eh88 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "eh88", "we", "us", or "our" refers to the eh88 online gaming platform and its operating entity, accessible at eh88.lat.
• "Platform" means the eh88 website, mobile-optimised interface, and all associated services and features accessible at eh88.lat.
• "Player", "you", or "your" refers to any individual who accesses, registers on, or uses the eh88 Platform in any capacity.
• "Personal Data" means any information that can be used to identify you directly or indirectly, including your name, CNIC number, date of birth, email address, mobile number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, and deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, eh88.
• "KYC" means Know Your Customer — the mandatory identity and age verification process applied to all Account registrations on eh88.
• "CNIC" means Computerised National Identity Card issued to Pakistani nationals by NADRA.
• "AML" means Anti-Money Laundering — the legal and regulatory framework that requires financial services and gaming operators to monitor and report suspicious financial activity.
• "Cookie" means a small text file placed on your device by the Platform to enable certain functionality and to collect usage information.

eh88 acts as the Data Controller in respect of all Personal Data collected from players using the eh88 Platform. As Data Controller, eh88 is responsible for determining the purposes for which your Personal Data is collected and the means by which it is processed.

eh88 is an internationally licensed online gaming platform. All data processing activities conducted by eh88 are carried out in accordance with the applicable data protection and privacy laws of our licensing jurisdiction, as well as best-practice international data protection standards including those set out by the General Data Protection Regulation (GDPR) framework, which eh88 voluntarily adopts as a benchmark for the protection of Pakistani player data.

Any questions, requests, or complaints relating to the processing of your Personal Data by eh88 may be directed to our Data Protection contact via email at [email protected] or via the 24/7 live chat facility available on the Platform. Please clearly mark any data protection correspondence with the subject line "Privacy / Data Request."

eh88 collects Personal Data from players through several channels. The categories of data we collect, and the circumstances in which we collect them, are described below:

3.1 Registration Data

When you create an Account on eh88, you provide us with the following information:

• Full legal name (as it appears on your CNIC);
• Date of birth;
• Residential address (city, province, postal code);
• Email address;
• Pakistani mobile phone number;
• Chosen username and password (passwords are stored as encrypted hashes — we never store plain-text passwords).

3.2 KYC & Identity Verification Data

As part of our mandatory KYC process, we collect:

• A copy or photograph of your CNIC (front and back);
• A recent utility bill or bank statement as proof of address (where required);
• A selfie or photograph for biometric comparison with your CNIC image (where applicable);
• Details of your source of funds or source of wealth (for high-volume accounts, as required by AML regulations).

3.3 Financial & Transaction Data

In connection with deposits and withdrawals, we collect:

• Payment method identifiers (e.g., JazzCash mobile number, EasyPaisa account number, bank account details for HBL, UBL, Meezan Bank, Raast, UBL Omni);
• Transaction amounts, dates, and reference numbers;
• Wallet balance and transaction history.

eh88 does not store full debit or credit card numbers. Payment processing for card-based transactions is handled by certified third-party payment processors who maintain their own PCI-DSS compliance.

3.4 Gameplay & Betting Data

We record information about your gaming activity on the Platform, including:

• Games played, wagers placed, and outcomes;
• Session durations and frequency of play;
• Bonus claims and wagering requirement progress;
• Responsible gaming settings you have applied (deposit limits, self-exclusion status, etc.).

3.5 Technical & Device Data

When you access the Platform, our systems automatically collect technical information including:

• Your IP address and approximate geographic location derived from it;
• Device type, operating system, and browser version;
• Session timestamps and page visit logs;
• Referring URL (the website from which you navigated to eh88, where applicable).

3.6 Communications Data

If you contact eh88 via live chat, email, or any other support channel, we retain records of those communications, including the content of messages and any attachments, in order to manage your query and maintain a record of our service interactions with you.

eh88 uses the Personal Data we collect for the following specific purposes:

eh88 does not use your Personal Data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or as otherwise required by law.

eh88 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and eh88 — i.e., to operate your Account, process transactions, deliver gaming services, and handle customer support. Without this processing, we cannot provide the Platform to you.
• Legal Obligation: eh88 is subject to legal and regulatory obligations including KYC, AML, and responsible gaming requirements. Processing your identity and transaction data is mandatory to remain compliant with these obligations.
• Legitimate Interests: We process certain data (such as technical and device data for fraud prevention, and gameplay data for responsible gaming monitoring) on the basis of our legitimate business interest in operating a secure, fair, and compliant gaming platform — provided such interests are not overridden by your rights and interests.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we do so on the basis of your consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

eh88 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential to the operation of the Platform. They enable core functions such as secure login sessions, session state management, and load balancing. You cannot opt out of these cookies as the Platform cannot function without them.
• Functional Cookies: These cookies remember your preferences (such as your language setting or responsible gaming tool configurations) to improve your experience on subsequent visits. They do not track you across other websites.
• Analytical Cookies: We use anonymised analytics data to understand how players navigate the Platform, which pages are most visited, and where users encounter difficulties. This helps us improve the Platform. Analytics data is aggregated and does not identify individual users.
• Security Cookies: These cookies assist our fraud detection systems in identifying unusual device or behaviour patterns that may indicate account compromise or abuse.

You may manage your cookie preferences through your browser settings. Disabling functional or analytical cookies may affect the quality of your experience on the Platform but will not prevent you from accessing core services. Disabling strictly necessary cookies will prevent you from logging in or using the Platform.

eh88 may share your Personal Data with the following categories of third parties in the circumstances described:

• Payment Processors: We share necessary financial and identity data with our payment service providers (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment networks) to process PKR deposits and withdrawals. These providers are contractually bound to process your data only for the purpose of completing the relevant payment transaction.
• KYC & Identity Verification Providers: We may use specialist third-party KYC technology providers to assist in verifying your identity and age. These providers process your CNIC data and biometric information solely for verification purposes under strict data processing agreements with eh88.
• Game Technology Providers: Where games are provided by third-party software studios (for example, live casino game providers), limited technical session data is shared with those providers to facilitate game delivery. These providers operate under contractual obligations consistent with this Privacy Policy.
• Fraud Prevention & AML Services: We may share transaction and identity data with specialist fraud prevention and AML screening services to detect and prevent financial crime. This sharing is required by our legal and regulatory obligations.
• Regulatory & Law Enforcement Authorities: eh88 will disclose Personal Data to government authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. We will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisers: We may share Personal Data with our legal, financial, or auditing advisers on a strictly confidential basis where necessary for the provision of their professional services to eh88.

All third parties with whom eh88 shares Personal Data are subject to contractual data protection obligations and are prohibited from using your data for any purpose other than those for which it was disclosed.

eh88 is an internationally operated platform and, in the course of providing services to Pakistani players, your Personal Data may be transferred to and processed in countries outside of Pakistan. This may occur, for example, where our servers, cloud infrastructure, or third-party service providers are located in jurisdictions other than Pakistan.

Where Personal Data is transferred internationally, eh88 ensures that adequate safeguards are in place to protect your data to a standard equivalent to the protections applicable in Pakistan. Such safeguards may include:

• Standard contractual data protection clauses incorporated into agreements with international service providers;
• Transfers to jurisdictions that have been recognised as providing an adequate level of data protection;
• Binding corporate rules where applicable within group entities.

By using the eh88 Platform, you acknowledge and consent to the international transfer of your Personal Data in accordance with the safeguards described in this section.

eh88 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention periods apply as a general guide:

At the end of the applicable retention period, Personal Data is securely deleted or anonymised. Where data is anonymised, it may be retained indefinitely for aggregate statistical and analytical purposes as it can no longer identify any individual.

Certain data may be retained for longer periods where we are required to do so by a court order, regulatory direction, or ongoing legal proceedings.

As a player on the eh88 Platform, you hold the following rights in relation to your Personal Data. You may exercise any of these rights at any time by contacting our support team via live chat or email at [email protected].

eh88 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension within the initial 30-day period. We will not charge a fee for processing data rights requests except in cases of manifestly unfounded or excessive repetition, in which case a reasonable administrative fee may apply.

Certain rights are subject to exceptions. For example, we cannot delete data that we are legally required to retain for AML or regulatory compliance purposes. Where an exception applies, we will explain the reason for it clearly in our response to your request.

eh88 employs multiple layers of age verification, including CNIC-based KYC, to enforce the 21+ age requirement. Parents and guardians who believe a minor may have accessed or registered on the eh88 Platform should contact us immediately at [email protected] so that we can take immediate action.

Our responsible gaming tools and age verification procedures are described in detail on the eh88 Responsible Gaming page. We take the protection of minors from the potential harms of gambling extremely seriously and invest significantly in enforcement systems to uphold this commitment.

eh88 implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your device and the eh88 Platform is encrypted using TLS 1.3 (Transport Layer Security). Personal Data stored on our servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised eh88 personnel on a strict need-to-know basis. All access is logged and subject to regular audit. Multi-factor authentication is required for all administrative access.
• Secure Infrastructure: eh88 servers are hosted in Tier 3+ certified data centres with 24/7 physical security, redundant power and cooling, and intrusion detection systems.
• Vulnerability Management: We conduct regular penetration testing and vulnerability assessments on the Platform and apply security patches promptly.
• Data Segregation: Personal Data is segregated from game and operational data and stored in separate secure environments with independent access controls.
• Employee Training: All eh88 staff undergo mandatory data protection and information security training and are bound by strict confidentiality obligations.

Despite these measures, no method of transmission over the internet or method of electronic storage is 100% secure. Whilst we implement industry best-practice security controls, we cannot guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, we will notify you and the relevant regulatory authorities as required by applicable law.

eh88 may send you marketing communications regarding promotions, bonuses, new game releases, and other offers that we believe may be of interest to Pakistani players. We will only send marketing communications to players who have provided consent to receive them.

How to Opt Out:

• Click the "Unsubscribe" link at the bottom of any marketing email;
• Log into your Account and adjust your communication preferences in Account Settings;
• Contact our support team via live chat and request to opt out of marketing;
• Reply to any marketing SMS with the word "STOP".

Your opt-out request will be processed within 48 hours. Please note that opting out of marketing communications will not affect essential service messages such as transaction confirmations, Account security alerts, responsible gaming notifications, or updates to these Terms or Privacy Policy.

We do not share your contact information with any third party for their own marketing purposes. All marketing communications sent by eh88 relate exclusively to the eh88 Platform and its services.

The eh88 Platform may contain links to third-party websites, including payment provider portals and social media platforms. This Privacy Policy applies exclusively to Personal Data collected by eh88 through the eh88 Platform. We are not responsible for the privacy practices of any third-party website.

When you follow a link to a third-party website, you are subject to that website's own privacy policy. We encourage you to review the privacy policy of any third-party website before providing them with any Personal Data.

The inclusion of a link to a third-party website does not imply endorsement by eh88 of that website, its content, or its privacy practices.

eh88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or service offerings. Material changes to this Privacy Policy will be communicated to registered players via email or a prominent notification displayed upon login to your Account.

The effective date of the current version of this Privacy Policy is stated at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed of any updates.

Your continued use of the eh88 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Privacy Policy, you should cease using the Platform and close your Account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your Personal Data by eh88, or if you wish to exercise any of your data rights, please contact us through one of the following channels:

• Email: [email protected] — Mark the subject line as "Privacy Query" or "Data Request" for priority handling.
• Live Chat: Available 24/7 via the live chat widget on the eh88 website. Select "Privacy / Data Protection" as your query category.

We aim to respond to all privacy and data protection queries within 5 business days. For formal data rights requests under Section 10 of this Privacy Policy, we will respond within 30 calendar days as required by applicable data protection law.

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction in which eh88 is licensed. We will provide contact details for the relevant authority upon request.