as8com Privacy Policy

This Privacy Policy applies to all users ("you", "your", or "the User") who access or use the as8com online gaming platform available at as8com.net, including all associated mobile experiences, customer support channels, and promotional communications. By registering an account on as8com or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

as8com is committed to handling your personal data with transparency, integrity, and care. We operate in compliance with applicable data protection frameworks and the requirements imposed by our international gaming licence. This policy is written in clear, straightforward English so that players across Pakistan — in Karachi, Lahore, Islamabad, Faisalabad, and everywhere else — can understand exactly how their information is managed.

This Privacy Policy should be read alongside the as8com Terms and Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. Capitalised terms not defined in this document carry the meanings assigned to them in the Terms and Conditions.

For the purposes of this Privacy Policy, as8com acts as the data controller in respect of all personal data collected through the as8com platform. As data controller, as8com determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.

Formal correspondence relating to data protection matters should be submitted in writing to the as8com Data Protection contact at [email protected] with the subject line "Data Protection Inquiry." as8com will acknowledge receipt of all formal data protection correspondence within five business days.

as8com collects personal data that falls into the following categories. The precise data points collected at any given stage depend on the action you are taking on the platform.

as8com does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless this is strictly necessary for the discharge of a specific legal obligation (for example, processing a self-exclusion request related to a gambling addiction support programme).

as8com collects personal data through the following means:

• Direct submission: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you visit or interact with the as8com platform.
• Third-party sources: Identity and fraud verification data received from licensed KYC and anti-money laundering (AML) service providers. Payment processing data received from our payment gateway partners (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors).
• Publicly available sources: In limited circumstances, as8com may supplement its records with publicly available information where this is necessary to complete identity or fraud checks.

as8com processes your personal data only where there is a lawful basis for doing so. The primary purposes for which as8com processes personal data, and the corresponding legal basis for each, are set out below:

• Account creation and management — Processing is necessary for the performance of the contract between you and as8com (i.e., the Terms and Conditions). Without this data, as8com cannot maintain your account or provide gaming services.
• Identity verification and KYC — Processing is necessary for compliance with as8com's legal obligations under its gaming licence, including anti-money laundering and counter-terrorist financing regulations.
• Payment processing — Processing is necessary both for the performance of your contract with as8com and for compliance with financial regulations applicable to payment service providers operating in Pakistan.
• Fraud detection and security — Processing is carried out on the basis of as8com's legitimate interests in protecting the platform, its players, and the integrity of its operations from fraudulent or abusive activity.
• Responsible gaming monitoring — Processing is necessary for compliance with as8com's licence obligations relating to player protection and responsible gaming, including the identification of at-risk players.
• Customer support — Processing is necessary for the performance of your contract with as8com and is also in as8com's legitimate interest to maintain a record of support interactions for quality assurance purposes.
• Marketing communications — Processing is based on your consent. You may withdraw your marketing consent at any time by updating your account preferences or contacting support at [email protected].
• Legal compliance and regulatory reporting — Processing is necessary for as8com to meet its obligations to licensing authorities, financial intelligence units, and other regulatory bodies.

as8com does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data may, however, be disclosed to the following categories of recipient where necessary and in accordance with this Privacy Policy:

• KYC and AML service providers: Licensed identity verification, document checking, and sanctions screening companies engaged by as8com to fulfil its compliance obligations.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners, for the sole purpose of executing your payment instructions.
• Technology and hosting providers: Cloud hosting, security, and software providers engaged by as8com under strict data processing agreements that prohibit any secondary use of your data.
• Gaming software providers: Game studios and live casino operators whose games are offered on the as8com platform, to the extent that limited technical data must be shared to deliver the gaming experience.
• Regulatory and law enforcement authorities: Where as8com is required by law, court order, or regulatory direction to disclose personal data, it will do so. as8com will notify you of such a disclosure unless legally prohibited from doing so.
• Responsible gaming bodies: Where a player has voluntarily enrolled in a self-exclusion programme or where as8com is required to report a player to a responsible gaming registry under its licence conditions.

as8com retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with the following principles:

• Active accounts: Personal data is retained for the full duration of your as8com account being open and active.
• Closed accounts: Following account closure, as8com retains personal data (including KYC documents, transaction records, and gaming history) for a minimum of five years from the date of closure, as required by applicable anti-money laundering regulations and gaming licence conditions.
• Marketing data: Where you have opted in to marketing communications, your contact details and marketing preferences are retained until you withdraw consent, at which point they are removed from active marketing systems within 30 days.
• Support records: Customer support communications are retained for a minimum of three years from the date of the interaction for quality assurance and dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. as8com conducts periodic data audits to ensure that data no longer required is purged in accordance with this schedule.

as8com applies a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• Encryption: All data transmitted between your device and the as8com platform is encrypted using TLS (Transport Layer Security). Sensitive data at rest, including payment details and identity documents, is encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data within as8com's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data protection training.
• Two-factor authentication: as8com supports two-factor authentication (2FA) at the account level, providing an additional layer of security for your login credentials.
• Penetration testing: as8com engages independent cybersecurity firms to conduct regular penetration testing and vulnerability assessments of its platform infrastructure.
• Incident response: as8com maintains a documented data breach response plan. In the event of a data breach that is likely to result in a risk to your rights and freedoms, as8com will notify affected users and relevant authorities within the timeframes prescribed by applicable law.

as8com uses cookies and similar tracking technologies to operate and improve the platform, personalise your experience, and fulfil our security and compliance obligations. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot be used to access other data on your device.

The categories of cookies used by as8com are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session management cookies, security tokens, and load balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Allow as8com to remember your preferences (such as language selection and responsible gaming limit settings) and provide enhanced features. These are set only with your consent.
• Analytics cookies: Used to understand how players interact with the as8com platform — for example, which pages are visited most frequently and where users experience difficulties. Analytics data is aggregated and does not identify individual users.
• Security and fraud prevention cookies: Used to detect and prevent fraudulent activity, including the identification of accounts exhibiting suspicious patterns.

You can manage your cookie preferences through the cookie consent panel available on the as8com platform. Disabling non-essential cookies may affect the functionality and personalisation features of your experience but will not prevent you from using the core gaming services.

Subject to applicable law and the limitations described below, you have the following rights in respect of the personal data that as8com holds about you:

• Right of access: You may request a copy of the personal data as8com holds about you. as8com will provide this within 30 days of a verified request.
• Right to rectification: Where the personal data as8com holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: You may request that as8com delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe the data has been unlawfully processed. Note that as8com may be required to retain certain data to fulfil its regulatory obligations even following an erasure request.
• Right to restriction: You may request that as8com restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or contract performance, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of as8com's legitimate interests. as8com will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request." as8com may ask you to verify your identity before processing the request. Responses will be provided within 30 calendar days; where a request is complex, this period may be extended by a further 30 days with prior written notice to you.

as8com employs age verification procedures at registration and through its ongoing KYC process to ensure that the platform is not accessed by minors. Where as8com becomes aware — through any means — that personal data has been collected from a person under the age of 21, that data will be deleted without undue delay, save for any records that as8com is required to retain for regulatory reporting purposes.

Parents or guardians who believe their child has registered an account on as8com should contact the support team immediately at [email protected]. as8com will investigate and take appropriate action, including account closure and data deletion, within 48 hours of a verified report.

as8com reserves the right to update or modify this Privacy Policy at any time. Where changes are material — for example, where as8com introduces a new category of data processing or a new class of third-party recipient — as8com will provide advance notice via a platform notification or by email to the address registered on your account, at least 14 days before the changes take effect.

Minor clarificatory or administrative changes may be made without advance notice. The effective date at the top of this page will always reflect when the policy was last updated. We encourage you to review this page periodically to stay informed of how your data is being handled.

Continued use of the as8com platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the platform and submit an account closure request before the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way as8com handles your personal data, please get in touch using one of the following channels:

• Live Chat: Available 24/7 directly on the as8com platform — the fastest way to get a response.
• Email: [email protected] — please use the subject line "Privacy Inquiry" for data-related correspondence. Responses within 24 hours on business days.

For formal data protection requests (access, erasure, portability, etc.), use the subject line "Data Rights Request" so your email is routed to the appropriate team. as8com's data protection contact will handle all such requests personally and respond within the timeframes set out in Section 10 of this policy.