wh888 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction & Data Controller

wh888 ("we," "us," "our") is the data controller responsible for the personal information of all users of the wh888 Platform. As the data controller, wh888 determines the purposes and means by which your personal data is collected and processed, and is accountable for ensuring that processing is conducted in accordance with applicable data protection laws and the terms of its international gaming licence.

wh888 is committed to handling your personal data with transparency, integrity, and in a manner proportionate to the legitimate purposes for which it is collected. We collect only the data we genuinely need to provide you with a high-quality, secure, and legally compliant online gaming experience — with PKR transactions, JazzCash and EasyPaisa integrations, live Andar Bahar tables, and PSL cricket sportsbook all requiring appropriate data processing to function properly.

This Privacy Policy should be read alongside the wh888 Terms & Conditions, which governs the overall legal relationship between you and wh888. Where there is any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

2. Personal Data We Collect

wh888 collects personal data from you through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party sources such as payment processors and identity verification services. The following table summarises the categories of data collected:

wh888 does not collect sensitive personal data categories — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — unless specifically required by applicable legal or regulatory obligations, in which case explicit consent will be sought prior to collection.

3. How wh888 Uses Your Personal Data

wh888 uses your personal data only for the specific purposes outlined below. We do not use your data in ways that are incompatible with the purposes for which it was collected without first obtaining your consent or establishing a separate legal basis for the new processing activity.

• Account Management: To create, operate, and maintain your wh888 Account, including processing your login, managing your Real Money Balance in PKR, and applying responsible gaming settings such as deposit limits and self-exclusion.
• Transaction Processing: To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and bank transfer, and to process withdrawal requests to verified Pakistani bank accounts and mobile wallets.
• Identity Verification (KYC): To verify your identity and age (21+) as required by our international gaming licence and Anti-Money Laundering (AML) obligations. KYC verification is mandatory before processing withdrawal requests above specified thresholds.
• Platform Operation: To provide access to wh888's full game library, including live Andar Bahar, Teen Patti, slots, fishing games, and the cricket and sports sportsbook. Game session data is processed to record outcomes, settle bets, and apply bonuses correctly.
• Fraud Prevention & Security: To monitor your account for suspicious activity, detect and prevent unauthorised access, identify potential instances of money laundering or bonus abuse, and protect the integrity of the wh888 Platform and its player community.
• Regulatory Compliance: To comply with the conditions of wh888's international gaming licence, including age verification, AML record-keeping, responsible gaming requirements, and responding to lawful requests from regulatory or law enforcement authorities.
• Customer Support: To respond to your support queries, process complaints, and communicate with you regarding your account, transactions, and platform access issues. Support interactions are logged and retained for quality assurance and dispute resolution purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, new game announcements, and PSL betting updates — but only where you have explicitly opted in to receive such communications. Marketing opt-outs are processed immediately.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve game performance, user experience, and Platform reliability. Individual-level data is not used for platform analytics without appropriate legal basis.

4. Legal Basis for Processing

wh888 processes your personal data under one or more of the following legal bases, each of which applies to the specific processing activities described in Section 3:

• Contractual Necessity: Processing your identity data, contact data, financial data, and authentication data is necessary to perform the contract between you and wh888 — namely, to operate your Account, process PKR transactions, and provide access to gaming services.
• Legal Obligation: Processing your KYC documents, identity data, and transaction history is required to comply with wh888's legal obligations under its international gaming licence, including AML regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing technical data, usage data, and fraud detection data is based on wh888's legitimate interest in maintaining a secure, fair, and operationally stable platform for all users — including protecting the interests of the broader wh888 player community from fraudulent and harmful conduct.
• Consent: Processing your contact data for the purpose of sending marketing communications — including bonus offers, game promotions, and PSL cricket betting updates — is based on your explicit consent. You may withdraw this consent at any time through your account settings or by contacting support at [email protected].

Where wh888 relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment confirming that our legitimate interests are not overridden by your privacy rights and freedoms in that specific context.

5. Data Sharing & Third-Party Disclosure

wh888 does not sell your personal data. However, we do share your personal data with carefully selected third-party service providers and, where legally required, with regulatory and law enforcement authorities. The following categories of recipients may receive your personal data:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other supported Pakistani payment providers receive the minimum data necessary to process deposit and withdrawal transactions on your behalf. These providers operate under their own privacy policies and are subject to applicable Pakistani financial regulations.
• Identity Verification Services: Third-party KYC and identity verification service providers receive your identity documents and identity data for the purpose of verifying your age (21+) and identity in compliance with wh888's licensing and AML obligations.
• Game Software Providers: wh888's game content is provided by licensed third-party game studios. These providers may receive anonymised or pseudonymised session data necessary to operate and settle game rounds. Game providers do not receive your identity or contact information.
• Cloud & Infrastructure Providers: wh888 uses reputable cloud infrastructure providers to host and operate the Platform. These providers act as data processors under contracts that include appropriate data protection terms and prohibit them from using your data for their own purposes.
• Regulatory Authorities: wh888 will disclose your personal data to the relevant gaming regulatory authority, financial intelligence unit, or law enforcement agency where required to do so by law, court order, or the conditions of its international gaming licence.
• Fraud Prevention Agencies: Where wh888 has reasonable grounds to suspect fraudulent activity, money laundering, or other illegal conduct, your data may be shared with relevant fraud prevention or AML compliance agencies.

All third-party service providers who process personal data on wh888's behalf are contractually required to maintain appropriate technical and organisational security measures and to process your data only in accordance with wh888's instructions and this Privacy Policy.

6. Payment Data & Financial Information

Given that wh888 processes all transactions in Pakistani Rupees (PKR) through local payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, the protection of your financial information is a particular priority. The following specific terms apply to payment data:

• No Full Credential Storage: wh888 does not store your full JazzCash PIN, EasyPaisa PIN, bank account password, or any other full payment credential on wh888 servers. Payment authentication is handled directly within the secure infrastructure of the relevant payment provider.
• Transaction Records: wh888 retains records of your deposit and withdrawal transactions — including amounts in PKR, timestamps, and payment method references — as required by our AML obligations and international gaming licence conditions. These records are retained for a minimum of five (5) years from the date of the transaction.
• Withdrawal Verification: Prior to processing withdrawals, wh888 verifies that the withdrawal method corresponds to a payment method used for deposits on the Account. This verification process involves cross-referencing payment references and may involve communication with the relevant payment provider.
• Suspicious Transaction Monitoring: wh888 employs automated systems to monitor financial transactions for patterns consistent with money laundering or other financial crimes. Where suspicious transactions are identified, wh888 is obligated to report these to the relevant regulatory or financial intelligence authority without notifying the Account holder.

7. Data Retention

wh888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the primary categories of personal data held by wh888:

• Account Data (active accounts): Retained for the duration of your wh888 Account and for a period of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC Documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later. This retention period is mandated by our international gaming licence conditions.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML regulations applicable under our international gaming licence.
• Customer Support Records: Retained for three (3) years from the date of the support interaction, for dispute resolution and quality assurance purposes.
• Marketing Preference Data: Retained until you withdraw consent or close your Account. Records of consent withdrawal are retained indefinitely to demonstrate compliance.
• Technical and Usage Data: Retained for up to twenty-four (24) months for Platform security and performance analysis purposes, after which it is anonymised or deleted.

Where the retention period for a specific category of data has expired and there is no legal requirement to retain it further, wh888 will securely delete or anonymise the data in a manner that prevents recovery or reconstruction.

8. Cookies & Tracking Technologies

wh888 uses cookies and similar tracking technologies on wh888.org to deliver a functional, personalised, and secure gaming experience. The following types of cookies are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent access to the wh888 Platform. Disabling other cookie categories will not affect your ability to play but may reduce the quality of your experience. wh888 does not use third-party advertising network cookies.

9. Data Security

wh888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Transport Security: All data transmitted between your device and wh888 servers is encrypted using TLS 1.2 or higher, with 256-bit AES encryption applied to sensitive data fields including passwords, payment references, and KYC documents.
• Password Hashing: wh888 never stores your password in plain text. Passwords are hashed using industry-standard cryptographic algorithms before storage, making them unreadable even to wh888 internal staff.
• Access Controls: Access to systems containing personal data is restricted to wh888 personnel with a legitimate operational need. Access rights are reviewed regularly and revoked immediately upon staff departure or role change.
• Two-Factor Authentication: wh888 offers two-factor authentication (2FA) for all registered Accounts. We strongly recommend enabling 2FA to protect your Account from unauthorised access.
• Intrusion Detection: wh888 operates real-time intrusion detection and prevention systems that monitor for unusual access patterns, automated scraping attempts, and other indicators of malicious activity.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, wh888 will notify affected users and the relevant supervisory authority within the timeframes required by applicable law.

While wh888 takes data security extremely seriously and implements robust measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You use the wh888 Platform and transmit data to us at your own risk. You are responsible for keeping your login credentials secure and for notifying wh888 immediately of any suspected unauthorised access to your Account.

10. Your Data Rights

As a wh888 Account holder, you have the following rights with respect to your personal data. These rights are subject to applicable legal exemptions, including our obligations under AML regulations and our international gaming licence:

To exercise any of the above rights, contact the wh888 data protection team at [email protected] with the subject line "Data Rights Request." wh888 will verify your identity before processing any data rights request. We will not charge a fee for reasonable requests and will respond within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days with prior notice.

11. Children's Privacy

The wh888 Platform is strictly for individuals aged 21 years and above. wh888 does not knowingly collect personal data from any person under the age of 21. If wh888 becomes aware that personal data has been submitted by a person under the age of 21, that data will be deleted immediately and the associated Account will be closed without delay.

Parents and guardians in Pakistan who believe that a minor in their household has registered on or accessed the wh888 Platform are encouraged to contact wh888 support immediately at [email protected] so that appropriate action can be taken without delay. wh888 takes underage gambling extremely seriously and operates robust age verification procedures — including CNIC-based identity checks — to prevent access by minors.

wh888 also recommends that parents and guardians make use of commercially available parental control software to restrict access to gambling websites on shared or family devices, particularly where minors have access to those devices.

12. International Data Transfers

wh888 operates under an international gaming licence and uses cloud infrastructure and service providers that may be located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan. Where such international transfers occur, wh888 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses that bind recipient organisations to data protection standards equivalent to those applied by wh888 under this Privacy Policy.
• Use of service providers that operate within jurisdictions recognised as providing adequate data protection standards under applicable international frameworks.
• Technical measures ensuring that data transferred internationally is encrypted in transit and at rest, with access restricted to authorised personnel only.

wh888 does not transfer your personal data to countries or organisations that do not offer adequate data protection without first implementing appropriate contractual and technical safeguards. If you have questions about the specific safeguards applied to international transfers of your data, contact wh888 at [email protected].

13. Third-Party Links

The wh888 Platform may contain references to third-party services, payment providers, or regulatory bodies. While wh888 endeavours to link only to reputable and trustworthy organisations, wh888 is not responsible for the privacy practices of any third-party website or service that is accessed via a link from wh888.org.

This Privacy Policy applies solely to data collected and processed by wh888 through the wh888 Platform. Once you navigate away from wh888.org to a third-party site or service — including the websites or apps of JazzCash, EasyPaisa, HBL, or any other payment provider — the privacy policy of that third party governs the processing of your personal data. wh888 strongly encourages you to review the privacy policies of any third-party services you use in connection with your wh888 Account.

14. Changes to This Privacy Policy

wh888 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the conditions of our international gaming licence. The most current version of this Privacy Policy will always be accessible at wh888.org/privacy-policy.

Where changes to this Privacy Policy are material — meaning they significantly affect how your personal data is collected, used, or shared — wh888 will notify registered Account holders via the email address associated with their Account prior to the changes taking effect. Non-material clarifications and formatting updates may be made without direct notification.

The date of the most recent revision is displayed at the top of this document. Your continued use of the wh888 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request Account closure by contacting wh888 support.

15. Contact & Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wh888 processes your personal data, please contact the wh888 data protection team using the details below. All privacy-related communications will be acknowledged within 48 hours and substantively responded to within 30 calendar days.

• Email: [email protected] — please use subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. (Plain text — not a clickable link.)
• Response Time: Data subject access requests and rights exercise requests are responded to within 30 calendar days. Urgent security or breach-related concerns are escalated immediately.
• Language: All privacy communications are handled in English. Support agents familiar with Pakistani-English context are available to assist users across Karachi, Lahore, Islamabad, Faisalabad, and all other regions of Pakistan.

If you are not satisfied with wh888's response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to you, or with the regulatory body overseeing wh888's international gaming licence.