HC888 Privacy Policy — How We Protect Your Personal Data

HC888 ("HC888", "we", "us", "our") is the operator of the online gaming platform available at hc888.bet and is the data controller responsible for your personal information collected through this platform.

This Privacy Policy explains how HC888 collects, uses, stores, shares and protects the personal information of players who register and use the HC888 platform. It applies to all HC888 services including the online casino, sports betting, live cricket betting, promotions and all associated features available to Pakistani players.

By registering an account on HC888 and accepting our Terms and Conditions, you also confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you have any concerns about how HC888 handles your data, please contact our privacy team at privacy@hc888.bet before registering.

HC888 collects personal data in three ways: information you provide directly during registration and account use, information generated automatically through your platform activity, and information obtained from third parties where legally permitted (such as identity verification services).

HC888 does not collect sensitive personal data such as religious beliefs, political opinions, biometric data (beyond CNIC photo for identity matching) or medical information unless specifically required by regulatory obligation and with your explicit consent.

HC888 uses your personal data for specific, legitimate purposes only. We do not process your data for any purpose beyond what is described in this policy without obtaining your prior consent.

• Account operation: Creating and maintaining your HC888 account, processing PKR deposits and withdrawals, crediting bonuses and managing your game history.
• Identity verification (KYC): Verifying your age, identity and payment methods as required by our licensing obligations and anti-money laundering procedures. KYC is mandatory before withdrawals above Rs 10,000 are processed.
• Platform security: Detecting and preventing fraud, account takeovers, bonus abuse, money laundering and other prohibited activities. HC888 uses automated monitoring tools that flag unusual account behaviour for human review.
• Customer support: Responding to your queries, resolving complaints and maintaining records of support interactions for quality assurance.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and to enable responsible gaming tools requested by players, such as deposit limits and self-exclusion.
• Legal compliance: Meeting HC888's obligations under applicable laws including anti-money laundering (AML) regulations, tax reporting and regulatory requirements.
• Platform improvement: Analysing aggregated, anonymised usage data to improve HC888's games library, payment systems and user experience for Pakistani players. Individual player data is never shared in this context.
• Marketing communications: Sending promotional offers, bonus notifications and HC888 news to players who have opted in to marketing communications. You can opt out at any time — see Section 11.

HC888 operates a native Pakistani Rupee (PKR) wallet. All financial data — deposits, withdrawals, balances and transaction history — is stored in PKR and processed through PCI-DSS compliant payment infrastructure.

What HC888 does NOT store:

• Your Easypaisa mobile wallet PIN or JazzCash MPIN.
• Your NayaPay or SadaPay account password or full credentials.
• Your full debit or credit card number — we store only the last four digits and card type for reference.
• Your internet banking username or password for IBFT transactions.

KYC document handling: CNIC copies and selfies submitted for identity verification are stored on encrypted servers with access restricted to HC888's compliance team members on a strict need-to-know basis. KYC documents are not shared with any marketing partners. They are retained for the period required by applicable AML regulations and deleted thereafter in accordance with our data retention schedule (see Section 6).

All PKR transactions on HC888 are logged with timestamps, transaction amounts and payment method type. This transaction log is used for account reconciliation, fraud detection and regulatory reporting. You can view your complete transaction history in your HC888 account dashboard at any time.

HC888 does not sell, rent or trade your personal data. We share data with third parties only where strictly necessary for the following purposes:

• Payment processors: Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card networks solely to execute PKR deposits and withdrawals.
• Identity verification services: Name, CNIC number and date of birth may be shared with regulated third-party identity verification providers to confirm your identity during KYC. These providers are contractually bound to use your data only for this purpose.
• Game software providers: When you play a third-party casino game on HC888, a player session token (not your personal details) is passed to the game provider's server to run the game. The game provider does not receive your name, CNIC or financial data.
• Fraud prevention and AML services: Transaction data and IP information may be shared with regulatory-compliant fraud detection services to protect the integrity of the HC888 platform.
• Legal authorities: HC888 will share personal data with law enforcement, regulatory bodies or courts where required by a valid legal order, warrant or regulatory requirement. We will notify the affected player where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of HC888, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy policy will be communicated in advance.

HC888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, plus any additional period required by law.

• Active account data: Retained for the lifetime of your HC888 account plus 5 years after account closure to meet AML record-keeping obligations.
• Transaction records: PKR transaction history retained for 7 years from the transaction date as required by financial regulations.
• KYC documents: CNIC copies and verification selfies retained for 5 years from account closure and then securely deleted.
• Support communications: Chat logs and email correspondence retained for 3 years from the date of interaction.
• Technical logs: IP address and session logs retained for 12 months for fraud detection purposes, then deleted.
• Marketing preferences: Opt-in and opt-out records retained for the duration of your account to comply with marketing consent obligations.

When data reaches the end of its retention period, HC888 deletes or anonymises it through secure processes. Anonymised, aggregated data (from which no individual player can be identified) may be retained indefinitely for platform analytics.

HC888 uses cookies and similar tracking technologies to provide a functional, secure and personalised experience on the platform. A cookie is a small text file stored on your device when you visit hc888.bet.

You can manage cookie preferences through your browser settings. Blocking essential and security cookies will impair or prevent access to HC888's platform. Blocking analytics and marketing cookies will not affect your ability to play games or place bets.

HC888 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction.

• 256-bit SSL/TLS encryption on all data transmitted between your browser or mobile and HC888 servers.
• Data at rest encryption for all personal data and financial records stored on HC888 servers.
• Two-factor authentication (2FA) available for all accounts and mandatory for staff with access to player data.
• Role-based access controls ensuring that only HC888 employees with a specific need to access personal data can do so, and all access is logged.
• Regular penetration testing by independent cybersecurity professionals to identify and address vulnerabilities before they can be exploited.
• PCI-DSS Level 1 compliant payment infrastructure for all PKR transaction processing.
• DDoS protection and web application firewall to protect platform availability and prevent injection attacks.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal data, HC888 will notify affected players within 72 hours of becoming aware of the breach and will provide clear guidance on protective steps you should take.

As a player on HC888, you have the following rights regarding your personal data. To exercise any of these rights, contact privacy@hc888.bet with your registered email address and account username. HC888 responds to all data requests within 30 days.

HC888 is strictly an adult platform. Our services are available exclusively to individuals who are 18 years of age or older. HC888 does not knowingly collect, store or process personal data belonging to anyone under the age of 18.

Age verification is conducted as part of the registration process and as part of mandatory KYC before withdrawals are processed. Any account discovered to belong to a minor will be immediately closed, all balances will be forfeited, and the relevant incident will be reported to appropriate authorities as required.

HC888 may send you promotional emails, SMS notifications and in-platform messages about bonuses, new games, cricket betting promotions and other HC888 news — but only if you have opted in to marketing communications during registration or subsequently in your account settings.

You can opt out of marketing communications at any time using any of the following methods:

• Click the "Unsubscribe" link at the bottom of any HC888 marketing email.
• Log in to your HC888 account and navigate to Settings → Communication Preferences → Unsubscribe from Marketing.
• Reply "STOP" to any HC888 SMS notification.
• Contact HC888 support via live chat or at support@hc888.bet and request removal from marketing communications.

Opting out of marketing communications does not affect transactional communications — you will still receive account-related messages such as deposit confirmations, withdrawal notifications, security alerts and support responses.

HC888 does not send unsolicited marketing communications to people who have not opted in. If you receive a message claiming to be from HC888 that you did not opt in to receive, please report it to support@hc888.bet immediately as it may be a phishing attempt.

HC888 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements or the services we offer. The "Last Updated" date at the top of this page always reflects the most recent revision.

When material changes are made to this Privacy Policy — changes that meaningfully affect how HC888 processes your personal data or your privacy rights — HC888 will notify all registered players by email to their registered email address and display a notification banner on the platform for at least 14 days before the changes take effect.

Minor clarifications, formatting corrections or administrative updates that do not affect the substance of the policy may be made without advance notice. Continued use of HC888 after the effective date of a revised Privacy Policy constitutes your acceptance of the updated policy.

We recommend reviewing this Privacy Policy periodically. If you disagree with any material change, you may request account closure and withdrawal of your real-money balance before the changes take effect by contacting our support team.

If you have questions, concerns or requests relating to your personal data and how HC888 handles it, please contact our privacy team directly. We are committed to responding to all privacy-related enquiries within 48 hours on business days.

• Privacy email: privacy@hc888.bet (for data access, correction, deletion and portability requests)
• General support email: support@hc888.bet (for general account and platform queries)
• Live Chat: Available 24/7 on the HC888 platform — average response time under 2 minutes

All privacy enquiries can be submitted in Urdu or English. For formal data subject access requests, please include your registered email address and account username in your message to allow us to locate your records promptly.

HC888's privacy team reviews and processes all data requests personally — your enquiry will not receive an automated response. We treat privacy requests with the seriousness they deserve and respond with specificity rather than generic template replies.