88star Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out the basis on which 88star ("we", "us", "our", "the Platform") collects, processes, stores, and shares personal data relating to registered users ("you", "your", "Player") of the 88star platform accessible at 88star.org. It applies to all users of the platform worldwide, with particular relevance to players based in Pakistan — in cities like Karachi, Lahore, Islamabad, Faisalabad, and beyond — who access 88star's cricket betting, live casino, slots, and other gaming services.

By registering an account on 88star, depositing funds, placing a bet or wager, or continuing to use the platform in any capacity after the effective date of this Policy, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy in full. This Policy forms part of the overall agreement between you and 88star and should be read together with the Terms & Conditions and the Responsible Gaming Policy.

We are committed to protecting your privacy in line with internationally recognised data protection standards. While Pakistan's data protection legal framework continues to evolve, 88star voluntarily aligns its data handling practices with the principles of the General Data Protection Regulation (GDPR) as a benchmark standard, given the high levels of protection those principles provide to our users.

2 Data Controller

For the purposes of this Privacy Policy, 88star is the data controller in respect of all personal data collected from platform users. As data controller, 88star determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable data protection standards.

All enquiries relating to this Privacy Policy, your personal data, or your data rights should be directed to 88star's Data Protection Officer (DPO) at:

We aim to respond to all data-related enquiries within five (5) business days of receipt of a complete request. Complex requests, such as full data subject access requests, may take up to thirty (30) days in accordance with standard data protection response timeframes.

3 Personal Data We Collect

88star collects the following categories of personal data from registered users and site visitors:

4 How We Collect Your Data

88star collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, filling in responsible gaming forms, contacting customer support, or responding to promotions.
• Automated technical collection: Data gathered automatically through cookies, server logs, and platform analytics tools when you browse or interact with the 88star website, including pages visited, session duration, click patterns, and device fingerprint data.
• Payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, the relevant payment processor confirms transaction status and associated reference identifiers to 88star. We do not receive your full banking credentials through this process.
• Identity verification partners: For KYC purposes, 88star may work with licensed third-party identity verification service providers who process your identity documents on our behalf and return a verification result. These providers act as data processors under contract with 88star.
• Fraud and AML detection systems: Our automated risk and compliance tools analyse patterns in your account activity — including deposit frequency, betting behaviour, and login patterns — to detect suspicious activity in line with our anti-money laundering obligations.

5 How We Use Your Personal Data

88star uses your personal data for the following purposes:

1. Account management: Creating, maintaining, and securing your 88star account, including authentication, password recovery, and session management.
2. Transaction processing: Receiving deposits in PKR, processing withdrawal requests, applying bonus credits, and maintaining accurate financial records of all account activity.
3. KYC and AML compliance: Verifying your identity, confirming your age (21+ requirement), and monitoring account activity for potential money laundering, fraud, or other financial crimes as required under our international gaming licence obligations.
4. Customer support: Responding to your queries, resolving disputes, processing complaints, and providing account-related assistance through our 24/7 support team.
5. Responsible gaming: Operating self-exclusion tools, deposit limit settings, session reminders, and reality check features; identifying accounts that may show indicators of problem gambling and taking appropriate protective action.
6. Platform personalisation: Tailoring content, game recommendations, and promotional offers based on your gaming history and stated preferences, where you have consented to this use.
7. Marketing communications: Sending you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and cricket season offers — but only where you have opted in to receive such communications. You may opt out at any time from your account settings or by contacting support.
8. Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, and prohibited conduct as defined in the Terms & Conditions.
9. Legal compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory authorities, and maintaining records as required by our gaming licence.
10. Platform improvement: Analysing aggregated, anonymised usage data to understand how the platform is used, identify technical issues, and improve the overall user experience.

6 Legal Basis for Processing

In line with GDPR-aligned standards, every processing activity conducted by 88star is carried out on one of the following lawful bases:

7 Data Sharing & Third Parties

88star does not sell, rent, or trade your personal data. We share your data only in the following carefully controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum necessary transaction data to process your deposits and withdrawals. These providers are bound by their own regulatory obligations and their own privacy policies govern their handling of your payment data.
• Identity verification providers: Licensed KYC service providers receive your identity documents solely to perform age and identity verification on 88star's behalf. They act as data processors and are contractually prohibited from using your data for any other purpose.
• Game software providers: When you play a slot, live casino game, or other RNG title on 88star, your session data (Player ID, wager amount, game result) is transmitted to the relevant game studio's server in real time. Game studios do not receive your name, CNIC, or contact details — only a pseudonymous Player ID.
• Fraud and compliance tools: Specialised fraud detection and AML screening service providers receive flagged account data on a need-to-know basis to assist with risk assessments. All such providers are contractually bound to data processor standards.
• Regulatory and law enforcement authorities: 88star will disclose personal data to licensing regulators, financial intelligence units, or law enforcement agencies where required to do so by law or by a valid legal order. We will not notify you of such disclosure where doing so would compromise a lawful investigation.
• Group companies: 88star may share data within its corporate group for internal administrative, compliance, and IT infrastructure purposes. All group entities are subject to the same privacy standards as set out in this Policy.

8 International Data Transfers

As an internationally licensed gaming platform, 88star's infrastructure and some of its service providers are located outside of Pakistan. Your personal data may therefore be transferred to and processed in countries other than your country of residence. Where such transfers occur, 88star takes the following steps to ensure an adequate level of data protection:

• Entering into data processing agreements with all third-party recipients that incorporate standard contractual clauses or equivalent transfer safeguards.
• Conducting transfer impact assessments where transfers involve jurisdictions without an adequacy decision from a recognised data protection authority.
• Restricting transfers to the minimum data necessary for the specific processing purpose.
• Requiring all international data processors to maintain ISO 27001-certified information security management systems or equivalent security certification.

By creating an 88star account and accepting this Privacy Policy, you acknowledge and consent to your personal data being transferred internationally under the safeguards described above.

9 Data Retention Periods

88star retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the minimum retention periods required by our gaming licence obligations and applicable law. The following retention schedule applies:

At the end of the applicable retention period, data is either securely and irreversibly deleted from 88star's systems or anonymised such that it can no longer be attributed to any identified or identifiable individual. Anonymised aggregate data may be retained indefinitely for analytical and reporting purposes.

10 Cookies & Tracking Technologies

88star uses cookies and similar tracking technologies (including local storage, session tokens, and analytics pixels) on its website to enable core platform functionality, improve user experience, and analyse platform usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and enable secure navigation between platform sections. These cookies cannot be disabled without significantly impairing the platform.
• Performance and analytics cookies: These collect anonymised information about how users interact with the 88star website — including which pages are visited most frequently, session duration, and error rates. This data is used to improve the platform's performance and usability. No personally identifiable information is collected through these cookies.
• Functionality cookies: These remember your preferences — such as your preferred sports leagues for betting, your last-visited game category, and your responsible gaming settings — to provide a more personalised experience on return visits.
• Marketing cookies: Where you have opted in to promotional communications, marketing cookies help 88star track which promotions you have viewed and interacted with, preventing the same bonus offer from being shown to you repeatedly. These cookies are disabled by default for users who have not opted into marketing communications.

11 Your Data Rights

As an 88star user, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request". We will respond within five (5) business days and complete the request within thirty (30) days.

12 Security Measures

88star implements a comprehensive, layered approach to information security designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes, but is not limited to, the following measures:

• TLS 1.3 encryption for all data transmitted between your browser or app and 88star's servers, preventing interception during transit.
• AES-256 encryption at rest for all databases containing personal and financial data, ensuring that even in the event of a storage breach, data cannot be read without the encryption keys.
• Multi-factor authentication (MFA) available for all player accounts and mandatory for all 88star staff accounts with access to user data.
• Role-based access control (RBAC) ensuring that 88star employees can only access user data to the extent required for their specific job function. Access logs are maintained and reviewed regularly.
• Regular penetration testing conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• 24/7 intrusion detection and prevention systems (IDS/IPS) monitoring network traffic for anomalous patterns indicative of attack or unauthorised access.
• Secure development lifecycle (SDLC) practices applied to all platform development, including code reviews, static analysis, and security testing before any code is deployed to production.

13 Minors & 21+ Age Policy

88star operates a strict 21 years of age or older policy for all registered users. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years old, you are not permitted to register an account, deposit funds, or use any gaming services on the 88star platform.

As part of our KYC verification process, all new users are required to submit valid identity documentation confirming their date of birth prior to making any deposit or placing any bet. Accounts where age verification cannot be satisfactorily completed will be suspended until verification is provided, and all funds held in such accounts will be frozen during the verification period.

If you believe a minor may have created an account on 88star, please report this immediately to [email protected] with the subject line "Underage Report". We treat all such reports with the highest priority and will investigate within 24 hours.

14 Third-Party Services & Links

The 88star platform may reference or integrate with third-party services — such as game studios, payment processors, and live streaming providers — whose own privacy policies govern how they handle any data that you interact with directly on their systems. 88star is not responsible for the privacy practices of third-party service providers beyond the data processing agreements we have in place with them as described in Section 7.

Where 88star embeds third-party game content (for example, a live dealer table hosted by a game studio), your in-game actions and session data may be processed by that studio's infrastructure under their own privacy policy. 88star selects only reputable, licensed game studios that meet internationally recognised data protection and security standards. However, we encourage you to review the privacy policies of any third-party service you interact with directly.

15 Changes to This Privacy Policy

88star reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, platform features, or operational structure. When we make material changes to this Policy, we will notify registered users by:

• Posting a prominent notice on the 88star platform homepage and the Privacy Policy page indicating that the Policy has been updated;
• Updating the "Effective Date" shown at the top of this page;
• Sending an email notification to your registered email address where the changes materially affect your rights or how your data is used.

Your continued use of the 88star platform after the updated Policy's effective date constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the platform and may request account closure and data deletion by contacting [email protected].

We recommend reviewing this Privacy Policy periodically — particularly at the start of each major cricket season or PSL tournament period — to stay informed about how your data is protected on 88star.

16 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 88star handles your personal data, please contact our Data Protection Officer through the following channel:

Our support team is available 24 hours a day, 7 days a week to handle general account queries. For legal and data protection matters specifically, our compliance and DPO team operates during standard business hours, Monday to Friday. Complex data subject access requests or erasure requests will be handled within the 30-day statutory response window.

88star serves registered players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and beyond — under the same universal Privacy Policy detailed on this page. All players, regardless of their city of residence, hold equal rights under this Policy.