idcg8 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by idcg8 ("idcg8", "we", "us", "our") and applies to all individuals who visit, register on, or otherwise interact with the idcg8 online casino and sports betting platform accessible at idcg8.com, including all associated mobile interfaces, customer support channels, and promotional communications.

idcg8 takes the protection of your personal data seriously. This Policy describes the types of personal information we collect, the purposes for which we use it, the conditions under which it may be disclosed to third parties, the security measures we apply to keep it safe, and the rights available to you as a data subject.

This Policy must be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the complete legal framework governing your use of idcg8.

2. Data Controller

idcg8 acts as the data controller in respect of all personal data collected from registered players and platform visitors. As data controller, idcg8 determines the purposes and means by which your personal data is processed.

All data protection enquiries, access requests, and complaints should be addressed to our dedicated support team using the contact details provided in Section 15 of this Policy. We will acknowledge all formal data-related requests within five business days and will endeavour to resolve them within 30 calendar days.

3. Personal Data We Collect

idcg8 collects personal data in the following categories. The specific data points collected may vary depending on your level of account verification and the services you use:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data, except where such data is contained within identity documents submitted for KYC verification purposes, in which case it is processed solely for identity verification and is not used for any other purpose.

4. How We Collect Your Data

idcg8 collects personal data through the following means:

• Direct collection: Information you provide voluntarily during account registration, KYC document submission, deposit and withdrawal requests, customer support interactions, and completion of any platform forms or surveys.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies as you interact with the idcg8 platform. See Section 10 for full details on our cookie practices.
• Third-party sources: Identity verification data from KYC and anti-money laundering service providers; fraud screening data from payment processing partners; device fingerprinting data from security service providers.
• Payment processors: Transaction-related data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency network providers in connection with deposit and withdrawal processing.

5. How We Use Your Personal Data

idcg8 uses the personal data we collect for the following specific purposes:

• Account registration and management: Creating and maintaining your idcg8 player account, verifying your identity and age, and managing your account preferences and settings.
• Service delivery: Providing access to casino games, sportsbook betting markets, live dealer tables, and all other platform features and services.
• Financial transaction processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT; maintaining accurate financial records; and meeting anti-money laundering (AML) obligations.
• Regulatory compliance: Meeting obligations under applicable international gaming regulations, including KYC verification, AML screening, age verification, and self-exclusion management.
• Responsible gaming: Monitoring player activity to identify signs of problem gambling; applying deposit limits, session limits, and self-exclusion measures; and contacting players where welfare concerns arise.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, cheating, multi-accounting, money laundering, and other prohibited conduct.
• Customer support: Responding to your enquiries, complaints, and support requests efficiently and accurately.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates by email or in-platform messaging, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform improvement: Analysing aggregated usage data to improve the performance, features, and user experience of the idcg8 platform.

idcg8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or ensuring another lawful basis for processing applies.

6. Legal Basis for Processing

idcg8 processes your personal data under the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account registration, game delivery, and payment processing — is carried out on the basis that it is necessary for the performance of our Terms and Conditions.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML screening, age verification, and regulatory reporting obligations.
• Legitimate interests: Processing carried out for idcg8's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have given your clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

idcg8 does not sell your personal data. We may share your data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network processors — solely to process your financial transactions.
• Identity verification and KYC providers: Third-party verification partners who assist in confirming your identity, age, and source of funds in compliance with regulatory requirements.
• Fraud prevention and security providers: Specialist data analytics and device fingerprinting providers who help idcg8 detect and prevent fraud, multi-accounting, and other prohibited activity.
• Game software providers: Licensed game studios and live dealer platform providers who supply the games accessible through idcg8. These providers receive only the technical data necessary to deliver gameplay.
• Customer support technology providers: Platforms that facilitate live chat, email ticketing, and related support communications. All such providers operate under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory instruction, idcg8 may be obligated to disclose player data to relevant governmental or law enforcement bodies.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations, where necessary for idcg8 to obtain professional advice.

8. Data Retention

idcg8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a period of five years following permanent account closure, in compliance with standard AML and gaming regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with anti-money laundering record-keeping obligations.
• KYC documents: Retained for five years following account closure or the completion of the relevant KYC process, whichever is later.
• Customer support records: Retained for three years from the date of the last interaction, or longer where a dispute, complaint, or legal claim remains unresolved.
• Technical and usage data: Retained for up to 24 months on a rolling basis for platform performance and security monitoring purposes.
• Marketing consent records: Retained until you withdraw consent plus 12 months to evidence compliance with applicable consent requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

9. Data Security

idcg8 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and idcg8's servers
• Encryption of sensitive data fields at rest within idcg8's secure data infrastructure
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data
• Regular internal and third-party security audits and penetration testing
• Mandatory data protection training for all staff who handle personal data
• Incident response procedures enabling idcg8 to detect, report, and remediate personal data breaches in a timely manner

Whilst idcg8 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying idcg8 immediately if you suspect any unauthorised access to your account.

10. Cookies & Tracking Technologies

idcg8 uses cookies and similar technologies (including web beacons, pixel tags, and local storage objects) on the idcg8 platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing core platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised information about how players interact with the platform, enabling idcg8 to identify and fix performance issues and improve the overall user experience.
• Functionality cookies: Used to remember your preferences and settings — such as your preferred language, stored display preferences, and responsible gaming tool configurations — to provide a more personalised experience on return visits.
• Responsible gaming monitoring cookies: Used to track session duration and activity patterns to support idcg8's responsible gaming obligations, including the application of session time limits and cool-off periods.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of parts of the idcg8 platform. idcg8 does not use third-party advertising or behavioural targeting cookies.

11. Your Privacy Rights

Subject to applicable law and certain regulatory limitations, you have the following rights in respect of your personal data held by idcg8:

• Right of access: You may request a copy of the personal data idcg8 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that this right may be limited where idcg8 is required to retain data to comply with legal or regulatory obligations — for example, AML record-keeping requirements.
• Right to restriction of processing: You may request that idcg8 restricts the processing of your data in certain circumstances, such as where you contest its accuracy or object to its processing.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that idcg8 provides your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data where that processing is based on idcg8's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected]. We will respond to all requests within 30 calendar days. We may require you to verify your identity before processing any data rights request.

12. Minors & Age Policy

idcg8 strictly prohibits the registration or use of its platform by any individual under the age of 21. We do not knowingly collect personal data from minors. If you have reason to believe that a person under the age of 21 has registered an account or provided personal data to idcg8, please notify us immediately at [email protected].

Upon receiving credible notification of underage data collection, idcg8 will promptly suspend the relevant account, delete the associated personal data to the extent permitted by law, and take appropriate steps to prevent future access.

13. International Data Transfers

As an internationally operating online gaming platform, idcg8 may transfer your personal data to, and process it in, countries other than the country in which you are located. In particular, data may be processed by idcg8's servers and by certain third-party service providers located outside Pakistan.

Where personal data is transferred internationally, idcg8 ensures that appropriate safeguards are in place to protect such data, including:

• Transferring data only to countries or recipients that provide an adequate level of data protection as determined by applicable international standards
• Implementing contractual safeguards with third-party recipients, including standard data protection clauses that impose binding data protection obligations on the recipient
• Ensuring that all third-party processors engaged in processing data outside Pakistan maintain technical and organisational security measures equivalent to those described in Section 9 of this Policy

14. Amendments to This Policy

idcg8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business practices, or platform features. The effective date at the top of this Policy will be updated whenever a revision is made.

Where changes to this Policy are material — meaning they significantly affect how your personal data is collected, used, or shared — idcg8 will provide advance notice by publishing a prominent notification on the idcg8 platform and, where appropriate, by sending a notification to your registered email address prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how idcg8 protects your personal data. Your continued use of the idcg8 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

15. Contact Us & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how idcg8 handles your personal data, please contact our support team through the following channel:

If you are not satisfied with idcg8's response to your privacy complaint, you may have the right to lodge a complaint with a relevant supervisory authority or data protection regulator in your jurisdiction. idcg8 will co-operate fully with any such regulatory investigation in accordance with applicable law.

Please note that the email address above is provided as plain text for reference. All formal data protection notices and requests should be submitted in writing to the support address above, clearly marked as a data protection request, to ensure they are routed to the appropriate team member for handling.