i8fan Privacy
Policy

i8fan operates an online casino and sports betting platform accessible at i8fan.net, serving players in Pakistan. In the course of providing our Services, we collect and process personal data relating to our Users. We take this responsibility seriously and are committed to handling your personal information with care, transparency, and respect.

This Privacy Policy ("Policy") describes in clear terms what personal data i8fan collects, the purposes for which that data is used, the legal bases that justify our processing, how long we retain data, with whom we share it, and the specific rights that you as an i8fan User are entitled to exercise over your own information.

This Policy applies to all personal data collected through the i8fan website, mobile-optimised platform, customer support channels, and any other service operated under the i8fan brand. By registering an account or using the i8fan platform in any capacity, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of applicable data protection legislation, i8fan acts as the data controller in respect of personal data collected from Users of the i8fan platform. As the data controller, i8fan determines the purposes and means by which your personal data is processed.

i8fan is responsible for ensuring that personal data under its control is processed lawfully, fairly, and transparently. Where third-party service providers process personal data on i8fan's behalf, they do so as data processors, acting only on i8fan's documented instructions and subject to contractual data protection obligations consistent with applicable law.

If you have any questions or concerns about how i8fan processes your personal data, or if you wish to exercise any of your data rights, you may contact i8fan's designated data protection contact via the details set out in Section 15 of this Policy.

i8fan collects the following categories of personal data, depending on the nature of your interaction with the platform:

3.1 Identity & Contact Data

• Full legal name, date of birth, gender
• Pakistani CNIC number, passport number, or other government-issued identification number
• Residential address (including city — Karachi, Lahore, Islamabad, Faisalabad, or elsewhere in Pakistan)
• Valid mobile number and email address
• Profile photograph where submitted during KYC

3.2 Account & Transaction Data

• Username, encrypted password, and account preferences
• Deposit and withdrawal records, including payment method details (JazzCash wallet IDs, EasyPaisa account references, bank account numbers, HBL/UBL/Meezan Bank details)
• Wagering history, game session records, and betting activity
• Bonus and promotional credit history
• Balance and transaction timestamps

3.3 Technical & Usage Data

• IP address, device type, browser type and version, operating system
• Pages visited, features accessed, session duration and frequency
• Referring URLs and click-path data
• Device identifiers and cookies (see Section 7)

3.4 Communications Data

• Records of live chat conversations, support ticket history, and email correspondence with i8fan's support team
• Feedback, survey responses, and complaints submitted to i8fan

3.5 Responsible Gaming Data

• Self-imposed limits (deposit, loss, session time) and the history of limit adjustments
• Cooling-off period and self-exclusion records
• Internal responsible gaming assessments and player welfare notes generated by i8fan's risk team

i8fan collects personal data through the following means:

• Direct provision: Information you actively provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys.
• Automated collection: Technical data collected automatically when you access the i8fan platform, including IP addresses, cookies, device fingerprints, and session analytics, using technologies described in Section 7.
• Third-party sources: Identity verification data received from KYC service providers; fraud screening data from risk management partners; payment confirmation data from payment processors such as JazzCash, EasyPaisa, and bank partners.
• Public sources: Where required for fraud prevention or regulatory compliance, i8fan may reference publicly available information, such as sanctions screening lists or publicly accessible identity records.

i8fan processes personal data only where there is a lawful basis for doing so. The table below summarises i8fan's primary processing purposes and the corresponding legal grounds:

Where i8fan relies on legitimate interests as a legal basis for processing, i8fan has assessed that its interests are not overridden by your privacy rights and interests, taking into account the nature of the data involved and the reasonable expectations of i8fan's Users.

i8fan does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the circumstances described below:

6.1 Service Providers (Data Processors)

i8fan engages trusted third-party service providers to assist in operating the platform. These providers process personal data solely on i8fan's instructions and include: KYC and identity verification providers, payment processors (including JazzCash, EasyPaisa, and banking intermediaries), IT infrastructure and cloud hosting providers, fraud prevention and risk screening services, and customer support software providers. All such providers are contractually obligated to maintain data confidentiality and to apply appropriate security measures.

6.2 Gaming Software Providers

To deliver casino games and sports betting products, i8fan works with third-party game studios and sportsbook providers. These providers may receive limited technical data (such as session tokens and game outcome records) necessary to operate the games. They do not receive your full identity data unless specifically required for game-level compliance purposes.

6.3 Regulatory and Law Enforcement Authorities

i8fan will disclose personal data to regulators, law enforcement agencies, courts, or other governmental authorities where required or permitted to do so by applicable law, including in connection with AML investigations, licensing compliance audits, or lawful judicial orders. Such disclosures are made only to the extent strictly required.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of i8fan's business, your personal data may be transferred to the successor entity as part of that transaction. i8fan will notify affected Users of any such transfer via the registered email address on file, and the successor entity will be bound by this Privacy Policy in respect of your data.

i8fan uses cookies and similar tracking technologies to operate the platform, enhance User experience, and gather analytical insights. A cookie is a small text file stored on your device when you visit a website. i8fan uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing the core functionality of i8fan.
• Functional Cookies: Remember your preferences, such as your language setting, preferred payment method, and responsible gaming limit configurations, to personalise your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how Users interact with the platform — including pages visited, features used, and session duration — to help i8fan improve its Services.
• Security & Fraud Prevention Cookies: Used to detect unusual activity, identify potentially fraudulent access patterns, and support i8fan's fraud prevention and AML compliance obligations.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality or security of the i8fan platform. Strictly necessary cookies cannot be disabled via browser settings without affecting your ability to use the platform's core features.

i8fan retains personal data for as long as necessary to fulfil the purposes for which it was collected, to meet contractual obligations, and to comply with applicable legal and regulatory requirements. The following general retention principles apply:

• Active account data: Retained for the full duration of the account relationship and for a minimum period of five (5) years following account closure, in compliance with standard AML and gaming regulatory record-keeping obligations.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction, as required by applicable financial record-keeping regulations.
• KYC and identity verification documents: Retained for the duration of the account relationship plus five (5) years following closure, unless a longer retention period is required by regulatory obligation.
• Customer support records: Retained for a minimum of three (3) years from the date of the interaction, or longer where the interaction is related to an ongoing dispute or regulatory inquiry.
• Self-exclusion records: Retained for a minimum of seven (7) years following the expiry of the self-exclusion period to prevent inadvertent re-admission of excluded players.
• Marketing consent records: Retained for the duration of consent plus three (3) years to evidence compliance with consent-based processing obligations.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents recovery or re-identification.

i8fan implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• TLS/SSL Encryption: All data transmitted between your device and the i8fan platform is protected using industry-standard Transport Layer Security (TLS) encryption, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Encrypted Storage: Sensitive data — including passwords, payment instrument references, and identity documents — is stored in encrypted form using strong cryptographic standards. Plain-text storage of passwords is never used.
• Access Controls: Access to personal data within i8fan's systems is strictly role-based. Only personnel with a legitimate operational need to access specific categories of data are granted permission to do so, and all access is logged for audit purposes.
• Regular Security Audits: i8fan's platform and infrastructure are subject to periodic security assessments, including vulnerability scans and penetration testing conducted by independent security specialists.
• Incident Response: i8fan maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to your rights, i8fan will notify affected Users and, where required, relevant regulatory authorities, within the timeframes prescribed by applicable law.

As an i8fan User, you hold the following rights in relation to your personal data. i8fan will respond to all valid requests within a reasonable timeframe and without undue delay. To exercise any of these rights, please contact i8fan's support team using the details in Section 15.

• Right of Access: You have the right to request a copy of the personal data i8fan holds about you and to receive information about how that data is processed.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal data held on your account.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to i8fan's legal obligations to retain certain records for regulatory compliance purposes.
• Right to Restriction: You may request that i8fan restricts the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Object: You may object to i8fan's processing of your personal data where that processing is based on legitimate interests, including profiling and certain types of analytics.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where i8fan processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

i8fan may send you marketing communications — including promotional offers, bonus notifications, and platform updates — by email or SMS, where you have provided explicit consent to receive such communications during the registration process or subsequently through your account preferences.

You may opt out of marketing communications at any time by updating your notification preferences within your i8fan account settings or by contacting the support team. Opting out of marketing communications will not affect the delivery of transactional communications relating to your account, such as deposit confirmations, withdrawal notifications, or security alerts.

i8fan does not use personal data to create profiling-based marketing without appropriate disclosure. Where personalised offers are extended to you (for example, a tailored bonus based on your preferred game categories), this is disclosed in the relevant promotional communication.

i8fan's Services are strictly intended for adults aged 21 years and above. i8fan does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory requirement of the registration and KYC process, and i8fan takes active steps to prevent underage access to the platform.

If i8fan becomes aware that personal data has been collected from a person under the age of 21 — whether through a circumvention of age verification procedures or otherwise — it will take immediate steps to delete that data, close the associated account, and, where required, report the matter to relevant authorities. Any balances held in such an account will be forfeited.

If you are a parent or guardian and believe that a minor may have registered an account on i8fan, please contact the support team immediately using the contact details in Section 15.

i8fan's platform and supporting services may involve the transfer of personal data to, and processing of personal data in, jurisdictions outside Pakistan. Where such transfers occur, i8fan ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Privacy Policy, including through the use of contractual data protection clauses with third-party service providers.

i8fan's primary infrastructure and data storage systems are hosted in secure data centres. Where data is processed by third-party game providers or payment processors operating in other regions, i8fan requires those parties to implement equivalent data protection standards as a condition of their engagement with i8fan.

i8fan reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, the introduction of new platform features, or feedback received from our User community.

Where changes are material, i8fan will notify registered Users via the email address on file and will post a clear notice on the platform specifying the effective date of the revised Policy. The updated Policy will be published on this page with the "Last Updated" date revised accordingly.

Your continued use of the i8fan platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. We recommend periodically reviewing this page to stay informed of how i8fan manages your personal data.

For any privacy-related enquiries, data rights requests, or concerns about how i8fan handles your personal information, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly through the i8fan platform — the fastest channel for urgent privacy or security concerns.
• Email: [email protected]

i8fan aims to respond to all data rights requests and privacy enquiries within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, i8fan will notify you within that initial 30-day window and provide a revised timeline for the full response.