89f Casino — Privacy Policy

89f Casino ("89f", "we", "us", "our") operates the online gaming platform accessible at 89f.club. For the purposes of this Privacy Policy, 89f Casino is the data controller responsible for the collection and processing of personal data submitted by users ("Player", "User", "you") of this platform.

This Privacy Policy governs all personal data collected through the 89f website, mobile-optimised platform, customer support channels, promotional communications, and any other interaction you have with 89f Casino. It applies to all registered players and visitors regardless of their location, with particular relevance to users accessing the platform from Pakistan.

By registering an account, making a deposit, or otherwise using the 89f platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact support to close your account.

89f collects personal data through several channels depending on your interaction with the platform. The categories of data we collect are described below:

We also collect data from third-party sources where lawfully permitted, such as identity verification agencies, fraud prevention databases, and payment processors — to cross-verify the accuracy of information you provide directly.

89f processes personal data for the following specific and legitimate purposes:

• Account Creation & Management: To register your account, verify your identity, maintain your player profile, and administer your gaming activity on the 89f platform.
• Payment Processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank. Financial data is shared with payment providers solely to process your transactions.
• KYC & Regulatory Compliance: To verify your age (21+ requirement), identity, and source of funds as required under our gaming licence obligations and applicable anti-money laundering (AML) regulations.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the platform.
• Customer Support: To respond to your queries, complaints, and requests in a timely and effective manner.
• Responsible Gaming: To monitor gaming behaviour patterns and proactively identify players who may be showing signs of problem gambling, in order to offer appropriate support tools and interventions.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and user experience of the 89f platform.
• Marketing Communications (opt-in only): To send promotional offers, bonus notifications, and platform updates to players who have explicitly opted in to receive such communications.

89f processes your personal data under the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and 89f — including account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and our gaming licence obligations, including KYC/AML procedures and responsible gaming requirements.
• Legitimate Interests: Processing conducted for 89f's legitimate business interests, including fraud prevention, platform security, and internal analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain optional data collection activities, which is carried out only where you have given your explicit consent. You may withdraw consent at any time.

Where 89f relies on legitimate interests as the legal basis for processing, we carry out a balancing assessment to confirm that the processing does not unduly prejudice your fundamental rights and freedoms.

89f uses cookies and similar tracking technologies to operate the platform effectively, maintain your session state, and understand how players interact with the site. The following cookie categories are in use:

Most web browsers allow you to control cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the 89f platform. For all other cookie categories, you can manage your preferences through the cookie consent banner displayed on your first visit or via your account settings panel.

89f does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank receive the minimum data necessary to process your transactions securely.
• Identity Verification Providers: Third-party KYC and AML compliance services receive identity data to verify your CNIC, passport, or other documentation.
• Fraud Prevention Services: Aggregated risk signals are shared with fraud detection platforms to protect the 89f player community from bad actors.
• IT & Hosting Providers: Infrastructure and cloud service providers that host the 89f platform may have access to data as part of their service delivery, under strict data processing agreements.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory directive, 89f will disclose personal data to the relevant authority. We will notify you of such a disclosure where legally permissible to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of 89f's business assets, player data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and advised of your options.

89f retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The key retention periods applied by 89f are as follows:

• Active Account Data: Retained for the full duration of your active account relationship with 89f plus five (5) years following account closure, to satisfy gaming licence and AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction in accordance with standard financial record-keeping requirements.
• KYC Documents: Retained for five (5) years following account closure or the completion of the relevant compliance review.
• Support & Communications: Retained for three (3) years following the closure of the relevant support case.
• Marketing Data: Retained until you withdraw your marketing consent, after which it is deleted within thirty (30) days.
• Technical & Log Data: Retained for thirteen (13) months from collection for security and analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised data may be retained indefinitely for statistical purposes without further notice.

89f implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data in transit between your device and 89f's servers.
• Access Controls: Strict role-based access controls ensuring that only authorised 89f personnel with a legitimate operational need can access player data.
• Two-Factor Authentication: Available to all players and mandatory for internal 89f administrative systems.
• Regular Security Audits: Penetration testing and vulnerability assessments are conducted on a regular schedule by qualified independent security professionals.
• Incident Response: A documented data breach response plan is in place. In the event of a data breach affecting your personal data, 89f will notify you within seventy-two (72) hours of becoming aware of the breach, where required by applicable law.
• Employee Training: All 89f staff who handle personal data undergo regular data protection and security awareness training.

As an 89f player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team with your account details and the specific right you wish to exercise. We will respond within thirty (30) calendar days.

89f Casino enforces a strict minimum age requirement of 21 years for all registered players. The 89f platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21.

If you are a parent or guardian and believe that your child may have accessed or registered on the 89f platform, please contact our support team immediately at the email address provided in Section 13 of this Policy. We take underage gambling extremely seriously and will act on all such reports without delay.

89f recommends the use of parental control software for households where minors may have unsupervised internet access. Please visit our Responsible Gaming page for guidance on available parental control resources.

The 89f platform integrates a number of third-party service providers to deliver the full suite of gaming, payment, and compliance functions. These providers include:

• Game Studios & Content Providers: Third-party game providers supply game software and RNG-certified engines. These providers may receive technical session data necessary to operate the games.
• Payment Gateways: JazzCash, EasyPaisa, Raast, and bank transfer processors receive the payment data necessary to complete transactions.
• KYC / Identity Verification: Third-party identity verification services process document images and personal data to confirm player identity and age.
• Analytics Providers: Anonymised and aggregated platform usage data is processed by analytics providers to help 89f understand and improve the player experience.
• Live Chat & Support Software: Our customer support platform provider processes support conversation data in order to deliver the support service.

All third-party providers engaged by 89f are subject to formal data processing agreements and are required to implement data protection standards no less stringent than those applied by 89f itself. 89f performs due diligence reviews of all service providers prior to engagement and on a periodic basis thereafter.

Please note that 89f's Privacy Policy does not extend to any third-party websites that may be referenced in communications or accessible through the platform. You should review the privacy policies of any such third parties independently.

89f reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or gaming licence requirements. When material changes are made, we will notify registered players by:

• Displaying a prominent notice on the 89f platform for a minimum of thirty (30) days following the change.
• Sending an email notification to the address registered on your account, where this is practicable.
• Updating the "Effective Date" at the top of this document.

Your continued use of the 89f platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the changes, you should discontinue use of the platform and request account closure through our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how 89f protects your data. Archived versions of previous Privacy Policies are available upon written request to our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please get in touch with the 89f data protection team. Our support is available twenty-four (24) hours a day, seven (7) days a week.

• Email: [email protected] — please use the subject line "Privacy Request" to ensure your message is routed to the correct team.
• Live Chat: Available within your 89f account dashboard after logging in.

When submitting a data rights request, please include your registered account username, the specific right you wish to exercise, and sufficient information to allow us to verify your identity. This verification step is necessary to protect your data from unauthorised disclosure.

89f will acknowledge all data rights requests within five (5) business days of receipt and will fulfil your request within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with how 89f has handled your personal data or responded to your request, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Players in Pakistan may also seek guidance from applicable consumer protection bodies regarding data rights.