Throughout this Privacy Policy, the following terms carry the meanings set out below:
- "br888", "we", "us", or "our" refers to the br888 online gaming platform, accessible at br888.bio and operated under an international gaming licence.
- "Platform" means the br888 website, mobile-optimised interface, and all associated services including casino games, sports betting, live dealer tables, and account management tools.
- "Player", "you", or "your" means any individual who has registered a br888 account or who accesses or browses the Platform in any capacity.
- "Personal Data" means any information that identifies or could reasonably identify you as an individual — including your name, CNIC number, date of birth, Pakistani mobile number, email address, and financial account details.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, and deletion.
- "KYC" means Know Your Customer — the identity and age verification process required before a Player may withdraw funds from their br888 account.
- "Cookies" means small data files placed on your device by the br888 Platform to support functionality, session management, and analytics.
br888 collects only the Personal Data necessary to provide a secure, compliant, and high-quality gaming experience for Pakistani players. The categories of data we collect are described in the table below:
| Data Category |
Examples |
Purpose |
| Identity Data |
Full legal name, date of birth, CNIC / passport number, nationality |
Account registration, KYC verification, age confirmation (21+) |
| Contact Data |
Pakistani mobile number, email address, city of residence (e.g., Karachi, Lahore, Islamabad) |
Account communication, support, fraud alerts |
| Financial Data |
JazzCash / EasyPaisa account number, HBL / UBL / Meezan Bank account details, transaction history |
Deposit processing, withdrawal, AML compliance |
| Gaming Data |
Bet history, game session logs, win/loss records, sports betting activity (including PSL markets) |
Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data |
IP address, device type, browser, operating system, session timestamps |
Security monitoring, fraud detection, platform optimisation |
| KYC Documents |
CNIC scan or photograph, passport data page, utility bill or bank statement |
Age and identity verification, regulatory compliance |
| Communications Data |
Live chat transcripts, support email content, complaint records |
Customer service, quality assurance, dispute records |
Data Minimisation: br888 applies a strict data minimisation principle. We do not collect Personal Data beyond what is listed above and what is reasonably necessary for the purposes described. If you have questions about a specific data point we hold on your account, contact us at
[email protected].
br888 collects Personal Data through the following channels:
- Account Registration: When you create a br888 account, you voluntarily provide your name, date of birth, mobile number, email address, and preferred payment method information.
- KYC Submission: When you submit identity or age verification documents — such as your CNIC, passport, or proof of address — in order to complete the KYC process and enable withdrawals.
- Deposits & Withdrawals: Payment processing through JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank results in the collection of transaction data including timestamps, amounts, and payment account references.
- Platform Usage: br888's systems automatically collect Technical Data — including your IP address, device identifiers, and session activity — each time you access the Platform.
- Customer Support: When you contact br888 support via live chat or email, the content of those communications is recorded for quality and dispute-resolution purposes.
- Cookies & Tracking Technologies: The br888 Platform uses cookies and similar technologies as described in Section 7 of this Policy.
br888 uses the Personal Data we collect for the following specific purposes:
- Account Management: To create and maintain your br888 account, authenticate your login sessions, and enable you to access casino games, sports betting, and other Platform features.
- Identity & Age Verification: To confirm that you are aged 21 or above and that your identity matches the account details provided, in compliance with our licensing obligations.
- Payment Processing: To facilitate PKR deposits via JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank, and to process withdrawal requests to your verified payment account.
- Responsible Gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling, in order to apply responsible gaming tools such as deposit limits or self-exclusion where appropriate.
- Fraud & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited conduct as described in the br888 Terms & Conditions.
- Legal Compliance: To satisfy our obligations under international gaming regulations, anti-money-laundering (AML) requirements, and any legal orders or regulatory directions we may receive.
- Customer Support: To respond to your support queries, process complaints, and resolve disputes in a fair and timely manner.
- Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have given your explicit consent to receive such communications. You may opt out at any time.
- Platform Improvement: To analyse aggregated, anonymised usage data to improve the br888 Platform's performance, user experience, and game selection for Pakistani players.
br888 processes Personal Data on the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to fulfil our obligations to you under the br888 Terms & Conditions — including account management, payment processing, and game provision.
- Legal Obligation: Processing required to comply with applicable regulations, including KYC identity verification, AML transaction monitoring, and retention of records as required by our gaming licence.
- Legitimate Interests: Processing carried out for br888's legitimate business interests — such as fraud prevention, security monitoring, and Platform analytics — where such interests do not override your fundamental privacy rights.
- Consent: Processing of your data for direct marketing communications and non-essential cookies, where you have provided clear, freely given, and withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
br888 does not sell your Personal Data. We share Personal Data only in the following limited circumstances, and only with parties bound by appropriate data protection obligations:
- Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
- KYC Verification Partners: br888 works with licensed identity verification service providers to conduct CNIC and document checks. Only the specific documents required for verification are shared, and these providers are contractually prohibited from using your data for any other purpose.
- Game Technology Providers: Third-party casino game developers and live dealer platform operators receive anonymised session data necessary to deliver their games on the br888 Platform. No directly identifiable Personal Data is shared with game providers.
- Regulatory & Law Enforcement Authorities: br888 may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required by law, legal process, or a valid regulatory direction. br888 will notify affected players of such disclosures where legally permitted to do so.
- Corporate Transactions: In the event of a merger, acquisition, or transfer of all or part of br888's business, Player data may be transferred to the acquiring entity subject to equivalent data protection standards. Players will be notified of any such transfer.
No Data Sales: br888 has never sold player Personal Data and will never do so. Our business model is built on providing a trusted gaming platform — not on monetising player information.
The br888 Platform uses cookies and similar tracking technologies to provide core functionality, maintain your session, and improve your overall experience. The types of cookies br888 uses are as follows:
- Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. Essential cookies cannot be disabled without significantly impairing Platform functionality.
- Functional Cookies: Used to remember your preferences — such as your preferred language, last-used payment method, and display settings — so you do not need to reconfigure them on each visit.
- Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the br888 Platform. This data helps us identify performance issues, improve navigation, and optimise our game selection for Pakistani players. Analytics cookies are only set with your consent.
- Security Cookies: Used to support fraud detection and to identify anomalous behaviour patterns that may indicate unauthorised access attempts or bot activity.
You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies may prevent you from logging in or accessing certain Platform features. br888 does not use cookies to serve third-party advertising.
br888 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply:
| Data Category |
Retention Period |
Reason |
| Account & Identity Data |
Duration of account + 5 years post-closure |
AML regulatory requirements, dispute resolution |
| KYC Documents |
Duration of account + 5 years post-closure |
Gaming licence compliance, regulatory audit |
| Financial Transaction Records |
Duration of account + 7 years post-closure |
AML compliance, tax and audit requirements |
| Gaming Session Logs |
3 years from session date |
Dispute resolution, responsible gaming monitoring |
| Customer Support Communications |
3 years from last interaction |
Complaint records, quality assurance |
| Marketing Consent Records |
Duration of consent + 2 years |
Proof of consent for regulatory purposes |
| Technical / Log Data |
12 months from collection |
Security monitoring, fraud investigation |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.
br888 implements a layered security architecture to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Our security measures include:
- Transport Layer Security: All data in transit between your device and br888 servers is encrypted using TLS 1.2 or higher, supported by 256-bit SSL certificates.
- Data Encryption at Rest: Sensitive Personal Data — including financial account details and KYC documents — is encrypted at rest using AES-256 encryption on br888's secured server infrastructure.
- Access Controls: Access to Personal Data within br888's organisation is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
- Two-Factor Authentication: br888 supports two-factor authentication (2FA) for player accounts. We strongly recommend that all Pakistani players enable 2FA to protect their account from unauthorised access.
- Fraud Monitoring: br888's security systems continuously monitor Platform activity for indicators of fraud, account takeover, and unusual transaction patterns, with automated and manual intervention protocols in place.
Security Incident Response: In the event of a confirmed Personal Data breach that poses a risk to affected players, br888 will notify impacted accounts as promptly as operationally possible and will cooperate fully with any relevant regulatory inquiry arising from the incident.
As a br888 player, you have the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to [email protected]. br888 will acknowledge your request within 5 business days and provide a substantive response within a reasonable timeframe.
- Right of Access: You have the right to request a copy of the Personal Data br888 holds about you, together with information about how it is being processed.
- Right to Rectification: If any Personal Data br888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
- Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to br888's legal retention obligations (see Section 8). Note that data subject to AML or gaming licence retention requirements cannot be deleted until the applicable retention period has expired.
- Right to Restrict Processing: You may request that br888 restrict the processing of your Personal Data in specific circumstances — for example, while the accuracy of data you have disputed is being verified.
- Right to Data Portability: You have the right to request a copy of the Personal Data you provided to br888 in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to br888's processing of your Personal Data where that processing is based on legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes, effective immediately upon request.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
The br888 Platform is strictly intended for adults aged 21 and above. br888 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from an individual who has misrepresented their age to be under 21, we will immediately:
- Permanently close the relevant account.
- Void all wagers and forfeit any associated winnings in accordance with the br888 Terms & Conditions.
- Securely delete or anonymise all Personal Data associated with the underage account, subject to any mandatory retention required by law.
- Return any deposited funds (net of any applicable processing costs) to the payment source from which they originated.
Parents & Guardians: If you believe a minor may have gained access to or registered an account on the br888 Platform, please contact us immediately at
[email protected]. br888 treats all underage gambling concerns as the highest priority and will act on credible reports within 24 hours.
The br888 Platform integrates with a number of third-party service providers to deliver its full range of gaming and payment services. While br888 carefully vets all third-party partners, each provider operates under its own privacy policy. br888 is not responsible for the data practices of third-party providers beyond the contractual data protection obligations we impose on them.
Third-party categories whose services are integrated into the br888 Platform include:
- Payment Gateways: JazzCash, EasyPaisa, Raast, and partner banks (HBL, UBL, Meezan Bank) for PKR transaction processing.
- Casino Game Providers: Licensed RNG slot, table game, and instant game developers whose software is made available on the br888 Platform.
- Live Dealer Operators: Licensed live casino studio operators providing real-time dealer game streams to br888 players.
- Identity Verification Services: Licensed KYC and AML compliance technology providers used to verify player identity and age documents.
- Customer Support Infrastructure: Live chat platform providers used to deliver br888's 24/7 player support service.
br888 does not integrate third-party social media tracking pixels, advertising networks, or external analytics platforms that would result in your Personal Data being shared with advertisers.
br888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform features. The effective date at the top of this document reflects the date of the most recent revision.
Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — br888 will provide advance notice by posting a prominent notice on the Platform and, where reasonably practicable, sending a notification to the mobile number or email address associated with your br888 account.
Continued use of the br888 Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any update to this Policy, you should cease using the Platform and may request account closure by contacting support.
If you have any questions, concerns, or requests relating to this Privacy Policy or br888's handling of your Personal Data, please contact us using the details below. Our Data Protection team will handle all privacy-related enquiries with appropriate care and confidentiality.
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available via the br888 Platform, 9:00 AM – 3:00 AM PKT daily
- Response Time: br888 aims to acknowledge privacy requests within 5 business days and provide a substantive response within a reasonable timeframe consistent with our regulatory obligations.
All data subject rights requests must be submitted in writing to [email protected]. Please include your registered br888 account mobile number or email address so we can verify your identity before processing your request.
Responsible Gaming & Data: If your privacy request relates to a responsible gaming matter — such as self-exclusion data, deposit limit records, or account closure — please also visit our
Responsible Gaming page. These requests are treated with priority and processed within 24 hours.