hh88 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

This Privacy Policy applies to all personal data collected, stored, and processed by hh88 in connection with the operation of the hh88 online casino and sports betting platform accessible at hh88.fyi. It applies to all registered account holders and visitors to the platform, including players based in Karachi, Lahore, Islamabad, Rawalpindi, and all other cities and regions across Pakistan.

hh88 is committed to protecting your personal data and handling it responsibly, transparently, and in accordance with applicable data protection standards. This policy is written in plain English so that every player can understand exactly how their information is handled — not buried in legal language designed to be read by lawyers rather than people.

By using the hh88 platform or registering an account, you acknowledge that you have read this Privacy Policy and that you understand how your personal data will be processed. This policy is incorporated into the hh88 Terms & Conditions and should be read alongside them.

2 Personal Data We Collect

hh88 collects personal data only when it is necessary for the purposes described in this policy. The categories of data we collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your Pakistani CNIC or other accepted government-issued identification.
• Date of birth (used for age verification — hh88 is strictly 18+ only).
• Email address used for account registration and communications.
• Pakistan mobile phone number registered to your account.
• Residential address (required for identity verification and anti-money laundering compliance).

2.2 Account & Usage Data

• Username and encrypted password credentials.
• Account registration date and history of login activity including timestamps and device information.
• Complete betting and gaming history including game titles, wager amounts in PKR, outcomes, and session durations.
• Bonus and promotional redemption history.
• Customer support interactions including live chat transcripts and email correspondence.

2.3 Financial Data

• Deposit and withdrawal transaction records including PKR amounts, dates, and payment method identifiers.
• Payment method details — such as Easypaisa or JazzCash mobile wallet identifiers or bank account references. Note: hh88 does not store full payment card numbers; card processing is handled by PCI-DSS compliant third-party processors.
• PKR account balance history and running transaction ledger.

2.4 Technical & Device Data

• IP address and approximate geographic location at the time of login and activity.
• Device type, operating system, browser type and version.
• Session duration, page views, and navigation patterns within the hh88 platform.
• Cookie identifiers and similar tracking technologies (see Section 7).

3 How We Collect Your Data

hh88 collects personal data through the following methods:

• Direct submission: Data you provide when registering an account, updating your profile, completing identity verification, contacting support, or participating in a promotion.
• Automated technical collection: Data collected automatically when you access the platform, including IP addresses, device identifiers, and session behaviour, via server logs, cookies, and similar technologies.
• Payment processors: Transaction confirmation data shared with hh88 by Easypaisa, JazzCash, HBL, and other payment partners when you complete a deposit or withdrawal.
• Identity verification providers: Confirmation data shared with hh88 by third-party KYC (Know Your Customer) service providers when you complete an identity verification check.
• Fraud prevention services: Risk signals and device fingerprint data provided by fraud detection partners to help identify and prevent unauthorised account access.

4 Purposes and Legal Basis for Processing

The table below sets out the purposes for which hh88 processes your personal data and the legal basis relied upon for each purpose.

5 Data Sharing and Third Parties

hh88 does not sell or rent your personal data to third parties for their own marketing purposes. Data is shared only in the following circumstances and only to the extent necessary:

• Payment processors: Easypaisa, JazzCash, HBL, and other payment partners receive only the transaction data required to process your deposit or withdrawal. They operate under their own privacy policies and data security standards.
• Identity verification providers: Third-party KYC service providers receive the identity documents and personal data necessary to complete verification checks. These providers are contractually bound to handle your data securely and to use it only for verification purposes.
• Fraud prevention and security: Anti-fraud partners may receive technical and behavioural data to identify suspicious activity and protect your account.
• Legal and regulatory bodies: hh88 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts where legally obligated to do so. hh88 will take reasonable steps to notify you of such disclosures unless legally prohibited from doing so.
• Corporate transactions: In the event of a merger, acquisition, or sale of hh88 assets, personal data held on registered players may be transferred to the acquiring entity, subject to equivalent privacy protections being in place.

6 Payment Data and Financial Security

hh88 treats financial data with an especially high level of care given the sensitivity of PKR transaction records and payment method identifiers. Key aspects of how payment data is handled:

• All deposit and withdrawal transactions are processed over encrypted connections. Payment data is never transmitted in plain text.
• hh88 stores payment method identifiers (such as Easypaisa or JazzCash wallet numbers and bank account references) to facilitate future transactions and to enforce the policy that withdrawals must be made to the same method used for deposits.
• Full payment card numbers, if applicable, are processed exclusively by PCI-DSS level 1 compliant payment processors. hh88 servers do not store full card numbers at any point in the transaction flow.
• Transaction records are retained in accordance with our data retention schedule (see Section 8) and applicable financial regulations.

7 Cookies and Tracking Technologies

hh88 uses cookies and similar tracking technologies on the platform. Cookies are small data files stored on your device that help us operate and improve the platform experience. The types of cookies used by hh88 include:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in to your hh88 account during a session. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming limits you have set.
• Analytics cookies: Collect anonymised information about how players navigate the platform. This data is used in aggregate form to improve the hh88 user experience. No personally identifiable information is included in analytics reports.
• Security cookies: Assist in identifying and preventing fraudulent access attempts and unusual login behaviour.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using hh88 but may affect certain personalisation features. Most Android browsers and Safari on iOS provide cookie management options in their settings menus.

8 Data Retention

hh88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The general retention principles applied are:

• Active account data is retained for the duration of your account's active status plus a defined post-closure period as required by applicable regulations.
• Financial transaction records, including PKR deposit and withdrawal history, are retained for a minimum of five years following the transaction date in compliance with anti-money laundering regulations.
• Identity verification documents are retained for the period required by applicable KYC and AML regulations following account closure.
• Customer support communication records are retained for a period of two years from the date of the last interaction unless a longer retention period is required for dispute resolution purposes.
• Anonymised and aggregated analytics data, which cannot be used to identify any individual, may be retained indefinitely for platform improvement purposes.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual account holder.

9 Data Security Measures

hh88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and hh88 servers.
• Encrypted storage of passwords using modern one-way hashing algorithms — hh88 staff cannot view your password in plain text.
• Role-based access controls ensuring that only authorised personnel with a genuine business need can access personal data.
• Regular security audits and penetration testing of the hh88 platform infrastructure.
• Two-factor authentication (2FA) available to all account holders to protect against unauthorised login.
• Automatic session timeout after periods of inactivity to reduce the risk of unauthorised access on shared or unattended devices.
• Login location and device anomaly detection that flags and notifies players of unusual access attempts.

10 Children and Minors

hh88 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If hh88 becomes aware that personal data has been collected from a minor, the relevant account will be suspended immediately, the data will be securely deleted, and any funds deposited will be returned in accordance with our underage account policy.

Parents and guardians in Pakistan are encouraged to use device parental control features to prevent minors from accessing gambling platforms, including hh88. If you believe a minor may have registered an hh88 account, please contact our support team immediately via live chat so that the matter can be investigated and resolved promptly.

11 Exercising Your Data Rights

To exercise any of the data rights described in the "Your Rights" section above — including access, rectification, erasure, portability, restriction, or objection — you may submit a request through any of the following channels:

• Via the 24/7 live chat function within your hh88 account dashboard.
• By emailing [email protected] from your registered email address with the subject line "Data Rights Request."

hh88 will acknowledge your request within 48 hours and aims to resolve it within 30 days. Where requests are complex or numerous, this period may be extended by a further 60 days, in which case hh88 will notify you of the extension and the reason for it within the initial 30-day period.

To protect your account security, hh88 may request verification of your identity before processing data rights requests. This is to ensure that we do not disclose or delete personal data in response to requests from unauthorised parties.

12 Marketing Communications

hh88 may send you promotional communications about bonuses, new games, seasonal promotions, and platform updates where you have provided consent to receive such communications at the time of registration or subsequently through your account communication preferences.

You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings, or by contacting the support team. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

Even if you opt out of marketing communications, hh88 will continue to send you essential transactional communications related to your account — such as deposit confirmations, withdrawal notifications, security alerts, and responsible gaming reminders. These cannot be opted out of while your account remains active, as they are necessary for the secure operation of your account.

13 Changes to This Privacy Policy

hh88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, hh88 will notify registered players via email to the registered address and/or by displaying a prominent notice within the hh88 platform prior to the changes taking effect.

The effective date at the top of this policy will be updated whenever the policy is revised. We encourage you to review this page periodically to stay informed about how hh88 handles your personal data. Continued use of the platform following notification of a policy update constitutes your acceptance of the revised policy.

14 Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how hh88 handles your personal data, please get in touch through any of the following channels:

• Live Chat: Available 24/7 within your hh88 account dashboard. Our English-speaking support team is trained to handle privacy-related queries and will escalate to our data team where necessary.
• Email: [email protected] — please use the subject line "Privacy Query" to ensure your message is directed to the correct team. Always email from your registered hh88 email address.

hh88 is committed to resolving privacy concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the appropriate data protection authority in your jurisdiction.