This Privacy Policy explains how m888 (referred to as "m888", "we", "us", or "our") collects, stores, uses, and protects the personal information of anyone who registers for or uses the m888 platform at m888-play.com. It applies to all members and visitors, and it forms part of the wider agreement between you and m888 alongside our Terms and Conditions.
We know that privacy policies often read like something designed to be ignored. We've tried to write this one differently — in plain, direct English that actually tells you what's happening with your data. If anything in here is unclear, our support team is available 24/7 to explain it.
1Introduction
m888 is an online sports betting and gaming platform built specifically for players in Pakistan. Because our platform involves financial transactions and identity verification, we necessarily collect certain personal information from every registered member. This is unavoidable — you cannot have a secure, regulated betting account without some form of identity and payment verification.
What we can promise is that every piece of data we collect has a clear, specific purpose. We do not collect data speculatively, we do not build profiles to sell to advertisers, and we do not share your information in ways that aren't described in this policy. The m888 platform is built on the principle that Pakistani players deserve the same respect for their data privacy as players on any well-run international platform.
By registering an account on m888, or by continuing to use the platform after this policy has been updated, you confirm that you have read and understood this Privacy Policy. If you do not agree, you should not register or continue using m888.
2What Data We Collect
The information m888 collects falls into three broad categories: information you provide directly, information generated automatically by your use of the platform, and information provided to us by payment processors and verification partners.
| Data Category | Specific Examples | How Collected |
|---|---|---|
| Identity | Full name, date of birth, CNIC number (if verification requested), selfie/photo ID | Provided by you during registration or KYC |
| Contact | Mobile number, email address | Provided by you at registration |
| Financial | Easypaisa / JazzCash account number, bank account details (IBFT), card last four digits | Provided by you when making deposits or withdrawals |
| Activity | Bets placed, games played, deposit/withdrawal history, session durations, bonus usage | Automatically recorded by the platform |
| Technical | IP address, device type, browser, operating system, approximate location | Automatically collected via your connection to m888 |
| Communication | Support chat transcripts, WhatsApp messages to our support team, emails | Generated when you contact us |
Note on CNIC and ID documents: m888 only requests government-issued ID documents when a specific verification threshold is triggered (for example, for large withdrawals or when account security checks are required). This is not routine for all accounts, and documents provided are used solely for identity verification — they are not stored beyond the required retention period.
3Why We Collect This Data
Every data point m888 collects serves one or more of the following specific purposes. We do not collect data beyond what these purposes require.
- Account creation and management: Your name, mobile number, and password are necessary to create and secure your m888 account. Without these, there is no account to manage.
- Payment processing: Your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card details are required to process deposits to your account and withdraw your winnings back to you. We cannot pay you without knowing where to send the money.
- Identity verification: When large withdrawal amounts or risk signals trigger a verification check, ID documents are needed to confirm that the account holder is who they claim to be — this protects you against someone else accessing your account and withdrawing your funds.
- Security and fraud prevention: IP addresses, device information, and behavioural patterns help us detect unusual activity, such as a login from an unfamiliar device or location, which could indicate account compromise.
- Responsible gaming: Your betting activity and deposit history are monitored to identify patterns that may indicate a developing gambling problem. This data enables m888 to fulfil its responsible gaming obligations and, if necessary, reach out to you with supportive information.
- Customer support: Communication records allow the support team to help you more effectively — a support agent who can see your recent transaction history can resolve a deposit query much faster than one who cannot.
- Platform improvement: Aggregate, anonymised activity data helps us understand which features are working well and which need improvement. This is statistical analysis of patterns, not surveillance of individual users.
- Legal and regulatory compliance: Certain data must be retained for specified periods to comply with anti-money laundering obligations and financial record-keeping requirements.
4Legal Basis for Processing
m888 processes your personal data on the following legal grounds:
- Contractual necessity: Most data processing is required to fulfil our contract with you — to operate your account, process your payments, and provide the betting and gaming services you signed up for. Without this processing, the service cannot function.
- Legitimate interests: Security monitoring, fraud detection, and platform improvement are carried out based on m888's legitimate business interest in maintaining a secure and functional service. We balance these interests against your privacy rights and do not use this basis to justify unnecessary data collection.
- Legal obligation: Certain data retention and reporting obligations exist regardless of your or our preferences — these are imposed by anti-money laundering regulations and financial record-keeping requirements.
- Consent: Where we send optional marketing communications, we do so only with your explicit consent. You can withdraw this consent at any time.
5Who We Share Your Data With
m888 does not sell your personal data. We do not share it with advertisers, data brokers, or any third party that would use it for their own commercial purposes. The only sharing that occurs is with parties who help us deliver the m888 service to you, or who are legally entitled to receive it.
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank network operators receive the payment details necessary to process your deposit or withdrawal. They operate under their own privacy policies and are subject to Pakistani financial regulations.
- Identity verification providers: If a KYC check is required, your identity documents may be shared with a third-party verification service that processes the check on our behalf. This data is not retained by the provider beyond the verification process.
- Security and fraud prevention services: Technical data including IP addresses may be shared with security partners to identify and block fraudulent access attempts.
- Legal authorities: m888 will disclose data to law enforcement, regulatory bodies, or courts when required to do so by law, court order, or other legally binding obligation. We do not do this voluntarily or proactively beyond what is required.
- Internal teams: Your data is accessible within m888 on a need-to-know basis. A customer support agent can see your account and transaction history to help you. The trading team can see betting patterns relevant to market integrity. Access is restricted by role.
Cross-border transfers: Some of our technical service providers operate servers outside Pakistan. Where your data is transferred internationally, we ensure that appropriate protections are in place — including contractual data protection clauses — before any transfer occurs.
6Cookies and Tracking Technologies
m888 uses cookies and similar technologies to make the platform work correctly, to keep you logged in, and to understand how the platform is being used. Here is a breakdown of the cookie types we use:
You can manage or delete cookies through your browser settings. Deleting essential session cookies will log you out. Deleting analytics cookies will not affect your ability to use the platform in any way.
7How We Protect Your Data
m888 implements technical and organisational security measures designed to protect your data against unauthorised access, alteration, disclosure, or destruction. The key measures in place include:
- 256-bit SSL encryption on all data transmitted between your device and m888 servers. You will see "https" in the address bar whenever you are on m888 — this confirms the encrypted connection is active.
- OTP verification required for all withdrawal requests. Even if someone has your password, they cannot withdraw funds without access to your registered mobile number.
- Access controls ensuring that only authorised m888 staff with a specific role-based need can access sensitive member data. Support agents cannot access payment instrument details beyond what is required to verify a transaction.
- Encrypted storage of sensitive data including payment credentials. Card numbers and wallet account numbers are stored in encrypted form and are never transmitted or stored in plain text.
- Regular security audits of platform infrastructure and processes to identify and address vulnerabilities before they can be exploited.
- Staff training on data handling and privacy obligations. Every m888 team member who handles member data understands the sensitivity of that data and the procedures that govern its use.
No security system is completely infallible. In the unlikely event of a data breach that affects your personal information, m888 will notify affected members as promptly as possible and take all reasonable steps to contain and remediate the breach.
8How Long We Keep Your Data
m888 retains different categories of data for different lengths of time, based on how long that data is needed for the purpose it was collected for, and what legal obligations require.
- Account data (name, contact details, login credentials): Retained for the lifetime of your active account, plus a period of up to 5 years following account closure to comply with financial record-keeping obligations.
- Transaction records (deposits, withdrawals, betting history): Retained for a minimum of 5 years from the date of the transaction, as required by anti-money laundering regulations.
- Identity verification documents (CNIC copies, photos): Deleted as soon as the verification process is completed and the required retention period has passed — typically within 30 days of the verification outcome.
- Support communications (chat transcripts, emails): Retained for up to 2 years from the date of the last communication in a thread, to allow follow-up on unresolved issues.
- Technical data (IP addresses, session logs): Retained for up to 12 months for security and fraud detection purposes, then deleted or anonymised.
- Marketing consent records: Retained indefinitely to be able to demonstrate that you gave consent at a specific time, even if you subsequently withdraw that consent.
9Your Data Rights
As an m888 member, you have specific rights in relation to your personal data. These are not just policy commitments — they are genuine rights that you can exercise by contacting our support team.
To exercise any of these rights, contact the m888 support team via live chat, WhatsApp, or email at support@m888-play.com. We will acknowledge your request within 2 business days and complete it within 30 days. If your request is particularly complex or we receive multiple requests simultaneously, we may extend this by up to an additional 30 days — but we will let you know if that is the case.
10Children's Privacy
m888 is strictly an adult platform. We do not knowingly collect data from anyone under the age of 18. Our registration process includes an age confirmation step, and we may request age verification at any point if we have reason to suspect an account holder may be under 18.
If we become aware that a member is under 18, we will immediately suspend the account, void all bets placed during the underage period, return any deposited funds via the payment method used, and delete all personal data associated with the account to the extent permitted by law. If you believe a minor has created an account on m888, please contact our support team immediately.
11Marketing Communications
m888 may send you marketing communications about promotions, bonuses, new games, and other offers. We do this only with your explicit consent, which you can give or withdraw at any time.
- During registration: You will be given the option to consent to marketing messages via SMS and WhatsApp. This is entirely optional — declining will not affect your ability to use m888 in any way.
- Opting out: You can withdraw your marketing consent at any time by going to your account settings, or by replying "STOP" to any marketing SMS you receive from us, or by contacting support.
- Transactional communications: Messages about your actual account activity — deposit confirmations, withdrawal notifications, OTP codes, security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences. These are necessary for account security and cannot be opted out of while your account is active.
- Third-party marketing: Your contact details are never shared with third parties for their marketing purposes. We do not participate in data sharing schemes or joint marketing arrangements.
12Changes to This Privacy Policy
m888 reviews this Privacy Policy periodically and updates it when necessary to reflect changes in our practices, the features we offer, or the legal obligations we operate under. When we make material changes, we will notify registered members via the mobile number or email address associated with their account at least 7 days before the changes take effect.
The updated policy will always be available on this page with a revised "Last Updated" date at the top. If you continue to use m888 after a policy update takes effect, you are considered to have accepted the updated terms. If you do not agree with any updated terms, you have the right to close your account and request deletion of your non-mandatory data as described in Section 9.
We encourage you to check this page occasionally even when you haven't received a notification — minor wording clarifications or non-material updates may not trigger a formal notification, though the "Last Updated" date will always reflect any change.
13Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way m888 handles your personal data, please reach out to us. We take privacy queries seriously and will always respond promptly and helpfully.
- Email: support@m888-play.com — include "Privacy" in the subject line for faster routing.
- Live Chat: Available inside your m888 account 24/7 after login.
- WhatsApp: Contact details are available in your account dashboard.
For issues specifically relating to your responsible gaming tools or self-exclusion requests, please also visit our dedicated Responsible Gaming page which has additional contact options and guidance.