Privacy Policy – c888 Pakistan Online Betting Platform

1Introduction

This Privacy Policy explains how c888 ("we", "us", "the Platform") collects, uses, stores and protects the personal information of members and visitors who use the c888 website at c888.info and any associated mobile applications or services (collectively "the Platform").

At c888 we understand that Pakistani players value their privacy. Sharing personal information — your name, phone number, payment details — with an online platform requires trust, and that trust is something we work to earn and maintain every day. We collect only what we genuinely need, we use it only for legitimate purposes, and we protect it with robust technical and organisational measures.

By registering an account or using any service offered through c888, you acknowledge that you have read and understood this Privacy Policy. This policy forms part of the c888 Terms and Conditions and should be read alongside them. If you have any questions about this policy or about how c888 handles your data, please contact us at support@c888.info.

2Personal Data We Collect

c888 collects personal data through different channels — when you register an account, when you make deposits or withdrawals, when you contact our support team and when you use the platform through normal browsing and gaming activity. The table below summarises the categories of data we collect.

c888 does not collect sensitive personal data such as biometric information, health records or political opinions. We also do not collect the full details of payment cards — only masked card numbers (last four digits) are stored for reference purposes.

3How We Use Your Personal Data

c888 uses the personal data it collects for the following specific purposes:

• Account management: Creating and maintaining your c888 member account, verifying your identity and age, and managing your login credentials securely.
• Payment processing: Processing deposits made via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments, and processing withdrawal requests to verified payment methods.
• Regulatory compliance: Meeting our obligations under anti-money laundering (AML) and Know Your Customer (KYC) requirements as required by the licensing authority under which c888 operates. This may include verifying the source of funds for large transactions.
• Fraud prevention and security: Detecting, investigating and preventing fraudulent activity, account sharing, bonus abuse and other prohibited conduct as detailed in the c888 Terms and Conditions.
• Customer support: Responding to your queries, resolving complaints and providing account assistance through live chat and email.
• Platform improvement: Analysing aggregated usage data to improve the performance, design and content of the c888 platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Responsible gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling and, where appropriate, initiating responsible gaming interventions such as limit suggestions or account cooling-off periods.
• Promotional communications: Sending relevant promotional offers, bonus notifications and platform updates to members who have opted in to receive them. You can opt out at any time from account settings.

4Legal Basis for Processing Your Data

c888 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a c888 member — including account management, payment processing and customer support.
• Legal obligation: Processing required to comply with applicable laws, regulatory requirements and licence conditions — including AML checks, age verification and responsible gaming obligations.
• Legitimate interests: Processing carried out in the legitimate business interests of c888, provided these interests do not override your fundamental privacy rights. This includes fraud prevention, platform security and service improvement through aggregated analytics.
• Consent: Processing that relies on your explicit consent — primarily for promotional communications. Consent can be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5Data Sharing & Third Parties

c888 does not sell your personal data to third parties. However, we do share data with specific categories of trusted third parties where necessary to operate the platform, comply with legal requirements or protect the interests of our members.

Categories of third parties with whom c888 may share your data:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners require transaction data to process deposits and withdrawals. Each provider operates under its own privacy policy and data protection obligations.
• Identity verification providers: Third-party KYC and age verification services that c888 uses to verify member identity as required by our operating licence.
• Technology providers: Cloud hosting, cybersecurity and platform infrastructure providers who process data on c888's behalf under strict data processing agreements that prohibit unauthorised use.
• Casino game suppliers: Third-party game studios and live dealer providers whose platforms are integrated into c888. These providers may collect limited technical data (such as session data) to operate their games.
• Regulatory authorities: c888's licensing authority and any relevant law enforcement or government body where we are legally required to disclose information.
• Fraud prevention agencies: Industry-shared fraud databases and anti-money laundering screening services used to detect and prevent financial crime.

All third parties with whom c888 shares personal data are bound by contractual obligations to handle that data securely, use it only for the specified purpose and comply with applicable data protection laws.

6Cookies & Tracking Technologies

c888 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit c888.info. Cookies help us remember your preferences, keep you logged in securely and understand how members use the platform so we can improve it.

c888 uses the following categories of cookies:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use c888 normally. Analytics and functional cookies can be disabled without impacting core platform access.

7How Long We Keep Your Data

c888 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law and regulatory obligations.

• Active account data: Retained for the duration of your membership with c888 plus a minimum of five years after account closure. This is required for regulatory compliance, AML record-keeping and dispute resolution purposes.
• Transaction records: Deposit, withdrawal and betting history is retained for a minimum of five years after the date of the transaction. This is a standard requirement under gaming regulatory frameworks.
• KYC verification documents: Identity documents submitted for verification are retained for five years after account closure or the last verification event, whichever is later.
• Support communications: Live chat transcripts and email correspondence are retained for three years to assist with ongoing queries, complaints and quality assurance.
• Technical and session data: IP addresses, device data and session logs are retained for up to 24 months for security and fraud prevention purposes.
• Marketing consent records: Records of marketing consent and opt-outs are retained for the duration of your account plus three years, to demonstrate compliance with consent requirements.

When data reaches the end of its retention period it is securely deleted or anonymised so that it can no longer be linked back to an individual member.

8How We Secure Your Data

c888 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information from unauthorised access, loss, alteration or disclosure.

• 256-bit SSL encryption: All data in transit between your device and c888's servers is encrypted. This ensures that your personal information, payment details and gaming activity cannot be intercepted during transmission.
• Secure data centres: Member data is stored on servers located in secure facilities with physical access controls, environmental monitoring and redundant backup systems.
• Access controls: Only authorised c888 employees with a legitimate need — such as customer support agents assisting with your account — can access member data. All internal access is logged and monitored.
• Two-factor authentication: c888 offers optional two-factor authentication (2FA) for member accounts, adding an extra layer of security beyond your password.
• Regular security audits: c888 commissions regular independent security assessments including penetration testing to identify and address vulnerabilities before they can be exploited.
• Payment security: Full card numbers are never stored on c888's servers. Payment data flows directly through our PCI-DSS compliant payment processor. Easypaisa and JazzCash transactions use their own secure authentication systems.

9Your Data Rights

As a c888 member you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@c888.info with the subject line "Data Rights Request – [Your Registered Mobile Number]". We will respond within seven business days.

10Children's Privacy

c888 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires members to confirm their age and we carry out age verification checks as part of our standard KYC process.

If we discover that a member account belongs to a person under 18, the account will be immediately closed, all funds suspended pending review, and any personal data associated with the account will be deleted after completing the necessary regulatory notifications. Parents and guardians who believe their child may have accessed c888 should contact our support team immediately at support@c888.info.

c888 supports and recommends the use of parental control software for households where devices are shared between adults and minors. Several free and paid parental control solutions are available that can restrict access to online gaming and betting platforms.

11Updates to This Privacy Policy

c888 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements or the services we offer. When we make material changes — for example, changes to what data we collect or how we share it — we will notify registered members via their registered mobile number or email address before the changes take effect.

The "Last Updated" date at the top of this page always reflects the most recent revision. We encourage you to review this policy periodically. Continued use of the c888 platform after an update constitutes acceptance of the revised Privacy Policy.

All previous versions of this Privacy Policy are available upon request from our compliance team at support@c888.info.

12Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how c888 handles your personal data, please contact us using the following channels:

• Email: support@c888.info — mark the subject line as "Privacy Query" for prompt routing to the correct team
• Live Chat: Available 24 hours a day, 7 days a week within the c888 platform

For formal data rights requests (access, rectification, erasure etc.), please include your registered mobile number in your request so that our team can locate your account quickly and verify your identity before processing.

c888 aims to respond to all privacy-related queries within seven business days. Complex requests — such as full data access exports — may take slightly longer but will always be acknowledged within 48 hours of receipt.