m888 Privacy Policy

m888 (referred to throughout this Privacy Policy as "m888", "we", "us", or "our") operates the online casino and sports betting platform accessible at m888.cam and all associated subdomains and mobile interfaces. m888 is the data controller responsible for the personal information collected through the Platform.

This Privacy Policy applies to all users of the m888 Platform, including registered Players, visitors who browse without registering, and individuals who contact m888 support. It covers all personal data collected through the website, mobile interface, live chat, email, and any other channel through which you interact with m888.

m888 collects personal data in three primary ways: information you provide directly during registration and account use, information generated automatically through your use of the Platform, and information received from third-party service providers such as payment processors.

2.1 Information You Provide Directly

2.2 Automatically Collected Information

When you access the m888 Platform, our servers and analytics systems automatically record certain technical information, including:

• IP address and approximate geographic location (city-level only);
• Device type, operating system, and browser version;
• Session start and end times, pages visited, and features accessed;
• Game history — titles played, bet amounts placed, outcomes, and session duration;
• Cookie identifiers and local storage tokens used to maintain your session;
• Referral source (if you arrived at m888 via a link from another page).

2.3 Third-Party Data

m888 may receive limited information about you from payment processors (such as JazzCash and EasyPaisa) to verify transaction status and prevent fraud. This data is used solely for the purpose for which it was shared and is not combined with your profile for marketing purposes.

m888 uses your personal data only for the purposes described below. We do not use your data in ways that are incompatible with the purpose for which it was originally collected without your prior consent.

• Account Management: To create and maintain your m888 Account, verify your identity, authenticate your login sessions, and communicate important account-related notices such as password resets, deposit confirmations, and withdrawal updates.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; to verify that withdrawal destinations match the Account holder's identity; and to maintain accurate financial records.
• Regulatory Compliance: To conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by applicable international online gaming regulations; to verify that all players are 21 years of age or older; and to respond to lawful requests from regulatory authorities.
• Platform Personalisation: To remember your language and display preferences, serve your most-played game categories in a prominent position, and tailor bonus offers to your demonstrated gaming interests on the m888 Platform.
• Customer Support: To respond to your support queries via live chat, email, and Messenger; to resolve disputes and complaints; and to maintain records of our interactions with you for quality assurance purposes.
• Responsible Gaming: To monitor your gaming patterns for indicators of problem gambling behaviour, enforce any self-exclusion or deposit limit requests you have submitted, and contact you proactively where our systems flag a potential concern.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct as defined in the m888 Terms and Conditions.
• Platform Improvement: To analyse aggregate usage data and identify areas where the m888 Platform can be improved, bugs resolved, and new features prioritised — always using anonymised or pseudonymised data where possible.
• Marketing Communications: To send you promotional emails and SMS messages about m888 bonuses, new game releases, and PSL cricket betting markets — but only where you have opted in to receive such communications. You may unsubscribe at any time.

m888 processes your personal data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and m888 — specifically, to operate your Account and provide gaming services.
• Legal Obligation: KYC, AML, and age-verification processing is required to comply with m888's obligations under its operating licence and applicable international anti-money laundering standards.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring is based on m888's legitimate interest in operating a safe, fair, and sustainable gaming platform.
• Consent: Marketing communications are sent only on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by clicking the unsubscribe link in any marketing email or by contacting m888 support.

m888 does not sell or rent your personal data. We share your data only in the limited circumstances described below, and always subject to appropriate data protection safeguards:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own regulatory obligations and cannot use your data for unrelated purposes.
• Identity Verification Providers: m888 may use third-party KYC verification services to authenticate CNIC documents. These providers process identity data under strict contractual data processing agreements and are prohibited from retaining your data beyond the verification period.
• Game Software Providers: Some game titles on the m888 Platform are supplied by third-party game studios. These studios may receive anonymised session data for game performance monitoring but do not receive your name, contact details, financial information, or CNIC data.
• Regulatory Authorities: m888 will disclose personal data to regulators, law enforcement agencies, or courts where required to do so by applicable law or a valid legal order. m888 will notify you of any such disclosure to the extent permitted by law.
• Anti-Fraud Networks: m888 participates in industry-standard fraud prevention networks through which anonymised risk signals (such as device fingerprints and IP reputation scores) may be shared. No personally identifiable information is transmitted through these networks.

m888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

After the applicable retention period has expired, m888 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual.

The m888 Platform uses cookies and similar technologies (such as local storage tokens and session identifiers) to provide core functionality and improve your experience. A cookie is a small text file stored on your device when you visit a website. m888 uses cookies for the following purposes:

• Strictly Necessary Cookies: These are required for the Platform to function. They maintain your login session, remember your balance state, and ensure game rounds are completed correctly. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your preferences such as chosen language, display settings, and recently played games. They are not required for the Platform to work but improve your overall experience.
• Analytics Cookies: m888 uses anonymised analytics to understand how players navigate the Platform in aggregate — which game categories are most popular, where players spend time, and which pages generate support queries. No personally identifiable information is included in analytics data.
• Security Cookies: Short-lived cookies used to implement CSRF protection and detect session anomalies that may indicate an account takeover attempt.

m888 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on its Platform. You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your m888 Account.

m888 employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme includes:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or app and m888's servers is encrypted using industry-standard TLS 1.3 protocols;
• At-Rest Encryption: Sensitive data stored in m888's databases — including CNIC numbers and financial account references — is encrypted at rest using AES-256;
• Access Controls: Strict role-based access controls ensure that only authorised m888 personnel can access personal data, and only to the extent required for their specific job function;
• Two-Factor Authentication: All internal m888 staff accounts that handle player data require two-factor authentication. Players are also strongly encouraged to enable 2FA on their own Accounts;
• Regular Security Audits: m888's infrastructure undergoes regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists;
• Incident Response: In the event of a confirmed personal data breach that poses a risk to Player rights and freedoms, m888 will notify affected Players without undue delay and take immediate remedial action.

As a Player on the m888 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact m888 support via live chat or email at [email protected]. m888 will acknowledge your request within 5 business days and provide a substantive response within 30 days.

Where your request cannot be fulfilled in full — for example, because m888 is legally required to retain certain data under AML regulations — m888 will explain the specific reason clearly in its response to you.

The m888 Platform is strictly intended for individuals who are 21 years of age or older. m888 does not knowingly collect personal data from individuals under the age of 21 under any circumstances.

If m888 becomes aware that personal data has been submitted by a person under 21 — whether through registration, support contact, or any other means — that data will be permanently deleted and the associated Account will be immediately closed. Any deposits made by an underage individual will be returned to the original payment source, net of any winnings generated.

If you are a parent or guardian and believe your child has registered on the m888 Platform, please contact our support team immediately at [email protected]. We will investigate and act promptly.

m888 operates globally and your personal data may be processed on servers located outside of Pakistan. Where personal data is transferred internationally, m888 ensures that equivalent data protection safeguards are in place through the use of contractual protections, including standard data processing clauses that impose obligations on receiving parties equivalent to those in this Privacy Policy.

Third-party game software providers, payment processors, and KYC verification services that receive your data as described in Section 5 are each subject to written data processing agreements that prohibit them from processing your data for purposes other than those specified and from transferring it to further parties without m888's written authorisation.

m888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When a material change is made, m888 will notify registered Players by email and display a prominent notice on the Platform at least seven (7) days before the updated policy takes effect.

The "Last Reviewed" date at the top of this page reflects when the policy was most recently updated. We encourage you to review this Privacy Policy periodically. Your continued use of the m888 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way m888 handles your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly within the m888 Platform — average response time 3–5 minutes;
• Email: [email protected] — responses within 24 hours;
• Messenger: Available via the m888 Platform contact page.

Our Pakistani-fluent support team is available around the clock, including PSL matchdays and public holidays. All privacy-related correspondence is handled in English and treated with strict confidentiality.