h588 Privacy
Policy

Who We Are

h588 ("h588", "we", "us", "our") is an online gaming platform accessible at h588.pro, offering sports betting, live casino, and slot game services to eligible players. h588 operates under an international gaming license and is committed to handling all player data responsibly and transparently.

This Privacy Policy applies to all personal data collected through the h588 website, mobile-optimised platform, and any associated customer support channels. It covers players based in Pakistan — including those in Karachi, Lahore, Faisalabad, Islamabad, and all other cities — as well as any other eligible users who access h588 services.

For the purposes of applicable data protection law, h588 is the data controller in respect of personal data collected through the platform. If you have any questions about how your data is handled, please contact our support team at [email protected].

Personal Data We Collect

h588 collects personal data through several channels — directly from you when you register and use the platform, automatically through your use of our website, and from third-party identity verification and payment services. The categories of data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name as it appears on your CNIC, passport, or other official ID.
• Date of birth (collected to verify you meet the 21+ age requirement).
• Residential address, including city and postcode.
• Email address and mobile phone number.
• CNIC number or passport number (for KYC verification purposes).
• Copies of identity documents submitted for KYC compliance.

2.2 Financial & Transaction Data

• EasyPaisa and JazzCash account identifiers linked to your h588 wallet.
• Bank account details (HBL, UBL, Meezan Bank, etc.) used for deposits or withdrawals.
• Deposit and withdrawal transaction history in PKR.
• Bonus and promotional fund activity.
• Source of funds documentation where required by AML procedures.

2.3 Gaming Activity Data

• Bets placed, game sessions, win/loss records, and betting history.
• Sports markets accessed, including PSL and international cricket markets.
• Slot and live casino game activity logs.
• Responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods).

2.4 Technical & Device Data

• IP address and approximate geolocation data.
• Device type, operating system, and browser type.
• Session timestamps, page visit logs, and clickstream data.
• Cookie identifiers and similar tracking data (see Section 6).

2.5 Communications Data

• Live chat transcripts and email correspondence with h588 support.
• Formal complaint records and dispute resolution documentation.
• Marketing communication preferences and opt-in/opt-out records.

How We Use Your Personal Data

h588 uses the personal data we collect for specific, clearly defined purposes. We do not use your data for purposes incompatible with those for which it was originally collected. Our primary uses are as follows:

h588 does not use automated decision-making — including profiling — that produces legal or similarly significant effects on players, without human review being available upon request.

Legal Basis for Processing

h588 processes your personal data on one or more of the following legal bases, depending on the purpose of the processing:

• Contractual Necessity: Processing required to perform our contract with you — including account management, game provision, and payment processing — is carried out because it is necessary to fulfil our obligations to you as a registered h588 player.
• Legal Obligation: KYC verification, AML compliance, responsible gaming monitoring, and fraud prevention are processed because h588 is legally obligated to carry out these activities under its international gaming license and applicable regulations.
• Legitimate Interests: Platform analytics, fraud detection, security monitoring, and improving our services are processed on the basis of h588's legitimate business interests, balanced against your privacy rights.
• Consent: Marketing communications — including promotional emails and SMS notifications about h588 bonuses, cricket betting offers, and new slot releases — are only sent where you have given explicit consent. You may withdraw this consent at any time.

Data Sharing & Disclosure

h588 does not sell, rent, or commercially disclose your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers

h588 works with carefully selected third-party service providers who process data on our behalf under strict data processing agreements. These include:

• Payment processors: EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, Raast, and 1LINK receive only the financial data necessary to process your PKR transactions.
• Identity verification providers: KYC and document verification partners receive identity document data solely for the purpose of verifying your eligibility to use h588.
• Game software providers: Licensed game developers receive session data required to deliver their games. They do not receive your full identity profile.
• IT and security providers: Infrastructure, hosting, and cybersecurity providers may have access to technical data as part of platform operation and security monitoring.

5.2 Regulatory & Legal Disclosure

h588 may disclose your personal data to regulatory bodies, law enforcement agencies, or licensing authorities where required by law, court order, or our licensing obligations. h588 will, where legally permissible, notify you of any such disclosure.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of h588's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any changes to data handling practices.

Cookies & Tracking Technologies

h588 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use our services. We categorise our cookies as follows:

h588 does not use third-party advertising or retargeting cookies. We do not allow external advertising networks to place cookies on the h588 platform. All analytics data collected via cookies is aggregated and anonymised before use in platform improvement decisions.

You can manage cookie preferences through your h588 account settings or through your browser's built-in cookie controls. Please note that disabling strictly necessary cookies will impair your ability to use the h588 platform.

Data Retention

h588 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with our legal and licensing obligations. Our general retention periods are as follows:

• Active account data: Retained for the duration of your account relationship with h588 plus a minimum of five years following account closure, as required by our licensing and AML obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of verification, or longer where required by applicable law or ongoing regulatory obligations.
• Financial transaction records: Retained for a minimum of five years to comply with anti-money laundering regulations and licensing requirements.
• Customer support records: Retained for three years following the resolution of the relevant query or complaint.
• Marketing consent records: Retained for three years from the date of last consent update or until consent is withdrawn.
• Technical and session data: Retained for up to 13 months for analytics purposes, then anonymised or deleted.

Where data is no longer required for any lawful purpose, h588 securely destroys or permanently anonymises it in accordance with our data deletion procedures.

Data Security

h588 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security practices include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and h588 servers is encrypted using 256-bit SSL/TLS encryption, including all EasyPaisa and JazzCash payment flows.
• Data encryption at rest: Sensitive personal data stored in h588 databases — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within h588 is strictly limited on a need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Two-factor authentication (2FA): h588 supports 2FA for player accounts and mandates it for all internal staff accounts with access to personal data systems.
• Penetration testing: h588 regularly commissions independent security assessments and penetration testing to identify and remediate vulnerabilities in our systems.
• Incident response: h588 maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, h588 will notify affected players and relevant authorities in accordance with applicable requirements.

Your Data Rights

As an h588 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact h588 at [email protected] with your registered username and a description of your request. h588 will respond within 30 days.

• Right of Access: You may request a copy of the personal data h588 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data while a dispute about accuracy or lawfulness is being resolved.
• Right to Data Portability: You may request a copy of data you have provided to h588 in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including any profiling based on that ground.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time without affecting prior lawful processing.

Children & Minors

The h588 platform is strictly intended for adults aged 21 years and above. h588 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process and during KYC review.

If h588 discovers that an account has been registered by a person under 21, that account will be immediately suspended, all associated funds will be frozen pending investigation, and any personal data collected will be deleted in accordance with our data deletion procedures, subject to any legal obligations to retain evidence of the breach.

International Data Transfers

h588 operates internationally and may transfer your personal data to service providers and infrastructure partners located outside Pakistan. Where such transfers occur, h588 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses binding recipient organisations to data protection standards equivalent to those applied by h588.
• Use of service providers who are certified under recognised international data protection frameworks.
• Technical security measures (encryption, access controls) applied regardless of where data is physically stored.

h588 does not transfer personal data to jurisdictions without adequate data protection frameworks unless the specific safeguards described above are in place. Details of specific international transfer mechanisms applicable to your data are available upon request from [email protected].

Third-Party Services & Links

The h588 platform integrates with third-party game providers, payment processors, and identity verification services. While h588 carefully vets all service providers, each third-party service operates under its own privacy policy and data handling practices.

h588 is not responsible for the privacy practices of third-party game developers whose titles are hosted on the platform. Where a game is provided by a third-party developer, that provider may receive session-level data necessary to deliver the game — but will not receive your full identity profile or payment details.

h588 does not include links to external third-party websites within the platform. Any website accessible via a URL other than h588.pro is not under h588's control and is subject to that site's own privacy practices.

Changes to This Privacy Policy

h588 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, h588 will notify registered players by email, in-platform notification, or a prominent notice on the h588 website at least 14 days before the changes take effect.

The effective date at the top of this policy will be updated to reflect the date of the most recent revision. Your continued use of the h588 platform after any revised Privacy Policy takes effect constitutes your acknowledgement of the updated terms. If you disagree with any changes, you may close your account by contacting h588 support.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or h588's handling of your personal data, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 within the h588 platform after logging in.
• Subject Line: Use "Privacy Request" or "Data Protection" for faster routing to our dedicated team.

h588 will acknowledge all privacy-related requests within 72 hours and provide a substantive response within 30 days. For complex requests, h588 may extend this period by a further 60 days, in which case you will be notified of the extension and the reason for the delay.

If you are dissatisfied with h588's response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority or regulatory body applicable in your jurisdiction. h588 takes all formal complaints seriously and will cooperate fully with any regulatory investigation.