z888 Privacy Policy

1.1 This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by z888 in connection with the z888 platform accessible at https://z888.lat and any associated mobile applications or services (collectively, "the z888 Platform").

1.2 This Policy applies to all registered users of the z888 Platform, including individuals who have registered an account, individuals who have commenced but not completed the registration process, and visitors who interact with the z888 Platform without registering.

1.3 By using the z888 Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Privacy Policy, you should not use the z888 Platform.

1.4 This Policy should be read in conjunction with the z888 Terms and Conditions, which govern your use of the z888 Platform generally.

2.1 For the purposes of applicable data protection legislation, z888 acts as the data controller in respect of personal data collected through the z888 Platform. As data controller, z888 determines the purposes and means of processing your personal data.

2.2 Where z888 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification services, or customer support platforms), those providers act as data processors under z888's instructions and are bound by contractual data processing agreements.

2.3 For data protection enquiries, please contact z888 at the contact details provided in Section 14 of this Policy.

3.1 z888 collects personal data through multiple channels, including account registration forms, KYC verification submissions, payment transactions, customer support interactions, and automated technical mechanisms.

3.2 z888 does not knowingly collect or process data relating to individuals under the age of 18. If z888 becomes aware that data has been collected from an individual under 18, the associated account will be closed and data deleted in accordance with z888's retention policy.

4.1 z888 uses personal data collected from users for the following purposes:

• Account Administration: Creating and maintaining your z888 account, verifying your identity, and managing your account settings and preferences;
• Service Delivery: Enabling access to z888 casino games, sports betting markets, and other platform features; processing PKR deposits and withdrawals via JazzCash, Easypaisa, and banking partners;
• KYC & AML Compliance: Verifying your identity and age in compliance with Know Your Customer obligations; monitoring transactions for anti-money-laundering compliance;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account abuse, and security breaches; monitoring for prohibited conduct under the z888 Terms and Conditions;
• Customer Support: Responding to enquiries, complaints, and support requests; maintaining records of support interactions;
• Responsible Gaming: Monitoring gaming behaviour to identify patterns associated with problem gambling; administering responsible gaming tools including deposit limits and self-exclusion;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may opt out at any time via your account settings;
• Platform Improvement: Analysing usage data to improve z888 platform performance, game selection, and user experience;
• Legal Obligations: Complying with applicable legal and regulatory requirements, including responding to lawful requests from competent authorities.

5.1 z888 processes personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between z888 and the User — including account registration, payment processing, game access, and customer support;
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and responsible gaming obligations;
• Legitimate Interests: Processing necessary for z888's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by the User's rights and interests;
• Consent: Processing based on your specific, informed, and freely given consent — primarily for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6.1 z888 uses cookies and similar tracking technologies on the z888 Platform. Cookies are small text files stored on your device when you visit a website. z888 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential to the operation of the z888 Platform, including session management, authentication, and security. These cannot be disabled without affecting platform functionality;
• Performance & Analytics Cookies: Used to collect anonymised data about how users interact with the z888 Platform, enabling z888 to improve performance and user experience;
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and session persistence options;
• Marketing Cookies: Used only where you have provided consent to receive targeted promotional communications.

6.2 You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to use the z888 Platform. Detailed cookie information is available on request from z888 support.

7.1 z888 does not sell personal data to third parties. z888 may share personal data with the following categories of recipients where necessary:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and any other payment service providers used to process PKR deposits and withdrawals. Data shared is limited to what is necessary to process the transaction;
• Identity Verification Providers: Third-party KYC and AML service providers used to verify user identity and age in compliance with regulatory requirements;
• Game Content Providers: Gaming studios and content providers whose games are available on the z888 Platform may receive anonymised or pseudonymised game session data for certification and auditing purposes;
• Customer Support Platforms: Third-party platforms used to deliver live chat and email ticket support services may process support interaction data as data processors under z888's instructions;
• IT & Infrastructure Providers: Cloud hosting and infrastructure providers that host the z888 Platform may process technical data in the course of providing their services;
• Regulatory & Law Enforcement Authorities: z888 may disclose personal data to competent regulatory, judicial, or law enforcement authorities where required by law or where z888 has a good-faith belief that disclosure is necessary to prevent or investigate illegal activity.

7.2 All third-party processors engaged by z888 are bound by data processing agreements that restrict their use of personal data to the specific purpose for which it was shared and require them to maintain appropriate security measures.

8.1 z888 operates internationally, and personal data may be transferred to and processed in countries outside Pakistan where z888's servers, infrastructure providers, or third-party processors are located.

8.2 Where personal data is transferred internationally, z888 takes appropriate safeguards to ensure that the transfer is conducted lawfully and that your data receives an adequate level of protection, including through the use of contractual data processing agreements incorporating applicable standard contractual clauses or equivalent transfer mechanisms.

8.3 By using the z888 Platform, you acknowledge that your personal data may be transferred internationally as described in this Policy.

9.1 z888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account Data: Retained for the duration of account activity and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of last transaction, whichever is later;
• Financial Transaction Records: Retained for a minimum of five (5) years in compliance with applicable financial regulation;
• Gaming Activity Records: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes;
• Customer Support Records: Retained for a minimum of two (2) years for quality assurance and dispute resolution;
• Technical Logs: Retained for a maximum of twelve (12) months unless retention is required for ongoing security investigations or legal proceedings.

9.2 Where personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, z888 will securely delete or anonymise the data.

10.1 z888 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Security measures in place at z888 include:

• Encryption in Transit: All data transmitted between your device and the z888 Platform is encrypted using TLS/SSL (256-bit) encryption;
• Password Security: Account passwords are stored using industry-standard one-way cryptographic hashing. z888 does not store or have access to your plaintext password;
• Access Controls: Personal data is accessible only to z888 personnel and authorised processors who require access for legitimate business purposes, and only to the extent necessary;
• Infrastructure Security: z888 servers are hosted in secure data centres with physical and logical access controls, regular security patching, and network-level intrusion detection;
• Regular Testing: z888 conducts periodic security assessments, vulnerability scanning, and penetration testing.

10.2 Notwithstanding the above, no security system is completely impenetrable. z888 cannot guarantee the absolute security of your data but is committed to maintaining robust safeguards and responding promptly to any identified security incidents.

10.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, z888 will notify affected users without undue delay, in accordance with applicable data protection obligations.

11.1 Subject to applicable law, you have the following rights in respect of your personal data held by z888:

• Right of Access: You have the right to request a copy of the personal data z888 holds about you. z888 will respond to access requests within 30 days;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Many data fields (such as contact details) can be updated directly within your z888 account settings;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to z888's legal retention obligations under AML and financial regulation;
• Right to Restrict Processing: You have the right to request that z888 temporarily restrict processing of your personal data while a rectification or objection request is being assessed;
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to z888 in a structured, machine-readable format;
• Right to Object: You have the right to object to processing of your personal data based on z888's legitimate interests, including for direct marketing purposes. Objecting to direct marketing will result in immediate cessation of that processing;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of the above rights, please contact z888 support using the contact details in Section 14. z888 may require identity verification before processing data subject requests to protect against unauthorised access to personal data.

12.1 z888 employs mandatory age verification through KYC procedures to prevent underage access. All users are required to submit a government-issued identity document confirming date of birth before full platform access and withdrawal functionality is enabled.

12.2 If you have reason to believe that a person under the age of 18 has submitted personal data to z888 or is accessing the z888 Platform, please contact z888 support immediately.

13.1 z888 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. Updated versions will be published at https://z888.lat/privacy-policy with a revised effective date.

13.2 Where amendments are material, z888 will endeavour to notify registered account holders via email or in-platform notification prior to the amended Policy taking effect.

13.3 Continued use of the z888 Platform following publication of an amended Privacy Policy constitutes acceptance of the updated Policy.

14.1 For any questions, data subject requests, or concerns regarding this Privacy Policy or z888's data processing practices, please contact the z888 Data Protection team through the following channels:

• Live Chat: Available 24/7 from within your logged-in z888 account dashboard;
• Support Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line;
• Ticket System: Via the z888 Help Centre accessible from within the logged-in platform.

14.2 z888 aims to acknowledge all privacy-related requests within 48 hours and to respond substantively within 30 days. Complex requests may require additional time, in which case z888 will communicate the extended timeline.

14.3 If you are not satisfied with z888's response to a data protection concern, you have the right to lodge a complaint with the competent data protection supervisory authority in z888's licensing jurisdiction.