Overview of scope, consent, and data handling

• Personal data collected
  • Identification and contact: full name, date of birth, national ID or passport details, residential address, phone number, email.
  • Account and verification: username, verification records, KYC documents and selfies required by law, responsible gaming settings.
  • Transaction and gaming information: deposits, withdrawals, payment method details handled by providers, bet and gameplay history.
  • Technical information: device identifiers, IP address, browser and operating system, log files, cookies, online usage data.
  • Communications: support messages and documents submitted through the website.
• Why this information is collected
  • To open and manage the user account and provide the online services.
  • To verify identity, age, and location for compliance under the Gaming Act and anti‑money laundering rules.
  • To process payments, handle disputes, and maintain responsible gaming tools.
  • To secure the platform, prevent fraud, and improve service quality and performance.
• Protection measures
  • Encryption of data in transit, strong access controls, network segregation, and audit logging.
  • Vendor due diligence and contractual safeguards for processors and partners.
  • PCI DSS compliant handling of card information by authorised payment providers.
  • Staff training, need‑to‑know access, and formal incident response procedures.
• User rights
  • Access to personal information and a copy of the data where feasible.
  • Correction of inaccurate or incomplete details.
  • Deletion, restriction, or objection to processing, subject to legal retention duties.
  • Withdrawal of consent, without affecting prior lawful processing.

Compliance: Processing follows the Personal Data Protection Act, 2022 of Tanzania and guidance of the Gaming Board of Tanzania, aligning to international standards such as the GDPR where relevant.

Personal data is processed for lawful purposes and in a transparent manner:

• Account and customer service: registration, authentication, password resets, support, and service notices.
• Transactions: deposits, withdrawals, chargeback handling, and payment reconciliation through approved providers.
• Service improvement: troubleshooting, performance monitoring, and quality assurance to enhance the online experience.
• Analytics: aggregated statistics and usage patterns to maintain and develop the websites and services.
• Marketing: messages based on consent or legitimate interest as permitted by law, with easy options to opt out at any time.
• Safety and compliance: fraud prevention, security monitoring, KYC/AML checks, responsible gaming measures, and legal reporting.

Automated tools may support risk and anti‑fraud monitoring. Decisions with significant legal effects are reviewed by a person where required by law.

• Access and updates
  • Users can request access to their information and update profile data through account settings or the published support channels.
  • Additional verification may be requested before actioning a request to protect the user’s account and personal data.
• Correction and deletion
  • Inaccurate information can be corrected upon request.
  • Deletion can be requested. If data must be retained to meet legal duties, it will be restricted and kept only for the required period.
• Security checks and payments
  • By using 888starz, the user consents to security reviews, identity checks, and anti‑money laundering assessments as required by the Gaming Board of Tanzania and applicable laws.
  • Payment data may be processed by authorised payment providers for transaction execution, fraud control, and compliance.

• The services are intended for persons aged 18 years and above, in line with Tanzania gaming regulations.
• The operator cannot confirm age without appropriate documents. Proof of age may be requested at any time.
• If a minor’s information is found on the platform, the account will be closed and the personal data deleted to the extent permitted by law.
• A parent or legal guardian may request deletion by contacting support and providing a valid document demonstrating guardianship.

• Personal data may be stored or processed outside Tanzania where technology, payment, or verification partners operate.
• Use of the site signifies consent to international transfers consistent with the Personal Data Protection Act, 2022.
• Partners are required to protect confidentiality and apply appropriate technical and organisational safeguards, including contractual terms aligned to recognised standards such as standard contractual clauses where applicable.
• Access to data is limited to personnel and processors that need the information to deliver the services.

• This legal disclaimer may limit or qualify certain provisions in this Privacy Policy where the law imposes stricter or different requirements.
• The disclaimer applies once the user accepts the policy by signature, acceptance on the website, or accession through account use.
• Other documents, including Terms of Use, AML policies, and responsible gaming rules, may also apply. If there is a conflict, the rule that best satisfies legal duties will be followed.

• Definition: Cookies are small text files stored on a device when a user visits websites. They help remember preferences and support the secure operation of services.
• Purposes
  • Essential cookies for security and core functions.
  • Analytics cookies for statistics and understanding behaviour on the website.
  • Preference cookies to remember settings and personalise the user experience.
  • Marketing cookies for measuring campaign performance where consent is given.
• Retention: Cookies are kept for up to 1 year unless the user removes them earlier.
• Control: Most browsers allow blocking or deleting cookies. Refusing certain cookies may affect some features of the service.

• Using the platform means full acceptance of this Privacy Policy and any legally required consents.
• The current version on the website prevails over earlier versions.
• Material changes may be communicated through the site or account messages. Continued use after an update indicates acceptance of the revised document.

• Personal data may be shared when required by law, to manage disputes, enforce agreements, or deliver the services.
• Typical recipients include payment institutions, KYC/AML service providers, fraud prevention partners, hosting and security vendors, and professional advisers.
• Third parties listed on the website will be used; if not listed, the user will be informed of the purpose and scope where feasible and lawful.
• Providing information constitutes consent to such sharing where consent is the applicable legal basis. Each recipient is bound by confidentiality and data protection obligations.

• The website may contain links to other websites that have their own privacy practices and policies.
• The operator is not responsible for how those sites process personal data.
• Users should review the privacy information on any external site before providing personal details.