tc888 Privacy Policy

tc888 (referred to throughout this Privacy Policy as "tc888", "we", "us", or "our") operates the online casino and sports betting platform accessible at tc888.bio. tc888 is the data controller in respect of all personal information collected from Players and visitors to the Platform.

This Privacy Policy applies in full to all individuals who access, register with, or use the tc888 Platform in any capacity, including registered Players, prospective Players who visit the site without registering, and individuals who contact our customer support team.

tc888 collects the following categories of personal data from Players and Platform visitors, to the extent necessary for the purposes described in this Privacy Policy:

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (for mandatory 21+ age verification)
• Pakistani CNIC number or passport number (submitted during KYC verification)
• Nationality and country of residence
• Profile username chosen during registration

• Email address (used for account communications and, where opted in, marketing)
• Pakistani mobile number (used for account security and transaction alerts)
• Residential address (required for KYC verification and regulatory compliance)

• JazzCash or EasyPaisa account details used for deposits and withdrawals
• HBL, UBL, Meezan Bank, or other bank account details used for transfers
• Transaction history: deposit amounts, withdrawal amounts, dates, and references
• Account Balance history and bonus credit records

• Game session history, including games played, stakes wagered, and outcomes
• Bonus usage history and wagering requirement progress
• Sports betting selections and settlement outcomes
• Responsible gaming preferences and self-imposed limit settings

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Mobile network operator (Jazz, Telenor, Zong, Ufone, etc.) where applicable
• Cookie identifiers and session tokens (see Section 7)
• Referring URL and on-site navigation data

• Records of all live chat conversations with tc888 Customer Support
• Email correspondence sent to or received from tc888
• Feedback, complaints, and dispute submissions

tc888 collects personal data through the following primary channels:

• Direct submission: Data you provide voluntarily when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting Customer Support, or responding to surveys and promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, session cookies, and on-site behavioural data, without any active input from you.
• Third-party sources: Identity and fraud-risk data received from KYC verification partners, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), and fraud prevention service providers, used to supplement the information you provide directly.
• Publicly available sources: In limited circumstances, tc888 may reference publicly available information — such as sanctions lists or regulatory databases — to fulfil its anti-money laundering and responsible gaming obligations.

tc888 uses the personal data it collects for the following purposes. Each purpose is described alongside the category of data used and the legal basis that justifies the processing (see Section 5 for a full explanation of legal bases):

tc888 processes personal data only where a valid legal basis exists. The four legal bases relied upon by tc888 are as follows:

Processing is necessary to enter into or perform the contract between tc888 and the Player. This includes account creation, payment processing, game provision, and customer support. Without this processing, tc888 cannot provide its services to you.

Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering regulations, age verification requirements, and data retention mandates imposed by the applicable gaming regulatory framework under which tc888 operates.

Processing is carried out to pursue tc888's legitimate business interests, provided those interests are not overridden by the privacy rights of the individual concerned. tc888's legitimate interests in this context include fraud prevention, platform security, responsible gaming monitoring, and business analytics.

For processing activities that are not covered by the above bases — most notably, the sending of promotional and marketing communications — tc888 relies on your explicit consent. You may withdraw your consent at any time by updating your marketing preferences in your Account settings or by contacting Customer Support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

tc888 does not sell, rent, or commercially disclose your personal data to any third party for their own independent commercial purposes. Personal data is shared with third parties only in the following specific and controlled circumstances:

• Payment Processors: Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment service providers used to process your deposits and withdrawals. These providers act as independent data controllers in respect of payment processing activities and are subject to their own privacy policies.
• KYC & Identity Verification Providers: Identity documents and personal details are shared with third-party KYC service providers engaged by tc888 to verify your age and identity in compliance with applicable regulations.
• Fraud Prevention Services: Technical and identity data may be shared with fraud detection platforms to identify and prevent fraudulent activity, account takeover, and money laundering.
• Game Content Providers: Your Player ID and gaming activity data may be shared with licensed game software providers whose games are integrated into the tc888 Platform, solely for the purpose of game delivery and fairness verification.
• Regulatory and Law Enforcement Authorities: tc888 will disclose personal data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory direction, without prior notice to the Player where legally mandated.
• Professional Advisors: In limited circumstances, personal data may be shared with tc888's legal advisors, auditors, or insurers in connection with the administration of tc888's business, subject to strict confidentiality obligations.

tc888 uses cookies and similar tracking technologies on its Platform for the purposes described below. A cookie is a small text file placed on your device by the tc888 Platform when you visit. Cookies allow the Platform to recognise your device on subsequent visits and provide a more personalised experience.

These cookies are strictly necessary for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, security tokens that protect your Account from unauthorised access, and load-balancing cookies that ensure stable Platform performance.

These cookies remember your preferences — such as your preferred language, game filters, and display settings — so that you do not need to reconfigure them each time you visit. Disabling these cookies will not prevent access to the Platform but may reduce the quality of your experience.

tc888 uses privacy-respecting analytics tools to understand how Players navigate the Platform, which games are most popular, and where usability improvements can be made. Analytics data is aggregated and anonymised where possible. Individual Player behaviour is not disclosed to third-party analytics providers in identifiable form.

You may control cookies through your browser settings. Most modern browsers allow you to block or delete cookies at the browser level. Please note that blocking essential cookies will prevent you from logging into your tc888 Account. For detailed instructions on managing cookies on popular Pakistani mobile browsers (Chrome for Android, Safari for iOS), please refer to your browser's help documentation.

tc888 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. The following general retention guidelines apply:

• Active Account Data: Personal and gaming data associated with an active tc888 Account is retained for the full duration of the Account's active status.
• Closed Account Data: Following Account closure — whether voluntary or due to breach of Terms and Conditions — tc888 is required to retain identity, financial, and transaction data for a minimum of five (5) years from the date of closure to satisfy anti-money laundering regulatory obligations.
• KYC Documentation: Copies of identity documents submitted for KYC verification are retained for a minimum of five (5) years from submission or from the date of Account closure, whichever is later.
• Customer Support Records: Live chat transcripts and email correspondence are retained for three (3) years from the date of the last communication in the relevant support thread.
• Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of your active Account and for two (2) years following Account closure.
• Technical & Log Data: Server logs and technical access data are retained for a maximum of twelve (12) months, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

As a tc888 Player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our Customer Support team via live chat or at the email address set out in Section 13. tc888 will respond to all valid data rights requests within 30 days of receipt.

• Right of Access: You have the right to request confirmation of whether tc888 holds personal data about you, and to receive a copy of that data together with an explanation of the purposes and legal bases for its processing.
• Right to Rectification: If any personal data tc888 holds about you is inaccurate or incomplete, you have the right to request its correction. For certain data fields, you may update this information directly via your Account settings without contacting Support.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. This right is subject to tc888's legal data retention obligations and cannot override mandatory regulatory retention periods.
• Right to Restrict Processing: You may request that tc888 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of tc888's legitimate interests, including the use of your gaming data for platform analytics. You also have an absolute right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where tc888's processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

tc888 operates a strict 21+ age policy. The tc888 Platform is not directed at, and is not intended for use by, any individual under the age of 21. tc888 does not knowingly collect or process personal data from individuals under the age of 21.

Where tc888 identifies that an Account has been created by or on behalf of an individual under 21 years of age, the following actions will be taken immediately:

• The Account will be permanently suspended without prior notice.
• All Balance and Bonus Funds associated with the Account will be forfeited.
• All personal data associated with the Account will be deleted as soon as reasonably practicable, subject to any mandatory retention obligations.
• The matter will be reported to the relevant authorities where legally required.

tc888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the tc888 Platform is encrypted using TLS (Transport Layer Security) protocols. The padlock icon visible in your browser's address bar confirms that this encryption is active during your session.
• Encryption at Rest: Sensitive personal data stored in tc888's systems — including CNIC details, financial data, and account credentials — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within tc888's internal systems is restricted on a strict need-to-know basis. Staff access is controlled via role-based permissions, multi-factor authentication, and audit logging.
• Penetration Testing: tc888's Platform and supporting infrastructure undergoes regular third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential security weaknesses before they can be exploited.
• Incident Response: tc888 maintains a documented data breach response procedure. In the event of a security incident that results in the unauthorised exposure of personal data, affected Players will be notified in accordance with applicable legal requirements.

Despite tc888's best efforts, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account login credentials. tc888 strongly recommends that you use a strong, unique password for your tc888 Account and enable any additional security features offered within the Account dashboard.

tc888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or tc888's data processing practices. The revised Privacy Policy will be published on this page with an updated effective date.

Where changes are material — meaning they significantly affect your privacy rights or tc888's data processing activities — tc888 will endeavour to notify affected Players via their registered email address or via a notification displayed upon next login to the Platform. It remains each Player's responsibility to review this Privacy Policy periodically.

Continued use of the tc888 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept any amendment to this Privacy Policy, you should cease using the Platform and request Account closure via Customer Support.

If you have any questions, concerns, or complaints regarding this Privacy Policy or tc888's handling of your personal data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the live chat widget on the tc888 Platform. This is the fastest channel for data rights requests and privacy queries.
• Email: [email protected] — please mark your subject line with "Privacy" or "Data Request" to ensure prompt routing to our data team. (Plain text — not a clickable link.)
• Support Hours: Priority escalation support is available 9 AM – 12 AM PKT. All written requests will receive an acknowledgement within 24 hours and a substantive response within 30 days.

tc888 is committed to resolving all privacy concerns raised by Players internally in the first instance. If you are not satisfied with tc888's response to your privacy complaint after giving us a reasonable opportunity to address it, you may have the right to escalate your complaint to the relevant data protection authority or regulatory body applicable in your jurisdiction.