At by888, your privacy is not a tick-box exercise — it is a genuine operational commitment backed by our international licensing obligations. This Privacy Policy explains exactly what personal data we collect from Pakistani players, how we use it, who we share it with, and what rights you hold over it at every stage of your by888 journey.
These cards summarise by888's core privacy principles. Please read the full policy below for complete details.
by888 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not gather data speculatively or for purposes unrelated to your gaming experience.
All personal data stored on by888's systems is protected using industry-standard AES-256 encryption at rest and TLS 1.3 encryption in transit. Access to player data within by888's systems is restricted on a strict need-to-know basis.
by888 does not sell, rent, or commercially transfer your personal data to third parties for marketing purposes. Data shared with third parties is limited to what is required for payment processing, KYC verification, licensing compliance, and platform security.
You have the right to access, correct, and request deletion of your personal data held by by888, subject to our legal retention obligations. Data subject requests are processed within thirty (30) calendar days of receipt by our support team.
by888 uses cookies to maintain session security, analyse platform performance, and personalise your experience. We do not use third-party advertising cookies to profile you across external websites. Cookie preferences can be managed from your account settings.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, by888 will notify affected players promptly and without undue delay, in compliance with our international licensing obligations and applicable data protection standards.
by888 is an online gaming platform accessible at by888.today, operating under internationally recognised gaming licensing standards. References in this Privacy Policy to "by888", "we", "us", or "our" refer to the by888 platform and its operating entity. by888 acts as the data controller in respect of all personal data collected from players through the by888 platform, meaning we determine the purposes for which and the manner in which your personal data is processed.
by888 serves players located across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other cities and regions. This Privacy Policy has been prepared with the specific context of Pakistani players in mind and reflects the data processing activities relevant to Pakistani-market payment methods and gaming preferences.
This Privacy Policy applies to all personal data collected, processed, and stored by by888 in connection with your use of the by888 platform, including:
This policy does not apply to third-party websites, applications, or services that may be linked to or from the by888 platform. by888 is not responsible for the privacy practices of third parties, including payment service providers, game studios, or licensing bodies, each of which operates under its own privacy framework.
by888 collects and processes the following categories of personal data:
Full legal name, date of birth, gender, nationality, and copies of identity documents such as Pakistani CNIC or passport, collected as part of the KYC identity verification process.
Residential address, email address, and mobile telephone number provided during registration or subsequently updated in your account profile.
Payment method details including JazzCash or EasyPaisa mobile wallet numbers, bank account details for HBL, UBL, or Meezan Bank transfers, cryptocurrency wallet addresses for USDT TRC20 transactions, and transactional records of all deposits and withdrawals.
Records of all bets placed, games played, bonus claims, session duration, login timestamps, wagering history, win/loss records, and responsible gaming tool configurations maintained in your account settings.
IP address, device identifier, browser type and version, operating system, screen resolution, time zone, and platform interaction logs generated automatically during your use of the by888 website and gaming services.
Records of all communications between you and by888's customer support team, including live chat transcripts, email correspondence, and any feedback or complaints submitted through platform channels.
Special Category Data: by888 does not intentionally collect special category personal data (such as health data, ethnic origin, or political opinions) from players. However, where a player voluntarily discloses information that falls into a special category — for example, in the context of a responsible gaming self-exclusion request referencing a health condition — by888 will process such data with the additional care appropriate to its sensitivity.
by888 collects your personal data through the following means:
| Collection Method | Data Collected |
|---|---|
| Account Registration | Identity data, contact data, age declaration |
| KYC Verification | Identity documents, proof of address |
| Payment Processing | Financial data, transaction records |
| Platform Use | Gaming data, session logs, technical data |
| Customer Support | Communication data, complaint records |
| Cookies & Tracking | Technical data, behavioural analytics |
| Third-Party Verification | Identity confirmation data from KYC providers |
by888 processes your personal data on the following legal bases:
by888 uses the personal data it collects for the following purposes:
by888 does not sell your personal data to any third party. We share personal data only with the categories of recipients listed below and only to the extent necessary for the specific purpose in each case:
by888 shares financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network operators as necessary to process your deposit and withdrawal transactions. Each payment provider operates under its own privacy framework and is independently responsible for its processing activities.
by888 engages third-party identity verification service providers to assist with the KYC process. These providers receive identity documents and personal details solely for the purpose of confirming the accuracy and authenticity of the information provided during registration and as requested by by888's licensing obligations.
Game studios and live dealer technology providers whose products are integrated into the by888 platform receive technical session data necessary to deliver their games and settle results. These providers are contractually restricted from using player data for any purpose beyond game delivery.
by888 will disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. by888 will notify affected players of such disclosures where legally permitted to do so.
by888 may share personal data with legal advisers, auditors, and compliance consultants where necessary for the purpose of obtaining professional advice or conducting internal audits, subject to binding confidentiality obligations.
No Third-Party Marketing: by888 does not disclose your personal data to third parties for the purpose of enabling those third parties to market their own products or services to you. If you receive unsolicited marketing communications purportedly associated with by888, please report this to our support team immediately as it may indicate a phishing or impersonation attempt.
by888 operates under an international gaming licence and, as a consequence, some of your personal data may be processed by systems or personnel located outside Pakistan. Where such international transfers occur, by888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within by888's licensing jurisdiction. These safeguards include contractual data protection clauses binding recipients to equivalent privacy obligations.
In particular, data shared with KYC verification providers, game studios, and payment processing infrastructure may be processed in jurisdictions that differ from your country of residence. by888 conducts due diligence on all international data processing partners to confirm that adequate protective measures are in place before any transfer is effected.
by888 retains personal data for the periods specified below, unless a longer retention period is required by applicable law, regulatory obligation, or legitimate dispute resolution purposes:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | Licensing & AML obligation |
| Financial transaction records | 5 years after account closure | Licensing & AML obligation |
| Gaming & betting history | 3 years after account closure | Licensing requirement |
| Customer support records | 3 years after last interaction | Legitimate interest (dispute resolution) |
| Technical & session logs | 12 months from collection | Legitimate interest (security) |
| Marketing consent records | Until consent withdrawn + 1 year | Legal compliance |
Upon expiry of the applicable retention period, by888 will securely delete or anonymise your personal data such that it can no longer be associated with your identity. Anonymised and aggregated data may be retained indefinitely for statistical and platform improvement purposes.
by888 uses cookies and similar tracking technologies on the by888.today website to support the operation and improvement of the platform. The following categories of cookies are used:
by888 does not use third-party advertising or retargeting cookies. You will not be tracked across external websites by any cookie placed by by888.
Cookie preferences for non-essential cookies can be managed from your by888 account settings. Please note that disabling performance or functional cookies may reduce the quality of your platform experience without affecting your core ability to place bets or play games.
Subject to applicable law and the specific legal bases on which by888 processes your personal data, you hold the following rights in relation to your personal data:
To exercise any of these rights, please contact by888 customer support via live chat or by writing to support@by888.today (plain text — not a clickable link). by888 will respond to all data rights requests within thirty (30) calendar days of receipt.
by888 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
Notwithstanding these measures, no internet transmission or electronic storage system is completely impenetrable. by888 therefore encourages players to use strong, unique passwords for their accounts and to enable two-factor authentication to maximise the security of their by888 account.
The by888 platform is strictly intended for individuals who are at least 21 years of age. by888 does not knowingly collect or process personal data from individuals under 21 years of age. Age verification is conducted as a mandatory part of the by888 KYC process, and accounts that cannot be verified as belonging to an adult of at least 21 years are suspended immediately pending further investigation.
If by888 becomes aware that it has inadvertently collected personal data from an individual under 21 years of age, it will take immediate steps to delete that data and permanently close the associated account. If you are a parent or guardian and believe that a minor in your care has accessed the by888 platform and provided personal data, please contact by888 support immediately so that appropriate action can be taken without delay.
Parental Controls: by888 strongly recommends that parents and guardians residing in Pakistan utilise available device-level parental control tools to restrict access to online gaming sites by individuals under 21. by888 cannot be held responsible for access obtained through deliberate misrepresentation of age.
With your consent, by888 may send you promotional communications regarding new games, bonus offers, PSL betting specials, seasonal promotions, and platform updates via email or SMS. These communications are clearly identified as originating from by888 and include an unsubscribe mechanism in every message.
You may withdraw your consent to receive marketing communications at any time by: (a) clicking the unsubscribe link included in any by888 marketing email; (b) adjusting your communication preferences in your by888 account settings; or (c) contacting by888 customer support and requesting removal from marketing lists. Processing of your withdrawal request will occur within ten (10) business days, after which no further marketing communications will be sent to you.
Withdrawal of marketing consent does not affect your receipt of transactional and account-related communications, including deposit confirmations, withdrawal notifications, security alerts, and updates to by888's Terms & Conditions or Privacy Policy, which are sent on the basis of contractual or legal necessity rather than consent.
by888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, licensing requirements, or operational context. Where updates are material — affecting the categories of data collected, the purposes of processing, or player privacy rights — by888 will notify registered players via email and display a prominent notice on the by888 platform prior to the updated policy taking effect.
The effective date and last-revised date displayed at the top of this page indicate when the current version of this policy was adopted. By continuing to use the by888 platform following notification of a policy update, you acknowledge the revised Privacy Policy. If you do not accept the revised terms, you should cease using the platform and request account closure in accordance with the procedure described in by888's Terms & Conditions.
For all privacy-related enquiries, data subject access requests, or concerns regarding by888's handling of your personal data, please contact by888's support team through the following channels:
When submitting a data rights request, please include your by888 account username, your registered email address, and a clear description of the request you wish to make. by888 may request additional verification of your identity before processing data access or erasure requests to ensure that data is not disclosed to or deleted at the request of an unauthorised third party.
by888 aims to acknowledge all privacy enquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days of the date of acknowledgement. Where a request is complex or numerous, this period may be extended by a further thirty (30) calendar days with written notice to the requesting party.
Policy Version: This Privacy Policy is effective as of 1 January 2026. Players are encouraged to review this policy periodically. For related information, please also review by888's Terms & Conditions and Responsible Gaming Policy.
Now that you understand exactly how by888 handles your personal data, you can play with confidence. Our platform combines top-tier data protection with Pakistan's most complete online gaming experience.