Privacy Policy

This Privacy Policy ("Policy") is issued by i8fan ("i8fan", "we", "us", "our") and applies to all personal data collected from users ("you", "your") of the i8fan website at https://i8fan.cam and all associated services, features and products accessible through that domain (collectively, "the Platform").

We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy describes what personal data we collect, why we collect it, how it is processed, with whom it may be shared, and how long we retain it.

By registering an account on the Platform or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, you should not use the Platform.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or indirectly — including name, email address, device identifiers and account credentials.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, i8fan is the data controller in respect of personal data collected via the Platform.
• "Data Processor" means any third party that processes personal data on behalf of i8fan under a contractual arrangement.
• "KYC" means Know Your Customer — the identity and age verification process carried out before withdrawals are processed or account functionality is expanded.
• "Cookies" means small data files stored on your device by your browser at the request of the Platform.
• "Sensitive Data" means a special category of personal data that warrants additional protection, including financial details, government-issued identity documents and health-related information where provided in the context of responsible gambling support.

We collect personal data from you in the following ways:

Data you provide directly:

• Registration information: full name, date of birth, email address, phone number, residential address and preferred currency (PKR where selected).
• Identity verification documents: CNIC, passport, driving licence, utility bills or bank statements submitted during KYC.
• Payment details: payment method identifiers, transaction references and, where applicable, digital wallet details for payment methods familiar to Pakistani users such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah. Note: these payment method names are referenced as familiar Pakistani payment context only and do not imply endorsement of gambling by those providers.
• Support communications: messages, emails and chat transcripts submitted to our customer support team.
• Responsible gambling information: self-exclusion requests, deposit or loss limit preferences, and any health-related information voluntarily shared when seeking responsible gambling assistance.

Data collected automatically:

• Device and browser data: IP address, browser type and version, operating system, device model and screen resolution.
• Usage data: pages visited, features used, time spent on pages, bet history, game session logs and navigation paths within the Platform.
• Cookie and tracking data: session identifiers, preference settings and analytics data as described in Section 8 (Cookies & Tracking).
• Geolocation data: approximate geographic location derived from your IP address, used to identify access from Restricted Jurisdictions.

We process your personal data for the following purposes:

• Account management: Creating, maintaining and securing your registered account, including authentication and password management.
• KYC and age verification: Verifying that you meet the minimum age requirement of 18 years (or higher where the operator's licensing jurisdiction requires) and confirming your identity before processing withdrawals.
• Transaction processing: Processing deposits and withdrawals via your chosen payment method and maintaining accurate financial records associated with your account.
• Platform operation: Delivering betting, gaming and live dealer services; recording bet settlements; maintaining game integrity; and providing an uninterrupted user experience.
• Customer support: Responding to enquiries, resolving disputes, processing complaints and providing responsible gambling assistance in English and Urdu.
• Legal and regulatory compliance: Fulfilling anti-money laundering (AML) obligations, fraud detection, sanctions screening and any other compliance requirements imposed by the operator's licensing authority.
• Responsible gambling: Monitoring account activity for signs of problem gambling, implementing player-requested limits, processing self-exclusion requests and maintaining exclusion records.
• Marketing communications: Where you have provided explicit consent, sending promotional emails, bonus notifications and Platform updates. You may withdraw consent at any time by contacting support.
• Platform improvement: Analysing aggregated usage data to improve Platform functionality, personalise your experience and develop new features.

We process your personal data on the following legal grounds, consistent with the data protection framework applicable in the operator's licensing jurisdiction:

• Contractual necessity: Processing required to perform the contract between you and i8fan — including account creation, bet settlement, payment processing and KYC verification.
• Legal obligation: Processing required to comply with applicable laws and regulatory obligations, including AML requirements, sanctions screening and record-keeping obligations.
• Legitimate interests: Processing undertaken for i8fan's legitimate business interests, including fraud prevention, Platform security, internal analytics and responsible gambling monitoring, where those interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We do not sell, rent or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

• Service providers and data processors: Third-party vendors engaged to provide KYC verification, payment processing, fraud detection, cloud hosting, customer support infrastructure and analytics services. All such providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.
• Licensing and regulatory authorities: Where required or requested by the operator's licensing authority, we may disclose account data, transaction records or responsible gambling information in fulfilment of our regulatory obligations.
• Law enforcement and legal proceedings: Where required by a valid court order, legal process or applicable law, we may disclose personal data to law enforcement or governmental authorities. We will notify you where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, restructuring or sale of all or part of i8fan's business, your personal data may be transferred to a successor entity. We will notify affected users in advance where reasonably practicable.
• Fraud and AML networks: Where required by our compliance obligations, we may share data with industry fraud-prevention or AML screening databases.

i8fan operates internationally and may transfer your personal data to third-party service providers or infrastructure located outside your country of residence. Where such transfers take place, we take steps to ensure that appropriate safeguards are in place — such as data processing agreements incorporating standard contractual clauses or equivalent protections — to maintain the level of data protection described in this Policy.

Players based in Pakistan should be aware that their data may be processed in servers and jurisdictions outside Pakistan. By registering on the Platform and accepting this Policy, you acknowledge and consent to such transfers as necessary to provide the services described.

i8fan uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to understand how users interact with the site.

We use the following categories of cookies:

• Essential cookies: Required for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. Disabling these will impair or prevent Platform access.
• Functional cookies: Remember your preferences such as language settings, display preferences and previously entered form data to improve your experience across sessions.
• Analytics cookies: Collect aggregated data about how users navigate the Platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is used to improve the Platform and is not linked to individually identifiable users where avoidable.
• Security cookies: Used to detect and prevent fraudulent activity, bot access and unusual usage patterns that may indicate account compromise.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform performance and your ability to access all features. i8fan does not use cookies to deliver third-party advertising.

We retain your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the duration of your account with i8fan, plus any legally required period following account closure.
• KYC and identity documents: Retained for a minimum period required by the operator's AML obligations, typically five (5) years following the end of the business relationship, unless a longer period is mandated by applicable law.
• Transaction records: Retained for a minimum of five (5) years following each transaction, in accordance with standard financial record-keeping requirements.
• Support communications: Retained for the duration of the account and for a defined period thereafter sufficient to resolve any outstanding disputes or regulatory enquiries.
• Self-exclusion records: Retained for the full duration of the exclusion period and for a defined period thereafter to prevent re-registration in breach of a self-exclusion request.
• Marketing consent records: Retained for as long as necessary to demonstrate that consent was validly obtained and to honour any withdrawal of consent.

Following the expiry of the relevant retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to any individual.

i8fan implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest within our database infrastructure.
• Role-based access controls that limit staff access to personal data to those with a legitimate operational need.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Incident response procedures for detecting, containing and notifying affected parties in the event of a data breach.

While we apply industry-standard security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. i8fan is not liable for losses arising from unauthorised account access caused by your failure to keep your password secure.

Subject to the data protection framework applicable in the operator's licensing jurisdiction, you may have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some corrections may require supporting documentation.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to our legal and regulatory retention obligations — we may be unable to erase data that we are required by law to retain.
• Right to restriction: You may request that we restrict processing of your personal data in defined circumstances, such as while a rectification request is under review.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of the personal data you have provided to us.
• Right to object: You may object to processing based on legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team at [email protected]. We will respond within thirty (30) days of receiving a valid request. We may require you to verify your identity before processing a data rights request.

The i8fan Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's licensing jurisdiction or by the laws applicable in your country of residence.

We do not knowingly collect personal data from individuals under the applicable minimum age. Registration requires confirmation that you meet the age requirement, and KYC verification is used to confirm age before withdrawals are processed or account limits are increased.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the Platform, please notify us at [email protected].

i8fan welcomes players from Pakistan and has designed the Platform to be accessible and relevant for users in cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. However, Pakistani users should be aware of the following:

• i8fan does not claim to operate under Pakistani law or to be subject to the jurisdiction of Pakistani courts or data protection authorities.
• Pakistan does not currently have a fully enacted general personal data protection law. The data protection standards applied by i8fan are those of the operator's licensing jurisdiction.
• Gambling may be restricted under the Prevention of Gambling Act, 1977 and other applicable Pakistani laws. i8fan does not provide legal advice and does not represent that use of the Platform is lawful in Pakistan.
• Payment method names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are used as familiar Pakistani payment context only. These providers do not endorse or support this operator and are not data processors for i8fan unless a direct payment transaction requires such involvement.
• Users in Pakistan are solely responsible for compliance with all applicable local laws, including laws governing gambling, data transfer and foreign exchange.

i8fan reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will use reasonable efforts to notify registered users — by posting the updated Policy on the Platform and updating the "Last Updated" date at the top of this page, and where practicable by sending a notification to the email address associated with your account.

Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of those changes. If you do not agree to the updated Policy, you should stop using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend reviewing this Policy periodically to remain informed of how we handle your personal data. Previous versions of this Policy are available on request from our support team.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to raise a data-related concern, please contact our team using the details below:

• Email (plain text — not a clickable link): [email protected]
• Support hours: 24/7 Live Support Available
• Support languages: English and Urdu

Data rights requests will be acknowledged within five (5) business days and fulfilled within thirty (30) days, subject to identity verification. Requests that are complex or numerous may be extended by a further two months with prior notification.

For responsible gambling support — including self-exclusion, deposit limits or cooling-off requests — please visit our dedicated Responsible Gambling page. For general Platform information and our commitment to transparent player communication, visit our About Us page.