888gh Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1.1 Who We Are. For the purposes of this Privacy Policy, the data controller responsible for your personal information is 888gh, the operator of the online casino and sports betting platform accessible at https://888gh.net (the "Platform"). When we refer to "888gh", "we", "us", or "our" in this policy, we mean the entity operating the Platform under international gaming regulations.

1.2 How to Contact Us. If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or need to raise a concern about how 888gh handles your personal data, please contact our Data Protection team at the following address:

2.1 Overview. 888gh collects personal data across several categories, depending on how you interact with the platform. The following table summarises the main categories of personal data we collect and the context in which each is collected.

2.2 Sensitive Data. 888gh does not intentionally collect sensitive personal data (such as health information, religious beliefs, or biometric data) unless strictly required for regulatory compliance — for example, where a player identifies a gambling problem and requests self-exclusion, their responsible gaming status is recorded to enforce the exclusion and protect their wellbeing.

888gh collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide when completing the registration form, submitting KYC documents, making deposits or withdrawals, contacting customer support, or responding to surveys or promotions.
• Automatically during platform use: Technical data collected passively when you access the 888gh platform, including your IP address, device information, session data, and gameplay activity, collected through server logs, session tracking, and analytics tools.
• From payment processors: Transaction confirmation data from JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and USDT TRC20 networks as required to verify deposits and process withdrawals.
• From identity verification services: Where required for KYC compliance, 888gh may use third-party identity verification providers to validate the authenticity of documents you submit. These providers may share their verification result — and only the verification result — back to 888gh.
• From fraud prevention and anti-money laundering services: 888gh may receive risk scores, flagged account patterns, or sanctions screening results from third-party compliance service providers as part of our AML and fraud prevention obligations.
• Cookies and tracking technologies: As described in the Cookies section of this policy, 888gh uses first-party and select third-party cookies to support platform functionality, analytics, and responsible gaming monitoring.

4.1 Contract Performance. 888gh processes your identity data, contact data, financial data, and transaction data as necessary to perform the contract between you and 888gh — specifically, to operate your account, process deposits and withdrawals in PKR, provide access to games, and administer bonuses and VIP programme benefits.

4.2 Legal and Regulatory Compliance. 888gh is required by gaming regulations, anti-money laundering laws, and Know Your Customer obligations to collect and retain identity verification documents, transaction records, and gameplay data. This processing is mandatory — 888gh cannot provide services to players who refuse to provide data required for regulatory compliance.

4.3 Legitimate Interests. 888gh processes technical data and gameplay data for the following legitimate interests: fraud detection and prevention; platform security monitoring; responsible gaming surveillance (detecting patterns indicative of problem gambling); and improving the platform's products and user experience. Players may object to legitimate-interest processing — see Section 9 for details.

4.4 Consent. Where 888gh relies on consent as the legal basis for processing — for example, for sending promotional emails or SMS notifications about bonuses, new games, or special offers — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support.

5.1 Third Parties We Share With. 888gh does not sell your personal data. We share your data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and Meezan Bank receive the minimum transaction data required to process your deposits and withdrawals. USDT TRC20 transactions are processed on-chain and your wallet address is not shared with additional third parties.
• Identity verification providers: Third-party KYC and document verification services receive copies of the identity documents you submit. These providers are bound by strict data processing agreements and may not use your data for any purpose beyond verification.
• Fraud prevention and AML compliance services: 888gh uses independent compliance data providers to screen accounts against sanctions lists and to assess money-laundering risk. These providers process account data under data processing agreements and applicable financial regulation.
• Game software providers: Casino game providers whose titles are hosted on the 888gh platform may receive your player identifier and session data to deliver the game session. They do not receive your full identity or financial data.
• Customer support tools: 888gh's live chat and support ticketing tools may process your contact details and support communications on servers operated by the tool provider. These tools are selected based on compliance with applicable data protection standards.
• Regulatory and law enforcement authorities: 888gh will disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required by law, court order, or valid regulatory request.

5.2 International Transfers. Some of 888gh's third-party service providers operate outside Pakistan. Where your personal data is transferred internationally, 888gh takes steps to ensure that appropriate safeguards are in place — including contractual data protection clauses — to protect your data to a standard equivalent to the protections afforded within Pakistan.

6.1 General Principle. 888gh retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to the retention obligations set out below.

6.2 Active Account Data. While your 888gh account remains open and active, 888gh retains all data associated with your account to fulfil our contractual obligations to you and to comply with ongoing regulatory requirements.

6.3 Post-Closure Retention. Following account closure — whether initiated by you or by 888gh — the following retention periods apply:

• Identity and KYC documents: Retained for a minimum of five (5) years from the date of account closure, in accordance with anti-money laundering regulatory requirements applicable to gaming operators.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the relevant transaction, as required by applicable financial record-keeping regulations.
• Gameplay and betting history: Retained for a minimum of three (3) years from the date of the relevant game session or wager, for regulatory audit and dispute resolution purposes.
• Customer support communications: Retained for two (2) years from the date of the communication, or longer if the communication forms part of an ongoing dispute or legal proceeding.
• Self-exclusion records: Retained for a minimum of seven (7) years to ensure that any re-registration attempt during the exclusion period can be identified and refused.

6.4 Anonymisation. Where data is retained beyond the periods above for analytical or product improvement purposes, 888gh will anonymise it so that it can no longer be associated with any identifiable individual.

7.1 Technical Safeguards. 888gh implements the following technical security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and 888gh servers
• Encryption at rest for sensitive stored data including identity documents and payment references
• Multi-factor authentication requirements for 888gh administrative system access
• Login anomaly detection and automated alerting for suspicious account access patterns
• Regular penetration testing and security audits by independent security professionals
• Network firewalls, intrusion detection systems, and DDoS mitigation infrastructure

7.2 Organisational Safeguards. Access to personal data within 888gh is strictly limited to personnel who require it to perform their legitimate job functions. All 888gh staff with access to personal data are subject to confidentiality obligations. Staff handling sensitive player data receive regular data protection training.

7.3 Data Breach Response. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 888gh will notify affected players without undue delay and will take immediate remediation steps. 888gh maintains an incident response plan covering data breach identification, containment, assessment, notification, and post-incident review.

8.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. 888gh uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, remember your preferences, maintain your logged-in session, and collect analytical data about platform usage.

8.2 Categories of Cookies We Use.

• Strictly Necessary Cookies: Essential for the operation of the 888gh platform. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without preventing you from using core platform features.
• Functionality Cookies: Remember your preferences such as language settings, last visited game category, and display preferences. Disabling these will not prevent platform access but may degrade your experience.
• Analytics Cookies: Used by 888gh to understand how players navigate and interact with the platform — including which pages are visited most, how long sessions last, and where players drop off in key flows such as deposit and withdrawal. This data is aggregated and not used to identify individual players.
• Responsible Gaming Monitoring: 888gh uses first-party session tracking to monitor indicators of problematic gambling behaviour — including session duration, frequency, and loss patterns. This data is used internally to trigger responsible gaming interventions and is not shared with third parties for marketing purposes.

8.3 Managing Cookies. You can configure your browser to reject or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging into the 888gh platform. For all other cookie categories, disabling them will not affect your core access to the platform, though some functionality may be reduced.

888gh recognises and respects the privacy rights you hold in relation to your personal data. The following rights are available to all 888gh players and can be exercised by contacting our Data Protection team at [email protected] with the subject reference "Privacy Rights Request":

10.1 Age Restriction. The 888gh platform is strictly intended for adults aged 21 years or older. 888gh does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the 888gh registration and KYC process. Any account found to belong to a person under 21 will be immediately closed, and any data associated with that account will be deleted in accordance with our data retention obligations.

10.2 Parental Controls. Parents and guardians of individuals under 21 are strongly advised to install internet content filtering or parental control software to prevent access to online gaming and gambling platforms. 888gh supports the use of such tools and encourages responsible digital supervision of minors in Pakistan and all other markets in which we operate.

10.3 Reporting Underage Accounts. If you have reason to believe that a person under 21 has registered on the 888gh platform, please contact our support team immediately at [email protected]. We will investigate and act on any such report promptly.

11.1 Right to Update. 888gh reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or platform developments. The updated policy will be posted on this page with a revised "Last Updated" date at the top.

11.2 Notification of Material Changes. Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — 888gh will notify registered players via email or a prominent notice on the platform prior to the change taking effect. Your continued use of the 888gh platform after the effective date of any revised policy constitutes acceptance of that policy.

11.3 Reviewing This Policy. We encourage all 888gh players to review this Privacy Policy periodically, particularly before making significant account transactions or sharing additional personal information with the platform. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

12.1 Privacy Enquiries. If you have a question, concern, or formal request relating to how 888gh processes your personal data, please contact our Data Protection team using the contact details below. Please include "Privacy Request" or "Privacy Complaint" in your subject line so that your message is correctly routed:

12.2 Response Time. 888gh aims to respond to all privacy rights requests and general privacy enquiries within thirty (30) calendar days of receiving a verified request. Where the request is complex or voluminous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

12.3 Verification. To protect your privacy, 888gh will verify your identity before responding to any privacy rights request. We may request additional information or documentation to confirm that the person making the request is the account holder or is authorised to act on behalf of the account holder.

12.4 Right to Complain to a Regulator. If you are not satisfied with how 888gh has handled your personal data or responded to your privacy rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. 888gh will cooperate fully with any regulatory investigation arising from such a complaint.