bh888 Privacy Policy

bh888 ("we", "us", "our", or "the Operator") operates the online gaming platform accessible at bh888.today. For the purposes of this Privacy Policy, bh888 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

The bh888 platform is designed and operated specifically for Pakistani players across cities including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and beyond. All gaming services, PKR wallet transactions, and customer support functions are operated under the bh888 brand.

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data we hold about you, please contact our Data Protection team. Contact details are provided in Section 15 of this Policy.

bh888 collects the following categories of personal data from players. Data is collected at specific points in your relationship with bh888 as described in Section 3.

bh888 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the photograph taken during CNIC identity verification, which is used solely for identity matching purposes.

bh888 collects your personal data through the following channels and mechanisms:

• Direct Collection — Registration: When you create a bh888 account, you directly provide your name, date of birth, contact details, and preferred payment method information through the registration form.
• Direct Collection — KYC Submission: When you submit identity documents to complete the Know Your Customer verification process, you directly provide identity data including CNIC images and a selfie photograph.
• Direct Collection — Customer Support: When you contact bh888 Customer Support via live chat or email, any personal information you include in your communications is collected and retained as part of your support record.
• Automated Technical Collection: When you access and use the bh888 platform, technical data including IP address, device information, browser type, and session data is automatically collected by our servers and analytics infrastructure.
• Transaction Processing: When you make deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, transaction reference data and payment confirmation records are collected as part of the financial processing workflow.
• Cookies & Similar Technologies: bh888 uses cookies and similar tracking technologies on the platform to maintain session state, remember preferences, and analyse usage patterns. See Section 8 for full details of our cookie practices.

bh888 processes your personal data for the following clearly defined purposes. Each purpose is matched to an appropriate legal basis described in Section 5:

• Account Creation & Management: To create and maintain your bh888 player account, authenticate your identity at login, and manage your account preferences and settings.
• Identity Verification (KYC/AML): To verify your identity, confirm your age eligibility (21+), prevent fraud, and comply with applicable anti-money laundering and player protection obligations under international gaming license standards.
• Payment Processing: To process your PKR deposits via JazzCash, EasyPaisa, and bank transfers, and to process withdrawal requests back to your registered payment accounts following KYC approval.
• Provision of Gaming Services: To deliver the sportsbook, live casino, slot games, and other gaming services you access on the bh888 platform, including maintaining your game history and bonus balances.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling behaviour and to administer self-exclusion, deposit limits, and session timer tools that you activate on your account.
• Customer Support: To respond to your queries, complaints, and support requests efficiently and to maintain a record of your communication history for quality assurance purposes.
• Security & Fraud Prevention: To detect and prevent fraudulent account activity, unauthorised access, bonus abuse, multi-accounting, and other prohibited conduct described in the bh888 Terms and Conditions.
• Legal & Regulatory Compliance: To meet our obligations under the international gaming license standards under which bh888 operates, including record-keeping obligations and regulatory reporting requirements.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the bh888 platform, fix technical issues, and enhance the player experience.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and gaming updates via email or SMS where you have provided explicit consent to receive such communications. See Section 13 for opt-out procedures.

bh888 processes your personal data on the following legal bases in accordance with applicable data protection principles:

• Contractual Necessity: The processing of identity data, contact data, financial data, and usage data is necessary for the performance of the contract (your bh888 account agreement) between you and bh888. Without this processing, bh888 cannot operate your account or provide its services.
• Legal Obligation: The processing of identity data for KYC/AML purposes, the retention of financial transaction records, and the administration of self-exclusion requests are required by the legal and regulatory obligations applicable to bh888 as a licensed gaming operator.
• Legitimate Interests: The processing of technical data for fraud prevention, security monitoring, and platform improvement is conducted on the basis of bh888's legitimate interests in protecting its platform and players, provided such interests do not override your fundamental rights.
• Consent: The processing of your data for marketing communications — promotional emails, SMS bonus alerts, and personalised offers — is conducted on the basis of your freely given, specific, informed consent provided at the time of registration or through your account preferences. You may withdraw this consent at any time as described in Section 13.

bh888 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment Processors: Financial data is shared with payment service providers — including the operators of JazzCash, EasyPaisa, and participating banks — strictly to the extent necessary to process your deposit and withdrawal transactions. These providers are contractually bound to handle your data securely and in accordance with their own privacy obligations.
• Identity Verification Providers: CNIC documents and selfie photographs may be processed by third-party KYC verification service providers engaged by bh888 to assist with identity document authentication. These providers process data solely on bh888's instructions and under strict data processing agreements.
• Game Software Providers: When you play games from third-party game studios integrated into the bh888 platform, limited session data (player ID, bet amounts, game outcomes) is shared with the game provider to deliver the game. Game providers do not receive your full personal profile, contact details, or financial account information.
• IT & Infrastructure Providers: bh888 uses cloud hosting, database management, and cybersecurity service providers to operate the platform. These providers may have access to personal data in the course of providing technical services and are bound by contractual confidentiality and security obligations.
• Regulatory & Law Enforcement Authorities: bh888 may be required to disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies in response to lawful requests, court orders, or our regulatory reporting obligations. Such disclosures are made only to the extent legally required.

In all cases where data is shared with third parties, bh888 ensures that appropriate contractual safeguards are in place to protect your personal data.

As an internationally operating gaming platform serving Pakistani players, bh888 may transfer personal data to servers and service providers located outside Pakistan. Such transfers may occur when using cloud infrastructure providers, KYC verification services, or game software providers whose systems are hosted in other jurisdictions.

Where personal data is transferred internationally, bh888 ensures that adequate protections are in place, including:

• Contractual data processing agreements with international service providers that require them to maintain data protection standards equivalent to those described in this Privacy Policy.
• Use of recognised data transfer mechanisms where applicable, including standard contractual clauses or equivalent safeguards appropriate to the jurisdictions involved.
• Limitation of international transfers to the minimum scope necessary for the specific operational purpose, with access controls restricting which personnel of the receiving entity may access the transferred data.

By registering a bh888 account, you acknowledge that your personal data may be transferred and processed in jurisdictions outside Pakistan where data protection laws may differ from those in Pakistan. bh888 takes reasonable steps to ensure that any such international transfers are conducted with appropriate protections in place.

The bh888 platform uses cookies and similar technologies to deliver core platform functionality and to understand how players use our services. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent core platform functionality from operating correctly and may make it impossible to maintain a logged-in session on bh888.

bh888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal, regulatory, and operational requirements:

• Active Account Data: Identity, contact, and financial data associated with an active bh888 account is retained for the full duration of the account's active status and for a period of five years following permanent account closure, in compliance with anti-money laundering record-keeping requirements applicable to licensed gaming operators.
• Transaction Records: Records of all deposits, withdrawals, and gaming transactions are retained for a minimum of five years from the date of each transaction to satisfy financial regulatory obligations.
• KYC Documents: CNIC documents, selfie photographs, and associated verification records are retained for the duration of the account plus five years following account closure, in alignment with international AML/KYC compliance standards.
• Customer Support Records: Communications and support ticket records are retained for a period of three years from the date of the most recent interaction, to support dispute resolution and quality assurance processes.
• Technical and Usage Data: Aggregated or anonymised usage data may be retained beyond the above periods as it no longer constitutes personal data once sufficiently anonymised. Raw session and IP log data is typically retained for 12 months before deletion or anonymisation.
• Marketing Consent Records: Records of your marketing consent and any subsequent withdrawal of consent are retained for the duration of your account plus the five-year post-closure period to provide evidence of lawful processing.

Upon expiry of applicable retention periods, personal data is securely and permanently deleted or irreversibly anonymised using industry-standard data destruction procedures.

bh888 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the bh888 platform is encrypted using TLS (Transport Layer Security) protocol. bh888 enforces HTTPS across all platform pages without exception.
• Encryption at Rest: Personal data stored in bh888 databases — including identity documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within bh888's systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their specific role. Access permissions are reviewed regularly.
• Two-Factor Authentication: bh888 supports and encourages the use of two-factor authentication (2FA) for all player accounts to significantly reduce the risk of unauthorised account access.
• Intrusion Detection: Our infrastructure is monitored by automated intrusion detection systems that flag and respond to suspicious access patterns in real time, 24 hours a day.
• Staff Training: All bh888 staff members with access to personal data receive regular data protection and security training to ensure awareness of their obligations and best practices.
• Incident Response: bh888 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay in accordance with our notification obligations.

As a bh888 player and data subject, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting our Data Protection team as described in Section 15: