sh88 Privacy Policy —
How We Protect Your Data
as a Pakistan Player

1 Introduction and Scope

This Privacy Policy ("Policy") describes how sh88 ("sh88", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("Player", "You") who access or use the sh88 online casino platform at sh88.casino, including all associated mobile-optimised interfaces used by Pakistan players.

By registering an account on sh88, depositing PKR, or continuing to use the sh88 platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to sh88's data practices as described herein.

This Policy applies to all personal data collected from Pakistan-based players regardless of the device used to access sh88. It does not apply to third-party websites or services linked from sh88 — those third parties operate under their own privacy policies.

2 Legal Basis for Processing Personal Data

sh88 processes the personal data of Pakistan players on the following legal bases:

• Contractual Necessity: Processing your name, contact details, and payment data is necessary to create and maintain your sh88 account, process PKR deposits and withdrawals, and deliver the sh88 gaming service you have contracted to use.
• Legal Obligation: sh88 is required by applicable anti-money laundering (AML) regulations and financial compliance frameworks to collect and retain identity verification data, transaction records, and gameplay histories for defined periods.
• Legitimate Interests: sh88 processes device data, IP addresses, and gameplay patterns to detect and prevent fraud, protect the security of all Pakistan player accounts, and maintain the integrity of the sh88 platform.
• Consent: sh88 sends promotional emails, SMS messages, and push notifications to Pakistan players only where you have given explicit consent at registration or subsequently through your sh88 account marketing preferences. You may withdraw this consent at any time.

3 How sh88 Uses Your Personal Data

sh88 uses the personal data collected from Pakistan players for the following purposes:

• Creating, maintaining, and securing your sh88 account, including processing your sh88 login and verifying your identity (18+ age confirmation).
• Processing PKR deposits via Easypaisa, JazzCash, SadaPay, Raast, and Pakistan bank transfers, and processing PKR withdrawal requests to your verified Pakistan payment method.
• Delivering the sh88 gaming service, including live cricket betting, HBL PSL markets, jackpot slots, cockfighting, live dealer casino games, and other products available on sh88.
• Monitoring your gameplay for responsible gaming purposes — including detecting patterns that may indicate problem gambling — and offering appropriate sh88 responsible gaming tools where warranted.
• Complying with anti-money laundering obligations, including verifying the source of large PKR deposits and retaining transaction records for regulatory audits.
• Detecting and preventing fraud, multi-accounting, bonus abuse, match-fixing, and other prohibited conduct on sh88.
• Responding to your sh88 support queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Sending you sh88 promotional communications, including bonus offers, PKR cashback promotions, and game launch announcements — only where you have provided consent.
• Improving the sh88 platform for Pakistan players, including analysing aggregated (non-identifiable) usage patterns to optimise performance on Pakistan mobile networks and devices.

4 Sharing of Personal Data with Third Parties

sh88 does not sell your personal data. sh88 may share your personal data with the following categories of trusted third parties, strictly for the operational purposes described:

• Payment Processors: Easypaisa, JazzCash, SadaPay, Raast, and Pakistan banking partners receive the minimum data necessary to authorise and process your PKR transactions. These providers operate under their own data protection obligations.
• Identity Verification Services: Third-party KYC (Know Your Customer) providers may receive copies of your identity documents to perform automated age and identity verification on behalf of sh88. Verification providers are contractually bound to process your data only for this purpose.
• Game Software Providers: sh88's licensed game providers receive your account reference ID (not your personal details) to facilitate gameplay, RNG certification, and jackpot processing. Your name and Pakistan contact details are not shared with game providers.
• Fraud Detection Services: Specialist fraud prevention platforms receive device fingerprint data and transaction metadata to help sh88 identify and block fraudulent activity on Pakistan player accounts.
• Legal and Regulatory Authorities: sh88 may be required by law, court order, or regulatory direction to disclose personal data to Pakistan law enforcement or relevant regulatory bodies. sh88 will comply with such requests where legally obligated to do so.

5 Cookies and Tracking Technologies

sh88 uses cookies and similar web technologies on sh88.casino to improve your Pakistan player experience. The categories of cookies sh88 uses are as follows:

• Essential Cookies: Required for sh88 to function — these cookies maintain your sh88 login session, remember your account preferences, and enable PKR transactions to process correctly. These cookies cannot be disabled without breaking sh88 functionality.
• Analytics Cookies: sh88 uses aggregate analytics data to understand how Pakistan players navigate sh88.casino, which game categories attract the most traffic, and where technical performance issues may exist. Analytics data is aggregated and not linked to individual player identities.
• Security Cookies: sh88 uses security cookies to detect unusual login patterns, identify potential bot activity, and protect Pakistan player accounts from unauthorised access attempts.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect sh88 functionality including the ability to log in and process PKR payments.

6 Data Retention Periods

sh88 retains personal data for the periods required to fulfil the purposes for which it was collected, or as required by applicable law. The standard retention periods applied by sh88 are:

• Account Data (name, contact, date of birth): Retained for the duration of your sh88 account and for a minimum of 5 years after permanent account closure, per AML compliance obligations.
• Financial Transaction Data (PKR deposits, withdrawals, bet records): Retained for a minimum of 5 years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Identity Verification Documents (CNIC, passport copies): Retained for the duration of your sh88 account and for a minimum of 5 years following account closure.
• Support Communication Records: Retained for 3 years from the date of the last communication in the relevant support thread, unless the matter is subject to ongoing legal proceedings.
• Device and Technical Data (IP logs, session records): Retained for 12 months from the date of collection, unless flagged for fraud investigation, in which case the relevant records are retained for the duration of the investigation.

7 Security Measures Protecting Pakistan Player Data

sh88 maintains a comprehensive information security programme to protect Pakistan player personal data. Technical and organisational measures in place on sh88 include:

• 256-bit SSL/TLS encryption on all data transmission between your Pakistan device and sh88 servers.
• Encrypted storage of sensitive personal and financial data at rest on sh88 infrastructure.
• Role-based access controls ensuring only authorised sh88 staff with a defined operational need can access personal player data.
• Continuous real-time monitoring of sh88 systems for intrusion attempts, unusual access patterns, and data breach indicators.
• Regular third-party penetration testing of the sh88 platform and data infrastructure.
• Mandatory privacy and data security training for all sh88 staff with access to Pakistan player data.

In the event of a data security incident that materially affects your sh88 account or personal data, sh88 will notify affected Pakistan players promptly via their registered email address and provide clear guidance on recommended actions.

8 Your Data Rights as a Pakistan Player

sh88 respects your rights over your own personal data. The following rights are available to all Pakistan players with an sh88 account:

• Right of Access: You may request a complete copy of all personal data sh88 holds about you. sh88 will provide this within 30 calendar days of a verified request.
• Right to Rectification: If any personal data sh88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Account contact details can be updated directly within your sh88 profile settings.
• Right to Erasure: You may request the deletion of your personal data where sh88 has no outstanding legal obligation to retain it. Where AML and compliance retention obligations apply, sh88 will explain which specific data must be retained and for how long.
• Right to Restrict Processing: You may request that sh88 restrict its use of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a machine-readable export of the personal data you have provided to sh88, including your account registration data and gameplay history.
• Right to Object to Marketing: You may withdraw consent for sh88 marketing communications at any time via your account settings or by using the unsubscribe link in any sh88 promotional message. Withdrawal of marketing consent does not affect your ability to use sh88.

To exercise any of these rights, contact sh88's data team at: [email protected] (plain text — not a clickable link). Please include "Data Rights Request" in your subject line and your registered Pakistan mobile number or email address so sh88 can verify your identity before processing your request.

9 Children's Privacy

sh88 is strictly an 18+ platform. sh88 does not knowingly collect personal data from any person under the age of 18. If sh88 discovers or is notified that a registered account belongs to a person under 18, sh88 will immediately close the account, delete the associated personal data to the extent permitted by law, void all associated transactions, and refer the matter to sh88's compliance team.

Parents and guardians in Pakistan who believe their child may have registered an sh88 account should contact sh88 support immediately at [email protected] so the matter can be addressed urgently.

10 Contact for Privacy Queries

For any questions, concerns, or requests relating to this Privacy Policy or sh88's data practices, Pakistan players may contact sh88 through the following channels:

• Email: [email protected] — please include "Privacy Query" in the subject line
• Live Chat: Available 24/7 within your logged-in sh88 account dashboard
• Response Commitment: sh88 targets an initial response to all privacy-related queries within 5 business days, and a full substantive response within 30 calendar days for formal data rights requests