8f9 Privacy Policy

1. Who We Are

8f9 operates the online gaming and sports betting platform accessible at 8f9.app ("Platform"). References to "8f9", "we", "us", or "our" in this Privacy Policy refer to the operator of the Platform. We are the data controller in respect of personal data collected through the Platform.

This Policy applies to all users of the Platform, including visitors who browse without registering and registered account holders who deposit and play. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

The Platform is designed for and marketed to players in Pakistan. All data processing described in this Policy is conducted in the English language. For questions, our support team is reachable at [email protected] (plain text – not a clickable link).

2. Data We Collect

8f9 collects personal data in the following categories, depending on how you interact with the Platform:

8f9 does not intentionally collect sensitive personal data beyond what is necessary for identity verification (CNIC) and responsible gaming compliance. We do not collect biometric data beyond the selfie photograph required for KYC document matching.

3. How We Use Your Data

8f9 uses your personal data only for the purposes described below. We do not sell your personal data to third parties for their own marketing purposes.

• Account Management: To create, maintain, and secure your 8f9 account, including authentication via mobile number, OTP, and two-factor authentication.
• Service Delivery: To provide the gaming, betting, live casino, and wallet services you have requested, including processing deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah.
• Identity Verification & KYC: To verify your identity, age (18+), and source of funds as required by applicable anti-money laundering and responsible gaming obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited conduct under our Terms & Conditions.
• Responsible Gaming: To monitor gaming behaviour patterns, apply deposit/loss limits, process self-exclusion requests, and fulfil our duty of care obligations to players.
• Customer Support: To respond to enquiries, complaints, and account assistance requests submitted via live chat or email.
• Legal Compliance: To comply with applicable laws, regulations, licensing conditions, and lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve Platform performance. This analysis uses pseudonymised or anonymised data where possible.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about 8f9 services – but only where you have consented to receive such communications. You may withdraw consent at any time from Account Settings → Notifications.

4. Legal Basis for Processing

8f9 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to deliver the services set out in our Terms & Conditions, including account management, transaction processing, and KYC verification.
• Legal Obligation: Processing necessary to comply with applicable anti-money laundering laws, licensing conditions, age verification requirements, and lawful regulatory demands.
• Legitimate Interests: Processing for fraud prevention, security monitoring, and Platform improvement where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit consent. Consent is freely given and may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

5. KYC & Identity Verification

8f9 is required to verify the identity of all players before processing their first withdrawal. This process – Know Your Customer (KYC) – involves the submission of:

• A clear photograph or scan of your National Identity Card (CNIC)
• A selfie photograph taken at the time of submission
• Proof of address (utility bill, bank statement) if required by our compliance team

KYC documents are reviewed by 8f9's compliance team and, where applicable, by third-party identity verification providers who are bound by data processing agreements. KYC documents are stored securely and retained for the period required by applicable law and licensing conditions.

8f9 uses KYC data exclusively for identity verification, age confirmation (18+), and anti-money laundering purposes. KYC documents are not used for marketing and are not shared with third parties except as required by law or as necessary to perform the verification service.

You have the right to request a copy of your KYC data held by 8f9. See Section 10 for details on exercising your data rights.

6. Cookies & Tracking Technologies

8f9 uses cookies and similar technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the Platform to function, including session authentication tokens, security cookies, and load balancing. These cannot be disabled without preventing Platform use.
• Functional Cookies: Remember your preferences, such as language settings, display preferences, and responsible gaming notification dismissals. Disabling these may reduce Platform functionality.
• Analytics Cookies: Collect pseudonymised data about how visitors use the Platform (pages visited, session duration, error occurrences) to help us improve performance. Used with your consent.
• Marketing Cookies: Track your visits across the Platform to enable relevant promotional offers to be displayed. Used only with your consent.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using the Platform. For analytics and marketing cookies, consent can be managed from the cookie preference panel available on your first visit to 8f9.app.

7. Data Sharing & Third Parties

8f9 does not sell your personal data. We share your data only in the following circumstances:

• Payment Processors: Transaction data is shared with JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah as necessary to process your deposits and withdrawals. Each processor is subject to their own privacy policies.
• KYC & Compliance Providers: Identity documents may be shared with third-party identity verification services under contractual data processing agreements, solely for the purpose of verifying your identity and age.
• Game Providers: Your account identifier (not your personal data) is shared with game software providers to enable gameplay and resolve disputes. Game providers operate under certified and audited technical environments.
• Fraud & Security Services: Technical data (IP address, device fingerprint) may be shared with fraud detection services to protect the Platform and its users.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulators, or courts where required by applicable law or valid legal process. We will attempt to notify you of such requests where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties who process personal data on behalf of 8f9 are required to handle that data in accordance with applicable data protection principles and are bound by data processing agreements.

8. Data Retention

8f9 retains your personal data only for as long as is necessary for the purposes set out in this Policy or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or the date of your last transaction, whichever is later, as required by applicable compliance frameworks.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction.
• Customer Support Records: Retained for three (3) years from the date of the last communication, or longer if the matter is subject to ongoing dispute or legal proceedings.
• Technical & Analytics Data: Aggregated and pseudonymised analytics data may be retained indefinitely. Individual-level technical logs are retained for up to twelve (12) months.
• Marketing Consent Records: Retained for the duration of your marketing consent and for a reasonable period thereafter to demonstrate compliance with consent obligations.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of certain data as described in Section 10, subject to any overriding legal retention obligations.

9. Data Security

8f9 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security practices include:

• HTTPS encryption across all Platform pages and API endpoints;
• Hashed and salted storage of passwords – we never store passwords in plaintext;
• Two-factor authentication (2FA) available to all account holders;
• Access controls restricting internal staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Encrypted storage of KYC documents with access logging;
• Active monitoring for suspicious login activity and automated lockout after failed authentication attempts.

No data transmission over the internet or storage system is entirely immune to security risks. In the event of a data breach that is likely to result in risk to your rights and freedoms, 8f9 will notify affected users promptly and take appropriate remedial action.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 8f9:

• Right of Access: You may request a copy of the personal data 8f9 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to any overriding legal retention obligations (e.g., anti-money laundering record-keeping requirements).
• Right to Restrict Processing: You may request that we temporarily restrict processing of your personal data while a complaint or accuracy dispute is being resolved.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to us, where processing is based on consent or contractual necessity.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

To exercise any of these rights, please contact us at [email protected] (not a clickable link). We will respond within 30 days of receiving your request. We may require identity verification before actioning a data rights request.

11. International Data Transfers

8f9 may transfer your personal data to third-party service providers located outside of Pakistan, including but not limited to cloud hosting providers, KYC verification services, and game software platforms. Where such transfers occur, 8f9 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses requiring recipients to apply data protection standards equivalent to those described in this Policy.

By using the Platform, you acknowledge that your personal data may be transferred, stored, and processed in jurisdictions outside Pakistan. Regardless of where your data is processed, 8f9 applies the privacy standards described in this Policy.

12. Children

The 8f9 Platform is strictly for individuals aged 18 and above. 8f9 does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered on the 8f9 Platform or that we hold personal data relating to a minor, please contact us immediately at [email protected] (not a clickable link).

13. Changes to This Privacy Policy

8f9 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material, we will use reasonable efforts to notify registered users via the Platform or by SMS to the registered mobile number.

We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement of the changes. If you do not agree with any changes, you may close your account in accordance with the Terms & Conditions.

14. Contact Us

For any privacy-related queries, data rights requests, or concerns about how 8f9 handles your personal data, please contact us through the following channels:

• Email: [email protected] (plain text – not a clickable link)
• Live Chat: Available 24/7 within the Platform via the Support widget
• Response Time: Data rights requests are responded to within 30 days. General enquiries within 24–48 hours.

Please include your registered mobile number and a description of your request when contacting us. We may require identity verification before actioning a data rights request to protect your account security.