Data & Privacy

df88 Privacy Policy – Your Data, Your Rights

At df88, we believe you have every right to know exactly what happens to your personal information when you use our platform. This policy tells you clearly and honestly – without dense legalese – what we collect, why we collect it, who can see it, and what control you have over it.

Effective: 1 January 2025
Language: English (en-PK)
Standard: Encrypted & Secure
df88

Our Six Privacy Commitments to You

The principles that govern how df88 handles every piece of data associated with your account

Your Data is Never Sold
df88 does not sell, rent, or commercially exchange your personal information with any third party for their marketing or business purposes. Full stop. Your data exists to serve your df88 experience – nothing else.
256-Bit SSL Encryption
Every connection between your device and df88 is protected with industry-standard 256-bit SSL encryption. Your login credentials, payment details, and account data are encrypted in transit and at rest on our servers.
Minimal Data Collection
df88 collects only the data that is genuinely necessary to operate your account, process your payments, and comply with legal obligations. We do not collect information about you that serves no legitimate purpose.
You Control Your Data
You have the right to access, correct, export, and in certain circumstances delete the data df88 holds about you. These rights are available through your account settings or by contacting our support team directly at any time.
Opt-Out of Marketing
You can opt out of receiving marketing communications from df88 at any time. Each marketing message includes a clear unsubscribe option, and your preference is honoured promptly. Transactional account messages cannot be opted out of as they are essential to operating your account.
Transparent Updates
When this Privacy Policy is updated in a way that materially affects your rights, df88 will notify you through your registered contact details with reasonable notice. We also keep a clear "last updated" date on this page so you always know how current this document is.

This Privacy Policy applies to all personal data collected by df88 through the website at df88.run, its mobile interface, and any related services. By using df88, you confirm that you have read and understood this policy. If you have questions at any point, our support team is available 24/7 via live chat or at support@df88.run.

Section 01

Who We Are

df88 is an online gaming and sports betting platform operated at df88.run. We provide Pakistani players with access to sports betting, Aviator, crash games, poker, jackpot slots, and related gaming services, all denominated in PKR.

For the purposes of this Privacy Policy, df88 is the data controller – meaning we are the entity that decides how and why your personal data is processed. If you have any questions about this policy or about the data we hold about you, contact us at support@df88.run. We will respond within a reasonable timeframe.

This policy was written specifically with Pakistani players in mind. We understand the local context: the payment methods you use, the way you access the internet, and the concerns Pakistani users typically have about data privacy. We've tried to address those concerns directly and honestly.

Section 02

What Data We Collect

2.1 Information You Provide Directly

When you register and use a df88 account, you provide us with information that we need to operate the account and deliver our services. This includes:

Data TypeSpecific ExamplesWhen Collected
Identity InformationFull legal name, CNIC number, date of birth, selfie / ID photos for KYCRegistration & KYC verification
Contact InformationMobile number, email addressRegistration
Account CredentialsUsername, hashed password (never stored in plain text)Registration
Payment InformationEasypaisa / JazzCash mobile numbers, bank account details, masked card numbersDeposit & withdrawal
Support CommunicationsLive chat transcripts, email correspondenceWhen you contact support
Voluntary Profile DataPreferred sports, language preferenceAccount settings

2.2 Information Collected Automatically

When you access df88, certain technical information is collected automatically by our systems. This information is necessary for the platform to function correctly and for us to maintain security:

  • IP address and approximate geographic location
  • Device type, operating system, and browser version
  • Session timestamps and duration
  • Pages visited and features interacted with within df88
  • Betting and gaming history associated with your account
  • Transaction logs (deposits, withdrawals, bonus claims)

Note on biometric data: df88 does not collect facial recognition data, fingerprints, or any other biometric identifiers. The selfie submitted during KYC is used only for manual identity verification against your CNIC and is not processed through any facial recognition system.

df88
Section 03

How We Collect Your Data

df88 collects your personal data through the following channels:

  • Directly from you – when you fill in registration forms, submit KYC documents, contact support, or update your account settings
  • Through platform activity – automatically logged as you interact with the website, place bets, spin slots, or play other games
  • Through payment processors – when you initiate a deposit or withdrawal, the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, bank, or card network) confirms the transaction and associated details to df88
  • Through cookies and similar technologies – as described in Section 7 of this policy
  • From third-party game providers – in limited cases, game providers who host titles on df88 may share session data with us for technical support and compliance purposes

df88 does not purchase personal data lists from data brokers or third parties. Every data point we hold on you originates from your direct interaction with our platform or from the technical infrastructure required to run it.

Section 04

Why We Use Your Data

df88 processes your personal data for the following specific purposes. For each purpose, we rely on a legitimate legal basis:

PurposeData UsedLegal Basis
Account creation & management Identity, contact, credentials Contract
Processing deposits & withdrawals Payment data, identity Contract
KYC & age verification CNIC, selfie, date of birth Legal obligation
Anti-fraud & security monitoring IP, device, session, transaction logs Legitimate interest
Customer support Contact info, account history, chat logs Contract
Personalised game & bet recommendations Gaming history, preferences Legitimate interest
Marketing communications Contact info, gaming history Consent (opt-in)
Responsible gaming monitoring Session data, betting patterns Legal obligation
Platform analytics & improvement Anonymised usage data Legitimate interest

df88 does not use your personal data for any purpose not listed in this table without first seeking your explicit consent or updating this policy with appropriate notice.

Section 05

Who Can Access Your Data

5.1 Internal Access

Within df88, access to personal data is restricted on a need-to-know basis. Customer support agents can see the data necessary to assist you. The finance team can see payment records. The compliance team can see KYC documents. No single team or employee has unrestricted access to all data categories without justification and logging.

5.2 Service Providers

df88 works with a limited number of trusted service providers who may process some of your data on our behalf. These include:

  • Payment processors – Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, and card networks – who process your transaction instructions
  • Game providers – NetEnt, Pragmatic Play, Evolution, Microgaming, Play'n GO, PG Soft, Habanero, Spribe – who host games on df88 and may log session data for technical support and integrity purposes
  • KYC verification providers – who assist in processing identity documents securely
  • Cloud infrastructure providers – who host df88's servers and databases under strict data processing agreements

All third-party service providers who process data on behalf of df88 are bound by data processing agreements that require them to protect your data to the same standard as df88 and prohibit them from using your data for their own purposes.

5.3 Legal Disclosures

df88 may be required to disclose your personal data to law enforcement authorities, regulators, or courts where required by applicable law. df88 will not disclose more data than is strictly required by the specific legal request and will notify you of any such request where legally permitted to do so.

5.4 What We Will Never Do

  • Sell your data to advertising networks or data brokers
  • Share your data with third parties for their own marketing
  • Disclose your gaming history or financial data to other players
  • Transfer your data to any party outside of the described categories above
Section 06

Payment Data & Security

Handling payment data responsibly is especially important for df88 given the range of Pakistani payment methods we support. Here is specifically how we handle financial data:

  • Easypaisa and JazzCash: We store your registered wallet mobile number to process transactions. We do not store your wallet PIN or MPIN. These are entered directly with the provider during transaction initiation and never pass through df88 systems.
  • Bank account details (IBFT): Account numbers used for IBFT withdrawals are encrypted and stored only to process the specific withdrawal transaction. We retain a masked reference after processing for our transaction records.
  • Card details (Visa/Mastercard): df88 does not store full card numbers. Card transactions are processed through a PCI-DSS compliant payment gateway. Only a masked card reference is stored in our systems after processing.
  • NayaPay and SadaPay: Wallet IDs are handled under the same principles as Easypaisa and JazzCash – stored for transaction processing, never combined with PINs or security codes.

Security reminder: df88 staff will never ask you for your wallet PIN, MPIN, card CVV, bank login password, or OTP codes. Any communication requesting these is not from df88. Report it to us and do not share these details.

df88
Section 07

Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to remember certain information about your session and preferences.

7.2 How df88 Uses Cookies

Cookie TypePurposeCan Be Disabled?
Essential CookiesSession management, login state, security tokens. Without these, the platform cannot function.No – required
Functional CookiesRemembering your language preference, stake defaults, game display settings.Yes – optional
Analytics CookiesUnderstanding how players navigate df88, which features are used most, and identifying technical issues.Yes – optional
Marketing CookiesTracking promotional campaign effectiveness when you arrive via a promotion link.Yes – optional

You can control cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use df88's core features. Disabling essential cookies will prevent you from logging in and using the platform.

7.3 No Third-Party Advertising Trackers

df88 does not embed advertising network trackers (such as Google Ads remarketing pixels or social media tracking pixels) that would allow third-party advertisers to track your browsing behaviour after you leave the df88 platform. Our analytics tools track activity only within df88.run.

Section 08

Data Retention

df88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. The following specific retention periods apply:

  • Active account data: Retained for the lifetime of your account and for a period of 5 years after account closure, to satisfy financial record-keeping and anti-money laundering obligations.
  • KYC documents (CNIC copies, selfies): Retained for 5 years after account closure in accordance with applicable compliance requirements.
  • Transaction records: Retained for 7 years after each transaction date for financial record purposes.
  • Support communications: Retained for 2 years after the last interaction, then deleted unless the record relates to an unresolved dispute.
  • Analytics data: Aggregated and anonymised after 13 months. Anonymised data no longer constitutes personal data.
  • Marketing consent records: Retained for 5 years after the consent was given, even if you later opt out, as evidence of the original consent.

When retention periods expire, personal data is securely deleted or anonymised in a way that makes re-identification impossible. df88 conducts periodic data audits to ensure retention policies are followed consistently.

Section 09

Your Rights Over Your Data

As a df88 player, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via live chat or email support@df88.run:

01
🔍
Right to Access
Request a copy of all personal data df88 holds about you. We will respond within 30 days with a structured data export.
02
✏️
Right to Correction
Request correction of inaccurate or outdated personal data. Some data fields can be updated directly in your account settings.
03
🗑️
Right to Erasure
Request deletion of your personal data. This right is subject to legal retention requirements – data we are legally obliged to keep cannot be erased on request.
04
📦
Right to Portability
Request your data in a structured, machine-readable format. Useful if you want to transfer your data to another service.
05
🚫
Right to Restrict Processing
Request that df88 stops actively processing your data while retaining it – typically used during a dispute about accuracy or processing legitimacy.
06
📩
Right to Withdraw Consent
Where processing is based on your consent (such as marketing emails), you can withdraw that consent at any time. Withdrawal does not affect the legality of prior processing.

df88 will not charge you for making a data rights request. We will respond within 30 days in all but exceptional circumstances, and we will explain the reason and timeline if a request requires more time to fulfil.

Section 10

Children's Privacy

df88 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires date-of-birth entry and is subject to KYC age verification.

If you are a parent or guardian and believe that a minor has created a df88 account, contact us immediately at support@df88.run. We will investigate, close the account, void any associated transactions, and delete the minor's personal data as quickly as technically possible.

df88 takes underage access seriously not only as a legal matter but as an ethical responsibility. We cooperate fully with parents, guardians, and authorities on any reported case of underage account creation.

Section 11

Third-Party Links

The df88 platform does not contain links to external third-party websites. All links within df88 navigate to pages within df88.run or to the designated payment provider interfaces necessary to complete transactions. This Privacy Policy applies only to df88.run and does not cover any third-party platforms.

Game providers whose titles are hosted on df88 operate under their own data processing policies in relation to session data generated within their games. Where relevant, df88 has data processing agreements in place with all game providers to govern their handling of any player session data they receive.

Section 12

Policy Updates

This Privacy Policy was last updated on 1 January 2025. df88 may update this policy periodically to reflect changes in our data practices, legal requirements, or the services we offer.

When material changes are made – meaning changes that significantly affect how we collect, use, or share your personal data, or that reduce your rights – we will notify you via your registered mobile number or email address at least 7 days before the changes take effect. Minor updates, such as corrections of typographical errors or clarifications that don't change the substance of the policy, may be made without prior notification.

The date shown at the top of this page always reflects when the policy was most recently reviewed. We recommend checking this page periodically to stay informed of any developments.

By continuing to use df88 after the effective date of an updated Privacy Policy, you acknowledge that you have been notified of the update. If you do not accept the updated policy, you should close your account and cease using the platform before the effective date.

Section 13

Contact & Complaints

If you have any questions about this Privacy Policy, about how df88 handles your personal data, or if you wish to exercise any of your data rights, please contact us through the following channels:

  • Live Chat: Available directly within your df88 account – fastest response time, available 24/7
  • Email: support@df88.run – for written records of data requests, respond within 2 business days
  • FAQ: Common privacy questions are answered at df88 FAQ

If you are not satisfied with how df88 has handled a data-related complaint after following our internal process, you have the right to refer the matter to the relevant data protection authority in your jurisdiction.

df88 takes privacy complaints seriously. Every complaint is logged, assigned to a member of our compliance team, and tracked to resolution. We aim to acknowledge every complaint within 24 hours and provide a substantive response within 10 business days.

Privacy-First Gaming on df88

Play Knowing Your Data Is Protected – Join df88 Free

Register a free account on df88 in under two minutes. Deposit from Rs 100 via Easypaisa or JazzCash, and access Pakistan's biggest gaming catalogue – all in PKR, zero fees, and with your personal data handled exactly as described in this policy. No surprises.