at888 Privacy
Policy

at888 ("we", "us", "our", "the Platform") operates the online betting and casino services available at at888.pro. at888 is the data controller in respect of personal data collected through its platform and is responsible for determining the purposes and means of processing that data in accordance with applicable data protection laws and its international gaming license obligations.

For the purposes of this Privacy Policy, "you", "your", and "User" refer to any individual who accesses, browses, registers on, or otherwise interacts with the at888 platform, whether as a registered account holder or as a visitor to the website. This Policy applies to all data collected via at888.pro, including through mobile browser access.

at888 collects personal data that you provide directly, data generated by your use of the platform, and in certain cases data received from third parties as part of identity verification or payment processing. The categories of personal data at888 may collect include the following:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used for age verification — minimum 21 years required).
• Email address and/or Pakistani mobile number used to create your at888 account.
• Residential address, including city (e.g., Karachi, Lahore, Faisalabad, Islamabad).
• Government-issued identity documents submitted for KYC purposes (CNIC, Passport, Driver's Licence).
• Proof of address documents (utility bill, bank statement, or mobile money account statement).
• Selfie or live photo submitted as part of identity verification where required.

• Payment method identifiers: JazzCash number, EasyPaisa number, bank account details (account title, bank name, IBAN), USDT TRC20 wallet addresses.
• Deposit amounts, dates, and transaction reference numbers.
• Withdrawal requests, amounts, destinations, and processing status.
• Account balance history and bonus utilisation records.
• Source of funds information where requested under AML compliance procedures.

• Complete bet and wager history across all at888 sportsbook markets and casino games.
• Game session data including duration, stakes, and outcomes.
• Bonus and promotion opt-in and utilisation records.
• Responsible gaming tool usage (limit settings, cooling-off activations, self-exclusion requests).

• IP address and general geographic location derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps, login and logout records.
• Cookies and similar tracking technology data (detailed in Section 7).
• Clickstream data and page interaction patterns for platform improvement.

• Support ticket content, live chat transcripts, and email correspondence with at888 teams.
• Feedback, survey responses, and voluntary information you share with at888.

at888 collects personal data through the following means:

The primary source of personal data on at888 is information you provide directly — during registration, when completing KYC verification, when making a deposit or withdrawal request, when contacting customer support, and when participating in promotions or surveys. You control what you share in these interactions.

When you access at888.pro, certain data is collected automatically through cookies, server logs, and analytics tools. This includes your IP address, device identifiers, session data, and behavioural data about how you navigate the platform. This automatic collection occurs whether or not you are logged into an at888 account.

at888 may receive data about you from third parties in specific circumstances: from identity verification service providers during KYC processing; from payment processors when confirming the status of a deposit or withdrawal transaction; from fraud prevention and AML screening services; and where permitted, from publicly available sources for compliance verification purposes.

at888 uses your personal data only for the purposes described below. We do not sell your personal data to third parties for their own marketing purposes.

at888 processes your personal data only where it has a valid legal basis to do so. The legal bases at888 relies upon are as follows:

• Contractual Necessity: Processing required to fulfil the agreement between you and at888 — including account management, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws — including KYC/AML regulations, responsible gaming obligations under at888's international gaming license, and financial reporting requirements.
• Legitimate Interest: Processing for purposes where at888 has a legitimate business interest that is not overridden by your privacy rights — including fraud prevention, platform security, analytics, and dispute resolution.
• Consent: Processing based on your freely given, specific, and informed consent — such as receiving promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

at888 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. at888 shares data only in the following defined and controlled circumstances:

at888 engages trusted third-party service providers who process data on at888's behalf under binding data processing agreements. These include: KYC and identity verification providers; payment processors (JazzCash API, EasyPaisa, bank systems, crypto network providers); customer support platform providers; platform analytics and security services. All processors are contractually required to handle your data in accordance with at888's instructions and to implement appropriate security measures.

Game providers supplying casino and slot content to the at888 platform (such as Pragmatic Play, PG Soft, Jili, Ezugi, and Evolution Gaming) may receive session-level gameplay data necessary to deliver and record game results. These providers are certified under their own regulatory frameworks and are subject to data sharing restrictions in at888's provider agreements.

at888 may disclose personal data to its licensing authority, financial intelligence units, law enforcement agencies, or other regulatory bodies where required to do so by law, court order, or as part of its obligations under its gaming license. at888 will endeavour to notify affected users of such disclosures where legally permitted to do so.

In the event of a merger, acquisition, or sale of all or substantially all of at888's assets, personal data held by at888 may be transferred to the acquiring entity, subject to the acquiring entity assuming the same data protection obligations described in this Policy. Affected users will be notified of any such transfer in advance where feasible.

at888 uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, prevent fraud, and understand how the platform is used. A "cookie" is a small text file placed on your device by your browser when you visit at888.pro.

• Essential Cookies: Required for the platform to function — session management, login state, security tokens. Cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, odds format, and display preferences. Improve your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform — which pages are visited most, where users drop off, and how navigation is used. Help at888 improve the platform for all users.
• Security Cookies: Used to detect fraudulent login attempts, identify unusual access patterns, and protect your at888 account from unauthorised access.

You can manage or delete cookies through your browser settings. However, disabling essential cookies will prevent the at888 platform from functioning correctly — you will not be able to maintain a login session or place bets with essential cookies blocked. Non-essential cookies can be disabled without affecting core platform functionality.

at888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law and licensing obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, at888 will securely delete or anonymise your personal data. Anonymised data (from which you cannot be identified) may be retained indefinitely for aggregate statistical analysis.

at888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The security infrastructure protecting at888 user data includes the following measures:

• TLS/SSL Encryption: All data transmitted between your device and at888's servers is encrypted using industry-standard TLS (Transport Layer Security) with 256-bit encryption, the same standard applied by major international financial institutions.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form in at888's database infrastructure. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within at888's operational systems is restricted on a need-to-know basis. Staff with access to user data are subject to confidentiality obligations and background checks.
• Session Security: at888 implements session timeout, device monitoring, and anomalous login detection to protect account access. Unusual login activity may trigger additional verification steps.
• Third-Party Security Standards: All third-party processors with whom at888 shares personal data are contractually required to maintain security standards at minimum equivalent to those applied by at888.

Subject to applicable law and at888's legal obligations (including AML and license compliance requirements which may restrict some requests), you have the following rights in respect of your personal data held by at888. To exercise any of these rights, contact at888 at [email protected] with a clear description of your request and sufficient information to identify your account.

at888 will respond to all valid privacy rights requests within 30 calendar days of receipt. Where a request is complex or relates to a large volume of data, at888 may extend this period by a further 60 days, with notification to you within the initial 30-day period. at888 will not charge a fee for handling reasonable rights requests.

at888 supports USDT TRC20 and other cryptocurrency payment methods. It is important for Pakistani players to understand the specific privacy considerations that apply to crypto transactions on the at888 platform:

Cryptocurrency transactions are recorded permanently on a public blockchain. While at888 generates unique deposit wallet addresses for each transaction to reduce traceability to the at888 platform, the transaction itself — including the sending and receiving wallet addresses and the amount — is publicly visible on the blockchain ledger. Players using crypto for privacy should be aware of this inherent characteristic of public blockchains.

USDT TRC20 wallet addresses used for deposits and withdrawals are stored by at888 as part of your financial transaction records. This information is subject to the same retention, security, and access controls as all other financial data on the platform. at888 does not use your wallet address for any purpose other than processing the specific transactions associated with it.

Cryptocurrency transactions on at888 are subject to the same AML (Anti-Money Laundering) and KYC obligations as fiat transactions. Large or unusual crypto deposits may trigger enhanced due diligence procedures, including requests for source-of-funds documentation. at888's crypto transactions are monitored using blockchain analytics tools to identify transactions associated with illicit activity in compliance with its licensing obligations.

at888 is strictly prohibited to persons under the age of 21 years. at888 does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the at888 registration and KYC process — the platform requires users to confirm their date of birth during registration and to provide documentary proof of age where requested.

If at888 discovers or has reasonable grounds to believe that it has collected personal data from a person under 21 years of age, it will immediately suspend the relevant account, refund any real-money deposits to the depositing payment method, and permanently delete all personal data associated with the account from its active systems. Regulatory retention obligations that apply to the transaction records may prevent deletion of certain financial records, which will be retained in a restricted archive.

at888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. The current version of this Privacy Policy, with its effective date, is always available at at888.pro/privacy-policy.

When material changes are made to this Policy — changes that significantly affect how at888 uses your personal data or the rights available to you — at888 will notify registered users through a prominent notice on the platform or by email to the address associated with your account, at least 14 days before the changes take effect. For non-material changes (such as clarifications of existing practices or typographical corrections), the updated Policy will be published without advance notice.

Your continued use of the at888 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept any revision to this Policy, you should discontinue your use of the platform and may request account closure by contacting at888 support.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a complaint about how at888 has handled your personal data, please contact us using the following details:

• Privacy Contact: [email protected] — mark the subject line "Privacy Request" or "Privacy Complaint" for priority routing to the privacy team.
• Live Chat: Available within the at888 platform when logged in. Advise the agent that your query is privacy-related and it will be escalated to the appropriate team.
• Response Time: at888 aims to acknowledge all privacy requests within 48 hours and to resolve straightforward requests within 14 days. Complex requests (such as full data access reports) may take up to 30 days.

If you are not satisfied with at888's response to a privacy complaint, you have the right to escalate your complaint to at888's licensing authority, which maintains a dispute resolution and complaints process accessible to registered players. Details of the relevant authority can be provided on request.

This Privacy Policy was last reviewed and updated on 1 January 2026. The English language version is the authoritative version of this document.