h88
Privacy Policy

This Privacy Policy ("Policy") applies to h88.bar ("h88", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal data relating to individuals ("you", "Member", "user") who access or use the h88 online casino and sports betting platform, including all services available at https://h88.bar.

h88 operates under an international gaming licence and processes personal data in compliance with the data protection obligations imposed by that licensing framework and applicable international data privacy standards. This Policy should be read in conjunction with h88's Terms and Conditions and Responsible Gaming Policy, all of which are accessible on h88.bar.

By registering an account with h88, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you should not register an account or use h88 services.

h88 collects the following categories of personal data from Members and platform visitors. The specific data points collected depend on the nature of your interaction with h88.

h88 does not collect biometric data beyond the selfie/photograph required for identity verification under KYC obligations. We do not collect information about racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gaming assessment.

h88 collects personal data through the following mechanisms:

• Direct submission: Data you provide when completing the h88 registration form, submitting KYC documentation, initiating deposits or withdrawals, or contacting customer support.
• Automated technical collection: Data collected automatically when you visit h88.bar, including IP address, device fingerprint, browser session information, and cookie data generated during platform navigation.
• Payment providers: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard, and other payment processors when you make deposits or request withdrawals.
• Identity verification services: Confirmation data received from third-party KYC verification providers used to validate the authenticity of CNIC/NICOP documents submitted during account verification.
• Game providers: Aggregated session and RNG result data received from h88's licensed game studio partners (e.g., Pragmatic Play, PG Soft, Evolution) for audit, dispute resolution, and responsible gaming monitoring purposes.
• Fraud and risk monitoring systems: Behavioural and technical signals generated by h88's automated fraud detection and anti-money laundering screening tools during the course of platform use.

h88 processes personal data for the following specific and legitimate purposes:

• Account creation and management: To register your h88 account, verify your identity, maintain your profile, and manage your account settings and preferences.
• Age verification and eligibility: To confirm that you meet the minimum age requirement of 21 years before accessing any real-money gaming services on h88.
• Payment processing: To process PKR deposits via JazzCash, EasyPaisa, and bank transfer, and to fulfil withdrawal requests to your verified payment method.
• Regulatory compliance: To meet h88's obligations under its international gaming licence, including anti-money laundering (AML) due diligence, know-your-customer (KYC) requirements, and responsible gaming monitoring.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain records of support interactions.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and other prohibited conduct.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the performance, functionality, and design of h88.bar.
• Marketing communications: To send you promotional offers, bonus notifications, and cricket/PSL betting updates — but only where you have provided explicit consent and only until that consent is withdrawn.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-imposed limits, and apply mandatory intervention protocols where required by h88's responsible gaming policy or licensing obligations.

h88 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to fulfil the Terms and Conditions you agreed to upon registration — including account management, payment processing, and gaming service delivery.
• Legal obligation: Processing required to comply with h88's regulatory and licensing obligations, including KYC verification, AML screening, and age verification mandates.
• Legitimate interests: Processing conducted for h88's legitimate business interests, including fraud prevention, platform security, and service quality analysis — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, specifically for marketing communications and non-essential cookie use. You may withdraw consent at any time without affecting the lawfulness of prior processing.

h88 does not sell, rent, or trade your personal data to third parties for commercial purposes. h88 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and cryptocurrency gateways — to process your financial transactions.
• KYC and identity verification providers: Third-party services used to verify the authenticity of identity documents submitted during account verification. These providers are contractually bound to use your data solely for verification purposes.
• Game technology providers: Licensed game studios including Pragmatic Play, PG Soft, Jili, and Evolution Gaming — who receive session and result data necessary to operate certified games on the h88 platform.
• Regulatory and licensing authorities: h88's licensing regulator may require access to certain member data as part of ongoing compliance monitoring, audit, or investigation procedures.
• Law enforcement and government bodies: h88 will disclose personal data to law enforcement or regulatory authorities where legally required to do so, including in response to court orders or anti-money laundering reporting obligations.
• Fraud prevention networks: h88 participates in industry-standard fraud prevention networks and may share risk-related data with other licensed operators in accordance with applicable data sharing agreements and legal frameworks.

All third-party processors engaged by h88 are required to enter into data processing agreements that impose obligations consistent with h88's own data protection standards. h88 does not transfer personal data to countries with inadequate data protection standards without implementing appropriate safeguards.

h88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or licensing obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your membership plus a minimum of five (5) years following account closure, in accordance with AML and gaming licence record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with financial regulatory obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, as required under h88's licensing framework.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to evidence the basis on which marketing was sent.
• Support communications: Retained for three (3) years from the date of the interaction, or longer where the communication relates to an open dispute or investigation.
• Technical and log data: Retained for up to twelve (12) months for security analysis and platform performance monitoring purposes.

Following the expiry of the applicable retention period, h88 will securely delete or anonymise your personal data in accordance with its internal data disposal procedures.

h88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and h88 servers.
• Encrypted storage for sensitive personal data fields, including financial information and identity document copies.
• Role-based access controls that restrict access to member personal data to authorised h88 personnel on a need-to-know basis.
• Multi-factor authentication requirements for h88 staff accessing internal systems containing member data.
• Regular independent security assessments, penetration testing, and vulnerability scanning of h88 platform infrastructure.
• Automated intrusion detection systems and real-time security event monitoring.
• Segregated database architecture that separates member personal data from operational systems.

h88.bar uses cookies and similar technologies (including local storage and session tokens) to support platform functionality and improve your experience. The following categories of cookies are used:

• Essential cookies: Required for the platform to function correctly. These include session management cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, preferred game categories, and responsible gaming tool configurations.
• Analytics cookies: Used to collect aggregated, anonymised data about how members interact with h88.bar, which pages are visited most frequently, and where technical errors occur. This data helps h88 improve platform performance.
• Security and fraud prevention cookies: Used by h88's automated risk monitoring systems to detect suspicious account activity, unusual login patterns, and potential bot behaviour.

h88 does not use third-party advertising or retargeting cookies. You can manage your browser's cookie settings at any time. Disabling essential cookies may prevent you from accessing certain h88 platform features. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Subject to applicable law and h88's regulatory obligations, you have the following rights in relation to the personal data h88 holds about you:

• Right of access: You may request a copy of all personal data h88 holds about you. h88 will respond to access requests within 30 days of receipt.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. Certain data (e.g., your legal name and CNIC number) can only be corrected through the KYC verification process.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to h88's legal data retention obligations — data required for regulatory compliance, AML records, or dispute resolution may be retained despite an erasure request.
• Right to restrict processing: You may request that h88 temporarily restrict processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to h88, to facilitate transfer to another service provider where technically feasible.
• Right to object: You may object to processing based on legitimate interests, and you may withdraw consent for marketing at any time through your account settings or by contacting support.

To exercise any of the above rights, submit a written request to h88 at [email protected]. h88 may require identity verification before processing a data rights request to ensure requests are made by the legitimate account holder.

h88 is strictly an adults-only platform. h88 services are not directed at, intended for, or available to individuals under the age of 21 years. h88 does not knowingly collect personal data from minors.

If h88 discovers or has reason to believe that a Member is under the age of 21, the account will be immediately suspended pending age verification. If the Member cannot provide satisfactory proof of age, the account will be permanently closed, all associated gaming activity will be voided, and any deposits will be returned to the originating payment method.

If you are a parent or guardian who believes your child may have created an h88 account or provided personal data to h88, please contact h88 support immediately at [email protected]. h88 will investigate and respond promptly.

The h88 platform integrates with a number of third-party services to deliver its gaming and payment capabilities. These include licensed game studios, payment gateway providers, KYC verification services, and customer support tooling. Each of these providers operates under its own privacy policy and data protection obligations.

h88 requires all third-party processors to enter into data processing agreements that are consistent with h88's own data protection standards and applicable regulatory requirements. h88 conducts due diligence on third-party providers before engagement and monitors ongoing compliance.

h88.bar does not contain links to external websites. The platform is a self-contained environment. If any third-party content appears within a game interface (which is operated by the game studio under its own licence), h88 is not responsible for the data practices of that game studio beyond the terms of its contractual relationship with h88.

h88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. When material changes are made, h88 will:

• Update the "Effective Date" displayed at the top of this page.
• Display a notice on the h88 platform informing logged-in members of the update.
• Where required by applicable law or the significance of the change warrants it, provide direct notification to Members via email or in-platform message.

Your continued use of h88 following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using h88 and may request account closure in accordance with the procedure described in our Terms and Conditions.

h88 recommends that Members review this Privacy Policy periodically to stay informed about how their personal data is being handled. The current version of this Policy is always accessible at https://h88.bar/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or h88's data processing practices, please contact h88 using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week from the h88.bar website for immediate assistance.
• Data Rights Requests: Submit formal data access, rectification, or erasure requests by email to [email protected] with the subject line "Data Rights Request".
• Response Time: h88 targets an initial response to all privacy enquiries within 2 hours for live chat and within 24 hours for email. Formal data rights requests receive acknowledgment within 5 business days.

h88 takes all privacy enquiries seriously and commits to investigating and responding to all concerns in good faith. If you are not satisfied with h88's response to a privacy complaint, you may escalate the matter to h88's licensing authority or the relevant data protection supervisory authority in your jurisdiction.