gh888 Privacy Policy

1.Introduction

This Privacy Policy ("Policy") explains how gh888 ("we", "us", "our") collects, processes, stores, and protects personal data relating to members and visitors of the gh888 Platform at gh888.vu (the "Platform"). gh888 is committed to maintaining the privacy and security of your personal information. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy applies to all personal data collected through the Platform, whether provided directly by you during registration and gameplay, collected automatically through cookies and similar technologies, or obtained from third-party payment providers such as bKash, Nagad, and Rocket in the course of processing transactions. This Policy should be read alongside gh888's Terms and Conditions, which govern your use of the Platform as a whole.

Our Six Privacy Commitments

A summary of gh888's core data protection principles — what every member in Bangladesh should know at a glance.

2.Personal Data We Collect

gh888 collects personal data through several means: directly from you when you register or interact with the Platform, automatically as you use the Platform, and from third-party payment processors in connection with deposits and withdrawals. The categories of personal data we collect are set out below.

gh888 does not collect sensitive personal data such as biometric data, health records, religious beliefs, or political opinions. The data we collect is limited to what is reasonably necessary to operate the Platform safely, comply with our legal obligations, and provide a personalised experience to Members.

3.How We Use Your Personal Data

gh888 uses personal data collected from Members and Platform visitors only for the purposes described below. We do not use your data for purposes that are incompatible with the original reason it was collected.

• Account creation, management, and authentication — to register your account, verify your identity, maintain your account settings, and process login requests securely.
• Payment processing and financial record-keeping — to process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and to maintain accurate transaction records as required by applicable law.
• Responsible gaming monitoring — to identify patterns of gameplay that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion settings activated by Members, and to fulfil our duty of care obligations.
• Fraud detection and platform security — to detect, investigate, and prevent fraudulent activity including duplicate account creation, bonus abuse, money laundering, and automated bot usage.
• Customer support — to respond to support requests, complaints, and account enquiries submitted via email, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement and analytics — to analyse aggregated, anonymised usage data to understand how Members interact with the Platform, identify areas for improvement, and develop new features. Individual Member data is never sold or shared with third parties for analytics purposes.

4.Legal Basis for Processing

gh888 processes personal data on one or more of the following legal grounds, depending on the specific processing activity involved.

• Contractual necessity — processing that is necessary to perform our contract with you as a Member, including account registration, identity verification, payment processing, and providing access to games and betting services.
• Legal obligation — processing that is necessary for gh888 to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and record-keeping requirements imposed by applicable financial and gaming regulations.
• Legitimate interests — processing necessary for gh888's legitimate business interests, including fraud prevention, platform security monitoring, responsible gaming oversight, and improving the quality of our services, provided these interests are not overridden by your privacy rights.
• Consent — where gh888 relies on your consent as the legal basis for a specific processing activity (for example, sending optional promotional communications), you may withdraw that consent at any time by contacting support or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5.Payment Data and Third-Party Processors

When you make a deposit or request a withdrawal on the gh888 Platform, your payment is processed by a third-party payment processor (such as bKash, Nagad, or Rocket). These providers operate their own independent platforms and are subject to their own privacy policies and terms of service. gh888 is not responsible for the data handling practices of third-party payment processors.

gh888 retains only the minimum payment data necessary for transaction records, refund processing, fraud detection, and regulatory compliance. We store the transaction reference number, the payment method type, the wallet number or account identifier used, the transaction amount, the transaction date, and the transaction status. We do not store your mobile wallet password, PIN, full card number, CVV, or any other authentication credential used within a third-party payment platform.

6.Sharing Your Personal Data

gh888 does not sell or rent personal data to third parties. We may share personal data with external parties only in the following limited circumstances.

• Service providers and technology partners — companies that provide technical services to support the Platform, such as cloud hosting providers, fraud detection services, and identity verification services. All such partners are contractually required to handle personal data in accordance with data protection standards and may only use the data for the specific purpose for which it was shared.
• Payment processors — personal data necessary to process your deposit or withdrawal request (such as your registered wallet number and transaction amount) is shared with the relevant payment processor (bKash, Nagad, Rocket, or another supported provider) solely for the purpose of completing that transaction.
• Game content providers — aggregate, anonymised gaming activity data may be shared with third-party game studios (such as Pragmatic Play or Evolution Gaming) for the purpose of game performance analysis and RNG audit compliance. No personally identifiable information is shared with game providers.
• Law enforcement and regulatory authorities — where gh888 is required by law, court order, or regulatory authority to disclose personal data, we will comply with such requirement to the extent legally required. Where permitted by law, gh888 will notify the affected Member of such a disclosure request in advance.

gh888 will never share personal data with advertisers, data brokers, or any third party for the purpose of targeted advertising or marketing profiling. All data sharing arrangements with service providers are governed by written data processing agreements that bind those providers to the same data protection standards that gh888 applies internally.

7.Cookies and Tracking Technologies

gh888 uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to maintain your session while you are logged in, and to collect anonymised usage analytics. The following types of cookies may be set when you use the Platform.

• Strictly necessary cookies — these are essential for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and language preference cookies.
• Functional cookies — these enable the Platform to remember your preferences, such as your language setting, account display options, and last visited game category, to provide a more personalised experience on return visits.
• Analytics cookies — these collect anonymised information about how visitors use the Platform, including which pages are visited most frequently and where users encounter errors. This data is used in aggregate form only to improve the Platform and is never linked to individual Member accounts.
• Security and fraud prevention cookies — these help gh888 identify and block potentially malicious activity, including bot traffic, credential stuffing attacks, and repeated failed login attempts from the same device or IP address.

You can manage cookie settings through your mobile browser's settings menu. Please note that disabling strictly necessary cookies may affect the Platform's ability to function correctly, including your ability to remain logged in during a session. gh888 does not use third-party advertising cookies or cross-site tracking technologies.

8.Data Retention

gh888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold.

• Account and identity data is retained for the duration of your active membership plus a minimum of 5 years following account closure, in order to satisfy anti-money laundering record-keeping requirements and to resolve any disputes or regulatory enquiries that may arise after closure.
• Transaction records are retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations applicable to online payment platforms operating in the Bangladesh market.
• Technical and usage data (including IP address logs and session records) is retained for a maximum of 12 months from the date of collection, after which it is permanently deleted or fully anonymised. Anonymised aggregate analytics data may be retained indefinitely as it no longer constitutes personal data.

9.Your Privacy Rights

As a Member or visitor of the gh888 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us via the email address displayed in the footer of this page.

• Right of access — you may request a copy of all personal data gh888 holds about you. gh888 will provide this information within 30 days of receiving a valid access request, free of charge for the first request in any 12-month period.
• Right to rectification — if any personal data gh888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account information directly via your account settings without contacting support.
• Right to erasure — you may request the deletion of your personal data. gh888 will comply with such requests to the extent permissible under applicable law, noting that certain data (such as transaction records) must be retained for specified periods regardless of a deletion request.
• Right to restriction — you may request that gh888 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you object to gh888 processing it on the basis of legitimate interests.
• Right to object — you may object to gh888's processing of your personal data where that processing is based on legitimate interests. You may also opt out of receiving optional promotional communications at any time by contacting support or updating your preferences in account settings.

gh888 will acknowledge all privacy rights requests within 5 business days of receipt and will complete the request within 30 calendar days, unless the complexity or volume of requests requires an extension of up to a further 30 days, in which case gh888 will notify you of the extension and the reason for it before the initial 30-day period expires.

10.Data Security

gh888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers, password hashing using industry-standard algorithms so that plaintext passwords are never stored, role-based access controls that restrict internal access to personal data on a need-to-know basis, regular security audits and vulnerability assessments of the Platform, and automatic session timeouts after periods of inactivity to reduce the risk of unauthorised account access.

While gh888 takes data security seriously and applies industry-standard protections, no online platform can guarantee absolute security against all possible threats. Members are encouraged to take reasonable steps to protect their own accounts, including using a strong and unique password, not sharing login credentials with any other person, and reporting any suspicious activity on their account to gh888 support immediately.

11.Children's Privacy

The gh888 Platform is strictly intended for adults aged 21 years and above. gh888 does not knowingly collect personal data from individuals under the age of 21. If gh888 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed without notice. All balances associated with accounts found to belong to underage individuals will be forfeited.

12.Third-Party Links and Game Providers

The gh888 Platform hosts games and betting content provided by independent third-party studios and data providers. While gh888 selects its game providers carefully, it does not control the data handling practices, privacy policies, or security measures of those third parties. gh888 is not responsible for the privacy practices of third-party game studios. Any personal data you provide directly to a third-party service (for example, by navigating to a game provider's external support page) is governed by that third party's own privacy policy, not this Policy. This Policy applies only to personal data collected and processed by gh888 itself through the Platform.

13.Changes to This Privacy Policy

gh888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, applicable law, or the services offered on the Platform. Where changes are material — meaning they meaningfully affect the rights of Members or the way in which personal data is used — gh888 will provide advance notice via the Platform or by email to the affected Member's registered address, where reasonably practicable, before the amended Policy takes effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. The current version of this Policy is always accessible on this page, and is identified by the "Last updated" date displayed near the top of the document. If you do not agree with any change to this Policy, you should cease using the Platform and may request account closure in accordance with the Terms and Conditions.

14.Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or need to report a data security concern, please contact gh888's support team using the email address displayed in the footer of this page. Please note that the email address is provided as plain text only and is not a clickable link. When contacting us about a privacy matter, please include your registered username, a brief description of your request or concern, and your preferred contact method so our team can respond promptly. gh888's support team is available 24 hours a day, 7 days a week, and we aim to respond to all privacy-related enquiries within 5 business days.