td888 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy describes how td888 ("the Company", "td888", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("Players", "you", "your") who access or use the td888 platform at td888.casino, including all associated games, betting services, promotional activities, and customer support channels.

td888 is committed to processing personal data in a manner that is lawful, fair, and transparent. We recognise that Pakistani players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This policy has been written in plain English so that every td888 player can understand their rights and our obligations without needing legal training.

By registering a td888 account, making a PKR deposit, or otherwise using the td888 platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, you should not use the td888 platform.

This Privacy Policy should be read alongside the td888 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of applicable data protection legislation, td888 is the data controller in respect of personal data collected through the td888 platform. This means td888 is responsible for deciding the purposes and means of processing your personal data.

All data protection queries, subject access requests, and privacy-related complaints should be directed to the td888 data protection contact point, reachable via the support channels listed in Section 14 of this policy. td888 commits to responding to all formal privacy enquiries within 30 calendar days of receipt.

3. Data We Collect

td888 collects personal data across the following categories:

3.1 Registration and Identity Data

When you create a td888 account, we collect: Full Legal Name Date of Birth Email Address Phone Number Residential Address Username / Password (hashed)

This information is required to create and verify your account. td888 enforces 18+ age verification using this data and will request documentary proof (such as a CNIC, passport, or driving licence) where required for KYC compliance.

3.2 Financial and Transaction Data

To process PKR deposits and withdrawals via Easypaisa, JazzCash, HBL, and other supported payment methods, td888 collects: Payment Method Details Transaction History Deposit & Withdrawal Amounts (PKR) Account Balance Records

Full card numbers and mobile wallet PINs are never stored on td888 servers. Payment processing is handled by PCI-DSS-compliant payment processors.

3.3 Gaming Activity Data

td888 records your gaming and betting activity to operate the platform, resolve disputes, and fulfil responsible gaming obligations: Game Sessions Bets Placed & Stakes (PKR) Win / Loss Records Sports Betting Markets Bonus Claim History

3.4 Technical and Device Data

When you access td888 from a browser or mobile device, we automatically collect: IP Address Device Type & OS Browser Type & Version Session Duration Pages Visited Referring URL

This technical data helps td888 detect fraud, prevent multi-accounting, and improve platform performance for Pakistani players on both mobile and desktop connections.

3.5 Communication Data

When you contact td888 support via Live Chat, WhatsApp, Telegram, or email, we retain records of those communications for quality assurance, training, and dispute resolution purposes. Communications are stored securely and accessed only by authorised td888 staff.

3.6 Verification Documents

As part of KYC and AML compliance, td888 may request and retain copies of identity documents, proof of address, and source of funds documentation. These documents are stored in an encrypted document management system with access strictly controlled.

4. How We Use Your Data

td888 uses the personal data collected for the following specific purposes:

• Account Management: To create, maintain, and secure your td888 account, including password recovery and session management.
• Transaction Processing: To process PKR deposits via Easypaisa and JazzCash, execute withdrawals to your nominated account, and maintain accurate balance records.
• Identity Verification: To verify your age (18+) and identity as required by our responsible gaming obligations and internal compliance policies.
• Game and Platform Delivery: To provide access to the full td888 game library, including slots, live dealer tables, Poker, Jackpot Slots, Cockfighting, and sports betting markets.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and unauthorised access attempts.
• Responsible Gaming: To monitor gaming patterns and apply the responsible gaming tools you have requested, including deposit limits, session reminders, and self-exclusion.
• Customer Support: To respond to your enquiries, resolve account disputes, and improve the quality of td888 support for Pakistani players.
• Legal Compliance: To fulfil our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and data protection regulations.
• Platform Improvement: To analyse aggregate, anonymised usage data for the purpose of improving td888 platform performance, mobile compatibility, and game selection.
• Marketing (with consent): To send you promotional communications about td888 bonuses, new game releases, and Pakistan-specific offers (e.g., HBL PSL season promotions) where you have opted in to receive such communications. You may withdraw this consent at any time via your td888 account settings.

5. Legal Bases for Processing

td888 processes your personal data on one or more of the following lawful bases:

• Contract Performance: Processing is necessary to fulfil the td888 Terms & Conditions that you accept when registering an account — including account operation, transaction processing, and game delivery.
• Legal Obligation: Processing is required to comply with applicable laws, including AML regulations, KYC requirements, and responsible gaming obligations.
• Legitimate Interests: td888 has a legitimate interest in processing data for fraud prevention, platform security, and internal analytics — provided those interests do not override your fundamental privacy rights.
• Consent: For optional processing activities such as marketing communications, td888 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Cookies & Tracking Technologies

td888 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your logged-in session, and gather anonymised analytics data. The categories of cookies used by td888 are:

• Strictly Necessary Cookies: Required for the td888 platform to function. These cannot be disabled without breaking core functionality including login sessions and game delivery.
• Functional Cookies: Remember your language preference, game lobby layout, and other customisation choices to provide a better experience for Pakistani players returning to td888.
• Analytics Cookies: Used to understand how players navigate the td888 platform in aggregate. Analytics data is anonymised and used only to improve the platform — it is not linked to individual player profiles for marketing purposes.
• Security Cookies: Support fraud detection and device fingerprinting to prevent multi-accounting and unauthorised access.

You may manage cookie preferences through your browser settings. Please be aware that disabling non-essential cookies may impact the functionality of certain td888 platform features.

7. Data Sharing

td888 does not sell, rent, or share your personal data with third parties for their own marketing purposes. Data is shared only in the following strictly controlled circumstances:

• Payment Processors: PKR transaction data is shared with Easypaisa, JazzCash, HBL, and other payment providers solely to the extent required to execute your deposit or withdrawal.
• KYC and AML Providers: Identity verification and document checking is performed by certified third-party KYC/AML service providers operating under confidentiality obligations.
• Game Software Providers: Game providers who supply titles to the td888 platform receive the minimum data necessary to deliver the gaming experience (e.g., session token and stake amount). Game providers do not receive your full personal profile.
• Regulatory and Law Enforcement Authorities: td888 will disclose personal data to Pakistani regulatory authorities or law enforcement agencies where required by law or in response to a valid legal request. td888 will seek to notify the affected Player of such disclosures where legally permitted to do so.
• Professional Advisors: Legal, accounting, and audit professionals engaged by td888 may access personal data under strict confidentiality agreements when required to fulfil their professional duties.

All third parties who receive personal data from td888 are contractually required to protect that data to a standard at least equivalent to td888's own privacy practices.

8. International Data Transfers

As an international platform serving Pakistani players, td888 may transfer personal data to servers or service providers located outside Pakistan. Where such transfers occur, td888 ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses that bind the receiving party to privacy standards equivalent to those described in this policy.
• Transfer only to jurisdictions that maintain adequate data protection frameworks.
• Encryption of data in transit using TLS 1.2 or higher at all times.

By using the td888 platform, Pakistani players consent to the international transfer of their data in the circumstances and with the safeguards described above.

9. Data Security

td888 implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and td888 servers.
• AES-256 encryption for sensitive data at rest, including identity documents and payment records.
• One-way bcrypt hashing for all account passwords — td888 staff cannot retrieve your password in plain text.
• Role-based access controls ensuring that td888 staff access only the data necessary for their specific function.
• Regular penetration testing and security audits by independent cybersecurity firms.
• Automated anomaly detection systems that flag unusual login activity or transaction patterns for manual review.
• Secure physical and logical controls on data centre infrastructure.

In the event of a personal data breach that poses a risk to Player rights, td888 will notify affected Players and relevant authorities within the timeframes required by applicable law. Pakistani players should report any suspected security incidents affecting their td888 account to td888 support immediately.

10. Data Retention

td888 retains personal data for the minimum period necessary to fulfil the purposes described in this policy. Standard retention periods are:

• Active Account Data: Retained for the lifetime of your td888 account plus a minimum of 5 years following account closure, to meet regulatory and legal obligations including AML record-keeping requirements.
• Transaction Records (PKR): Retained for a minimum of 5 years following the transaction date, as required by applicable financial record-keeping regulations.
• KYC and Identity Documents: Retained for 5 years following account closure or the end of the business relationship, unless a longer period is required by law.
• Customer Support Communications: Retained for 3 years following the resolution of the relevant support interaction.
• Marketing Consent Records: Retained for 3 years following withdrawal of consent or account closure, to demonstrate compliance with consent requirements.
• Technical / Log Data: Retained for 12 months on a rolling basis, after which it is anonymised or deleted.

Following the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

11. Your Privacy Rights

Pakistani players who have a td888 account hold the following rights in respect of their personal data. These rights can be exercised free of charge by contacting td888 support using the details in Section 14: