ph88 Privacy Policy — How We Protect Your Personal Information

1Scope and Data Controller

This Privacy Policy applies to all personal data collected, stored, processed, and used by ph88 in connection with the operation of the ph88 platform at ph88.lol and all associated services, products, and communications directed at registered and prospective users, including Pakistani players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and other cities throughout Pakistan.

ph88 is the data controller in respect of the personal information you provide to us. As data controller, ph88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with this Privacy Policy.

By registering an account on ph88.lol, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, you should not create an account or use the ph88 platform.

2Personal Data We Collect

ph88 collects personal data through several channels and across different stages of your relationship with the platform. The categories of data we collect are described below:

2.1 Registration Data

When you create a ph88 account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, email address, Pakistani mobile phone number (Jazz, Zong, Telenor, Ufone, or Warid), chosen username, and any security credentials (passwords are stored in hashed form and are never accessible to ph88 staff in plain text).

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and age verification requirements, ph88 may request documentary evidence of your identity. For Pakistani players, accepted documents include a valid Computerised National Identity Card (CNIC), passport, or National Identity Card for Overseas Pakistanis (NICOP). The information extracted from these documents — name, date of birth, CNIC number, and expiry date — is processed and stored securely as part of your verified account record.

2.3 Financial and Transaction Data

ph88 collects data related to your deposits and withdrawals, including the payment method used (Easypaisa, JazzCash, Raast, SadaPay, HBL, UBL, MCB, or USDT TRC20), transaction reference numbers, amounts in PKR, timestamps, and transaction status records. We do not store full payment account credentials — only the minimum identifiers required to process and record your transactions.

2.4 Gaming Activity Data

ph88 records your gaming activity on the platform, including game sessions, wager amounts in PKR, game outcomes, bonus activations, and betting history. This data is used to operate your account, calculate cashback and VIP rewards, detect patterns consistent with problem gambling, and resolve any disputes about game outcomes.

2.5 Technical and Device Data

When you access ph88, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, session duration, pages visited, and referring URL. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3How We Use Your Personal Data

ph88 uses the personal data we collect for the following specific purposes:

• Account operation: To create, manage, and maintain your ph88 account, including processing your login credentials and maintaining your PKR wallet balance.
• Transaction processing: To process deposits and withdrawals via Easypaisa, JazzCash, Raast, SadaPay, and bank transfer; to record all financial transactions; and to reconcile your PKR account balance.
• Identity verification: To verify that you meet the eligibility requirements to use ph88, including age verification (18+) and KYC checks required for withdrawal processing and AML compliance.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance through Live Chat, email, WhatsApp, and Telegram.
• Security and fraud prevention: To detect and prevent unauthorised account access, fraudulent transactions, money laundering, and other illegal activities on the platform.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling, apply self-imposed limits and exclusions, and fulfil responsible gaming obligations.
• Platform improvement: To analyse usage data in aggregate form to improve the ph88 platform, game selection, payment processing, and user experience.
• Marketing communications: To send you information about ph88 promotions, bonuses, and platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Legal compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities.

4Legal Basis for Processing

ph88 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the ph88 Terms & Conditions — including account management, transaction processing, and customer support — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable laws — including AML obligations, KYC requirements, tax reporting, and responses to lawful regulatory requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of ph88's legitimate interests, subject to those interests not being overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications and non-essential cookies is carried out on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

5Payment Data and Pakistani Mobile Wallets

Given that the majority of ph88's Pakistani player base uses Easypaisa, JazzCash, Raast, or SadaPay for their transactions, ph88 handles mobile wallet data with particular care. The following specific protections apply to payment data:

• ph88 does not store your full Easypaisa or JazzCash MPIN, account password, or any other authentication credential for your mobile wallet. Only the minimum information required to identify and reference a completed transaction is retained.
• Your Easypaisa or JazzCash mobile number is used exclusively for transaction processing, 2FA verification, and account recovery where applicable. It is not used for outbound marketing without your explicit consent.
• Raast payment references and bank transfer details are stored as transaction records for accounting and dispute resolution purposes only.
• USDT TRC20 wallet addresses are recorded as part of withdrawal transaction records. ph88 does not store private keys or have access to your external cryptocurrency wallet.

6Cookies and Tracking Technologies

ph88 uses cookies and similar tracking technologies on the ph88.lol platform. A cookie is a small text file placed on your device by a website to remember information about your visit. ph88 uses the following categories of cookies:

6.1 Essential Cookies

These cookies are necessary for the ph88 platform to function correctly. They maintain your login session, remember your account preferences, and enable secure PKR wallet access. Essential cookies cannot be disabled without significantly impairing your ability to use the platform.

6.2 Analytics Cookies

ph88 uses analytics tools to collect aggregate, anonymised data about how users interact with the platform — which game categories are most visited, where players navigate from, and how long sessions last. This data does not identify you personally and is used solely to improve the platform experience for Pakistani players.

6.3 Preference Cookies

These cookies remember your platform preferences — such as your preferred language (English), recently played games, and display settings — to provide a more personalised experience on return visits.

You can manage cookie preferences through your browser settings. However, disabling essential cookies may impair your ability to log in to your ph88 account and access your PKR wallet. ph88 does not use cookies to serve third-party advertising.

7Third-Party Data Sharing

ph88 does not sell, rent, or trade your personal data to third parties. We share personal data with the following categories of third parties only to the extent necessary to operate the platform and meet our legal obligations:

• Payment processors: Easypaisa (Telenor Microfinance Bank), JazzCash (Mobilink Microfinance Bank), banking partners, and USDT payment processors receive the minimum financial data necessary to execute your transactions.
• Identity verification providers: Third-party KYC service providers may process your CNIC or passport data for identity verification. These providers are contractually bound by strict data protection obligations.
• Game software providers: Game providers whose titles are hosted on ph88 may receive anonymised session data (bet amounts, game events) to enable game functionality. They do not receive your name, CNIC, mobile number, or payment details.
• Fraud and security services: ph88 uses third-party fraud detection and cybersecurity services that process IP addresses, device fingerprints, and behavioural patterns to identify suspicious activity.
• Legal and regulatory authorities: ph88 may be required to share personal data with law enforcement, regulatory bodies, or courts in response to a lawful order or to exercise or defend legal claims.

8Data Security Measures

ph88 implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, loss, alteration, or disclosure. Our security framework includes:

• Encryption in transit: All data transmitted between your device and ph88 is encrypted using 256-bit SSL/TLS. The padlock icon in your browser confirms an active encrypted connection before any data is transmitted.
• Encryption at rest: Sensitive personal data stored in ph88's databases — including KYC documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: ph88 staff access to personal data is governed by role-based access controls — staff members can only access the specific categories of data necessary for their job function. All data access is logged and auditable.
• Two-factor authentication: ph88 supports and encourages the use of SMS-based two-factor authentication for all Pakistani player accounts, providing an additional layer of protection against unauthorised account access.
• Penetration testing: ph88 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in its platform infrastructure.
• Breach response: In the event of a data breach that poses a risk to your rights and freedoms, ph88 will notify affected account holders promptly and take all reasonable steps to contain and remediate the breach.

9Your Privacy Rights

As a ph88 account holder, you have the following rights in respect of your personal data. To exercise any of these rights, contact ph88 at [email protected] with the subject line "Privacy Rights Request" and your account username. ph88 will acknowledge your request within 5 business days and fulfil it within 30 days.

• Right of access: You have the right to request a copy of the personal data ph88 holds about you. We will provide this in a structured, English-language format within 30 days of your request.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For certain data fields (such as your registered name or CNIC number), correction may require documentary evidence.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that certain data must be retained for legal compliance purposes (such as KYC and transaction records) even after account closure.
• Right to restriction of processing: You have the right to request that ph88 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing.
• Right to data portability: You have the right to receive your personal data in a machine-readable format to facilitate transfer to another service provider, where processing was based on your consent or on contractual necessity.
• Right to object to marketing: You have the right to object to ph88 using your data for direct marketing purposes at any time. You can opt out of marketing communications via your Account Settings or by contacting [email protected].

10Data Retention

ph88 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to legal retention obligations. The following retention periods apply:

• Active account data: Retained for the duration of your active account relationship with ph88 plus 5 years after account closure to comply with AML and financial record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from account closure, whichever is later, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: All PKR deposit, withdrawal, and wagering records are retained for 5 years from the transaction date for financial compliance and dispute resolution purposes.
• Gaming session data: Retained for 2 years from the session date for dispute resolution, responsible gaming monitoring, and platform analytics purposes.
• Support communications: Tickets, chat logs, and email correspondence are retained for 2 years from the date of last contact in the relevant case.
• Marketing consent records: Records of your consent to (or opt-out from) marketing communications are retained for as long as required to demonstrate compliance with applicable requirements.

Upon expiry of the applicable retention period, ph88 will securely delete or anonymise personal data so that it can no longer be attributed to you.

11Children's Privacy

ph88 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If ph88 becomes aware that a minor has created an account or provided personal data, we will immediately close the account, delete the associated personal data, and take appropriate steps consistent with our responsible gaming obligations.

If you are a parent or guardian and believe that your child has registered on ph88 or provided personal data to us, please contact ph88 immediately at [email protected]. We will investigate and take prompt action.

12Cross-Border Data Transfers

ph88 operates internationally and some of the data processing activities described in this Privacy Policy may involve transferring your personal data to servers or service providers located outside Pakistan. When such transfers occur, ph88 implements appropriate safeguards to ensure that your data receives a level of protection consistent with this Privacy Policy, including:

• Contractual data protection clauses with all third-party service providers handling transferred data, requiring them to maintain data protection standards consistent with this policy.
• Restriction of transfers to service providers operating in jurisdictions that ph88 has assessed as providing adequate data protection standards.
• Regular review of cross-border transfer arrangements to ensure continued adequacy of protections.

Where ph88's payment processing partners — including Easypaisa and JazzCash — are involved in transactions, those transfers are conducted within Pakistan and are subject to the data protection practices of those providers as licensed institutions regulated in Pakistan.

13Changes to This Privacy Policy

ph88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or platform developments. The following procedures apply to any amendments:

• Material changes — those that affect your rights or how your data is used — will be communicated to you via your registered email address at least 7 days before they take effect.
• Minor changes — such as clarifications, formatting updates, or corrections — will be reflected on this page with an updated "Last Updated" date without advance notice.
• The current version of this Privacy Policy is always accessible at ph88.lol/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent changes were made.
• Continued use of the ph88 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

14Contact and Privacy Complaints

For all privacy-related enquiries, data subject rights requests, or complaints about ph88's data practices, please contact our team using the details below:

• Email: [email protected] — use the subject line "Privacy Request" or "Privacy Complaint" to ensure prompt routing to the relevant team.
• Live Chat: Available 24/7 on the ph88 platform — for immediate privacy assistance, our support team can escalate data protection queries to the responsible team with same-day follow-up.
• Response commitment: ph88 will acknowledge all privacy enquiries within 5 business days and provide a substantive response within 30 days. For complex requests, we will notify you if an extension is required.