Privacy Policy

This Privacy Policy ("Policy") describes how slo8 ("slo8", "we", "us", "our") — the operator of the online gaming and sports betting information platform accessible at https://slo8.cam (the "Platform") — collects, processes, stores, discloses and protects the personal data of users ("you", "User") who access or register with the Platform.

This Policy is intended to provide you with a clear, honest account of our data practices. It applies to all personal data collected through the Platform, including data collected at registration, during the KYC verification process, through payment transactions and via automated technical means such as cookies and server logs.

This Policy is incorporated by reference into and should be read alongside our Terms & Conditions and our Responsible Gambling Policy. In all matters of data processing, this Policy shall govern.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other available information.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, slo8 and its licensed operator.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a documented agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for one or more specified purposes.
• "KYC" means the Know Your Customer identity and age verification process required under the operator's licensing and AML obligations.
• "Cookies" means small data files placed on your device by the Platform to remember preferences and facilitate analytics and security functions.
• "Platform" means the slo8 website, mobile-optimised interface and all associated services at https://slo8.cam.

We collect the following categories of personal data from users of the Platform:

We do not intentionally collect sensitive personal data beyond what is strictly required for KYC compliance. Where sensitive data categories are collected as part of identity verification, they are handled with heightened security controls.

slo8 collects personal data through the following means:

slo8 processes personal data only where a lawful basis exists. The applicable bases are:

• Contractual Necessity: Processing required to perform the contract between you and slo8 — including account operation, deposit and withdrawal processing and support services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, CTF and licensing obligations under the operator's jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring and service improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We use your personal data for the following purposes, each linked to a lawful basis described in Section 5:

• Account Management: Creating, maintaining and operating your Account, including authentication and security controls.
• KYC & Compliance: Verifying your identity and age, conducting AML screening and satisfying regulatory reporting obligations.
• Transaction Processing: Facilitating deposits and withdrawals through payment methods including Easypaisa, JazzCash, Raast and bank transfers via institutions such as HBL, UBL, Meezan Bank and Bank Alfalah, subject to current cashier availability. Payment provider names are contextual only — they do not imply endorsement of gambling by those providers.
• Customer Support: Responding to enquiries, resolving disputes and maintaining records of communications for quality and compliance purposes.
• Responsible Gambling: Monitoring usage patterns to identify signs of potentially harmful gambling behaviour and to enforce account-level responsible gambling tools including deposit limits and self-exclusion.
• Fraud & Security: Detecting and preventing fraud, cheating, multi-accounting, money laundering and other prohibited conduct.
• Platform Improvement: Analysing aggregated usage data to improve user experience, navigation, game offerings and support quality.
• Marketing Communications: Sending promotional offers and platform updates where you have provided explicit consent and have not subsequently opted out.

We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

We retain personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements applicable to the operator's licensing jurisdiction.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, or longer where required by applicable financial regulation.
• Customer Support Records: Retained for a minimum of three (3) years from the date of each interaction, to support dispute resolution and quality assurance processes.
• Technical and Usage Logs: Typically retained for up to twelve (12) months, unless an extended period is required for security investigation or fraud prevention purposes.
• Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter to evidence prior consent status.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised. Anonymised data — which can no longer be used to identify you — may be retained indefinitely for analytical and statistical purposes.

Subject to the applicable laws of the operator's licensing jurisdiction, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, please contact us at [email protected] with sufficient information to identify your Account.

• Right of Access: You may request a copy of the personal data we hold about you, together with information on how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose collected, consent has been withdrawn, or processing is otherwise unlawful — subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we restrict processing of your data in circumstances including where accuracy is contested or processing is unlawful but you oppose erasure.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing, at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

slo8 uses cookies and similar tracking technologies to operate the Platform, improve user experience, maintain session security and gather anonymised analytics data. By continuing to use the Platform, you consent to the use of cookies in accordance with this Policy.

slo8 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Encryption at rest for stored personal data and financial records.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate business need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication options for user accounts and mandatory for internal administrative access.
• Documented incident response procedures to address and contain any personal data breach promptly.

slo8 operates with infrastructure and service providers that may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally — including to service providers in the European Economic Area, the United Kingdom, or other jurisdictions — such transfers are conducted under appropriate legal safeguards, including standard contractual clauses or other recognised transfer mechanisms as required by the applicable legal framework.

We require all international data recipients to maintain security standards equivalent to those described in this Policy and to process data only for the specified, contractually agreed purposes.

The Platform is strictly intended for adults aged 18 or over — or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect personal data from individuals under this age threshold.

Where we become aware that personal data has been collected from a minor, we will promptly delete that data, close the associated account and, where appropriate, take further action including reporting to relevant authorities. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

The Platform may reference third-party services — including payment providers such as Easypaisa, JazzCash, Raast and banking institutions such as HBL, UBL, Meezan Bank and Bank Alfalah — for contextual and educational purposes. Where you interact with any third-party service, your data is subject to that party's own privacy policy and data practices, not this Policy.

slo8 is not responsible for the data practices, content or privacy policies of any third-party service provider or linked service. We encourage you to review the privacy policies of any third-party service before providing your personal information.

slo8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or regulatory requirements. Where changes are material, we will provide notice via email to your registered address, via an in-platform notification or by posting a prominent update notice on this page with a revised "Last Updated" date.

Your continued use of the Platform following publication of an amended Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you should cease using the Platform and contact us to request account closure.

We recommend revisiting this page periodically — particularly before making any significant account activity such as a large deposit or withdrawal — to ensure you are aware of the current data practices that apply to your use of slo8.

For all privacy-related enquiries, data rights requests and complaints regarding the processing of your personal data, please contact the slo8 team through the following channels. Please include your registered username, the nature of your request and any relevant details.