ch88 Privacy Policy

1. Who We Are

ch88 ("ch88", "we", "us", "our") is the operator of the online gaming platform accessible at https://ch88.one and all associated sub-domains, mobile interfaces, and digital services (collectively, the "Platform"). ch88 serves players across Pakistan, including major cities such as Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and Multan.

ch88 acts as the data controller in respect of all personal data collected from users of the Platform. This means ch88 determines the purposes and means by which your personal data is processed. Where ch88 engages third-party service providers to process data on our behalf, those providers act as data processors under ch88's instruction and are bound by contractual data protection obligations.

2. Data We Collect

ch88 collects personal data through several means: directly from you when you register or interact with the Platform, automatically through technical systems as you use the Platform, and in some cases from trusted third parties such as payment processors and identity verification services.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and time zone.
• Usage Data: Pages visited, games played, betting history, session duration, click paths, and feature interactions.
• Location Data: Approximate geographic location derived from your IP address, used to enforce geographic access restrictions.
• Cookie Data: Data collected via cookies and similar tracking technologies as described in Section 5 below.

2.3 Data From Third Parties

• Payment Processors: Transaction confirmation data and fraud risk signals from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• KYC / Identity Verification Providers: Identity verification outcomes and watchlist screening results from our accredited verification partners.
• Anti-Fraud Services: Device fingerprint risk scores and anomaly signals from our security infrastructure providers.

3. How We Use Your Data

ch88 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.

• Account Management: Creating, maintaining, and securing your ch88 account; processing login requests; enabling account recovery.
• Identity Verification (KYC): Verifying your identity and age (21+) to comply with applicable gaming and anti-money laundering regulations.
• Payment Processing: Processing deposits and withdrawals through your selected local payment method; reconciling transactions; detecting and preventing payment fraud.
• Platform Operation: Delivering sports betting, live casino, slots, crash games, and all other gaming services on the ch88 Platform.
• Customer Support: Responding to your queries, complaints, and responsible gaming requests via live chat and email.
• Responsible Gaming: Monitoring for signs of problem gambling; enforcing deposit limits, session limits, cooling-off periods, and self-exclusion requests you have placed.
• Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws; responding to lawful requests from competent authorities.
• Security & Fraud Prevention: Detecting, investigating, and preventing unauthorised access, cheating, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
• Platform Improvement: Analysing aggregated usage data to improve site performance, game selection, and user experience — always in anonymised or pseudonymised form where possible.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have given your consent or where we have a legitimate interest, subject always to your right to opt out at any time.

4. Legal Basis for Processing

ch88 processes your personal data only where a valid legal basis exists. The following table maps our key processing activities to their corresponding legal bases:

5. Cookies & Tracking Technologies

ch88 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to operate and improve the Platform. These technologies help us remember your preferences, keep your session secure, understand how users navigate the site, and deliver relevant content.

Types of Cookies Used by ch88:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your language preference, account settings, and responsible gaming limit configurations between sessions.
• Analytics Cookies: Used in anonymised or pseudonymised form to understand aggregate user behaviour, page performance, and game engagement. ch88 uses only first-party analytics infrastructure — we do not embed third-party analytics scripts that harvest user data for external platforms.
• Security Cookies: Used by our fraud and bot detection systems to distinguish legitimate users from automated traffic and to flag suspicious login attempts.

ch88 does not use cookies for cross-site tracking, behavioural advertising profiling, or to share your browsing data with third-party advertising networks.

6. Sharing Your Data

ch88 treats your personal data with strict confidentiality. We do not sell, rent, or trade your personal information to any third party for their own commercial purposes. Data is shared only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Pakistani banking regulations.
• Identity Verification Providers: Our accredited KYC partners receive the identity documents and data you submit during verification, solely for the purpose of confirming your identity and age (21+).
• Fraud & Security Providers: Our security infrastructure providers receive technical signals (IP, device data, behavioural patterns) to detect and prevent fraud. All such providers are contractually bound to use this data only for the specified security purpose.
• Legal Authorities: ch88 will disclose personal data to law enforcement, regulators, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. ch88 will notify affected users where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of ch88's business, user data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. International Data Transfers

ch88's primary user base is located in Pakistan, and we prioritise keeping data processing infrastructure as close to the region as possible. However, some of the third-party service providers ch88 engages — including cloud infrastructure, KYC verification, and security services — may process data in jurisdictions outside Pakistan.

Whenever personal data is transferred internationally, ch88 ensures that appropriate safeguards are in place to maintain an equivalent level of data protection. These safeguards include:

• Contractual data protection clauses in all agreements with third-party processors that impose binding obligations equivalent to international data protection standards.
• Encryption of all data in transit and at rest, regardless of the jurisdiction in which it is stored or processed.
• Regular security assessments and vendor due diligence reviews to confirm that our processors maintain adequate technical and organisational security measures.

By creating and using a ch88 account, you acknowledge that your data may be transferred to and processed in jurisdictions outside your country of residence, subject to the safeguards described in this section.

8. Data Retention

ch88 does not retain personal data for longer than is necessary for the purposes for which it was collected or as required by applicable law. The following retention periods apply as a general guide:

At the end of the applicable retention period, data is securely deleted, destroyed, or permanently anonymised so that it can no longer be attributed to any individual user.

9. Your Rights Over Your Data

ch88 respects your rights as a data subject. Depending on applicable law and the circumstances of your request, you have the following rights in relation to your personal data held by ch88:

10. Children & Minors

The ch88 Platform is strictly intended for adults aged 21 years and older. ch88 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

ch88 employs the following age verification measures to prevent minors from accessing the Platform:

• Date of birth is collected at registration and cross-referenced against KYC documentation submitted during identity verification.
• Accounts where age verification cannot be satisfactorily completed are suspended and no withdrawals are permitted until verification is resolved.
• ch88 reserves the right to request additional documentary proof of age from any user at any time, without prior notice.

If ch88 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, ch88 will immediately suspend the relevant account, void all associated bets and balances, and delete the personal data collected, subject to any applicable legal retention obligations.

11. Security Measures

ch88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• TLS Encryption: All data transmitted between your device and ch88 servers is encrypted using TLS 1.2 or higher. The ch88 Platform uses HTTPS throughout — no plain HTTP connections are accepted.
• Encryption at Rest: Sensitive personal data — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 standard encryption.
• Access Controls: Access to systems holding personal data is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for administrative access, and full audit logging of all data access events.
• Password Security: User passwords are never stored in plain text. ch88 uses industry-standard one-way hashing with salt to protect authentication credentials.
• Penetration Testing: ch88 conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ch88 maintains a documented data breach incident response plan. In the event of a breach that poses a risk to user rights and freedoms, ch88 will notify affected users and relevant authorities within the timeframes required by applicable law.

Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your own ch88 login credentials confidential. If you suspect your account has been compromised, contact ch88 support immediately.

12. Third-Party Links

The ch88 Platform may contain links to third-party websites or services in limited contexts — for example, links to responsible gaming support organisations or payment provider information pages. These links are provided for informational purposes only.

ch88 has no control over the content, privacy practices, or data handling of any third-party website. This Privacy Policy applies exclusively to the ch88 Platform. ch88 strongly recommends that you review the privacy policy of any third-party site you visit before providing any personal data to that site.

13. Changes to This Policy

ch88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the ch88 Platform informing users of the change for a period of at least 14 days following the update.
• Where the changes materially affect how we process your data and where we rely on consent as the legal basis, we will seek your renewed consent before the new processing begins.

Your continued use of the ch88 Platform after any updated Privacy Policy has been posted and the notice period has elapsed constitutes your acknowledgement of the updated terms. If you do not agree with the updated Privacy Policy, you should discontinue use of the Platform and may request account closure by contacting ch88 support.

14. Contact & Data Protection

If you have any questions, concerns, or complaints about this Privacy Policy or about how ch88 handles your personal data, please contact the ch88 Data Protection team using the details below. We aim to respond to all privacy enquiries within 5 business days and to resolve substantive requests within 30 days.