Privacy Policy — How dh888 Collects, Uses & Protects Your Data

1. Who We Are

dh888 ("the Company", "we", "us", "our") operates the online gaming platform accessible at dh888.im, offering cricket betting, sportsbook wagering, live casino, and slot gaming services to players in Pakistan and other permitted jurisdictions. dh888 is operated under an international gaming licence.

For the purposes of this Privacy Policy, dh888 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf (such as KYC verification companies or payment processors), those providers act as data processors and are contractually bound to handle your data solely as instructed by dh888.

Any queries about data privacy at dh888 should be directed to our support team. Contact details are provided in Section 15 of this Policy.

2. Personal Data We Collect

dh888 collects only the personal data that is necessary to provide you with a safe, compliant, and high-quality gaming experience. The categories of data we collect are set out below.

2.1 Registration Data

• Full legal name
• Date of birth (for mandatory age verification — you must be 21+)
• Pakistani mobile number
• Email address
• City of residence (e.g. Karachi, Lahore, Islamabad, Faisalabad)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Government-issued photo ID (CNIC, passport, or driving licence)
• Proof of address document
• Selfie or facial verification image (where required by KYC procedure)
• Proof of payment method ownership (e.g. screenshot of JazzCash or EasyPaisa account)

2.3 Financial Data

• Deposit and withdrawal transaction records (amounts, dates, methods)
• Payment method identifiers (e.g. last 4 digits of a bank account, mobile wallet number associated with JazzCash or EasyPaisa)
• Account balance history

2.4 Gaming Activity Data

• Bet history, wager amounts, game selections, and outcomes
• Session times, login frequency, and platform usage patterns
• Responsible gaming tool settings (deposit limits, self-exclusion status)

2.5 Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookies and similar tracking technologies (see Section 10)
• Referring URLs and on-site navigation paths

2.6 Communications Data

• Content of messages sent to dh888 support (live chat transcripts , email correspondence)
• Survey responses and feedback submissions
• Marketing preference records

3. How We Collect Your Data

dh888 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey.
• Automatically — through cookies, server logs, and analytics tools as you browse and use the dh888 platform.
• From third-party providers — including KYC identity verification services, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay), fraud prevention partners, and our licensed gaming software suppliers.
• From public sources — where permitted by law, dh888 may verify information against publicly available databases as part of fraud prevention and AML screening procedures.

4. Why We Use Your Data

dh888 uses your personal data for specific, documented purposes. The table below sets out the primary purposes and the data categories used for each:

5. Legal Basis for Processing

dh888 processes your personal data on the following legal bases:

• Contractual necessity — processing required to open and manage your account, execute transactions, settle bets, and provide the services you have registered for on dh888.
• Legal obligation — processing required to comply with anti-money laundering (AML) regulations, KYC requirements, gaming licence conditions, tax reporting, and other applicable legal duties.
• Legitimate interests — processing carried out to detect fraud, prevent abuse, ensure platform security, and conduct internal analytics to improve the dh888 service, where such interests are not overridden by your fundamental rights.
• Consent — processing for direct marketing communications (email, SMS, push notifications) where you have explicitly opted in. You may withdraw consent at any time without affecting prior processing.

6. Data Sharing & Third Parties

dh888 does not sell your personal data. We share data only in the limited circumstances described below, and only with recipients who are contractually obligated to maintain appropriate data protection standards.

6.1 Payment Processors

To process your deposits and withdrawals, dh888 shares necessary financial data with licensed payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network processors. Each provider operates under its own privacy policy and regulatory framework.

6.2 KYC & Identity Verification Partners

dh888 works with certified identity verification service providers to conduct KYC checks required under our gaming licence. Your identification documents and verification data are transmitted securely to these providers solely for verification purposes and are not used for any other purpose.

6.3 Gaming Software Providers

Certain games on the dh888 platform are provided by licensed third-party game studios. These providers may receive pseudonymised session and bet data necessary to operate their games. They do not receive your full personal profile or contact information.

6.4 Regulatory Authorities

dh888 may be required to disclose player data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where mandated by the laws or regulations applicable to our gaming licence. Such disclosures are made strictly as required and no more extensively than legally necessary.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of dh888's business assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and the applicable privacy terms will continue to apply.

7. International Data Transfers

dh888 operates under an international gaming licence, and some of our service providers — including KYC partners and gaming software suppliers — may process data in jurisdictions outside Pakistan. Where such transfers occur, dh888 ensures that appropriate safeguards are in place, which may include standard contractual clauses, data processing agreements, or adequacy decisions recognised under applicable data protection frameworks.

By registering a dh888 account you acknowledge that your data may be transferred to and processed in countries other than Pakistan as part of our normal service operations. dh888 takes all reasonable steps to ensure that international transfers do not diminish the protections afforded to your data under this Privacy Policy.

8. Data Retention

dh888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and our gaming licence conditions. The general retention periods applied by dh888 are as follows:

• Account and transaction records: Retained for a minimum of 5 years from the date of account closure, as required by AML and gaming licence regulations.
• KYC documents: Retained for a minimum of 5 years from the date the verification was completed, or longer if required by regulatory instruction.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each transaction for dispute resolution and audit purposes.
• Marketing consent records: Retained until you withdraw consent plus 12 months thereafter as evidence of consent history.
• Support communications: Retained for 2 years from the date of last contact unless related to an ongoing dispute.

Upon expiry of the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. Security Measures

dh888 applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and dh888 servers.
• Encrypted storage of passwords using modern hashing algorithms — dh888 staff cannot view your password in plain text.
• Restricted internal access to personal data on a strict need-to-know basis with role-based access controls.
• Regular security audits and penetration testing of the dh888 platform and associated infrastructure.
• Two-factor authentication (2FA) available to all players and enforced for internal staff accounts.
• Automated fraud detection systems that flag unusual account activity for review.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the dh888 platform. They allow the platform to remember your session, preferences, and usage patterns. dh888 uses first-party cookies only — we do not use third-party advertising cookies or cross-site tracking pixels.

10.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and language preference settings. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand how players navigate the dh888 platform, which pages are most visited, and where errors occur, in order to improve the service. Data collected is aggregated and pseudonymised.
• Preference cookies: Remember your display preferences, sport or game category selections, and responsible gaming settings between sessions.

10.3 Managing Cookies

You can manage and delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging in to your dh888 account. Disabling analytics cookies will not affect your ability to use any dh888 feature. Refer to your browser's help documentation for instructions on managing cookie preferences.

11. Your Rights Over Your Data

As a dh888 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or the email address in Section 15. dh888 will respond to all verified requests within 30 days.

• Right of Access: You may request a copy of all personal data that dh888 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold. Minor account details such as email address can be updated directly via your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations. Note that AML and gaming licence regulations require us to retain certain records for a minimum of 5 years and we cannot delete data within this window.
• Right to Restriction: You may request that dh888 restricts processing of your data in certain circumstances, for example while a dispute over accuracy is resolved.
• Right to Data Portability: You may request a copy of data you have provided to dh888 in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, and you may withdraw marketing consent at any time via your account notification settings or by contacting support.

12. Marketing Communications

dh888 may send you promotional emails, SMS messages, or push notifications about bonuses, PSL cricket promotions, new games, and platform updates, but only where you have given explicit consent to receive such communications during registration or subsequently in your account settings.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email.
• Updating your notification preferences in the dh888 account settings panel.
• Contacting dh888 support and requesting removal from all marketing communications.

Opting out of marketing communications will not affect service emails such as deposit confirmations, withdrawal notifications, account security alerts, or mandatory regulatory notices — these are sent regardless of marketing preferences as they are necessary for account operation.

13. Children & Minors

The dh888 platform is strictly intended for users aged 21 years and above. dh888 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the dh888 registration and KYC process.

If dh888 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data flagged for review, and the deposited funds returned following identity verification. Parents or guardians who believe a minor has registered with dh888 should contact support immediately.

14. Changes to This Privacy Policy

dh888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. Material changes will be communicated to registered players via email and a prominent notice on the dh888 platform at least 7 days before the updated policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of dh888 after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with changes to this Policy, you must close your account before the effective date.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please contact the dh888 data protection team through the following channels:

• Live Chat: Available 24/7 via the chat icon on the dh888 platform — the fastest route to our support and compliance team.
• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing. Responses are provided within 24 business hours.

If you are not satisfied with dh888's response to a privacy complaint, you may escalate the matter to the dispute resolution body designated by our gaming licence authority, as described in the dh888 Terms & Conditions.

Please note: The email address above is displayed as plain text for reference only. dh888 support is best reached via the 24/7 live chat feature on site for the most prompt response.