Before reading the full legal policy below, these six principles summarise how 88af approaches data protection for every Pakistani player on the platform.
88af collects personal data only for specific, explicitly stated purposes — account management, identity verification, payment processing, and regulatory compliance. Your data is never used for purposes beyond those communicated to you at the point of collection.
We ask only for the data we need. 88af does not collect gratuitous personal information. If your Pakistani mobile number and a password are sufficient for account creation, that is all we ask. Additional verification documents are requested only when regulatory obligations require them.
All data transmitted between your device and the 88af platform is protected by 256-bit SSL encryption — the standard used by international banks. Stored data is encrypted at rest. Access to your personal data within 88af is restricted on a strict need-to-know basis.
88af recognises your right to access, correct, and in appropriate circumstances delete the personal data we hold about you. Data subject requests are handled within 30 days. No bureaucratic runaround — contact support at support@88af.bio to exercise your rights.
88af does not sell your personal data. Full stop. We share data with third parties only where strictly necessary for platform operations — payment processors like JazzCash and EasyPaisa, game software providers, and regulatory bodies — and only under binding data protection agreements.
88af does not hold your data indefinitely. Retention periods are defined by the purpose of collection and applicable regulatory requirements. Account data is held for the duration of the account relationship plus a defined post-closure period for legal and compliance purposes. After that, it is securely deleted.
For the purposes of this Privacy Policy, the data controller responsible for the personal data of Users of the 88af platform is the entity operating the 88af brand at 88af.bio (hereinafter referred to as "88af," "we," "us," or "our"). As data controller, 88af determines the purposes for which and the means by which personal data is processed.
88af is committed to handling your personal data in accordance with applicable international data protection principles and the terms of this Privacy Policy. If you have any questions about how 88af handles your data, or if you wish to exercise any of your data rights described in this Policy, please contact us at support@88af.bio.
88af collects personal data from Pakistani players and other Users across several categories. The specific data collected depends on the nature of your interaction with the platform. The following table provides an overview:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number (where KYC required), gender | At registration and KYC verification |
| Contact Data | Pakistani mobile number, email address | At registration |
| Financial Data | JazzCash/EasyPaisa account reference, bank account details (where applicable), transaction history, deposit and withdrawal amounts in PKR | At first deposit and each subsequent transaction |
| Technical Data | IP address, device type, operating system, browser type, session identifiers, login timestamps | Automatically on each platform visit |
| Usage Data | Games played, bet amounts, session durations, bonus usage, pages visited within the platform | Automatically during platform use |
| Communications Data | Records of live chat conversations, support emails, and any other written communications with the 88af team | When you contact support |
| Responsible Gaming Data | Deposit limits set, loss limits, self-exclusion status, cooling-off period activations | When responsible gaming tools are used |
| Verification Documents | CNIC images, proof of address documents, source of funds documentation (where requested) | During KYC verification process |
88af collects personal data through the following means:
Data you provide directly to 88af includes information submitted during account registration (mobile number, date of birth, password), information provided when completing the KYC verification process (CNIC, proof of address), information submitted when making deposits or withdrawal requests through JazzCash, EasyPaisa, HBL, or other supported Pakistani payment channels, and information you communicate to our support team via live chat or email.
When you visit or use the 88af platform, certain technical and usage data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser specifications, page visit data, game session data, and login/logout timestamps. See Section 7 (Cookies & Tracking) for full details.
In certain circumstances, 88af may receive data about you from third parties, including: identity verification service providers (where used to supplement KYC checks), payment processors such as JazzCash and EasyPaisa (transaction confirmation data), and fraud prevention and anti-money laundering screening services. Data received from these third parties is used solely in accordance with this Privacy Policy and the specific lawful basis applicable to the processing activity.
88af processes your personal data only where a recognised lawful basis exists for doing so. The primary lawful bases on which 88af relies are as follows:
88af uses the personal data collected from Pakistani players for the following specific purposes:
88af does not sell your personal data. We share your personal data only in the following limited and defined circumstances:
To process your deposits and withdrawals, 88af shares necessary financial and identity data with payment processing partners including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK. These partners process your payment data in accordance with their own privacy policies and applicable financial services regulations. 88af shares only the minimum data necessary to complete the transaction.
Some games available on the 88af platform are provided by third-party software developers whose game engines operate within the 88af environment. These providers may receive session data necessary to operate the game engine (such as bet amounts and game outcomes) but do not receive personally identifiable information about you beyond what is necessary for game operation and game integrity verification.
88af may be required to disclose personal data to regulatory authorities, gaming licensing bodies, law enforcement agencies, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of 88af, its Users, or the general public. 88af will notify affected Users of any such disclosure to the extent legally permitted.
To fulfil KYC obligations, 88af may share identity data (including CNIC information) with certified third-party identity verification service providers. These providers are bound by contractual data processing agreements that restrict their use of your data to the identity verification purpose only.
Under no circumstances does 88af sell, lease, license, or otherwise commercially transfer your personal data to any third party for their own marketing, advertising, or commercial purposes. This restriction applies without exception and regardless of any amount offered.
88af uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the 88af website. They help us remember your preferences, maintain your logged-in session, and analyse how the platform is used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens. Required for the platform to function. Cannot be disabled. | Session / up to 24 hours |
| Functional | Remembering your language preference, game display settings, and responsible gaming preferences. | Up to 12 months |
| Analytical | Aggregated, anonymised data on page visits, game usage, and navigation paths — used to improve the 88af platform. No personally identifiable data is included in analytical reports. | Up to 12 months |
| Security | Fraud detection signals, unusual login pattern detection, rate limiting for failed authentication attempts. | Session / up to 30 days |
You may configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies will prevent you from logging into your 88af Account and using core platform features. Browser cookie management instructions vary by browser type and are available in your browser's help documentation.
88af retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory obligations. The following retention schedule applies:
88af implements appropriate technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:
As a User of the 88af platform, you hold the following rights with respect to your personal data. All data right requests should be submitted to support@88af.bio and will receive a substantive response within 30 calendar days:
You have the right to request a copy of the personal data 88af holds about you. We will provide this in a structured, commonly used, machine-readable format where technically practicable.
If any personal data 88af holds about you is inaccurate or incomplete, you have the right to request its correction. For Account-level data (such as your registered mobile number), many updates can be made directly from your 88af account settings.
In certain circumstances, you may request that 88af delete your personal data. This right is subject to limitations where 88af is required by law or regulatory obligation to retain certain data — for example, AML regulations require retention of transaction records for a minimum of five years after account closure.
You may request that 88af restrict the processing of your personal data in defined circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing on grounds of legitimate interests.
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a portable format and, where technically feasible, to have it transmitted directly to another controller.
You may object to 88af's processing of your personal data where that processing is based on legitimate interests. Where you object to processing for direct marketing purposes, 88af will cease processing your data for that purpose immediately upon receipt of your objection.
Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without detriment. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
88af does not knowingly collect, process, or retain personal data from individuals under the age of 21. The platform is not directed at, designed for, or intended for use by minors.
If 88af becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor's data has been submitted to 88af, please contact us immediately at support@88af.bio so that we may investigate and take appropriate action without delay.
88af's platform infrastructure and some of its third-party service providers may process or store data in locations outside Pakistan. Where personal data is transferred internationally, 88af ensures that appropriate safeguards are in place to maintain the protection of that data to a standard at least equivalent to the protections described in this Privacy Policy. Such safeguards may include binding contractual data processing agreements with data importers, or reliance on the recognised adequacy of data protection frameworks in the recipient jurisdiction.
By using the 88af platform, Pakistani players acknowledge and consent to the international transfer of their personal data where such transfer is necessary for the provision of the Services described in this Privacy Policy and in the 88af Terms and Conditions.
88af reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the types of data we collect, the purposes for which we use it, or the third parties with whom we share it — 88af will provide advance notice to Users by displaying a prominent notice on the platform and, where appropriate, by email notification to your registered 88af Account email address.
The effective date of the current version of this Privacy Policy is displayed at the top of this page. Your continued use of the 88af platform following the effective date of any material update constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the changes, you should cease using the platform and may request Account closure by contacting support@88af.bio.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way 88af handles your personal data, please contact us using the following details. All privacy-related enquiries are handled with full confidentiality:
If you are not satisfied with 88af's response to your privacy concern, you may have the right to lodge a complaint with a relevant data protection supervisory authority in your jurisdiction. 88af encourages Pakistani players to first raise any concerns directly with us, as the majority of privacy concerns can be resolved promptly through direct communication with our support team.
This Privacy Policy was last reviewed and published on 1 January 2026.