8eff Privacy Policy

1Who We Are and How to Reach Us

This Privacy Policy is issued by 8eff (" the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://8eff.org and all associated mobile interfaces and subdomains (collectively, "the Platform").

8eff operates as an internationally licensed gambling platform. We are the data controller in respect of all personal data collected through the Platform. If you have any questions about this Privacy Policy or about how your personal data is handled, you can contact our Data Protection team directly at [email protected].

2Categories of Personal Data We Collect

8eff collects personal data across several categories depending on how you interact with the Platform. The table below sets out the main categories of data we collect and examples of the specific data points within each category.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes. Where identity verification requires a liveness check, the resulting biometric comparison data is processed solely for that purpose and is not retained beyond the completion of the verification process.

3How We Collect Your Personal Data

8eff collects personal data through the following channels and mechanisms:

• Direct interactions — Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated technologies — Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and similar tracking technologies. See Section 7 for details on cookies.
• Third-party payment providers — Transaction confirmation data received from payment processors such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network nodes when you initiate a financial transaction.
• Identity verification partners — Results of identity and document verification checks conducted by our approved third-party KYC service providers.
• Fraud prevention services — Risk signals and fraud indicators received from third-party fraud detection and anti-money-laundering screening services.

4Legal Basis for Processing Your Data

8eff processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity — Processing required to register your account, provide gaming services, process payments, and manage your account relationship with 8eff.
• Legal obligation — Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, and responsible gambling mandates from our licensing authority.
• Legitimate interests — Processing carried out for 8eff's legitimate business interests, including fraud prevention, security monitoring, Platform improvement, and responsible gambling monitoring, where such interests are not overridden by your rights and interests.
• Consent — Processing based on your freely given, specific, and informed consent, primarily in the context of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5How We Use Your Personal Data

The personal data 8eff holds about you is used for clearly defined purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. Our primary uses are as follows:

• To create, verify, and manage your 8eff account throughout its active lifecycle.
• To process deposits and withdrawals via your selected PKR payment methods, including JazzCash, EasyPaisa, and bank transfers.
• To verify your identity and age in compliance with our licensing obligations, including confirming that you are aged 21 or above.
• To detect, investigate, and prevent fraud, money laundering, underage gambling, and other prohibited activities on the Platform.
• To monitor your betting and gaming patterns to fulfil our responsible gambling obligations, including identifying signs of problem gambling behaviour and triggering interventions where appropriate.
• To provide customer support, resolve complaints, and respond to your queries in a timely manner.
• To send you service-related communications about your account, including security alerts, transaction confirmations, and policy updates.
• To send you promotional communications and personalised offers where you have opted in to receive marketing from 8eff.
• To analyse Platform usage patterns and improve the quality, performance, and features of the 8eff gaming experience.
• To comply with our obligations under applicable gambling regulations, tax laws, and financial crime prevention legislation.

6Sharing Your Personal Data

8eff does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients where necessary and on a strictly limited basis:

• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors, solely to facilitate your requested financial transactions.
• Identity verification providers — Third-party KYC and document verification services engaged to fulfil our regulatory obligations.
• Fraud and AML screening services — Providers of fraud detection, sanctions screening, and anti-money-laundering compliance tools.
• Cloud and IT infrastructure providers — Hosting, database, and technical infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities — Where required by law, court order, or regulatory direction, including our licensing authority, financial intelligence units, and law enforcement agencies.
• Professional advisors — Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations.

All third-party service providers who receive personal data from 8eff are required to process such data only for the specified purpose and in accordance with our instructions. They are contractually prohibited from using your data for their own independent purposes.

7Cookies and Tracking Technologies

The 8eff Platform uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences, to maintain session security, and to analyse how the Platform is used. The following categories of cookies may be in use:

• Strictly necessary cookies — Essential for the Platform to operate. These cannot be disabled without affecting core functionality such as login sessions, game loading, and cashier operations.
• Functional cookies — Remember your preferences such as language settings, display options, and responsible gambling settings you have applied to your account.
• Analytics cookies — Collect aggregated and anonymised information about how players use the Platform, helping us identify performance issues and improve the user experience.
• Security cookies — Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts on the Platform.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the performance or availability of some Platform features. 8eff does not use third-party advertising cookies or cross-site tracking technologies for the purposes of serving external advertisements.

8Data Security Measures

8eff implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures in place include:

• TLS 1.2+ encryption for all data transmitted between your device and the 8eff Platform.
• AES-256 encryption for personal and financial data stored on our servers.
• Multi-factor authentication options for player accounts and mandatory MFA for all administrative system access.
• Role-based access controls ensuring that staff can access only the data necessary for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous monitoring of systems for anomalous access patterns and potential security incidents.
• Formal incident response procedures with defined timelines for notification in the event of a data breach affecting player rights.

9Data Retention Periods

8eff retains personal data only for as long as is necessary for the purpose for which it was collected, or as required to comply with our legal and regulatory obligations. The following general retention periods apply:

Once a retention period has expired, data is securely deleted from our active systems or anonymised in a manner that prevents re-identification. Anonymised or aggregated data may be retained for statistical and analytical purposes without time limit.

10Your Data Protection Rights

As an 8eff user, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with your request. We will respond within 30 days of receipt.

• Right of access — You may request a copy of the personal data 8eff holds about you, along with information about how it is used.
• Right to rectification — If any data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure — You may request that we delete your personal data where it is no longer necessary for its original purpose, subject to our overriding legal obligations to retain certain data.
• Right to restrict processing — You may request that we suspend processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability — You may request a copy of data you have provided to us in a structured, commonly used, machine-readable format.
• Right to object — You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11Children and Minors

The 8eff Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. Our registration and KYC processes include age verification steps specifically designed to prevent underage access.

If we become aware that a minor has successfully registered an account and provided personal data, we will immediately suspend that account, delete the associated personal data as quickly as our legal obligations permit, and refund any deposits held in the account. If you believe a minor may have registered on the Platform, please contact us immediately at [email protected].

Parents and guardians in Pakistan who are concerned about a young person's access to gambling platforms are encouraged to use parental control software and to discuss responsible internet use with their children.

12International Data Transfers

8eff operates with infrastructure and service providers that may be located in multiple jurisdictions. Where your personal data is transferred to a country outside of Pakistan, 8eff ensures that appropriate safeguards are in place to protect that data to a standard equivalent to what is applied within Pakistan.

Safeguards for international transfers may include contractual data processing agreements incorporating standard data protection clauses, transfers to jurisdictions that maintain adequacy decisions from recognised data protection authorities, or other legally recognised transfer mechanisms. If you would like further information about the specific safeguards applied to transfers of your data, please contact us at [email protected].

13Updates to This Privacy Policy

8eff may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated whenever a revision is made.

Where changes are material — meaning they significantly affect your rights or how your data is used — we will notify you directly via your registered email address or via a prominent notice on the Platform before the changes take effect. Your continued use of the Platform following notification of material changes constitutes your acknowledgement of the revised Policy.

We recommend reviewing this Privacy Policy periodically so that you remain informed about how your personal data is being protected and used.

14Contact Us and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or how 8eff handles your personal data, please contact our Data Protection team using the details below. We are committed to handling all privacy-related enquiries promptly and transparently.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in the jurisdiction applicable to your circumstances. Our compliance team can provide further guidance on available escalation routes upon request.