Your privacy is not an afterthought at m888 — it is a foundational part of how we built the platform. This Privacy Policy explains exactly what personal information we collect from Pakistani players, why we collect it, how we store and protect it, and what rights you have over your own data.
Before you read the full policy, here are six key commitments that define how m888 handles your personal data.
All data transmitted between your device and m888 is encrypted using TLS 1.3. Your stored account data — including payment details and personal records — is encrypted at rest using AES-256. No data leaves m888 servers in plaintext.
m888 does not sell, rent, or trade your personal data to third-party marketing companies. Your name, mobile number, payment history, and gaming behaviour are never packaged and sold. Full stop.
m888 collects only the personal information that is genuinely necessary to operate the platform, process your payments, comply with legal obligations, and keep your account secure. We do not ask for data we do not need.
Access to your personal data within m888 is restricted to staff who genuinely need it to perform their job — support agents, compliance team, payments team. All staff access is logged, audited, and subject to strict confidentiality obligations.
You have the right to access, correct, or request deletion of your personal data at any time. You can also object to certain processing activities or request a copy of your data in a portable format. All requests are handled within 30 days.
m888 does not hold your data indefinitely. Account data is retained for the duration of your active relationship with m888 plus a legally required retention period after closure. Data no longer needed is securely deleted or anonymised.
This Privacy Policy is issued by m888, the operator of the online gaming and sports betting platform accessible at m888-khelo.com ("m888," "we," "us," "our"). m888 is operated by a licensed entity and provides online gaming services including sports betting (cricket, football, and others), casino games (Roulette, Teen Patti, Ludo, Crash Games), and related features to registered players in Pakistan.
As a data controller, m888 determines the purposes and means of processing the personal data of its registered players and website visitors. This Privacy Policy applies to all personal data collected through the m888 website, mobile browser experience, customer support channels, and any other interaction you have with the m888 platform or its representatives.
For any privacy-related queries, you can contact the m888 data protection team at privacy@m888-khelo.com. We aim to respond to all substantive privacy enquiries within five working days.
m888 collects personal data from you in several ways. The table below gives a clear picture of what we collect, when we collect it, and why it is necessary.
| Category | Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | Registration / KYC verification |
| Contact Data | Pakistani mobile number, email address | Registration & account updates |
| Financial Data | Payment method details (Easypaisa number, JazzCash number, bank account IBAN, card last 4 digits), transaction history | Deposit / withdrawal processing |
| Technical Data | IP address, device type, browser type & version, operating system, session timestamps | Automatically on each login/session |
| Gameplay Data | Bets placed, games played, game outcomes, session duration, wager amounts, win/loss history | During active gameplay |
| Communication Data | Support chat transcripts, email correspondence, complaint records | When you contact m888 |
| Verification Documents | CNIC copy, passport scan, or driving licence scan (where KYC is required) | KYC verification process |
Registration information, payment details, verification documents, and support communications are all data you provide directly to m888. Without this data, m888 cannot open an account for you, process your transactions, or provide customer support.
When you access the m888 platform, certain technical data is collected automatically by our servers. This includes your IP address (which gives us a general idea of your geographic location within Pakistan), your device and browser characteristics, and the pages and features you interact with during each session. This data helps us keep the platform secure and improve the user experience.
m888 does not collect or process sensitive personal data beyond what is strictly necessary for identity verification. We do not process racial or ethnic origin data, religious beliefs, political opinions, biometric data, or health information as part of normal platform operations.
m888 uses your personal data only for purposes that are relevant, proportionate, and clearly justified. The table below summarises how we use each category of data.
Your identity and contact data is used to create, maintain, and secure your m888 account. This includes sending account confirmation messages via OTP to your registered mobile number, notifying you of important account activity (such as login from a new device), and enabling you to recover access to your account if your credentials are lost.
Your financial data is used exclusively to process deposits and withdrawals via your chosen payment method — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard. m888 does not store full card numbers or full bank account details — only the minimum reference information needed to identify your payment method for withdrawals. Full payment credentials are handled by our certified payment processor partners.
Pakistani and international anti-money laundering regulations require m888 to verify the identity of players above certain transaction thresholds. Your identity documents (CNIC, passport, or driving licence) are used for this purpose only. Verification data is stored securely and not shared with third parties except where legally required by regulatory authorities.
Technical data — including IP addresses, device fingerprints, and session patterns — is analysed by m888's automated security systems to detect suspicious activity, including duplicate account creation, bot usage, unusual login patterns, and potential payment fraud. This processing protects all m888 players from fraudulent activity that could compromise the integrity of the platform.
Gameplay data — including session duration, wager amounts, win/loss patterns, and deposit frequency — is analysed by m888's responsible gaming systems to identify players who may be showing signs of problem gambling. Where our systems flag a concern, a trained member of the m888 team may reach out to offer support. This processing is done to protect player welfare and is a condition of m888's operating licence.
Communication data (support transcripts and email records) is retained so that m888 can maintain continuity in your support experience — ensuring that when you contact us again, our team has full context of your previous interactions and does not ask you to repeat yourself.
Aggregated and anonymised gameplay and technical data is used to understand how Pakistani players use the m888 platform — which features are most used, where friction occurs in the deposit flow, how long games sessions typically last. This analysis helps m888 prioritise product improvements. No individual player is identified in this type of analysis.
m888 processes your personal data only where a valid legal basis exists. The following bases apply to our processing activities:
m888 does not sell your personal data to any third party. We share your personal data only with the following categories of organisations, and only to the extent strictly necessary for the stated purpose:
Financial privacy is especially important to m888's Pakistani players. Given that many players use their primary mobile wallet (Easypaisa, JazzCash) or main bank account for transactions, we treat payment data with the highest level of care.
m888 stores only the minimum payment reference information needed to enable withdrawals back to your registered payment method. For mobile wallets this means your registered mobile number. For bank transfers this means your bank account name and IBAN. For cards this means the last four digits, card type, and expiry month/year. Full card numbers are never stored on m888 servers — they are tokenised by our PCI-DSS compliant payment processor at the point of entry.
A record of all your deposits and withdrawals on m888 is retained in your account history. This record is available to you at any time via your account dashboard. Transaction records are also retained by m888 for regulatory compliance purposes for a period of five years following the date of each transaction.
As required by applicable regulations, m888 monitors transaction patterns for indicators of money laundering or financial crime. This monitoring is automated and uses risk-scoring models. It does not involve manual review of your account unless a threshold is triggered. Flagged accounts are reviewed by m888's compliance team. Where a suspicious activity report is required, this will be filed with the relevant authority without prior notification to you, as required by law.
m888 uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to remember your session and preferences, and to understand how players interact with different features. Below is a straightforward breakdown of the types of cookies m888 uses:
m888 does not use third-party advertising or retargeting cookies. You will not be served m888 advertisements on other websites based on your m888 browsing activity.
m888 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Security is not a single feature — it is a layered system of controls that operates continuously.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, m888 will notify affected players without undue delay and will take immediate steps to contain the breach, assess its impact, and prevent recurrence. Where required by applicable regulations, relevant authorities will also be notified within the required timeframe.
m888 retains your personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law. The following retention schedule applies:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal/AML obligation |
| KYC / identity documents | Duration of account + 5 years post-closure | Regulatory requirement |
| Transaction records (deposits & withdrawals) | 5 years from date of transaction | Financial regulation |
| Gameplay records | Duration of account + 2 years post-closure | Responsible gaming / dispute resolution |
| Customer support communications | 3 years from date of last interaction | Legitimate interest (dispute resolution) |
| Technical / session logs | 90 days | Security monitoring |
| Marketing consent records | Duration of consent + 1 year | Legal compliance |
When the retention period for any category of data expires, m888 will either securely delete the data or anonymise it so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for statistical purposes.
You have meaningful rights over your personal data. m888 respects these rights and has processes in place to handle each type of request efficiently. Here is what you are entitled to:
Request a copy of all personal data m888 holds about you. Fulfilled within 30 days.
Request correction of inaccurate personal data in your m888 account.
Request deletion of your data where we no longer have a legal basis to retain it.
Object to processing of your data based on legitimate interests, including profiling.
Request your personal data in a structured, machine-readable format.
Request that m888 restricts processing of your data while a dispute is resolved.
To exercise any of these rights, please email privacy@m888-khelo.com with "Data Rights Request" in the subject line, along with your registered mobile number and a brief description of your request. We will acknowledge receipt within 3 working days and fulfil the request within 30 days. In certain cases involving complex requests or large volumes of data, we may extend the response time by a further 30 days — we will notify you if this is necessary.
Please note that some rights are not absolute. For example, the right to erasure does not apply to data that m888 is legally required to retain under anti-money laundering regulations. Where we cannot fully comply with a request, we will explain the reason clearly.
m888 is strictly an adult platform. We do not knowingly collect, store, or process personal data from any person under the age of 18. Our registration process includes age declaration and our KYC verification process is designed to detect and prevent underage registration.
If m888 discovers or is notified that personal data has been collected from a person under 18, all data associated with that individual will be deleted immediately and the account closed. Any funds associated with an underage account will be handled in accordance with applicable regulations.
If you are a parent or guardian and believe your child may have created an m888 account, please contact us immediately at support@m888-khelo.com with the registered mobile number. We will investigate and act promptly.
m888 primarily stores and processes player data on servers located in data centres serving the South Asian region. However, some of our third-party service providers — including certain game providers and technology infrastructure partners — may be located in other countries. Where your personal data is transferred outside Pakistan, m888 ensures that appropriate safeguards are in place to protect your data to the same standard as applies within Pakistan.
These safeguards include contractual clauses requiring third parties to protect your data in line with the standards described in this Privacy Policy, and selection of service providers who operate under internationally recognised data protection frameworks. If you would like more information about the specific safeguards in place for any particular transfer, please contact us at privacy@m888-khelo.com.
m888 reviews and updates this Privacy Policy periodically to reflect changes in the platform, our data processing activities, or applicable legal requirements. When we make significant changes to this policy — meaning changes that materially affect how your personal data is processed or your rights as a player — we will notify you via email to your registered address and/or via a prominent notice on the m888 platform.
Minor clarifications or typographical corrections may be made without prior notice. The version number and "Last Updated" date at the top of this document will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically.
Your continued use of the m888 platform after any update to this Privacy Policy constitutes your acknowledgement of the updated terms. If you object to any change, you should stop using m888 and may request account closure via customer support.
For any question, concern, or request relating to your personal data and this Privacy Policy, please reach out through the following channels:
When submitting a privacy request by email, please include your registered mobile number, the nature of your request, and any relevant details. All privacy correspondence is treated with strict confidentiality and handled exclusively by m888's data protection team.
For matters relating to your gaming account, promotions, payments, or general questions, please use the main support channel rather than the privacy email address to ensure you receive the fastest possible response. You can also review the FAQ page for answers to common questions about your m888 account.
Register in under two minutes. Deposit from Rs 200 via Easypaisa or JazzCash. Play cricket betting, Teen Patti, crash games and more — with the full confidence that your data is handled with care.