Privacy Policy

The data controller is 888 Market LLC, a company registered in the Emirate of Dubai, United Arab Emirates, with trade licence number 1234567. Our registered office is in Dubai, UAE. You can reach our privacy team at privacy@888market.ae.

We collect the following categories of personal data:

• Identity data — name, date of birth, gender.
• Contact data — phone number, email, delivery address.
• Financial data — payment-card metadata (last 4 digits, brand, expiry — never the full number), wallet balance.
• Transaction data — products bought, prices paid, delivery times.
• Technical data — device model, OS version, app version, language, time zone, IP address.
• Marketing data — your preferences for receiving marketing from us.

We never collect biometric data, government ID numbers, or special-category data (health, religion, ethnicity, political views, sexual orientation).

We use your personal data only where we have a lawful basis under UAE Federal Decree-Law No. 45 of 2021. The bases are:

• Contract — to fulfil your orders, process payments, deliver goods, and provide customer support.
• Legal obligation — to comply with anti-money-laundering, tax, and consumer-protection law.
• Legitimate interest — to detect fraud, improve the app, and run analytics.
• Consent — for marketing emails and SMS, and for non-essential cookies. You can withdraw consent at any time.

We share personal data only with:

• Sellers — your name, delivery address, and order details, so they can fulfil your order.
• Logistics partners — couriers (Aramex, DHL, in-house riders) get your name, phone, and address.
• Payment processors — card networks and BNPL providers (Tabby, Tamara) receive the data needed to process the transaction.
• Cloud providers — Amazon Web Services (data hosted in Frankfurt, Germany) and Google Firebase (push notifications).
• Regulators and law enforcement — only when legally compelled.

We never sell your personal data to third parties for marketing.

• Account data — for as long as your account is active, plus 7 years after closure (UAE Commercial Companies Law).
• Order data — 7 years from the order date.
• Marketing data — until you withdraw consent.
• Technical / analytics data — 25 months from collection.

Under the UAE PDPL you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data (subject to legal retention obligations);
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time.

To exercise any right, email privacy@888market.ae or use the in-app Settings → Privacy → Manage my data flow. We respond within 30 days.

All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Payment-card numbers are tokenised and never stored in our systems. We are PCI-DSS SAQ-A compliant. Access to personal data is role-based and audited.

888 Market is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have, contact privacy@888market.ae and we will delete it.

Your data is processed in the UAE and the European Union (Frankfurt, Germany), where we host our cloud infrastructure on Amazon Web Services. Both jurisdictions are recognised by the UAE Data Office as providing adequate protection.

We may update this Privacy Policy from time to time. We will notify you of material changes via the app and email at least 30 days before they take effect.

Questions about this Privacy Policy can be sent to privacy@888market.ae. You can also write to: 888 Market LLC, Dubai, United Arab Emirates.