c8888 Privacy
Policy

c8888 operates the online gaming platform accessible at c8888.asia and is committed to protecting the privacy and personal data of all users who interact with the platform. This Privacy Policy has been prepared in accordance with c8888's obligations under its international gaming license and applicable data protection principles.

This Policy applies to all users of the c8888 platform, including individuals who browse the site without registering, registered account holders, and users who contact c8888 support. It covers all personal data collected through the c8888 website, mobile interface, live chat system, and payment processing flows.

c8888 does not sell, rent, or lease personal data to third-party marketers or advertising networks. Data is processed solely for the purposes described in this Policy and shared only with the limited categories of third parties identified in Section 6. If you have questions about how c8888 handles your data, please refer to Section 14 for contact information.

c8888 collects the minimum personal data necessary to operate the platform, comply with regulatory requirements, and deliver a functional, personalised experience. The categories of personal data collected include the following:

c8888 does not collect sensitive personal data such as biometric data, health records, religious beliefs, or political opinions. The collection of CNIC information and identity documents is limited to the purposes of age verification, anti-money-laundering compliance, and withdrawal processing as required by c8888's gaming license obligations.

c8888 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you actively provide when registering a c8888 account, completing identity verification, making deposits, requesting withdrawals, contacting live chat support, or submitting feedback.
• Automated Technical Collection: Data collected automatically when you access or use the c8888 platform, including IP address, session logs, page visit data, click-stream data, and device fingerprint information collected via standard web server logging and analytics tools.
• Payment Processors: When you initiate a JazzCash, EasyPaisa, bank transfer, or USDT transaction, c8888's payment processing partners transmit confirmation and transaction reference data to c8888's systems for reconciliation and fraud detection purposes.
• Game Providers: c8888's certified game providers (Evolution Gaming, Pragmatic Play, PG Soft, and others) transmit game outcome, stake, and session data to c8888's back-office systems to update account balances and maintain game history records.
• Cookies and Similar Technologies: As described in Section 8, c8888 uses session cookies and limited functional cookies to maintain your login state and personalise your experience. c8888 does not use third-party advertising cookies.
• Identity Verification Partners: For KYC document verification, c8888 may use third-party identity verification services that process document images and return verification results. These partners are bound by data processing agreements with c8888.

c8888 processes personal data for the following specific, legitimate purposes:

• Account Management: To create and maintain your c8888 account, authenticate your identity on login, manage your Balance, and provide access to all platform features.
• Age and Identity Verification: To confirm that all registered users are aged 21 or above, in compliance with c8888's gaming license obligations and responsible gaming commitments.
• Payment Processing: To facilitate deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to process withdrawal requests to the correct verified payment method.
• Anti-Money Laundering (AML) Compliance: To monitor transaction patterns, verify source of funds where required, and report suspicious activity to regulatory authorities as mandated by c8888's international gaming license conditions.
• Fraud Prevention and Security: To detect unauthorised account access, identify fraudulent deposit or withdrawal patterns, prevent bonus abuse, and protect the integrity of the c8888 platform.
• Responsible Gaming: To implement and enforce deposit limits, loss limits, session controls, cooling-off periods, and self-exclusion requests set by users, and to monitor gaming patterns for signs of problematic behaviour in accordance with c8888's responsible gaming obligations.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the c8888 platform's performance, game lobby structure, payment flow usability, and mobile experience.
• Customer Support: To provide effective assistance via live chat and email, to access account information needed to resolve queries, and to maintain support interaction records for quality assurance.
• Legal Compliance: To comply with obligations under c8888's gaming license, applicable financial regulations, and any lawful requests from regulatory authorities or law enforcement agencies.

c8888 processes personal data on the following legal bases as recognised under applicable data protection principles:

• Contractual Necessity: Processing required to provide the services you have contracted for by registering a c8888 account, including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with c8888's obligations under its international gaming license, including age verification, KYC, AML monitoring, and regulatory reporting.
• Legitimate Interest: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics that c8888 has assessed as not overriding users' privacy rights.
• Consent: Where c8888 seeks to use your data for purposes beyond those listed above — for example, for direct marketing communications — c8888 will request your explicit consent separately. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

c8888 shares personal data only with the limited categories of third parties described below. All third-party data recipients are subject to contractual obligations requiring them to use the data only for the specified purpose and to maintain appropriate security standards:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network intermediaries receive the transaction data necessary to process deposits and withdrawals. These processors are regulated financial institutions with their own data protection obligations.
• Game Providers: Evolution Gaming, Pragmatic Play, PG Soft, Hacksaw Gaming, Push Gaming, and other certified game suppliers receive account session tokens and game interaction data to deliver game content and return certified RNG outcomes.
• Identity Verification Services: Third-party KYC partners receive identity document images and personal details submitted during verification. These partners are contractually bound to process data solely for identity verification purposes and to delete documents upon completion.
• IT Infrastructure Providers: Cloud hosting, content delivery, and database management providers who host c8888 platform infrastructure. These providers process data only as directed by c8888 and under binding data processing agreements.
• Regulatory Authorities: c8888's gaming license authority and relevant financial intelligence units may receive data in response to lawful regulatory requests, audit requirements, or mandatory suspicious activity reports under AML obligations.
• Law Enforcement: c8888 will disclose personal data to law enforcement authorities where required by a lawful court order, warrant, or statutory obligation. c8888 will notify the affected user where legally permitted to do so.

c8888 handles payment data with heightened care given its sensitivity. The following principles apply specifically to the processing of financial and payment information:

• JazzCash and EasyPaisa mobile numbers used for transactions are stored in encrypted form in c8888's database. They are used only for the purposes of processing deposits, validating withdrawal destinations, and matching transactions to accounts.
• Full bank account numbers are stored only for the period necessary to process a pending withdrawal and are not retained beyond that period. c8888 stores the last four digits of a bank account number for audit trail purposes only.
• USDT wallet addresses are retained as part of transaction history records for AML audit trail purposes and in accordance with the data retention periods described in Section 9.
• c8888 does not store full card numbers. Where debit card payments are processed (where available), card data is handled entirely by the payment processor and never transmitted to or stored on c8888 servers.

c8888 uses a limited set of cookies and similar technologies on the platform. The types used and their purposes are as follows:

• Session Cookies (Essential): Temporary cookies that maintain your authenticated login state during an active c8888 session. These cookies expire when you close your browser and are strictly necessary for the platform to function. They cannot be disabled without losing the ability to use the platform.
• Functional Cookies: Cookies that remember your language preference, game lobby display settings, and responsible gaming tool configurations between sessions. These cookies improve your experience but are not strictly necessary.
• Analytics Cookies: c8888 uses privacy-focused, first-party analytics to understand aggregated traffic patterns, game popularity, and platform performance. These analytics do not track individual users across websites and do not build personal profiles.

c8888 does not use third-party advertising cookies, social media tracking pixels, behavioural profiling tools, or cross-site retargeting technologies. You will not be served targeted advertisements based on your c8888 activity on any other website or application.

c8888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by regulatory obligations. The retention periods applicable to each category of data are as follows:

• Account Data (Identity, Contact): Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure. This retention period is required by AML regulations and gaming license conditions.
• Transaction and Financial Data: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping requirements applicable to regulated gaming operators.
• Gaming Activity Logs: Retained for five (5) years from the date of the activity. Aggregated, anonymised versions of gaming data may be retained indefinitely for platform analytics purposes.
• Identity Verification Documents: Retained for the duration of the account relationship and for five (5) years following account closure. Where a document was submitted for a specific transaction and verification is complete, the original document is deleted and only a verification status record is retained.
• Support Communications: Live chat transcripts and support emails are retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Self-Exclusion Records: Retained indefinitely for responsible gaming purposes. A record of a self-exclusion order is never deleted, as it may be relevant to future access requests.
• Device and Technical Logs: Raw access logs are retained for ninety (90) days. Aggregated technical data is retained for up to two (2) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with c8888's data destruction procedures. Deletion requests from users are subject to the retention periods described above — where a regulatory obligation requires retention, c8888 cannot delete data prior to the expiry of that period.

c8888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Transport Encryption: All data transmitted between users and the c8888 platform is encrypted using 256-bit TLS/SSL. This applies to all pages, including the login flow, deposit and withdrawal screens, game lobby, and support chat.
• Encryption at Rest: Sensitive personal data — including identity data, financial data, and authentication credentials — is encrypted at rest in c8888's database systems using industry-standard encryption algorithms.
• Access Controls: Access to personal data within c8888's systems is restricted on a need-to-know basis. Staff members can access only the data required for their specific function. Access is authenticated and logged.
• Two-Factor Authentication: c8888 offers 2FA for all user accounts, which c8888 recommends enabling from Account Settings. Internal system access by c8888 staff requires multi-factor authentication.
• Penetration Testing: c8888's platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, as required by its gaming license.
• Incident Response: c8888 maintains a data breach response procedure. In the event of a security incident involving personal data, c8888 will notify affected users and relevant regulatory authorities within the timeframes required by applicable obligations.

As a c8888 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact c8888 support at [email protected] with the subject line "Data Rights Request" and include your registered mobile number for identity verification:

c8888 will respond to data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case c8888 will notify you of the extension and the reason within the initial thirty-day period. Requests are processed free of charge unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

If c8888 discovers or is notified that personal data has been collected from an individual under 21 years of age, the following steps will be taken immediately:

1. The account will be suspended pending investigation.
2. All personal data associated with the underage account will be deleted from c8888 systems, subject only to any mandatory record-keeping requirements under AML regulations.
3. Any deposits made will be returned to the originating payment method where technically feasible, net of any amounts wagered prior to detection.
4. Winnings generated during the period of underage use will be voided and will not be paid out.

Parents and guardians who believe their child may have accessed or registered on the c8888 platform should contact c8888 support immediately at [email protected]. c8888 will treat such reports as a priority and will act on verified reports within 24 hours.

c8888 reserves the right to update this Privacy Policy at any time to reflect changes in the platform's data processing practices, regulatory requirements, or applicable law. When a material change is made to this Policy, c8888 will notify registered users via their registered mobile number or through a notification displayed upon next login to the c8888 platform.

The updated Privacy Policy will be posted on this page with a revised "Last Updated" date. Minor changes that do not materially affect the processing of personal data may be made without specific notification, though the updated Policy will always be accessible on this page.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by c8888, please use the following contact details:

• Data Rights & Privacy Enquiries: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for prompt routing to the appropriate team.
• Live Chat Support: Available 24/7 through the c8888 Platform. For urgent data concerns — such as suspected unauthorised account access — live chat is the fastest channel, with an average response time under 2 minutes.
• Response Timeframe: General privacy enquiries are responded to within 5 business days. Formal data rights requests are processed within 30 days as described in Section 11.

c8888 is committed to resolving all privacy-related concerns in a timely and transparent manner. If you remain unsatisfied following c8888's response to your privacy concern, you may escalate the matter to the relevant supervisory authority under c8888's gaming license jurisdiction.