bonus888 Privacy Policy — How We Collect, Use and Protect Your Personal Data

Introduction

This Privacy Policy ("Policy") describes how bonus888 ("we," "us," "our," "the Platform") collects, processes, stores, shares and protects the personal data of registered players and website visitors, with particular reference to users in Pakistan ("you," "your," "the Player").

bonus888 operates the online casino platform accessible at bonus888.fyi and is committed to protecting the privacy and data rights of all users. This Policy applies to all personal data processed in connection with the bonus888 platform, including data collected during account registration, PKR deposits and withdrawals, game participation, bonus claims and customer support interactions.

This Policy is written in English, which is the governing language. It should be read alongside the bonus888 Terms & Conditions and Responsible Gaming Policy, which together form the full set of agreements governing your use of the Platform.

Data Controller

For the purposes of this Privacy Policy, bonus888 is the data controller responsible for the personal data collected through the bonus888 platform. As data controller, bonus888 determines the purposes for which personal data is processed and the means by which that processing takes place.

If you have any questions, concerns or requests related to this Privacy Policy or the processing of your personal data, you may contact the bonus888 privacy and data protection team through the channels listed in Section 14 of this Policy.

Personal Data We Collect

bonus888 collects personal data from Pakistan players through several channels, including direct provision by the player during registration, automated collection during platform use, and receipt from third-party service providers. The categories of data we collect are as follows:

• Identity Data: Full legal name, date of birth, CNIC or passport number, photograph (for KYC verification). This data is collected to comply with age verification and anti-money laundering obligations.
• Contact Data: Email address and Pakistan mobile phone number. Used for account security notifications, bonus communications and withdrawal confirmations.
• Financial Data: PKR payment method details, including Easypaisa mobile wallet numbers, JazzCash numbers, bank account numbers and USDT wallet addresses. Collected exclusively for the purpose of processing deposits and withdrawals and for fraud prevention monitoring.
• Account Data: Username, hashed password, account creation date, game session history, PKR balance history, bonus claim history and responsible gaming tool settings.
• Technical Data: IP address, device fingerprint, browser type and version, operating system, login timestamps and session duration. Collected automatically when you access bonus888.fyi.
• Usage Data: Games played, bet amounts in PKR, game frequency, session lengths and feature interactions. Collected automatically through platform analytics and responsible gaming monitoring systems.
• Communication Data: Records of your interactions with the bonus888 English support team via WhatsApp, Telegram and Live Chat.

Legal Basis for Processing

bonus888 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing necessary to perform our contractual obligations to you — including operating your account, processing PKR transactions, calculating game outcomes and providing customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements — including KYC identity verification, age verification, anti-money laundering monitoring and responsible gaming obligations.
• Legitimate interests: Processing necessary for the legitimate interests of bonus888 — including fraud prevention, platform security, abuse detection and platform improvement — provided those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, informed consent — primarily for optional marketing communications such as promotional emails and bonus notifications. You may withdraw consent for marketing communications at any time.

How bonus888 Uses Your Data

Personal data collected from Pakistan players is used by bonus888 for the following purposes:

• Account management: Creating, maintaining and securing your bonus888 account, including processing the bonus888 Login authentication process and enforcing account security policies.
• Payment processing: Facilitating PKR deposits via Easypaisa, JazzCash, Raast and other accepted methods, and processing PKR withdrawal requests to the appropriate payment destination.
• KYC and compliance: Verifying player identity and age to comply with applicable legal obligations, including anti-money laundering (AML) and counter-financing of terrorism (CFT) requirements.
• Responsible gaming: Monitoring game play patterns to identify signs of problem gambling and applying responsible gaming measures including deposit limits, session reminders and self-exclusion where appropriate.
• Fraud and security: Detecting and preventing fraudulent activity, bonus abuse, collusion and other forms of platform abuse. Monitoring for unauthorised access to player accounts.
• Customer support: Responding to your enquiries, resolving disputes and processing complaints submitted to the bonus888 English support team.
• Platform improvement: Analysing anonymised and aggregated usage data to improve the bonus888 platform, game lobby, payment flows and user experience for Pakistan players.
• Marketing (with consent): Sending bonus notifications, promotional offers and casino news to Pakistan players who have opted in to receive such communications.

Cookies and Tracking Technologies

The bonus888 website uses cookies and similar tracking technologies to support platform functionality, maintain your session after bonus888 Login, and collect anonymised analytics data. The cookies used fall into the following categories:

• Essential cookies: Required for the bonus888 platform to function correctly. These include session cookies that maintain your logged-in state after bonus888 Login, CSRF protection tokens and load balancer session identifiers. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect anonymised data about how Pakistan players navigate and interact with the bonus888 platform. This data helps us identify and fix usability issues and improve the overall user experience. Analytics data is aggregated and does not identify individual players.
• Preference cookies: Store your platform preferences, such as language settings and display preferences, so they persist between sessions without requiring re-entry each time.
• Security cookies: Used by the bonus888 security and fraud detection system to identify and flag unusual access patterns, including multiple login attempts from different geographic locations in a short time period.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the bonus888 Login process and core platform features from functioning correctly.

Third-Party Data Sharing

bonus888 does not sell, rent or trade your personal data to third parties for their independent commercial purposes. Personal data is shared with third parties only in the following limited circumstances:

• Payment processors: PKR payment data is shared with the relevant payment service provider (e.g., Easypaisa, JazzCash, Raast, SadaPay) solely to the extent necessary to process your deposit or withdrawal transaction.
• KYC verification providers: Identity documents submitted for KYC verification may be processed by a certified third-party identity verification service operating under equivalent data protection standards.
• Game software providers: Game providers whose titles are hosted on the bonus888 platform receive anonymised player session data required to deliver and maintain game functionality. This data does not include your name, contact details or payment information.
• Fraud and AML screening services: Financial transaction data may be processed by third-party anti-fraud and AML screening tools to identify suspicious patterns. These providers process data under strict confidentiality agreements with bonus888.
• Legal and regulatory authorities: bonus888 may disclose personal data to law enforcement agencies, regulatory bodies or other government authorities where required by applicable law, court order or regulatory requirement.

Data Security

bonus888 implements technical and organisational security measures appropriate to the sensitivity of the personal data it processes. These measures include:

• Encryption in transit: All data transmitted between your device and the bonus888 platform is encrypted using TLS 1.2 or higher (256-bit SSL), the same standard used by major Pakistani banks and financial institutions.
• Encryption at rest: Sensitive personal data and financial data stored in bonus888's databases is encrypted using AES-256 encryption.
• Password security: Player passwords are never stored in plain text. bonus888 stores only a salted cryptographic hash of your password, meaning the original password cannot be recovered even by bonus888 staff.
• Access controls: Access to production systems and player data is restricted to authorised personnel on a strict need-to-know basis. All staff access is logged and audited.
• Regular security audits: The bonus888 platform undergoes periodic security assessments and vulnerability testing to identify and address potential weaknesses before they can be exploited.
• Two-factor authentication: bonus888 offers optional 2FA for all player accounts to provide an additional security layer protecting against credential compromise.

While bonus888 takes every reasonable step to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your bonus888 Login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Data Retention

bonus888 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal, regulatory and compliance obligations. The following general retention periods apply:

• Active accounts: Personal data associated with an active bonus888 account is retained for the lifetime of the account plus a minimum of five years following account closure, to satisfy anti-money laundering, KYC and financial regulatory record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of five years following account closure or the date of the final PKR transaction, whichever is later.
• Financial transaction records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of each transaction.
• Game session logs: Individual game round records are retained for a minimum of three years from the date of the session.
• Support communications: Customer support transcripts are retained for a minimum of two years from the date of the interaction.
• Marketing consent records: Records of your marketing consent or opt-out status are retained until three years after your account is closed.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual player.

Your Data Rights

As a bonus888 Pakistan player, you hold the following rights in relation to your personal data. These rights may be exercised by contacting the bonus888 support team using the contact details in Section 14:

• Right of access: You may request a copy of the personal data bonus888 holds about you. We will provide a copy within 30 days of receiving a verified request.
• Right to rectification: If any personal data held by bonus888 is inaccurate or incomplete, you have the right to request that it be corrected. Basic account information (email, mobile number) can be updated directly in your bonus888 account settings.
• Right to erasure: You may request that bonus888 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right is subject to legal and regulatory retention obligations described in Section 9.
• Right to restriction: You may request that bonus888 restrict the processing of your personal data in certain circumstances, such as while a complaint or dispute is being resolved.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to the processing of your personal data on the basis of legitimate interests. You may also object at any time to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Children's Privacy and 18+ Enforcement

The bonus888 platform is strictly for adults aged 18 and above. bonus888 does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the account registration process, and KYC identity verification (including age confirmation) is required before any PKR withdrawal is processed.

If bonus888 becomes aware that personal data has been collected from an individual under the age of 18, the account will be immediately closed, all associated data will be deleted, and any PKR deposit made will be returned to the funding source after deducting any winnings generated (which will be voided).

If you are a parent or guardian and believe that a minor under your care has accessed or registered an account on the bonus888 platform, please contact the English support team immediately so that the account can be investigated and closed promptly.

Marketing Communications

bonus888 may send marketing communications — including bonus offers, promotional news and casino updates — to Pakistan players who have given their explicit consent to receive such communications. Consent is collected at the point of account registration and can be updated at any time through your account notification preferences.

If you no longer wish to receive marketing communications from bonus888, you may opt out at any time by:

• Updating your notification preferences in your bonus888 account settings.
• Clicking the unsubscribe link included in any marketing email sent by bonus888.
• Contacting the bonus888 English support team to request removal from all marketing lists.

Please note that opting out of marketing communications does not affect the delivery of essential account communications — such as security alerts, KYC requests, withdrawal notifications and support responses — which are sent regardless of marketing preferences as they relate to the operation of your account.

Changes to This Privacy Policy

bonus888 reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, platform functionality or data processing practices. When material changes are made, the "Last Updated" date at the top of this Policy will be revised accordingly.

For changes that materially affect the rights of Pakistan players or the way in which personal data is processed, bonus888 will make reasonable efforts to notify active account holders via email or in-platform notification at least seven days before the changes take effect.

Continued use of the bonus888 platform after the effective date of any Privacy Policy update constitutes your acceptance of the revised Policy. We recommend bookmarking this page and reviewing it periodically to stay informed of how bonus888 handles your personal data.

Contact and Privacy Enquiries

For any questions, concerns or requests related to this Privacy Policy, or to exercise your data rights as described in Section 10, please contact the bonus888 data protection and support team through the following channels:

• Email (plain text — not a clickable link): [email protected]
• WhatsApp: Available 24/7 in English. Contact details are available within the bonus888 platform Help section.
• Telegram: Available 24/7 in English. Contact details are available within the bonus888 platform Help section.
• Live Chat: Available 24/7 directly via the bonus888.fyi website. Average first response under 3 minutes.

Privacy-related enquiries are acknowledged within two business days and fully addressed within 30 calendar days of receipt, subject to receipt of any additional information needed to verify your identity and process your request.

The bonus888 support team operates primarily in English and is aligned with Pakistan Time (PKT, UTC+5). All privacy communications are treated as confidential and are handled exclusively by authorised bonus888 staff.