df888 Privacy Policy

df888 is Pakistan's leading online sportsbook and casino platform, accessible at df888.ws. We are committed to protecting the personal data of every player who registers an account, makes a deposit, places a bet, or otherwise interacts with our platform. This Privacy Policy explains in clear, plain language how df888 collects, uses, stores, shares, and protects your personal data.

This Policy applies to all personal data processed by df888 in connection with the platform, including data collected through account registration, identity verification (KYC), payment transactions, betting and gaming activity, customer support interactions, and any marketing communications you have consented to receive.

By registering a df888 account or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you should cease using the platform and contact support at [email protected] to discuss closing your account.

For the purposes of applicable data protection law, df888 acts as the data controller in respect of personal data processed through the df888.ws platform. As data controller, df888 determines the purposes for which and the means by which personal data is processed.

df888 is operated under an internationally recognised gaming licence. Our data processing activities are carried out in accordance with the requirements of that licence and in compliance with the data protection obligations applicable under the laws of our operating jurisdiction.

If you have any questions about how df888 handles your personal data, or if you wish to exercise any of your data subject rights as described in Section 9 of this Policy, please contact the df888 data protection team at [email protected], marking your message clearly as a "Data Protection Enquiry".

df888 collects personal data from you in several ways: directly when you provide it to us, automatically as you use the platform, and from third parties where permitted. The categories of personal data we collect include:

3.1 Registration & Identity Data

• Full legal name as it appears on your CNIC.
• Date of birth (used to verify you are 21 years of age or older).
• National identity number (CNIC number) collected during KYC verification.
• Residential address, city (Karachi, Lahore, Islamabad, Faisalabad, or elsewhere in Pakistan), and postcode.
• Email address and mobile phone number used to register your account.
• Username and encrypted password credentials.

3.2 Financial & Payment Data

• Payment method details associated with your account, including JazzCash mobile number, EasyPaisa account reference, and bank account details for HBL, UBL, or Meezan Bank transfers.
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers, all denominated in PKR.
• Source of funds documentation provided during enhanced due diligence checks, where applicable.

3.3 Gaming & Betting Activity Data

• Bet placement records including market, odds, stake, and settlement outcome.
• Casino and slot session data including games played, wagers placed, and session duration.
• Bonus and promotion usage records.
• Responsible gaming tool settings, including any deposit limits, cooling-off periods, or self-exclusion orders applied to your account.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP at the time of login and key transactions.
• Device type, operating system, browser type, and version.
• Session identifiers, login timestamps, and platform navigation data collected via cookies and similar technologies (see Section 7).

3.5 Communications Data

• Records of any communications between you and the df888 customer support team, including live chat transcripts and email correspondence.
• Responses to any surveys, feedback forms, or promotional participation you engage in voluntarily.

df888 uses the personal data described in Section 3 for the following specific purposes:

• Account Management: To create, maintain, and administer your df888 account, authenticate your login sessions, and communicate important account notices to you.
• Identity Verification (KYC): To verify your age (21+) and identity in compliance with our licensing obligations, and to conduct ongoing anti-money laundering and fraud screening as required by law.
• Payment Processing: To process deposits and withdrawals in PKR via your chosen Approved Payment Method (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) and to maintain accurate financial records.
• Service Delivery: To provide access to the full df888 sportsbook (including PSL and international cricket markets), live casino, slot games, and any other products available on the platform.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to enforce any responsible gaming tools (deposit limits, self-exclusion) you have applied to your account.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions.
• Legal Compliance: To meet our obligations under applicable gaming licence requirements and to respond to requests from regulatory or law enforcement authorities where legally required.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the df888 platform, its user experience, and the quality of its products and services.
• Marketing Communications: To send you personalised bonus offers, promotions, and product updates — but only where you have given explicit consent and you are not subject to a self-exclusion order. You may withdraw this consent at any time.

df888 processes your personal data on the following legal grounds, depending on the purpose of the processing:

• Contractual Necessity: The majority of data processing described in this Policy is necessary for df888 to perform its contractual obligations to you under the df888 Terms and Conditions — specifically to operate your account, process payments, and provide gaming services.
• Legal Obligation: Certain processing activities — in particular KYC identity verification, anti-money laundering screening, and the maintenance of transaction records — are required by the conditions of df888's gaming licence and applicable financial regulations. df888 cannot waive these requirements.
• Legitimate Interests: df888 processes technical and device data, and conducts fraud monitoring, on the basis of its legitimate interests in maintaining a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your data protection rights.
• Consent: Where df888 processes your personal data for optional purposes — such as sending marketing communications or placing non-essential cookies — it does so only on the basis of your freely given, informed, and specific consent, which you may withdraw at any time without detriment.

df888 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose:

• Payment Processors: Your payment details are shared with the relevant Approved Payment Method provider (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) solely to process your deposit or withdrawal transaction.
• KYC & Identity Verification Partners: df888 may use third-party identity verification services to assist with CNIC verification and age confirmation. These partners are bound by strict data processing agreements.
• Game Content Providers: Where you access third-party casino games or slot titles on the df888 platform, the relevant game studio may receive your account identifier and session data necessary to deliver the game. They do not receive your full personal profile.
• Regulatory & Licensing Authorities: df888 is required under its gaming licence to provide certain player data to its licensing authority upon request, including for the purposes of audit, responsible gaming compliance, and anti-money laundering reporting.
• Law Enforcement & Legal Process: df888 will disclose personal data to law enforcement agencies, courts, or other governmental bodies where required to do so by applicable law, a valid court order, or a lawful regulatory demand.
• Fraud Prevention Networks: df888 may share data with industry-wide fraud prevention databases to identify and prevent fraudulent activity, multi-accounting, and match-fixing-related conduct across licensed operators.

df888 uses cookies and similar tracking technologies on the df888.ws platform. A cookie is a small text file placed on your device that helps the platform recognise your browser and remember certain information about your session and preferences.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the df888 platform to function and cannot be switched off. They are used to maintain your login session, remember your account state, and enable core security features. No consent is required for these cookies.
• Performance & Analytics Cookies: These cookies help df888 understand how players navigate the platform, which pages are visited most frequently, and where technical errors occur. The data collected is aggregated and anonymised. Your consent is required for these cookies.
• Functional Cookies: These cookies remember your preferences — such as your preferred language settings and responsible gaming display options — to improve your experience on return visits. Your consent is required for non-essential functional cookies.
• Marketing Cookies: Where you have consented to receive personalised promotions, df888 may use cookies to track which bonus offers and promotions you have viewed or engaged with, in order to serve you relevant content. You may withdraw consent for marketing cookies at any time.

7.2 Managing Cookies

You can control cookie preferences through the cookie consent banner displayed when you first visit the df888 platform, and subsequently through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the platform and may prevent you from accessing your account.

df888 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by our licensing obligations or applicable law. The indicative retention periods for the main data categories are as follows:

Where an account has been closed following an investigation into suspected fraud, money laundering, or breach of Terms, df888 may retain relevant personal data for a longer period as required for the purposes of that investigation and any subsequent legal proceedings.

As a data subject, you have a number of rights in relation to the personal data df888 holds about you. These rights are subject to certain limitations and exemptions under applicable law, particularly where data is retained to fulfil legal obligations. Your rights include:

• Right of Access: You have the right to request a copy of the personal data df888 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR). df888 will respond to a valid SAR within 30 days.
• Right to Rectification: If any personal data df888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many of your account details directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that df888 delete your personal data. This right does not apply where df888 is required to retain the data by law or for the purposes of legal claims. Erasure requests from accounts subject to an AML investigation will not be actioned until the investigation is concluded.
• Right to Restriction: You may request that df888 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Object: You have the right to object to processing carried out on the basis of df888's legitimate interests, including direct marketing. Where you object to marketing, df888 will stop that processing immediately.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where df888 processes your data based on your consent, you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact df888 at [email protected] with the subject line "Data Rights Request" and include your registered account username and a description of the right you wish to exercise. df888 may need to verify your identity before actioning your request.

df888 takes the security of your personal data seriously and has implemented a comprehensive range of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the df888 platform.
• AES-256 encryption for personal data and financial records stored at rest on df888 servers.
• Role-based access controls, ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular penetration testing and security audits of the df888 platform infrastructure.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised login.
• Automated monitoring systems that flag unusual login patterns or transaction behaviour for security review.

While df888 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your df888 account credentials — particularly your password — confidential and for notifying df888 immediately at [email protected] if you suspect any unauthorised access to your account.

df888 operates a strict 21+ policy. The platform is not intended for, and does not knowingly collect personal data from, any individual under the age of 21. Age verification is a mandatory step in the df888 account registration and KYC process, and accounts found to be held by individuals under 21 will be closed immediately and any balance held will be refunded to the payment method used for deposit, following verification.

If you have reason to believe that a minor has registered an account on df888, please contact us immediately at [email protected] so that the account can be identified and closed without delay. df888 takes the protection of minors from gambling harms extremely seriously and supports industry-wide efforts to prevent underage access to online gaming platforms.

df888 may send you promotional communications about bonuses, new features, PSL betting markets, slot launches, and other platform news — but only where you have provided explicit consent during registration or through your account settings, and only where you are not subject to a self-exclusion or cooling-off period.

You may opt out of marketing communications at any time by updating your communication preferences in your df888 account settings or by contacting support at [email protected] with the subject line "Unsubscribe". df888 will process your opt-out request within 5 business days. Please note that opting out of marketing communications does not affect transactional communications (such as deposit confirmations, withdrawal notifications, and KYC verification requests), which df888 will continue to send as they are necessary for account administration.

df888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect or use your personal data — df888 will provide advance notice via a prominent notice on the platform and, where practicable, by email to the address registered on your account.

The updated Privacy Policy will be published on this page with a revised effective date. Your continued use of the df888 platform following the publication of a revised Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should cease using the platform and request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how df888 handles your personal data, please do not hesitate to contact the df888 data protection team through any of the following channels:

• Email: [email protected] — please use the subject line "Data Protection Enquiry" and include your registered account username.
• Live Chat: Available directly on the df888 platform, 24 hours a day, 7 days a week.
• Response Time: df888 aims to acknowledge all data protection enquiries within 48 hours and to provide a substantive response within 30 calendar days, in accordance with applicable data subject rights timescales.