ch88 Privacy Policy —
How We Collect, Use, and
Protect Your Personal Data
This Privacy Policy explains what personal information ch88 collects from players and visitors, why we collect it, how it is used and stored, and what rights you have over your own data. ch88 is committed to handling player data with transparency, purpose limitation, and strong technical security across all operations on ch88.vu.
Our Six Core Privacy Commitments
A plain-English summary of how ch88 approaches player data. These cards do not replace the full Privacy Policy below — please read the complete document for your legal rights and obligations.
Minimal Data Collection
ch88 collects only the personal data that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data for the sake of it or hold data longer than required by our licensing obligations.
256-Bit SSL Encryption
All data transmitted between your device and ch88.vu is protected by 256-bit SSL/TLS encryption. Sensitive stored data — including payment instrument references and identity documents — is encrypted at rest using industry-standard protocols.
No Data Selling
ch88 does not sell, rent, or trade your personal data to third-party marketing organisations under any circumstances. Data sharing with third parties is limited to KYC providers, payment processors, and regulatory bodies — all operating under binding data agreements.
Your Data Rights
You have the right to access, correct, and request deletion of your personal data, subject to legal retention requirements. You may also object to certain types of processing and withdraw consent where consent was the legal basis for collection.
Marketing Opt-Out
Promotional communications from ch88 are opt-in at registration. You may withdraw marketing consent at any time via your account notification settings or by contacting support. Withdrawal of marketing consent does not affect account functionality.
Compliance-Driven Retention
Data retention periods at ch88 are set by our licensing and anti-money laundering obligations — not by business preference. Account data is retained for a defined post-closure period required by regulation, after which it is securely deleted or anonymised.
01 Who We Are
ch88 is a licensed online casino and sports betting operator accessible at ch88.vu. The Platform is operated under an international gaming licence issued by a recognised regulatory authority. ch88 serves players in Pakistan and other permitted jurisdictions, providing cricket betting, live dealer casino games, slot titles, color prediction games, and Playtech Live-powered products.
For the purposes of this Privacy Policy, ch88 is the data controller — meaning we determine the purposes for which personal data is collected and the means by which it is processed. We are accountable for ensuring that all personal data we hold is handled in accordance with our licensing obligations and applicable data protection standards.
If you have any questions about how ch88 handles your personal data, you may contact us at [email protected] or via 24/7 live chat from within your logged-in account.
02 Personal Data We Collect
ch88 collects personal data across several categories. The table below summarises the types of data collected, the context in which they are gathered, and the primary purpose for collection:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number and copy | Account registration, age verification, KYC compliance |
| Contact Data | Pakistani mobile number, email address, city of residence | Account access, support, regulatory notifications |
| Financial Data | JazzCash/EasyPaisa account reference, bank account details, transaction history | Deposit and withdrawal processing, AML compliance |
| Technical Data | IP address, device type, browser version, operating system | Platform security, fraud detection, session management |
| Usage Data | Pages visited, games played, bet history, session duration | Responsible gaming monitoring, product improvement |
| Communications Data | Live chat transcripts, support email content | Dispute resolution, quality assurance, compliance records |
| Marketing Preferences | Promotional opt-in status, preferred notification channel | Sending promotional communications to opted-in players |
03 How We Collect Personal Data
ch88 collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or participating in a promotional offer.
- Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser type, and session activity logs. This data is collected via server logs and, where applicable, first-party cookies.
- Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard processing networks when a deposit or withdrawal is initiated.
- KYC verification partners: Identity verification results and document authentication data from licensed third-party KYC providers used to fulfil ch88's age and identity verification obligations.
- Fraud detection systems: Device fingerprinting and behavioural analysis data generated by fraud prevention tools integrated into the Platform, used to detect multi-accounting, bonus abuse, and money laundering activity.
04 Legal Basis for Processing
ch88 processes personal data on one or more of the following legal bases, depending on the type of data and the purpose of processing:
- Contractual necessity: Processing required to provide you with the services described in the ch88 Terms & Conditions, including account management, bet settlement, deposit processing, and withdrawal execution.
- Legal obligation: Processing required to comply with ch88's gaming licence conditions, anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any applicable regulatory reporting duties.
- Legitimate interests: Processing necessary for ch88's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and product improvement — where such interests are not overridden by your fundamental rights.
- Consent: Processing for optional purposes — primarily marketing communications — where you have provided a clear and specific opt-in consent at registration or subsequently through your account settings. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
05 How We Use Your Personal Data
ch88 uses the personal data we collect for the following purposes:
5.1 Account and Platform Operations
- Creating and managing your ch88 player account;
- Authenticating your identity at login and during security-sensitive operations such as password resets and withdrawal requests;
- Processing deposits and withdrawals in PKR via your selected payment method;
- Settling bets, calculating winnings, and crediting bonus funds in accordance with offer terms;
- Providing 24/7 live chat and email support.
5.2 Compliance and Regulatory Obligations
- Performing age and identity verification (KYC) before processing withdrawals;
- Screening transactions for anti-money laundering indicators as required by ch88's licence;
- Maintaining records of player activity, transactions, and communications for the retention periods required by our regulatory obligations;
- Reporting to our licensing authority where legally required.
5.3 Responsible Gaming
- Monitoring account activity for indicators of problem gambling behaviour;
- Enforcing player-set deposit limits, loss limits, session time limits, and self-exclusion instructions;
- Contacting players where responsible gaming indicators are identified, as a duty-of-care obligation under our licence.
5.4 Security and Fraud Prevention
- Detecting and preventing multi-accounting, bonus abuse, fraudulent payment activity, and automated bot access;
- Investigating suspected breaches of the ch88 Terms & Conditions;
- Maintaining Platform security and protecting the interests of all registered players.
5.5 Marketing (Consent-Based Only)
Where you have opted in to receive promotional communications, ch88 will use your contact data and platform usage data to send relevant offers, bonus notifications, and seasonal promotions — including culturally respectful Eid and Ramadan-period campaigns — via email or SMS. You may withdraw this consent at any time via your account notification settings.
06 Data Sharing and Third Parties
ch88 does not sell, rent, or trade personal data. Sharing is limited to the following categories of third parties, all of whom are bound by contractual data protection obligations:
- KYC and identity verification providers: Licensed third-party providers used to verify identity documents and CNIC submissions as part of the KYC process.
- Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard processing networks — receiving only the data necessary to execute the specific transaction requested.
- Fraud detection and security providers: Third-party tools integrated into the Platform for device fingerprinting, bot detection, and transaction monitoring — operating under strict data processing agreements.
- Regulatory authorities: ch88's licensing authority and, where legally required, financial intelligence or law enforcement bodies — in both cases only as required by applicable law or licence conditions.
- Game content providers: Licensed game developers and live casino operators (including Playtech and other providers) receive limited technical session data necessary to deliver game content — they do not receive identity or payment data.
07 Cookies and Tracking Technologies
ch88 uses first-party cookies and similar browser storage technologies to support Platform functionality and improve the player experience. ch88 does not deploy third-party advertising cookies or cross-site tracking pixels.
7.1 Categories of Cookies Used
- Strictly Necessary Cookies: Session authentication tokens and security cookies required for the Platform to function. These cannot be disabled without preventing Platform access. No consent is required for these cookies.
- Functional Cookies: Cookies that remember your preferences — such as preferred game category, language setting, and responsible gaming limit reminders. These improve usability but are not essential.
- Analytics Cookies: First-party analytics data used to understand aggregate usage patterns — such as most-visited game categories and peak usage times — to inform product development. No personally identifiable information is associated with analytics data.
7.2 Managing Cookies
You may control non-essential cookies via your browser settings. Note that disabling functional cookies may affect the quality of your experience on ch88.vu. Strictly necessary cookies cannot be blocked via browser settings without preventing Platform login.
08 Data Security
ch88 implements technical and organisational security measures appropriate to the nature of the personal data held and the risks associated with its processing:
- Encryption in transit: All communication between your device and ch88.vu is encrypted using 256-bit SSL/TLS. Valid SSL certificates are maintained continuously; expired certificate alerts are monitored in real time.
- Encryption at rest: Sensitive stored data, including identity document references, financial instrument tokens, and KYC outcomes, is encrypted at rest using AES-256 encryption.
- Access controls: Access to personal data within ch88's systems is restricted to personnel with a genuine operational need. All access is logged and subject to periodic review.
- Two-factor authentication: Available to all players and required for internal administrative access to player data systems.
- Penetration testing: ch88's Platform undergoes periodic security assessments by independent security professionals to identify and remediate vulnerabilities.
09 Data Retention
ch88 retains personal data only for as long as necessary for the purposes for which it was collected, subject to any longer retention period required by our licensing authority or applicable regulatory obligations. The following indicative retention periods apply:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Licensing and AML regulatory requirement |
| KYC / identity documents | Duration of account + 5 years post-closure | AML and KYC regulatory retention obligation |
| Transaction records | Duration of account + 5 years post-closure | Financial record-keeping and AML compliance |
| Bet history and game logs | Duration of account + 3 years post-closure | Dispute resolution and regulatory audit readiness |
| Support communications | 3 years from communication date | Dispute resolution and quality assurance |
| Marketing preferences | Until consent withdrawn or account closed | Consent-based processing |
| Technical / session logs | 90 days rolling | Security monitoring and fraud detection |
On expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised such that it can no longer be attributed to any identifiable individual.
10 Your Data Rights
Subject to the limitations imposed by ch88's legal and regulatory obligations, you have the following rights in relation to your personal data:
- Right of access: You may request a copy of the personal data ch88 holds about you. Requests will be fulfilled within 30 days of receipt of sufficient identifying information.
- Right to rectification: Where personal data held by ch88 is inaccurate or incomplete, you may request correction. Note that changes to KYC-verified identity data require re-verification.
- Right to erasure: You may request deletion of your personal data where processing is no longer necessary and no legal retention obligation applies. Note that regulatory retention requirements will limit erasure of transaction records and KYC documentation for the periods set out in Section 9.
- Right to restriction: You may request that ch88 restrict processing of your data in certain circumstances — for example, while a data accuracy dispute is under investigation.
- Right to object: You may object to processing based on legitimate interests. ch88 will cease such processing unless compelling legitimate grounds exist that override your interests.
- Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time via your account settings or by contacting support.
To exercise any of these rights, contact ch88 at [email protected] or via live chat, including your registered mobile number or email address for identity verification purposes. ch88 will not charge a fee for data rights requests in standard circumstances.
11 Children's Privacy
The ch88 Platform is strictly for individuals aged 21 and above. ch88 does not knowingly collect personal data from anyone under the age of 21. The Platform is not directed at minors and contains content — including real-money gambling products — that is entirely unsuitable for persons under the minimum age.
Where ch88 discovers that personal data has been submitted by or on behalf of a person under 21 — including through KYC verification results — the account will be immediately suspended, any balance returned to the deposit source, and all associated data deleted as promptly as legally permissible.
12 International Data Transfers
ch88 operates under an international gaming licence. As a result, some personal data may be processed on servers or by service providers located outside Pakistan. Where such transfers occur, ch88 takes the following measures to ensure adequate protection:
- Transfers to KYC providers, fraud detection services, and game content providers are governed by contractual data processing agreements that impose data protection obligations equivalent to those applicable to ch88 under its licensing framework.
- Payment processor transfers — including data passed to JazzCash, EasyPaisa, and international card networks — are limited to the minimum data required to complete the specific transaction, governed by the respective processor's own regulatory obligations.
- ch88 does not transfer personal data to any jurisdiction that ch88 has assessed as providing materially inadequate data protection, without implementing appropriate contractual safeguards.
13 Marketing Communications
ch88 sends promotional communications — including bonus notifications, seasonal offers, and platform news — only to players who have affirmatively opted in to receive them at registration or subsequently through account settings.
Marketing communications are sent via email and/or SMS to your registered Pakistani mobile number or email address. ch88 does not send unsolicited promotional communications via WhatsApp, third-party messaging platforms, or any channel not explicitly selected during opt-in.
During Ramadan, ch88 suspends promotional push notifications during fasting hours as a matter of cultural respect. Eid-season promotional messaging is kept tasteful and is presented in-platform rather than through aggressive outbound push. Marketing consent covers all seasonal communications unless you narrow your preferences in account settings.
To opt out of marketing communications at any time, update your notification preferences in your ch88 account settings, or contact support directly. Opt-out requests are processed within 48 hours.
14 Updates to This Privacy Policy
ch88 may update this Privacy Policy periodically to reflect changes in our data practices, licensing obligations, or applicable legal requirements. The effective date at the top of this document will be updated on each revision.
Where a change is material — meaning it substantially affects how your personal data is collected or used — ch88 will notify you via your registered email address or an in-Platform notification at least 14 days before the change takes effect. Continued use of the Platform after the effective date of a material change constitutes acceptance of the updated Privacy Policy.
For non-material updates — such as clarifications, formatting changes, or corrections to typographical errors — ch88 may update this page without advance notice. We recommend reviewing this page periodically.
15 Contact and Data Enquiries
For any question, concern, or formal request relating to this Privacy Policy or your personal data rights, please contact ch88 through the following channels:
- Live Chat: Available 24/7 from within your logged-in ch88 account — recommended for urgent privacy queries or to initiate a data access request.
- Email: [email protected] — include "Privacy Request" in the subject line and your registered mobile number for identity verification. Standard response time is within 48 hours; formal data rights requests are fulfilled within 30 days.
ch88 is committed to resolving privacy concerns informally in the first instance. Where a concern relates to a potential data breach, contact us immediately via live chat so the matter can be escalated to our security team without delay.
Privacy Questions? Our Team is Available 24/7
ch88 takes data privacy seriously. If you have a question about how your personal data is used, or want to exercise your data rights, contact us via live chat anytime — or login to manage your account preferences directly.