at888 Privacy Policy – How We Handle Your Personal Data

This Privacy Policy describes how at888 ("at888", "we", "us", "our") collects, uses, stores and protects the personal information of players who register for and use the at888 online gaming platform at at888.biz ("the Platform"). It applies to all interactions with at888, including account registration, deposits and withdrawals, gameplay, promotional participation and communications with our support team.

at888 takes data privacy seriously. Pakistani players trust us with their personal and financial information, and we regard that trust as a responsibility that shapes every decision we make about how data is handled. This Policy is written in plain language because we believe you should be able to understand exactly what happens to your information without needing to wade through impenetrable legal text.

By registering an at888 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how at888 handles your personal data, please do not use the Platform and contact us at support@at888.biz to request account closure and data deletion.

at888 operates the online gaming platform available at at888.biz. For the purposes of this Privacy Policy, at888 is the data controller – meaning we are the entity that determines the purposes and means of processing your personal data.

If you have any questions about this Privacy Policy or the way at888 handles your personal information, you can contact our dedicated privacy team at support@at888.biz. We will acknowledge your query within 2 business days and aim to provide a full response within 10 business days.

at888 collects personal data in the following categories. We only collect data that is genuinely necessary for the stated purpose – we do not collect data speculatively or build profiles beyond what is needed to operate the Platform safely and fairly.

at888 does not collect sensitive personal data beyond what is necessary for identity verification (CNIC). We do not collect biometric data beyond the selfie photograph used for KYC matching, and we do not collect financial data beyond what is needed to process your deposit or withdrawal method.

at888 uses your personal data for specific, well-defined purposes. We do not use your data in ways that are incompatible with the purposes listed below without first notifying you and, where required, obtaining your consent.

• Account management: Creating and maintaining your at888 account, authenticating your login, and communicating with you about your account status.
• Payment processing: Processing deposits to your at888 balance and withdrawals to your registered PKR payment method (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card).
• Identity verification (KYC): Verifying your identity before processing withdrawals, as required to prevent fraud and comply with anti-money-laundering obligations.
• Gaming services: Providing access to at888 games, recording game results, calculating and crediting winnings, and maintaining your account balance.
• Fraud prevention and security: Detecting and investigating suspicious account activity, duplicate account creation, bonus abuse and payment fraud. Protecting the integrity of the at888 platform for all players.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators. Implementing deposit limits, session limits and self-exclusion measures where requested or required.
• Customer support: Responding to your queries, resolving disputes and providing assistance with account issues.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use at888 and improve the platform experience. Individual player data is not used for this purpose without anonymisation.
• Marketing communications: Sending promotional emails, SMS and in-platform notifications about at888 bonuses, new games and special offers – only to players who have opted in to marketing communications. You can opt out at any time through your account settings or by contacting support.

at888 processes your personal data on the following legal bases:

• Contract performance: Most data processing by at888 is necessary to perform the contract between you and at888 – i.e. to provide the gaming service you have registered for. This includes account management, payment processing, game provision and customer support.
• Legal obligation: Identity verification (KYC), anti-money-laundering checks and certain record-keeping requirements are processing activities that at888 is legally required to carry out. This data is processed regardless of your consent preferences.
• Legitimate interests: Fraud detection, platform security monitoring and aggregated analytics are processing activities carried out under at888's legitimate interest in operating a secure, fair gaming platform. These interests are balanced against your privacy rights.
• Consent: Marketing communications (email, SMS, promotional notifications) are sent only on the basis of your explicit consent, which you provide at registration or can update at any time in your account settings.

at888 does not sell your personal data. We share your data only with the following categories of recipient, and only to the extent necessary for the stated purpose:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, banks and card networks receive the minimum data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are responsible for their handling of data shared with them.
• Identity verification services: at888 uses third-party KYC verification services to validate CNIC documents and confirm player identity. These services receive your CNIC images and photograph solely for verification purposes and are contractually prohibited from using this data for any other purpose.
• Game providers: Game software providers receive a pseudonymous player identifier and game-relevant data (bet amount, game session ID) to operate their games on the at888 platform. They do not receive your name, CNIC or payment details.
• Fraud detection and security services: at888 uses specialist fraud detection tools that receive technical data (IP address, device fingerprint, transaction patterns) to identify and prevent fraudulent activity.
• Customer support platforms: Our customer support system stores your chat and email correspondence to enable continuity of service across support interactions.
• Regulatory and law enforcement authorities: at888 will disclose personal data to regulatory bodies, law enforcement agencies or other authorities when required to do so by applicable law, court order or where disclosure is necessary to protect the rights, property or safety of at888, its players or others.

All third-party service providers with whom at888 shares personal data are required to process that data in accordance with their contractual obligations to at888, which include appropriate data security measures and restrictions on further disclosure.

at888 uses cookies – small text files stored in your browser – and similar tracking technologies to operate the Platform effectively. The following types of cookies are used on at888:

at888 does not use third-party advertising cookies or cross-site tracking cookies. You will not see at888 retargeting advertisements on other websites based on your at888 activity.

You can control non-essential cookies through your browser settings. Disabling functional or analytics cookies will not prevent you from using at888, but may affect your experience – for example, your preferences may not be remembered between sessions.

at888 retains your personal data for the periods set out below. When a retention period expires, data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

• Active account data (registration information, gaming history, transaction history): Retained for the lifetime of your active account plus 5 years following account closure, as required for audit and compliance purposes.
• Identity verification documents (CNIC images, selfie photograph): Retained for 5 years following account closure or the last verified transaction, as required by applicable anti-money-laundering regulations.
• Payment transaction records: Retained for 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Marketing opt-in records: Retained for the duration of your opt-in status plus 2 years, to demonstrate consent compliance.
• Security and fraud detection logs: Retained for 2 years, or longer if they relate to an ongoing investigation.

Where you request deletion of your account and personal data, at888 will process the request within 30 days. Data that is subject to a legal retention obligation cannot be deleted until the relevant retention period expires, but such data will be restricted from any active processing and flagged for deletion upon expiry.

at888 applies a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration or destruction. Our security measures include:

• 256-bit SSL encryption on all pages of the at888 Platform, ensuring that data transmitted between your device and at888 servers is encrypted in transit.
• Encrypted data storage for sensitive fields including passwords (stored as salted hashes, never in plain text), CNIC images and payment account details.
• Two-factor authentication (2FA) available to all at888 players and mandatory for the at888 administration team.
• Access controls limiting access to personal data to at888 staff members who require it for their specific role. All internal access to personal data is logged and audited.
• Regular security assessments including penetration testing and vulnerability scanning of the at888 platform and infrastructure.
• Incident response procedures enabling at888 to detect, contain and notify in the event of a security breach affecting personal data.

While at888 applies industry-standard security measures, no online platform can guarantee absolute security. You have a role to play in keeping your account secure – use a strong, unique password, enable 2FA, and contact at888 support immediately if you suspect your account has been accessed without your authorisation.

As an at888 player, you have the following rights in relation to your personal data. To exercise any of these rights, send a request to support@at888.biz with the subject line "Data Rights Request" from the email address registered to your at888 account.

at888 will respond to all data rights requests within 10 business days. Where a request is complex or requires further verification, we may extend this to 30 days and will notify you of the extension. at888 does not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

at888 is strictly for adults aged 18 and above. The Platform does not knowingly collect or process personal data from anyone under the age of 18. Age verification is a mandatory step in the at888 KYC process, and any account found to belong to a person under 18 will be immediately closed and all funds returned to the payment method of origin.

If you believe that a minor has registered an at888 account, please contact us immediately at support@at888.biz with as much detail as possible. at888 will investigate promptly and close any under-age account within 24 hours of receiving a credible report. We also encourage parents and guardians to use parental control software to prevent minors from accessing online gaming platforms.

The at888 Platform may reference or link to third-party services in certain contexts, such as payment provider websites or responsible gaming resource pages. at888 does not control the content or privacy practices of any third-party website, and this Privacy Policy does not apply to those websites.

We recommend reviewing the privacy policy of any third-party service you visit, particularly payment providers like Easypaisa and JazzCash, which process your PKR transactions independently of at888. at888 is not responsible for the data practices of these third parties.

at888 reviews this Privacy Policy periodically and updates it when our data practices change, when new legal requirements come into force, or when player feedback indicates that clarification is needed.

When material changes are made to this Privacy Policy – changes that affect your rights or how your data is used in a significant way – at888 will notify registered players by email and via an in-platform notification at least 7 days before the changes take effect. The "Last updated" date at the top of this page is revised with every update.

For minor clarifications and editorial corrections that do not affect your rights, at888 may update this Policy without advance notification. We encourage you to review this page periodically to remain informed of the current version.

If you have any questions, concerns or requests relating to this Privacy Policy or the way at888 handles your personal data, please get in touch through any of the following channels:

• Email (privacy enquiries): support@at888.biz – use the subject line "Privacy Policy Enquiry"
• Email (data rights requests): support@at888.biz – use the subject line "Data Rights Request"
• Live Chat: Available 24/7 on the at888 Platform
• FAQ: Visit the at888 FAQ for answers to common account and privacy questions

at888 takes privacy complaints seriously. If you contact us with a concern, we will acknowledge your message within 2 business days and aim to provide a substantive response within 10 business days. If you are not satisfied with our response, you have the right to escalate the matter through the relevant data protection authority in your jurisdiction.