Privacy Policy

01 Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below unless the context clearly indicates otherwise:

• "eh88", "We", "Us", or "Our" refers to the company operating the eh88 Platform at eh88.im under its international gaming licence.
• "Platform" means the eh88 website accessible at eh88.im, including all game interfaces, account dashboards, mobile-optimised pages, and any associated digital services made available to users.
• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including but not limited to name, CNIC number, email address, mobile number, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, use, disclosure, or deletion.
• "User", "You", or "Member" refers to any individual who visits, registers on, or otherwise interacts with the eh88 Platform.
• "KYC" means Know Your Customer — the identity and document verification process required before certain Platform features, particularly withdrawals, become available.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation functions.

02 Who We Are

eh88 is an internationally licensed online gaming and sports betting platform serving players including a significant and growing community of users across Pakistan. The Platform offers sports betting markets — with particular depth in cricket including PSL, international test matches, and T20 tournaments — alongside live casino tables, slot games, and fish-shooting arcade games such as Ocean King Jackpot and Ocean Lord.

eh88 acts as the data controller in respect of the Personal Data collected through the Platform. This means we are responsible for determining the purposes and means by which your Personal Data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as data processors under our instruction and are bound by contractual data protection obligations.

03 Data We Collect

eh88 collects Personal Data across several categories, each collected for specific and legitimate purposes tied to the operation of an online gaming service. The categories of data we may collect include:

3.1 Registration & Identity Data

• Full legal name as it appears on official documents
• Date of birth (to verify the 21+ age requirement)
• Pakistani CNIC number
• Residential address (city and province — for example, Karachi, Lahore, Islamabad, Faisalabad, or Peshawar)
• Email address and mobile phone number
• Username and encrypted password hash

3.2 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet identifiers
• HBL, UBL, Meezan Bank, or other bank account details used for Raast or 1LINK transfers
• Deposit amounts, withdrawal requests, and transaction timestamps in PKR
• Betting history, game session records, and wagering activity logs

3.3 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Session duration, pages visited, and in-game interaction logs

3.4 KYC & Verification Documents

• Scanned copy or photograph of your valid CNIC (front and back)
• Proof of payment method (e.g., screenshot of JazzCash or EasyPaisa account in your name)
• Source-of-funds documentation where required by our compliance team

3.5 Communications Data

• Records of live chat conversations with support agents
• Email correspondence sent to or from eh88 support
• Responses to surveys, feedback forms, and promotional campaigns

04 How We Collect Your Data

eh88 collects Personal Data through the following means:

• Direct submission: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team.
• Automated technical collection: Data collected automatically when you visit or use the Platform, including IP addresses, cookie data, device identifiers, and usage analytics gathered through our Platform infrastructure.
• Payment processors: Transaction confirmation data passed back to eh88 by JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK when you initiate a deposit or withdrawal.
• KYC verification providers: Identity verification results and document authentication outcomes returned by third-party KYC service providers to whom you submit documents through the eh88 verification interface.
• Fraud and compliance systems: Device fingerprinting, behavioural analytics, and risk-scoring data generated by automated fraud prevention tools that monitor Platform activity for suspicious patterns.

05 How We Use Your Data

eh88 uses the Personal Data it collects for the following specific purposes:

06 Legal Basis for Processing

eh88 processes your Personal Data only where it has a legitimate legal basis to do so. The applicable legal bases are as follows:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration — for example, creating your account, processing bets, and handling withdrawals.
• Legal obligation: Processing required to comply with applicable laws and our international gaming licence conditions — for example, KYC verification, AML transaction monitoring, and regulatory reporting.
• Legitimate interests: Processing necessary for the legitimate interests of eh88 — for example, fraud prevention, platform security, responsible gaming monitoring, and analytics to improve service quality — where those interests are not overridden by your fundamental rights.
• Consent: Processing that relies on your explicit consent — primarily the sending of marketing and promotional communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Third Parties

eh88 does not sell your Personal Data. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle it securely and in accordance with applicable data protection standards:

• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive the transaction data necessary to process your deposits and withdrawals in PKR. Each of these providers operates under their own privacy and data security frameworks.
• KYC and identity verification providers: Specialised third-party verification services receive your CNIC and other identity documents for the sole purpose of authenticating your identity in compliance with our licensing obligations.
• Fraud prevention and risk management systems: Automated fraud-scoring platforms receive device and behavioural data to help us identify and block fraudulent or abusive activity on the Platform.
• IT and hosting infrastructure providers: Cloud hosting and database service providers who store Platform data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Regulatory and law enforcement authorities: Where we are required by law, court order, or our gaming licence conditions to disclose information to a competent authority, we will do so. We will notify you of such disclosure where legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of the business, your data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

08 Cookies & Tracking Technologies

eh88 uses cookies and similar tracking technologies to operate the Platform effectively and provide you with a personalised experience. The cookies we use fall into the following categories:

• Strictly necessary cookies: These are essential for the Platform to function. They manage your login session, maintain your account state across page loads, and prevent session hijacking. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymous, aggregated data about how users interact with the Platform — including pages visited, time spent on each page, and navigation paths — to help us improve the user experience for all members.
• Functional cookies: These remember your preferences such as language settings, display options, and game lobby filters so you do not need to reconfigure them on each visit.
• Responsible gaming cookies: These store session-time data locally to power the session reminder and cooling-off tools available through your account settings, helping us support responsible gambling.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. eh88 does not use third-party advertising cookies or cross-site tracking technologies.

09 Data Retention

eh88 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations under our international gaming licence. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with our gaming licence's record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later, in line with standard AML obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction for audit, dispute resolution, and AML compliance purposes.
• Customer support communications: Retained for 3 years from the date of the interaction, or longer if the communication relates to a pending dispute or regulatory enquiry.
• Analytics and technical logs: Retained in anonymised or aggregated form indefinitely for service improvement purposes. Raw IP-level logs are deleted within 12 months.
• Marketing consent records: Retained for 3 years from the date you last interacted with a marketing communication, or until you withdraw consent, whichever occurs first.

Once a retention period expires, Personal Data is securely deleted or permanently anonymised so that it can no longer be associated with any individual.

10 Data Security

eh88 implements a multi-layered security architecture to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and the eh88 Platform is encrypted using TLS 1.3 protocols. Data stored in our databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to Personal Data within eh88 is restricted on a strict need-to-know basis. Internal systems enforce role-based access controls, and all privileged access is logged and audited.
• Two-factor authentication: eh88 provides optional two-factor authentication (2FA) for all member accounts. We strongly recommend enabling 2FA to protect your account from unauthorised access.
• Penetration testing: The Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: eh88 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your Personal Data, you will be notified within a reasonable timeframe as required by our licensing obligations.

11 Your Rights Over Your Data

As a user of the eh88 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team in writing with your Account username and a clear description of your request:

• Right of access: You may request a copy of the Personal Data that eh88 holds about you, along with information about how and why it is being processed.
• Right to rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected or updated. For minor updates such as email address or phone number changes, you can make these directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that KYC and transaction records must be retained for regulatory compliance and cannot be deleted on request during the mandatory retention period.
• Right to restrict processing: You may request that we pause the processing of your data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to data portability: You may request that we provide your Personal Data in a structured, machine-readable format so that it can be transferred to another service provider where technically feasible.
• Right to withdraw consent: Where processing is based on your consent — primarily marketing communications — you may withdraw that consent at any time with immediate effect, without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on our legitimate interests where you feel that your rights and freedoms override those interests. eh88 will assess the objection and cease processing unless compelling legitimate grounds exist.

We will respond to all valid data rights requests within 30 days. Complex requests may require an extension of up to an additional 60 days, in which case we will notify you promptly.

12 Children & Minors

21+ The eh88 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been submitted by or on behalf of an individual under 21, we will immediately close the associated account, delete the data, and return any deposits to the original payment source where possible.

If you are a parent or guardian and believe that a minor in your care has registered on eh88, please contact our support team immediately via live chat or by emailing [email protected]. We take underage access extremely seriously and will act on all credible reports without delay.

13 International Data Transfers

eh88 is operated under an international gaming licence, and our infrastructure — including cloud hosting, KYC verification services, and fraud prevention systems — may involve the transfer and storage of your Personal Data in jurisdictions outside Pakistan. Where such transfers occur, eh88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our licensing obligations.

Safeguards for international transfers may include:

• Contractual data protection clauses incorporated into agreements with all third-party data processors located outside Pakistan.
• Transfer of data only to jurisdictions or organisations that maintain adequate data protection standards as assessed by our compliance team.
• Regular review of cross-border data transfer arrangements as part of our licensing compliance audit cycle.

14 Updates to This Policy

eh88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. When we make material changes to this Policy, we will:

• Display a prominent notice on the Platform for a minimum of 14 days following the update.
• Send an email notification to the registered email address of all active account holders where the changes are significant.
• Update the "Last Updated" date displayed at the top of this page.

Your continued use of the eh88 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and may request account closure by contacting our support team.

The current version of this Privacy Policy is always accessible at eh88.im/privacy-policy. We recommend bookmarking this page and reviewing it periodically.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way eh88 handles your Personal Data, please reach out through the following channels. We are committed to responding to all privacy-related enquiries promptly and transparently:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the eh88 Platform via the on-site chat widget — typically the fastest route to a response.

When submitting a privacy request by email, please include your Account username, the nature of your request, and any relevant dates or details. This allows our team to locate your records efficiently and respond within the applicable timeframe.