dh888 Privacy Policy —
Your Data, Your Rights

1Introduction

This Privacy Policy ("Policy") is issued by dh888 ("dh888", "we", "us", "our"), the operator of the online entertainment platform accessible at https://dh888.cam. It describes the personal data we collect from users ("you", "Player", "User") of the platform, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you in connection with your personal data.

By registering an account on dh888, accessing our services, or continuing to use the platform after the effective date of this Policy (or any amendment to it), you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

dh888 takes its data protection obligations seriously. Our approach is grounded in the principles of data minimisation, purpose limitation, transparency, and security. We collect only what we need, use it only for stated purposes, and protect it throughout its lifecycle on our systems.

2Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, financial data, device identifiers and usage records.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data; dh888 acts as Data Controller in respect of Player data.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under contractual instructions.
• "KYC" — Know Your Customer verification; the process of confirming a Player's identity and age through document submission.
• "Cookies" — small text files placed on your device by our platform to facilitate session management, preferences and analytics.
• "Applicable Law" — all laws, regulations and binding guidance applicable to the processing of personal data under the operator's license jurisdiction.

3Data We Collect

dh888 collects personal data across several categories, depending on how you interact with the platform:

• Full legal name, date of birth, and gender;
• Email address, mobile number, and country of residence;
• Username and encrypted password hash;
• Preferred currency (e.g., PKR).

• CNIC, NICOP, passport number or other government-issued ID submitted during KYC;
• Proof-of-address documents (where required);
• Selfie or liveness-check image for identity confirmation.

• Deposit and withdrawal transaction records including amounts, timestamps and payment method identifiers;
• Account balance history;
• Bonus award and wagering records.

• Bet history, game participation records, session duration and win/loss data;
• Sports-betting selections and live-betting activity;
• Responsible gambling tool settings and usage.

• IP address, device type, browser type and operating system;
• Session timestamps, page-navigation logs and click-event data;
• Cookie identifiers and similar tracking technology outputs.

• Content of support queries submitted via live chat or email;
• Responses to promotional communications where opted in;
• Account notification acknowledgements.

4How We Collect Data

Personal data is collected through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team;
• Automatically — through cookies, server logs and analytics tools as you browse and interact with the platform;
• From third parties — including payment processors, KYC verification service providers, fraud-prevention agencies and, where applicable, data brokers used for AML screening;
• From your device — technical data collected passively via standard browser and app telemetry when you access the platform.

5Legal Basis for Processing

dh888 processes personal data under one or more of the following legal bases depending on the specific processing activity:

6How We Use Your Data

dh888 uses personal data for the following defined purposes:

• Account operation: Creating, maintaining and securing your player account, including authentication and session management;
• Service delivery: Processing bets, settling game outcomes, crediting winnings and managing bonus awards;
• Payment processing: Facilitating deposits and withdrawals through available payment methods, including PKR-denominated transactions via third-party processors;
• Compliance: Meeting KYC, AML and other regulatory obligations including record-keeping, suspicious-transaction reporting and age verification;
• Responsible gambling: Monitoring betting patterns for signs of problematic gambling behaviour, enforcing player-set limits, and actioning self-exclusion requests;
• Security and fraud prevention: Detecting and preventing account fraud, identity theft, payment fraud and platform abuse;
• Platform improvement: Analysing aggregated usage data to improve performance, interface design and product offering;
• Communications: Sending account notifications, security alerts and, where you have opted in, promotional communications about dh888 offers.

dh888 does not use personal data for automated decision-making that produces significant legal effects, except where required for AML screening or fraud-prevention purposes under applicable law.

7Data Sharing & Disclosure

dh888 does not sell, rent or trade personal data to third-party marketers. Personal data may be shared with the following categories of recipient only as necessary and under defined conditions:

Third-party processors engaged to deliver platform services, including KYC verification providers, payment processors, cloud hosting providers, anti-fraud services and customer support tools. These processors are contractually bound to process data only on dh888's instructions and to maintain appropriate security standards.

dh888 may disclose personal data to regulators, law enforcement agencies, tax authorities or courts where required to do so by Applicable Law, including in response to AML reporting obligations or court orders. Such disclosures will be limited to what is strictly required.

Transaction data (including name, amount, and account identifiers) is shared with payment processors to facilitate deposits and withdrawals. Payment providers referenced for context — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — process data according to their own privacy policies. Their mention here does not imply endorsement of gambling by any provider.

In the event of a merger, acquisition or sale of the platform's business assets, player data may be transferred as part of the transaction, subject to the acquiring entity providing equivalent privacy protections.

8International Data Transfers

dh888 may transfer personal data to processors or affiliated entities located outside your country of residence, including outside Pakistan. Where such transfers occur, dh888 implements appropriate safeguards — including contractual data-transfer agreements, encryption in transit, and access controls — to ensure that your personal data receives a level of protection consistent with Applicable Law.

By using the platform, you acknowledge and consent to international transfer of your personal data as described in this clause, to the extent necessary for the delivery of the services.

9Data Retention

dh888 retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, subject to the following retention principles:

• Active account data is retained for the duration of the player-operator relationship;
• KYC and identity documents are retained for a minimum of five (5) years following account closure, as required by AML regulations;
• Transaction records are retained for a minimum of five (5) years following the date of the transaction;
• Support communications are retained for up to three (3) years from the date of the last interaction;
• Analytics and technical logs are retained for up to twelve (12) months unless a longer period is required for security investigations;
• Marketing consent records are retained for the period of the consent and for a reasonable period thereafter as evidence of that consent.

Upon expiry of applicable retention periods, data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

10Cookies & Tracking Technologies

dh888 uses cookies and similar tracking technologies to operate the platform, maintain session state, remember user preferences, and gather analytics data. The following categories of cookies are used:

You may control optional cookies through your browser settings or through our cookie preference centre, where available. Disabling essential cookies will prevent access to core platform functionality. dh888 does not use third-party advertising cookies.

11KYC & Identity Documents

Identity documents submitted for KYC purposes — including CNIC, NICOP, passport copies, proof-of-address documents and selfie images — are treated as a special category of sensitive data and are subject to enhanced security controls:

• Documents are transmitted exclusively via dh888's secure HTTPS verification portal — never via unsecured email, SMS or social media;
• Access is restricted to trained compliance personnel with documented need-to-know authorisation;
• Documents are stored in encrypted repositories with audit logging of all access events;
• Players must never alter, obscure, crop or falsify submitted documents. Doing so constitutes fraud and may result in account closure and reporting to law enforcement;
• KYC data is retained in accordance with the retention schedule in Clause 9, subject to applicable AML regulatory requirements.

12Payment Data

Financial transaction data is processed by dh888 and its contracted payment processors solely for the purpose of facilitating deposits and withdrawals. Full payment instrument details (such as card numbers or full account numbers) are not stored on dh888's servers — they are handled directly by PCI-DSS compliant payment processors.

Transaction records — including deposit amounts, withdrawal requests, timestamps and method identifiers — are retained as described in Clause 9 for accounting, AML compliance and dispute-resolution purposes. Payment method names referenced in this Policy (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are cited for context only and do not imply any endorsement of gambling or data-processing partnership by those institutions.

13Children's Privacy

dh888 strictly prohibits use of the platform by persons under the age of 18 — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person under the applicable minimum age, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe a minor may have registered on the platform should contact our support team immediately via live chat or email. We treat all minor-protection concerns as an urgent priority.

14Security Measures

dh888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and our servers;
• Encryption at rest for sensitive data fields including identity documents and financial records;
• Role-based access controls limiting data access to personnel with a documented, job-relevant need;
• Regular security assessments, penetration testing and vulnerability scanning;
• Multi-factor authentication for administrative access to data systems;
• Audit logging of all access to sensitive personal data records;
• Incident response procedures for detecting, containing and reporting data breaches.

Despite these measures, no system is entirely immune to security incidents. In the event of a data breach affecting your personal data in a manner likely to result in risk to your rights, dh888 will notify affected players and relevant authorities in accordance with Applicable Law.

15User Rights

Subject to Applicable Law, you may have the following rights in relation to your personal data held by dh888:

• Right of Access: Request a copy of the personal data we hold about you, including the categories of data, purposes of processing, and recipients;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of personal data where no overriding legal obligation requires its retention. Note that AML and KYC retention obligations may prevent full deletion;
• Right to Restriction: Request that processing be limited in specific circumstances, such as where accuracy is disputed;
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format;
• Right to Object: Object to processing based on legitimate interests or direct marketing;
• Right to Withdraw Consent: Withdraw consent to any processing activity based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our support team as described in Clause 17. We will respond within 30 calendar days of receipt of a verified request. We may ask you to verify your identity before processing a rights request.

16Policy Amendments

dh888 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When a material change is made, we will update the "Last Updated" date at the top of this document and, where practicable, notify registered players via the email address on their account or via an in-platform notice.

Your continued use of the platform following the effective date of any update constitutes acceptance of the revised Policy. If you do not agree to the revised terms, you must discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.

17Contact Us

If you have questions, concerns or complaints regarding this Privacy Policy or our data-processing practices, or if you wish to exercise any of your data rights, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat widget on the platform — fastest response for urgent matters;
• Email: [email protected] — for written data rights requests and formal complaints;
• Help Center: Visit our FAQ page for answers to common privacy-related questions.

We aim to acknowledge all data-related queries within 5 business days and to resolve substantive requests within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline and reason for delay.