TC888 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by TC888, accessible at https://tc888.cam ("Platform", "we", "us", "our"). It describes how we collect, use, disclose, store and protect personal data obtained from individuals ("Users", "you", "your") who access or use the Platform.

TC888 is an information and entertainment platform. We do not directly accept wagers. Where the Platform connects Users to or provides information about third-party gaming operators ("Operator"), those operators operate under their own privacy policies, which Users should review independently.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you must cease using the Platform immediately.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling guidelines, both of which are incorporated by reference into our overall terms of use.

2 Definitions

In this Policy the following terms carry the meanings stated below:

Term	Meaning
Personal Data	Any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details, IP address and device identifiers.
Processing	Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
Controller	The entity that determines the purposes and means of Processing Personal Data. TC888 acts as Controller for data collected directly through the Platform.
Processor	A third party that processes Personal Data on behalf of the Controller under a data processing agreement.
KYC	Know Your Customer — identity and age verification procedures required for account activation and transaction processing.
AML	Anti-Money Laundering — regulatory obligations requiring the monitoring and reporting of suspicious financial activity.
Cookies	Small data files stored on your device by the Platform to support functionality, session management and analytics.
Operator	The licensed gaming operator or operators to whose services TC888 provides informational access or connection. Operators maintain their own privacy policies.

3 Data We Collect

TC888 collects Personal Data in the following categories depending on how you interact with the Platform:

3.1 Registration & Account Data

When you create an account on the Platform we collect information you provide directly, including your full name, date of birth, email address, mobile number, username, password (stored in hashed form) and preferred language. This data is required to establish your account and cannot be omitted without preventing account creation.

3.2 Identity Verification (KYC) Data

To comply with age verification and AML obligations, we may collect or receive from the Operator copies of identity documents such as a CNIC, passport or driving licence, along with selfie photographs, proof of address documents and, where applicable, source-of-funds documentation. This data is processed solely for compliance purposes.

3.3 Financial & Transaction Data

Where financial transactions are processed in connection with your account, TC888 or the Operator may collect payment method details, transaction amounts, PKR-denominated balance information and transaction history. Payment method references on TC888 — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are informational. Actual payment data is processed by the Operator and the relevant payment provider under their own security and privacy frameworks.

3.4 Technical & Usage Data

When you access the Platform we automatically collect technical information including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration and click-path data. This data is used to maintain Platform performance, diagnose technical issues and improve user experience.

3.5 Communications Data

If you contact TC888 or the Operator via email, live chat or support ticket, we retain records of that correspondence including your contact details, the content of messages and any attachments provided. This data is used to resolve your query and to maintain records of support interactions.

3.6 Responsible Gambling Data

Where you configure responsible gambling tools — including deposit limits, session time limits, loss limits or self-exclusion — records of those settings are maintained in your account profile. This data is used solely to enforce your chosen limits and cannot be used for marketing purposes.

4 Legal Basis for Processing

TC888 processes Personal Data on the following legal bases:

Legal Basis	Application
Contractual Necessity	Processing required to provide the Platform and associated services under our Terms & Conditions — including account creation, session management and customer support.
Legal Obligation	Processing required to comply with applicable law — including KYC/AML obligations, age verification and financial record-keeping requirements.
Legitimate Interests	Processing carried out for TC888's legitimate business interests where those interests are not overridden by your rights — including fraud detection, security monitoring, Platform analytics and service improvement.
Consent	Processing for non-essential cookies, certain marketing communications and voluntary data enhancement features, where you have provided clear, informed and specific consent that can be withdrawn at any time.

5 How We Use Your Data

TC888 uses the Personal Data it collects for the following purposes:

• Account management: creating, maintaining and securing your account, processing login sessions and managing password resets.
• Identity and age verification: fulfilling KYC requirements to confirm that users meet the minimum age requirement of 18 years, or the higher minimum required by the Operator or license jurisdiction.
• Transaction processing: facilitating deposits, withdrawals and bonus-related financial movements in connection with the Operator's cashier.
• Responsible gambling enforcement: applying deposit limits, loss limits, session time limits and self-exclusion restrictions as configured by you in your account settings.
• Fraud and AML monitoring: detecting, investigating and preventing fraudulent activity, money laundering and other illegal conduct in connection with the Platform.
• Customer support: responding to queries, complaints and technical support requests submitted via email, live chat or support ticket.
• Platform improvement: analysing usage patterns, technical performance and user behaviour in aggregate form to improve Platform design, content and functionality.
• Legal compliance: meeting obligations under applicable law, responding to lawful requests from regulatory authorities and maintaining records required by law.
• Marketing communications: sending promotional updates, bonus notifications and Platform news to Users who have provided consent and have not subsequently opted out.

TC888 does not use Personal Data for automated decision-making that produces significant legal effects without human oversight, except where explicitly required by applicable law or where you have been separately notified and given an opportunity to contest the decision.

6 Data Sharing & Disclosure

TC888 shares Personal Data only in the limited circumstances described below. We do not sell your Personal Data to third-party advertisers, data brokers or marketing aggregators.

6.1 The Operator

Where you create an account or access gaming services through TC888, certain registration, KYC and transaction data is shared with the Operator to enable account activation and service delivery. The Operator processes this data under its own privacy policy, which you should review independently.

6.2 Payment Service Providers

Payment method and transaction data is shared with relevant payment processors — which may include mobile wallet providers and banking partners — to facilitate deposits and withdrawals. These providers are bound by their own security and data protection obligations. TC888's references to providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are informational; no endorsement of gambling by these providers is implied.

6.3 Regulatory & Law Enforcement Authorities

TC888 may disclose Personal Data to competent regulatory, tax or law enforcement authorities where required by applicable law, court order or where we are satisfied that disclosure is necessary to protect the rights, property or safety of TC888, its Users or the public. We will, where permitted by law, notify affected Users of such disclosures.

6.4 Technology Service Providers

We engage third-party technology providers — including cloud hosting, analytics, security monitoring and customer support software providers — who process Personal Data on our behalf as data Processors. These providers are contractually required to implement appropriate data protection safeguards and to process data only as instructed by TC888.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of TC888's business assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. We will notify Users of any such transfer before it takes effect where reasonably practicable.

7 International Data Transfers

TC888 operates with technology infrastructure and service providers that may be located in countries outside Pakistan. Where Personal Data is transferred internationally, TC888 implements appropriate safeguards — including contractual protections — to ensure that transferred data receives a standard of protection consistent with this Policy and applicable law.

Users in Pakistan should be aware that data transferred to overseas jurisdictions is subject to the laws of the receiving country, which may differ from Pakistani law. TC888 cannot guarantee equivalence of legal protections in all receiving jurisdictions but will always seek to maintain contractual protections at a reasonable standard.

8 Data Retention

TC888 retains Personal Data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The key retention principles we apply are:

Data Category	Retention Principle
Account & Registration Data	Retained for the duration of your account plus a post-closure period as required by legal and regulatory obligations (typically five to seven years).
KYC / Identity Documents	Retained for the period required under AML and gambling-compliance regulations applicable to the Operator's license jurisdiction.
Transaction Records	Retained as required by financial record-keeping obligations, typically for a minimum of five years from the date of transaction.
Support Correspondence	Retained for a reasonable period to maintain complaint records and for dispute resolution purposes, generally up to three years.
Technical / Log Data	Typically retained for 90 days for security monitoring purposes, after which it is aggregated or deleted unless retained for an active investigation.
Marketing Consent Data	Retained until consent is withdrawn or the account is closed, plus a short additional period to demonstrate compliance.

On expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9 Cookies & Tracking Technologies

TC888 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we deploy are:

• Strictly Necessary Cookies: Essential for Platform operation — including session management, login authentication and security functions. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store user preferences such as language settings and display options to personalise your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how Users navigate the Platform — page views, session durations and error rates — to help us improve Platform design and content. These cookies do not identify individual users.
• Marketing Cookies: Where deployed with your consent, these cookies track visit patterns to enable relevant promotional content. These cookies are not deployed without explicit consent.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will affect Platform functionality. Blocking analytics or marketing cookies will not impair access to core Platform features.

10 Your Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in relation to your Personal Data held by TC888:

To exercise any of these rights, contact us using the details in Section 15. We will respond to verified requests within 30 days or as required by applicable law. We may need to verify your identity before processing a request.

11 Minors & Age Verification

TC888 is strictly an adults-only Platform. We do not knowingly collect Personal Data from any individual under the age of 18, or the higher minimum age required by the Operator or license jurisdiction. Age verification is a mandatory step in the account registration process.

If we become aware that Personal Data has been collected from a minor without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has accessed the Platform using your credentials or their own account, please contact us immediately at the address in Section 15.

We strongly encourage account holders to protect their login credentials and to prevent access by minors within their household. Responsible gambling tools — including self-exclusion — are available to all account holders and should be used if there is any risk of underage access.

12 Security Measures

TC888 implements a layered approach to data security, including the following measures:

• Encryption in transit: All data transmitted between your device and the Platform is protected using HTTPS/TLS encryption.
• Encryption at rest: Sensitive data categories — including passwords (stored as irreversible hashes) and identity documents — are encrypted when stored.
• Access controls: Access to Personal Data within TC888's systems is restricted on a need-to-know basis, with role-based access controls and multi-factor authentication required for system access by staff.
• Intrusion monitoring: Automated monitoring systems detect and alert to unusual access patterns, failed authentication attempts and potential data exfiltration activity.
• Vendor security assessments: Third-party processors are required to demonstrate adequate security controls before being granted access to TC888 user data.

Notwithstanding these measures, no data transmission over the internet or electronic storage method is completely secure. TC888 cannot guarantee absolute security. Users should take their own precautions — including using strong unique passwords and enabling two-factor authentication on their accounts.

In the event of a Personal Data breach that is likely to result in a risk to your rights or freedoms, TC888 will notify affected Users and relevant authorities as required by applicable law and as promptly as the circumstances permit.

13 Third-Party Links & Services

The Platform may contain references to or connections with third-party services, including the Operator's gaming environment. TC888 is not responsible for the privacy practices of any third party. Once you leave TC888's Platform and access a third-party service, that service's own privacy policy applies and TC888 has no control over how your data is processed.

TC888 encourages Users to review the privacy policies of any third-party service they access through or in connection with the Platform, including the Operator's privacy policy, before providing Personal Data to that service.

14 Policy Amendments

TC888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. The date of the most recent review is displayed in the sidebar of this page.

Where changes to this Policy are material — for example, changes that affect the categories of data we collect, the purposes for which we process it or the rights available to you — we will notify registered Users by email or by prominent notice on the Platform before the changes take effect. We will also update the review date on this page.

Continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with the amended Policy, you must cease using the Platform and may request deletion of your account and associated data in accordance with Section 10.

15 Contact & Data Enquiries

For any question, concern or exercise of rights relating to this Privacy Policy, data held about you or data processing practices, please contact TC888 using the following details. Email addresses are displayed as plain text only and are not clickable links.

When submitting a data rights request, please include sufficient information to allow us to verify your identity — typically your registered email address and account username — along with a clear description of the right you wish to exercise. We will acknowledge receipt within 5 business days and provide a substantive response within 30 days or as required by applicable law.

TC888 is not in a position to provide individual legal advice regarding data protection rights under Pakistani law. If you require such advice, please consult a qualified legal professional.