Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how 588min ("we", "us", "our", "the Operator") collects, uses, stores, shares and protects the personal data of users ("you", "your", "User") who access or interact with the 588min platform available at 588min.cam and all associated services (collectively, "the Platform").

588min operates as an English-language online betting information platform designed for users across Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We are committed to handling your personal information responsibly, transparently and in accordance with applicable data protection laws.

By registering an account or using the Platform in any capacity, you acknowledge that you have read, understood and agree to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

02 Definitions

The following terms carry the meanings defined below throughout this Policy:

• "Personal Data" — any information that identifies or can be used to identify a living individual, directly or indirectly, including name, email address, CNIC number, IP address and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure or deletion.
• "Controller" — the entity that determines the purposes and means of processing personal data. For this Policy, the Controller is 588min.
• "Processor" — a third party that processes personal data on behalf of the Controller under documented instructions.
• "Data Subject" — the individual to whom personal data relates; in the context of this Platform, the registered User.
• "KYC Data" — identity verification documents including CNIC, passport, proof of address and liveness/selfie images collected as part of the Know Your Customer process.
• "Cookies" — small text files stored on your device by the Platform to enable or enhance functionality.
• "Consent" — a freely given, specific, informed and unambiguous indication of the data subject's agreement to processing of their personal data.

03 Data We Collect

We collect personal data in the following categories, depending on your interaction with the Platform:

3.1 Registration Data

When you create an account, we collect your full legal name, date of birth, email address, telephone number, residential address (including city and country), preferred currency and, where applicable, referral source.

3.2 Identity Verification (KYC) Data

As part of mandatory KYC compliance, we collect copies of government-issued identity documents (CNIC or passport), proof of address documents, and selfie or liveness verification images. For Pakistani users, a valid Computerised National Identity Card (CNIC) is the primary accepted identity document.

3.3 Financial Data

We collect transactional data including deposit amounts, withdrawal requests, payment method references (e.g., bank account last four digits, mobile wallet identifiers), and source-of-funds information where required for AML compliance. We do not store full card numbers or complete banking credentials on our servers.

3.4 Betting & Gaming Activity Data

We record all wagering activity on the Platform including bet placements, game sessions, bet amounts, outcomes and responsible gambling tool usage (deposit limits, session timers, self-exclusion requests). This data is used for account management, dispute resolution and regulatory compliance.

3.5 Technical & Device Data

We automatically collect IP addresses, browser type and version, device operating system, screen resolution, referring URLs, session duration and clickstream data when you access the Platform. This data is used for security monitoring, fraud detection and platform optimisation.

3.6 Communications Data

When you contact customer support, we retain records of your communications including chat logs, email correspondence and any information you voluntarily provide during the interaction. This data is retained for quality assurance, dispute resolution and training purposes.

04 Legal Bases for Processing

We process your personal data under the following legal bases:

05 How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To create, verify and manage your 588min account;
• To process deposits, withdrawals and other financial transactions;
• To verify your age and identity as required by KYC obligations — this applies to all users, including those registering from Karachi, Lahore, Islamabad or any other city in Pakistan;
• To detect, investigate and prevent fraud, match-fixing, account compromise, money laundering and other prohibited activities;
• To personalise your experience on the Platform, including displaying relevant bet markets and promotions;
• To communicate with you regarding account activity, security alerts, transaction confirmations and support responses;
• To send you promotional communications where you have given explicit consent — you may withdraw this consent at any time;
• To monitor your gambling activity for responsible gambling purposes, including identifying patterns that may indicate problem gambling behaviour;
• To fulfil our legal and regulatory obligations, including regulatory reporting, audit requirements and law enforcement requests from competent authorities;
• To improve Platform performance, resolve technical issues and conduct internal analytics;
• To defend against legal claims or enforce our rights under the Terms & Conditions.

06 Data Sharing & Disclosure

6.1 Third-Party Service Providers

We share personal data with trusted third-party processors who provide services necessary for Platform operation. These include KYC and identity verification providers, payment processing partners, fraud detection services, cloud infrastructure providers, customer support platforms and analytics services. All third-party processors are bound by data processing agreements that restrict use of your data to the specified purpose.

6.2 Legal and Regulatory Disclosures

We may disclose personal data to regulatory bodies, law enforcement agencies, courts or other competent authorities where we are legally obligated to do so, or where disclosure is necessary to protect the rights, property or safety of 588min, its users or the public.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale or corporate restructuring involving 588min, personal data held by the Operator may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Users will be notified of any material change in data controllership.

6.4 What We Do Not Do

07 Cookies & Tracking Technologies

7.1 Types of Cookies We Use

588min uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled as they enable core features such as session management, login state, and security tokens.
• Functional Cookies: Remember your preferences such as language settings, default odds format (decimal/fractional) and responsible gambling tool configurations.
• Analytics Cookies: Collect anonymised data on how users navigate the Platform, which pages are visited most, and where technical errors occur. This data is aggregated and does not identify individual users.
• Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content. You may withdraw consent at any time.

7.2 Managing Cookies

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. Instructions for managing cookies vary by browser — consult your browser's help documentation for specific guidance.

7.3 Third-Party Tracking

588min does not permit third-party advertising trackers that profile individual users across unrelated websites. Any third-party analytics tools used are configured to anonymise IP addresses and avoid cross-site profiling.

08 Data Retention

We retain personal data for the period necessary to fulfil the purposes for which it was collected, subject to legal obligations. The following indicative retention periods apply:

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised unless we are required to retain it for longer by a specific legal obligation or pending legal proceedings.

09 Data Security

588min implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• TLS 1.2 or higher encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive personal and financial data stored on our servers;
• Role-based access controls ensuring that staff members can only access personal data necessary for their specific job function;
• Regular security audits, penetration testing and vulnerability assessments;
• Multi-factor authentication for Platform administrative access;
• Incident response procedures including notification processes for material data breaches.

While we apply industry-standard security practices, no system is entirely immune to security risks. You are responsible for maintaining the security of your account credentials. If you suspect your account has been compromised, contact support immediately.

10 International Data Transfers

As an internationally operating platform, 588min may transfer your personal data to servers or processors located outside your country of residence, including outside Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place to maintain a level of data protection consistent with this Policy.

Safeguards for international transfers may include: standard contractual clauses approved by relevant data protection authorities, binding corporate rules, or transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable law.

11 Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of your personal data held by 588min. To exercise any of these rights, submit a written request to our support team. We will respond within 30 days of receiving a verified request.

Please note that certain rights may be limited where processing is required to fulfil a legal obligation, to perform a contract, or to defend against legal claims. We will clearly explain any such limitations in our response to your request.

12 Children's Privacy

588min does not knowingly collect, process or retain personal data from individuals below the applicable minimum age. If we discover that personal data has been collected from an underage individual, we will immediately close the associated account, delete the data concerned and, where legally required, notify appropriate authorities.

Parents and guardians who believe their child may have accessed the Platform should contact our support team immediately. We take all such reports seriously and act on them as a matter of urgency.

13 Responsible Gambling & Sensitive Data

Data collected through our Responsible Gambling tools — including self-exclusion requests, deposit limit settings, session time records and problem gambling indicators — is treated as sensitive personal data. It is used exclusively for the purpose of player protection and regulatory compliance and is never used for marketing, profiling or any commercial purpose.

Self-exclusion records are retained for the duration of the exclusion period plus seven years following its expiry, as required by responsible gambling best practices and applicable regulatory obligations. During the exclusion period, your data will not be used for any marketing or re-engagement communications.

We encourage all users to review our Responsible Gambling Policy for full details on the tools and support resources available.

14 Amendments to This Policy

588min reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via email or a prominent in-Platform notification before the effective date of the update. The "Last Updated" date at the top of this page reflects the current version.

We encourage you to review this Policy periodically. Continued use of the Platform following notification of material changes constitutes your acceptance of the updated Policy. If you do not accept the amended Policy, you must cease using the Platform and may request account closure by contacting our support team.

15 Contact Us

For any privacy-related enquiries, data subject access requests, or concerns regarding our data practices, please contact the 588min data team using the information below. All requests will be acknowledged within 5 business days and responded to in full within 30 days.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the competent data protection supervisory authority in the jurisdiction where 588min holds its operating licence.