89ef Privacy Policy – How We Handle Your Data in Pakistan

1. Introduction

This Privacy Policy describes how 89ef collects, uses, stores and protects the personal information of users who register and interact with the platform. It applies to all services offered by 89ef including the website, the mobile application, the casino and live games section, the sports book, the deposit and withdrawal system and the customer support function.

By creating an account on 89ef, you confirm that you have read this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you are not comfortable with how your data is handled, please do not register or continue to use the platform.

89ef is committed to handling your personal data with care. The platform operates in Pakistan and its primary user base consists of Pakistani players who deposit and withdraw in PKR using local payment methods. This policy reflects the realities of operating a digital payments-enabled gaming platform for that user base.

2. What Personal Data We Collect

89ef collects personal data from you directly when you register, when you use the platform and when you contact support. We also collect certain technical data automatically when you access the platform. The categories of data we collect include:

We do not collect sensitive categories of personal data such as health information, religious beliefs or biometric data. The data we collect is limited to what's needed to operate an online gaming platform and process financial transactions in PKR.

3. Why We Collect Your Data

Every piece of data 89ef collects has a specific purpose. We don't hold data we don't need. The primary reasons for collecting and processing personal data are:

• Account operation: Your name, mobile number and email are needed to create and manage your account, send you account notifications, recover access if you're locked out and communicate important platform updates.
• Payment processing: We need your payment account details to process deposits from JazzCash, Easypaisa, Raast or bank transfer and to send withdrawals back to the same accounts. Transaction records are also kept for reconciliation and fraud prevention.
• Identity verification: Verifying who you are before processing large withdrawals protects you from unauthorised withdrawals from your account. It's also a standard anti-money-laundering measure for financial platforms.
• Platform improvement: Aggregated and anonymised data about how games are played, which features are used and where players drop off helps us improve the experience on the platform over time.
• Security and fraud prevention: Device data, IP addresses and session information help us detect suspicious activity such as multiple accounts from the same device, unusual login locations or patterns consistent with fraud.
• Responsible gaming: Gaming activity history allows 89ef to provide responsible gaming tools such as deposit limits, session reminders and activity summaries. Players who have set spending limits can check their usage against those limits within their account.
• Customer support: Support interaction records help us provide consistent, context-aware assistance. When you contact support, the agent can see relevant account history to help resolve your query without you having to repeat everything from scratch.

4. Payment Data & Financial Transactions

Given that 89ef processes real-money transactions in PKR, payment data is handled with particular care. When you make a deposit using JazzCash, Easypaisa, Raast or a bank transfer, the transaction reference and associated account identifier are recorded in your account history. This is necessary to reconcile deposits, resolve payment disputes and process withdrawals back to the correct account.

For card payments, your full card number is never stored on 89ef servers. Card transactions are processed through a PCI-DSS compliant payment gateway. The gateway tokenises your card details — meaning that even during the transaction, only a token reference is stored on our system, not the raw card number.

Transaction records — including deposit amounts, withdrawal amounts, dates and payment method references — are retained for financial record-keeping purposes. The retention period for financial transaction data may extend beyond your active account period in order to comply with standard financial record requirements.

5. Third-Party Data Sharing

89ef does not sell personal data. We do share certain data with third-party service providers who help us operate the platform. All third parties who receive data from 89ef are bound by data handling agreements that restrict how they can use the data and require them to keep it secure.

The categories of third parties we share data with include:

• Payment processors: JazzCash, Easypaisa, Raast, bank networks and card payment gateways receive the minimum data needed to process your transactions.
• Game providers: Slot, live casino and fish game providers may receive anonymised session data to facilitate gameplay and ensure their systems are running correctly.
• Identity verification services: When identity verification is required for a withdrawal, document details may be passed to a third-party KYC (Know Your Customer) verification provider for processing.
• Infrastructure and hosting: Cloud hosting, CDN and server infrastructure providers may technically have access to stored data as part of operating the platform's technology stack.
• Customer support tools: The chat and ticketing system used for support may be operated by a third-party software provider. Support interaction records are stored within that system.

In some circumstances, 89ef may be required to disclose personal data to authorities in response to a lawful request — for example, in connection with a fraud investigation or other legal process. We will only do this where required to do so and will not voluntarily disclose data beyond what is required.

6. Cookies & Tracking Technologies

The 89ef website and mobile app use cookies and similar technologies to support platform functionality, maintain your login session and gather analytics data. The types of tracking technology used include:

• Essential cookies: Required for basic platform functions including login session management, security tokens and remembering your preferences. The platform cannot function correctly without these.
• Analytics cookies: Used to understand how players navigate the platform — which pages are visited most, where users drop off in a registration flow, how long sessions last. This data is aggregated and used to improve the product.
• Security cookies: Help identify and block suspicious access patterns, including bot traffic and brute-force login attempts.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using 89ef but may affect how certain personalisation features behave. Essential cookies cannot be disabled as they are required for the platform to function.

7. Data Security

89ef uses multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss or disclosure.

• SSL/TLS encryption: All data transmitted between your device and 89ef servers is encrypted in transit using SSL/TLS. The padlock icon in your browser confirms this is active.
• Encryption at rest: Sensitive personal data stored on our servers is encrypted. This means even in the event of a server breach, raw personal data would not be readable without decryption keys.
• Access controls: Access to personal data is restricted to 89ef team members who need it for their specific role. Access is logged and audited.
• Two-factor authentication: 2FA is available for your 89ef account login. Enabling it provides an additional security layer beyond your password.
• PCI-DSS card processing: Card payment transactions are handled through a gateway that meets PCI-DSS compliance standards. Full card numbers are never stored on 89ef systems.

While we take substantial steps to protect your data, no online system is 100% immune to security risks. Players are encouraged to use a strong unique password, enable 2FA on their account and report any suspicious activity through the in-app support chat immediately.

8. How Long We Keep Your Data

89ef retains personal data for as long as your account is active and for a defined period after account closure. The exact retention period varies by data type:

• Account registration data: Retained while your account is active. Retained for a standard period post-closure for fraud prevention and legal compliance purposes.
• Financial transaction records: Retained for a minimum of several years post-transaction as is standard practice for financial record-keeping. This applies to all deposit, withdrawal and bonus transaction records.
• Identity verification documents: Retained for the duration of the account and for a defined period post-closure in accordance with standard KYC retention requirements.
• Gaming activity logs: Retained while the account is active. After account closure, gaming logs may be retained in anonymised or aggregated form for platform analytics purposes.
• Support communications: Support chat records are retained for a period sufficient to handle any follow-up queries or disputes related to the original interaction.

Data that is no longer required for any legitimate purpose is deleted or anonymised. You can request information about the specific retention period applicable to your data by contacting support.

9. Your Data Rights

As a user of 89ef you have the following rights in relation to your personal data. To exercise any of these rights, contact support through the in-app live chat or by email:

• Right to access: You can request a copy of the personal data 89ef holds about you. We will provide this in a readable format within a reasonable timeframe.
• Right to correction: If any of your personal data is inaccurate — for example, a misspelled name or incorrect date of birth — you can request that it be corrected. Some corrections may require identity verification before they are actioned.
• Right to deletion: You can request deletion of your personal data. Note that some data — particularly financial transaction records — may be retained beyond an account closure for legal compliance reasons even after a deletion request is processed.
• Right to withdraw consent: Where 89ef processes your data on the basis of your consent — for example, for receiving promotional communications — you can withdraw consent at any time through your account notification settings or by contacting support.
• Right to data portability: You can request that the personal data you provided to 89ef during registration be provided to you in a structured, machine-readable format.

89ef will acknowledge data rights requests and aim to resolve them within a reasonable period. Certain requests — particularly deletion requests — may be subject to identity verification before they are processed to ensure we're acting on the instructions of the actual account holder and not a third party.

10. Minors

89ef is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that an account has been created by a person under 18, that account will be closed immediately and any associated data will be deleted, except where financial records must be retained as described in Section 8.

If you are a parent or guardian and believe a person under 18 has registered on 89ef, contact support through the in-app chat immediately. Provide the account username or registered mobile number if available and we will investigate and take action promptly.

11. Changes to This Privacy Policy

89ef may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we provide or changes in applicable standards. The updated date at the top of the page will reflect when the policy was last changed.

For significant changes that affect how your data is used, 89ef will use reasonable efforts to notify registered users via in-app notification or email before the changes take effect. Continued use of the platform after a Privacy Policy update constitutes acceptance of the updated policy.

We recommend reviewing this page periodically. If you have questions about any specific change, contact support before continuing to use the platform.