zs888 Privacy Policy

// 01 Introduction

This Privacy Policy ("Policy") is issued by zs888 ("zs888", "we", "us", "our") and applies to all personal data collected through the zs888 website at zs888.vip and all associated services, mobile interfaces, and communications channels. This Policy explains how we collect, use, store, share, and protect your personal information when you register an account, make a deposit, place a bet, or otherwise interact with the zs888 platform.

By registering an account on zs888, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please do not use the zs888 platform.

This Policy should be read alongside the zs888 Terms and Conditions, which together form the complete legal framework governing your use of the platform.

// 02 Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is zs888, operated under an international gaming licence and accessible at zs888.vip. As data controller, zs888 determines the purposes and means by which your personal data is processed.

If you have any questions about how zs888 handles your personal data, or wish to exercise any of your data rights described in this Policy, you may contact our dedicated data protection contact via the support email address listed in Section 15 of this Policy.

// 03 Personal Data We Collect

zs888 collects and processes the following categories of personal data. We collect only what is necessary for the specific purposes described in this Policy:

Identity and Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification — players must be 21 or older)
• Pakistani mobile phone number (used for account communication and two-factor authentication)
• Email address (where provided during registration)
• Residential address in Pakistan
• National Identity Card (CNIC) number (collected as part of KYC verification)

Financial and Transaction Data

• Payment method details (JazzCash mobile number, EasyPaisa account reference, bank account details for HBL, UBL, Meezan Bank, Allied Bank transfers, or SadaPay wallet reference)
• Deposit and withdrawal transaction history, amounts, and timestamps
• Betting and gaming activity records, including wager amounts, game types, and outcomes
• Account balance history and bonus credit records

Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Pages visited on the zs888 platform, time spent, and navigation patterns
• Session duration and login/logout timestamps
• Cookie identifiers and similar tracking technologies (see Section 9)

Identity Verification Documents

• Copies of government-issued identity documents (CNIC, passport) submitted during KYC
• Proof of address documentation (utility bills, bank statements)
• Payment method ownership evidence (screenshots or statements as required)

Data Category	Examples	Collection Stage
Identity Data	Name, DOB, CNIC, address	Registration & KYC
Financial Data	JazzCash/EasyPaisa details, transaction history	Deposit / Withdrawal
Gaming Data	Bet history, game sessions, bonus usage	Ongoing platform use
Technical Data	IP address, device info, cookies	All platform visits
KYC Documents	CNIC copy, proof of address, payment evidence	Verification process

// 04 How We Collect Your Data

zs888 collects personal data through the following means:

• Direct collection: Information you provide when creating your account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to a promotional offer.
• Automated collection: Technical data collected automatically as you use the platform, including through cookies, server logs, and analytics tools embedded in the zs888 website.
• Third-party sources: Identity verification agencies and fraud prevention services may provide supplementary data to corroborate information you have provided directly. Payment processors confirm the status of financial transactions.

// 05 Purpose and Legal Basis for Processing

zs888 processes your personal data only when there is a valid legal basis for doing so. The table below outlines the primary purposes for which we process your data and the corresponding legal basis in each case:

Processing Purpose	Legal Basis
Account creation and management	Performance of contract
Processing deposits and withdrawals in PKR	Performance of contract
Age verification (21+ requirement)	Legal obligation / Legitimate interest
KYC identity verification	Legal obligation (AML/CTF compliance)
Fraud detection and prevention	Legitimate interest
Responsible gaming monitoring	Legal obligation / Legitimate interest
Customer support communications	Performance of contract
Promotional and marketing communications	Consent (opt-in)
Platform analytics and improvement	Legitimate interest
Compliance with regulatory reporting	Legal obligation

Where zs888 relies on consent as the legal basis for processing — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

// 06 Sharing Your Personal Data

zs888 does not sell, rent, or trade your personal information to unrelated third parties. We may share your data only in the following limited and controlled circumstances:

Service Providers and Processors

zs888 works with trusted third-party service providers who process personal data on our behalf and under our instructions. These include:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and cryptocurrency gateway providers for processing PKR and USDT TRC20 transactions.
• Identity verification providers: Third-party KYC and age verification services used to confirm the identity and age of registering players.
• Fraud prevention agencies: Services that help identify and prevent fraudulent activity, money laundering, and bonus abuse on the platform.
• Customer support software providers: Platforms used to manage and respond to player support tickets and live chat interactions.
• Analytics providers: Tools used to understand how players interact with the zs888 website and improve the platform experience.

All third-party processors engaged by zs888 are contractually required to process personal data only for the specified purpose, to apply appropriate security measures, and to comply with applicable data protection obligations.

Regulatory and Legal Disclosure

zs888 may disclose personal data to regulatory authorities, law enforcement agencies, gaming licence authorities, or courts where required to do so by applicable law, court order, or regulatory obligation. Such disclosures are made only to the extent required and will be subject to appropriate confidentiality obligations where permitted.

Business Transfers

In the event that zs888 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the successor entity as part of that transaction. We will provide notice of any such transfer and the privacy commitments applicable to your data going forward.

// 07 International Data Transfers

zs888 operates internationally and your personal data may be transferred to, and processed in, countries other than Pakistan. This includes the jurisdiction in which zs888 holds its international gaming licence, as well as the countries in which our third-party service providers operate.

Where personal data is transferred outside of Pakistan, zs888 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections applicable within Pakistan. These safeguards may include contractual obligations on data recipients, technical security measures, and organisational controls.

// 08 Data Retention

zs888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal, regulatory, and licensing obligations. The following general retention periods apply:

Data Type	Retention Period	Reason
Account and identity data	5 years after account closure	AML/KYC regulatory obligation
Transaction and betting records	5 years from transaction date	Financial regulatory compliance
KYC documents	5 years after account closure	Anti-money laundering obligation
Support correspondence	3 years from last interaction	Dispute resolution and quality assurance
Technical and analytics data	Up to 26 months	Platform improvement and fraud prevention
Self-exclusion records	Duration of exclusion + 5 years	Responsible gaming compliance

After the applicable retention period has elapsed, personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. Where anonymised data is retained for analytical purposes, it will not be traceable back to any individual player.

// 09 Cookies and Tracking Technologies

zs888 uses cookies and similar tracking technologies on its website to deliver a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used on zs888:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language preferences, and protect the platform against cross-site request forgery attacks. These cookies cannot be disabled without impairing core platform functionality.
  session_token csrf_protection lang_pref
• Performance and Analytics Cookies: These cookies collect anonymous data about how players use the zs888 website — which pages are visited most frequently, where players navigate from, and how long sessions last. This data is used to improve the platform.
  _analytics_session page_view_count
• Functional Cookies: These cookies remember your platform preferences and personalisation settings, such as your preferred deposit method or display settings, to enhance your experience on return visits.
  deposit_method_pref ui_theme
• Fraud Prevention Cookies: These cookies help identify and flag unusual activity patterns that may indicate fraudulent behaviour, automated bot access, or account compromise attempts.
  device_fingerprint risk_score

You can control and manage cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of the zs888 platform, including your ability to maintain an active login session or complete transactions.

// 10 Your Data Rights

Subject to applicable law and certain exceptions required by our regulatory obligations, you have the following rights in relation to your personal data held by zs888. To exercise any of these rights, please contact our support team using the details in Section 15:

• Right of Access: You have the right to request a copy of the personal data that zs888 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data held by zs888 is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Please note that this right is subject to overriding legal and regulatory retention obligations — for example, AML record-keeping requirements may prevent immediate deletion of certain data.
• Right to Restriction: You may request that zs888 restricts the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where zs888 relies on legitimate interest as the legal basis, and where your interests or fundamental rights override that legitimate interest.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by contacting our support team or updating your communication preferences in your account settings.

zs888 will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further two months, and we will notify you accordingly. We may require proof of identity before processing any data rights request to protect against unauthorised access to your personal information.

// 11 Data Security

zs888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zs888 platform
• Encryption of sensitive data at rest, including identity documents and payment reference data
• Access controls ensuring that personal data is accessible only to zs888 staff and contractors who require it for their specific role
• Regular security assessments and penetration testing of the platform infrastructure
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised account access
• Incident response procedures to detect, report, and address personal data breaches promptly

While zs888 takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. You also play a role in keeping your account secure — please use a strong, unique password for your zs888 account and do not share your login credentials with anyone.

// 12 Children and Minors

The zs888 platform is strictly intended for adults aged 21 and above. zs888 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of our KYC process, and we take all reasonable steps to prevent underage individuals from registering or accessing the platform.

If zs888 becomes aware that personal data has been collected from a minor, that account will be immediately suspended, all data associated with the account will be reviewed, and any winnings accumulated during the period of underage use will be forfeited. If you are a parent or guardian and believe that a minor may have registered an account on zs888, please contact our support team immediately.

// 13 Marketing Communications

With your consent, zs888 may send you marketing communications about promotions, bonuses, new games, and other platform updates via SMS, WhatsApp, or email. You may opt into marketing communications during registration or at any time by updating your preferences in your account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your zs888 account settings
• Contacting our support team and requesting removal from marketing lists
• Following the unsubscribe instructions included in any marketing message

Please note that opting out of marketing communications will not affect transactional messages that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, or KYC verification requests.

// 14 Updates to This Privacy Policy

zs888 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered players by way of an on-platform notification or, where we hold your email address, via email communication, prior to the changes taking effect.

The "last updated" date displayed at the top of this Policy reflects the date on which the most recent version came into effect. We encourage you to review this Policy periodically to stay informed about how zs888 protects your personal data. Your continued use of the platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

// 15 Contact and Data Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights described in Section 10, please contact the zs888 data protection team through the following channel:

Support & Data Enquiries: [email protected]

Our support team is available 24 hours a day, 7 days a week in both English and Urdu. We aim to acknowledge all privacy-related enquiries within 24 hours and to resolve substantive requests within the 30-day statutory timeframe. For formal data rights requests, please include your full name as registered on your account and a brief description of the right you wish to exercise.