This Privacy Policy explains how gm888 collects, uses, stores, shares, and protects the personal data of Players who register and use the gm888 platform at gm888.vu. gm888 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles as required under its international gaming license obligations. Please read this policy carefully before registering a gm888 account.
Six core principles that define how gm888 handles your personal data
gm888 collects only the personal data that is strictly necessary for account registration, KYC identity verification, payment processing, and regulatory compliance. We do not collect data for its own sake. Every data field we ask you to provide has a specific, documented purpose tied to the operation of a licensed online gaming platform.
Personal data collected by gm888 is used only for the purposes disclosed in this Privacy Policy. gm888 does not repurpose your data for unrelated commercial uses without obtaining your explicit consent. Your CNIC details collected for KYC verification are used for identity checks — they are not used for marketing profiling or sold to third-party data brokers.
All personal data held by gm888 is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest on secured servers. Access to Player personal data is restricted to gm888 staff and authorised partners who have a legitimate operational need. gm888 conducts regular security audits as part of its international gaming license obligations.
This Privacy Policy documents every category of personal data gm888 collects, every purpose for which it is used, and every category of third party with whom it is shared. gm888 will notify registered Players of any material changes to this policy prior to those changes taking effect, giving you the opportunity to review and, if necessary, close your account before the changes apply.
Pakistani Players have the right to access copies of their personal data held by gm888, correct inaccurate records, and — subject to applicable legal and regulatory retention requirements — request deletion of their data. gm888 responds to all data rights requests within 30 days and provides a clear resolution or a reasoned explanation where a request cannot be fulfilled.
gm888 does not sell, rent, or trade your personal data to third-party commercial entities for purposes unrelated to the operation of the gm888 platform. Data is shared only with service providers who perform functions on gm888's behalf — such as KYC verification partners, payment processors including JazzCash and EasyPaisa, and certified RNG auditors — under strict contractual data protection obligations.
gm888 is an internationally licensed online gaming platform operating at gm888.vu. For the purposes of this Privacy Policy, gm888 acts as the data controller in respect of personal data collected from Players who register and use the gm888 platform.
As a licensed gaming operator, gm888 is subject to regulatory requirements imposed by its international gaming license authority, which include obligations to collect, retain, and in certain circumstances disclose Player data to the relevant licensing and law enforcement authorities. This Privacy Policy explains how those obligations interact with gm888's commitment to Player data protection.
gm888 collects the following categories of personal data from Players:
The majority of personal data gm888 holds about you is provided directly by you during the account registration process, the KYC verification process, when making deposits or withdrawal requests, when contacting gm888 support, and when updating your account profile settings.
When you access the gm888 platform, technical data including your IP address, device information, and session activity is automatically collected by gm888's servers and analytics systems. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
Where gm888 uses third-party KYC and identity verification services, those services may return verification results and flags to gm888 as part of the verification process. gm888 may also receive data from payment processors — including JazzCash and EasyPaisa — confirming the status and outcome of deposit and withdrawal transactions.
gm888 uses cookies and similar tracking technologies on the gm888.vu website to maintain session state, remember login preferences, and collect analytics data. A full description of cookies used by gm888 is provided in Section 9 of this Privacy Policy.
gm888 processes your personal data on the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity — required to deliver gm888 services |
| KYC identity and age verification | Legal obligation — required under international gaming license conditions |
| Processing deposits and withdrawals | Contractual necessity — required to operate the payment cashier |
| Anti-money laundering (AML) checks | Legal obligation — required under gaming license and financial crime regulations |
| Responsible gaming monitoring | Legal obligation and legitimate interest — required under license and for Player protection |
| Fraud detection and security monitoring | Legitimate interest — protection of gm888 platform integrity and Player funds |
| Marketing communications (where opted in) | Consent — only where you have explicitly opted in to receiving marketing messages |
| Platform analytics and performance improvement | Legitimate interest — improving gm888 services for all Players |
| Compliance with regulatory information requests | Legal obligation — compliance with gaming license authority requirements |
gm888 uses your identity and contact data to create and maintain your account, authenticate your login sessions, send account-related notifications (such as deposit confirmations, withdrawal status updates, and security alerts), and respond to support queries submitted via live chat or email.
gm888 uses identity data — including your CNIC details, date of birth, and supporting documents — to verify that you are who you say you are and that you are 21 years of age or older. This verification is a mandatory requirement of gm888's international gaming license and cannot be waived. Without completing KYC verification, withdrawal requests cannot be processed.
Financial data — including your JazzCash number, EasyPaisa number, or bank account details — is used solely to process deposits to and withdrawals from your gm888 account. gm888 stores payment method data in encrypted form and uses it only for transactions initiated by you. gm888 never initiates unsolicited transactions on your payment accounts.
gm888 is required under its international gaming license to monitor transactions for indicators of money laundering and to report suspicious activity to relevant authorities where legally required to do so. Transaction monitoring is conducted using automated systems and, in certain cases, manual review. Players may be asked to provide source-of-funds documentation for large transactions as part of this compliance process.
gm888 uses gaming activity data — including bet frequency, session duration, deposit patterns, and self-reported responsible gaming tool settings — to monitor for signs of problem gambling behaviour and to enforce responsible gaming limits set by Players. Where gm888 identifies concerning patterns, our responsible gaming team may make proactive contact with the Player concerned.
Technical data including IP addresses, device fingerprints, and login patterns is used by gm888 to detect and prevent fraudulent account access, multi-accounting, bonus abuse, and other prohibited conduct as defined in the gm888 Terms & Conditions.
gm888 will only send you marketing communications — including promotional emails, SMS notifications about bonuses, and in-platform promotional messages — where you have explicitly opted in to receiving such communications during registration or through your account preference settings.
You may withdraw your consent to receive marketing communications from gm888 at any time by updating your communication preferences in your account dashboard, by clicking the unsubscribe link included in any gm888 marketing email, or by contacting gm888 support at [email protected] and requesting removal from marketing lists. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Withdrawal of marketing consent does not affect gm888's ability to send you service-related communications that are necessary for the administration of your account, such as deposit confirmations, withdrawal notifications, KYC request notifications, security alerts, and mandatory responsible gaming notifications.
gm888 shares Player personal data only in the following circumstances:
gm888 shares personal data with carefully selected third-party service providers who perform operational functions on gm888's behalf. All such providers are bound by contractual data processing agreements that restrict their use of your data to the specific service they provide for gm888. These providers include:
gm888 may be required by its international gaming license authority, law enforcement agencies, or other regulatory bodies to disclose Player data as part of an investigation, audit, or regulatory review. gm888 will comply with all lawful data disclosure requests from competent authorities. Where legally permitted to do so, gm888 will notify the affected Player of a disclosure request.
In the event of a merger, acquisition, or sale of all or substantially all of gm888's business assets, Player personal data may be transferred to the acquiring entity as part of that transaction. gm888 will notify registered Players of any such transfer and ensure that the acquiring entity is bound by data protection obligations at least equivalent to those in this Privacy Policy.
gm888 does not sell, rent, or lease Player personal data to third parties for commercial purposes unrelated to the operation of the gm888 platform. Your data is an asset used to serve you — not a revenue stream to be monetised through external sale.
Given that gm888 is a platform specifically designed for Pakistani players, this section addresses data handling practices specific to Pakistani payment methods:
When you use JazzCash to deposit or withdraw on gm888, your registered JazzCash mobile number and the transaction reference number generated by JazzCash are stored by gm888 for transaction reconciliation, dispute resolution, and AML compliance purposes. gm888 does not store your JazzCash PIN or any authentication credentials associated with your JazzCash account.
The same data handling approach applies to EasyPaisa transactions. gm888 stores your registered EasyPaisa mobile number and transaction reference numbers. gm888 does not store your EasyPaisa MPIN or wallet login credentials at any point in the payment process.
For withdrawals processed via HBL, UBL, or Meezan Bank, gm888 stores your bank account name, account number, and IBAN as provided during the withdrawal request. This data is used exclusively to process that specific withdrawal and is retained in transaction records for the period specified in Section 11 of this Policy. gm888 does not store your online banking login credentials.
Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work correctly, remember your preferences, and provide website operators with analytics information about how their site is being used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Session Cookies | Maintain your authenticated login session on gm888. Without these cookies, you would be logged out on every page load. | Session (deleted on browser close) |
| Security Cookies | Used by gm888's fraud detection system to identify anomalous login patterns and flag potentially unauthorised access attempts. | Up to 30 days |
| Preference Cookies | Remember your language preference, display settings, and game lobby filters so that your chosen settings persist across sessions. | Up to 12 months |
| Analytics Cookies | Collect anonymised data about how Players navigate the gm888 platform — which pages are visited, how long is spent on each page, and which features are used most. This data is used to improve the gm888 user experience. | Up to 24 months |
| Responsible Gaming Cookies | Support the delivery of session time reminders and reality check notifications to Players who have enabled these responsible gaming tools in their account settings. | Session |
You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential session cookies will prevent you from logging in to your gm888 account. Disabling security cookies may affect gm888's ability to protect your account from unauthorised access. Instructions for managing cookies are available in your browser's help documentation.
gm888 implements the following technical and organisational security measures to protect your personal data:
Despite these measures, no internet transmission or electronic storage system is completely secure. Players are encouraged to maintain strong, unique passwords for their gm888 accounts and to enable two-factor authentication to reduce the risk of unauthorised access.
gm888 retains personal data for the periods described below. These retention periods reflect gm888's contractual obligations to Players, its legal obligations under its international gaming license, and applicable financial record-keeping requirements:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Gaming license compliance, AML regulations |
| KYC identity documents | Duration of account + 5 years after closure | Regulatory requirement under gaming license |
| Financial transaction records | Duration of account + 7 years after closure | AML compliance and financial record-keeping |
| Gaming activity records | Duration of account + 3 years after closure | Dispute resolution, responsible gaming monitoring |
| Support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming enforcement obligation |
| Marketing consent records | Until consent withdrawn + 3 years | Evidence of consent basis for marketing |
| Technical / log data | 13 months | Security monitoring, fraud investigation |
After the applicable retention period expires, gm888 will securely delete or anonymise your personal data. Anonymised data — from which all personally identifying information has been irreversibly removed — may be retained indefinitely for aggregate analytics purposes.
As a Player on gm888, you have the following rights in relation to your personal data:
You have the right to request a copy of the personal data that gm888 holds about you. gm888 will provide this information within 30 days of receiving a verified request. The data will be provided in a commonly used electronic format.
If any personal data gm888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many account details directly through your gm888 account settings. For changes to identity information (such as your legal name following a deed poll or marriage), please contact gm888 support with supporting documentation.
You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. However, gm888 is required under its international gaming license to retain certain categories of data (particularly KYC and financial transaction records) for specified periods even after account closure. Where a deletion request cannot be fully fulfilled due to legal retention obligations, gm888 will explain which data must be retained and why.
You have the right to request that gm888 restricts its processing of your personal data in certain circumstances, such as where you contest the accuracy of data held or where processing is unlawful but you prefer restriction to deletion.
Where gm888 processes your personal data on the basis of your consent or a contract with you, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, machine-readable format suitable for transfer to another service provider.
You have the absolute right to object to gm888 processing your personal data for direct marketing purposes at any time. See Section 6 for instructions on how to withdraw marketing consent.
To exercise any of the rights described above, please contact gm888 at [email protected] with the subject line "Data Rights Request". gm888 will acknowledge your request within 5 business days and provide a substantive response within 30 days. Identity verification will be required before any data is disclosed or deleted.
gm888 services are strictly restricted to individuals aged 21 and above. gm888 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the gm888 account lifecycle and is enforced before any withdrawal is processed.
If gm888 discovers that personal data has been collected from an individual who is under 21 years of age, that account will be immediately closed, the data will be deleted (subject to any applicable regulatory retention requirements relating to the detection of underage gambling), and deposits will be returned to the payment method used, with any gaming winnings forfeited.
If you are a parent or guardian and believe that a minor under your care has registered a gm888 account, please contact gm888 support immediately at [email protected]. gm888 takes underage gambling prevention extremely seriously and will act on all such notifications as a matter of priority.
As an internationally licensed gaming platform, gm888 may transfer personal data to servers and service providers located in jurisdictions outside Pakistan. Where such transfers occur, gm888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.
These safeguards may include contractual data protection clauses binding the receiving party to data protection standards, transfers only to jurisdictions that maintain data protection regimes recognised as adequate by relevant international standards, and the use of anonymised or pseudonymised data wherever the full transfer of personal data is not operationally necessary.
KYC identity verification data submitted by Pakistani Players — including CNIC copies and selfie photographs — may be processed by gm888's third-party KYC verification partner's servers. gm888 ensures that all such providers are contractually bound to process this data solely for the KYC verification purpose and to delete source documents following completion of the verification process in accordance with their own documented retention schedules.
The gm888 platform integrates with third-party services to deliver a complete gaming experience. These include live dealer game studio providers, certified slot game software providers, sportsbook data feed providers, and the payment processing integrations for JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
Each of these third-party providers operates under its own privacy policy and data processing terms. gm888 selects providers that maintain data protection standards consistent with gm888's own obligations, and where gm888 shares Player data with these providers, it does so under contractual data processing agreements as described in Section 7.1.
gm888 is not responsible for the privacy practices of third-party providers operating their own independent platforms, services, or websites that are not under gm888's direct control. If you follow a link from gm888 to a third-party service, you should read that service's privacy policy independently.
gm888 may update this Privacy Policy periodically to reflect changes in data processing practices, changes to regulatory requirements under gm888's international gaming license, or improvements to data protection standards. The current version of this Privacy Policy is always accessible at gm888.vu/privacy-policy.
Where changes to this Privacy Policy are material — such as the introduction of a new category of data collection or a new purpose for which existing data will be used — gm888 will notify registered Players via email or in-platform notification at least 14 days before the changes take effect. The notification will summarise the material changes and link to the full updated policy.
Your continued use of gm888 services following the effective date of any material update constitutes your acknowledgement of the revised Privacy Policy. If you do not accept the revised policy, you should contact gm888 support to close your account before the effective date of the changes.
For all privacy-related questions, data access requests, or concerns about how gm888 handles your personal data, please contact the gm888 data protection team:
If you have a concern about how gm888 has handled your personal data, please contact gm888 support in the first instance. gm888 aims to resolve all privacy complaints within 10 business days. Where a complaint cannot be resolved to your satisfaction by gm888's internal process, you may escalate your complaint to the data protection authority in the jurisdiction of gm888's international gaming license. gm888 will cooperate fully with any regulatory investigation arising from a Player complaint.
Now that you understand how gm888 protects your privacy, you can play with confidence. PSL cricket betting, 500+ slots, and 80+ live dealer tables — all secured with bank-grade encryption and transparent data handling.
Sign In to gm888 Learn About Responsible Gaming