h888 Privacy Policy —
How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how h888 ("h888", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals who access, register with, or use the h888 online gaming platform available at h888.lol (the "Platform").

h888 is designed for use by English-speaking Pakistani players and serves registered users primarily located across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and other cities. By creating an account with h888, logging in, or using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside h888's Terms and Conditions and Responsible Gaming Policy, all of which together govern the relationship between h888 and its players. Where this Policy conflicts with any other h888 document on the specific subject of personal data handling, this Policy prevails.

For the purposes of applicable data protection law, h888's operating entity is the Data Controller responsible for your personal data collected through the Platform. The Data Controller determines the purposes for which and the means by which your personal data is processed.

As Data Controller, h888 accepts responsibility for ensuring that personal data collected from players is processed in compliance with applicable data protection obligations. If you have questions or concerns about how h888 processes your data as the Data Controller, please contact h888 directly using the details provided in Section 17 of this Policy.

h888 collects personal data in the categories described below. The specific data collected in each category varies depending on the features you use and the interactions you have with h888.

• IP Address: Collected at login and during sessions for fraud detection, geolocation, and security purposes.
• Device Identifiers: Device type, operating system, browser type and version, device fingerprint.
• Session Data: Login timestamps, session duration, pages visited within h888, features accessed.
• Network Data: ISP, approximate location derived from IP address, connection type (mobile data / Wi-Fi).

h888 retains records of communications between you and h888 support — including emails sent to [email protected], live chat transcripts, and any other correspondence. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

h888 collects personal data through the following channels:

• Directly from You: When you register an h888 account, verify your identity, make a deposit, submit a withdrawal request, contact h888 support, or update your account profile.
• Automatically Through the Platform: h888's systems automatically collect technical and device data when you access the Platform — including IP address, device identifiers, session data, and usage patterns. This data is collected via server logs, cookies, and similar tracking technologies.
• From Payment Processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, h888 receives transaction confirmation data from the respective payment provider. h888 does not have direct access to your full payment credentials held by these providers.
• From Identity Verification Services: Where h888 uses third-party KYC services to verify the identity or age of a player, those services may return data to h888 confirming the verification outcome. The KYC provider's own privacy policy governs the data they process.
• From Fraud Prevention Systems: h888 may receive risk assessment data from fraud detection partners to identify potentially fraudulent account activity or payment transactions.

h888 processes your personal data on the following legal bases under applicable data protection law:

• Contract Performance: Processing necessary to perform h888's contract with you — including account creation, payment processing, delivering gaming services, and resolving disputes. This forms the primary legal basis for most personal data processing at h888.
• Legal Obligation: Processing required to comply with legal obligations — including anti-money-laundering (AML) checks, Know Your Customer (KYC) identity verification, age verification, and regulatory record-keeping requirements.
• Legitimate Interests: Processing for h888's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, improving platform performance, and communicating service updates to players. h888 has assessed that these legitimate interests do not override your privacy rights.
• Consent: Where h888 relies on your consent as the legal basis for processing — such as sending you promotional offers or marketing communications — you may withdraw your consent at any time by contacting h888 at [email protected] without affecting the lawfulness of processing that occurred before withdrawal.

h888 uses personal data collected from Pakistani players for the following specific purposes:

• Account Administration: Creating and managing your h888 account, processing login authentication, maintaining your betting and transaction history, and managing your account settings and preferences.
• Payment Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20. Verifying payment method ownership and reconciling transaction records.
• Identity & Age Verification: Verifying that you are who you say you are, and that you meet h888's minimum age requirement of 21 years. KYC verification may be required before processing withdrawal requests above threshold amounts.
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, money laundering, payment fraud, bonus abuse, and other prohibited conduct as defined in h888's Terms and Conditions.
• Responsible Gaming: Monitoring betting patterns and account behaviour to identify signs of at-risk or problem gambling. Implementing responsible gaming interventions — including proactive deposit limit suggestions, cooling-off period recommendations, or self-exclusion — where appropriate.
• Customer Support: Responding to player enquiries, complaints, and disputes received via [email protected] or live chat within the h888 platform.
• Platform Improvement: Analysing aggregated and anonymised platform usage data to improve h888's services, fix technical issues, and enhance the player experience for users across Pakistan.
• Legal Compliance: Complying with applicable laws, regulations, court orders, and regulatory requests — including AML reporting obligations and responses to law enforcement enquiries where legally required.

h888 may share your personal data with the following categories of third parties, strictly for the purposes stated and under contractual data processing agreements that obligate these third parties to protect your data to standards equivalent to h888's own:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency exchange/processing partners receive transaction data necessary to execute your deposits and withdrawals. Each provider processes this data under their own privacy policy and h888's data processing agreement.
• Game Software Providers: h888's certified game providers — including Evolution Gaming, Ezugi, PG Soft, Pragmatic Play, and Habanero — receive game session data (game rounds, bets, outcomes) necessary to operate certified games within h888. These providers do not receive your financial or identity data unless necessary for live dealer studio requirements.
• Identity Verification (KYC) Providers: Third-party KYC service providers may process copies of your identity documents and confirmation data for the purpose of verifying your identity on behalf of h888. These providers are contractually prohibited from using your data for any purpose other than KYC verification for h888.
• Fraud Detection & Security Partners: h888 may share device, IP, and behavioural data with fraud detection system providers to assess transaction risk. These providers process data solely for fraud prevention purposes.
• Legal & Regulatory Authorities: h888 will disclose personal data to law enforcement agencies, regulatory authorities, or courts where legally required or where h888 reasonably believes disclosure is necessary to protect h888's legal rights, comply with legal process, or prevent illegal activity.
• Professional Advisers: Lawyers, auditors, accountants, and other professional advisers retained by h888 may access personal data in the course of providing professional services to h888, strictly on a need-to-know basis and subject to professional confidentiality obligations.

h888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that allow h888's systems to recognise your browser across sessions and remember your preferences.

• Strictly Necessary Cookies: These cookies are essential for the h888 Platform to function — they handle session authentication, login state, language preferences, and security tokens. The Platform cannot function correctly without these cookies. They do not require your consent.
• Functional Cookies: These cookies remember your preferences within h888 — such as your preferred lobby layout or notification settings. They improve your experience but are not strictly necessary.
• Analytics Cookies: h888 uses anonymised analytics data to understand how players navigate the Platform and identify areas for improvement. This data is processed in aggregate and does not identify individual players.
• Security Cookies: Used by h888's fraud detection systems to recognise trusted devices and flag potentially fraudulent login attempts from unrecognised devices or locations.

You may configure your browser to reject or delete cookies from h888. However, rejecting strictly necessary cookies will impair or prevent your ability to use the h888 Platform — including logging into your account. h888 does not use third-party advertising cookies.

h888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport Encryption: All data transmitted between your device and h888's servers is encrypted using 256-bit SSL/TLS — the same standard employed by major international banks.
• Password Security: h888 stores account passwords as one-way cryptographic hashes using industry-standard algorithms. h888 staff cannot read or recover your password in plain text — ever.
• Access Controls: Access to personal data within h888's internal systems is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific role.
• Intrusion Detection: h888's infrastructure includes real-time intrusion detection and monitoring systems that flag and respond to anomalous access patterns.
• Regular Security Audits: h888's technical infrastructure undergoes periodic security reviews and penetration testing by qualified security professionals.
• Incident Response: h888 maintains a documented data breach response procedure. In the event of a security incident that may affect your personal data, h888 will notify affected players and relevant authorities within the timeframes required by applicable law.

h888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. The following retention periods apply:

Upon expiry of applicable retention periods, h888 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual.

h888 operates on an international technical infrastructure. As a result, your personal data may be transferred to and processed in countries outside Pakistan — including countries where h888's servers, game providers, or third-party service partners are located.

Where personal data is transferred internationally, h888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards may include: standard contractual clauses approved by recognised data protection authorities, binding corporate rules, or transfers to countries recognised as providing adequate data protection standards.

By using h888 and accepting this Privacy Policy, you consent to the international transfer of your personal data under the safeguards described above.

h888 is strictly prohibited for use by persons under the age of 21. h888 does not knowingly collect personal data from individuals under 21 years of age. If h888 discovers or is notified that personal data belonging to a person under 21 has been collected through the Platform, h888 will immediately suspend the relevant account, delete the associated personal data (where not required to be retained under AML obligations), and refund eligible deposits.

Parents or guardians who believe that their child under the age of 21 has registered with h888 should contact h888 immediately at [email protected] so that the account can be located and the matter resolved without delay.

Your data rights are described in full in the "Your Data Rights" section above (access, rectification, erasure, portability, restriction, objection, and automated decision-making rights). To exercise any of these rights:

• Email h888 at [email protected] with the subject line "DATA RIGHTS REQUEST".
• Include your registered mobile number and a clear description of the right you wish to exercise and the specific data it relates to.
• h888 may request proof of identity before processing your request to ensure data is not disclosed to or deleted for the wrong person.
• h888 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days with notice to you.
• h888 will not charge a fee for processing data rights requests unless requests are manifestly unfounded or excessive — in which case h888 will notify you of any applicable fee before proceeding.

h888 may send you promotional communications about bonuses, new games, and platform offers where you have provided consent to receive such communications at the time of registration or at a later date. All marketing communications from h888 will:

• Clearly identify h888 as the sender
• Include a clear and accessible opt-out mechanism
• Comply with applicable anti-spam legislation
• Not be sent to players who have opted out of marketing communications

You may opt out of h888 marketing communications at any time by emailing [email protected] with the subject line "UNSUBSCRIBE". h888 will process your opt-out request within five business days. Opting out of marketing communications does not affect transactional communications — h888 will continue to send you account-related notifications (deposit confirmations, withdrawal notifications, security alerts) which are not marketing in nature.

The h888 Platform does not contain links to external third-party websites for commercial purposes. If h888 ever references a third-party resource — such as a responsible gaming organisation — h888 is not responsible for the privacy practices of that third party. Their own privacy policy governs the data they collect. h888 recommends reviewing the privacy policy of any external website before providing personal information to it.

h888 reserves the right to update this Privacy Policy at any time to reflect changes in our services, applicable law, or data protection best practices. When h888 makes material changes — meaning changes that significantly affect your rights or how your data is used — h888 will notify registered players via their registered mobile number or via a prominent on-platform notification, with a minimum of seven (7) days' advance notice.

The "Last Updated" date displayed at the top of this page and in the hero section indicates when the current version of this Policy took effect. Your continued use of h888 following the effective date of any updated Policy constitutes your acceptance of the changes. If you do not accept the updated Policy, you should stop using h888 and contact h888 to close your account.

For all privacy-related enquiries, data rights requests, or concerns about h888's data handling practices, please contact h888 using the details below. h888's support team is available 24 hours a day, 7 days a week, and privacy-related requests are prioritised for response.

This Privacy Policy was last updated on 1 January 2026. All previous versions of the h888 Privacy Policy are superseded by this document. Players who registered prior to this date are subject to this current Policy upon their next login to h888.