bg888 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

bg888 is committed to protecting the privacy and personal data of every user who interacts with the platform. This Policy applies to all personal data collected through bg888.cam, including data provided during registration, during gameplay, during payment transactions, and through any communications between you and bg888 support or other departments.

bg888 operates as both a data controller and, in certain circumstances, a data processor. Where bg888 engages third-party service providers who process data on its behalf, bg888 ensures that appropriate data processing agreements are in place requiring those third parties to handle data in accordance with applicable data protection principles.

Players accessing bg888 from Pakistan should note that bg888 endeavours to comply with the applicable principles of Pakistan's Prevention of Electronic Crimes Act (PECA) 2016 and the Personal Data Protection Bill framework, as well as internationally recognised data protection standards derived from its operating jurisdiction.

bg888 collects personal data through several channels depending on how you interact with the platform:

2.1 — Information You Provide Directly

• Full legal name and date of birth (for account registration and KYC verification)
• Pakistani CNIC number (for identity verification upon withdrawal requests)
• Mobile phone number (in 03XX format) or email address (for login, OTP verification, and account communications)
• Residential address details (for KYC and anti-money laundering compliance)
• Payment method details including JazzCash account number, EasyPaisa number, or bank account information for deposits and withdrawals
• Communications submitted through customer support chat, email, or any other contact channel

2.2 — Information Collected Automatically

• IP address and approximate geographic location at the time of each login session
• Device type, operating system, and browser version
• Session duration, pages visited, games played, and betting history within your bg888 account
• Transaction records including deposit amounts, withdrawal requests, and bonus redemptions
• Cookie and tracking data as described in Section 5 of this Policy

2.3 — Information From Third Parties

bg888 may receive supplementary identity or fraud-screening data from third-party KYC verification providers, payment processors including JazzCash and EasyPaisa, and anti-money laundering screening services engaged by bg888 in connection with its regulatory obligations.

bg888 uses the personal data it collects for the following purposes:

bg888 does not use your data for purposes that are incompatible with the purposes stated in this Policy without first obtaining your explicit consent.

bg888 processes personal data under one or more of the following legal bases, in accordance with internationally recognised data protection principles:

• Contractual necessity: Processing required to fulfil the account agreement between you and bg888, including operating your account and processing transactions.
• Legal obligation: Processing required for compliance with bg888's gaming license conditions, AML regulations, and KYC obligations imposed by the regulatory framework under which bg888 operates.
• Legitimate interests: Processing carried out to protect bg888 and its players from fraud, abuse, and problem gambling behaviour, where those interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have provided clear affirmative consent that can be withdrawn at any time.

bg888 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device that help bg888 remember your preferences, keep you logged in securely, and analyse how different players use the platform.

Types of cookies used by bg888:

• Essential cookies: Required for core platform functionality including login session maintenance, security token storage, and payment flow integrity. These cannot be disabled without impairing your ability to use bg888.
• Analytics cookies: Used to understand aggregate user behaviour on bg888 — which games are most popular, where players encounter friction, and how navigation patterns compare across different device types. Data is anonymised and aggregated.
• Preference cookies: Store your selected display settings, language preferences, and notification configurations so your experience is consistent across sessions.

You may configure cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to remain logged in and may prevent certain bg888 features from functioning correctly.

bg888 does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. This is an absolute commitment, not a qualified one. Your data is shared only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive the minimum necessary data to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party identity verification services that assist bg888 in confirming player identity and age in accordance with our licensing obligations.
• Game software providers: Certified game developers whose titles appear on bg888 may receive anonymised session data for technical performance monitoring and compliance purposes. No personally identifiable information is shared with game providers beyond what is necessary.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or our licensing authority, bg888 may disclose data to competent authorities. bg888 will notify affected players of such disclosures wherever legally permitted to do so.
• Fraud prevention networks: Aggregated, anonymised fraud signal data may be contributed to industry fraud prevention systems to protect bg888 and its players from organised fraud.

bg888 operates under an international gaming license and accordingly certain data may be stored or processed on servers located outside Pakistan. Where such international transfers occur, bg888 implements appropriate safeguards to ensure your data receives a level of protection equivalent to that required under internationally recognised data protection principles.

These safeguards include contractual data protection obligations imposed on all international data processors engaged by bg888, as well as technical security measures ensuring that data remains encrypted during transfer and at rest.

bg888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to regulatory retention requirements imposed by our gaming license:

• Active account data is retained for the full duration your bg888 account is open, plus a minimum of five years following account closure, in accordance with standard AML record-keeping requirements.
• KYC documentation (including CNIC copies) is retained for a minimum of five years after the end of the business relationship, as required under anti-money laundering regulations applicable to bg888's operating jurisdiction.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• Customer support communications are retained for three years following the resolution of the relevant query.
• Analytics data is retained in anonymised, aggregated form indefinitely for platform improvement purposes.

Upon expiry of applicable retention periods, bg888 securely deletes or permanently anonymises the relevant personal data.

bg888 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport encryption: All data transmitted between your device and bg888's servers is encrypted using 256-bit SSL/TLS, the same standard employed by Pakistan's major commercial banks.
• Data at rest encryption: Sensitive personal data including payment details and identity documents is encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis, with all access events logged and auditable.
• Two-factor authentication: bg888 accounts support SMS-based 2FA to prevent unauthorised login even in the event of password compromise.
• Intrusion detection: bg888's technical infrastructure is monitored continuously for anomalous activity and potential security incidents.

No digital platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights, bg888 will notify affected players without undue delay.

Subject to applicable law and any overriding regulatory obligations, you have the following rights in relation to your personal data held by bg888:

1. Right of access: You may request a copy of the personal data bg888 holds about you at any time.
2. Right to rectification: You may request that inaccurate or incomplete personal data be corrected. Basic profile information can be updated directly within your bg888 account settings.
3. Right to erasure: In certain circumstances you may request deletion of your personal data. Note that AML and gaming license record-keeping obligations may limit the scope of erasure requests.
4. Right to restrict processing: You may request that bg888 restrict the processing of your data while the accuracy or lawfulness of that processing is under review.
5. Right to data portability: You may request that your personal data be provided in a structured, commonly used, machine-readable format.
6. Right to object: Where processing is based on legitimate interests, you have the right to object to that processing on grounds relating to your particular situation.
7. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact bg888 support. bg888 aims to respond to all data rights requests within 30 calendar days.

bg888 strictly prohibits access by individuals under the age of 21. bg888 does not knowingly collect personal data from minors. If bg888 discovers that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be deleted to the extent required, and any funds associated with the account may be handled in accordance with bg888's Terms & Conditions.

Parents or guardians who believe a minor may have registered an account on bg888 should contact support immediately to report the matter.

bg888 may revise this Privacy Policy from time to time to reflect changes in applicable law, our data practices, or the features and services available on the platform. Material changes will be communicated to registered players via their registered mobile number or email address. The "Last Updated" date at the top of this document will be revised accordingly whenever a change is made.

Your continued use of bg888 following notification of a material change constitutes your acceptance of the updated Policy. If you do not agree with a revised Policy, you should close your bg888 account before the revised Policy takes effect.

If you have questions, concerns, or complaints about this Privacy Policy or about how bg888 handles your personal data, please contact the bg888 support team. Privacy-related queries will be directed to the appropriate data protection contact within bg888.

bg888 aims to respond to all privacy-related queries within 10 business days. Contact details for bg888 support are available on the bg888 platform. Please note that email addresses are provided on the platform as plain text only for reference — all privacy requests must be submitted through the support system for identity verification purposes before being actioned.