er888 Privacy Policy

1 Scope & Data Controller

1.1  This Privacy Policy applies to all personal data collected by er888 in connection with the operation of the er888 online gaming platform at er888.ws, including all subpages, game products, betting services, promotional communications, and customer support interactions associated with the Platform.

1.2  For the purposes of this Privacy Policy, er888 — the operator of er888.ws — acts as the Data Controller in respect of personal data collected from Pakistani players and other users of the Platform. As Data Controller, er888 determines the purposes and means by which personal data is processed.

1.3  This Policy applies to all individuals who:

• Register or attempt to register an account on the er888 Platform;
• Browse or access the er888 Platform without registering;
• Contact er888 via live chat, Messenger, Viber, or email at [email protected];
• Receive marketing communications from er888.

1.4  This Policy does not apply to third-party websites, services, or platforms accessible via links published on er888.ws. er888 is not responsible for the privacy practices of third-party game providers, payment processors, or other external services, and encourages users to review the privacy policies of any third-party services they access.

2 Personal Data We Collect

2.1  er888 collects the following categories of personal data from Users, in accordance with the principle of data minimisation — meaning we collect only what is necessary for the purposes described in Section 4 of this Policy:

2.1 Registration & Identity Data

• Full legal name as it appears on your CNIC or Passport;
• Pakistani mobile number (used as your er888 account identifier);
• Date of birth (required for mandatory 21+ age verification);
• Gender (optional, collected at registration for personalisation purposes);
• City and province of residence within Pakistan.

2.2 KYC & Verification Documents

• Scanned or photographed copy of your National Identity Card (CNIC) or valid Passport;
• Proof of payment method ownership (e.g., JazzCash account screenshot, bank statement);
• Proof of address documentation where requested by er888's compliance team;
• Facial selfie or liveness verification where required for enhanced KYC.

2.3 Financial & Transaction Data

• JazzCash or EasyPaisa wallet identifier numbers;
• HBL, UBL, or Meezan Bank account names (not full account numbers) for bank transfer processing;
• Deposit amounts, dates, and methods;
• Withdrawal amounts, dates, and methods;
• Gaming transaction history — bets placed, games played, wins, losses.

2.4 Technical & Usage Data

• Device type, operating system, and browser version;
• IP address and approximate geolocation derived from IP;
• Session duration, login timestamps, and login locations;
• Pages visited, game categories accessed, and navigation patterns;
• Referral source and traffic acquisition channel.

2.5 Communication & Support Data

• Live chat transcripts between you and er888 support agents;
• Email correspondence with [email protected];
• Messenger and Viber message records where support is provided through those channels;
• Complaint records and dispute resolution documentation.

3 How We Collect Your Data

3.1  er888 collects personal data through the following methods:

3.2  er888 does not collect personal data from third-party commercial data providers, social media platforms, or data brokers. All personal data held by er888 is collected directly from you through your interaction with the Platform or its support channels.

4 Purpose & Legal Basis for Processing

4.1  er888 processes your personal data for the following purposes, each supported by a corresponding legal basis:

4.2  er888 does not use automated decision-making processes that produce legal or similarly significant effects on individual Players without human review. Account suspension decisions based on fraud or compliance triggers are reviewed by a qualified er888 compliance officer before action is taken where circumstances permit.

5 Data Sharing & Disclosure

5.1  er888 may share your personal data with the following categories of third parties:

5.1.1 Licensed Game Providers

er888 shares limited session and gameplay data with our certified game software providers — including Evolution Gaming, Pragmatic Play, PG Soft, and others — solely for the purpose of delivering game functionality and settling game outcomes. Game providers do not receive your CNIC, financial details, or KYC documents.

5.1.2 Payment Processors

er888 shares the minimum transaction data necessary with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process your deposit and withdrawal requests. Payment processors handle data in accordance with their own regulatory obligations as licensed financial institutions in Pakistan.

5.1.3 KYC Verification Partners

Identity documents submitted for KYC verification may be processed by er888's licensed third-party identity verification technology partner. This partner processes documents solely for the purpose of age and identity verification and operates under data processing agreements with er888 that restrict further use of your data.

5.1.4 Legal & Regulatory Authorities

er888 will disclose personal data to relevant law enforcement agencies, financial intelligence units, regulatory authorities, or courts where required to do so by applicable law, court order, or regulatory directive. er888 will make reasonable efforts to notify affected users of such disclosures where legally permitted to do so.

5.1.5 Professional Advisors

er888 may share personal data with its legal counsel, auditors, and compliance advisors where necessary for the provision of professional services. All such advisors are bound by professional confidentiality obligations.

5.1.6 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of er888's assets, personal data held by er888 may be transferred to the successor entity. Users will be notified of any such transfer and the privacy terms applicable to their data following the transaction.

6 International Data Transfers

6.1  As an internationally operated platform, er888 may process or store personal data on servers located outside of Pakistan. Where personal data is transferred internationally, er888 implements appropriate technical and contractual safeguards to ensure that such data receives a level of protection equivalent to the standards described in this Policy.

6.2  Safeguards employed by er888 for international data transfers include:

• Data processing agreements with all third-party data processors that impose data protection obligations equivalent to those applicable to er888 itself;
• Technical encryption of personal data in transit and at rest using industry-standard protocols;
• Limitation of access to transferred data to personnel who require it for the specific processing purpose.

6.3  Pakistani players may contact er888 at [email protected] to request information about the specific safeguards in place for international transfers of their personal data.

7 Data Retention

7.1  er888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, licensing conditions, or regulatory obligations. The following retention periods apply:

7.2  Upon expiry of the applicable retention period, er888 will securely delete or anonymise personal data in a manner that prevents reconstruction of individual identities. Where data cannot be immediately deleted due to technical constraints (e.g., backup systems), er888 will ensure it is isolated from active processing until deletion is technically possible.

8 Security Measures

8.1  er888 implements a multi-layered security programme to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and er888's servers;
• Encryption of sensitive personal data at rest, including KYC documents and identity information;
• Server-level firewalls and intrusion detection systems monitoring all inbound and outbound traffic;
• Role-based access control — only personnel with a business need to access specific data categories are granted access;
• Two-factor authentication requirements for all er888 administrative and support personnel accessing internal systems;
• Regular independent security audits and penetration testing of the er888 Platform infrastructure;
• Comprehensive staff data protection training for all personnel who handle personal data;
• Incident response procedures for detecting, reporting, and mitigating data security breaches.

8.2  While er888 takes all reasonable measures to protect your personal data, no transmission over the internet or electronic storage system is completely secure. er888 cannot guarantee absolute data security. Players are encouraged to use strong, unique passwords for their er888 accounts and to enable OTP verification for all new device logins.

8.3  In the event of a data security breach that is likely to result in a risk to your rights or interests, er888 will notify affected users without undue delay through the contact details associated with their account, and will take all appropriate remedial steps to contain and address the breach.

9 Cookies & Tracking Technologies

9.1  er888 uses cookies and similar tracking technologies on the Platform to deliver its services, maintain session security, and analyse Platform usage. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session authentication cookies that keep you logged in to your er888 account during a session. These cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game category selections, and remembered device settings. These enhance your er888 experience but are not essential to core functionality.
• Analytics Cookies: Used by er888 to understand how Pakistani players interact with the Platform — which pages are visited most frequently, where players drop off, and how navigation flows can be improved. Analytics data is processed in aggregate and is not used to identify individual users.
• Security Cookies: Used to detect and prevent fraudulent login attempts, identify unusual account activity patterns, and protect Platform integrity. These are part of er888's commitment to account security for all Pakistani players.

9.2  er888 does not use third-party advertising cookies, behavioural tracking pixels from social media platforms, or cross-site tracking technologies that follow users across external websites.

9.3  Most browsers are configured to accept cookies by default. You may configure your browser to block or delete cookies, but doing so may affect your ability to log in to or use certain features of the er888 Platform. er888's cookie preferences can be managed through your browser settings.

10 Your Data Rights

10.1  As a user of the er888 Platform, you have the following rights in respect of your personal data. These rights may be subject to limitations where er888 has overriding legal obligations to retain or continue processing the relevant data:

10.2  To exercise any of the rights listed above, submit a written request to [email protected] clearly identifying the right you wish to exercise and providing sufficient information to verify your identity. er888 will acknowledge your request within 72 hours and respond substantively within 30 calendar days. Complex or multiple requests may take up to 60 days, in which case er888 will notify you of the extended timeline.

10.3  er888 will not charge a fee for processing data rights requests unless they are manifestly unfounded, excessive, or repetitive in nature. In such cases, er888 reserves the right to apply a reasonable administrative fee or refuse to act on the request, with written reasons provided.

11 Children's Privacy — 21+ Platform

11.1  Age verification through mandatory CNIC or Passport KYC documentation is er888's primary mechanism for enforcing the 21+ age requirement. No withdrawal is processed from any er888 account until age identity has been verified against a government-issued identity document. Date of birth provided at registration is verified against the KYC document submitted.

11.2  er888 does not direct any marketing, promotional, or Platform communications toward individuals under 21 years of age. er888's advertising, promotional materials, and content are designed and targeted for adult audiences only.

12 Responsible Gaming Data

12.1  er888 collects and processes responsible gaming data — including deposit limit settings, session time limit configurations, cool-off period requests, self-exclusion records, and responsible gaming support conversations — for the purpose of protecting player welfare and complying with responsible gaming obligations under er888's licensing conditions.

12.2  Self-exclusion records are retained permanently and are never deleted, as they are essential to preventing self-excluded individuals from accessing er888. If a self-excluded individual attempts to register a new account, er888 will detect the match and refuse registration.

12.3  Responsible gaming conversations conducted through live chat, email, or other support channels are treated with strict confidentiality. Information shared in a responsible gaming support context is not used for marketing profiling or any purpose other than delivering appropriate player welfare support.

12.4  er888 may use anonymised, aggregated responsible gaming data to improve its player protection programmes and reporting — but this data is anonymised at source and cannot be used to identify individual players.

12.5  For more information about er888's responsible gaming tools and commitments, please visit er888.ws/responsible-gaming.

13 Marketing Communications

13.1  er888 may send promotional and marketing communications — including bonus offers, platform news, new game announcements, and PKR promotions — to registered Players who have opted in to receive such communications at registration or through their account preferences.

13.2  er888 marketing communications may be delivered via SMS to your registered Pakistani mobile number, via in-account notifications within the Platform, or via Messenger or Viber if you have engaged with er888 through those channels.

13.3  Consent to receive marketing communications is entirely voluntary and may be withdrawn at any time by:

• Updating your communication preferences in your er888 Account settings;
• Replying STOP to any SMS communication from er888;
• Contacting [email protected] with a written opt-out request.

13.4  Withdrawal of marketing consent does not affect your ability to use the er888 Platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, or KYC requests) that are necessary for account management purposes.

13.5  er888 does not share your contact details with third-party marketing organisations. All marketing communications are sent directly by er888 or by licensed service providers acting on er888's instruction under strict data processing agreements.

14 Third-Party Links & Services

14.1  The er888 Platform may contain links to third-party content, game provider interfaces, or informational pages operated by organisations other than er888. er888 has no control over the privacy practices, data collection methods, or security measures implemented by third-party websites or services accessible through such links.

14.2  This Privacy Policy applies exclusively to data collected by er888 through the er888 Platform. er888 encourages all Pakistani players to review the privacy policies of any third-party services they access, particularly game provider platforms that may have their own independent data practices.

14.3  Third-party game providers whose games are available within the er888 Platform operate as independent data processors in respect of in-game session data. Their processing of such data is governed by their own privacy policies and licensing obligations, and they operate under data processing agreements with er888 that restrict data use to the provision of game functionality.

15 Policy Amendments

15.1  er888 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, regulatory requirements, or Platform functionality. Amendments will be published on this page with an updated effective date.

15.2  For material amendments that significantly affect how er888 processes your personal data or your rights in relation to it, er888 will provide advance notice to affected users via the contact details associated with their er888 account. Material amendments will have a notice period of at least 14 days before taking effect for existing account holders.

15.3  Your continued use of the er888 Platform following publication of an amended Privacy Policy constitutes your acceptance of the amended terms. If you do not accept an amended Privacy Policy, you must cease using the Platform and request account closure.

15.4  Previous versions of this Privacy Policy are available from er888's support team on request, for reference by users who wish to understand what terms applied at a particular historical date.

16 Contact & Complaints

16.1  For any questions, concerns, or requests relating to this Privacy Policy or er888's handling of your personal data, please contact the er888 Privacy Team through the following channels:

16.2  If you believe that er888 has processed your personal data in a manner inconsistent with this Privacy Policy or applicable law, you have the right to raise a formal complaint. er888's internal complaints procedure begins with a written complaint submitted to [email protected], which will be acknowledged within 24 hours and reviewed by a senior member of the er888 compliance team.

16.3  If your complaint is not resolved to your satisfaction through er888's internal process, you may escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. er888 will cooperate fully with any regulatory investigation into its data protection practices.

16.4  er888 values the trust Pakistani players place in us when they share their personal data. We are committed to resolving all data protection concerns promptly, transparently, and in a manner consistent with the commitments described in this Privacy Policy.