he88 Privacy Policy

This Privacy Policy applies to all personal data processed by he88 in connection with the he88 online casino and sports betting platform, accessible at he88.vu. It covers data collected when you visit the platform, register a he88 account, deposit funds, place bets, access games, contact support, or interact with any other feature of the he88 service.

He88 is committed to handling personal data responsibly, transparently, and in a manner consistent with internationally recognised data protection principles. This policy is written in plain English to ensure it is accessible and understandable to players across Pakistan.

This policy should be read alongside the he88 Terms & Conditions and the Responsible Gaming Policy, which together form the complete framework governing your use of the he88 platform.

For the purposes of this Privacy Policy, he88 acts as the data controller in respect of personal data collected from registered players and platform visitors. He88 determines the purposes and means of processing player data as described in this policy.

Where he88 engages third-party processors to handle data on its behalf — such as payment gateway operators, identity verification providers, or game software suppliers — those parties act as data processors under contractual obligations that restrict their use of data to the specific purposes for which it was shared.

He88 collects the following categories of personal data in connection with your use of the platform:

He88 does not collect full payment card numbers or full bank account numbers. Payment processing for bank transfer methods (HBL, UBL, Allied Bank) is handled by the respective financial institution and he88 receives only a transaction confirmation reference.

He88 uses the personal data collected from players for the following specific purposes:

• Account management: To create, verify, maintain, and manage your he88 player account, including login authentication and session management.
• Payment processing: To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20, and to process withdrawal requests to verified payment methods.
• Identity verification (KYC): To verify your identity and age (21+) as required by our responsible gaming and anti-fraud obligations, including document verification at registration and before withdrawal.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, multi-accounting, bonus abuse, and unauthorised account access.
• Responsible gaming compliance: To monitor account activity for indicators of problem gambling behaviour, enforce deposit limits and self-exclusion restrictions, and action responsible gaming requests from players.
• Service communication: To send transactional communications such as deposit confirmations, withdrawal status updates, password reset links, and important account notices. He88 does not send unsolicited marketing emails without separate opt-in consent.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the he88 platform's performance, game library, and user experience.
• Legal and regulatory compliance: To maintain records as required by applicable financial record-keeping standards and to respond to lawful requests from competent authorities.

He88 processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between he88 and the player — including account creation, payment processing, game access, and withdrawal processing. Without this processing, he88 cannot deliver the services described in the Terms & Conditions.
• Legitimate interests: Processing carried out for he88's legitimate business interests where those interests are not overridden by the player's privacy rights — including fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring.
• Legal obligation: Processing required to comply with applicable financial record-keeping standards, age verification requirements, and responses to lawful authority requests.
• Consent: Where he88 relies on consent as a legal basis — specifically for optional marketing communications — that consent may be withdrawn at any time by contacting he88 support or adjusting your account communication preferences.

He88 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 network infrastructure receive transaction data necessary to process your specific deposit or withdrawal. Each processor operates under its own privacy and data handling obligations applicable to financial service providers in Pakistan.
• Identity verification providers: He88 may use third-party identity verification services to confirm CNIC or passport validity and to perform age verification checks. These providers receive only the specific document data required for the verification process and are contractually prohibited from using that data for any other purpose.
• Game software providers: Game providers whose titles are integrated on the he88 platform receive session and bet data specific to game rounds you play, which is necessary for game operation and RNG certification compliance. This does not include your full identity or payment data.
• IT and security service providers: He88 uses third-party server infrastructure and cybersecurity services. Providers of these services may have access to data stored on he88's infrastructure as part of their service delivery, under strict data processing agreements.
• Regulatory and law enforcement requests: He88 may disclose personal data where required to do so by a lawful request from a competent authority or as required by applicable law. He88 will notify affected players of such disclosure where legally permitted to do so.

He88 uses cookies and similar tracking technologies on the he88 platform for the following purposes:

• Essential cookies: Required for the he88 platform to function correctly. These include session authentication cookies that keep you logged in during an active session, and security cookies that help protect against cross-site request forgery. These cookies cannot be disabled without preventing access to the platform.
• Functional cookies: Used to remember your preferences on he88, such as language settings, preferred lobby view, and responsible gaming reminder configurations.
• Analytics cookies: He88 uses anonymised analytics data to understand how players navigate the platform — which pages are visited, how long sessions last, and which features are most used. This data is aggregated and does not identify individual players.

He88 does not use third-party advertising cookies or tracking pixels that share your browsing data with advertising networks. Your activity on he88 is not used to build advertising profiles on external platforms.

You may control cookie settings through your browser's built-in privacy tools. Disabling essential cookies will prevent normal platform access. Disabling functional and analytics cookies will not prevent you from logging in or playing games on he88.

8.1 Encryption in Transit. All data transmitted between your device and the he88 platform is encrypted using 256-bit SSL/TLS encryption. This applies to account login, deposit and withdrawal requests, live chat communications, and all other platform interactions. The presence of a valid SSL certificate on he88.vu can be confirmed in your browser's address bar.

8.2 Encryption at Rest. Sensitive player data stored in he88's database infrastructure — including identity documents, payment references, and account credentials — is stored in encrypted form. Account passwords are hashed using industry-standard one-way hashing algorithms and are not recoverable in plaintext form by he88 staff.

8.3 Access Controls. Access to player personal data within he88's internal systems is restricted on a need-to-know basis. Staff with access to sensitive player data are subject to confidentiality obligations and receive data handling training appropriate to their role.

8.4 Security Monitoring. He88 operates continuous monitoring of its platform infrastructure for anomalous activity, including unusual login patterns, mass data access attempts, and indicators of external intrusion. Suspected security incidents are investigated promptly and affected players are notified where appropriate.

8.5 Your Responsibilities. The security of your he88 account also depends on you maintaining strong, unique credentials and not sharing your password with any third party. He88 recommends enabling two-factor authentication from your account security settings. He88 will never ask for your password via email, live chat, or phone.

He88 players have the following rights in relation to their personal data. Requests to exercise any of these rights should be submitted to the he88 support team via live chat or at [email protected]. He88 will respond to all verified data rights requests within 30 days of receipt.

He88 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to mandatory retention requirements. The following retention periods apply:

Upon the expiry of applicable retention periods, he88 will securely delete or anonymise personal data in accordance with its internal data disposal procedures. Players who request early deletion of data that is within a mandatory retention period will be notified of the specific obligation preventing immediate deletion.

He88 is strictly a 21+ platform. He88 does not knowingly collect personal data from individuals under the age of 21 and does not permit registration by underage individuals. Age verification is conducted at registration and may be repeated prior to withdrawal processing or at any other time he88 considers appropriate based on account review.

Where he88 discovers or has reasonable grounds to believe that a registered account is operated by a person under the age of 21, he88 will immediately suspend the account, notify the account holder of the grounds for suspension, and initiate a review. Accounts confirmed to belong to underage individuals will be permanently closed. Any deposits made to such accounts will be returned to the payment source after deduction of any winnings generated during the underage access period.

Parents and guardians in Pakistan who become aware that a minor has accessed the he88 platform using their credentials or otherwise should contact he88 support immediately at [email protected] so that appropriate action can be taken without delay.

He88 operates with server infrastructure and third-party service providers that may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally in connection with he88's service delivery, he88 ensures that appropriate safeguards are in place to protect the data in a manner consistent with the standards described in this Privacy Policy.

Safeguards for international transfers include contractual data processing agreements with third-party recipients that require data protection standards equivalent to those described herein, and selection of providers whose infrastructure is operated under recognised international security and data protection frameworks.

He88 does not transfer player personal data to countries or organisations that cannot provide an adequate level of data protection relative to the sensitivity of the data being transferred.

He88 may update this Privacy Policy from time to time to reflect changes in data processing practices, platform features, regulatory requirements, or operational procedures. Material changes will be communicated to registered players via their account email address and/or a prominent notice on the he88 platform prior to the changes taking effect.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. He88 recommends that players review this policy periodically to stay informed about how their data is being handled. Continued use of the he88 platform following a notified policy update constitutes acceptance of the revised Privacy Policy.

Players with questions, concerns, or requests relating to this Privacy Policy or the handling of their personal data by he88 should contact the he88 Data Protection team through the following channels:

He88 is committed to resolving data-related inquiries promptly and transparently. If you are not satisfied with he88's response to a privacy concern, you retain the right to escalate the matter through appropriate channels available to you under applicable data protection frameworks.