688 Privacy Policy —
How We Collect, Use, and
Protect Your Personal Data
Your privacy matters to 688. This policy sets out exactly what personal data and PKR transaction information 688 collects when you use the platform, why we collect it, how it is stored and protected, and what rights you hold over your own information.
📋 Sections in This 688 Privacy Policy
- Introduction and Scope
- Data Controller Identity
- Data We Collect from You
- How and Why We Use Your Data
- Legal Basis for Processing
- PKR Transactions and Payments
- Cookies and Tracking Technologies
- Third-Party Data Sharing
- International Data Transfers
- Data Retention Periods
- Your Privacy Rights
- Children and Minors
- Security Measures
- Changes to This Policy
- How to Contact 688 About Privacy
Six Principles That Guide How 688 Handles Your Data
Before reading the full legal text, these six principles summarise the core values that shape every data decision at 688.
Purpose Limitation
688 only collects personal data for specific, legitimate purposes — account management, payment processing, fraud prevention, and legal compliance. We do not collect data "just in case" and we do not use your 688 account data for unrelated commercial purposes.
Data Minimisation
688 collects only the minimum personal data necessary to provide the service you have requested. We will not ask for information that is not needed to complete your registration, verify your identity, process your PKR transaction, or fulfil a legal obligation.
Accuracy
688 takes reasonable steps to ensure the personal data held on your account is accurate and up to date. You can review and update your registered Pakistan mobile number, payment details, and contact information at any time through your 688 account settings panel.
Security by Design
688 embeds data security measures into every part of the platform — from 256-bit SSL encryption on all 688 login sessions to hashed password storage and role-based access controls that limit which 688 staff can view which categories of personal data.
Storage Limitation
688 does not retain your personal data indefinitely. Retention periods are set based on the purpose of each data category and the applicable legal obligations — particularly anti-money-laundering (AML) record-keeping rules that apply to PKR payment records at 688.
Transparency
688 is open about what data it holds, why it holds it, and who it may share it with. This Privacy Policy is written in plain English so that all 688 players in Pakistan — regardless of technical or legal background — can understand how their data is handled.
Personal Data Categories Collected by 688
The table below summarises each category of personal data that 688 collects, the source from which it is gathered, and the primary purpose for which it is used.
| Data Category | What Is Included | Source | Primary Purpose(s) |
|---|---|---|---|
| Identity Data | Full name, date of birth, CNIC number (where KYC is required) | Provided by you at registration or during KYC verification | Age verification AML compliance Fraud prevention |
| Contact Data | Pakistan mobile number, email address (if provided) | Provided by you at registration | Account access (OTP) Support communication Security alerts |
| Financial Data | Easypaisa / JazzCash wallet identifiers, bank account details, PKR deposit and withdrawal history, USDT wallet addresses | Provided by you when transacting at 688; generated by 688 systems | Payment processing Withdrawal verification AML / CFT compliance |
| Gaming Activity Data | Bet history, game session logs, PKR wager amounts, game results, bonus usage records | Generated automatically by 688 platform during gaming sessions | Dispute resolution Responsible gaming Bonus settlement |
| Technical Data | IP address, device type, browser version, Pakistan mobile network identifier, login timestamps, session duration | Automatically collected during 688 login and platform use | Security monitoring Fraud detection Platform optimisation |
| Responsible Gaming Data | Deposit limits set by you, loss limits, self-exclusion status, cooling-off period records | Set by you within 688 account settings; generated by 688 systems | Player protection Regulatory compliance |
| Communications Data | Records of your Live Chat, WhatsApp, Telegram, and email interactions with 688 support | Generated during your support interactions with 688 | Quality assurance Dispute records Legal compliance |
688 Privacy Policy — Complete Document
The following sections constitute the full and binding 688 Privacy Policy. By registering a 688 account or using the 688 platform, you confirm that you have read and understood this policy.
Introduction and Scope
This Privacy Policy describes how 688 ("688", "we", "us", "our") collects, processes, stores, and protects the personal data and financial information of all individuals who register accounts on or otherwise interact with the 688 platform at 688.bingo (the "Platform").
This policy applies to all personal data collected through: the 688 account registration process; the 688 login and authenticated account sessions; PKR deposits and withdrawals via Easypaisa, JazzCash, Raast, bank transfer, and USDT; participation in casino games, sports betting, and Cockfighting markets; contact with the 688 customer support team via Live Chat, WhatsApp, Telegram, or email; and any other interaction with 688 digital properties.
By accessing or using the 688 platform, you acknowledge that you have read this Privacy Policy and consent to the data processing practices described herein. If you do not agree with any part of this policy, you should not create or continue to use a 688 account.
Data Controller Identity
2.1 For the purposes of data protection law, 688 is the data controller in respect of all personal data collected through the 688 platform. As data controller, 688 determines the purposes for which, and the means by which, personal data is processed.
2.2 688 has designated a data privacy point of contact to oversee compliance with this policy and to handle data-related queries and rights requests from players. All privacy-related communications should be directed to [email protected] with the subject line "Privacy Query — [Registered Mobile Number]".
Data We Collect from You
3.1 Registration Data. When you create a 688 account, you provide your Pakistan mobile number, a chosen password, and optionally an email address. This registration data is the foundation of your 688 account identity and is required to establish your account and enable the 688 login process.
3.2 KYC Verification Data. Where 688 requires identity verification — in particular for withdrawals above 500,000 PKR or where fraud risk indicators are present — you will be asked to provide a copy of a valid Pakistani CNIC (National Identity Card), and potentially a selfie or additional documentation. This data is processed for age verification and anti-money-laundering compliance purposes only.
3.3 Payment Data. When you make a PKR deposit or request a withdrawal at 688, you provide financial identifiers such as your Easypaisa wallet number, JazzCash mobile number, bank account IBAN, or USDT wallet address. 688 stores these identifiers to enable payment processing and to apply the same-method withdrawal policy described in the 688 Terms & Conditions.
3.4 Automatically Collected Technical Data. 688 automatically collects certain technical data when you access the platform: your IP address, Pakistan mobile network identifier (e.g., Jazz, Zong, Telenor, Ufone), device type and operating system, browser version, and 688 login timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.
3.5 Gaming Activity Data. Every wager placed at 688 — across Live Casino, Test Cricket, Jackpot Slots, Cockfighting, or any other game category — generates a transaction record that includes the game played, the PKR stake amount, the result, and the session duration. These records are retained for dispute resolution, bonus settlement, responsible gaming monitoring, and regulatory compliance purposes.
How and Why We Use Your Data
688 uses your personal data for the following purposes:
- Account management: Creating, maintaining, and securing your 688 account, including enabling the 688 login process and managing your PKR wallet balance.
- Payment processing: Processing PKR deposits via Easypaisa, JazzCash, Raast, and bank transfer; processing withdrawal requests to the same channels; and reconciling USDT conversions to PKR at prevailing rates.
- Age and identity verification: Confirming that all 688 account holders meet the minimum age requirement of 18 years and that identity documentation is consistent with the account registration details provided.
- Fraud prevention and security: Monitoring for suspicious 688 login activity, detecting multi-account registrations, identifying payment fraud patterns, and protecting both 688 and legitimate players from fraudulent conduct.
- AML and regulatory compliance: Maintaining PKR transaction records as required by applicable anti-money-laundering and counter-financing-of-terrorism obligations, including reporting obligations to relevant authorities where legally required.
- Responsible gaming: Using gaming activity data to identify patterns that may indicate problem gambling behaviour and to apply responsible gaming tools — deposit limits, loss caps, session alerts, and self-exclusion — that you have activated on your 688 account.
- Customer support: Using your contact data and communications history to resolve account queries, payment disputes, and technical issues raised with the 688 support team via Live Chat, WhatsApp, or Telegram.
- Platform improvement: Using aggregated, anonymised technical data to optimise the 688 platform's performance across Pakistan mobile networks and device types commonly used by 688 players in Karachi, Lahore, Islamabad, and other cities.
Legal Basis for Processing
5.1 Contractual Necessity. The majority of personal data processing at 688 is carried out because it is necessary to perform the contract between 688 and you — specifically, to operate your account, process your PKR transactions, settle your wagers, and provide the platform services you have registered to use.
5.2 Legal Obligation. Some processing — particularly the retention of PKR financial transaction records and the KYC identity verification process — is required by applicable law regardless of your consent. 688 cannot waive legal obligation-based processing at a player's request.
5.3 Legitimate Interests. Fraud detection, platform security monitoring, and responsible gaming activity analysis are carried out on the basis of 688's legitimate interest in protecting the platform and its players. 688 has assessed that these legitimate interests are not overridden by your privacy rights given the nature of the data processed and the purpose of processing.
5.4 Consent. Where 688 sends you promotional communications about 688 bonuses, new game launches, or special offers, this is done on the basis of your consent, which you may withdraw at any time by contacting the 688 support team or updating your communication preferences in your account settings.
PKR Transactions and Payments
6.1 Payment Provider Data Sharing. When you make a PKR deposit at 688 via Easypaisa or JazzCash, 688 shares the minimum necessary transaction data with the respective payment provider to complete the transfer. This includes the transaction amount in PKR, a transaction reference number, and your 688 account identifier. 688 does not share your gaming history or betting records with payment providers.
6.2 Bank Transfer Data. For PKR deposits and withdrawals via direct bank transfer (HBL, UBL, MCB, Meezan Bank, or other supported Pakistan banks), 688 processes your bank account IBAN and account holder name. These details are retained for the period required by AML compliance obligations and are not used for any other purpose.
6.3 USDT Transaction Records. USDT deposits and their PKR-equivalent conversion rates are recorded and retained by 688 as part of the financial transaction ledger for your account. USDT wallet addresses are stored for withdrawal routing purposes and AML compliance records.
6.4 No Sale of Financial Data. 688 does not sell, rent, or otherwise commercially exploit your financial data or PKR transaction history to any third party for marketing, data-brokering, or credit-scoring purposes.
Cookies and Tracking Technologies
7.1 What 688 Uses Cookies For. 688 uses a limited set of first-party cookies and similar browser technologies to maintain your 688 login session across pages, remember your language and display preferences, and collect anonymised page-view data for internal platform analytics. 688 does not use third-party advertising cookies or cross-site behavioural tracking technologies.
7.2 Session Cookies. Session cookies used by 688 are temporary and are deleted when you close your browser or log out from the 688 platform. They are essential for the 688 login system to function correctly and cannot be disabled without breaking the platform's authentication layer.
7.3 Analytics Cookies. 688 may use anonymised analytics data to understand aggregate patterns in how Pakistan players navigate the 688 platform — for example, which game categories receive the most traffic from Karachi or Lahore, or which device types are most commonly used for the 688 login process on Jazz and Zong 4G. This data does not identify individual players and is not linked to your personal 688 account.
7.4 Managing Cookies. You can manage cookie preferences through your browser settings. Disabling essential session cookies will prevent you from completing the 688 login process. Disabling analytics cookies will not affect your ability to use any 688 feature.
Third-Party Data Sharing
8.1 688 does not sell your personal data. Under no circumstances does 688 sell, rent, or trade your personal information or financial data to third parties for commercial purposes.
8.2 Necessary Service Providers. 688 shares personal data with a limited number of trusted third-party service providers who assist in operating the platform. These include: game studio providers (who receive only the minimum data necessary to operate the game session); payment processing intermediaries for PKR transfers; identity verification service providers for KYC processing; and technology infrastructure providers who host 688 platform systems. All such providers are bound by contractual data processing agreements that prohibit them from using 688 player data for any purpose other than the specific service they provide.
8.3 Legal Disclosure. 688 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law — including in connection with investigations into financial crime, fraud, money laundering, or terrorist financing. Where legally permitted, 688 will notify the affected account holder of such a disclosure.
8.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all 688 assets, personal data held in 688 player accounts may be transferred to the successor entity as part of that transaction. 688 will provide affected players with advance notice of any such transfer via SMS to their registered Pakistan mobile number.
International Data Transfers
9.1 Some of 688's technology infrastructure and game studio providers are located outside Pakistan. Where your personal data is transferred to servers or processors in other countries, 688 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to maintain a level of protection for your data that is consistent with the standards described in this Privacy Policy.
9.2 Your PKR transaction records and core account identity data are retained on infrastructure serving the Pakistan market and are not transferred to jurisdictions with inadequate data protection standards without additional protective measures.
Data Retention Periods
10.1 Active Accounts. Personal data associated with an active 688 account is retained for the duration of the account's existence and for a period of five years following the permanent closure of the account. This retention period reflects applicable AML record-keeping requirements for PKR financial transaction records.
10.2 KYC Documentation. Identity documents submitted for KYC verification at 688 are retained for a minimum of five years from the date of the most recent verified transaction, in accordance with financial crime prevention obligations.
10.3 Gaming Activity Records. Bet history, session logs, and PKR wager records are retained for a minimum of three years for dispute resolution purposes and to support responsible gaming monitoring obligations.
10.4 Support Communications. Records of your interactions with the 688 support team via Live Chat, WhatsApp, Telegram, or email are retained for a period of two years from the date of the interaction, unless the interaction relates to an ongoing dispute or legal matter that requires longer retention.
10.5 Anonymisation. After the applicable retention period has elapsed, 688 will either securely delete your personal data or irreversibly anonymise it. Anonymised data may be retained for statistical and analytics purposes without time limit, as it no longer constitutes personal data capable of identifying you.
Your Privacy Rights
As a 688 account holder, you hold the following rights in respect of the personal data 688 processes about you. To exercise any of these rights, please contact the 688 privacy point of contact at [email protected] with the subject line "Privacy Rights Request — [Registered Mobile Number]".
- Right of Access: You may request a copy of the personal data 688 holds about you, including your account registration data, PKR transaction history, and gaming activity records.
- Right of Rectification: If any personal data 688 holds about you is inaccurate or incomplete, you may request that it be corrected. For registered Pakistan mobile number changes, please contact the 688 support team via Live Chat to verify your identity before the update is processed.
- Right of Erasure: You may request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purpose it was collected. Note that legal obligation-based data (PKR AML records, KYC documentation) cannot be deleted ahead of the mandatory retention period even at your request.
- Right to Restrict Processing: You may request that 688 temporarily restrict the processing of your data while a dispute or rectification request is being resolved.
- Right to Data Portability: You may request a copy of the personal data you have provided to 688 in a structured, commonly used, machine-readable format.
- Right to Withdraw Consent: Where 688 processes your data on the basis of your consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to Object: You may object to processing of your data where it is carried out on the basis of legitimate interests. 688 will assess your objection against its legitimate interest grounds and respond within 30 calendar days.
688 will respond to all valid privacy rights requests within 30 calendar days of receiving a verifiable request. Complex requests may be extended by a further 60 days where 688 provides written notice of the extension and the reason for it.
Children and Minors
12.1 The 688 platform is strictly an 18+ service. 688 does not knowingly collect personal data from individuals under 18 years of age. All 688 registration processes include age confirmation steps and 688 reserves the right to require CNIC-based age verification at any time.
12.2 If 688 identifies or is notified that personal data has been collected from an individual under 18, the associated 688 account will be closed immediately, any PKR balance will be handled in accordance with the 688 Terms & Conditions, and the minor's personal data will be deleted from 688 systems as quickly as is consistent with applicable legal obligations.
12.3 688 account holders are responsible for preventing minors in their household from accessing the 688 platform through the account holder's devices or 688 login credentials. If a minor has accessed 688 through your account, please notify the 688 support team immediately via Live Chat.
Security Measures
13.1 Technical Safeguards. 688 implements the following technical security measures to protect your personal data and PKR transaction information:
- 256-bit SSL/TLS encryption on all 688 platform connections, including the 688 login process and all payment interactions.
- One-way hashed password storage — 688 servers store only your hashed password, never the plain-text value. No 688 staff member can read your password.
- Role-based access controls that limit the categories of personal data accessible to each category of 688 staff member based on operational necessity.
- Automated suspicious-login detection that triggers SMS alerts to your Pakistan mobile number when the 688 login is attempted from an unrecognised device or IP location.
- Optional two-factor authentication (2FA) via OTP SMS to your registered Pakistan mobile number, available to all 688 account holders.
13.2 Organisational Safeguards. In addition to technical measures, 688 maintains internal data security policies, staff training on data protection obligations, and confidentiality requirements for all personnel who handle personal data as part of their 688 role.
13.3 Data Breach Response. In the event of a personal data breach that poses a risk to affected 688 players, 688 will notify affected players via SMS to their registered Pakistan mobile number within 72 hours of becoming aware of the breach, and will take immediate steps to contain and remediate the breach.
Changes to This Privacy Policy
14.1 688 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, changes to the 688 platform's data processing activities, or changes in privacy best practices. The effective date shown at the top of this page will be updated each time a new version is published.
14.2 Where changes to this Privacy Policy are material — for example, a new category of data being collected or a new purpose for which existing data will be used — 688 will notify all active account holders via SMS to their registered Pakistan mobile number at least 14 days before the change takes effect.
14.3 Your continued use of the 688 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any update to this policy, you should request account closure from the 688 support team before the update takes effect.
How to Contact 688 About Privacy
For all privacy-related queries, data rights requests, or concerns about how 688 handles your personal data or PKR transaction records, please use the following contact channels:
- Email: [email protected] — use the subject line "Privacy Query — [Your Registered Pakistan Mobile Number]" to ensure your message is routed to the 688 privacy team promptly. Responses within 48 hours for standard queries.
- Live Chat: Available directly on the 688 platform after completing your 688 login. Select the "Privacy / Data" query category to connect with a privacy-trained support agent.
- WhatsApp / Telegram: The 688 support team is available 24/7 via WhatsApp and Telegram for account-related privacy queries including data access requests and consent withdrawal.
688 will acknowledge all privacy queries within 2 business days and will provide a substantive response within 30 calendar days. The 30-day window may be extended by up to 60 additional days for complex requests, with written notice provided to you within the initial 30-day period.
A Quick Reference to Your Privacy Rights
As a 688 account holder in Pakistan, here are your six core data rights — and what each one means in practice for your 688 account.
Right of Access
Request a full copy of all personal data 688 holds on your account — including registration details, PKR transaction history, and gaming records. 688 will provide this within 30 days of a verified request.
Right of Rectification
Correct inaccurate personal data on your 688 account at any time through your account settings panel or by contacting the 688 support team. Identity changes require live verification for security.
Right of Erasure
Request deletion of your 688 account data where it is no longer necessary. Note that AML-required PKR financial records must be retained for the statutory period regardless of erasure requests.
Right to Restrict
Ask 688 to pause processing of your data while a dispute is being investigated or while a rectification request is pending — without permanently deleting your account or PKR balance.
Data Portability
Obtain a structured, machine-readable copy of the personal data you have actively provided to 688 — useful if you wish to migrate records to another platform or retain your own PKR transaction archive.
Right to Withdraw Consent
Withdraw consent for promotional communications from 688 at any time through your account settings or by contacting 688 support. Withdrawal does not affect consent you gave before the withdrawal date.
688 Data Security at a Glance
From SSL encryption to two-factor authentication, 688 applies multi-layer protection to your account data and PKR transactions.
256-Bit SSL
All 688 platform connections — including the 688 login and every PKR payment — are encrypted with 256-bit SSL/TLS, protecting your data in transit from interception even on public Wi-Fi.
2FA via OTP
Optional two-factor authentication sends a one-time SMS code to your registered Pakistan mobile number before allowing a new-device 688 login, blocking access even if your password is known by a third party.
Hashed Passwords
Your 688 account password is stored as a one-way hash. No 688 employee can read it — only reset it via your verified Pakistan mobile number after you confirm your identity.
Breach Notification
In the event of a data breach affecting your 688 account, 688 will notify you via SMS to your registered Pakistan mobile number within 72 hours and take immediate steps to contain and remediate the incident.
688 is an 18+ Real-Money Gaming Platform — Please Play Responsibly
All 688 products — Live Casino, Test Cricket, Jackpot Slots, and Cockfighting — involve real PKR and carry genuine financial risk. By using 688 you confirm you are 18 or over. 688 promotes responsible gaming: use the deposit limits, loss caps, and self-exclusion tools available in your 688 account settings to stay in control of your gaming activity. If you have privacy concerns or wish to exercise your data rights under this Privacy Policy, contact the 688 support team at [email protected] or via Live Chat 24/7. For mental health support, the Umang helpline (Pakistan Mental Health Authority) is available at 0317-4288665.