h888 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy is issued by h888, the operator of the online gaming and sports betting platform accessible at h888.cash. For the purposes of data protection, h888 is the data controller in respect of all personal data collected through the h888 website, mobile browser interface and any other channel through which you interact with the h888 platform.

When this Policy refers to "h888", "we", "us" or "our", it means the entity responsible for operating h888.cash and processing the personal data of its registered Pakistani members. If you have any questions about how h888 processes your personal data, you can contact our support team at support@h888.cash at any time.

This Policy applies to all individuals who visit h888.cash, create an h888 account, make deposits or withdrawals in PKR, interact with h888 promotions, contact h888 support or use any service provided through the h888 platform. By using h888, you acknowledge that you have read and understood this Privacy Policy.

h888 collects personal data through several channels: the registration form, the KYC verification process, your ongoing use of the platform, customer support interactions and technical data generated automatically by your device when you access h888.cash. The categories of data h888 may collect are set out in the table below.

h888 does not collect sensitive personal data such as biometric data, health information or political opinions. h888 does not knowingly collect any personal data from persons under the age of 18. If we discover that data has been collected from an underage individual, it will be deleted immediately and the associated account closed.

h888 uses your personal data for the following specific purposes. We do not use your data for purposes beyond this list without first obtaining your consent or establishing a separate lawful basis for doing so.

• Account creation and management: Registering and maintaining your h888 account, verifying your identity and age, and managing your login credentials.
• Processing PKR transactions: Processing deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers and bank cards; processing withdrawal requests; maintaining your balance in Pakistani Rupees.
• KYC and AML compliance: Verifying your identity documents, confirming ownership of your payment method and screening transactions for patterns consistent with money laundering or fraud as required under our operating licence obligations.
• Providing gaming services: Making games available, recording bets and outcomes, settling PSL betting markets and other sports results, resolving game disputes.
• Delivering promotions: Identifying your eligibility for welcome bonuses, cashback offers, PSL promotions and other h888 promotional campaigns; tracking wagering progress against bonus requirements.
• Customer support: Handling your queries, resolving disputes, processing responsible gaming requests such as deposit limits and self-exclusion, and maintaining records of support interactions.
• Responsible gaming monitoring: Analysing account activity patterns to identify indicators of problem gambling behaviour, and reaching out to members whose activity suggests they may benefit from responsible gaming tools.
• Platform security and fraud prevention: Detecting and investigating suspicious account activity, identifying duplicate accounts, preventing unauthorised access and protecting the integrity of the h888 platform.
• Marketing communications (with consent only): Sending promotional emails or SMS notifications about h888 offers, new games and platform news – only where you have opted in to receive these communications.
• Platform improvement: Analysing aggregated, anonymised usage data to improve h888's interface, game selection, payment processing speed and overall member experience.

h888 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contract performance: Processing necessary to deliver the services you have signed up for on h888 – including account management, transaction processing and game access – is carried out on the basis that it is necessary to perform the contract between you and h888.
• Legal obligation: KYC identity verification, AML transaction monitoring, age verification and regulatory reporting are carried out because h888 is legally required to conduct these activities under the terms of its operating licence and applicable financial regulations.
• Legitimate interests: Fraud detection, security monitoring, duplicate account identification and platform analytics are carried out on the basis of h888's legitimate interest in protecting the platform and its members from harm and in improving the quality of the service.
• Consent: Marketing communications by email or SMS are sent only where you have given clear, specific consent to receive them. You may withdraw this consent at any time through your h888 account settings or by contacting support@h888.cash.

h888 does not sell, rent or provide your personal data to third parties for their own commercial use. However, h888 does share personal data with carefully selected third parties in the following specific circumstances:

• Payment processors: Your payment data is shared with the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card networks) to process your deposits and withdrawals. These parties receive only the data necessary to complete the transaction.
• Game software providers: To deliver live dealer games and other gaming content, h888 shares your account identifier and gaming session data with our licensed game software providers. These providers are contractually prohibited from using this data for any purpose other than game delivery.
• KYC and identity verification services: h888 may use third-party identity verification services to assist with CNIC and document verification during the KYC process. These services act as data processors under h888's instruction.
• Regulatory and law enforcement authorities: Where required by law, by our operating licence conditions, or by a valid legal order, h888 will disclose personal data to relevant regulatory bodies or law enforcement agencies. h888 will not disclose more data than is legally required and will notify affected members where legally permitted to do so.
• Fraud prevention services: h888 may participate in industry fraud prevention programmes that involve sharing limited data (such as device fingerprints or flagged account identifiers) with other operators to protect against coordinated fraud schemes.

All third parties with whom h888 shares personal data are required to maintain appropriate security standards and are permitted to use the data only for the specified purpose. h888 does not permit third-party processors to use your data for their own marketing or commercial purposes.

Because h888 handles real-money PKR transactions through multiple local payment channels, this section explains in specific detail how your financial data is handled on the platform.

When you deposit via Easypaisa or JazzCash, your mobile wallet number and the transaction amount are transmitted directly to the relevant payment provider through an encrypted connection. h888 receives a confirmation reference and transaction amount from the provider – your mobile wallet PIN or full account credentials are never transmitted to or stored by h888 at any stage.

When you deposit via a Visa or Mastercard bank card, card data is processed by our card payment processor using PCI DSS-compliant tokenisation. h888 stores only a masked card reference (for example, the last four digits and card type) to allow you to identify the payment method in your account – the full card number, CVV and expiry date are never stored on h888 servers.

For bank transfers via IBFT, h888 receives your bank name and the transaction amount from the payment confirmation. Full bank account numbers are not retained by h888 beyond the period required to match the transfer to your account and process the associated deposit.

h888 uses cookies and similar tracking technologies on h888.cash to ensure the platform functions correctly, to remember your preferences and to analyse how members use the site. The types of cookies h888 uses are explained below.

You can control cookie settings through your browser. Disabling strictly necessary cookies will prevent h888 from functioning correctly. Disabling performance and functionality cookies will not prevent you from using h888 but may affect your experience. Marketing cookies can be disabled without any impact on your ability to use the platform.

h888 implements a multi-layered approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, accidental loss, alteration or disclosure:

• 256-bit SSL/TLS encryption on all pages of h888.cash, ensuring all data transmitted between your browser and h888's servers is encrypted in transit.
• Payment tokenisation via PCI DSS-compliant payment processors, meaning full card numbers and mobile wallet credentials are never stored on h888 infrastructure.
• Access controls limiting access to personal data to h888 personnel who have a specific, documented need to process that data as part of their role. All access is logged and regularly audited.
• Encrypted data storage for sensitive data fields including identity document images and KYC verification records, held in encrypted form at rest.
• Regular security reviews covering the h888 platform, payment integrations and data storage systems, conducted by the internal security team and supplemented by periodic third-party audits.
• Incident response procedures that ensure any data security incident is identified, contained and remediated promptly, with affected members notified where required.

While h888 takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security against all possible threats. In the event of a data security breach that poses a risk to your rights and freedoms, h888 will notify affected members as promptly as reasonably possible and provide guidance on protective steps you can take.

As a registered h888 member, you have the following rights over your personal data. To exercise any of these rights, contact h888 support at support@h888.cash. h888 will respond to data rights requests within 30 days.

h888 retains personal data for different periods depending on the type of data and the purpose for which it was collected. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active h888 account plus a minimum of 5 years after account closure. This retention period is required under AML and fraud prevention obligations.
• Financial transaction records: PKR deposit and withdrawal records are retained for a minimum of 7 years from the transaction date, consistent with financial record-keeping requirements applicable to gaming platforms.
• KYC document images: Retained for the duration of your account plus 5 years after closure. Images are held in encrypted storage with restricted access.
• Gaming activity data: Bet history, game results and session data are retained for 5 years to support dispute resolution and responsible gaming monitoring obligations.
• Support communications: Chat transcripts and email correspondence are retained for 3 years from the date of the interaction to support complaint resolution and staff training.
• Technical and log data: Server access logs and device fingerprint data are retained for 12 months for security and fraud investigation purposes.
• Marketing consent records: Opt-in records for marketing communications are retained until you withdraw consent, plus 3 years after withdrawal as evidence of the consent history.

When personal data reaches the end of its retention period and there is no outstanding legal or regulatory reason to retain it further, h888 permanently and securely deletes or anonymises that data. Anonymised data (which cannot be traced back to an individual) may be retained indefinitely for statistical purposes.

h888 reviews this Privacy Policy periodically and updates it when our data practices change, when new services are added or when regulatory requirements evolve. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Material changes to this Policy will be communicated to active members by email and/or by a notice on the h888.cash platform.

Your continued use of h888 following the effective date of any policy revision constitutes your acknowledgement of the updated Privacy Policy. If you disagree with any material change to this Policy, you may close your h888 account and request deletion of your personal data by contacting support@h888.cash prior to the effective date of the change.

For all privacy-related enquiries, data rights requests, marketing opt-outs or concerns about how h888 is handling your personal data, you can reach our team through the following channels:

• Email: support@h888.cash (include "Privacy Policy" in the subject line)
• Live Chat: Available 24/7 on h888.cash when logged into your account
• FAQ: h888.cash/faq covers the most common privacy and account data questions

h888 aims to respond to all privacy-related correspondence within 2 business days. Data rights requests (access, deletion, correction) are processed within 30 days of receipt, in accordance with applicable data protection standards.