XH88 Privacy Policy – How We Protect Your Data

1. Introduction

XH88 ("we," "us," "the platform") takes your privacy seriously. This Privacy Policy outlines how we collect, process, store and protect personal information provided by players who register and use the XH88 platform at xh88.vin and through the XH88 mobile application.

We understand that players in Pakistan expect their personal and financial information to be handled with discretion and care. Whether you are depositing via JazzCash, checking your cricket betting history or managing your VIP account, every interaction involves data that we are committed to protecting.

This policy should be read alongside our Terms and Conditions and Responsible Gaming guidelines. Together, these documents explain the full framework of how XH88 operates and protects its players.

2. What We Collect

XH88 collects personal information in several ways: directly from you when you register or update your account, automatically as you use the platform, and in some cases from third-party payment processors that confirm your transaction details.

Information You Provide Directly

• Full name and date of birth
• CNIC number (for identity verification purposes)
• Contact details including mobile number and email address
• Residential address
• Payment method details (e.g. JazzCash wallet number, Easypaisa account, bank account details for withdrawals)
• Account credentials (username and encrypted password)
• Any correspondence you send to our support team

Information Collected Automatically

• Device information including device type, operating system and browser version
• IP address and approximate geographic location
• Pages visited, games played and features accessed on the platform
• Betting history, deposit and withdrawal records
• Session duration and login timestamps
• Cookie and tracking data (see Section 5)

3. How We Use Your Data

XH88 uses the data it collects for the following purposes. We do not use personal data for any purpose not listed here without first notifying you.

• Account management: To create, maintain and manage your XH88 player account, including processing deposits in PKR and handling withdrawal requests.
• Identity verification: To confirm that you meet our eligibility requirements, including age verification (18+) and confirming you are not on a self-exclusion list.
• Transaction processing: To process your deposits via JazzCash, Easypaisa, Raast, bank transfer, cards or other supported payment methods, and to process withdrawals back to your account.
• Platform security: To detect and prevent fraud, money laundering, multi-accounting and any other activities that violate our Terms and Conditions.
• Customer support: To respond to your queries, investigate disputes and handle complaints through our 24/7 support channels.
• Platform improvement: To understand how players use XH88, identify popular features (such as cricket betting and PSL markets) and improve the overall experience.
• Responsible gaming: To monitor gaming behaviour and reach out where patterns indicate a player may be at risk, as part of our responsible gaming commitments.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates – but only where you have not opted out of such communications.

We process your data on the basis of contractual necessity (to operate your account), legitimate interest (fraud prevention, security) and, where applicable, your consent (marketing communications). You may withdraw consent for marketing at any time via your account settings.

4. Payment Information

When you deposit or withdraw funds on XH88, your payment details are handled with particular care. All PKR transactions – whether processed through JazzCash, Easypaisa, Raast, bank transfer or card payments – pass through secure, encrypted payment gateways.

XH88 does not store complete card numbers, CVV codes or full mobile wallet credentials on our servers. Payment data is tokenised by our payment processors, meaning a secure reference code is stored in place of the full sensitive details. This significantly reduces the risk in the unlikely event of a data breach.

• Withdrawal requests are only processed to payment methods previously used for deposit and registered in your name.
• Any unusual payment activity on your account will trigger an automatic security review.
• We may request additional documentation if a withdrawal is flagged as potentially suspicious, in line with our fraud prevention obligations.
• Payment processors used by XH88 operate under their own privacy and security policies. We recommend reviewing those policies for services like JazzCash and Easypaisa directly with the respective providers.

If you believe an unauthorised transaction has occurred on your XH88 account, contact our support team immediately. We can freeze your account pending investigation to prevent further activity.

5. Cookies & Tracking

XH88 uses cookies and similar technologies to make the platform work properly, remember your preferences and understand how players interact with our site and app. Here is a breakdown of the types of cookies we use:

• Essential cookies: Required for the platform to function. These handle your login session, keep your account secure and ensure pages load correctly. You cannot opt out of these without stopping use of the platform.
• Performance cookies: Help us understand which pages and features are most used – for example, how many players access PSL betting markets versus slot games on a given day. This data is aggregated and anonymous.
• Functionality cookies: Remember your preferences such as language settings, preferred deposit method and notification choices, so you do not have to set them again each visit.
• Marketing cookies: Used to deliver relevant promotional content based on your activity on the platform. You may opt out of marketing cookies via your account settings or your browser's cookie management tools.

You can control cookie settings through your browser. Disabling certain cookies may affect your experience on the platform – for instance, you may need to log in more frequently or re-enter preferences each visit. Disabling essential cookies will prevent access to your account.

6. Sharing Your Data

XH88 does not sell your personal data. We share information only where it is necessary to operate the platform, and strictly on a need-to-know basis.

When We May Share Data

• Payment processors: JazzCash, Easypaisa, Raast, banks and card networks receive the minimum information needed to process your deposit or withdrawal in PKR.
• Identity verification providers: Third-party verification services may receive your name, CNIC and date of birth to confirm your identity when required.
• Fraud detection services: IP addresses, device fingerprints and behavioural data may be shared with security partners to identify and prevent fraudulent account activity.
• Customer support platforms: Support ticket systems used by our team may store copies of your communications and account details relevant to your query.
• Legal requirements: XH88 will disclose personal data where required to do so by a valid legal obligation or where we reasonably believe disclosure is necessary to protect the rights, safety or property of XH88 or others.

All third parties who receive data from XH88 are contractually bound to use it only for the specified purpose and to maintain appropriate security standards. We do not share data with advertisers, data brokers or any party for their own independent commercial use.

7. How Long We Keep Your Data

XH88 retains personal data for as long as your account is active and for a defined period after closure, as detailed in the data table in Section 2. Retention periods reflect practical and security needs:

• Account and identity data is kept for the duration of your account plus up to five years after closure. This is necessary for dispute resolution and fraud investigation in the event of a post-closure claim.
• Transaction records, including PKR deposits and withdrawals, are retained for five years to support financial accountability and investigation of any disputed payments.
• Betting and gaming history is held for three years after account closure for dispute and audit purposes.
• Device and IP logs are retained on a rolling 12-month basis for security monitoring.
• Where an account was closed due to a confirmed policy violation (e.g. fraud or multi-accounting), records may be kept for longer as part of the investigation file.

Once a retention period has lapsed, data is either deleted or anonymised so it can no longer be linked to an individual player. You may request early deletion of non-essential data by contacting our support team – see Section 9 for your full rights.

8. Data Security

Protecting your data is a core responsibility for XH88. We implement technical and organisational measures proportionate to the sensitivity of the information we process.

• SSL/TLS encryption: All connections between your browser or app and XH88 servers use industry-standard transport layer security, ensuring data in transit cannot be intercepted.
• Password hashing: Account passwords are never stored in plain text. We use strong one-way hashing algorithms so that even internal staff cannot read your password.
• Access controls: Only authorised XH88 personnel with a legitimate business need can access player personal data. Access is logged and audited.
• Payment tokenisation: As described in Section 4, sensitive payment credentials are replaced with secure tokens rather than stored directly.
• Regular security reviews: Our platform infrastructure undergoes periodic security assessments to identify and address potential vulnerabilities.
• Incident response: In the event of a data breach that affects your personal information, XH88 will notify affected players as promptly as reasonably practicable and take immediate steps to contain the incident.

While we take every reasonable precaution, no platform can guarantee absolute security. You also play a role in keeping your account safe – use a strong, unique password, do not share your credentials and log out when using shared devices.

9. Your Rights

As an XH88 player, you have meaningful control over the personal data we hold about you. The following rights are available to all registered users:

• Right to access: You can request a copy of the personal data XH88 holds about you. We will provide this within a reasonable timeframe following identity verification.
• Right to correction: If any personal data on your account is inaccurate or out of date, you can request that it be corrected. Some details (such as your registered name and CNIC) may require supporting documentation before they can be updated.
• Right to deletion: You can request that we delete your personal data. We will comply where we are not required to retain the data for legal, security or contractual reasons.
• Right to restrict processing: You may ask us to limit how we use your data in certain circumstances – for example, while a dispute about accuracy is being investigated.
• Right to opt out of marketing: You can stop receiving promotional emails and push notifications at any time via your account settings or by contacting support.
• Right to account closure: You can request closure of your XH88 account at any time. Upon closure, your real-money balance will be processed for withdrawal and your data retained only as required by this policy.

To exercise any of these rights, contact our support team through live chat or at the email address listed in Section 12. We will acknowledge your request promptly and respond fully within a reasonable period. Identity verification will be required before sensitive data is disclosed or modified.

10. Minors

XH88 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 or older, and we may request age verification documentation at any point.

If we become aware that a minor has registered an account or provided personal data, we will immediately suspend the account, void any transactions and delete the associated data. If you believe a minor has registered on XH88, please notify our support team immediately.

11. Policy Changes

XH88 may update this Privacy Policy from time to time to reflect changes in our practices, platform features or applicable policies. When we make changes, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes that materially affect how we use your personal data, we will make reasonable efforts to notify active players – either by email or through an in-platform notification – prior to the changes taking effect. Continued use of the platform after a policy update constitutes acceptance of the revised terms.

We encourage you to review this page periodically. If you have any questions about an update, our support team is available to explain what has changed and what it means for your account.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights or need to report a privacy concern, please reach out to our support team. We are available 24/7.

• Email: [email protected]
• Live Chat: Available inside your XH88 account dashboard at any time of day or night.
• FAQ: Visit our FAQ page for quick answers to common privacy and account questions.

For data access or deletion requests, please use the subject line "Data Request – [your registered email]" so our team can prioritise and process your enquiry efficiently. We aim to respond to all privacy-related requests within five business days.