zh88 Privacy Policy – How We Collect, Use and Protect Your Personal Data

1. Introduction & Scope

1.1 This Privacy Policy ("Policy") describes how zh88 ("zh88," "we," "us," "our") collects, uses, stores, discloses and otherwise processes personal data relating to users of the zh88 platform at zh88.lat ("Platform") and associated services.

1.2 This Policy applies to all players who register an Account, visit the Platform, contact zh88 support, or otherwise interact with zh88's services, including Pakistani players accessing the Platform from any location within Pakistan or abroad.

1.3 This Policy should be read together with zh88's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Capitalised terms used but not defined here have the meanings given to them in the Terms & Conditions.

1.4 By creating a zh88 Account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must not register or use zh88.

2. Data Controller

2.1 zh88 is the data controller responsible for personal data collected through the Platform. As data controller, zh88 determines the purposes and means by which your personal data is processed.

2.2 For privacy-related enquiries, data subject access requests or complaints, you may contact zh88 at the support address listed in Section 14 of this Policy. zh88 will respond to all legitimate data-related requests within a reasonable timeframe.

3. Personal Data We Collect

3.1 Registration data. When you create a zh88 Account, we collect your name, date of birth, email address, residential address, phone number and chosen username. For Pakistani players, this typically includes your registered Karachi, Lahore, Islamabad or other Pakistani city address.

3.2 KYC and identity documents. As part of our regulatory compliance obligations, zh88 collects government-issued identity documents (Pakistani CNIC, passport or driving licence), proof of address, payment method verification documents and — at higher thresholds — selfie images with identity documents. These documents are retained in accordance with zh88's regulatory obligations.

3.3 Financial and transaction data. zh88 records all deposits, withdrawals, bonuses and gameplay transactions associated with your Account. Payment method details (such as JazzCash account numbers, Easypaisa wallet IDs or bank account details for HBL, UBL, Meezan Bank or Bank Alfalah) are stored in tokenised or partially masked form and are not held in plain text.

3.4 Gameplay and betting data. zh88 records your gaming activity including bets placed, games played, session durations, win/loss records and responsible gaming tool settings. This data is used for account management, dispute resolution and responsible gaming purposes.

3.5 Device and technical data. When you access zh88, we automatically collect your IP address, browser type, operating system, device identifiers, screen resolution and session timestamps. This data helps zh88 detect fraud, maintain security and optimise the Platform's performance on Pakistani mobile connections.

3.6 Communications data. Records of your interactions with zh88's customer support team, including chat transcripts and email correspondence, are retained for quality assurance and dispute resolution.

3.7 Marketing preferences. Where you have consented to receive promotional communications from zh88, we store your communication preferences and opt-in records.

4. How We Use Your Data

4.1 zh88 uses personal data for the following primary purposes:

• Account administration — creating, maintaining and securing your zh88 Account;
• Identity verification (KYC) — verifying your identity and age in accordance with zh88's compliance obligations;
• Payment processing — facilitating deposits and withdrawals via JazzCash, Easypaisa, Pakistani banks and other accepted methods;
• Fraud prevention and security — detecting and preventing unauthorised account access, bonus abuse, money laundering and other prohibited conduct;
• Responsible gaming — monitoring gaming activity for signs of problem gambling and enforcing deposit limits, loss limits and self-exclusion restrictions;
• Customer support — responding to queries, resolving disputes and providing technical assistance;
• Legal compliance — meeting obligations under zh88's licensing conditions and applicable laws;
• Platform improvement — analysing aggregated, anonymised usage data to improve the Platform's performance and user experience;
• Marketing communications — sending promotional offers and updates to players who have opted in, in accordance with their stated preferences.

5. Legal Basis for Processing

5.1 zh88 processes personal data on the following legal bases depending on the processing activity:

• Contractual necessity — processing required to perform the contract between zh88 and the player (account registration, payment processing, game delivery);
• Legal obligation — processing required to comply with KYC, anti-money laundering (AML) and other regulatory requirements;
• Legitimate interests — fraud detection, platform security, responsible gaming monitoring and analytics, where these interests are not overridden by player privacy interests;
• Consent — marketing communications and non-essential cookies, where explicit opt-in consent has been obtained.

5.2 Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. Withdrawal of consent for marketing does not affect your ability to use zh88 Services.

6. Data Sharing & Third Parties

6.1 zh88 does not sell, rent or trade personal data to third-party marketers or data brokers.

6.2 zh88 shares personal data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• KYC and identity verification providers — to verify player identity and age as required by zh88's regulatory obligations;
• Payment processors — including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, USDT payment processors and card networks, for deposit and withdrawal processing;
• Fraud prevention and AML screening services — to detect and prevent financial crime and account fraud;
• Game content providers — limited gameplay and session data may be shared with third-party game studios supplying content to zh88, to the extent technically required for game operation;
• Regulatory and law enforcement authorities — where required by law, court order or regulatory direction;
• Professional advisers — lawyers, auditors and accountants, under strict confidentiality obligations.

6.3 All third parties with whom zh88 shares personal data are required to maintain appropriate confidentiality and data security standards. zh88 does not permit third parties to use shared data for their own marketing or commercial purposes.

7. Cookies & Tracking Technologies

7.1 zh88 uses the following categories of cookies and similar technologies on the Platform:

• Essential cookies — required for the Platform to function, including session management, login authentication and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytics cookies — collect aggregated, anonymised data about how players navigate zh88, which pages are most visited and where technical errors occur. This data is used solely to improve the Platform.
• Preference cookies — remember your language, display and responsible gaming settings between sessions.
• Marketing cookies — used only where you have explicitly consented to receive zh88 promotional communications. These track interactions with zh88 marketing content to measure campaign effectiveness.

7.2 You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though blocking essential cookies will prevent you from using zh88 Services. zh88 does not respond to browser "Do Not Track" signals at this time.

8. Data Retention

8.1 zh88 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following specific retention periods:

• Account and KYC data — retained for a minimum of five years following Account closure, in accordance with anti-money laundering regulatory requirements;
• Transaction and gameplay records — retained for a minimum of five years for regulatory compliance and dispute resolution purposes;
• Customer support communications — retained for two years following resolution of the relevant support interaction;
• Marketing preference records — retained until you withdraw consent or close your Account, whichever is earlier.

8.2 Where retention beyond the above periods is required by applicable law or regulatory obligation, zh88 will retain data for the period specified by that law or obligation.

9. Data Security

9.1 zh88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include TLS encryption for data in transit, encryption of data at rest, access controls limiting staff access to personal data on a need-to-know basis, and regular security assessments.

9.2 While zh88 takes data security seriously, no internet transmission or electronic storage system is completely secure. Players are responsible for maintaining the security of their own zh88 login credentials and for using the Platform only over trusted network connections. Avoid accessing zh88 over unsecured public WiFi — use mobile data or a trusted home connection when signing in from Karachi, Lahore, Islamabad or any other city.

9.3 In the event of a personal data breach that is likely to result in risk to affected players, zh88 will notify affected individuals and relevant regulatory authorities as required by applicable law.

10. International Data Transfers

10.1 zh88 is an international platform. Your personal data may be transferred to and processed in countries outside Pakistan, including in the jurisdiction where zh88's servers and KYC infrastructure are located. Such transfers are necessary to provide the Services.

10.2 Where personal data is transferred internationally, zh88 takes steps to ensure appropriate safeguards are in place to protect your data, including contractual data protection obligations with data recipients. By using zh88, Pakistani players acknowledge and consent to the international transfer of their personal data as described in this section.

11. Your Rights

11.1 Subject to applicable law, you have the following rights in relation to personal data held by zh88:

• Right of access — to obtain confirmation of whether zh88 holds personal data about you and to receive a copy of that data;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to zh88's legal retention obligations (see Section 8);
• Right to restriction — to request that zh88 restrict processing of your data in certain circumstances;
• Right to object — to object to processing based on zh88's legitimate interests, including direct marketing;
• Right to data portability — to receive your data in a structured, machine-readable format where processing is based on consent or contract.

11.2 To exercise any of the above rights, contact zh88 support at the address provided in Section 14. zh88 will respond within a reasonable timeframe and may request identity verification before processing the request.

11.3 If you believe zh88 has not handled your personal data correctly, you have the right to lodge a complaint with the relevant data protection authority in zh88's operating jurisdiction.

12. Children's Privacy

12.1 zh88 Services are strictly restricted to individuals aged 18 and over. zh88 does not knowingly collect personal data from anyone under the age of 18. If zh88 discovers that a minor has registered an Account, the Account will be immediately closed, all balances forfeited and all personal data associated with the Account deleted to the extent not required to be retained by law.

12.2 If you have reason to believe that a minor has accessed zh88 using your Account or otherwise, please contact zh88 support immediately.

13. Changes to This Policy

13.1 zh88 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features or applicable law. The "Last updated" date at the top of this page indicates when the Policy was last revised.

13.2 Material changes to this Policy will be communicated to registered players by email where practicable. Continued use of zh88 following the publication of an updated Policy constitutes acceptance of the revised terms. It is your responsibility to review this page periodically.

14. Contact Us

14.1 For any questions, concerns or requests relating to this Privacy Policy or the personal data zh88 holds about you, please contact zh88 support:

14.2 When submitting a data-related request, please include your registered Account email address and a description of your request. zh88 may request additional verification information to confirm your identity before processing the request.