sh88 Privacy Policy

1. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for personal data processed in connection with the sh88 platform (accessible at sh88.im) is sh88 and its operating entity. Questions about data processing may be directed to the sh88 data protection contact at [email protected].

By accessing sh88 and providing personal information – whether during account registration, payment processing, customer support interactions, or ordinary use of the platform – you acknowledge that your data will be processed in accordance with this Privacy Policy.

2. Personal Data We Collect

sh88 collects the following categories of personal data, depending on how you interact with the platform:

sh88 does not collect sensitive categories of personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers) unless specifically required by applicable law for identity verification purposes.

3. How sh88 Uses Your Data

sh88 processes personal data for the following purposes:

• Account Management: Creating and maintaining your sh88 account, authenticating your sh88 login, and verifying your identity in compliance with applicable regulations.
• Transaction Processing: Processing PKR deposits via JazzCash, Easypaisa, HBL, UBL, and other supported methods; processing withdrawal requests; maintaining accurate financial records.
• Platform Delivery: Providing access to cricket betting, live casino, slots, esports, and all other sh88 products. Personalising game recommendations based on your platform activity history.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, money laundering, and bonus abuse. This includes automated monitoring of unusual login or betting patterns.
• Legal Compliance: Fulfilling anti-money laundering (AML) obligations, age verification requirements, and any data retention requirements imposed by applicable regulation or law enforcement requests.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling behaviour and applying responsible gaming controls where appropriate, in accordance with sh88's responsible gaming obligations.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions.
• Service Improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and product offerings.

sh88 does not use personal data for unsolicited direct marketing without your explicit prior consent. You may withdraw marketing consent at any time by contacting sh88 support.

4. Legal Basis for Processing

sh88 processes personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil the sh88 user agreement – including account creation, payment processing, and platform access.
• Legal Obligation: Processing required to comply with applicable laws, including AML/KYC regulations, age verification obligations, and lawful data retention requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring – where these interests are not overridden by your rights.
• Consent: Processing for optional purposes (e.g. marketing communications) where sh88 has obtained your explicit prior consent. You may withdraw consent at any time.

5. Data Sharing & Disclosure

sh88 does not sell personal data to any third party. sh88 may share data in the following limited circumstances:

• Game Providers: Technical session data (but not full personal profiles) is shared with licensed game providers such as Evolution Gaming, PG Soft, and Pragmatic Play solely for the purpose of delivering their games.
• Payment Processors: Financial transaction data is shared with payment service providers (including JazzCash, Easypaisa, and banking partners) strictly for transaction processing purposes. These processors are contractually prohibited from using your data for any other purpose.
• Regulatory & Law Enforcement: sh88 will disclose personal data to regulators, law enforcement, or courts when required to do so by applicable law, court order, or lawful regulatory demand.
• Fraud Prevention Partners: Aggregated risk and fraud signals may be shared with licensed fraud prevention services to protect the integrity of the sh88 platform.
• Corporate Transactions: In the event of a merger, acquisition, or sale of sh88's business, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third parties who receive sh88 user data are required to process it in accordance with applicable data protection standards and sh88's contractual requirements.

6. Cookies & Tracking Technologies

sh88 uses cookies and similar tracking technologies on the sh88.im website and Android application. The categories of cookies used are:

• Essential Cookies: Required for the sh88 login session management, account authentication, and basic platform functionality. These cannot be disabled.
• Performance Cookies: Collect anonymised data on page load times, error rates, and feature usage to help sh88 improve platform performance.
• Functional Cookies: Remember your preferences such as language, currency display, and game filter settings to personalise your sh88 experience.
• Analytics Cookies: Used to understand aggregate user behaviour on sh88. Data is anonymised before analysis. sh88 does not use third-party advertising networks or cross-site tracking cookies.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using sh88, though some personalisation features may be reduced.

7. Data Retention

sh88 retains personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following minimum retention periods:

• Account Data: Retained for the duration of your active sh88 account, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Live chat and email records are retained for three (3) years from the date of the interaction.
• Technical Logs: Server and access logs are retained for ninety (90) days for security monitoring purposes, then deleted.
• Responsible Gaming Records: Self-exclusion and responsible gaming restriction records are retained for the duration of the restriction plus two (2) years.

Upon expiry of the applicable retention period, sh88 will securely delete or anonymise personal data in accordance with its data management procedures.

8. Security Measures

sh88 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure:

• All data transmitted between your device and sh88 is encrypted using TLS 1.3.
• Passwords are stored using bcrypt hashing with unique per-account salts and are never accessible in plain text to any sh88 employee.
• Access to personal data within sh88's internal systems is restricted to authorised personnel on a strict need-to-know basis.
• Two-factor authentication (2FA) is available to all registered sh88 accounts and is strongly recommended.
• sh88 conducts periodic security assessments and vulnerability testing of its platform infrastructure.

In the event of a personal data breach that is likely to result in risk to users, sh88 will notify affected users and relevant regulatory authorities as required by applicable law.

9. Your Rights

Subject to applicable law, registered sh88 users have the following rights with respect to their personal data:

• Right of Access: You may request a copy of the personal data sh88 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some data fields can be updated directly from your sh88 account settings.
• Right to Erasure: You may request deletion of your personal data where sh88 no longer has a legal basis to retain it. Note that certain data must be retained for legal compliance reasons even after account closure.
• Right to Restrict Processing: You may request that sh88 restrict processing of your data in certain circumstances, such as while a dispute is being investigated.
• Right to Data Portability: Where technically feasible and legally required, you may request your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including any direct marketing communications.

To exercise any of the above rights, please contact sh88 via live chat from within your account or via email at [email protected]. sh88 will respond within 30 days. Identity verification will be required before processing data access or deletion requests.

10. Children & Age Restriction

sh88 does not knowingly collect personal data from individuals under the age of 18. The sh88 platform is strictly for adult users (18+). If sh88 becomes aware that a minor has registered an account or provided personal data, that account will be immediately closed and all associated data will be deleted. Parents or guardians who suspect that a minor has accessed sh88 should contact support immediately.

11. Changes to This Policy

sh88 may update this Privacy Policy from time to time to reflect changes in legal requirements, platform features, or data processing practices. The revised policy will be published at sh88.im/privacy-policy with an updated effective date. Where changes are material, sh88 will notify registered users via their registered email address. Continued use of sh88 following publication of an updated policy constitutes acceptance of the revised terms.

12. Contact & Data Enquiries

For any questions, requests, or complaints regarding this Privacy Policy or sh88's data processing practices, please contact:

• Live Chat: Available 24/7 from within your sh88 account after logging in.
• Email: [email protected] — please include "Privacy Request" in the subject line.

sh88 aims to respond to all data-related enquiries within 30 calendar days. Complex requests may require additional time, in which case sh88 will provide an interim acknowledgement. Urdu-language support is available from agents during Pakistan standard business hours.