Privacy Policy – 89f Casino

1. Introduction

This Privacy Policy ("Policy") sets out how 89f ("89f", "we", "us", "our") collects, processes, stores, and protects personal data provided by users ("you", "User", "Player") who access and use the 89f website at 89f.bio, the 89f Android application, and all related services (collectively, the "Platform").

89f is committed to handling personal data responsibly, in accordance with applicable data protection principles, and with full transparency about our practices. We do not sell personal data to third-party advertisers or data brokers under any circumstances.

This Policy should be read alongside the 89f Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall framework governing your use of the Platform.

2. Personal Data We Collect

89f collects the following categories of personal data from registered users and platform visitors:

3. How We Collect Personal Data

89f collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting 89f support.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, session data, and interaction logs.
• Third-party sources: Identity and sanctions screening data from third-party KYC and AML compliance providers, used solely for verification and regulatory compliance purposes.
• Payment processors: Transaction confirmation data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard, and other payment partners when you conduct financial transactions on 89f.

4. Legal Basis for Processing

89f processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — account registration, deposits, withdrawals, game participation, and customer support.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) regulations.
• Legitimate interests: Processing necessary for 89f's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests do not override your fundamental rights.
• Consent: Where 89f processes data for marketing communications or optional features, this is done on the basis of your explicit consent, which you may withdraw at any time by contacting support.

5. How We Use Your Personal Data

89f uses collected personal data for the following specific purposes:

• To create and manage your 89f player account and authenticate your identity at login.
• To process deposits and withdrawals via your chosen payment method, including JazzCash, Easypaisa, HBL, UBL, and other supported channels.
• To verify your age and identity in compliance with Know Your Customer (KYC) requirements before processing withdrawal requests.
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited activities as defined in the 89f Terms & Conditions.
• To monitor gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour, and to administer self-exclusion requests.
• To provide customer support and resolve account disputes, including maintaining records of support interactions for quality and compliance purposes.
• To send you service-related communications including security alerts, account notifications, and updates to 89f policies where you are an active account holder.
• To improve the 89f platform through analysis of anonymised or aggregated usage data — individual personal data is never used for general analytics without appropriate safeguards.
• To comply with court orders, regulatory directives, or law enforcement requests that legally require disclosure of specific account data.

6. Data Sharing & Disclosure

89f does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. Personal data may be shared in the following limited circumstances only:

6.1 Service Providers

89f shares data with carefully selected third-party service providers who assist in operating the Platform. These include KYC verification providers, payment processing partners (JazzCash, Easypaisa, and banking institutions), game software providers, customer support tooling providers, and cloud infrastructure partners. All service providers are contractually bound to process data only for the specific purposes authorised by 89f and to maintain appropriate security standards.

6.2 Regulatory & Legal Disclosure

89f may disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law or in response to a valid legal order. 89f will only disclose the minimum data necessary to satisfy the legal requirement and will notify affected users where permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 89f's business, personal data held by 89f may be transferred to the acquiring entity, subject to equivalent data protection obligations being maintained. Users will be notified of any such transfer and of any material changes to this Privacy Policy resulting from it.

7. Data Retention

89f retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for regulatory compliance purposes. Specific retention periods are as follows:

• Account data: Retained for the duration of your active 89f account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by financial crime regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure or completion of the business relationship.
• Support communications: Retained for three (3) years from the date of the interaction unless a longer retention period is required for dispute resolution or legal proceedings.
• Technical logs: Retained for twelve (12) months for security monitoring purposes, after which they are deleted or anonymised.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an identified individual.

8. Data Security

89f implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS encryption: All data transmitted between your device and the 89f platform is encrypted using 256-bit SSL/TLS protocols.
• Secure storage: Personal data is stored in secured database environments with access restricted to authorised 89f personnel on a need-to-know basis.
• Two-factor authentication: 89f offers 2FA for all player accounts, delivering one-time passwords to your registered Pakistani mobile number to prevent unauthorised account access.
• Access controls: Internal access to personal data is governed by role-based permissions. Staff members with access to personal data undergo security training and are subject to confidentiality obligations.
• Incident response: 89f maintains a data breach response procedure. In the event of a security incident that affects your personal data, 89f will notify affected users and relevant authorities as required by applicable law.

While 89f employs industry-standard security practices, no system is entirely immune to risk. You also have a role to play in protecting your account: use a strong, unique password, enable 2FA, and never share your 89f login credentials with any third party.

9. Cookies & Tracking Technologies

The 89f website and Android application use cookies and similar technologies to ensure the platform functions correctly, to maintain your session after login, and to improve the user experience. The types of cookies used by 89f include:

• Essential cookies: Required for core platform functionality, including maintaining your logged-in session and remembering your language preferences. These cannot be disabled without affecting platform usability.
• Functional cookies: Used to remember your preferences and settings across visits, such as your preferred game category or responsible gaming limit settings.
• Analytical cookies: Used to collect anonymised data about how users navigate the 89f platform, helping us identify areas for improvement. This data does not identify individual users.
• Security cookies: Used to detect unusual login activity and fraudulent access attempts, such as logins from previously unrecognised devices or locations.

You may manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the 89f platform normally.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data 89f holds about you:

• Right of access: You may request a copy of the personal data 89f holds about you and information about how it is being processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to legal retention requirements — 89f cannot delete data it is legally obligated to retain.
• Right to restriction: You may request that 89f restricts processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to data portability: Where technically feasible and legally applicable, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact the 89f Data Protection team at [email protected]. 89f will respond to valid requests within thirty (30) days. Identity verification may be required before processing a data rights request.

11. Minors

The 89f platform is strictly intended for adults aged 18 and over. 89f does not knowingly collect personal data from individuals under the age of 18. If 89f becomes aware that personal data has been collected from a minor, the relevant account will be immediately suspended, the data will be deleted (subject to any overriding legal obligations), and the matter will be reported to the relevant authorities where required.

If you believe a minor may have registered an account on the 89f platform, please contact support immediately at [email protected].

12. International Data Transfers

89f may transfer personal data to service providers or infrastructure partners located outside Pakistan. Where such transfers occur, 89f ensures that appropriate safeguards are in place, including contractual data processing agreements that require recipient organisations to maintain data protection standards equivalent to those applied by 89f. By registering an 89f account, you acknowledge that your data may be processed in jurisdictions outside Pakistan as part of the Platform's normal operations.

13. Changes to This Privacy Policy

89f reserves the right to update this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Where changes are material — for example, new categories of data being collected or significant changes to how data is used — 89f will notify registered users via their registered mobile number or email address where reasonably practicable. Continued use of the 89f platform following notification of changes constitutes your acceptance of the updated Privacy Policy.

14. Contact & Data Enquiries

For any questions, concerns, or requests regarding this Privacy Policy or the personal data 89f holds about you, please contact the 89f support and data team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the on-site support widget on 89f.bio
• Subject line for data requests: "Data Rights Request — [Your 89f Username]"

89f aims to acknowledge all data-related enquiries within five (5) business days and to resolve them within thirty (30) days, or within such shorter period as may be required by applicable law.