8mgame Privacy Policy

1. Introduction

This Privacy Policy (hereinafter referred to as "this Policy", "the Policy" or "the Privacy Policy") describes how 8mgame (hereinafter referred to as "the Platform", "we", "us" or "our") collects, uses, stores, shares and protects the personal data of individuals who access or use the services available at https://8mgame.cam (hereinafter referred to as "the Website" or "the Platform").

8mgame operates an online gaming platform accessible primarily to users in Pakistan and serves players across major cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. By registering an Account, accessing the Website or using any Platform service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein, where consent is the applicable lawful basis.

This Policy should be read alongside the Terms & Conditions, which govern your use of the Platform as a whole. In the event of any inconsistency between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

3. Data Controller

8mgame is the Data Controller in respect of Personal Data collected through the Platform. As Data Controller, 8mgame determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing is carried out in accordance with applicable data-protection principles and the commitments set out in this Policy.

Certain processing activities — including identity verification, payment processing and fraud-detection — are carried out by third-party Data Processors acting under contractual instructions from 8mgame. These processors are permitted to use your data only for the purposes specified in their contractual arrangements with 8mgame and are required to maintain appropriate security measures.

For all privacy enquiries, including data-subject rights requests, please contact us using the details provided in Section 16 of this Policy.

4. Personal Data We Collect

8mgame collects Personal Data through several channels: directly from you during registration and account use, automatically through the technical operation of the Platform, and from third-party service providers engaged in the delivery of Platform services. The categories of data collected are described in the table below.

We do not intentionally collect data from minors. If you are under 18 years of age (or the higher minimum applicable in your jurisdiction), you must not use the Platform. See Section 13 for our policy on minors.

5. Legal Basis for Processing

8mgame relies on the following legal bases for processing Personal Data, as applicable to each processing activity:

1. Contractual Necessity: Processing is necessary to perform the contract with you — including account registration, transaction processing, withdrawal fulfilment and the delivery of gaming services.
2. Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC identity verification, anti-money laundering (AML) record-keeping, and regulatory reporting requirements.
3. Legitimate Interests: Processing is carried out in pursuit of 8mgame's legitimate business interests — including fraud prevention, platform security, responsible-gambling risk monitoring and product improvement — where those interests are not overridden by your fundamental rights and freedoms.
4. Consent: Where processing is based on consent — for example, optional analytics cookies or direct marketing communications — we will obtain your explicit consent before commencing that processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. How We Use Your Personal Data

Personal Data collected by 8mgame is used for the following purposes:

1. Account Management: To create, maintain and administer your Account, process login requests, manage password resets and deliver account-related notifications.
2. Transaction Processing: To process deposits and withdrawal requests, communicate with payment service providers and maintain financial records. Payment method references — including familiar Pakistani payment infrastructure such as bank transfers through HBL, UBL, Meezan Bank and Bank Alfalah, and mobile wallets — are used solely as payment routing references and do not imply any endorsement of gambling by those providers.
3. KYC and AML Compliance: To verify your identity and age, assess compliance with anti-money laundering obligations and fulfil regulatory reporting requirements.
4. Customer Support: To respond to support queries, investigate complaints and resolve disputes. Support communications are handled in English and Urdu.
5. Responsible Gambling: To monitor usage patterns, apply and enforce self-exclusion and limit settings, and flag accounts that may present a responsible-gambling concern for appropriate intervention.
6. Fraud and Security: To detect, investigate and prevent fraudulent activity, account abuse, bonus exploitation and other prohibited conduct as defined in the Terms & Conditions.
7. Platform Improvement: To analyse aggregated usage data for the purposes of improving Platform performance, game selection, user experience and technical reliability.
8. Marketing Communications: To send promotional communications where you have provided consent to receive them. You may opt out of marketing communications at any time by contacting support or following the unsubscribe instructions in any marketing email.

7. Data Sharing and Disclosure

8mgame shares Personal Data only in the circumstances and with the categories of recipients described below. We do not sell, rent or exchange Personal Data with third parties for commercial or marketing purposes.

7.1 Service Providers (Data Processors)

We share Personal Data with third-party service providers engaged to deliver components of our Platform services. These include payment processing providers, KYC and identity-verification services, fraud-detection platforms, cloud infrastructure providers and customer-support software operators. All processors are contractually bound to process data only on 8mgame's instructions and to maintain appropriate security standards.

7.2 Legal and Regulatory Disclosure

We may disclose Personal Data to law enforcement agencies, regulatory authorities, courts or other official bodies where we are legally obligated to do so, or where disclosure is necessary to prevent or detect crime, protect the rights or property of 8mgame, or protect the safety of any person.

7.3 Business Transfer

In the event that 8mgame undergoes a merger, acquisition, sale of assets or other business transfer, Personal Data held on the Platform may form part of the transferred assets, subject to the acquiree maintaining data-protection standards consistent with those described in this Policy. Affected Users will be notified in advance where reasonably practicable.

7.4 Consent-Based Disclosure

We may share Personal Data with third parties outside the categories above where you have provided explicit, informed consent to such sharing. You may withdraw consent at any time by contacting us using the details in Section 16.

8. Data Retention

8mgame retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

1. Active Account Data: Personal Data associated with an active Account is retained for the duration of the Account relationship.
2. Post-Closure Retention: Following the closure of an Account, identity, KYC and transaction records are retained for a minimum period required by applicable AML and financial-record-keeping regulations — typically five (5) to seven (7) years from the date of the last transaction, depending on the regulatory framework applicable to the operator.
3. Communications Data: Support correspondence and live-chat transcripts are retained for a period of two (2) years from the date of the communication, or longer where a complaint or legal matter remains unresolved.
4. Technical and Usage Data: Server logs and session data are retained for a maximum of twelve (12) months unless a longer retention period is required for fraud investigation or legal proceedings.
5. Marketing Data: Where you have consented to marketing communications, your contact details and communication preferences are retained until you withdraw consent or your Account is closed.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9. Cookies and Similar Technologies

The Platform uses cookies and similar technologies to enable core functionality, remember your preferences and collect analytical data to improve the user experience. The following categories of cookies are in use:

You can manage cookie preferences through your browser settings. Please note that disabling essential or functional cookies will impair the operation of the Platform. Detailed instructions for managing cookies in popular browsers are available from the browser's own help documentation.

10. Data Security

8mgame implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) via HTTPS. The presence of a padlock icon in your browser's address bar confirms an active secure connection.
• Access Controls: Access to systems containing Personal Data is restricted to authorised personnel on a need-to-know basis, protected by role-based access controls and multi-factor authentication for administrative systems.
• Storage Security: Sensitive data — including KYC documents, financial records and identity information — is stored in encrypted form with access logging and monitoring.
• Fraud and Intrusion Detection: The Platform operates continuous monitoring for unauthorised access attempts, unusual account activity and potential security incidents.
• Third-Party Security Standards: Data Processors engaged by 8mgame are required to demonstrate and maintain appropriate security standards as a condition of their engagement.

While 8mgame takes data security seriously, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us promptly if you suspect any unauthorised access to your Account.

11. International Data Transfers

8mgame may transfer Personal Data to, and process it in, countries other than your country of residence as part of the operation of its Platform infrastructure and third-party service-provider relationships. These countries may include jurisdictions that operate under data-protection frameworks different from those applicable in Pakistan.

Where Personal Data is transferred internationally, 8mgame takes steps to ensure that an appropriate level of protection is maintained, including through the use of contractual data-transfer safeguards with receiving parties. By using the Platform, you acknowledge and consent to such international transfers where necessary for the delivery of Platform services to you.

12. Your Data Protection Rights

Subject to applicable law and certain exemptions — particularly those arising from AML, fraud-prevention and legal-proceedings obligations — you have the following rights in respect of Personal Data that 8mgame holds about you:

To exercise any of the above rights, please contact us using the details in Section 16. We will acknowledge your request within five (5) business days and aim to fulfil it within one (1) calendar month. Where a request is complex or involves a large volume of data, this period may be extended by a further two (2) months with advance notice.

We reserve the right to refuse requests that are manifestly unfounded, excessive or repetitive, or where legal retention obligations require continued processing of the relevant data. In such cases, we will provide written reasons for the refusal.

13. Minors and Age Verification

The Platform is intended exclusively for use by adults aged eighteen (18) years or older — or the higher minimum age required by the operator or the applicable licence jurisdiction. We do not knowingly collect Personal Data from minors.

Where 8mgame discovers or reasonably suspects that a minor has registered an Account or provided Personal Data, the Account will be immediately suspended and the relevant data securely deleted as soon as practically possible. Any Real Money funds will be returned to their source via the original payment method following identity verification of the deposit origin.

Parents and guardians are encouraged to use parental-control software to restrict access to gambling platforms by minors. 8mgame does not accept any liability for minors accessing the Platform in circumvention of its age-verification controls.

14. Third-Party Links and Services

The Platform may from time to time reference third-party services in an informational context — for example, familiar Pakistani payment infrastructure such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced as payment method categories only. None of these providers are affiliated with or endorsed by 8mgame for gambling purposes, and 8mgame is not responsible for the privacy practices of these or any other third-party entities.

This Policy applies exclusively to data collected and processed by 8mgame through the Platform. Any data you provide directly to a third-party payment provider, financial institution or other external service is subject to that party's own privacy policy and terms of service, which you are encouraged to review independently.

15. Changes to This Privacy Policy

8mgame reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they substantially affect the nature of processing or your rights — we will notify registered account holders by email to their registered address and/or by on-platform notification, with the revised Policy taking effect on the stated effective date.

We encourage you to review this Policy periodically to stay informed about how your Personal Data is being handled. The effective date at the top of this Policy indicates when it was last reviewed. Continued use of the Platform following the publication of a revised Policy constitutes acceptance of the updated terms.

16. Contact Us — Privacy Enquiries

For all privacy-related enquiries — including data-subject rights requests, consent withdrawals, complaints and general questions about how your Personal Data is handled — please contact the 8mgame privacy team through the following channels:

• Email: [email protected] — target response within 5 business days for privacy requests
• Subject line for rights requests: Please use "Data Subject Request — [Your Full Name]" as the email subject line to ensure prompt routing to the privacy team
• Support Ticket: Submit a formal privacy request via the account support ticket system for case-tracked handling

When submitting a data-subject rights request, you will be required to provide sufficient information to verify your identity before we can process the request. This is a standard safeguard to prevent unauthorised access to Personal Data by third parties purporting to act on a User's behalf.

If you are dissatisfied with our handling of a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority in the operator's licensing jurisdiction.