8l7l Privacy Policy — How We Handle Your Personal Data

1. Introduction & Scope

This Privacy Policy (the "Policy") describes how 8l7l ("we", "us", "our", or "the Platform") collects, processes, stores, and protects personal information relating to users ("you", "the Player") of the 8l7l website at 8l7l.net and any related mobile applications or platform features.

This Policy applies to all personal data collected in connection with your use of 8l7l, including data provided during account registration, identity verification, payment processing, customer support interactions, and general platform use. It should be read alongside the 8l7l Terms & Conditions and Responsible Gaming Policy.

By registering for or using the 8l7l platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue your use of the platform and contact our support team to request account closure.

2. Information We Collect

8l7l collects personal information in several categories depending on how you interact with the platform. The following table summarises the primary categories of data we process:

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless you voluntarily disclose such information in the context of a responsible gaming self-exclusion or support request, in which case it is processed solely for the purpose of providing the requested service.

3. How We Collect Your Data

8l7l collects your personal information through the following means:

• Direct Provision: Information you provide when you register an account, complete KYC verification, submit a support request, participate in a promotion, or update your account settings.
• Automated Technologies: Technical and usage data collected automatically when you access and navigate the 8l7l platform, including through cookies, web beacons, and server log files. See Section 8 for full details of our cookie practices.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers when you make a deposit or request a withdrawal.
• Identity Verification Partners: Where we engage a third-party KYC or anti-money-laundering service to verify your identity documents, we receive a verification outcome and, in some cases, structured data extracted from the documents you submit.
• Fraud Prevention Services: Risk signals and device fingerprint data received from fraud detection services we employ to protect the platform and its users.

4. How We Use Your Information

8l7l processes your personal data for the following purposes, each supported by a lawful basis:

• Account Operation: To create, maintain, and administer your 8l7l account, including processing deposits and withdrawals in PKR, applying bonus credits, and recording your gaming activity. Lawful basis: contract performance.
• Identity Verification: To verify that you meet the minimum age requirement of 21 years, to confirm your identity in compliance with international gaming licensing standards, and to fulfil anti-money-laundering obligations. Lawful basis: legal obligation and legitimate interest.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bot activity, collusion, and other conduct prohibited under our Terms and Conditions. Lawful basis: legitimate interest.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, to apply the deposit limits, cooling-off periods, and self-exclusion restrictions you request, and to reach out where our responsible gaming monitoring flags a concern. Lawful basis: legal obligation and legitimate interest.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of our communications with you for quality assurance purposes. Lawful basis: contract performance and legitimate interest.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. Lawful basis: consent. You may withdraw consent at any time.
• Platform Improvement: To analyse aggregate usage patterns, diagnose technical issues, and improve the performance, design, and content of the 8l7l platform. Lawful basis: legitimate interest.
• Legal Compliance: To meet our obligations under applicable gaming licensing conditions, financial crime prevention regulations, and any lawful orders received from competent regulatory or law enforcement authorities. Lawful basis: legal obligation.

5. Sharing Your Information

8l7l does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances:

• Payment Service Providers: We share the minimum necessary financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors to execute your deposit and withdrawal instructions. These providers are contractually bound to process your data only for the specified payment purpose.
• Identity Verification and KYC Partners: We share identity document data with vetted third-party verification providers solely for the purpose of confirming your eligibility to hold an 8l7l account. These partners are subject to strict confidentiality obligations.
• Fraud Prevention and Security Services: Device and behavioural data may be shared with fraud detection service providers to protect the platform and all players from financial crime. All such providers operate under data processing agreements with 8l7l.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent regulatory, licensing, or law enforcement bodies when we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent serious harm or criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of 8l7l's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. We will notify you of any such change via the email address on your account.

In all cases where we engage third-party processors, we require them to implement appropriate technical and organisational security measures and to process your data only for the purposes we specify. We do not permit our third-party partners to use your data for their own independent purposes.

6. Data Retention

8l7l retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by our gaming licensing obligations or applicable law.

• Active Accounts: Personal and financial data is retained for the lifetime of your active 8l7l account.
• Closed Accounts: Following account closure, we retain identity, financial, and transaction records for a minimum of five (5) years, as required under international anti-money-laundering compliance standards applicable to our gaming licence.
• Marketing Data: Where your account is closed or you withdraw consent for marketing, your marketing preference data is updated immediately and retained solely to honour your opt-out status and prevent future unsolicited contact.
• Support and Communications Records: Customer support interactions are retained for a period of three (3) years following the closure of the relevant support case, for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Aggregated and anonymised usage analytics are retained indefinitely for platform improvement purposes. Identifiable technical data such as IP address logs is retained for twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

7. Security Measures

8l7l implements a layered set of technical and organisational security controls to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Transport Security: All data in transit between your device and 8l7l's servers is encrypted using TLS 1.2 or higher. Our platform enforces HTTPS exclusively; unencrypted HTTP connections are rejected.
• Data at Rest: Sensitive personal and financial data stored on 8l7l's servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 8l7l is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Password Security: Account passwords are stored using a one-way cryptographic hash function. 8l7l staff cannot retrieve your password in plain text. We strongly recommend using a unique, complex password for your 8l7l account.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity, with automated alerting and manual review by our security team.
• Vendor Security: All third-party service providers with access to personal data are assessed for security compliance before engagement and on an ongoing basis.

8. Cookies and Tracking Technologies

8l7l uses cookies and similar tracking technologies to operate the platform efficiently, maintain your session state, prevent fraud, and understand how players interact with the site. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your 8l7l account during a browsing session. These cookies cannot be disabled without impairing platform functionality.
• Security Cookies: Used to detect and prevent fraudulent activity, including CSRF protection tokens and device fingerprinting identifiers.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gaming tool configurations between sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the 8l7l platform, which pages are most visited, and where users encounter errors. This data informs platform improvements. We use privacy-respecting analytics tools that do not share your data with advertising networks.
• Marketing Cookies: Used only where you have provided explicit consent. These track whether you clicked through to 8l7l from a promotional communication and help us assess the effectiveness of our campaigns.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 8l7l platform, including account login functionality. A cookie preference centre is accessible from the footer of the platform for non-essential cookie categories.

9. Your Privacy Rights

Subject to applicable law and the requirements of our gaming licensing obligations, you have the following rights in relation to the personal data 8l7l holds about you:

• Right of Access: You may request a copy of the personal data 8l7l holds about you and information about how it is processed. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: You may request the correction of inaccurate or incomplete personal data. For account information, many fields can be updated directly through your account settings. For identity document corrections, please contact support.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Please note that this right is subject to our legal obligation to retain certain records for a minimum period following account closure, as described in Section 6.
• Right to Restrict Processing: You may request that we limit how we process your personal data in specific circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a structured, machine-readable export of personal data you have provided to 8l7l, where technically feasible.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interest as our lawful basis, where your particular situation justifies such an objection.

To exercise any of these rights, contact the 8l7l support team via live chat on the platform. We will verify your identity before processing any request that could expose another person's data or result in irreversible changes to your account records. There is no fee for exercising your privacy rights.

10. Minors and Age Verification

8l7l strictly prohibits use of the platform by any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory component of our account registration and KYC process.

If 8l7l becomes aware that personal data has been collected from a person under the age of 21 — whether through misrepresentation during registration or any other means — we will promptly close the relevant account, return any deposited funds to the originating payment method where possible, and delete the personal data associated with that account from our active systems within the timeframes permitted by our retention and compliance obligations.

We encourage parents and guardians in Pakistan to make use of parental control tools available on home networks and devices to restrict access to online gaming platforms. If you believe a minor is accessing 8l7l using an adult's credentials, please contact our support team immediately.

11. Changes to This Policy

8l7l reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. The "Last Updated" date at the top of this document will be revised accordingly whenever material changes are made.

Where changes are material — meaning they significantly affect how we collect or use your personal data, or affect your rights — we will notify you via the email address associated with your 8l7l account and/or by displaying a prominent notice on the platform prior to the changes taking effect. Your continued use of the platform following notification of material changes constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how 8l7l protects your personal information. The current version of this Policy is always accessible from the footer of every page on 8l7l.net.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data 8l7l holds about you, please contact our support team. We are available 24 hours a day, 7 days a week via live chat on the platform.

For written enquiries, you may also reach our support team via the email address displayed in the footer of this page. Please include "Privacy Request" in the subject line of your message to ensure it is directed to our data protection team promptly. We aim to acknowledge all privacy-related email enquiries within 48 hours and to provide a substantive response within 30 calendar days.