gh888 Privacy Policy

Overview & Scope

This Privacy Policy ("Policy") describes how gh888 ("gh888", "we", "us", "our") collects, processes, stores, and protects personal information relating to users ("you", "Player", "User") of the gh888 online gaming platform accessible at https://gh888.cam and any associated mobile interfaces or applications (collectively, the "Platform").

This Policy applies to all personal data collected from or about you in connection with your use of the gh888 Platform, including data collected during account registration, identity verification, deposits and withdrawals, gameplay activity, bonus participation, customer support interactions, and general browsing of the gh888 website.

By registering a gh888 account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the gh888 Platform.

This Policy should be read alongside gh888's Terms & Conditions and Responsible Gaming Policy, which together form the full agreement between you and gh888.

Personal Data We Collect

gh888 collects personal data from you through several channels. The categories of personal data we collect and the circumstances in which we collect them are set out below:

2.1 Registration Data

When you create a gh888 account, we collect: full legal name, date of birth, residential address (including city and province — relevant for players in Karachi, Lahore, Islamabad, Faisalabad, and other Pakistani cities), email address, mobile phone number, and account login credentials (username and hashed password).

2.2 Identity Verification (KYC) Data

As required by our licensing obligations and anti-money laundering (AML) compliance, gh888 may request: government-issued photo identification (CNIC, passport, or driving licence), proof of residential address (utility bill, bank statement), and in some cases a selfie photograph for facial verification purposes. This data is used exclusively for KYC compliance and is handled with the highest level of security.

2.3 Financial Transaction Data

When you deposit or withdraw funds via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard, gh888 collects transactional records including: payment method identifiers (masked card numbers, wallet IDs), transaction amounts in PKR, timestamps, and transaction reference numbers. gh888 does not store full card numbers — payment data is tokenised by our PCI-DSS compliant payment processors.

2.4 Gameplay & Activity Data

gh888 automatically records your activity on the Platform, including: games played, bets placed, outcomes, session durations, deposit and withdrawal history, bonus activations, and responsible gaming tool usage. This data is essential for dispute resolution, fraud prevention, and regulatory compliance.

2.5 Technical & Device Data

When you access the gh888 Platform, our systems automatically log: IP address, browser type and version, operating system, device type, screen resolution, referring URLs, and session timestamps. This data helps gh888 detect suspicious access patterns and maintain platform security.

2.6 Communications Data

If you contact gh888 via live chat or email, we retain records of those communications — including the content of messages, timestamps, and the resolution of any queries or complaints — for quality assurance, training, and dispute resolution purposes.

How We Use Your Personal Data

gh888 uses your personal data for the following specific purposes:

gh888 will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent or being required to do so by applicable law.

Legal Basis for Processing

gh888 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contract Performance: Processing is necessary to perform the contract between you and gh888 — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: gh888 is required to process certain personal data to comply with AML regulations, KYC requirements imposed by our international gaming licence, and applicable financial crime legislation.
• Legitimate Interest: gh888 has a legitimate interest in processing technical and activity data to detect fraud, ensure platform security, prevent money laundering, and improve the gh888 gaming experience — provided such processing does not override your fundamental privacy rights.
• Consent: Where gh888 sends you marketing communications or uses non-essential cookies, we do so on the basis of your freely given, specific, informed consent. You may withdraw this consent at any time without penalty by contacting gh888 support or updating your account communication preferences.

Data Sharing & Third Parties

gh888 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive only the financial transaction data strictly necessary to process your deposit or withdrawal. These processors operate under their own privacy policies and PCI-DSS compliance obligations.
• Identity Verification Providers: gh888 uses third-party KYC and AML screening providers to verify your identity documents and screen against regulatory watchlists. These providers process your KYC data under strict contractual data processing agreements with gh888.
• Game Suppliers: Game providers whose titles appear on the gh888 platform (including PG Soft, Evolution, and other licensed suppliers) may receive anonymised session and gameplay data for game performance and RTP auditing purposes. No personally identifiable data is shared with game suppliers.
• Regulatory Authorities: gh888 may be legally required to disclose personal data to licensing authorities, law enforcement agencies, or financial intelligence units in response to a lawful request. gh888 will, where legally permitted, notify you of any such disclosure.
• Professional Advisers: gh888's lawyers, auditors, and accountants may access personal data strictly as necessary in connection with the provision of their professional services, under binding confidentiality obligations.

All third parties with whom gh888 shares personal data are contractually required to process that data only for the specified purpose, to apply appropriate security measures, and to comply with applicable data protection law.

Cookies & Tracking Technologies

gh888 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you access the gh888 website. Cookies enable gh888 to recognise your browser, remember your session preferences, and analyse how the Platform is used.

Categories of cookies used by gh888:

• Strictly Necessary Cookies: These are essential for the gh888 Platform to function. They enable you to log in, maintain your session, and navigate the site securely. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your preferences — such as your preferred language or deposit method — so you do not need to re-enter them on every visit to gh888.
• Analytics Cookies: gh888 uses aggregated, anonymised analytics data to understand how players navigate the Platform and to identify areas for improvement. This data does not identify you personally.
• Security Cookies: These help gh888 detect and prevent fraudulent logins, bot activity, and other security threats.

You may control non-essential cookie preferences through your browser settings or through the gh888 cookie preference centre (accessible via the cookie notice banner on your first visit). Disabling strictly necessary cookies will impair your ability to use the gh888 Platform.

Data Retention

gh888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:

• Account & KYC Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by AML and gaming regulatory obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements.
• Gameplay Activity Logs: Retained for two (2) years from the date of the activity, unless required for an ongoing dispute or regulatory investigation.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, or longer if the communication relates to an unresolved complaint.
• Technical & Device Logs: Retained for twelve (12) months on a rolling basis, unless retained longer in connection with a security investigation.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent lifecycle.

When your personal data is no longer required for any lawful purpose, gh888 will securely delete or anonymise it in accordance with our internal data destruction procedures.

Data Security

gh888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Key security measures include:

• TLS 1.3 Encryption: All data transmitted between your device and the gh888 Platform is encrypted using TLS 1.3 — the current industry-standard transport layer security protocol.
• Data Encryption at Rest: Sensitive personal data fields — including KYC documents, financial data, and authentication credentials — are encrypted at rest using AES-256 encryption.
• Password Hashing: Your gh888 account password is never stored in plain text. It is hashed using a one-way cryptographic hash function (bcrypt) with a unique salt per user.
• Two-Factor Authentication (2FA): gh888 supports 2FA on all player accounts. We strongly encourage every gh888 player to enable 2FA for maximum account security.
• Access Controls: Access to personal data by gh888 staff is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Payment Tokenisation: Card and wallet payment data is handled by PCI-DSS certified payment processors. gh888 does not store raw card numbers on its own systems.
• Intrusion Detection: gh888 operates continuous network monitoring and intrusion detection systems to identify and respond to security threats in real time.

Your Data Rights

gh888 respects your rights over your own personal data. You may exercise any of the following rights at any time by contacting gh888 support via live chat:

• Right of Access: You have the right to request a copy of all personal data that gh888 holds about you. gh888 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data gh888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure ("Right to be Forgotten"): You may request that gh888 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to gh888's legal obligations to retain certain data (e.g., AML record-keeping requirements).
• Right to Restrict Processing: You may request that gh888 temporarily suspend its processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to gh888's processing of your personal data on the basis of legitimate interest, including for direct marketing purposes. Upon a valid objection to marketing, gh888 will immediately cease sending you marketing communications.
• Right to Withdraw Consent: Where gh888 processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

gh888 will not charge a fee for exercising any of the above rights and will respond within the timeframes required by applicable law. gh888 may ask you to verify your identity before processing a data rights request.

Minors & Age Verification Policy

If gh888 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, gh888 will:

• Immediately suspend the relevant account pending investigation.
• Delete all personal data associated with the underage individual as promptly as possible.
• Refund any real-money deposits made by the underage individual via the original payment method.
• Void all gameplay activity and bonus claims associated with the account.

If you believe that a minor has registered on the gh888 Platform, please contact gh888 support immediately via live chat so that we can investigate and take appropriate action.

International Data Transfers

gh888 operates under an international gaming licence and may process or store personal data on servers located outside Pakistan. Where personal data is transferred internationally, gh888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Safeguards used by gh888 for international transfers include: standard contractual clauses approved by recognised data protection authorities, transfer impact assessments where required, and contractual obligations on recipient parties to maintain equivalent data protection standards.

By using the gh888 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan. gh888 will always ensure that any such transfer is conducted with appropriate protections in place.

Changes to This Privacy Policy

gh888 reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made, gh888 will notify registered players via email or via a prominent notice on the gh888 Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how gh888 is protecting your personal data. Your continued use of the gh888 Platform following publication of any revised Privacy Policy constitutes your acceptance of the updated terms.

Contact & Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or gh888's handling of your personal data, please contact our Data Support team through the following channels: