At bf88 we take the privacy of our Pakistani users — and every player on our platform — with the same seriousness we apply to game integrity and account security. This Privacy Policy explains precisely what personal information bf88 collects, why we collect it, how we protect it, who we share it with, and what rights you have over your own data.
Six core promises bf88 makes to every user regarding their personal data
bf88 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data is used solely in connection with operating the bf88 platform and fulfilling our legal obligations.
All data transmitted between your device and the bf88 platform is protected by 256-bit SSL/TLS encryption. Payment information and identity documents submitted during KYC are encrypted at rest using industry-standard protocols in secure, access-controlled environments.
bf88 collects only the personal data that is necessary for the specific purpose for which it is being processed. We do not gather data speculatively. Every data point we hold can be traced to a defined operational, legal, or regulatory purpose.
Access to your personal data within bf88 is restricted on a strict need-to-know basis. Only authorised personnel whose role genuinely requires access to specific data categories may view that data. All internal access is logged and regularly audited.
Subject to legal retention requirements, you can request access to the data bf88 holds about you, request correction of inaccurate data, or in certain circumstances, request its deletion. bf88 will respond to all data rights requests within 30 days of receipt.
This Privacy Policy is written in plain, accessible English — not buried in impenetrable legal jargon. If we change how we use your data in any material way, we will notify you directly before those changes take effect. No silent policy rewrites.
bf88 is an internationally licensed online gaming platform operated by its parent entity under a recognised international gaming authority licence. The bf88 platform is accessible at bf88.lol and serves registered users globally, with a primary focus on providing a high-quality, PKR-native gaming experience to players located in Pakistan, including in cities such as Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and Peshawar.
For the purposes of this Privacy Policy, bf88 acts as the data controller in respect of all personal data collected from users of the Platform. This means bf88 determines the purposes and means by which your personal data is processed.
This Privacy Policy applies to all personal data collected by bf88 through the following channels:
This Policy does not apply to the privacy practices of third-party payment processors, game providers, or other external services that may be linked to or integrated within the bf88 Platform. Those entities operate under their own privacy policies, which bf88 encourages you to review independently.
bf88 collects the following categories of personal data from its users:
| Data Category | Examples |
|---|---|
| Identity Information | Full legal name, date of birth, CNIC number, passport number, nationality |
| Contact Information | Email address, Pakistani mobile number (Jazz, Zong, Ufone, Telenor, Warid), residential address |
| Account Credentials | Username, hashed password (never stored in plain text), security question answers |
| KYC Documents | Scanned copies or photographs of government-issued ID, proof of address documents |
| Data Category | Examples |
|---|---|
| Payment Method Details | JazzCash account number, EasyPaisa account number, bank account details (HBL, UBL, Meezan), USDT wallet address |
| Transaction Records | Deposit amounts in PKR, withdrawal amounts, transaction timestamps, payment method used per transaction |
| Gaming Activity | Bets placed, games played, wins and losses, bonus usage history, session durations |
When you access the bf88 Platform, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, links clicked, and the date and time of your visits. This data is collected via server logs, cookies, and similar tracking technologies described further in Section 8.
We retain records of communications between you and bf88, including live chat transcripts, email correspondence, and records of telephone calls where permitted by applicable law. These records are maintained for customer service quality assurance, dispute resolution, and regulatory compliance purposes.
bf88 collects your personal data through the following means:
bf88 processes personal data only where a valid legal basis exists for doing so. The following table sets out the primary purposes for which bf88 processes your data and the corresponding legal basis for that processing:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (Terms & Conditions) |
| Processing deposits and withdrawals in PKR | Performance of contract |
| Age verification (21+ enforcement) | Legal obligation / Performance of contract |
| KYC identity verification | Legal obligation (AML/gaming licence requirements) |
| Fraud detection and prevention | Legitimate interests of bf88 and platform users |
| Customer support and dispute resolution | Performance of contract / Legitimate interests |
| Responsible gaming monitoring | Legal obligation / Legitimate interests |
| Regulatory reporting and AML compliance | Legal obligation |
| Platform improvement and analytics | Legitimate interests of bf88 |
| Personalised marketing communications | Consent (where provided) |
bf88 does not sell your personal data. We share your personal data only in the following limited and controlled circumstances:
bf88 works with carefully selected third-party service providers who process personal data on our behalf and under our instructions. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT gateway operators), identity verification service providers, fraud detection platforms, cloud hosting providers, and customer communication tools. All such processors are bound by data processing agreements that require them to maintain appropriate security standards and restrict processing to the purposes for which they were engaged.
The games available on the bf88 Casino platform are supplied by third-party software providers. These providers may receive limited game-play data (such as bet amounts and game outcomes) to facilitate real-time gaming sessions. Providers are contractually prohibited from using this data for any purpose other than enabling the game session.
bf88 may disclose your personal data to law enforcement agencies, regulators, gaming authorities, or courts where required by applicable law or where bf88 has a good-faith belief that disclosure is necessary to: comply with a legal obligation; protect the rights, property, or safety of bf88, its users, or the public; detect, investigate, or prevent fraud or other criminal activity.
In the event of a merger, acquisition, restructuring, or sale of all or part of bf88's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices of the successor entity before your data is transferred.
Given the international nature of the bf88 platform's operations and the global deployment of some of our service providers, your personal data may be transferred to and processed in countries outside of Pakistan. Where such transfers occur, bf88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that which it would receive within a jurisdiction with strong data protection laws.
Safeguards employed by bf88 for international transfers include contractual protections with data processors, adherence to the requirements of our applicable gaming licence regarding data handling, and technical security measures that apply regardless of geographic location.
The bf88 Platform uses cookies and similar tracking technologies to operate correctly, improve user experience, and gather analytics data. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used by bf88:
You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled through the browser settings without also disabling Platform access.
bf88 retains your personal data for only as long as is necessary for the purposes for which it was collected, including satisfaction of any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years post-closure |
| KYC identity documents | Duration of account + 5 years post-closure (regulatory requirement) |
| Financial transaction records | 7 years from transaction date (AML compliance) |
| Customer support communications | 3 years from last interaction |
| Gaming activity logs | 5 years from account closure |
| Marketing consent records | Until consent withdrawn + 3 years |
| Technical / server log data | 13 months from collection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bf88's internal data lifecycle management procedures.
bf88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
Subject to applicable law and legitimate regulatory restrictions, you have the following rights in respect of the personal data that bf88 holds about you. To exercise any of these rights, please contact bf88 using the details provided in Section 16. bf88 will respond to all valid data rights requests within thirty (30) days of receipt.
The bf88 platform is strictly for adults aged 21 years and above. bf88 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.
If you believe that a minor may have accessed the bf88 Platform, please contact us immediately using the contact details in Section 16 so we can investigate and take appropriate action.
bf88 may send you promotional and marketing communications about platform features, bonuses, cricket season offers, PSL promotions, new slot releases, and other relevant content — but only where you have provided your consent to receive such communications at the time of registration or at a later point through your Account settings.
You may withdraw your consent to receive marketing communications at any time by updating your communication preferences within your bf88 Account settings, or by contacting the bf88 support team. Following withdrawal of consent, bf88 will remove you from all marketing lists within a reasonable timeframe, which will not exceed five (5) business days.
Note that withdrawal of marketing consent does not affect transactional communications — bf88 will continue to send you communications that are strictly necessary to administer your Account, such as deposit confirmations, withdrawal notifications, security alerts, and account verification requests.
The bf88 Platform may contain links or references to third-party websites, services, or applications — including game providers, payment platform portals, or sports data services. This Privacy Policy applies solely to data processed by bf88. bf88 has no control over the privacy practices, data collection methods, or content of third-party platforms and accepts no responsibility for them.
bf88 strongly recommends that you review the privacy policy of any third-party platform you access through a link originating from the bf88 website before providing any personal information to that platform.
bf88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or operational requirements. Material changes — that is, changes that meaningfully affect how your personal data is used — will be communicated to registered users by email to the address held on their Account, or through a prominent in-platform notice, at least fourteen (14) days before the revised Policy takes effect.
Minor or non-material changes (such as formatting updates or clarifications that do not alter the substance of the Policy) may be made without advance notice. The current version of the Privacy Policy is always available at bf88.lol/privacy-policy. The effective date at the top of this document indicates when the current version became operative.
Your continued use of the bf88 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bf88 holds about you, please contact us through the following channels:
bf88 aims to respond to all privacy-related enquiries and data rights requests within thirty (30) calendar days. Where a request is complex or where a high volume of requests has been received, this period may be extended by a further sixty (60) days, provided we notify you of the extension within the initial thirty (30) day period.
A plain-English summary of your key data rights as a registered bf88 user
Request a full copy of the personal information bf88 holds about your account, including transaction records, KYC status, and gaming history. We provide this within 30 days of a valid request.
If any personal data bf88 holds about you is incorrect, outdated, or incomplete, you have the right to request its correction. Update basic details directly in your Account settings or contact support for KYC document corrections.
In circumstances where bf88 no longer has a legal basis to hold your data, you may request its deletion. Note that AML and gaming licence regulations require retention of certain records for defined periods that cannot be shortened at your request.
Where processing is based on your consent or a contract with you, request your personal data in a structured, machine-readable format (such as CSV or JSON) that you can transfer to another service if you choose.
Request that bf88 temporarily pause the processing of your personal data in specific circumstances — for example, while you contest the accuracy of data we hold or while an objection to processing is under assessment.
Opt out of all bf88 marketing communications at any time through your Account preferences or by contacting our support team. Withdrawal of marketing consent does not affect your ability to continue using the bf88 platform.
Your personal data is protected by 256-bit SSL encryption and handled strictly according to this Privacy Policy. Sign in to your bf88 account and enjoy cricket betting, live casino, and slots in PKR — knowing your information is safe. 21+ only. Please gamble responsibly.