Privacy Policy

1. Introduction

bh888 (the "Operator", "we", "us" or "our") operates the online sports betting and casino platform accessible at bh888.cam (the "Platform"). This Privacy Policy (the "Policy") describes how bh888 collects, processes, stores and protects the personal data of individuals who access or use the Platform, register an Account, or otherwise interact with the Operator's services (collectively, "Users", "you" or "your").

This Policy applies to all personal data processed by bh888 in connection with the Platform, regardless of the device or location from which you access it. It is incorporated by reference into the bh888 Terms & Conditions and should be read alongside that document.

bh888 is designed as an English-language platform for users who choose to access it. All data-related communications, notices and responses to data subject requests are issued in English.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, email addresses, identification documents, IP addresses and financial transaction records.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, the Operator.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a contractual data-processing agreement.
• "KYC Data" means identity and age verification documents and associated information submitted by Users as part of the Know Your Customer process.
• "Account" means a registered user account on the bh888 Platform.
• "Cookie" means a small text file placed on a User's device by the Platform for purposes including session management, preference storage and analytics.

3. Data Controller

The Data Controller for Personal Data processed in connection with the bh888 Platform is the Operator entity holding the Platform's operating licence. Details of the applicable licensing entity and jurisdiction are available on request from the support team at [email protected].

If you have any questions about this Policy or wish to exercise your data subject rights, please contact the Data Controller using the contact details set out in Section 15 of this Policy.

4. Data We Collect

bh888 collects Personal Data in the following categories, depending on the nature of your interaction with the Platform:

4.1 Registration & Account Data

When you create an Account, we collect: full name, date of birth, email address, username, password (stored in hashed form), country of residence, and any optional profile information you choose to provide.

4.2 KYC & Identity Verification Data

As part of the identity verification process, we may collect: copies of government-issued identification (such as a CNIC, passport or driving licence), proof of address documentation, selfies or liveness-verification images, and source-of-funds documentation where required for enhanced due diligence.

4.3 Financial & Transaction Data

We collect records of deposits, withdrawals, wagers, winnings, bonus activity and payment method details (such as account numbers or wallet identifiers used to deposit). We do not store full credit or debit card numbers on the Platform.

4.4 Usage & Technical Data

We automatically collect technical data when you access the Platform: IP address, device identifiers, browser type and version, operating system, session timestamps, pages visited, features used, betting and gaming activity logs, and error reports.

4.5 Communication Data

We retain records of communications between you and the bh888 support team, including live chat transcripts, email correspondence and support ticket histories.

4.6 Responsible Gambling Data

Where you voluntarily set deposit limits, request a cooling-off period, activate a self-exclusion or interact with responsible gambling tools, we retain records of those settings and requests to enforce them correctly and consistently across the Platform.

5. How We Use Your Data

Personal Data collected by bh888 is used for the following purposes:

6. Legal Basis for Processing

bh888 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to provide the Services pursuant to the Terms & Conditions you have agreed to, including account management, transaction processing and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements and responsible gambling regulations.
• Legitimate interests: Processing that is necessary for the Operator's legitimate business interests, including fraud prevention, security monitoring, platform improvement and internal analytics, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by applicable law and not covered by another legal basis — for example, for certain marketing communications or non-essential cookies — we will seek your consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing & Third-Party Transfers

7.1 Service Providers

bh888 may share Personal Data with third-party service providers that assist in the operation of the Platform, including: payment processing providers, identity verification and KYC service providers, fraud detection and risk management providers, cloud infrastructure and data hosting providers, customer support platform providers, and analytics service providers. Such providers are bound by contractual data-processing agreements that restrict their use of data to the purposes specified by bh888.

7.2 Legal & Regulatory Disclosure

bh888 may disclose Personal Data to regulatory authorities, law enforcement bodies, licensing authorities or other competent bodies where required to do so by applicable law, court order, or where necessary to prevent fraud, money laundering or other illegal activity.

7.3 Payment Method References

bh888 references familiar Pakistan payment channels — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — in its general support and cashier documentation for user context only. These references do not indicate data-sharing arrangements with those organisations, endorsement of online gambling by those organisations, or any formal integration with their platforms. Users should consult the live cashier for current payment method availability.

7.4 International Transfers

Personal Data may be transferred to and stored in countries outside your country of residence, including countries that may have different data protection standards. Where such transfers occur, bh888 implements appropriate safeguards — such as contractual standard clauses or equivalent transfer mechanisms — to protect the data in accordance with applicable data protection standards.

7.5 No Sale of Personal Data

bh888 does not sell, rent or otherwise commercialise your Personal Data to third parties for their own marketing, profiling or commercial purposes.

8. Cookies & Tracking Technologies

The bh888 Platform uses cookies and similar technologies (collectively, "Cookies") to support the operation of the Platform and improve the user experience. The categories of Cookies used are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences, such as language settings, display options and remembered login state (where you have opted in). These improve your experience but are not essential to core functionality.
• Analytical Cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform — for example, pages visited, session duration and error frequencies. This data is used to improve the Platform's performance and content.
• Security & Fraud Prevention Cookies: Support device fingerprinting and anomaly detection to protect against fraudulent account activity and suspicious login attempts.

You can manage most Cookies through your browser settings. Please note that disabling certain Cookies may affect Platform functionality, including the ability to log in or complete transactions. For details on how to manage Cookies in your specific browser, refer to your browser's help documentation.

9. Data Retention

Personal Data is retained for as long as necessary to fulfil the purposes described in this Policy, or for as long as required by applicable legal, regulatory, anti-money laundering or responsible gambling obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account relationship and for a period thereafter as required by applicable law.
• KYC & Verification Documents: Retained for the minimum period required by the Operator's anti-money laundering obligations under its licensing jurisdiction, typically five years from the end of the business relationship.
• Financial Transaction Records: Retained for the period required by applicable financial record-keeping regulations.
• Support Communications: Retained for a period sufficient to address any follow-up enquiries, disputes or regulatory requests.
• Responsible Gambling Records: Self-exclusion and limit records are retained for the duration required to enforce them and, thereafter, for such period as may be required by applicable regulation.
• Anonymised Analytics Data: May be retained indefinitely in aggregated, anonymised form.

Data that is no longer required is securely deleted or irreversibly anonymised. Where deletion is requested by a User but legal obligations require continued retention, the data will be restricted from active processing until it can be deleted.

10. Your Rights

Depending on the data protection laws applicable to you, you may have the following rights in respect of your Personal Data. To exercise any of these rights, contact bh888 support at [email protected] with a clear description of your request. We may need to verify your identity before processing a request.

We will respond to verified data subject requests within the timeframe required by applicable law. Where a request cannot be fulfilled in full — for example, due to a conflicting legal obligation — we will explain the reason. You also have the right to lodge a complaint with a competent supervisory authority if you believe your data has been processed unlawfully.

11. Security Measures

bh888 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, disclosure, alteration or destruction. These include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and the Platform;
• Encryption or hashing of sensitive data fields (such as passwords) at rest;
• Access controls ensuring that employee access to Personal Data is restricted to those with a legitimate operational need;
• Regular review of security practices, including monitoring for unauthorised access attempts;
• Contractual security requirements imposed on all third-party data processors.

While bh888 takes data security seriously, no internet-based platform can guarantee absolute security. Users are responsible for maintaining the security of their own devices, account credentials and network connections. If you believe your Account has been compromised, contact support immediately.

12. Minors

The bh888 Platform is strictly intended for adults aged 18 years and above, or such higher minimum age as is required by the Operator's license jurisdiction. bh888 does not knowingly collect Personal Data from individuals under the applicable minimum age. Age verification is an integral part of the KYC process, and Accounts where underage use is detected are immediately suspended.

If you become aware that a minor has registered an Account or provided Personal Data to bh888, please contact support immediately at [email protected]. Upon receiving credible notification, bh888 will take steps to delete the relevant data and close the Account.

Being of legal adult age does not by itself make gambling lawful in Pakistan. Users must independently confirm their participation is permissible under applicable local law.

13. Third-Party Links & Services

The bh888 Platform does not contain links to external third-party websites. Game content displayed through the Platform may be provided by independent game studios operating under the Operator's licensing framework; such studios are subject to contractual data-processing obligations.

Payment method references (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are provided for general user orientation only and do not constitute hyperlinks, integrations or commercial relationships. Users who access external services independently do so under those services' own privacy policies, for which bh888 accepts no responsibility.

14. Changes to This Privacy Policy

bh888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change to the categories of data collected or a new category of third-party sharing — we will provide reasonable advance notice, for instance by email to your registered address or via a notice on the Platform.

The "Last Updated" date shown at the top of this page indicates when the most recent revision was made. We recommend reviewing this Policy periodically. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you may request account closure in accordance with the Terms & Conditions.

15. Contact Us

For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a data-related concern, please contact the bh888 Data Controller using the details below. We aim to respond to all verified requests within the timeframe required by applicable law.