td888 Privacy
Policy

Section 01 Introduction

This Privacy Policy (hereinafter referred to as the "Policy") describes how td888 (hereinafter referred to as "td888", "we", "us", or "the Company") collects, uses, stores, shares, and protects the personal data of individuals (hereinafter referred to as "you", "the User", or "the Player") who access and use the td888 website located at td888.cam and all associated services (collectively, the "Platform").

td888 takes the privacy and security of your personal data seriously. We understand that Pakistani players entrust us with sensitive information — including identity documentation such as CNIC copies, financial information including payment method details, and personal contact information. This Policy is designed to be fully transparent about what happens to that information from the moment you create an account to the moment you close it.

This Policy should be read alongside td888's Terms and Conditions, which are incorporated by reference and are available at /terms-conditions. In the event of any inconsistency between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail except where this Policy imposes a higher standard of data protection, in which case this Policy shall apply.

Section 02 Data Controller

For the purposes of applicable data protection law, td888 is the data controller in respect of the personal data it collects and processes in connection with the operation of the Platform and the delivery of the Services. As data controller, td888 determines the purposes for which and the means by which your personal data is processed, and td888 is legally responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

td888 operates under an international gaming license. The licensing jurisdiction imposes binding data protection and privacy obligations on td888 as a condition of maintaining the license. These obligations are reflected in this Policy and in td888's internal data handling procedures.

All data protection queries, access requests, and complaints should be directed to td888 via email at [email protected] with the subject line "Data Protection Query". td888 will acknowledge all such queries within 72 hours and respond substantively within 30 days.

Section 03 Personal Data We Collect

td888 collects personal data in the categories described in the table below. Each category is marked to indicate whether it is required for account creation and use, optional, or collected automatically through your use of the Platform.

Section 04 How Personal Data is Collected

td888 collects personal data through the following means:

• Account Registration: When you create a td888 account, you directly provide identity data and contact data including your name, email address, date of birth, and Pakistani mobile number.
• KYC Verification: When you submit identity verification documents — including your CNIC — through the td888 account verification process, this data is collected and securely stored as part of td888's licensing compliance obligations.
• Payment Transactions: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast, td888 records the transaction details necessary to process the payment and comply with anti-money laundering record-keeping requirements.
• Platform Usage: Technical and usage data is collected automatically through td888's analytics and security monitoring systems as you navigate and interact with the Platform.
• Customer Support: When you contact td888 via live chat or email, the content of those communications is collected and retained as part of td888's support records.
• Cookies and Tracking Technologies: td888 uses cookies and similar tracking technologies as described in Section 9 of this Policy.

Section 05 Purposes of Processing & Legal Basis

td888 processes personal data for the following purposes, each of which is supported by a lawful basis for processing:

• Account Creation and Management (Contractual Necessity): To create your td888 account, verify your identity, manage your balance, process your bets and transactions, and provide access to Platform features. Processing is necessary for the performance of the contract between you and td888.
• KYC and Age Verification (Legal Obligation): To verify that you are at least 21 years of age and to confirm your identity as required by td888's international gaming license and applicable anti-money laundering regulations. Processing is required to comply with legal obligations.
• Payment Processing (Contractual Necessity): To process deposits via JazzCash, EasyPaisa, and Pakistani banks, and to process withdrawal requests back to your verified payment method. Processing is necessary for the performance of the contract.
• Fraud Prevention and Security (Legitimate Interest): To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple account creation, and other conduct that breaches td888's Terms and Conditions or applicable law. td888 has a legitimate interest in protecting the integrity of its Platform and the security of its players.
• Responsible Gaming Compliance (Legal Obligation and Legitimate Interest): To monitor gameplay patterns for indicators of problem gambling, to apply responsible gaming tools where requested, and to comply with td888's licensing obligations regarding player protection.
• Customer Support (Contractual Necessity and Legitimate Interest): To respond to queries, resolve complaints, and provide technical assistance. Processing is necessary to deliver the contracted service and to maintain customer relationships.
• Marketing Communications (Consent): To send you promotional emails, bonus offers, and platform updates where you have opted in to receive such communications. You may withdraw marketing consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing email.
• Platform Analytics and Improvement (Legitimate Interest): To analyse how players use the Platform, identify popular games and features, and make improvements to the user experience — including mobile performance optimisation for Pakistani networks and devices.

Section 06 Data Sharing

td888 does not sell or rent your personal data to any third party. td888 may share your personal data with the following categories of recipient, strictly limited to what is necessary for the specified purpose:

• Payment Service Providers: JazzCash, EasyPaisa, and partner banks (HBL, UBL, Meezan Bank) receive transaction data necessary to process your deposits and withdrawals. These providers are contractually bound to handle your data securely and only for payment processing purposes.
• KYC Verification Partners: Where td888 uses a third-party identity verification service to process CNIC submissions, that provider receives only the data necessary to perform the verification and is bound by a data processing agreement with td888.
• Game Software Providers: Game providers whose content is featured on the td888 Platform may receive limited technical data (such as session identifiers and stake information) necessary to deliver the game experience. Game providers do not receive your identity or financial data.
• Licensing Authority: td888's international gaming license authority may require td888 to share player data as part of its regulatory oversight, audit, or investigation functions. Such sharing is a legal obligation imposed by the licensing regime.
• Law Enforcement and Regulatory Bodies: td888 may be required to disclose personal data to Pakistani or international law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law or court order.
• Anti-Fraud and AML Service Providers: Third-party fraud prevention and anti-money laundering screening services may receive limited data to assist td888 in meeting its compliance obligations. These providers act as data processors under binding agreements with td888.

Section 07 Data Retention

td888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by td888's international gaming license and applicable anti-money laundering regulations. The following retention guidelines apply:

• Active Account Data: Personal data associated with an active td888 account is retained for the duration of the account's existence. Where an account is inactive for 12 consecutive months, td888 may apply its inactivity policy as described in the Terms and Conditions.
• Closed Account Data: Following account closure — whether initiated by you or by td888 — td888 is required by its gaming license and AML obligations to retain identity data, transaction records, and KYC documentation for a minimum period of five (5) years from the date of closure. This retention period may be extended where td888 is subject to a regulatory investigation or legal proceedings involving the account.
• Financial Transaction Records: All deposit and withdrawal records, including JazzCash and EasyPaisa transaction logs, are retained for a minimum of five (5) years in accordance with anti-money laundering record-keeping requirements.
• Marketing Data: Marketing preference data and consent records are retained for the duration of your account plus a reasonable period thereafter sufficient to demonstrate compliance with consent requirements. Where you withdraw marketing consent, your email address will be removed from active marketing lists within 5 business days.
• Support Communications: Customer support correspondence is retained for a period of 3 years from the date of each communication, to support complaint resolution and training purposes.

Following the expiry of the applicable retention period, td888 will securely delete or anonymise personal data in accordance with its documented data deletion procedures. Anonymised data (where no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

Section 08 Data Security

td888 implements a multi-layered approach to data security, combining technical, organisational, and procedural safeguards designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The key security measures in place include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile device and td888 servers is encrypted using TLS 1.2 or higher, ensuring that data cannot be intercepted in transit across mobile networks including Jazz, Telenor, Ufone, and Zong.
• Encryption at Rest: Sensitive personal data — including CNIC documentation and financial account details — is stored in encrypted form on td888's secure servers. Encryption keys are managed separately from encrypted data and are subject to strict access controls.
• Access Controls: Access to personal data within td888's systems is restricted on a need-to-know basis. Only authorised staff whose role requires access to specific data categories are granted access, and all access is logged and periodically audited.
• Two-Factor Authentication: td888 offers two-factor authentication (2FA) to all registered players and strongly recommends enabling it. 2FA adds a second layer of protection to your account beyond your password alone.
• Penetration Testing and Security Audits: td888's Platform and data infrastructure are subject to regular independent security assessments, including penetration testing by qualified third-party security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: td888 maintains a documented data breach incident response plan, which includes defined escalation procedures, breach containment protocols, regulatory notification timelines, and player notification procedures as described in the commitment cards above.

Section 09 Cookies & Tracking Technologies

td888 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse how the Platform is used. A cookie is a small text file placed on your device by your web browser when you visit the Platform. Cookies do not contain executable code and cannot access other data stored on your device.

td888 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They maintain your login session, remember your account preferences, and ensure security features operate properly. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your language preference, display settings, and responsible gaming tool configurations — such as your session time limit reminder settings — so that you do not have to reconfigure them on each visit.
• Analytics Cookies: td888 uses analytics cookies to understand how players navigate the Platform — which games are most popular, where players encounter difficulties, and how the mobile experience on Pakistani networks performs. This data is used in aggregate and anonymised form to improve the Platform.
• Security Cookies: These cookies support td888's fraud detection and account security systems, helping to identify suspicious access patterns, multiple account creation attempts, and automated bot activity.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling strictly necessary cookies will prevent you from logging in to your td888 account and using the Platform. td888 does not use third-party advertising cookies or cross-site tracking cookies.

Section 10 Your Data Rights

As a td888 player, you have the following rights in relation to your personal data. These rights can be exercised by contacting td888 at [email protected] with the subject line "Data Rights Request". td888 will verify your identity before processing any data rights request and will respond within 30 days.

Section 11 Minors & Age Verification

td888 Services are strictly for adults aged 21 years and above. td888 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the td888 KYC process, and no account may be fully activated — with deposit, withdrawal, and gameplay functions enabled — until the Account holder's age has been confirmed as 21 or above through submission and approval of valid CNIC documentation.

If td888 discovers or is notified that personal data has been collected from an individual under the age of 21, td888 will take immediate steps to close the relevant account, delete or anonymise the collected data to the extent permitted by legal obligations, and where applicable refer the matter to its licensing authority. Any deposits made by an underage player will be handled in accordance with td888's Terms and Conditions and applicable legal requirements.

Section 12 International Data Transfers

td888 operates as an internationally licensed gaming platform. As a result, your personal data may be transferred to and processed in countries outside Pakistan, including the jurisdiction in which td888's gaming license is held and the jurisdictions in which td888's data infrastructure, third-party service providers, and game software partners are located.

Where personal data is transferred internationally, td888 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses with all third-party service providers who receive your personal data;
• Transfer only to jurisdictions that maintain an adequate level of data protection as assessed by td888 and its licensing authority;
• Technical measures including encryption of data in transit across all international network paths.

By creating and using a td888 account, you acknowledge and consent to the international transfer of your personal data as described in this section, subject always to the safeguards described above.

Section 13 Policy Changes

td888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes in td888's data processing practices, or changes required by td888's licensing authority. When material changes are made, td888 will notify registered players by email to their registered address and by displaying a prominent notice on the Platform prior to the changes taking effect.

The updated Policy will be published on this page with a revised effective date. Your continued use of the td888 Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using the Platform and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how td888 is protecting your personal data. The version number and effective date at the top of this page indicate whether you are viewing the most current version.

Section 14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to td888's handling of your personal data, please contact td888 using the details below. All data protection queries are handled by td888's support and compliance team.

This Privacy Policy was last updated on 1 January 2026. Version 2026.1. This Policy supersedes all prior versions. For the avoidance of doubt, this Policy applies to all personal data processed by td888 in connection with accounts registered on td888.cam regardless of when those accounts were created.