h88 Privacy Policy

This Privacy Policy sets out how h88 ("we," "us," "our," or "the Company"), the operator of h88.cam, collects, processes, uses, stores, and protects the personal data of users ("Players," "you," or "your") who access and use the h88 platform.

h88 acts as the data controller in respect of your personal information. This means h88 determines the purposes and means by which your personal data is processed. Where h88 engages third-party service providers to process data on its behalf, those parties act as data processors under written agreements that restrict their use of your data to the specific services they provide to h88.

h88 primarily operates as an online gaming and sports betting platform serving Pakistani players. We recognise that our players trust us not only with their money but also with their personal information, and we take both responsibilities equally seriously. Our data practices are shaped by principles of fairness, transparency, data minimisation, and security.

This policy should be read alongside h88's Terms & Conditions, which govern your use of h88 services as a whole, and our Responsible Gaming policy, which describes how we use certain personal data to protect player welfare.

h88 collects the following categories of personal data in the course of providing its services:

• Full legal name (as it appears on your Pakistani CNIC or passport)
• Date of birth and age verification data
• National Identity Number (CNIC number) — for identity verification purposes only
• Pakistani mobile number (primary contact and 2FA verification)
• Email address
• Residential address (city and province at minimum)
• Gender (optional, collected to personalise promotional offers where relevant)

• Payment method type (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, USDT)
• Wallet numbers, mobile money account numbers, or bank account numbers associated with transactions
• Transaction history — deposits, withdrawals, and in-platform transfers
• Source of funds documentation (where required for regulatory compliance or large transaction verification)

• Game play history — games played, bets placed, amounts wagered, outcomes, session durations
• Sports betting history — markets accessed, bets placed, in-play betting behaviour
• Bonus and promotional usage data
• Responsible gaming tool usage (deposit limits set, self-exclusion activations)

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Session timestamps and login history
• Cookies and similar tracking technologies (see Section 10)
• Connection type (Wi-Fi or mobile data, network operator)

• Records of live chat conversations with h88 support agents
• Email correspondence with h88
• Survey responses and feedback submissions

h88 collects personal data through the following channels and mechanisms:

• Account Registration: Information you provide when creating your h88 account, including name, date of birth, CNIC, mobile number, and email address.
• Identity Verification: Documents you submit as part of h88's KYC (Know Your Customer) verification process, including copies of your CNIC, passport, or proof of address.
• Payment Transactions: Information generated when you make a deposit or withdrawal via JazzCash, EasyPaisa, bank transfer, or cryptocurrency — including transaction IDs, amounts, and timestamps.
• Platform Usage: Data automatically generated as you use h88 — games you play, bets you place, pages you visit, and features you interact with.
• Customer Support: Information you share when contacting h88 support via live chat or email, including your account details, queries, and any supporting documentation you provide.
• Cookies and Similar Technologies: Technical data collected automatically via cookies, web beacons, and similar tools when you access h88.cam (see Section 10).
• Third-Party Verification Services: Data received from identity verification and fraud prevention partners when we conduct checks on your account or transactions.

h88 processes your personal data for the following specific purposes:

h88 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations to you under h88's Terms & Conditions — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and age verification mandates.
• Legitimate Interests: Processing undertaken to protect h88's legitimate business interests — including fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — where such interests do not override your fundamental rights.
• Consent: Processing based on your explicit consent — primarily relating to marketing communications. You may withdraw consent for marketing at any time without affecting other processing activities.

h88 does not sell your personal data. We share your data only in the following specific circumstances:

To facilitate deposits and withdrawals, h88 shares necessary transaction data with payment service providers — including JazzCash, EasyPaisa, SadaPay, Raast, and participating Pakistani banks (HBL, UBL, Meezan Bank, and others). These providers receive only the data necessary to process the specific transaction and are prohibited from using your data for any other purpose.

h88 works with third-party KYC and identity verification services to confirm player identities and prevent fraud. These providers process your identity documents and associated data solely for the verification function under strict contractual data protection obligations.

h88 integrates games from third-party software providers. These providers may receive anonymised or pseudonymised session data for the purpose of delivering game content and auditing RNG fairness. Game providers do not receive your personally identifiable information except where technically necessary for game session authentication.

h88 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, valid legal process, or a legitimate request from a competent authority. h88 will notify affected players of such disclosure where legally permissible to do so.

In the event of a merger, acquisition, or transfer of some or all of h88's business, your personal data may be transferred to the acquiring or successor entity. You will be notified of any such transfer and your rights under this policy will continue to apply.

h88 employs comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and h88 servers is encrypted using TLS 1.3 / SSL with 256-bit encryption keys. Our SSL certificate is maintained and renewed continuously.
• Encryption at Rest: Personal data stored on h88 servers is encrypted using AES-256 symmetric encryption. Passwords are never stored in plain text — they are hashed using bcrypt with appropriate salt values.
• Access Controls: Access to personal data within h88's systems is governed by strict role-based access controls. Only personnel with a genuine operational need may access personal data, and all access is logged and audited.
• Two-Factor Authentication: h88's internal administrative systems require two-factor authentication for all staff. Player accounts also support 2FA via OTP to prevent unauthorised access.
• Security Monitoring: h88 maintains continuous security monitoring systems that detect and alert on anomalous access patterns, potential intrusions, and suspicious activity in real time.
• Regular Security Audits: h88 conducts periodic security audits and vulnerability assessments of its platform infrastructure, including penetration testing by qualified security professionals.
• Incident Response Plan: h88 maintains a documented data breach response plan. In the event of a confirmed breach affecting player personal data, notification procedures are initiated within 72 hours per our obligations.

Notwithstanding the above, no data transmission over the internet or storage system can be guaranteed to be 100% secure. h88 will take all reasonable steps to protect your data but cannot guarantee absolute security. You can further protect your account by using a strong, unique password and enabling 2FA.

h88 retains personal data for the periods described below, after which data is securely deleted or anonymised:

• Account Data: Retained for the duration of your account's active status, plus 5 years following account closure. Extended retention may apply where required by anti-money laundering regulations or ongoing legal proceedings.
• Identity Verification Documents: Retained for 5 years from the date of account closure, in compliance with applicable KYC and AML regulatory requirements.
• Financial Transaction Records: Retained for 7 years from the date of each transaction, in accordance with financial record-keeping obligations.
• Gaming Activity Records: Retained for 5 years from your last gaming activity on h88, or from the date of account closure, whichever is later.
• Customer Support Communications: Retained for 3 years from the date of each communication.
• Technical and Device Data (Logs): Retained for 12 months from collection, after which logs are purged or anonymised for aggregate analytics.
• Marketing Preferences: Retained until you withdraw consent for marketing communications or close your account.

Where h88 is required to retain data beyond the standard periods above due to a legal obligation, ongoing dispute, or regulatory investigation, data will be held until the relevant obligation is satisfied and then securely deleted.

As an h88 player whose personal data we process, you hold the following rights, which you may exercise at any time by contacting h88 at [email protected]:

To exercise any of the above rights, contact h88 at [email protected] with the subject line "Privacy Rights Request" and include your registered mobile number to verify your identity. h88 will respond within 30 days. Complex requests may be extended by a further 60 days with notice.

h88.cam uses cookies and similar technologies to ensure the platform functions correctly, provide a personalised experience, and understand how players use our services. By using h88.cam, you consent to the use of cookies in accordance with this section.

• Strictly Necessary Cookies: Essential for the website to function — including maintaining your login session, remembering your account, and ensuring secure transactions. These cannot be disabled.
• Functional Cookies: Remember your preferences — such as language, game lobby layout, and notification settings — to provide a personalised experience between sessions.
• Analytics Cookies: Help h88 understand how players use the platform — which games are most popular, where users navigate from, and how long sessions typically last. This data is aggregated and anonymised. h88 uses this information solely to improve the platform.
• Security Cookies: Support h88's fraud detection and account security systems by identifying unusual access patterns or suspicious behaviour.

h88 does not use third-party advertising cookies or allow third-party advertisers to place cookies on h88.cam. You can manage cookie preferences via your browser settings. Disabling strictly necessary cookies will impair the functionality of h88.cam.

h88 may send you promotional and marketing communications — including bonus offers, seasonal promotions, new game announcements, and PSL or cricket betting promotions — via SMS to your registered Pakistani mobile number, email, or in-platform notifications, where you have consented to receive such communications.

h88 will not send marketing communications without your consent. You may have provided this consent during account registration by ticking the relevant opt-in box. If you did not opt in during registration, you will not receive unsolicited marketing from h88.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in your h88 account settings
• Clicking the "unsubscribe" link in any h88 marketing email
• Replying STOP to any h88 marketing SMS
• Contacting h88 support at [email protected] with the subject "Unsubscribe"

Opting out of marketing does not affect transactional communications — h88 will continue to send account-related notifications such as deposit confirmations, withdrawal updates, and security alerts regardless of your marketing preference.

h88 is strictly an adults-only platform. Our services are not directed at, and must not be accessed by, individuals under the age of 21 years. h88 does not knowingly collect personal data from persons under 21 years of age.

Where h88 identifies or is notified that a player is under 21 years of age, we will immediately close the relevant account and delete all personal data associated with that account to the extent permitted by applicable regulatory retention requirements. Winnings generated by underage players are void and will not be paid out.

Parents and guardians who believe a minor may have accessed or registered on h88 should contact us immediately at [email protected] with relevant details. h88 will investigate and take appropriate action as a matter of priority.

h88 uses age verification procedures during account registration and may request identity documentation at any stage of the account lifecycle to confirm a player's age. See h88's Terms & Conditions (Section 3) for full details of our age verification process.

h88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material — that is, where they alter your rights or how your personal data is processed in a meaningful way — h88 will notify you in advance via email or in-platform notification, with a minimum of 14 days' notice before the amended policy takes effect.

Non-material changes — such as typographical corrections, restructuring for clarity, or updates to contact information that do not affect your rights — may be made without prior notice. The "Effective Date" at the top of this policy indicates when the current version came into force.

The current version of this Privacy Policy is always available at h88.cam/privacy-policy. You are encouraged to review this policy periodically. Your continued use of h88 following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data h88 holds about you, please contact us using the details below:

When submitting a privacy request, please include your registered mobile number and email address so that we can verify your identity before processing the request. This protects your data by ensuring we do not disclose or amend your information in response to requests from unauthorised parties.