pa888 Privacy Policy

pa888 ("we", "us", "our", "the Platform") operates the website at pa888.cam and is committed to protecting and respecting your privacy. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by pa888.

This Policy applies to all users of the pa888 Platform, including visitors who have not registered an account, registered Account Holders, and any other individuals whose personal information is processed in connection with pa888's services. It applies to data collected through the Platform and through any communications between you and pa888.

pa888 primarily serves Pakistani users and operates entirely in English. While Pakistani data protection law continues to evolve — including under the Personal Data Protection Bill and related legislative developments — pa888 is committed to applying robust data protection principles consistent with internationally recognised standards. This Policy is not a substitute for legal advice, and users in Pakistan should be aware that local privacy obligations may apply to their use of online platforms.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, device identifiers, location data and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, deletion or destruction.
• "Data Controller" means pa888, which determines the purposes and means of Processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of pa888 under a contractual arrangement.
• "User" or "Data Subject" means any individual whose Personal Data is processed by pa888.
• "Cookies" means small text files placed on your device by the Platform for functionality, security or analytics purposes.
• "KYC" means Know Your Customer — identity and age verification procedures required for regulatory and AML compliance.
• "AML" means Anti-Money Laundering — legal obligations requiring the monitoring and reporting of suspicious financial activity.
• "Platform" means the pa888 website at pa888.cam, including all associated pages, features and communications channels.

pa888 may collect and process the following categories of personal data:

3.1 Identity & Account Data

• Full legal name, date of birth and gender (for age and identity verification).
• Government-issued identification document details (e.g., CNIC, passport) submitted during KYC.
• Account username and encrypted password.
• Profile photograph or selfie where required for advanced identity verification.

3.2 Contact Data

• Email address used for account registration and communications.
• Mobile phone number, where provided for account security or two-factor authentication.
• City or region of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar), where voluntarily provided or inferred from general location data.

3.3 Financial Data

• Deposit and withdrawal transaction records, including amounts in PKR or other currencies.
• Payment method reference data (not full card numbers or wallet credentials — these are handled by payment processors, not pa888 directly).
• Account balance history for AML and responsible gambling monitoring purposes.

3.4 Technical & Device Data

• IP address, device type, operating system and browser version.
• Device identifiers and mobile advertising identifiers (where applicable).
• Time zone, language preferences and general geographic region derived from network data.
• Session logs, login timestamps and platform navigation data.

3.5 Behavioural & Usage Data

• Betting and gaming activity records, including wager amounts, game types, frequency of play and session duration.
• Responsible gambling tool usage, including deposit limit settings and self-exclusion requests.
• Marketing communication interactions (email opens, link clicks) where consent has been given.

3.6 Communications Data

• Records of support interactions including live chat transcripts, email correspondence and Help Center submissions.
• Complaints, feedback and dispute correspondence.

pa888 collects personal data through the following means:

4.1 Directly From You

When you register an account, complete KYC verification, make deposits or withdrawals, contact support, update your account settings, respond to surveys or interact with any feature of the Platform that requires your input.

4.2 Automatically

Through cookies, web beacons, pixel tags and similar tracking technologies deployed on the Platform. Technical data including IP addresses, session logs and device identifiers are collected automatically as part of normal server operation and security monitoring.

4.3 From Third Parties

From identity verification and KYC service providers engaged to authenticate your identity and age. From payment processors who provide transaction confirmation and fraud-risk signals. From fraud prevention databases and sanctions screening services used for AML compliance. From analytics service providers who aggregate and anonymise behavioural data to help us understand Platform usage.

pa888 processes your personal data only where a lawful basis exists. The table below summarises the primary processing purposes and their corresponding legal bases:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing communications can be done via the unsubscribe link in any marketing email or by contacting support.

pa888 does not sell, rent or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in Section 5:

6.1 Service Providers & Data Processors

Third-party vendors engaged by pa888 under data processing agreements to deliver specific services, including: identity verification and KYC providers, payment processing companies, cloud hosting and infrastructure providers, fraud detection services, email and communication platforms, and platform analytics tools. All processors are contractually required to handle personal data in accordance with applicable data protection obligations and only for the specified purpose.

6.2 Legal & Regulatory Authorities

Competent law enforcement agencies, regulatory bodies, courts or other public authorities where pa888 is required to disclose personal data by law, court order or enforceable governmental request. pa888 will, where legally permissible, notify the User of such a disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale or corporate restructuring involving pa888, personal data may be transferred to the acquiring or successor entity. Users will be notified of any material change in data controller identity and given the opportunity to exercise relevant rights.

6.4 Affiliated Operators

Where the Platform connects users to affiliated gambling operators, limited account and verification data may be shared with those operators for the purpose of account creation and KYC compliance. Such sharing is subject to contractual data protection obligations between pa888 and the relevant operator.

pa888 operates internationally and your personal data may be transferred to, stored in or processed in countries other than Pakistan. This includes jurisdictions where some of our service providers and affiliated operators are based.

Where personal data is transferred to countries that may not provide the same level of data protection as the jurisdiction from which it was collected, pa888 implements appropriate safeguards to ensure an adequate level of protection, including contractual clauses, data processing agreements and, where relevant, compliance with any applicable data transfer frameworks.

pa888 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

8.1 Active Accounts

Personal data associated with active accounts is retained throughout the lifetime of the account and for a reasonable period thereafter to handle any residual queries, disputes or legal claims.

8.2 Closed Accounts

Following account closure, pa888 will retain certain personal data — including identity documents, transaction records, KYC documentation and AML monitoring data — for the period required by applicable financial regulation and anti-money laundering law. This period is typically a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.

8.3 Self-Excluded Users

Where a User has self-excluded, their personal data is retained for the duration of the self-exclusion period and beyond, in order to prevent re-registration and to comply with responsible gambling obligations. Self-exclusion records are not deleted at the User's request during an active exclusion period.

8.4 Marketing Data

Marketing preferences and communication records are retained until consent is withdrawn, at which point they are removed from active marketing lists. Opt-out records are retained to evidence compliance with the User's request.

pa888 uses cookies and similar technologies (including web beacons, local storage and pixel tags) on the Platform. Below is an overview of the types of cookies used and their purposes:

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Essential cookies required for security, session management and responsible gambling tools cannot be disabled without impairing platform operation.

pa888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• HTTPS/TLS encryption for all data in transit between your device and pa888 servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security assessments and vulnerability monitoring of Platform infrastructure.
• Secure password hashing — pa888 does not store plaintext passwords.
• Audit logging of access to personal data by internal staff and system processes.
• Two-factor authentication (2FA) options for Account Holders to strengthen account security.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. pa888 cannot guarantee the absolute security of your personal data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pa888 will notify affected users and, where required, relevant authorities in accordance with applicable notification obligations.

Subject to applicable law, you have the following rights in relation to your personal data held by pa888. These rights are not absolute — in some cases they may be subject to limitations based on legal obligations (such as AML retention requirements) or overriding legitimate interests.

To exercise any of the rights listed above, please contact pa888 via the support email address provided in Section 14. We will respond within a reasonable timeframe and may require identity verification before processing your request.

The pa888 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator or the applicable license jurisdiction. pa888 does not knowingly collect personal data from individuals below the minimum eligible age.

Age verification is a mandatory step in the account registration and KYC process. Where pa888 becomes aware, or has reasonable grounds to suspect, that an Account Holder is below the minimum age, the account will be immediately suspended pending age verification, and if confirmed, the account will be closed and any balance retained subject to applicable regulatory requirements.

If you believe that a minor has created an account on pa888 or provided personal data to the Platform, please contact us immediately via the details in Section 14 so that the data can be reviewed and the account addressed.

pa888 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features or data processing practices. When material changes are made, pa888 will update the "Last Reviewed" date at the top of this page and, where appropriate, notify registered Account Holders via email or a prominent on-site notice.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of and consent to the revised terms. We encourage you to review this Policy periodically to remain informed about how we protect your personal data.

Where changes materially affect how we process data that was previously collected under a different basis, we will seek fresh consent or provide a clear opt-out mechanism where applicable.

If you have any questions, concerns or requests relating to this Privacy Policy or the way pa888 handles your personal data, please contact our support team. You may also use this contact to exercise any of the data rights described in Section 11.

Our support team aims to acknowledge all privacy-related enquiries within a reasonable period. Complex data rights requests — such as subject access requests or deletion requests — may require identity verification and additional processing time.

For related legal documents, please also review our Terms & Conditions and our Responsible Gambling page.