Privacy Policy

This Privacy Policy ("Policy") describes how 8bat ("8bat", "we", "us", "our") collects, processes, stores, discloses and protects the personal data of individuals ("User", "you") who access or use the website located at https://8bat.cam ("Platform") and any services, features or content provided through it.

8bat is an online betting and casino information platform. In the course of providing its services, 8bat necessarily processes certain categories of personal data. This Policy is intended to provide you with a clear and transparent account of those practices, in accordance with applicable data protection principles.

By accessing the Platform, creating an Account or otherwise engaging with 8bat's services, you acknowledge that you have read and understood this Policy. This Policy is to be read alongside our Terms & Conditions, which govern your use of the Platform as a whole.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a natural person — directly or indirectly. Examples include your name, CNIC number, email address, IP address and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. In this context, 8bat acts as, or on behalf of, the Data Controller for user data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of their Personal Data.
• "KYC" means Know Your Customer — the identity and age verification process required to comply with anti-money laundering and responsible gambling obligations.
• "Cookie" means a small file placed on your device by a website server that stores information about your browsing activity or session preferences.

Depending on how you interact with the Platform, 8bat may collect the following categories of personal data:

We do not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data) unless expressly required for identity verification purposes under applicable KYC regulation.

We collect personal data through the following channels:

• Direct Submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support or participating in promotions.
• Automated Technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, log files and similar tracking technologies. This includes your IP address, device identifiers and navigation patterns.
• Third-Party Sources: Where permitted, we may receive data from identity verification providers, fraud prevention services and payment processing partners. All such third parties are required to handle data in compliance with applicable data protection obligations.
• Publicly Available Sources: In limited circumstances relevant to fraud detection or KYC compliance, we may consult publicly available records.

Where internationally recognised data protection principles apply, 8bat processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to — including operating your Account, processing transactions and providing Services.
• Legal Obligation: Processing necessary to comply with applicable legal or regulatory requirements, including anti-money laundering (AML) obligations, KYC mandates and any lawful order from a competent authority.
• Legitimate Interests: Processing necessary for our legitimate interests, such as preventing fraud, improving platform security, analysing usage patterns and maintaining business records — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the lawful basis for processing (for example, for certain marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

8bat uses the personal data it collects for the following purposes:

• Creating, verifying and managing your Account on the Platform.
• Processing financial transactions in PKR, including deposits and withdrawals, in accordance with the Operator's cashier processes.
• Conducting identity and age verification (KYC) to confirm eligibility and comply with applicable regulatory requirements.
• Detecting, investigating and preventing fraudulent, criminal or abusive activity on the Platform.
• Monitoring gameplay and account activity to identify problem gambling patterns and apply responsible gambling interventions where appropriate.
• Communicating with you about your Account, including confirmations, security alerts, important policy updates and support responses.
• Sending promotional communications about 8bat offers, where you have provided consent to receive such communications and have not subsequently withdrawn that consent.
• Improving the Platform's functionality, design and content through analysis of aggregated usage data.
• Complying with applicable legal and regulatory obligations.

8bat does not sell, rent or trade your personal data to third parties. We may, however, share your data with the following categories of recipients where necessary:

• The Operator: The licensed entity that operates the betting and casino services accessible through 8bat. The Operator acts as a data controller in respect of activities conducted through its platform and is subject to its own data protection obligations under its licensing terms.
• Identity Verification and KYC Providers: Third-party services that assist in verifying your identity and age before withdrawals are processed. These providers are bound by contractual data processing terms.
• Payment Processors: Where you initiate a deposit or withdrawal, relevant financial data may be shared with the applicable payment processor. Payment brands referenced on this site — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned as contextual references only. Their inclusion does not indicate that they are active data processors for 8bat or that they endorse gambling services.
• Fraud Prevention and Security Services: Providers that help detect and prevent unauthorised access, money laundering and betting fraud.
• Legal and Regulatory Authorities: Where 8bat is required by law, court order or regulatory direction to disclose personal data, we will comply with such obligations. Where lawfully possible, we will notify affected users of such disclosure.
• Professional Advisors: Lawyers, auditors and consultants, where disclosure is strictly necessary for the provision of professional services and subject to confidentiality obligations.

In all cases where personal data is shared with third parties, we require appropriate contractual or legal safeguards to be in place to protect that data.

8bat uses cookies and similar technologies (such as web beacons and local storage) to ensure the Platform functions correctly, to remember your preferences and to collect analytical data about Platform usage.

The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to operate. These enable core functions such as session management, security and navigation. They cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings or display preferences — to improve your experience across sessions.
• Analytical / Performance Cookies: Collect anonymised or aggregated data about how users interact with the Platform — for example, which pages are most visited and where errors occur. This information is used solely to improve the Platform.

You can manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. Most modern browsers on Android and iOS devices — commonly used across Karachi, Lahore and Islamabad — include accessible cookie management controls in their settings menus.

8bat retains personal data for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or regulatory obligation.

In practice, this means:

• Account data is retained for the duration of your Account's active status and for a defined period thereafter, to comply with AML record-keeping requirements and to handle any outstanding disputes.
• KYC documentation is retained for the period required by the Operator's licensing terms, which typically extends beyond account closure.
• Transaction records in PKR are retained as required for financial and regulatory compliance purposes.
• Support communication records are retained for a reasonable period to enable quality review and dispute resolution.
• Where data is no longer required and no legal retention obligation applies, it is securely deleted or anonymised.

You may request information about the specific retention periods applicable to your personal data by contacting us at the details in Section 16.

8bat implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures are designed to reflect the sensitivity of the data held and the risks associated with its processing.

Security measures in place include, but are not limited to:

• Encryption of data in transit using industry-standard TLS protocols.
• Access controls that restrict internal access to personal data to authorised personnel only, on a need-to-know basis.
• Regular review of security practices and data handling procedures.
• Contractual security requirements imposed on third-party data processors.

Notwithstanding these measures, no internet transmission or electronic storage system can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights and freedoms, 8bat will notify affected users in accordance with applicable legal requirements.

As an international platform, 8bat may transfer your personal data to countries outside Pakistan for processing or storage purposes — for example, to the jurisdiction in which the Operator is licensed or where our technology infrastructure is hosted.

Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data. This may include contractual protections between 8bat and the receiving party, such as standard data protection clauses that impose obligations equivalent to those applicable in the originating jurisdiction.

By using the Platform, you acknowledge that your personal data may be transferred and processed outside Pakistan in accordance with this Policy.

Subject to applicable law and satisfactory verification of your identity, you have the following rights with respect to your personal data held by 8bat:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right is not absolute — legal or regulatory retention obligations may prevent erasure of specific data categories.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in defined circumstances, for example while a correction request is pending.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that we provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, subject to our demonstrating compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us using the details provided in Section 16. We will respond to all legitimate requests within a reasonable timeframe, and in any event within the timeframe required by applicable law. We may request proof of identity before processing a data rights request.

The 8bat Platform is strictly for adults aged 18 or older — or the higher minimum age required by the Operator's licence jurisdiction. We do not knowingly collect personal data from individuals under the required minimum age.

If you are a parent or guardian and believe that a minor has provided personal data to 8bat, please contact us immediately at the details in Section 16. Upon confirmation, we will take prompt steps to delete the relevant data and close any associated Account.

Age verification is a mandatory part of the KYC process on 8bat. Any Account found to be registered by or operated on behalf of a minor will be immediately suspended and all associated data handled in accordance with applicable law.

The 8bat Platform may contain references to, or integrations with, third-party services — such as payment processors or game providers — that operate under their own privacy policies and terms of service. 8bat is not responsible for the privacy practices of any third party, and this Policy applies exclusively to data processed by or on behalf of 8bat.

We encourage you to review the privacy notices of any third-party service you interact with through or in connection with the Platform.

8bat reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal obligations or Platform features. The "Last Reviewed" date at the top of this document will be updated each time a material change is made.

Where a change is material — for example, a change to the categories of data collected, the purposes for which it is used, or the parties with whom it is shared — we will endeavour to notify registered users via email or through an in-Platform notification.

Your continued use of the Platform after any update to this Policy constitutes your acknowledgement of the revised terms. If you do not accept the updated Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

If you have questions, concerns or requests relating to this Privacy Policy or to the personal data 8bat holds about you, please contact our support team using the details below:

To protect your privacy, we will verify your identity before actioning any data access, correction or deletion request. Please include your registered Account username and a clear description of your request in all correspondence.

We are committed to resolving all privacy-related queries fairly, transparently and within a reasonable timeframe. If you are not satisfied with our response, you may have the right to escalate your complaint to a relevant supervisory authority in the jurisdiction applicable to you.