds.
• Anti-money-laundering compliance: As a financial services platform, d888 is required to monitor transactions for patterns associated with money laundering or financial crime. This involves analysing deposit and withdrawal patterns against account activity data.
• Responsible gaming monitoring: d888 uses betting history and session data to identify users who may be exhibiting patterns associated with problem gambling, so that our responsible gaming team can reach out proactively where necessary.
• Platform improvement and security: Technical data including IP addresses, device types and browser information is used to detect fraudulent access, prevent account hijacking, and understand how Pakistani users interact with the d888 platform so we can improve it.
• Customer support: Communications data is retained to provide effective follow-up support and to maintain records of complaint resolutions, which protects both you and d888 in the event of a disputed matter.

d888 does not use your personal data for targeted advertising, profiling for marketing purposes, or any commercial purpose beyond operating your sports betting account on the d888 platform.

4How d888 Stores and Protects Your Data

d888 stores all user personal data on secure servers using industry-standard protection measures. The following protections are in place for Pakistani user data on the d888 platform:

• Encryption at rest and in transit: All personal data stored on d888 servers is encrypted at rest. All data transmitted between your device and d888 — including login credentials, bet placement, and payment information — is encrypted using 256-bit SSL/TLS protocols. This is the same standard used by major international banks.
• Access controls: d888 staff access to personal data is governed by role-based access control. Only staff members who require specific data to perform their role can access it. All access is logged and auditable.
• Two-factor authentication: d888 offers 2FA for all user accounts, adding a second layer of protection against unauthorised access. Staff accounts with access to user data are required to use 2FA.
• Regular security audits: d888 conducts periodic security reviews of its data storage and access systems to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident affecting Pakistani user accounts, d888 will notify affected users as soon as practicably possible with details of what occurred, what data was involved, and what steps d888 is taking in response.

5Who d888 Shares Your Data With

d888 does not sell your personal data. We share data with third parties only in the following strictly limited circumstances:

• Payment processors: When you deposit or withdraw, d888 shares the necessary transaction data with your chosen Pakistani payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT) or Visa/Mastercard. This is the minimum data required to process your specific transaction.
• Identity verification services: For accounts requiring enhanced KYC verification, d888 may use a trusted third-party identity verification service to confirm the authenticity of documents such as CNIC copies. These services are contractually bound to handle data securely and use it only for the verification purpose.
• Sports integrity authorities: If d888 detects betting patterns consistent with match fixing or sports corruption, we are obligated to report this to the relevant sports integrity body. In such cases, the minimum necessary data about the accounts and bets in question will be shared.
• Legal and regulatory requirements: d888 may be required to disclose user data in response to a valid legal order, court direction or regulatory investigation. d888 will only comply with such requests where they are properly constituted and legally binding.
• Fraud prevention: In cases of suspected financial fraud, d888 may share transaction data with Pakistani payment networks or anti-fraud services to investigate and prevent further fraudulent activity.

6Payment Data — Special Protections

Payment information is the most sensitive category of personal data that d888 handles, and it receives the highest level of protection on our platform.

• d888 does not store full mobile wallet numbers, bank account numbers, or card numbers on its servers. All payment credentials are tokenised through our secure Pakistani payment integrations — Easypaisa, JazzCash, NayaPay, SadaPay and banking partners.
• When you make a payment on d888, the sensitive financial transaction occurs directly within your mobile wallet app or banking channel. d888 receives a confirmation reference from the payment provider, not the underlying credentials.
• d888 retains transaction records — amounts, dates, reference numbers, payment method type — for audit and compliance purposes. These records do not contain account credentials and are stored encrypted.
• The "withdraw to same method" requirement that d888 applies is not only for anti-money-laundering compliance — it also protects your funds by ensuring withdrawals only go to payment channels you have previously used and verified.

7Cookies and Tracking Technologies

d888 uses cookies and similar technologies to make the platform function correctly and to understand how Pakistani users interact with it. Here is what you need to know about cookies on d888:

• Essential cookies: These are required for the d888 platform to function at all. They handle your login session, keep your bet slip intact while you browse, and ensure the cashier processes correctly. You cannot opt out of essential cookies without the platform ceasing to function.
• Functional cookies: These remember your preferences — such as your chosen language, odds format, and sports displayed on your home screen — so you do not have to reconfigure them every session. They are enabled by default but can be disabled.
• Analytics cookies: d888 uses analytics tools to understand aggregated patterns in how users navigate the platform — which pages are visited most, where users drop off during registration, how in-play betting is used during PSL matches. Analytics data is anonymised and used only for platform improvement. These cookies require your consent.
• No third-party advertising cookies: d888 does not allow third-party advertising networks to place tracking cookies on the d888 platform. You will not be retargeted with d888 advertisements across other websites based on cookies placed during your d888 session.

You can review and manage your cookie preferences through the cookie settings panel available on the d888 platform, or through your browser's built-in cookie controls. Note that disabling certain cookies may affect the functionality of the d888 betting interface.

8Your Data Rights as a Pakistani d888 User

d888 respects your rights regarding your personal data. As a registered user, you have the following rights which you can exercise at any time by contacting d888 support:

9How Long d888 Retains Your Data

d888 retains personal data only for as long as it is needed for the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following general retention periods apply:

• Active account data: All personal, transactional and betting data is retained for the duration of your d888 account being active.
• Post-closure retention: Following account closure, d888 retains transaction records, identity verification documents and key account data for a period of five years. This is required to comply with anti-money-laundering regulations and to resolve any disputes that may arise after closure.
• Customer support records: Support chat transcripts and complaint records are retained for three years following the resolution of the relevant interaction.
• Analytics data: Anonymised and aggregated analytics data may be retained indefinitely as it contains no personal identifying information.
• Self-exclusion records: If you have self-excluded from d888, a record of this is retained for the lifetime of the self-exclusion period plus an additional buffer period, to prevent accidental or attempted re-registration.

After the applicable retention period expires, d888 will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual.

10Children's Privacy — Under 18 Protection

d888 is strictly an adults-only platform. We do not knowingly collect, store or process personal data from anyone under the age of 18. Registration on d888 requires confirmation that you are 18 or older, and d888 uses CNIC verification to confirm age where required.

If d888 discovers that an account has been registered by someone under the age of 18, the account will be closed immediately, all balances forfeited, and all personal data associated with the account deleted in accordance with this Policy and d888's child protection obligations.

If you are a parent or guardian and believe your child has accessed and used d888, please contact us immediately at support@d888.run. We will investigate and take appropriate action without delay.

11Security Measures in Detail

d888 implements a comprehensive set of technical and organisational security measures to protect Pakistani user data against unauthorised access, loss, alteration or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and d888 servers — covering login, bet placement, cashier, and support chat.
• AES-256 encryption at rest for all stored personal data including identity documents and transaction records.
• Penetration testing conducted by independent security professionals on a scheduled basis to identify vulnerabilities in d888's systems before they can be exploited.
• DDoS protection to ensure the d888 platform remains accessible and secure during high-volume attack attempts, particularly during peak PSL betting periods.
• Fraud detection algorithms that monitor login behaviour, device fingerprints and transaction patterns to identify suspicious account activity in real time.
• Secure data deletion using cryptographic erasure methods when personal data reaches the end of its retention period, ensuring deleted data cannot be recovered.

Despite these measures, no internet-based platform can guarantee absolute security. d888 encourages all Pakistani users to protect their accounts by using strong, unique passwords and enabling two-factor authentication in their account settings.

12Changes to This Privacy Policy

d888 reserves the right to update this Privacy Policy at any time. When we make material changes — changes that affect how your data is collected, used or shared — we will notify you in one or more of the following ways:

• Email notification to your registered email address at least 14 days before changes take effect.
• In-app notification visible when you next log into d888 after the update.
• A prominent notice on the d888 Privacy Policy page with the effective date of changes clearly marked.

If you do not agree with a material change to this Privacy Policy, you have the right to close your d888 account and request deletion of your personal data before the change takes effect. Your continued use of d888 following the effective date of any revision constitutes acceptance of the updated Policy.

The "Last Updated" date at the top of this page reflects when this Policy was most recently revised. We recommend Pakistani users review this Policy periodically to stay informed about how d888 handles their personal data.

13Contact d888 About Privacy

If you have any questions, concerns or requests related to your personal data and how d888 handles it, please get in touch with our team through any of the following channels: