at888 Privacy Policy

This Privacy Policy ("Policy") describes how at888 ("at888", "we", "us", "our") collects, uses, discloses, and safeguards the personal information of registered players and visitors ("you", "your") who access and use the at888 online casino and sports betting platform, accessible at at888.bio and any associated mobile or mirror domains operated by at888.

at888 is committed to protecting the privacy of all users, including Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We operate under an internationally recognised gaming licence, and our data handling practices are designed to comply with the data protection requirements imposed by that licence, as well as applicable international data protection standards.

This Policy applies to all personal data processed in connection with the at888 platform, including account registration, deposits and withdrawals in PKR, gameplay activity, customer support interactions, and marketing communications. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

at888 acts as the data controller in respect of all personal data collected and processed through the at888 platform. As data controller, at888 determines the purposes for which your personal data is processed and the means by which it is processed.

at888 operates under an internationally recognised online gaming licence. The terms of that licence impose binding obligations on at888 with respect to the collection, retention, and security of player data, including requirements relating to Know Your Customer (KYC) verification and Anti-Money Laundering (AML) compliance.

at888 collects personal data in the following categories, depending on your level of interaction with the platform:

3.1 Registration & Identity Data

• Full legal name, date of birth, and gender
• Residential address (including city, province, and postal code within Pakistan or your jurisdiction)
• Email address and mobile phone number
• Government-issued identification document details (CNIC, passport, or equivalent) — collected as part of KYC verification

3.2 Financial & Payment Data

• Payment method details (JazzCash account number, EasyPaisa number, bank account details for HBL, UBL, Meezan Bank, Allied Bank, SadaPay, or cryptocurrency wallet address for USDT TRC20)
• Transaction history including deposits and withdrawals in PKR
• Source of funds documentation where required by our AML policy

3.3 Platform Usage Data

• Login timestamps, session durations, and device/browser information
• IP address and approximate geolocation data
• Betting and gameplay history, including games played, wager amounts, and win/loss records
• Bonus and promotional activity records

3.4 Communications Data

• Records of live chat conversations with at888 support agents
• Email correspondence between you and at888
• Feedback, survey responses, and complaint records

at888 processes your personal data only for defined, legitimate purposes. The specific purposes for which we use your data are as follows:

• Account Management: To create, verify, maintain, and manage your at888 player account, including processing your registration and login authentication.
• Identity Verification (KYC): To verify that you are at least 21 years of age and are the legitimate owner of the payment methods associated with your account, in compliance with our licence obligations.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20.
• Gaming & Betting Services: To provide access to at888's full suite of products including cricket betting, PSL markets, slot games, Ezugi Live dealer tables, and Treasure Boat Fishing.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct as defined in our Terms & Conditions.
• AML Compliance: To monitor transactions for suspicious activity and report to the relevant regulatory authorities as required under our licence obligations.
• Responsible Gaming: To monitor gameplay patterns and identify indicators of problem gambling, in order to apply responsible gaming tools (deposit limits, self-exclusion, reality checks) where appropriate.
• Customer Support: To respond to your enquiries, process complaints, and resolve disputes in a timely and professional manner.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — subject to your marketing preferences. See Section 13 for details on how to opt out.
• Legal Compliance: To meet our obligations under applicable laws, regulations, and the conditions of our international gaming licence.

at888 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and at888 — including account creation, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required for KYC verification, AML reporting, and regulatory compliance is carried out to fulfil at888's legal obligations under its gaming licence and applicable law.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics is carried out on the basis of at888's legitimate interests, where those interests are not overridden by your rights and freedoms.
• Consent: Processing for optional marketing communications is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

at888 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. Your data may be disclosed to third parties only in the following limited and controlled circumstances:

• Licensed Payment Service Providers: Your financial data is shared with our certified PSPs — including JazzCash, EasyPaisa, and our banking partners (HBL, UBL, Meezan Bank, Allied Bank) — solely to the extent necessary to process your PKR transactions.
• KYC and Identity Verification Partners: Identity documents and verification data may be shared with licensed third-party KYC service providers engaged by at888 to conduct identity and age verification checks.
• Fraud Prevention and AML Services: Transaction and behavioural data may be shared with fraud detection and AML compliance service providers where at888 has reasonable grounds to investigate suspicious activity.
• Regulatory Authorities: at888 is obligated to disclose player data to our licensing authority and relevant law enforcement or regulatory bodies upon lawful request or where required by licence conditions.
• Game Software Providers: Limited technical data may be shared with at888's game software partners (including Ezugi and other certified providers) to the extent necessary to provide gameplay services and resolve technical disputes.
• Corporate Transactions: In the event of a merger, acquisition, or sale of at888 assets, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations being imposed on that entity.

at888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or our licensing authority. The following retention guidelines apply:

• Active Account Data: Your account data is retained for the full duration of your registration with at888 and for a period of at least five (5) years following account closure, in compliance with standard AML and gaming licence record-keeping requirements.
• Transaction Records: All PKR deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction, as required for financial compliance purposes.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later.
• Communications Records: Support chat logs and email correspondence are retained for a minimum of two (2) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Marketing Data: Marketing preference data and consent records are retained until you withdraw consent or for a maximum of three (3) years from the date of your last interaction with at888 marketing materials, whichever comes first.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised such that it can no longer be linked to you as an individual.

at888 takes the security of your personal data seriously and has implemented a range of technical and organisational security measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and at888 servers is encrypted using industry-standard SSL/TLS protocols. This applies to all account activity, payment transactions, and login sessions.
• Secure Data Storage: Personal data is stored on secured servers with access restricted to authorised at888 personnel on a strict need-to-know basis.
• Payment Security: Payment details are handled exclusively through certified, PCI-DSS compliant payment service providers. at888 does not store full payment card details or full bank account numbers on its own servers.
• Access Controls: Internal access to player data systems is governed by role-based access controls, multi-factor authentication requirements, and regular access audits.
• Breach Response: In the event of a data breach that poses a risk to your rights and freedoms, at888 will notify affected players and the relevant regulatory authority as promptly as practicable and in accordance with applicable legal requirements.

at888 uses cookies and similar tracking technologies to enhance your experience on the platform. A cookie is a small text file placed on your device by a website you visit. at888 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the at888 platform to function correctly. They enable core functionality such as session management, login authentication, and security features. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymous information about how visitors use the at888 platform — including which pages are visited most frequently and whether error messages are encountered. This data helps us improve platform performance. These cookies can be disabled without affecting core functionality.
• Functionality Cookies: These cookies remember your preferences on the at888 platform, such as your language settings and preferred game categories. Disabling these cookies may result in a less personalised experience.
• Targeting and Marketing Cookies: These cookies track your browsing activity across the at888 platform to deliver more relevant promotional communications. They are only placed with your consent and can be withdrawn at any time through your browser settings.

You may manage or withdraw consent for non-essential cookies at any time through your browser's cookie settings. Please note that disabling certain cookies may affect the performance or available features of the at888 platform.

Subject to applicable data protection law and our legal obligations under our gaming licence, you have the following rights in relation to your personal data held by at888:

• Right of Access: You have the right to request a copy of the personal data at888 holds about you. We will provide this within 30 days of receiving your verified request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain information directly through your at888 account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances. This right is subject to our legal obligation to retain certain data (e.g., AML records, transaction history) for the periods specified in Section 7.
• Right to Restrict Processing: In certain circumstances, you have the right to request that at888 restrict the processing of your personal data while a dispute about its accuracy or lawfulness is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on at888's legitimate interests, subject to our demonstrating compelling grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the at888 Privacy Team via live chat or by emailing [email protected]. We may need to verify your identity before processing your request. We will respond within 30 days of receiving a complete and verified request.

at888 is an adults-only platform. The at888 platform is strictly for individuals aged 21 years and above. at888 does not knowingly collect, process, or retain personal data from any person under the age of 21.

All registration applications are subject to age verification procedures. Where at888 discovers or has reasonable grounds to suspect that a registered account belongs to a person under the age of 21, the following actions will be taken immediately:

• The account will be suspended pending investigation.
• Any real-money balance attributed to wagers placed while underage will be reviewed in accordance with our Terms & Conditions.
• Verified real-money deposits (net of any winnings from underage play) will be returned to the account holder.
• Any personal data collected from the underage individual will be deleted as soon as practicable following resolution of the matter.

at888 is an internationally licensed platform and, as a result, some of your personal data may be transferred to, and processed in, countries outside your country of residence. These transfers may include transfers to countries where our licensing authority, payment processing partners, or game software providers are based.

Where at888 transfers personal data internationally, we ensure that appropriate safeguards are in place to protect your data to the same standard as it would be protected within Pakistan. These safeguards may include:

• Data processing agreements incorporating internationally recognised data protection clauses.
• Transfer only to jurisdictions or recipients that provide an adequate level of data protection as recognised by applicable international standards.
• Implementation of additional technical and organisational safeguards where required to supplement contractual protections.

By using the at888 platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions as described in this section, subject always to the protections set out in this Privacy Policy.

With your consent, at888 may send you marketing communications about our products, services, promotions, and bonuses — including PSL cricket betting offers, slot game promotions, and exclusive at888 casino bonuses. These communications may be delivered by email, SMS, or platform notification.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email sent by at888.
• Updating your communication preferences directly within your at888 account settings.
• Contacting the at888 support team via live chat or by emailing [email protected] with a clear opt-out request.

Please note that opting out of marketing communications will not affect the delivery of transactional communications that are necessary for the administration of your account, including deposit confirmations, withdrawal notifications, and security alerts.

at888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, platform services, legal obligations, or regulatory requirements. All updates will be published on this page with a revised "Last Updated" date at the top of the document.

Where we make material changes to this Privacy Policy — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will provide you with reasonable advance notice. This notice may be delivered by:

• A prominent notice displayed on the at888 platform upon your next login.
• An email notification sent to the address registered on your at888 account.

Your continued use of the at888 platform following notification of a material change will be taken as your acceptance of the updated Privacy Policy. If you do not agree with any material changes, you must cease using the at888 platform and may request account closure and deletion of your data in accordance with Section 10 of this Policy, subject to our legal retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which at888 handles your personal data, please do not hesitate to reach out to our dedicated Privacy Team through any of the following channels:

• Live Chat: Available 24/7 directly through the at888 platform. Our Urdu-speaking and English-speaking support agents are available around the clock to assist players across Pakistan.
• Email: [email protected] — please include "Privacy Request" in the subject line so that your enquiry is directed to the appropriate team. We aim to respond to all privacy-related email enquiries within five (5) business days.

at888 is committed to resolving all privacy-related enquiries and complaints fairly, transparently, and in a timely manner. Whether you are writing from Karachi, Lahore, Faisalabad, Islamabad, or anywhere else in Pakistan, our team is here to help.