Privacy Policy — 889u Data Protection Commitment

01 Introduction

This Privacy Policy ("Policy") describes how 889u ("889u", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "your") who access or use the 889u platform, including the website at 889u.org, the sportsbook, casino, instant games, payment services, and all associated features and content.

889u is committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection legislation. We understand that Pakistani players value their privacy — particularly when it comes to financial transactions, crypto deposits, and betting activity. This Policy is written in plain English so that you genuinely understand what happens to your data, not just what we are legally required to tell you.

By creating an 889u account and using the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the 889u platform and contact our support team to close your account and request data deletion.

02 Data We Collect

889u collects only the personal data that is necessary to provide a safe, secure, and regulated betting and gaming platform. The categories of personal data we may collect are listed below.

You are not required to provide more personal data than is strictly necessary for the purpose at hand. However, certain categories — particularly identity and financial data — are mandatory for regulatory compliance. Failure to provide required data may result in limitations on your account functionality, including the inability to process withdrawals.

03 How We Collect Data

889u collects your personal data through several channels, all of which are clearly associated with your use of the 889u platform:

• Direct registration: When you create your 889u account, you provide your name, email address, date of birth, and contact details directly through the registration form.
• Identity verification: When you submit KYC documents — such as a copy of your CNIC, passport, or bank statement — 889u receives and stores those documents in a secure, access-controlled environment.
• Payment processing: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bitcoin, or USDT, transaction metadata is recorded by 889u's payment infrastructure.
• Automated technical collection: 889u's platform automatically collects technical data — including IP addresses, device identifiers, and session logs — as part of normal platform operation. This data is collected via server logs, session cookies, and similar technologies.
• Customer support interactions: When you contact the 889u support team via live chat or email, the content of those communications is recorded and stored.
• Responsible gaming tools: If you set deposit limits, activate self-exclusion, or use other responsible gaming features, that activity is logged as part of your account record.

04 How We Use Your Data

889u uses your personal data only for specific, defined purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which 889u processes personal data are:

1. Account creation and management — Setting up and maintaining your 889u account, including processing your registration details, managing your profile, and authenticating your login sessions.
2. Identity verification and KYC compliance — Verifying that you meet the 889u eligibility criteria, confirming your age (21+ only), and fulfilling our know-your-customer obligations under applicable gaming regulations.
3. Payment processing — Enabling deposits and withdrawals via your chosen payment method, including JazzCash, EasyPaisa, Bitcoin, USDT, and Pakistani bank transfers.
4. Anti-money laundering (AML) monitoring — Monitoring account activity for unusual patterns, conducting enhanced due diligence where required, and reporting suspicious activity to the appropriate regulatory authority where legally required.
5. Responsible gaming — Monitoring your betting and gaming behaviour to identify potential signs of problem gambling, implementing limits or restrictions you have requested, and providing intervention support where appropriate.
6. Customer support — Responding to your support queries, resolving disputes, and maintaining a record of our communications with you for quality assurance purposes.
7. Platform security — Detecting and preventing fraud, unauthorised account access, bot activity, and other forms of platform abuse.
8. Platform improvement and analytics — Understanding how users interact with 889u in aggregate terms to improve our product, fix technical issues, and optimise the platform for Pakistani users.
9. Legal and regulatory compliance — Meeting our obligations under applicable licensing conditions, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required by law.

889u does not use your personal data for automated decision-making that produces significant legal effects on you without human review. Where automated screening flags an account for review — for example, during an AML check — a trained 889u compliance officer will review the case before any action is taken.

05 Legal Basis for Processing

889u processes your personal data only where there is a lawful basis for doing so. The legal bases on which 889u relies are as follows:

• Contractual necessity: Processing that is necessary to provide you with the services you have registered for — including account management, payment processing, and game access — is carried out on the basis of the contractual relationship between you and 889u.
• Legal obligation: 889u is required by its international gaming licence and applicable AML legislation to collect and retain certain categories of data. This processing is carried out to comply with legal and regulatory obligations that are binding on 889u.
• Legitimate interests: Certain processing activities — such as fraud detection, platform security, and aggregate analytics — are carried out on the basis of 889u's legitimate interest in maintaining a safe, fair, and commercially viable platform. We apply a balancing test to ensure our legitimate interests do not override your fundamental privacy rights.
• Consent: Where 889u sends you direct marketing communications or uses non-essential cookies, this is done on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

06 Data Sharing & Disclosure

889u does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes — full stop. We may, however, share your data with the following categories of recipients in the specific circumstances described:

• Identity verification providers: Third-party KYC service providers who verify the authenticity of your identity documents and confirm your age and identity on behalf of 889u. These providers act as data processors under binding data processing agreements with 889u.
• Payment processors: Payment gateway providers that facilitate your deposits and withdrawals. These providers receive only the minimum data necessary to process your specific transaction — for example, your JazzCash wallet ID or crypto wallet address.
• Fraud prevention and AML screening services: Third-party platforms used to screen transactions and accounts for fraud, money laundering, and sanctions list matches. These services are used to protect both 889u and its legitimate user base.
• Regulatory and law enforcement authorities: Where 889u is required by law, court order, or regulatory directive to disclose information, we will comply. We will notify you of such disclosure where legally permitted to do so.
• IT and infrastructure service providers: Cloud hosting, database, and platform infrastructure providers who process data on 889u's behalf under strict data processing agreements and access controls.
• Professional advisers: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and who access data only to the extent necessary to provide their services.

07 Cookies & Tracking Technologies

889u uses cookies and similar tracking technologies to operate the platform, maintain your login session, and understand how users interact with the site. A cookie is a small text file placed on your device when you visit a website. 889u uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the 889u platform to function. They maintain your authenticated session, remember your language preference, and enable core security features. These cookies cannot be disabled without breaking the platform.
• Functional cookies: These remember your preferences — such as your preferred deposit method or last-visited game section — to provide a more personalised experience. Disabling these will not prevent access to the platform but will remove personalisation features.
• Analytics cookies: 889u uses first-party analytics cookies to understand aggregate usage patterns, identify pages that perform poorly, and improve the platform experience. This data is never tied to individually identifiable user profiles without your explicit consent.
• Security cookies: Used to detect and prevent bot activity, credential stuffing, and other forms of automated abuse targeting the 889u login and registration flows.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair platform functionality. A cookie preference centre is available within your 889u account settings, where you can review and update your cookie consent choices at any time.

08 Data Retention

889u retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing conditions. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data is anonymised rather than deleted, the resulting anonymised dataset is no longer personal data and falls outside the scope of this Privacy Policy.

09 Data Security

889u implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes but is not limited to:

• Encryption in transit: All data transmitted between your device and the 889u platform is protected using TLS 1.2 or higher. This applies to all connections including login, registration, deposits, and withdrawals.
• Encryption at rest: Sensitive personal data — including KYC documents, financial records, and identity data — is encrypted at rest using AES-256 encryption within our secure data infrastructure.
• Access controls: Access to personal data within 889u's internal systems is restricted on a need-to-know basis. All staff with access to personal data undergo background screening and regular data protection training.
• Two-factor authentication (2FA): 889u supports 2FA for user account login and enforces 2FA for all internal administrative access to production systems containing personal data.
• Regular security assessments: 889u's platform and infrastructure undergoes periodic penetration testing and vulnerability scanning by qualified information security professionals.
• Incident response: 889u maintains a documented data breach response procedure. In the event of a confirmed data breach affecting your personal data, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.

10 Your Privacy Rights

Depending on your jurisdiction and the applicable data protection framework, you may have some or all of the following rights with respect to your personal data held by 889u. We take all valid rights requests seriously and will respond within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data 889u holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to rectification: If any personal data 889u holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to overriding retention obligations — for example, we cannot delete transaction records that we are required to retain under our gaming licence or AML obligations.
• Right to restriction of processing: You may request that 889u restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. 889u will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — such as direct marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the 889u Privacy Team via the support email address listed in Section 14 of this Policy. We may need to verify your identity before processing a rights request to ensure we do not disclose data to an unauthorised party.

11 Children's Privacy

The 889u platform is strictly intended for adults aged 21 years and above. 889u does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is a mandatory step in the 889u account registration and KYC process.

If 889u becomes aware — through its own verification processes, a report from a third party, or any other means — that an account has been created by or is being used by an individual under the age of 21, the account will be immediately suspended. Any deposits associated with that account will be returned to the originating payment source following investigation, and all personal data collected in connection with that account will be deleted to the extent permitted by applicable law.

12 Cross-Border Data Transfers

889u operates under an internationally recognised gaming licence and uses cloud infrastructure and service providers that may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than the country in which you are based.

Where personal data is transferred to countries that do not provide an equivalent level of data protection to the originating jurisdiction, 889u relies on one or more of the following transfer mechanisms to ensure your data remains protected:

• Standard contractual clauses (SCCs) approved by the relevant data protection authority, incorporated into contracts with third-party processors located in non-adequate countries.
• Binding corporate rules (BCRs) where applicable to transfers within the 889u group of companies.
• Transfers that are necessary for the performance of a contract between you and 889u — for example, processing a Bitcoin or USDT withdrawal that routes through an international blockchain network.

By using the 889u platform, you acknowledge that your personal data may be transferred internationally as described above. If you have questions about the specific safeguards in place for any particular transfer, please contact us using the details in Section 14.

13 Changes to This Privacy Policy

889u reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — 889u will provide advance notice by posting a prominent notice on the platform and, where appropriate, by sending a notification to your registered email address.

The version number and effective date at the top of this Policy will always reflect the most current version. We encourage you to review this Policy periodically. Your continued use of the 889u platform after any amendment takes effect constitutes your acknowledgement of the revised Policy. If you do not accept any change, you should cease using the platform and contact us to close your account.

Previous versions of this Privacy Policy are available on request by contacting the 889u Privacy Team. We retain archived versions of this document for a minimum of 3 years.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data protection rights, please get in touch with the 889u Privacy & Data Protection team using the contact details below. We are committed to responding to all genuine privacy enquiries promptly and transparently.

• Privacy Support Email: [email protected] — please include "Privacy Query" in the subject line for fastest routing.
• Live Chat: Available 24/7 directly from the 889u platform. Average response time is under 90 seconds.
• Response Time for Rights Requests: 889u aims to acknowledge all data subject rights requests within 3 business days and to provide a full response within 30 calendar days of receipt.