8f9 Privacy Policy —
Your Data, Handled with Care

8f9 (referred to throughout this policy as "8f9", "we", "us", or "our") is an internationally licensed online gaming operator running the platform accessible at 8f9.biz. 8f9 is the data controller in respect of the personal data collected from players who register and use our platform. As data controller, 8f9 determines the purposes and means by which your personal data is processed.

8f9 operates under an international gaming license. Our licensing authority imposes data protection requirements as part of our ongoing license compliance, including obligations relating to data security, retention, and player rights. This Privacy Policy is maintained in compliance with those obligations and reflects our commitment to handling Pakistani player data responsibly and transparently.

8f9 collects personal data through the following channels: account registration, KYC verification, payment transactions, ongoing platform use, customer support interactions, and automated technical systems. The categories of data collected are outlined in the table below.

8f9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case such information is handled with the highest level of confidentiality and used solely to administer the exclusion.

8f9 uses personal data for the following purposes. Each purpose is listed alongside the lawful basis on which we rely for processing.

3.1 Account Management & Service Delivery

8f9 uses your registration data (name, mobile number, date of birth) and contact details to create and manage your 8f9 account, authenticate your 8f9 login sessions, deliver account notifications, process your PKR deposits and withdrawals, and provide access to the full range of 8f9 gaming products. Without this data, 8f9 cannot provide its service to you.

3.2 Identity Verification (KYC) & Anti-Money-Laundering

8f9 is legally required under its international gaming license to verify the identity and age of every player before processing withdrawals. Your CNIC details, document images, and financial account information are processed to confirm your identity, confirm that you are aged 21 or above, confirm that payment methods are registered in your own name, and ensure that 8f9 is not being used to facilitate money laundering or financial crime. This processing is a legal obligation that cannot be opted out of.

3.3 Fraud Prevention & Platform Security

Technical data including IP addresses, device identifiers, and session logs is processed by 8f9 to detect suspicious login patterns, identify potential unauthorized account access, identify and prevent bonus abuse or collusion, and ensure the security integrity of the 8f9 platform for all players.

3.4 Responsible Gaming Administration

Gaming data and responsible gaming settings are used by 8f9 to administer deposit limits, session limits, loss limits, cooling-off periods, and self-exclusion requests set by players. Where 8f9's responsible gaming monitoring identifies patterns consistent with problem gambling, this data may be reviewed by trained 8f9 responsible gaming personnel who may reach out to the player via their registered mobile number.

3.5 Customer Support

Communication data from your support interactions with 8f9 is retained to allow continuity of service across support conversations, to train support staff, to investigate formal complaints, and as evidence in dispute resolution proceedings where required.

3.6 Regulatory Compliance

8f9 may be required to process and disclose your personal data to meet regulatory obligations, licensing authority requests, court orders, or law enforcement demands issued under applicable law. 8f9 will not disclose data beyond what is legally required in such circumstances.

8f9 processes personal data on the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing necessary to create and manage your 8f9 account, process deposits and withdrawals, and deliver the gaming services you have contracted to receive by accepting 8f9's Terms and Conditions.
• Legal Obligation: Processing required to comply with our international gaming license obligations — including KYC identity verification, AML transaction monitoring, age restriction enforcement, and responsible gaming provision.
• Legitimate Interests: Processing carried out for 8f9's legitimate business interests, including fraud detection, platform security, and customer support quality assurance, where such interests are not overridden by your privacy rights.
• Consent: Marketing communications sent by 8f9 via SMS to your registered Pakistani mobile number are sent on the basis of your consent at the time of registration, which you may withdraw at any time.

8f9 does not sell your personal data to any third party. 8f9 shares personal data only in the following limited and necessary circumstances:

5.1 Payment Processors

To process your PKR deposits and withdrawals, 8f9 shares the minimum necessary financial data with our payment processing partners — including JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank. These processors receive only the data required to execute your specific transaction and are contractually prohibited from using your data for any other purpose.

5.2 KYC & Identity Verification Services

8f9 may use a third-party identity verification service provider to assist in processing KYC documentation. Where such a provider is used, they act as a data processor under a written contract with 8f9 that restricts their use of your data to the specific verification task and requires them to maintain equivalent data security standards.

5.3 Game Content Providers

8f9's gaming library is powered by certified third-party game studios. While these studios deliver game content through 8f9's platform, they receive only anonymized or session-level technical data necessary to deliver the game experience. Game studios do not receive your identity data, financial data, or contact information.

5.4 Regulatory & Law Enforcement Authorities

8f9 may disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where disclosure is required by law, court order, or regulatory instruction. In such cases, 8f9 discloses only the minimum data necessary to satisfy the specific legal requirement.

8f9 uses cookies and similar tracking technologies on the 8f9.biz platform to deliver and improve its service. The categories of cookies used are as follows:

• Essential Cookies: Required for the 8f9 platform to function. These cookies maintain your 8f9 login session, remember your preferences within a session, and enable security features. Essential cookies cannot be disabled without causing the platform to malfunction.
• Analytics Cookies: Used by 8f9 to measure platform usage patterns — including which pages are most visited, average session duration, and common navigation paths. This data is aggregated and anonymized and is used solely to improve the 8f9 platform experience for Pakistani players.
• Functionality Cookies: Remember your language preferences, display settings, and other optional customizations on the 8f9 platform so you do not need to reset them on each visit.

You can control non-essential cookie settings through your browser settings at any time. Disabling essential cookies will impair your ability to use the 8f9 login and gaming features. 8f9 does not use third-party advertising or retargeting cookies that track you across websites outside of 8f9.biz.

8f9 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, meet our legal and licensing obligations, and resolve any disputes that may arise in connection with your account. The following retention periods apply:

• Account Data & KYC Documents: Retained for a minimum of five (5) years from the date of account closure, as required by anti-money-laundering regulations applicable under 8f9's international gaming license.
• Transaction Records: All PKR deposit, withdrawal, and bet records are retained for a minimum of five (5) years from the date of each transaction for compliance and audit purposes.
• Communication Records: Customer support correspondence is retained for three (3) years from the date of the last interaction, unless a longer period is required by an open dispute or regulatory inquiry.
• Technical Logs: Session logs and technical data are retained for ninety (90) days from collection, unless specifically required for a security investigation or dispute.
• Self-Exclusion Records: Records of self-exclusion requests are retained permanently to prevent re-registration during any mandatory exclusion period and to support responsible gaming monitoring.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that makes re-identification impossible.

8f9 implements a multi-layered technical and organizational security framework to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 8f9 servers
• AES-256 encryption for personal and financial data stored in 8f9 databases at rest
• Role-based access controls — 8f9 staff access to personal data is restricted on a strict need-to-know basis
• Multi-factor authentication required for all 8f9 administrative and compliance personnel accessing player data
• Regular independent penetration testing and security audits of 8f9 platform infrastructure
• Intrusion detection systems monitoring 8f9 infrastructure for unauthorized access attempts in real time
• Regular security training for all 8f9 staff who handle personal data as part of their role

No data security system is impenetrable. While 8f9 takes all reasonable technical and organizational measures to protect your data, we cannot guarantee absolute security against all possible threats. Players are encouraged to contribute to account security by using a strong, unique password for their 8f9 account and enabling two-factor authentication.

Subject to the limitations of applicable law and our licensing obligations, 8f9 recognises the following data rights for account holders. All rights requests should be submitted in writing to [email protected] with your registered mobile number included for identity verification.

8f9 does not knowingly collect personal data from any person under the age of twenty-one (21). The 8f9 platform, its games, and all associated services are strictly intended for adults aged 21 and above. If 8f9 becomes aware that personal data has been collected from a minor, we will immediately delete that data, close the associated account, and return any deposited funds where technically possible.

Parents and guardians who have reason to believe that a minor in their care has registered on 8f9 should contact us immediately at [email protected]. 8f9 takes underage gambling prevention extremely seriously as a core responsible gaming obligation under our international gaming license.

8f9 may send promotional SMS messages to your registered Pakistani mobile number about bonuses, new games, cricket betting promotions, and other 8f9 offers. Marketing communications are sent on the basis of your consent given at registration.

11.1 Opting Out of Marketing

You may withdraw consent to receive 8f9 marketing communications at any time. To opt out of SMS marketing from 8f9, log in to your 8f9 account and update your communication preferences in account settings, or contact support at [email protected] with your registered mobile number and a request to be removed from marketing communications. Opt-out requests are processed within five (5) business days.

11.2 Transactional Communications

Withdrawing consent to marketing does not affect 8f9's ability to send you necessary transactional messages — such as SMS one-time passwords for your 8f9 login, deposit confirmation notifications, withdrawal processing updates, and security alerts. These communications are essential to the service and cannot be opted out of while you hold an active 8f9 account.

The 8f9 platform integrates third-party game content from certified studio providers. While these games are accessible through the 8f9 interface, they may be technically delivered by third-party servers. 8f9 has contractual arrangements with all game content providers governing the data they may access in connection with game delivery. These providers do not receive your name, mobile number, CNIC details, or financial data from 8f9.

This Privacy Policy does not cover the privacy practices of any third-party entity, including payment processors, game studios, or any other service provider. 8f9 encourages you to review the privacy policies of any third parties whose services you interact with in connection with your 8f9 account. 8f9 is not responsible for the data practices of third parties operating independently of 8f9's contractual data processing framework.

8f9 may update or amend this Privacy Policy periodically to reflect changes to our data processing practices, licensing requirements, applicable law, or platform services. Material changes to this Privacy Policy will be communicated to 8f9 account holders via a notification displayed upon your next 8f9 login and, in cases of significant changes affecting your privacy rights, via SMS to your registered Pakistani mobile number.

The date at the top of this Privacy Policy reflects when it was most recently reviewed and updated. Continued use of the 8f9 platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you disagree with any material amendment, you should cease using the 8f9 platform and request account closure before the amendment takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or 8f9's handling of your personal data, please contact us using the following details. All privacy-related correspondence will be acknowledged within two (2) business days:

• Privacy Enquiries: [email protected] — please include "Privacy" in your subject line
• Response Time: Within 2 business days for acknowledgement; within 30 days for formal rights requests
• Languages: English and Urdu — 24/7, Pakistan Standard Time

If you are not satisfied with 8f9's response to a privacy concern, you may escalate your complaint to the relevant data protection authority or complaints body designated under 8f9's licensing jurisdiction, details of which are available on request from our support team.