z888 Privacy Policy

1. Who We Are

This Privacy Policy applies to z888, the online casino and sports betting platform operated at z888.bio ("z888", "we", "us", "our"). z888 is the data controller responsible for personal data collected from registered players and visitors to z888.bio. If you have questions about this policy or wish to exercise any of your data rights, please contact us at [email protected].

By registering an account or otherwise using z888 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2. Data We Collect

z888 collects personal data across several categories depending on how you interact with the platform:

z888 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, or health data beyond what is strictly required for responsible gaming assessments.

3. How We Use Your Data

z888 processes your personal data for the following purposes:

• Account management: To create, maintain, and secure your z888 player account, including enabling z888 login and two-factor authentication.
• Identity verification (KYC): To comply with our licensing obligations and anti-money laundering (AML) requirements, we verify the identity of players — particularly before processing withdrawal requests. This typically involves verifying your CNIC and mobile number.
• Payment processing: To execute deposits and withdrawals via JazzCash, Easypaisa, bank transfer, card, or USDT TRC20, and to maintain accurate PKR transaction records.
• Fraud and AML monitoring: To detect, prevent, and investigate fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the z888 platform.
• Responsible gaming: To monitor wagering patterns and intervene where there are indicators of problem gambling, including enforcing self-imposed limits and self-exclusion requests.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance through the z888 support team.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the z888 interface, game selection, payment flows, and mobile performance.
• Marketing communications: Where you have opted in, to send promotional offers and platform news relevant to your z888 account. You may opt out at any time from account settings.
• Legal compliance: To comply with applicable laws, regulations, court orders, and regulatory requests from competent authorities.

4. Legal Bases for Processing

z888 processes your personal data under the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations to you as a z888 account holder — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with AML regulations, KYC obligations under our gaming licence, and requests from competent authorities.
• Legitimate interests: Processing necessary for fraud detection, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by applicable law, processing based on your freely given, specific, and informed consent — for example, for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

z888 does not sell your personal data to any third party. We share your data only in the following circumstances and only to the extent necessary:

• Payment processors: Your financial data is shared with payment service providers — including JazzCash, Easypaisa, and our banking partners — solely to process your deposit and withdrawal transactions.
• Game providers: Technical identifiers (not your full personal data) may be shared with licensed casino studios such as Pragmatic Play and Evolution Gaming to facilitate your game sessions and resolve technical disputes.
• KYC service providers: Identity verification data may be processed by third-party KYC platforms that operate under binding data processing agreements with z888.
• Regulatory and law enforcement authorities: z888 is required to disclose player data to competent authorities, including financial intelligence units, where required by applicable AML or gaming regulations, or pursuant to a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of z888's assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom z888 shares personal data are contractually required to process that data only for the specified purpose and in accordance with applicable data protection standards.

6. Cookies & Tracking Technologies

z888 uses cookies and similar tracking technologies to operate the platform, maintain your session state after z888 login, detect fraud, and analyse platform performance. The main categories of cookies used by z888 are:

• Strictly necessary cookies: Required for the z888 platform to function. These include session authentication cookies that keep you logged in to your z888 account after sign-in. These cannot be disabled.
• Functional cookies: Remember your language preference, currency setting (PKR), and responsible gaming tool settings across sessions.
• Analytics cookies: Collect anonymised data about how players navigate z888 — pages visited, session duration, device type. This data is used in aggregate and is not linked to individual identity.
• Fraud-detection cookies: Track device and browser fingerprint characteristics to detect multiple-account creation and other prohibited conduct.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to log in to z888 and use the platform.

7. Data Retention

z888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by our legal and regulatory obligations:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by applicable AML regulations.
• Transaction records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of each transaction.
• Communications data: Support tickets and live chat transcripts are retained for three (3) years from the date of the last interaction.
• Technical and usage logs: Retained for up to twelve (12) months for fraud detection and platform security purposes, then deleted or anonymised.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

8. Security Measures

z888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the z888 servers.
• Encrypted storage of all passwords and sensitive authentication credentials — plaintext passwords are never stored by z888.
• Two-factor authentication (2FA) available to all z888 account holders as an additional layer of z888 login security.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security assessments and penetration testing of the z888 platform infrastructure.
• Incident response procedures for detecting, reporting, and containing personal data breaches.

While z888 takes all reasonable steps to protect your data, no internet transmission is entirely secure. You are responsible for maintaining the confidentiality of your z888 login credentials and for notifying us promptly at [email protected] if you suspect any unauthorised use of your account.

9. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by z888:

• Right of access: You may request a copy of the personal data z888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For most account details, you can update this directly from your z888 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal obligations (e.g., AML retention requirements).
• Right to restriction: You may request that z888 restricts processing of your data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes. z888 will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact us at [email protected] with your registered account details. z888 will respond to all verifiable data rights requests within 30 days.

10. International Data Transfers

z888 may transfer your personal data to countries outside your country of residence in connection with the provision of its services, including transfers to the jurisdiction in which z888 holds its gaming licence, and to the locations of third-party service providers such as game studios and KYC platforms. Where personal data is transferred internationally, z888 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data protection frameworks — to protect your data to a standard substantially equivalent to applicable data protection law.

11. Children's Privacy

z888 is strictly a 18+ platform. z888 does not knowingly collect personal data from persons under the age of 18. If z888 becomes aware that personal data has been collected from a minor, the account will be closed immediately, all funds returned to the deposit source, and the minor's personal data deleted in accordance with applicable law. If you believe a minor has registered with z888, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

z888 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Material changes will be communicated to registered players via a notification on the z888 platform or by email to the address on file. The date of the most recent revision is shown at the top of this page. Your continued use of z888 following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the changes, you may close your account in accordance with the z888 Terms & Conditions.

13. Contact Us

For any questions, concerns, or data rights requests relating to this Privacy Policy or z888's handling of your personal data, please contact the z888 data protection team at: [email protected]

Please include your registered mobile number or email address in your message so we can locate your account and respond efficiently. z888 aims to respond to all privacy enquiries within 30 calendar days.