rich88 Privacy
Policy — Your Data,
Our Responsibility.

rich88 is committed to protecting the privacy of all individuals who interact with the rich88 platform. This Privacy Policy describes in clear, plain English how rich88 collects, uses, stores, shares, and protects personal data belonging to members and visitors based in Pakistan and elsewhere.

This policy applies to all personal data processed through any interaction with the rich88 platform, including account registration, the rich88 login process, PKR deposits and withdrawals via Easypaisa, JazzCash, HBL, UBL, and MCB Bank, participation in casino games, Cockfighting events, Jackpot Slots, Hot Pot draws, and all customer support communications.

This policy should be read together with the rich88 Terms & Conditions and Responsible Gaming policy, both of which are accessible from the footer of every page on rich88.fyi.

For the purposes of this Privacy Policy, rich88 — operating the platform at rich88.fyi — acts as the Data Controller in respect of all personal data collected from members and visitors. As Data Controller, rich88 determines the purposes and means by which your personal data is processed.

If you have any questions or concerns about how rich88 processes your personal data, or if you wish to exercise any of your data rights as described in Section 11 of this policy, you may contact the rich88 data team through the support channels listed in Section 15.

rich88 collects personal data in two broad categories: data you provide directly, and data collected automatically through your use of the platform. The following table sets out the specific categories of data collected:

rich88 collects personal data through the following means:

• Direct provision: When you register an account, verify your identity, make a deposit or withdrawal, contact the support team, or opt into a promotion, you provide data directly to rich88.
• Automated collection: As you navigate the rich88 platform, technical data including IP address, device identifiers, and browser information is collected automatically for security, fraud prevention, and platform optimisation purposes.
• Payment providers: When you deposit via Easypaisa, JazzCash, or a Pakistan bank, the payment provider confirms transaction completion to rich88. rich88 receives confirmation of the transaction amount and reference — we do not receive your full payment account credentials.
• Cookies and local storage: rich88 uses cookies and browser local storage to maintain your login session, remember your platform preferences, and collect aggregate usage analytics. See Section 9 for full cookie details.

rich88 uses the personal data we collect for the following specific purposes:

• Account management: Creating and maintaining your rich88 account, authenticating your login via OTP, and managing your PKR account balance.
• Transaction processing: Processing PKR deposits from Easypaisa, JazzCash, HBL, UBL, and MCB Bank, and processing PKR withdrawals back to your nominated payment method.
• Identity verification (KYC): Verifying your age and identity in compliance with applicable anti-money laundering obligations and our 18+ age restriction policy.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and unauthorised account access.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, facilitating self-exclusion and limit requests, and complying with our responsible gaming obligations.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and providing account assistance through WhatsApp, Telegram, and email.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how members interact with rich88 and to improve the platform experience for all Pakistan players.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to members who have opted into marketing communications. You may opt out at any time by contacting the support team.

rich88 processes personal data under the following legal bases, consistent with internationally recognised data protection principles:

rich88 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, HBL, UBL, and MCB Bank receive only the transaction data required to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and applicable Pakistan financial regulation.
• Game software providers: Game providers that supply rich88 with casino titles, live dealer streams, and Cockfighting broadcasts receive anonymised session data for the purpose of game delivery and RTP auditing. They do not receive personally identifiable information.
• Identity verification services: During KYC processes, limited identity data may be shared with third-party verification services solely for the purpose of confirming age and identity. Such services are contractually bound to use data only for verification.
• Legal and regulatory disclosure: rich88 may disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable law, court order, or legitimate legal obligation. We will notify affected members of such disclosures wherever legally permitted to do so.
• Platform technology providers: Hosting, security, and analytics service providers who support the operation of the rich88 platform may have access to technical data under strict data processing agreements that prohibit any independent use of your data.

In all cases of third-party data sharing, rich88 requires that the receiving party implements appropriate technical and organisational security measures to protect your personal data.

rich88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active rich88 account, plus a period of 5 years following account closure to satisfy anti-money laundering record-keeping requirements.
• Transaction data: PKR deposit and withdrawal records are retained for 7 years following the date of each transaction, consistent with financial record-keeping obligations.
• Gaming activity data: Session and game outcome records are retained for 3 years following the date of the session, for dispute resolution and responsible gaming purposes.
• Support communication data: Customer support correspondence is retained for 2 years following the resolution of the relevant support ticket.
• Technical and device data: Log files and technical data are retained for 12 months from the date of collection, after which they are anonymised or deleted.
• Marketing consent data: Records of marketing opt-in consent are retained for the duration of your membership and for 2 years following account closure.

At the end of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with any individual member.

rich88 uses cookies and similar technologies on the rich88.fyi platform to deliver a functional, personalised, and secure experience. The following categories of cookies are used:

• Essential cookies: Required for core platform functionality including maintaining your login session after authentication, storing your account preferences, and enabling secure PKR transactions. These cookies cannot be disabled without impairing platform functionality.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and multiple simultaneous sessions from different locations. These are essential to the security of your rich88 account.
• Analytics cookies: Used to collect aggregated, anonymised data about how members navigate and interact with the rich88 platform. This data is used to improve usability and performance. No personally identifiable information is associated with analytics data.
• Preference cookies: Used to remember your game category preferences, language settings, and responsible gaming tool configurations between sessions.

Most modern browsers allow you to manage cookie settings, including blocking or deleting cookies. However, blocking essential cookies will prevent you from logging in to your rich88 account and using the platform normally. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

rich88 implements a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. The key security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and the rich88 platform is encrypted using industry-standard SSL/TLS protocols. This applies across all Pakistan mobile networks and Wi-Fi connections.
• Password hashing: Your rich88 account password is never stored in plain text. Passwords are cryptographically hashed using secure algorithms before storage. Even rich88's own technical team cannot view your password.
• OTP verification: Two-factor authentication via OTP sent to your registered Pakistan mobile number adds an additional layer of protection to your rich88 login.
• Anomaly detection: rich88 operates automated systems that detect unusual login patterns, including logins from new devices, unrecognised locations, or multiple failed authentication attempts. Suspicious activity triggers automatic account protection measures and notifies the affected member.
• Access controls: Access to member personal data within the rich88 organisation is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Data breach response: In the event of a personal data breach that poses a risk to affected members, rich88 will notify affected members via their registered Pakistan mobile number within 72 hours of becoming aware of the breach, and will take immediate steps to contain and remediate the incident.

As a rich88 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact the support team using the details in Section 15. rich88 will respond to all data rights requests within 30 days of receipt.

rich88 is strictly for adults aged 18 and over. rich88 does not knowingly collect or process personal data belonging to individuals under the age of 18. If rich88 discovers that an account has been registered by a person under 18, the account will be immediately closed and all associated data will be deleted, with the exception of records required for legal and regulatory compliance purposes.

If you are a parent or guardian and believe that a minor in your care has registered a rich88 account, please contact the support team immediately via WhatsApp or at [email protected]. rich88 will investigate and take appropriate action within 24 hours of receiving a credible report of a minor's account.

The rich88 platform may reference third-party services such as Easypaisa, JazzCash, and Pakistan banks in a descriptive context. rich88 does not embed external third-party tracking scripts or advertising networks on the platform. Any reference to third-party payment providers is purely informational — clicking on a payment method within the rich88 cashier initiates a transaction flow within the rich88 platform, not a redirect to an external site.

rich88 is not responsible for the privacy practices of third-party websites that may be accessed independently of the rich88 platform. If you navigate to a third-party site of your own accord, you should review that site's own privacy policy.

rich88 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made to how your personal data is collected, used, or shared, rich88 will notify active members via their registered Pakistan mobile number prior to the change taking effect. The updated policy will be published on this page with a revised "Last Updated" date.

For minor corrections, clarifications, or formatting updates that do not materially affect your rights or how your data is used, rich88 may update this policy without individual notification. We recommend reviewing this page periodically to stay informed of any changes.

Your continued use of the rich88 platform following the notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must stop using the platform and may request account closure through the support team.

For any privacy-related queries, data access requests, rectification requests, deletion requests, or to report a potential data breach, please contact the rich88 data team through any of the following channels. All privacy-related requests are treated with priority and acknowledged within 24 hours:

• Email: [email protected] — the preferred channel for formal data rights requests and KYC-related correspondence
• WhatsApp: rich88-support — available 24/7 for urgent privacy concerns and initial enquiries
• Telegram: @rich88official — for follow-up on ongoing data requests and support tickets

When submitting a data rights request, please include your registered Pakistan mobile number and a brief description of your request so that the team can verify your identity and locate the relevant data efficiently. rich88 will not action data requests from unverified contacts.

For concerns about the responsible gaming aspect of your account, including self-exclusion requests and responsible gaming tool queries, please visit the Responsible Gaming page or contact the support team directly. Self-exclusion requests are actioned within 24 hours of receipt.