Privacy Policy
at888 is committed to handling your personal data responsibly, transparently and in accordance with applicable data protection standards. This Privacy Policy explains what data we collect, why we collect it, how it is used, who it may be shared with, and the rights you hold as a data subject.
Last Updated: January 2026 — Version 2.0Our Data Principles
Six core principles guide every decision we make about your personal data at at888.
Minimal Collection
We collect only the personal data that is necessary for the specific purpose for which it is being processed. Data that is not needed is not requested.
Security by Design
Personal data is stored with industry-standard encryption. Access is restricted to authorised personnel with a legitimate operational need. We conduct regular security reviews.
No Data Sales
at888 does not sell, rent or trade your personal data to any third party for commercial purposes, under any circumstances.
Your Rights Respected
You have the right to access, correct, restrict or erase your personal data. Requests are handled within a defined response window. See the User Rights section for details.
Full Transparency
This Policy tells you clearly what data we hold, why, for how long and with whom it may be shared. We do not bury data practices in opaque terms or cross-references.
Defined Retention
We do not retain personal data indefinitely. Specific retention periods are defined for each data category, after which data is securely deleted or anonymised.
1 Introduction
This Privacy Policy ("Policy") describes how at888 ("at888", "we", "us", "our" or "the Operator"), the entity operating the online casino and sports betting platform at https://at888.cam (the "Platform"), collects, uses, stores, shares and protects the personal data of individuals ("Users", "you" or "data subjects") who access or use the Platform.
This Policy forms part of the agreement between you and at888 and should be read alongside our Terms & Conditions and Responsible Gambling Policy. By registering for an Account or otherwise providing your personal data to at888, you acknowledge that you have read and understood this Policy.
2 Definitions
- "Personal Data" — Any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment information and IP address.
- "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure or deletion.
- "Data Controller" — The entity that determines the purposes and means of processing personal data. at888 is the Data Controller for personal data processed under this Policy.
- "Data Processor" — A third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
- "KYC" — Know Your Customer — the identity and age verification process required under at888's applicable licence obligations.
- "Special Category Data" — Personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or data concerning sex life, subject to heightened protection under applicable law.
- "Cookies" — Small data files placed on your device by the Platform or third-party services integrated within it, used to support functionality, analytics and personalisation.
3 Data Controller
at888 is the Data Controller in respect of all personal data collected and processed via the Platform. For data-related enquiries, including rights requests and complaints, please contact us using the details provided in the Contact Us section of this Policy.
Where at888 engages third-party service providers to process data on its behalf, those providers act as Data Processors and are bound by data processing agreements that restrict their use of personal data to the purposes instructed by at888.
4 Data We Collect
4.1 Data Provided Directly by You
When you register for an Account, complete KYC verification, make a deposit or contact our support team, you may provide us with the following categories of personal data:
| Data Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, gender | Registration, KYC |
| Contact Data | Email address, residential address, phone number | Registration, support |
| Verification Documents | Government ID, proof of address, payment method proof | KYC verification |
| Financial Data | Deposit/withdrawal method details, transaction history | Cashier transactions |
| Communications | Support chat transcripts, email correspondence | Support interactions |
| Responsible Gambling Data | Self-exclusion requests, limit settings, problem gambling declarations | Account settings, support |
4.2 Data Collected Automatically
When you access the Platform, certain data is collected automatically via technical systems, including:
- Device & Technical Data: IP address, browser type and version, operating system, device identifiers and screen resolution;
- Usage Data: Pages visited, game sessions, bet and wager records, session duration, clickstream data and error logs;
- Location Data: General geographic location inferred from IP address for geo-restriction compliance — no precise GPS data is collected;
- Cookie Data: Identifiers placed by first-party and third-party cookies as described in the Cookies section.
4.3 Data We Do Not Collect
5 Data Processing
at888 processes your personal data for the following purposes:
- Account Management: Creating, maintaining and securing your Account; authenticating your identity upon login; processing deposits and withdrawals;
- KYC & Compliance: Verifying your identity and age in fulfilment of our licence obligations; conducting anti-money laundering and fraud prevention checks;
- Service Delivery: Enabling access to games, sports betting markets and live casino services; personalising your experience based on preferences and play history;
- Customer Support: Responding to your enquiries, resolving disputes and processing complaints in English and Urdu;
- Responsible Gambling: Monitoring usage patterns to identify potential problem gambling indicators; facilitating self-exclusion and limit requests; contacting you where welfare concerns are identified;
- Marketing Communications: Sending promotional offers, bonus notifications and platform updates via email, where you have provided consent or where permitted under applicable law. You may opt out at any time;
- Security & Fraud Prevention: Detecting and preventing fraudulent activity, account abuse, money laundering and technical attacks on the Platform;
- Legal Obligations: Retaining transaction and identification records as required under applicable licence conditions and financial regulations;
- Platform Improvement: Analysing aggregated usage data to improve the performance, content and user experience of the Platform.
6 Legal Basis for Processing
at888 processes personal data on one or more of the following legal bases, depending on the purpose of processing:
- Contractual Necessity: Processing required to perform the contract between you and at888 — including account creation, game access and payment processing;
- Legal Obligation: Processing required to comply with applicable law — including KYC, anti-money laundering obligations and licence requirements;
- Legitimate Interests: Processing necessary for at888's legitimate business interests — including fraud prevention, platform security and service improvement — where those interests are not overridden by your data protection rights;
- Consent: Processing undertaken with your specific, freely given, informed and withdrawable consent — primarily in respect of direct marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.
7 Cookies & Tracking Technologies
7.1 What We Use
The Platform uses cookies and similar tracking technologies (including local storage and session tokens) to support core functionality, measure performance and improve your experience. The following categories of cookies may be placed:
- Strictly Necessary Cookies: Essential for Platform operation — including login session management, security tokens and cashier functions. These cannot be disabled without breaking core functionality;
- Analytics Cookies: Used to collect aggregated, anonymised data about how Users navigate the Platform, enabling us to identify and fix usability issues;
- Preference Cookies: Store your language, display and notification settings so you do not need to re-enter them on each visit;
- Marketing Cookies: Where applicable, used to measure the effectiveness of promotional communications. These are only set where consent has been obtained.
7.2 Managing Cookies
You can manage or withdraw cookie consent at any time by adjusting your browser settings to refuse or delete cookies. Note that disabling strictly necessary cookies may impair your ability to use core Platform features including login, deposit and cashier functions.
8 Data Sharing
at888 does not sell, rent or trade your personal data. We may share personal data with the following categories of third parties, strictly on a need-to-know basis and under appropriate contractual protections:
- KYC & Identity Verification Providers: Third-party identity verification services used to validate documents submitted during the KYC process;
- Payment Service Providers: Entities involved in processing your deposit or withdrawal transactions. Payment provider names familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced in the cashier as contextual options only; their involvement as processors depends on your chosen payment method. These providers have their own privacy policies governing their data practices;
- Game Content Providers: Software studios providing slot, table and live dealer game content. Game studios may receive anonymised session data for RNG auditing and licence compliance purposes;
- Regulatory Authorities: Where required by applicable law, court order or our licence conditions, we may be required to disclose personal data to regulatory or law enforcement bodies;
- IT & Infrastructure Providers: Cloud hosting and cybersecurity service providers operating under strict data processing agreements;
- Professional Advisers: Legal, audit and compliance advisers, where disclosure is necessary and subject to professional confidentiality obligations.
9 International Data Transfers
As an international platform, at888 may transfer your personal data to, and store it in, countries outside your country of residence, including countries that may not have data protection laws equivalent to those in your home jurisdiction. Where such transfers occur, at888 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent transfer mechanisms — to protect your data to a standard consistent with this Policy.
Pakistani users should be aware that data may be processed in jurisdictions outside Pakistan. Pakistan's own data protection framework, including the Personal Data Protection Bill (where enacted and applicable), may have provisions relevant to cross-border transfers. This Policy does not constitute legal advice regarding Pakistani data protection law.
10 Data Retention
at888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal and licence obligations. The following indicative retention periods apply:
| Data Category | Indicative Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Licence obligation, AML compliance |
| KYC Documents | 5 years from account closure or last transaction | Legal / regulatory obligation |
| Transaction Records | 5 years from transaction date | Financial regulation |
| Support Communications | 3 years from last interaction | Dispute resolution |
| Responsible Gambling Records | 5 years from self-exclusion or closure | Licence obligation, player welfare |
| Marketing Consent Records | Until consent withdrawn + 2 years | Proof of consent |
| Anonymous Usage Analytics | Indefinite (anonymised, not personal data) | Platform improvement |
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Retention periods may be extended where required by ongoing legal proceedings, regulatory investigations or dispute resolution processes.
11 Data Security
at888 implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include, but are not limited to:
- Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform;
- Encryption of sensitive data fields — including payment instrument details and KYC documents — at rest;
- Role-based access controls ensuring that employee access to personal data is limited to what is necessary for their specific function;
- Regular penetration testing and vulnerability assessments conducted by qualified security professionals;
- Incident response procedures, including a defined breach notification process aligned with applicable regulatory requirements.
Notwithstanding these measures, no system can guarantee absolute security. You are encouraged to use a strong, unique password for your Account, enable any available two-factor authentication, and contact support immediately if you suspect any unauthorised access to your Account.
12 User Rights
Subject to applicable law, you have the following rights in respect of your personal data held by at888. To exercise any of these rights, please contact us using the details in the Contact Us section. We will respond within a reasonable timeframe consistent with applicable legal requirements.
Right of Access
Request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your Account.
Right to Erasure
Request deletion of personal data where retention is no longer necessary, subject to legal retention obligations that may override this right.
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances, such as while a rectification request is under review.
Right to Portability
Receive a copy of personal data you have provided to us in a structured, machine-readable format, where technically feasible.
Right to Object
Object to processing carried out on the basis of legitimate interests, including direct marketing. Marketing objections are actioned immediately upon receipt.
Right to Withdraw Consent
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Complain
Lodge a complaint with the relevant data protection supervisory authority in the jurisdiction under which at888 is licensed if you believe your rights have been infringed.
Please note that certain rights are subject to exemptions — for example, the right to erasure cannot override at888's obligation to retain KYC and transaction records under applicable licence and financial regulation requirements. We will clearly explain any applicable limitations when responding to a rights request.
13 Minors
The Platform is strictly intended for adults aged 18 years and above, or the higher minimum age required by the applicable licence jurisdiction. at888 does not knowingly collect personal data from individuals under the minimum age. Where we become aware that personal data has been provided by a minor, we will take prompt steps to delete that data and close any associated Account.
14 Specific Notice for Pakistani Users
at888 operates internationally and its data practices are governed by the laws of the jurisdiction under which it holds its applicable licence. Pakistani users — including those accessing the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other cities — should be aware of the following:
- Pakistan's data protection framework is evolving. The Personal Data Protection Bill and related legislative instruments may impose obligations relevant to your data rights. This Policy does not constitute legal advice regarding Pakistani domestic data protection law.
- at888 is not affiliated with, regulated by or endorsed by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan (SBP) or any provincial authority.
- The mention of payment methods familiar in Pakistan — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — in this Policy and on the Platform is for contextual reference only. These providers govern their own data processing practices independently of at888.
- If you wish to exercise data rights or have concerns about how your information is handled, you may contact us at the details below. We will make reasonable efforts to assist, consistent with our applicable legal obligations.
15 Policy Amendments
at888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or regulatory requirements. When material changes are made, registered Account Holders will be notified via the email address on their Account or via a prominent Platform notice at least seven (7) days prior to the change taking effect. The version number and last-updated date at the top of this page will always reflect the current version. Continued use of the Platform following the effective date of any amendment constitutes acknowledgment of the revised Policy.
16 Contact Us
For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact the at888 data team. We aim to acknowledge all data-related requests within 72 hours and provide a substantive response within 30 days, subject to the complexity of the request.
Email: [email protected]
Please include "Privacy Request" in your subject line and provide your registered email address to help us locate your Account. For erasure or portability requests, identity verification may be required before we can action the request. Do not attach sensitive documents unless specifically requested through a secure channel by our compliance team.
For responsible gambling support, account self-exclusion or concerns about problem gambling, please visit our dedicated Responsible Gambling page.
Your Data, Your Rights — Now Play With Confidence.
You've read how at888 handles your personal data. We believe transparency builds trust. Visit the homepage to explore our platform — sports betting, live casino and slots — knowing exactly how your information is protected.
18+ only. Gambling involves financial risk. Pakistani users must verify applicable local law before participating. at888 is not endorsed by any Pakistani government body or financial institution.