zs888 Privacy
Policy

zs888 ("the Company," "we," "us," or "our") is committed to protecting and respecting the privacy of every player who registers and uses the zs888 online casino and sportsbook Platform (the "Platform"). This Privacy Policy sets out in full the basis on which any personal data we collect from you, or that you provide to us, will be collected, processed, stored, and used. It also outlines the rights you hold over your personal data and the procedures you may follow to exercise those rights.

zs888 operates as a premium online gaming platform primarily serving Pakistani players across cities including Karachi, Lahore, Islamabad, Faisalabad, Multan, and Peshawar. The payment methods we integrate — including JazzCash, EasyPaisa, HBL, UBL, Raast, and Meezan Bank — require us to process certain financial and identity data. This Policy explains clearly how that processing occurs and how we protect the personal data of Pakistani players throughout every stage of the gaming and payment journey.

This Privacy Policy should be read alongside the zs888 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you disagree with any aspect of this Privacy Policy, you should not create a zs888 account or use any service provided by the Platform.

For the purposes of applicable data protection law, the data controller responsible for the personal data of zs888 Platform users is the zs888 operating entity. All data protection queries, subject access requests, and formal complaints relating to data processing should be directed to the zs888 Data Protection contact, the details of which are set out in Section 14 (Contact) of this Policy.

Where zs888 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification partners), those providers act as data processors under written agreements that require them to process data only on zs888's documented instructions and to maintain appropriate security standards.

zs888 collects personal data from players through the following channels and in the following categories:

3.1 Registration Data

• Full legal name
• Date of birth (for age verification — minimum age 21)
• Residential address
• Pakistani mobile telephone number (primary identifier)
• Email address
• Username and encrypted password

3.2 Identity Verification Data

• National identity document scan or photograph (CNIC, passport, or equivalent)
• Proof of residential address documentation
• Source of funds documentation (requested for accounts above defined transaction thresholds)

3.3 Financial Data

• JazzCash mobile account identifier
• EasyPaisa mobile account identifier
• Bank account details for HBL, UBL, Meezan Bank, or other approved Pakistani banks (account title and number, not card data)
• Deposit and withdrawal transaction records in PKR

3.4 Usage and Behavioural Data

• Login timestamps and device information (device type, operating system, browser)
• IP address and approximate geographic location at the time of login
• Game play history (games accessed, wagers placed, outcomes)
• Session duration and activity patterns
• Responsible gaming tool settings and limit configurations

3.5 Communications Data

• Records of live chat conversations with the zs888 support team
• Email correspondence with zs888
• Records of complaints or formal requests submitted by the Player

The personal data collected by zs888 is used exclusively for the following defined purposes:

zs888 processes personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to register your account, facilitate gameplay, and process financial transactions in PKR.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements, and gaming compliance obligations.
• Legitimate interests: Processing for fraud prevention, account security, responsible gaming monitoring, and Platform improvement, where these interests are not overridden by your data rights.
• Consent: Processing for marketing communications (email, SMS, push notifications). You may withdraw consent at any time via Account settings or by contacting support.

6.1 No Data Sales. zs888 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for that party's own marketing or commercial purposes.

6.2 Service Providers. zs888 may share personal data with third-party service providers who process data on our behalf under written data processing agreements. These providers are contractually bound to process data only on zs888's instructions and to maintain security standards equivalent to or exceeding those of zs888. Categories of such service providers include:

• Pakistani payment processing partners (JazzCash, EasyPaisa, 1LINK, and banking partners)
• Identity and age verification service providers
• Fraud detection and anti-money laundering screening services
• Cloud infrastructure and data hosting providers
• Customer support software providers

6.3 Legal Disclosure. zs888 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or gaming regulatory authority directive. In such cases, we will disclose only the minimum information required to satisfy the relevant legal obligation.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of the Company's assets, personal data held by zs888 may be transferred to the acquiring entity, subject to that entity assuming the privacy obligations set out in this Policy. Players will be notified of any such transfer in advance.

The zs888 Platform uses cookies and similar tracking technologies to maintain session continuity, remember user preferences, detect fraud, and — where you have given consent — to understand how players navigate and use the Platform.

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your zs888 account. These cannot be disabled without preventing Platform functionality.
• Security Cookies: Used for fraud detection, login attempt monitoring, and device fingerprinting to protect your zs888 account from unauthorised access.
• Preference Cookies: Store your language, display, and notification preferences so you do not need to re-configure them on each visit.
• Analytics Cookies (Consent Required): Where you have consented, we use analytics data to understand aggregate player behaviour and improve Platform performance. This data is processed in anonymised or pseudonymised form wherever possible.

You may manage non-essential cookie preferences via your browser settings. Blocking strictly necessary cookies will prevent zs888 from functioning correctly. Blocking security cookies may result in additional identity verification steps being required at each login.

zs888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These include, but are not limited to:

• 256-bit SSL encryption for all data in transit between your device and zs888 servers
• Encryption of sensitive data at rest, including identity documents and financial records
• Role-based access controls ensuring internal staff access only the data required for their specific function
• Multi-factor authentication for internal system access by zs888 personnel
• Regular security audits and penetration testing of the Platform infrastructure
• Automated detection of suspicious login patterns and unusual account activity
• Formal data breach response procedures including player notification obligations

zs888 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised aggregate data (e.g., statistical analysis of Platform usage) may be retained indefinitely as it no longer constitutes personal data.

Subject to applicable law and any overriding legitimate interests of zs888 (including anti-money laundering retention obligations), you have the following rights in respect of your personal data:

• Access: The right to receive a copy of the personal data that zs888 holds about you, together with supplementary information about how it is processed.
• Rectification: The right to have inaccurate personal data corrected and incomplete data completed without undue delay.
• Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful.
• Restriction: The right to request that zs888 restrict processing of your data in specific circumstances, for example while a data accuracy dispute is pending.
• Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to have it transferred to another controller where technically feasible.
• Objection: The right to object to processing based on legitimate interests, including profiling, unless zs888 can demonstrate compelling legitimate grounds that override your interests.
• Withdrawal of Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact the zs888 support team. We will respond to verified requests within 30 calendar days. We may require identity verification before processing any data rights request to ensure we do not disclose personal data to unauthorised parties.

The zs888 Platform does not contain links to third-party external websites in its general content. In the limited cases where game providers or payment partners are referenced, those providers operate under their own separate privacy policies and zs888 is not responsible for the privacy practices of any third-party service provider, game developer, or payment partner. Players should review the privacy policies of any third-party service they interact with directly.

Account holders are responsible for ensuring that their zs888 login credentials are not accessible to minors in their household. If you believe that a minor has accessed or registered a zs888 account using your details or otherwise, please notify the support team immediately via live chat or email so that the matter can be investigated and appropriate action taken without delay.

zs888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the services offered on the Platform. When material changes are made, we will notify registered Players via email to their registered address and/or via a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" at the top of this Privacy Policy indicates when the current version was last updated. Players are encouraged to review this Policy periodically. Continued use of the zs888 Platform following notification of an updated Privacy Policy constitutes acceptance of the updated terms.

For all privacy-related enquiries, data rights requests, or formal complaints regarding zs888's data processing practices, please contact us via the following:

If you are not satisfied with zs888's response to a privacy complaint, you may also direct your complaint to the relevant data protection supervisory authority or gaming regulatory body applicable to your jurisdiction. zs888 will cooperate fully with any such authority in the resolution of privacy complaints.

This Privacy Policy was last updated on 1 January 2026. It supersedes all previous versions of the zs888 Privacy Policy. zs888 recommends that players retain a copy of this document for their personal records.