1 Introduction
This Privacy Policy ("Policy") describes how JM888, accessible at jm888.cam ("the Platform", "JM888", "we", "us", "our"), collects, processes, stores and shares personal data relating to users of the Platform ("you", "your", "User").
JM888 operates as an English-language online gaming information and services platform designed for adults. We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection standards. We do not sell your personal data to third parties for commercial gain.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. By accessing or using JM888, you acknowledge that you have read and understood this Policy.
Plain English Summary: We collect data needed to run your account, process transactions, verify your identity and comply with legal obligations. We protect that data using industry-standard security measures. We do not sell it. You have rights over your data and can exercise them by contacting us.
2 Definitions
For the purposes of this Policy, the following definitions apply:
- "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, IP address and financial account details.
- "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure or destruction.
- "Data Controller" means JM888, which determines the purposes and means of processing Personal Data.
- "Data Processor" means a third party that processes Personal Data on behalf of JM888 under contract and in accordance with our instructions.
- "KYC" means Know Your Customer — the identity and age verification process.
- "Cookies" means small text files stored on your device by a website to collect standard internet log information and visitor behaviour data.
- "Consent" means freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data.
- "CNIC" means Computerised National Identity Card — Pakistan's primary government-issued identity document.
3 Data We Collect
JM888 collects Personal Data through several means, including directly from you at registration, through your use of the Platform, and from third-party service providers. The categories of data we collect include:
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC or passport number, nationality | Registration form, KYC submission |
| Contact Data | Email address, phone number, city of residence (e.g., Karachi, Lahore, Islamabad) | Registration form, account settings |
| Financial Data | Payment method details, transaction history, deposit and withdrawal amounts in PKR or other currencies | Cashier transactions, payment processor data feeds |
| Technical Data | IP address, browser type, operating system, device identifiers, session data | Automatic collection via server logs and analytics |
| Usage Data | Pages visited, game sessions, bet history, time on site, click paths | Platform analytics, session tracking |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer support interactions |
| Verification Documents | CNIC copies, passport scans, utility bills, selfie or liveness check images | Secure KYC verification flow only |
Important: Identity documents (CNIC copies, passport scans) must only be submitted through the Platform's secure HTTPS verification system. Never send sensitive documents via unsecured email, third-party chat applications, or any channel other than the designated secure verification flow.
4 How We Process Your Data
JM888 processes your Personal Data for the following purposes:
4.1 Account Management
To create, maintain and administer your Account, including processing registrations, authenticating logins, updating account details and managing Account closure requests.
4.2 Identity & Age Verification (KYC)
To verify that you are who you say you are, that you meet the minimum age requirement (18+ or higher where required by the operator/license jurisdiction), and to comply with Anti-Money Laundering (AML) obligations. KYC processing may involve sharing data with third-party identity verification service providers under contractual data-processing agreements.
4.3 Transaction Processing
To process deposits, withdrawals and account adjustments. Transaction data is shared with payment processors as necessary to complete financial operations. Familiar Pakistan payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are mentioned as contextual references only — sharing of data with any specific payment provider occurs only as required to complete a transaction you have initiated, and does not constitute endorsement of gambling by those providers.
4.4 Fraud Prevention & Security
To detect and prevent fraudulent activity, unauthorised access, multi-accounting, money laundering and other prohibited conduct. This includes automated monitoring of account behaviour and transaction patterns.
4.5 Customer Support
To respond to your support requests, resolve complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
4.6 Marketing Communications
Where you have provided consent, to send you promotional offers, bonus notifications, sports betting updates (including Pakistan cricket and PSL season announcements) and platform news by email or other agreed channels. You may opt out of marketing communications at any time via your account settings or by contacting support.
4.7 Legal & Regulatory Compliance
To comply with applicable laws, respond to lawful requests from authorities, and fulfil obligations under the operator's licensing framework. JM888 does not claim to be regulated by the Government of Pakistan, the PTA or any Pakistani authority.
4.8 Platform Improvement & Analytics
To analyse usage patterns, improve Platform performance and user experience, conduct internal research, and optimise content. Analytical data is generally processed in aggregated and anonymised form where possible.
5 Legal Basis for Processing
JM888 processes Personal Data on the following legal grounds:
- Contractual Necessity: Processing required to perform the contract between you and JM888, including account management, transaction processing and KYC verification.
- Legal Obligation: Processing required to comply with applicable laws, including AML obligations, record-keeping requirements and responses to lawful authority requests.
- Legitimate Interests: Processing for fraud prevention, platform security, analytics and service improvement, where these interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications and certain non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 Data Sharing & Disclosure
JM888 does not sell your Personal Data. We may share your data only in the following limited circumstances:
- Identity Verification Providers: Third-party KYC and AML service providers engaged to perform identity checks, document verification and fraud screening under contractual data-processing agreements.
- Payment Processors: Financial institutions and payment gateway providers required to process your deposit and withdrawal transactions. Data shared is limited to what is necessary for transaction completion.
- Technology & Hosting Providers: Cloud infrastructure, hosting and platform-support service providers who process data on our behalf under data-processing agreements with appropriate security obligations.
- Analytics Providers: Web analytics services used to understand Platform usage, operating under data-processing agreements. Data is anonymised or pseudonymised where possible.
- Legal & Regulatory Authorities: Where required by law, court order, regulatory directive or to protect the rights and safety of JM888, its users or the public.
- Business Transfers: In the event of a merger, acquisition or asset sale, Personal Data may be transferred to a successor entity, subject to equivalent privacy protections.
No Third-Party Marketing Sale: JM888 does not share, sell or license your Personal Data to third parties for their own marketing or commercial purposes.
7 International Data Transfers
JM888 operates internationally, and your Personal Data may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.
Where Personal Data is transferred internationally, JM888 implements appropriate safeguards including contractual data-processing agreements with service providers, which incorporate standard data protection clauses or equivalent mechanisms to protect your data in transit and at the destination.
Users based in Pakistan should be aware that Pakistan does not currently have a comprehensive data protection law equivalent to international standards. By using the JM888 Platform, you acknowledge that your data may be processed in jurisdictions outside Pakistan. If you have concerns about international data transfers, please contact us before using the Platform.
8 Data Retention
JM888 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.
General Retention Principles
- Account data is retained for the duration of your active Account and for a defined period thereafter to comply with legal obligations.
- Financial transaction records are typically retained for a minimum of five years to comply with AML and financial reporting obligations.
- KYC documents are retained for the legally required minimum period under the operator's licensing obligations.
- Support communications are retained for a period sufficient to manage disputes and quality assurance, typically up to three years.
- Marketing consent records are retained until consent is withdrawn, plus a reasonable period to demonstrate compliance.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with JM888's data disposal procedures.
9 Cookies & Tracking Technologies
JM888 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be used:
9.1 Strictly Necessary Cookies
Essential for the Platform to function. These cannot be disabled as they enable core functionality such as session authentication, security controls and load balancing. No consent is required for strictly necessary cookies.
9.2 Functional Cookies
Remember your preferences such as language settings and region (e.g., Pakistan) to personalise your experience. These improve usability but are not essential to Platform operation.
9.3 Analytics Cookies
Collect anonymised or pseudonymised data about how users interact with the Platform — pages visited, session durations, click paths and game engagement. Used to improve Platform performance and content relevance.
9.4 Marketing Cookies
Used to track effectiveness of marketing campaigns and, where consent is given, to deliver relevant promotional content. Marketing cookies are only placed with your explicit consent.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impair Platform functionality. Guidance on managing cookies is available through your browser's help documentation.
10 Your Data Rights
Subject to applicable law and certain conditions, you hold the following rights regarding your Personal Data held by JM888:
Right of Access
Request a copy of the Personal Data JM888 holds about you and information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data held about you.
Right to Erasure
Request deletion of your Personal Data where there is no longer a lawful basis for its retention, subject to legal obligations.
Right to Restrict Processing
Request that JM888 limit the ways in which your Personal Data is processed while a dispute is being resolved.
Right to Data Portability
Request a structured, machine-readable copy of Personal Data you have provided to JM888 where technically feasible.
Right to Object
Object to processing based on legitimate interests or direct marketing, including profiling for marketing purposes.
Withdraw Consent
Withdraw any previously given consent to marketing communications or non-essential cookies at any time, without affecting prior processing.
Automated Decision-Making
Request human review of any significant decision taken about you solely through automated processing, including automated fraud checks.
To exercise any of the above rights, contact JM888 support at [email protected] (plain text — not a clickable link). We will respond to verified requests within a reasonable period in accordance with applicable obligations. We may require identity verification before processing a rights request to prevent unauthorised disclosure of Personal Data.
11 Data Security
JM888 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. Measures include but are not limited to:
- SSL/TLS encryption for all data transmissions between your device and the Platform
- Encrypted storage of sensitive Personal Data at rest
- Access controls restricting Personal Data access to authorised personnel only, on a need-to-know basis
- Regular security assessments and vulnerability testing of Platform infrastructure
- Two-factor authentication options available for User accounts
- Contractual security obligations imposed on all third-party Data Processors
Despite these measures, no internet-based transmission or electronic storage system is completely secure. JM888 cannot guarantee absolute security and will not be liable for breaches that result from circumstances beyond our reasonable control.
Your Responsibility: Keep your account credentials confidential. JM888 staff will never ask for your full password. Use a strong, unique password for your JM888 account and enable two-factor authentication where available. Report any suspected unauthorised access to [email protected] immediately.
12 Minors & Age Policy
The JM888 Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator/license jurisdiction. JM888 does not knowingly collect, process or store Personal Data relating to individuals below the applicable minimum age.
Age verification is conducted as part of the KYC process. Where JM888 becomes aware that Personal Data has been collected from a person below the minimum age, that data will be deleted promptly and the associated Account closed.
Meeting the minimum age requirement does not make gambling legally permitted in Pakistan. Local laws, including the Prevention of Gambling Act, 1977, may restrict or prohibit gambling activity regardless of age. This is not legal advice — users must assess the applicable law in their jurisdiction.
13 Pakistan User Context
JM888 is an English-language platform specifically designed for Pakistani users. This section addresses data privacy considerations particularly relevant to users located in Pakistan.
13.1 No Pakistani Regulatory Endorsement
JM888 is not regulated, licensed, endorsed or supervised by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, the Securities and Exchange Commission of Pakistan (SECP), or any provincial authority. Data processing obligations are governed by the laws of the jurisdiction in which JM888 holds its operating licence.
13.2 Payment Data — Pakistan Context
References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are made as familiar Pakistan payment context only. JM888 does not represent that these providers endorse gambling. If you use one of these services to fund your account, relevant transaction data will be shared with that payment provider solely to process your transaction — not for any other purpose, and not with JM888's endorsement of the provider's relationship with gambling.
13.3 CNIC Data Handling
Your CNIC (Computerised National Identity Card) number and document scans are some of the most sensitive Personal Data we may hold. They are collected only when required for KYC compliance, stored using secure encryption, accessed only by authorised verification personnel, and retained only for the legally required minimum period. You must submit CNIC data exclusively through the Platform's designated secure HTTPS KYC flow — never by email, WhatsApp or any other unsecured channel.
14 Policy Amendments
JM888 reserves the right to update this Privacy Policy at any time. When material changes are made, we will endeavour to provide reasonable advance notice via a notification on the Platform or by email to the address registered on your Account.
The updated Policy will be effective from the date published, identified by the revised Effective Date at the top of this document. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
We encourage you to review this Policy periodically to stay informed about how JM888 handles your Personal Data. The current version will always be accessible at jm888.cam/privacy-policy.
15 Contact Us & Data Enquiries
For any privacy-related queries, to exercise your data rights, or to raise a concern about how your Personal Data is handled, please contact the JM888 team:
Support & Data Enquiries
Email (plain text — not a link): [email protected]
Please include "Privacy Request" or "Data Rights" in the subject line of your message to ensure it is routed to the correct team. We will respond to verified requests within a reasonable timeframe in accordance with applicable obligations.
Please do not include sensitive documents (CNIC copies, passport scans) in email correspondence. Submit all identity documents through the secure HTTPS verification flow in your account only.
Response Timeframes
JM888 aims to acknowledge data rights requests promptly and to provide a substantive response within 30 days of receipt. Complex requests or high-volume periods (such as PSL season or ICC tournament windows) may require additional time — we will notify you if an extension is necessary.
Phishing Warning: JM888 will never contact you to request your full password, full CNIC number or banking credentials via email. Any unsolicited communication requesting such information should be treated as a phishing attempt. Report suspected phishing to [email protected].