e888 Privacy Policy – How We Protect Your Data in Pakistan

e888 ("we", "us", "our") is the operator of the online gaming and sports betting platform available at e888.wine. e888 is the data controller responsible for the personal information of all players registered on the platform, including players based in Pakistan.

This Privacy Policy applies to all personal data collected through the e888 platform, including through account registration, deposits and withdrawals, gameplay, customer support interactions, promotional participation, and your general browsing of e888.wine. It should be read together with our Terms and Conditions and our Responsible Gaming policy.

e888 collects personal information from you in three ways: information you provide directly, information generated by your use of the platform, and information received from third-party payment and identity verification services.

e888 does not collect sensitive personal data such as race, ethnicity, religion, political opinions, biometric data or health data. We collect the minimum data necessary to operate the platform, process transactions, comply with legal obligations and maintain responsible gaming standards.

e888 uses your personal data for the following purposes:

• Account management: Creating and maintaining your e888 account, verifying your identity, processing your login and managing account security.
• Payment processing: Processing deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments. Verifying that payment methods belong to the account holder.
• Platform operation: Delivering the games, betting markets and services you use. Recording bets and game results. Calculating and paying out winnings.
• Bonus and promotion delivery: Applying welcome bonuses, free spins, refer-a-friend rewards and other promotional offers to eligible accounts. Tracking wagering requirement progress.
• Customer support: Responding to your enquiries, resolving disputes and processing complaints.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, underage gambling, multiple account creation and other prohibited activities. Protecting the integrity of the platform.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying responsible gaming tools as required or requested.
• Legal compliance: Meeting our obligations under applicable anti-money laundering (AML), know-your-customer (KYC) and gaming regulations. Responding to lawful requests from regulatory authorities.
• Platform improvement: Analysing aggregated usage data to improve features, fix bugs and enhance the Pakistani player experience.
• Marketing communications: Sending promotional emails and notifications to players who have opted in. You can opt out at any time — see Section 12.

e888 processes your personal data under the following legal bases:

• Contract performance: The majority of processing — account operation, payment processing, game delivery — is necessary to perform the contract between you and e888 when you register and play.
• Legal obligation: Processing required for AML compliance, KYC verification, age verification and cooperation with lawful regulatory requests.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring and platform analytics — where these interests do not override your fundamental privacy rights.
• Consent: Marketing communications and non-essential cookies — where you have explicitly opted in. Consent can be withdrawn at any time without affecting any other processing.

All financial transactions at e888 are conducted in Pakistani Rupees (PKR). This is important from a privacy perspective because it means your transaction data stays within Pakistani financial infrastructure and is not subject to international currency conversion processing that would expose your data to additional third parties.

e888 uses the following approach to payment data security:

• Your Easypaisa and JazzCash mobile wallet numbers are processed through tokenised APIs. e888 does not store your full mobile wallet credentials — only a secure token that allows us to process withdrawals back to your verified method.
• Bank account details provided for IBFT transfers are stored in encrypted form and used only for the specific transaction they were provided for, unless you save a payment method to your account profile.
• Card payments (Visa/Mastercard) are processed through PCI-DSS compliant payment gateways. e888 does not store full card numbers on its own servers.
• All payment data is associated only with the account holder's CNIC-verified identity, ensuring that funds cannot be moved between different individuals' accounts.

e888 does not sell your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking institutions and card processors receive the minimum data necessary to complete your transaction.
• Identity verification (KYC) providers: When you submit documents for verification, they are processed by our accredited KYC partner under strict data processing agreements.
• Game software providers: Live casino and slot providers receive session data (bet amounts, game results) to operate their games. They do not receive your personal identity information.
• Fraud and security services: Anonymised or pseudonymised technical data may be shared with fraud detection services to protect the platform and all players.
• Legal and regulatory authorities: e888 will disclose personal data to regulatory bodies, law enforcement or courts where required by lawful order, warrant or legal obligation.
• Business transfers: In the event of a merger, acquisition or sale of assets, player data may be transferred to a successor entity. Players will be notified of any such transfer and their rights will be maintained.

e888 retains personal data only for as long as necessary for the purposes it was collected and to comply with legal obligations. The following general retention periods apply:

• Active account data: Retained for the lifetime of your account plus 5 years after account closure for AML and regulatory compliance purposes.
• Transaction records (deposits, withdrawals, bets): Retained for 7 years from the date of transaction in compliance with standard financial record-keeping obligations.
• KYC documents (CNIC, passport copies): Retained for 5 years from account closure or the date of verification, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Marketing preferences and consent records: Retained for the duration of your account and 2 years after account closure as proof of consent status.
• Technical/device data: Session logs retained for up to 12 months for fraud detection purposes.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with an individual player.

e888 takes the security of your personal data seriously and implements industry-standard measures to protect it from unauthorised access, disclosure, alteration or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption on all data in transit between your device and e888 servers.
• AES-256 encryption for sensitive data at rest, including payment tokens and identity documents.
• Multi-factor authentication options available on all player accounts.
• Regular independent security audits and penetration testing of the e888 platform.
• Strict internal access controls — only authorised personnel can access player data, and only to the extent necessary for their specific role.
• Comprehensive employee data protection training, with access credentials reviewed regularly.
• Real-time fraud monitoring systems that flag unusual account activity for investigation.

In the event of a data security incident that poses a risk to your personal data, e888 will notify affected players within 72 hours of becoming aware of the breach. Notification will be sent to the email address registered on your account and will include details of what happened, what data was affected and what steps e888 is taking to address it.

e888 uses cookies and similar tracking technologies on e888.wine. Cookies are small text files stored on your device that help the platform function correctly and improve your experience. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences — such as your preferred language, display settings and responsible gaming limit configurations. These improve your experience but are not essential.
• Analytics cookies: Help e888 understand how the platform is used in aggregate — which pages are visited, which features are popular, where errors occur. All analytics data is anonymised and aggregated. No individual player is tracked through analytics cookies.
• Performance cookies: Used to optimise page load speeds and platform responsiveness, particularly for mobile users on Pakistani 4G connections.

e888 does not use advertising or retargeting cookies that track your behaviour across other websites. We do not participate in cross-site advertising networks or share your browsing behaviour with advertising platforms.

As a player at e888, you have the following rights over your personal data. All requests are handled at no charge and responded to within 30 days.

To exercise any of these rights, contact the e888 data team at support@e888.wine with the subject line "Data Rights Request" and your registered email address. We will verify your identity before processing the request.

e888 strictly prohibits the registration and use of the platform by any person under the age of 18. The platform is intended solely for adults. e888 does not knowingly collect personal data from minors.

If we become aware that a registered account belongs to or has been used by a person under 18, that account will be immediately suspended, all deposits will be returned, and all gameplay and winnings will be voided. Any personal data collected from a minor will be deleted as soon as the situation is identified.

If you are a parent or guardian and believe your child has registered on e888, please contact us immediately at support@e888.wine with details of the account. We take all such reports seriously and respond immediately.

e888 may send you marketing communications — including promotional emails, SMS notifications and in-platform messages — about bonuses, new game launches, PSL and football betting specials, and other offers available at e888. We only send marketing communications to players who have opted in to receive them.

You can manage your marketing preferences at any time in the following ways:

• Log in to your e888 account, go to Settings > Communication Preferences and update your choices.
• Click the unsubscribe link at the bottom of any marketing email from e888.
• Contact e888 support via live chat or at support@e888.wine and request to be removed from all marketing lists.

Opting out of marketing does not affect transactional communications — e888 will still send you account notifications such as deposit confirmations, withdrawal receipts, KYC requests and security alerts. These are necessary for the operation of your account and cannot be disabled.

e888 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. We will always post the revised policy at e888.wine/privacy-policy with the updated "Last Updated" date at the top.

For material changes — those that significantly affect how your data is processed or your rights — e888 will notify registered players by email at least 7 days before the change takes effect. For minor clarifications or corrections, the updated policy takes effect immediately upon publication.

We encourage you to review this policy periodically. Continued use of the e888 platform after the effective date of a revision constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you may close your account by contacting support — your data will be handled in accordance with the policy in effect at the time of closure for the applicable retention period.

For all privacy-related enquiries, data rights requests and concerns, you can contact the e888 data team through the following channels:

• Email: support@e888.wine — subject line "Privacy / Data Request" — responses within 2 business days.
• Live Chat: Available 24/7 directly on the e888 platform. Identify your query as privacy-related and ask to be connected with the data team.
• FAQ: Common privacy questions are also answered on our FAQ page.

e888 takes all privacy enquiries seriously. Whether you want to access your data, update incorrect information, request deletion, understand how a specific piece of your data is used, or report a privacy concern — our team is ready to help. We aim to resolve all privacy matters promptly, fairly and in line with the commitments set out in this policy.