Privacy Policy – gm888 Online Betting Platform Pakistan

1. Introduction

This Privacy Policy describes how gm888 ("the Platform", "we", "us", "our") collects, uses, stores and protects the personal data of registered players and visitors to the gm888 website ("you", "your"). gm888 is committed to handling your personal information responsibly, transparently and in accordance with applicable data protection principles.

By registering an account, making a deposit or using any service on gm888, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. This Privacy Policy should be read together with the gm888 Terms and Conditions, which govern your use of the platform overall.

gm888 primarily serves players based in Pakistan. All financial transactions on gm888 are denominated in Pakistani Rupees (PKR). Our payment processing partners are local providers including Easypaisa, JazzCash, NayaPay, SadaPay, and standard banking infrastructure — and the data processing arrangements described in this policy reflect that Pakistani-first approach.

We take the privacy of our players seriously. We do not sell your personal data. We do not share it with advertisers. We collect what we need to operate the platform securely and legally, and we protect it accordingly.

2. Data We Collect

gm888 collects personal data in two ways: information you provide directly, and information we collect automatically through your use of the platform. We only collect data that is genuinely necessary for a stated purpose.

2.1 Information You Provide Directly

• Registration data: Your mobile number, chosen username and password when you create a gm888 account.
• Identity verification data: Government-issued identity document details (such as CNIC number), date of birth, and any supporting documents provided during account verification. gm888 may request these to confirm your identity and age in line with our Responsible Gaming obligations.
• Payment data: Mobile wallet account numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, and card details for Visa/Mastercard transactions. Card data is processed through PCI-DSS compliant payment processors — gm888 does not store full card numbers on its own servers.
• Communication data: Messages, emails and support requests sent to the gm888 customer support team, including any attachments provided.
• Responsible gaming data: Deposit limits, session limits, time-out periods and self-exclusion preferences that you set on your account.

2.2 Information Collected Automatically

• Device and technical data: Your device type, operating system version, browser type, IP address and mobile network provider when you access gm888.
• Usage data: Pages and sections of gm888 you visit, time spent on each section, search queries within the platform, games and sports markets you browse or bet on.
• Transaction data: A record of all deposits, withdrawals, bets placed, bets settled and bonuses claimed on your gm888 account.
• Cookie and session data: Information stored in cookies and session identifiers that help gm888 remember your preferences and keep your session secure. See Section 6 for full cookie details.
• Communication metadata: Timestamps, delivery status and response times related to messages sent between you and gm888 support.

3. How We Use Your Data

The table below sets out the main purposes for which gm888 uses your personal data and the type of data involved in each case.

gm888 will not use your personal data for any purpose that is not described in this Privacy Policy or separately communicated to you at the time of collection. If we wish to use your data for a new purpose, we will update this policy and notify you.

4. Legal Basis for Processing

gm888 processes your personal data on the following legal bases, depending on the purpose:

• Contractual necessity: Much of our data processing is necessary to perform the contract between you and gm888 — that is, to provide your account, process payments, settle bets and deliver the services you have signed up for. Without this data, we simply cannot operate your account.
• Legal obligation: We are required by applicable regulations to verify the age and identity of players, to monitor transactions for money laundering indicators, and to maintain records of account activity. These requirements are not optional — they are legal obligations gm888 must comply with.
• Legitimate interests: We process some data to protect the platform and its players from fraud, abuse and security threats. This serves a legitimate interest that does not override your privacy rights, because the processing is proportionate and necessary.
• Consent: Where gm888 processes data for purposes that are not strictly necessary — such as sending you promotional messages — we do so only with your explicit consent. You can withdraw consent at any time by contacting support or adjusting your account settings.

5. Data Sharing

gm888 does not sell your personal data to any third party under any circumstances. We share data only where strictly necessary, with the following categories of recipient:

5.1 Payment Processors

To process your PKR deposits and withdrawals, gm888 shares the minimum necessary payment data with our payment processing partners — Easypaisa, JazzCash, NayaPay, SadaPay, partner banks for IBFT, and card processing networks for Visa/Mastercard transactions. These providers operate under their own privacy and security policies and are contractually obligated to handle your data securely.

5.2 Identity Verification Services

Where required to verify your identity or age, gm888 may share your identity document data with a licensed identity verification service provider. This data is used solely for the purpose of verification and is not retained by the verification provider beyond what is required for that purpose.

5.3 Fraud Prevention and Security

gm888 may share account or transaction data with fraud prevention organisations or security services where we have reasonable grounds to suspect fraudulent activity, money laundering or other criminal conduct. This sharing is done on a case-by-case basis and only to the extent necessary.

5.4 Legal and Regulatory Disclosure

gm888 may be required by law or by a regulatory or law enforcement authority to disclose personal data. Where this occurs, we will comply with the legally valid request and, where permitted, inform you that such a disclosure has been made.

5.5 Technology Service Providers

gm888 uses third-party technology providers for services such as hosting, customer support software and analytics. These providers act as data processors on our behalf and are bound by data processing agreements that restrict their use of your data to what is necessary to provide the contracted service.

6. Cookies and Tracking Technologies

gm888 uses cookies and similar tracking technologies to operate the platform, remember your preferences and analyse how the site is used. Here is a plain-language summary of what we use and why:

6.1 Essential Cookies

These cookies are strictly necessary for gm888 to function. They maintain your login session, keep your bet slip intact as you navigate and protect against cross-site request forgery attacks. You cannot opt out of essential cookies without disabling your ability to use gm888 effectively.

6.2 Functional Cookies

Functional cookies remember your preferences — such as your chosen interface language, display settings and whether you have dismissed certain notices. These make your experience on gm888 more convenient. They can be disabled through your browser settings, though doing so may affect some platform features.

6.3 Analytics Cookies

gm888 uses anonymised analytics data to understand how players navigate the platform — which sections are most visited, where players encounter difficulties, and how performance varies by device type. This information is used to improve gm888 for all users. Analytics data does not identify individual players.

6.4 Managing Cookies

Most browsers allow you to view, manage and delete cookies through their settings menus. Instructions for managing cookies are available in the help documentation of your browser. Note that deleting essential cookies will log you out of your gm888 session.

7. Data Security

gm888 takes the security of your personal data seriously. We apply technical and organisational measures proportionate to the sensitivity of the data and the risks involved. The following security practices are in place:

• Encryption in transit: All data transmitted between your device and gm888 is encrypted using TLS (Transport Layer Security). This includes login credentials, payment data and all API communications.
• Encryption at rest: Sensitive data stored in gm888 systems — including passwords (which are hashed using a strong algorithm) and payment method identifiers — is encrypted at rest.
• Access controls: Access to personal data within gm888 systems is restricted on a need-to-know basis. Staff members can only access the data necessary for their specific role. Access is logged and monitored.
• PCI-DSS compliance: Card payment processing on gm888 is handled by PCI-DSS certified payment processors. Full card numbers are never stored on gm888 servers.
• Fraud monitoring: gm888's security systems continuously monitor for unusual account activity, suspicious login patterns and transaction anomalies that may indicate unauthorised access or fraud.
• Incident response: In the event of a data security incident that affects your personal data, gm888 will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

While gm888 applies robust security measures, no online system can guarantee absolute security. You also play a role in protecting your account — keep your password strong and private, do not share your login credentials with anyone, and contact gm888 support immediately if you suspect unauthorised activity on your account.

8. Data Retention

gm888 retains personal data for as long as is necessary for the purposes described in this Privacy Policy and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active gm888 account and for a minimum period of five years after account closure, in line with anti-money laundering record-keeping requirements.
• Transaction data: Full records of all deposits, withdrawals and betting transactions are retained for a minimum of five years from the date of each transaction.
• Identity verification data: Retained for the duration of your account and for a minimum of five years after closure. Where a verification was conducted for a failed account application, relevant data is retained for the period required by applicable regulations.
• Customer support records: Correspondence and support ticket records are retained for three years from the date of resolution.
• Marketing consent records: Records of your marketing consent preferences are retained for the duration of your account to allow us to demonstrate compliance.
• Anonymised analytics data: Aggregated, anonymised usage data may be retained indefinitely for platform improvement purposes, as it does not identify individual players.

When personal data is no longer required for any legitimate purpose, gm888 will delete or anonymise it securely. You may request deletion of your data at any time — see Section 9 for your rights in this regard.

9. Your Rights Over Your Personal Data

You have rights over your own personal data. gm888 respects those rights and will respond to requests within a reasonable timeframe. The following rights are available to you:

To exercise any of these rights, contact the gm888 support team at support@gm888.bid. Please include your registered mobile number and a description of your request. We will respond promptly and, where identity verification is required before processing the request, we will ask for it.

10. Children and Minors

gm888 is strictly an 18+ platform. We do not knowingly collect personal data from persons under the age of 18. If you are under 18, you must not register an account, deposit funds or use any service on gm888.

If gm888 discovers that an account is held by a person under 18, the account will be suspended immediately, any deposited funds will be returned (less any amounts already wagered), and the personal data associated with the account will be handled in line with applicable regulations.

If you believe a person under 18 has registered an account on gm888, please contact us immediately at support@gm888.bid so we can investigate and take appropriate action.

gm888 applies age verification measures as part of the account registration and verification process. We take our obligations to prevent underage gambling seriously — it is one of the core pillars of our Responsible Gaming policy.

11. Changes to This Privacy Policy

gm888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or the services we offer. When material changes are made, we will notify registered players by SMS or email before the changes take effect.

The version of this Privacy Policy currently published on gm888 is the version in force. If you disagree with any update to this policy, you should stop using gm888 and request account closure and data deletion in accordance with Section 9. Continued use of gm888 after a policy update has been communicated constitutes acceptance of the updated policy.

Previous versions of this Privacy Policy may be requested from support@gm888.bid if you need to refer to the terms that applied at a specific earlier date.

12. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by gm888, please get in touch with our support team. We aim to respond to all privacy-related enquiries within 48 hours.

• Email: support@gm888.bid
• Subject line for privacy requests: "Privacy Request – [your registered mobile number]"
• Support availability: 24 hours a day, 7 days a week
• Language: English

For requests to exercise your data rights (access, deletion, correction, portability), please include your registered mobile number and a clear description of what you are requesting. We may ask you to verify your identity before processing the request — this is to protect you from someone else requesting access to your data fraudulently.