dh888 Privacy Policy — How We Handle Your Personal Data

For the purposes of this Privacy Policy, "dh888," "we," "us," or "the Company" refers to the entity operating the dh888 online gaming platform accessible at dh888.today, together with all associated sub-domains, mobile-optimised interfaces, and platform services.

dh888 acts as the data controller in respect of the personal information collected from players and visitors to the Platform. As data controller, dh888 determines the purposes and means of processing personal data and is responsible for ensuring that all processing activities comply with applicable data protection legislation and the data protection obligations imposed by dh888's international gaming licence.

If you have any questions about this Privacy Policy or about how dh888 handles your personal data, please contact our dedicated privacy team at [email protected]. Please mark your email subject line "Privacy Request — [Your Account Username]" for priority routing.

dh888 collects personal data through the following channels: account registration forms, identity verification submissions, payment transactions, gameplay activity, customer support interactions, and automatic technical data collection during Platform use.

Registration and Identity Data:

• Full legal name as it appears on your CNIC;
• Date of birth (for age verification — players must be 21 or older);
• Pakistani CNIC number and a copy of your CNIC document;
• Residential address (city, postal code — for example, Karachi, Lahore, Faisalabad, or Islamabad);
• Email address and mobile phone number.

Financial and Transaction Data:

• JazzCash account number or EasyPaisa wallet number associated with deposits or withdrawals;
• Bank account details (IBAN, account title) for HBL, UBL, or Meezan Bank transfers;
• Partial card numbers and card expiry dates for Visa or Mastercard transactions (full card numbers are never stored by dh888);
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used;
• PKR amounts staked and returned across all game verticals.

Gameplay and Platform Activity Data:

• Game sessions, bet history, and game outcomes across casino, sports betting, Teen Patti, Dice, and slot verticals;
• Responsible gaming settings applied to your account (deposit limits, session limits, self-exclusion status);
• Bonus and promotional activity, including offers claimed and wagering progress.

Technical and Device Data:

• IP address and approximate geolocation (city-level);
• Device type, operating system, and browser type;
• Session timestamps, login history, and Platform navigation patterns;
• Cookie identifiers and similar tracking technologies (see Section 6 for full details).

Communications Data:

• Records of your correspondence with dh888 customer support, including live chat transcripts and email exchanges;
• Feedback, complaints, and dispute records.

dh888 uses the personal data it collects for the following specific purposes:

dh888 processes personal data only where a valid legal basis exists for that processing. The primary legal bases on which dh888 relies are:

• Contractual Necessity: Processing is necessary for the performance of the contract between dh888 and the player — specifically, the Terms and Conditions accepted at registration. This covers account creation, transaction processing, gameplay delivery, and customer support;
• Legal Obligation: dh888 is required by its gaming licence conditions and applicable law to carry out identity verification (KYC), anti-money laundering (AML) screening, and responsible gaming monitoring. These obligations require personal data processing regardless of consent;
• Legitimate Interests: dh888 processes certain technical and gameplay data to protect the Platform from fraud, ensure game integrity, and improve services. dh888 has assessed that these interests do not override the rights of players;
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your explicit, freely given, and withdrawable consent. You may withdraw consent at any time without affecting your account status or Platform access.

dh888 may share your personal data with the following categories of third parties:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard — to process deposits and withdrawals in PKR. These providers operate under their own data protection obligations;
• Identity Verification Providers: Third-party KYC and AML service providers who assist dh888 in verifying player identities, screening against sanctions lists, and detecting fraudulent documentation;
• Game Content Providers: Software providers who supply casino games, live dealer services, and sports data feeds may receive session-level gameplay data strictly for the purpose of game operation and integrity verification;
• Regulatory Authorities: dh888's gaming licence conditions require that player data be available for inspection by the relevant regulatory authority on request. dh888 will comply with lawful requests from competent authorities;
• Legal and Law Enforcement: Where dh888 is compelled by a valid court order, subpoena, or other lawful legal process to disclose player data, it will do so having taken appropriate legal advice and, where permitted, having notified the relevant player;
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of dh888's business, player data may be transferred as part of that transaction. Players will be notified of any change in data controller status prior to such a transfer taking effect.

All third parties with whom dh888 shares personal data are required, by contract, to process that data in accordance with applicable data protection standards and solely for the purposes specified.

dh888 uses cookies and similar tracking technologies on its Platform to ensure proper functionality, maintain session security, and understand how players interact with different sections of the site.

Types of cookies used by dh888:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in securely and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality;
• Functional Cookies: Remember your account preferences, including language settings, responsible gaming limit displays, and game lobby view preferences. These improve your experience but are not essential;
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how players navigate the Platform — which sections are most visited, where players encounter friction, and how Platform performance can be improved. This data is aggregated and not linked to individual player identities for reporting purposes;
• Marketing Cookies: Only deployed with your explicit prior consent. These help dh888 understand the effectiveness of its communications. You may withdraw consent for marketing cookies at any time.

dh888 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Specific measures in place include:

• TLS Encryption in Transit: All data transmitted between your device and dh888's servers is encrypted using current-standard TLS protocols. Unencrypted HTTP connections are not accepted;
• Encryption at Rest: Sensitive personal data — including identity documents, CNIC data, and payment method details — is encrypted in storage using AES-256 encryption;
• Access Controls: Access to player personal data within dh888 is restricted to authorised personnel whose job function requires it. Access logs are maintained and audited regularly;
• Two-Factor Authentication: dh888 supports and recommends two-factor authentication (2FA) for player accounts to prevent unauthorised account access even in the event of credential compromise;
• Regular Security Audits: dh888's platform infrastructure is subject to regular third-party security audits and penetration testing to identify and remediate vulnerabilities;
• Data Breach Response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, dh888 will notify affected players and the relevant regulatory authority within the timeframes required by applicable law.

While dh888 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is entirely risk-free. Players are encouraged to use strong, unique passwords and to enable 2FA on their dh888 accounts.

dh888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active Account Data: Retained for the duration of the account relationship and for a minimum period thereafter as required by gaming licence conditions;
• Identity Verification (KYC) Documents: Retained for a minimum of five (5) years from the date of account closure or the last transaction, as required by anti-money laundering regulations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping obligations under dh888's gaming licence;
• Customer Support Communications: Retained for up to three (3) years from the date of the communication unless a longer period is required for an ongoing dispute or regulatory matter;
• Marketing Consent Records: Retained for as long as the consent remains active and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with dh888's data disposal procedures.

Subject to applicable law and dh888's regulatory obligations, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data dh888 holds about you, together with information about how it is being processed;
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. You may also update many account details directly through your dh888 account settings;
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations where dh888 is required to retain data for legal or regulatory compliance purposes;
• Right to Restriction of Processing: You may request that dh888 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested;
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that dh888 provide your personal data in a structured, machine-readable format;
• Right to Object: You may object to processing carried out on the basis of dh888's legitimate interests. You may also object at any time to processing for direct marketing purposes, with immediate effect;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

If dh888 discovers or is notified that personal data has been collected from a person under the age of 21, it will immediately suspend the associated account, delete all personal data collected from that individual, and return any funds deposited to the payment method from which they originated, subject to verification.

Parents and guardians who believe that a minor has registered on dh888 or is accessing the Platform should contact dh888 immediately at [email protected]. dh888 will investigate all such reports with priority and take appropriate action within 24 hours of notification.

dh888 operates under an international gaming licence, and some processing activities — including certain cloud hosting, fraud detection, and game technology services — may involve the transfer of personal data to servers or service providers located outside Pakistan.

Where personal data is transferred internationally, dh888 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under dh888's licensing jurisdiction. These safeguards may include:

• Standard contractual clauses approved by the relevant data protection authority and incorporated into agreements with all international data processors;
• Transfers only to jurisdictions assessed as providing an adequate level of data protection;
• Binding corporate rules where data is transferred within a corporate group.

Players wishing to obtain further information about the specific safeguards applied to international transfers of their personal data may contact dh888 at [email protected].

The dh888 Platform integrates third-party game content, payment processing, and technical services necessary for the delivery of gaming services. These third-party providers may process certain player data in connection with the specific services they provide.

dh888 takes reasonable steps to ensure that all third-party providers who handle player data are bound by appropriate data processing agreements and operate data protection standards consistent with this Privacy Policy. However, dh888's responsibility extends only to data processed in connection with the dh888 Platform itself.

dh888 does not include links to external third-party websites on the Platform. If you navigate to any site outside dh888.today, that site's own privacy policy will govern the handling of your data, and dh888 has no responsibility for those practices.

dh888 reviews and updates this Privacy Policy periodically to reflect changes in our processing activities, applicable law, or regulatory requirements. The "Last Updated" date at the top of this policy indicates when the most recent revision was made.

When material changes are made to this Privacy Policy, dh888 will provide registered players with reasonable advance notice by email or through a prominent notice on the Platform prior to the changes taking effect. For non-material changes — such as minor clarifications or formatting corrections — the updated policy will simply be published with a revised effective date.

Your continued use of the dh888 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you object to any changes, you should cease using the Platform and request account closure before the revised policy takes effect.

For any questions, requests, or concerns relating to this Privacy Policy or to the handling of your personal data by dh888, please contact us using the details below:

The email address above is provided as plain text only and is not a clickable link. Please copy it manually into your email client. dh888 will never ask you to provide account passwords or full payment card details in any communication.

If you are not satisfied with dh888's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority or the regulatory body that oversees dh888's gaming licence, as appropriate to the nature of your complaint.