gold08 Privacy Policy — Your Data, Your Rights

01 Who We Are

gold08 is an international online gaming brand operating the Platform accessible at gold08.site. For the purposes of this Privacy Policy, gold08 is the data controller responsible for the personal information collected from players and visitors through the gold08 website and all associated services.

When we refer to "gold08", "we", "us", or "our" in this Privacy Policy, we mean the gold08 operating entity and its authorised data processing partners. When we refer to "you" or "your", we mean any natural person who accesses, registers on, or uses the gold08 Platform, including players from Pakistan and all other jurisdictions in which gold08 accepts registrations.

02 What Personal Data We Collect

Gold08 collects personal data only to the extent necessary to operate the Platform, process transactions, verify player identity, and comply with applicable legal and regulatory obligations. The categories of personal data we collect are set out below:

03 How We Collect Personal Data

Gold08 collects personal data through the following means:

• Direct submission: Information you provide when registering a gold08 account, completing the KYC verification process, initiating a deposit or withdrawal, contacting customer support via live chat, or submitting any form on the Platform.
• Automated technical collection: Technical and usage data collected automatically when you access the gold08 website, including through cookies, web beacons, session tracking technologies, and server-side logging of IP addresses and browser characteristics.
• Payment processor data: Transaction confirmation data received from our authorised PKR payment processors (JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay) and our USDT processing infrastructure, confirming transaction status, amounts, and account identifiers.
• Identity verification services: Where gold08 uses third-party KYC service providers to assist in verifying the identity, age, or address of a Player, such providers may return data to gold08 confirming the outcome of the verification check.
• Fraud prevention and security services: Technical data from anti-fraud systems used to monitor login patterns, detect anomalous behaviour, and prevent unauthorised account access.

04 Legal Basis for Processing Your Data

Gold08 processes personal data on the following legal grounds, depending on the specific purpose and context of processing:

• Contractual necessity: Processing required to perform our obligations under the gold08 Terms & Conditions, including account creation, game access, deposit and withdrawal processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, record-keeping mandates, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing conducted in pursuit of gold08's legitimate business interests, including fraud prevention, platform security, internal analytics, and improvement of the Platform, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including the use of non-essential cookies and the delivery of promotional communications via email or SMS. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 How gold08 Uses Your Personal Data

The personal data collected from gold08 players is used for the following purposes:

• Creating, managing, and maintaining your gold08 account, including balance management, VIP tier tracking, and account settings.
• Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, Pakistani bank accounts, SadaPay, and USDT TRC20.
• Verifying your identity and age in compliance with our KYC obligations, particularly prior to processing withdrawals above applicable thresholds.
• Delivering customer support through live chat and email, including responding to enquiries, resolving disputes, and processing account-related requests.
• Communicating promotional offers, bonuses, VIP programme updates, and platform news to Players who have opted in to such communications.
• Detecting, investigating, and preventing fraud, money laundering, multi-accounting, bonus abuse, and other forms of Prohibited Conduct as defined in the gold08 Terms & Conditions.
• Enforcing the gold08 Terms & Conditions, including account suspension and closure where violations are identified.
• Complying with applicable legal and regulatory requirements, including record-keeping, reporting obligations, and cooperation with lawful requests from competent authorities.
• Analysing Platform usage patterns to improve performance, user experience, game selection, and the overall quality of the gold08 service for Pakistani players.
• Applying responsible gaming controls, including monitoring for potential problem gambling indicators and enforcing self-imposed deposit limits, session limits, and self-exclusion requests.

06 Data Sharing & Third-Party Disclosure

Gold08 does not sell, rent, or trade your personal data to any third party for their own independent commercial use. Personal data is shared with third parties only in the circumstances described below, and always subject to appropriate data protection safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT processing services receive the minimum personal and financial data necessary to execute your requested transactions.
• KYC and identity verification providers: Third-party identity verification services may receive document data and identity information submitted during the KYC process, solely for the purpose of verifying your identity and age on gold08's behalf.
• Fraud prevention and security services: Anti-fraud and security technology providers process technical data (including IP addresses and device fingerprints) to assist gold08 in detecting and preventing fraudulent activity on the Platform.
• Game software providers: Licensed game development studios whose games are available on gold08 may receive pseudonymised gameplay data necessary for game functionality, outcome determination, and RTP auditing.
• Legal and regulatory authorities: Gold08 will disclose personal data to competent law enforcement, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive, without prior notice to the affected Player where legally required.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by gold08 may access personal data where strictly necessary for the provision of their professional services, subject to professional confidentiality obligations.

07 Cookies & Tracking Technologies

The gold08 Platform uses cookies and similar tracking technologies to operate core Platform functionality, maintain your login session, and — where you have consented — to analyse usage patterns and improve the Platform experience.

• Strictly necessary cookies: Required for the Platform to function correctly. These include session cookies that maintain your logged-in state, security tokens, and cookies that store your language and display preferences. These cookies cannot be disabled without breaking Platform functionality.
• Functional cookies: Used to remember preferences you have set, such as your game lobby view, responsible gaming settings, and notification preferences. These may be disabled, but doing so will affect your experience on the gold08 Platform.
• Analytics cookies: Where you have provided consent, analytics technologies collect anonymised or pseudonymised data about how you use the Platform — including pages visited, time spent, and navigation patterns — to help gold08 improve the service. You may withdraw consent for analytics cookies at any time.
• Security cookies: Used in conjunction with our fraud detection systems to identify unusual patterns in login behaviour, device usage, and transaction activity. These are classified as strictly necessary and cannot be disabled.

08 Data Retention

Gold08 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and regulatory obligations. The following retention principles apply:

• Active account data — including identity, contact, financial, and transaction data — is retained for the duration of the active gold08 account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documentation and identity verification records are retained for a minimum of five (5) years from the date of submission, or longer where required by applicable regulatory guidance.
• Customer support communications and dispute records are retained for a minimum of three (3) years from the date of the relevant communication or dispute resolution.
• Technical log data (including IP address logs, login history, and session records) is retained for a period of twelve (12) months under normal circumstances, or longer where relevant to an ongoing security investigation or legal matter.
• Analytics and usage data collected with consent is retained in aggregated, anonymised form and is not subject to standard personal data retention periods once de-identified.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

09 Data Security

Gold08 implements technical and organisational security measures appropriate to the risk level of the personal data we process, with the objective of protecting your data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the gold08 servers is protected by industry-standard Transport Layer Security (TLS) encryption, equivalent to the standard employed by major Pakistani financial institutions including HBL and UBL for their internet banking services.
• Password hashing: Account passwords are processed through a one-way cryptographic hashing algorithm before storage. Gold08 does not store readable passwords. In the event of a data breach, stored password hashes cannot be directly reversed to recover the original password.
• Access controls: Access to systems containing personal data is restricted to gold08 personnel and authorised service providers on a strict need-to-know basis. Access is controlled through role-based permissions and individual authentication credentials.
• Two-factor authentication: Players are encouraged to enable 2FA on their gold08 accounts via SMS OTP. This significantly reduces the risk of unauthorised account access even in the event of password compromise.
• Intrusion detection and monitoring: Gold08's security infrastructure includes continuous monitoring for anomalous access patterns, intrusion attempts, and data exfiltration indicators.
• Secure data storage: Personal data is stored on secured, access-controlled infrastructure operated by gold08's authorised hosting providers, subject to contractual data security obligations.

10 Your Data Rights

As a user of the gold08 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact gold08 via the support email at [email protected] with the subject line "Data Rights Request – [Your Username]":

• Right of Access: You have the right to request confirmation of whether gold08 holds personal data about you and, if so, to receive a copy of that data in a readable format.
• Right to Rectification: Where the personal data gold08 holds about you is inaccurate or incomplete, you have the right to request correction or completion of that data. Minor account details may be updated directly through your gold08 account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that gold08 delete personal data about you where it is no longer necessary for the purposes for which it was collected. This right is subject to gold08's legal retention obligations, which may require us to retain certain data for a specified minimum period following account closure.
• Right to Restriction of Processing: You may request that gold08 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request receipt of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where gold08 relies on legitimate interests as the legal basis for processing. Gold08 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, analytics cookies), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Gold08 will respond to verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days with notification to you.

11 Children's Privacy

12 Third-Party Services & Links

The gold08 Platform may reference third-party service providers in the context of payment processing, game software, or security services. Gold08 is not responsible for the privacy practices of such third parties operating under their own independent privacy policies and terms of service. Players should review the privacy documentation of any third-party service before providing personal information directly to such services.

Game software providers whose games are hosted on the gold08 Platform operate their own RNG infrastructure. Where gameplay data is processed by or on behalf of such providers for certification and auditing purposes, it is handled in pseudonymised form and in accordance with applicable data protection requirements under the contracts gold08 maintains with those providers.

13 International Data Transfers

As an international online gaming brand, gold08 may process and store personal data on infrastructure located in jurisdictions outside Pakistan. Where personal data is transferred internationally, gold08 ensures that appropriate safeguards are in place to provide a level of data protection consistent with the standards applied within Pakistan and with established international data protection best practices.

Such safeguards may include contractual data processing agreements with hosting providers and third-party processors that incorporate standard data protection clauses, and technical security measures (including encryption in transit and at rest) that apply regardless of the geographic location of the processing infrastructure.

14 Amendments to This Privacy Policy

Gold08 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or changes to the gold08 Platform itself. Material changes to this Privacy Policy will be communicated to active Players via email to their registered address and/or through a prominent notice displayed on the gold08 Platform upon login.

The "Last Reviewed" date displayed at the top of this document reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Continued use of the gold08 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised terms, you must discontinue use of the Platform and may request account closure by contacting gold08 customer support.

15 Contact & Data Protection Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or gold08's data processing practices, or if you wish to exercise any of the data rights described in Section 10, please contact us using the details below:

Gold08 is committed to resolving privacy concerns promptly and transparently. Where you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection supervisory authority or to seek independent legal advice.