xh88 Privacy
Policy
At xh88, your privacy is taken as seriously as your security. This Privacy Policy explains exactly what personal data we collect from players in Pakistan, why we collect it, how we use and protect it, and what rights you have over your own information.
Our Privacy Principles
Six Commitments That Define How xh88 Handles Your Data
These principles underpin every data decision we make at xh88. The full policy text follows below.
Minimum Data Collection
xh88 collects only the personal data that is strictly necessary for account management, identity verification, payment processing, fraud prevention, and responsible gaming. We do not collect data for its own sake.
Clear & Plain Language
This policy is written in plain English specifically for xh88 players in Pakistan. We avoid legal jargon where possible. If a section is unclear, contact our support team and we will explain it directly.
Bank-Grade Security
All data stored and transmitted on the xh88 platform is protected using 256-bit SSL encryption — the same standard used by Pakistan's major commercial banks. Your personal information and financial data are encrypted at rest and in transit.
No Unauthorised Sharing
xh88 does not sell your personal data to third parties. Data is shared only with service providers who are contractually bound to protect it and who process it solely for the purposes required to operate the platform.
Your Rights Are Respected
You have the right to access, correct, and request deletion of your personal data. xh88 provides a straightforward process for exercising all data rights, available via your account dashboard or by contacting support.
Defined Retention Periods
xh88 retains personal data only for as long as it is required for the purposes for which it was collected, or as required by applicable law. Once the retention period expires, data is securely deleted or anonymised.
- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis for Processing
- 7. Sharing Your Data
- 8. Payment Data
- 9. Cookies & Tracking
- 10. Data Security
- 11. Data Retention
- 12. Your Data Rights
- 13. Minors & Age Verification
- 14. Marketing Communications
- 15. Changes to This Policy
- 16. Contact Us
Introduction
xh88 ("we," "us," "our") is committed to protecting the privacy and personal data of all players who use the xh88 platform at xh88.games. This Privacy Policy describes the personal information we collect from players in Pakistan, the reasons we collect it, how we use and protect it, with whom we may share it, and the rights you have in relation to your own data.
This Privacy Policy forms part of the xh88 Terms and Conditions. By creating an account on xh88, depositing funds, or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
Data Controller
For the purposes of this Privacy Policy, xh88 acts as the data controller in respect of personal data provided by players who access the platform from Pakistan. As data controller, xh88 is responsible for determining the purposes and means by which your personal data is processed.
All data processing activities carried out by xh88 are conducted in accordance with applicable data protection law. Where xh88 engages third-party processors — such as payment providers, identity verification services, or customer support tools — those processors are appointed under data processing agreements that require them to apply appropriate technical and organisational security measures and to process your data solely on xh88's documented instructions.
Data We Collect
xh88 collects the following categories of personal data:
| Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, photograph | Account registration, age and identity verification |
| Contact Data | Email address, Pakistani mobile number, city of residence | Account management, communications, support |
| Financial Data | Payment method details (Easypaisa, JazzCash, HBL, MCB, Meezan), transaction history, PKR deposit and withdrawal amounts | Payment processing, fraud prevention, AML compliance |
| Gaming Data | Bets placed, games played, session durations, win/loss history | Game operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Security, fraud detection, platform optimisation |
| Communications Data | Support chat logs, email correspondence, feedback submitted | Customer support, quality assurance, dispute resolution |
| Marketing Preferences | Consent status for promotional communications, preferred contact channel | Sending relevant promotions only to players who have opted in |
xh88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for identification purposes, except where CNIC-based identity verification is legally required.
How We Collect Data
xh88 collects personal data through the following means:
- Direct provision by you: Information you enter during account registration, identity verification, deposit and withdrawal requests, support interactions, and promotional opt-ins.
- Automated collection: Technical data such as IP addresses, device identifiers, and session data collected automatically when you access the xh88 platform via browser or the Android app.
- Cookies and similar technologies: Session cookies, persistent cookies, and similar tracking technologies used to maintain your login session, remember your preferences, analyse platform usage, and support fraud prevention. See Section 9 for full cookie details.
- Third-party sources: Identity verification providers may confirm or supplement identity data you provide. Payment providers may confirm payment account ownership. These third-party sources are engaged only where necessary for legal compliance or fraud prevention.
How We Use Your Data
xh88 uses your personal data for the following purposes:
- Account creation and management: Creating and maintaining your xh88 account, verifying your identity and age (18+), and authenticating you at login.
- Providing gaming services: Enabling you to access games, place bets, receive winnings, and participate in promotions on the xh88 platform.
- Processing payments: Handling PKR deposits via Easypaisa, JazzCash, HBL, MCB Bank, and Meezan Bank, and processing withdrawal requests to your registered payment account.
- Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct outlined in the xh88 Terms and Conditions.
- Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and applying protective measures where appropriate, in accordance with our Responsible Gaming obligations.
- Customer support: Responding to queries, resolving disputes, and maintaining records of your support interactions.
- Legal compliance: Meeting anti-money laundering (AML), know-your-customer (KYC), and other regulatory obligations applicable to the xh88 platform.
- Platform improvement: Analysing anonymised usage data to identify areas for improving the xh88 platform, game offerings, and user experience.
- Marketing communications: Sending promotional offers, bonus notifications, and relevant updates — but only to players who have explicitly opted in to receive marketing communications from xh88.
Legal Basis for Processing
xh88 processes your personal data on one or more of the following legal bases:
- Contractual necessity: Processing required to fulfil the contract between you and xh88 — including account creation, game provision, payment processing, and support — falls under this basis.
- Legal obligation: Processing required to comply with applicable laws, including AML/KYC requirements and age verification obligations, falls under this basis.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics falls under this basis, where xh88's legitimate interests are not outweighed by your data protection rights.
- Consent: Processing for marketing communications is based on your explicit consent. You may withdraw this consent at any time by updating your account preferences or contacting support.
Sharing Your Data
xh88 does not sell your personal data. We share personal data only in the following limited circumstances:
- Payment processors: Easypaisa, JazzCash, HBL, MCB Bank, Meezan Bank, and any other payment providers used to process your deposits and withdrawals in PKR. These providers receive only the data necessary to process your transaction.
- Identity verification providers: Third-party KYC services used to verify your identity and age in accordance with our legal obligations. These providers are contractually prohibited from using your data for any purpose other than verification.
- Customer support platforms: Third-party tools used to deliver Live Chat, WhatsApp, and Telegram support. These platforms process support communications on our behalf under data processing agreements.
- Analytics providers: Anonymised or aggregated data (never personally identifiable) may be shared with analytics services used to understand platform performance and user behaviour patterns.
- Law enforcement and regulatory bodies: xh88 will disclose personal data to competent authorities where legally required to do so — for example, in response to a court order or a verified law enforcement request.
Payment Data
All financial transactions on xh88 are denominated in Pakistani Rupees (PKR). When you make a deposit via Easypaisa, JazzCash, HBL, MCB Bank, or Meezan Bank, the relevant payment provider processes your payment credentials in accordance with their own privacy policies and applicable financial regulations.
xh88 does not store full payment account credentials on its own servers. Payment data is tokenised and processed through secure, encrypted payment gateways. xh88 retains transaction records (amounts, timestamps, payment method type) for the periods required by applicable AML and financial record-keeping regulations.
For AML compliance purposes, xh88 may request documentary evidence of the source of funds for deposits above certain thresholds. Information provided for this purpose is treated as confidential and is used solely for regulatory compliance.
Cookies & Tracking Technologies
xh88 uses cookies and similar tracking technologies on its website and mobile platform. Cookies are small text files placed on your device that help the platform function correctly and allow us to understand how players interact with it.
xh88 uses the following categories of cookies:
- Essential cookies: Required for the platform to function. These include session cookies that maintain your login state, security cookies that support fraud detection, and cookies that remember your language and currency preferences. These cannot be disabled without impairing platform functionality.
- Analytics cookies: Used to collect anonymised information about how players navigate the xh88 platform — for example, which pages are visited most frequently and how long players spend on each section. This data is aggregated and never personally identifiable.
- Functional cookies: Remember choices you make on the platform (such as game lobby filters or responsible gaming tool settings) to improve your experience during future visits.
xh88 does not use third-party advertising cookies or sell cookie data to advertising networks. You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from logging in or using certain platform features.
Data Security
xh88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security framework includes:
- 256-bit SSL encryption for all data transmitted between your device and xh88 servers;
- Encryption of sensitive data fields at rest in our databases;
- Role-based access controls ensuring that xh88 staff can access personal data only to the extent required for their specific job function;
- Regular security assessments and penetration testing of the xh88 platform;
- Two-factor authentication (2FA) available to all account holders as an additional layer of login security; and
- Continuous fraud monitoring systems that detect and flag anomalous account activity in real time.
Data Retention
xh88 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law.
- Active account data is retained for the duration of your relationship with xh88 and for a period of up to seven (7) years following account closure, in compliance with AML and financial record-keeping requirements.
- Identity verification documents (such as CNIC copies) are retained for the period required by KYC regulations applicable to the xh88 platform.
- Transaction records are retained for a minimum of five (5) years from the date of the transaction.
- Support communications are retained for up to three (3) years from the date of the interaction, or longer if the interaction relates to an unresolved dispute.
- Marketing consent records are retained for as long as you are an active account holder, or until you withdraw consent and the subsequent opt-out has been processed.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.
Your Data Rights
As an xh88 player based in Pakistan, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via Live Chat, Telegram, WhatsApp, or email.
You have the right to request a copy of the personal data xh88 holds about you. We will provide this within a reasonable timeframe and at no charge for standard requests.
If you believe that personal data xh88 holds about you is inaccurate or incomplete, you have the right to request correction. You can update basic account details directly in your account settings.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may prevent immediate deletion.
In certain circumstances you have the right to request that xh88 limit how your personal data is processed, for example while a data accuracy dispute is being resolved.
Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Minors & Age Verification
xh88 applies age verification procedures during account registration and at the point of first withdrawal. Players may be required to submit a copy of their CNIC or other government-issued identification to confirm they meet the minimum age requirement.
If you believe that a person under 18 has created an xh88 account, please contact our support team immediately at [email protected]. We will investigate and take appropriate action as a priority.
Marketing Communications
xh88 sends promotional emails, SMS messages, and in-app notifications to players who have explicitly opted in to receive marketing communications. These may include information about new games, bonus offers, seasonal promotions, and platform updates.
You can manage your marketing communication preferences at any time through the notifications section of your xh88 account dashboard. You may also opt out by contacting support directly. Once an opt-out request is processed, you will no longer receive marketing communications from xh88, though you will still receive transactional messages related to your account (such as deposit confirmations, withdrawal notifications, and security alerts) as these are not marketing communications and cannot be opted out of while your account remains active.
Changes to This Policy
xh88 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will update the effective date at the top of this page and, where the changes are significant, notify active account holders via email or an in-platform notification.
Your continued use of the xh88 platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. xh88 recommends checking this page periodically to stay informed of how your personal data is being protected.
The current version of this Privacy Policy is always accessible via the Privacy Policy link in the xh88 site footer. Previous versions are available on request.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how xh88 is handling your personal data, please contact us using any of the following channels:
- Live Chat: Available 24/7 directly on xh88.games — average response time 2–5 minutes.
- WhatsApp & Telegram: Contact details provided within your xh88 account dashboard.
- Email: [email protected] — for data rights requests, please include "Privacy Request" in the subject line so it is routed to the appropriate team. We aim to respond within 72 hours.
All communications related to data rights and privacy concerns are treated as strictly confidential. xh88 will never request your account password through any support or data rights communication channel.
Your Privacy, Protected
Play on xh88 With Confidence
Now that you understand how xh88 protects your data, explore the platform. Pakistan's most comprehensive online gaming experience — live casino, jackpot slots, cockfighting, and sports betting — is just one login away.
18+ only. Please play responsibly.
18+ Only. The xh88 platform is strictly for adults aged 18 and above. Gambling involves real financial risk and should be treated as entertainment only. If gambling is affecting your finances, relationships, or wellbeing, please use the responsible gaming tools in your account or visit our Responsible Gaming page for support and self-exclusion options.