zz88 Privacy Policy — How We Collect, Use, and Protect Your Data

zz88 ("we", "us", "our") operates the online casino and sports betting platform accessible at zz88.today (the "Platform"). For the purposes of this Privacy Policy, zz88 acts as the data controller in respect of personal information collected from users of the Platform.

zz88 is committed to protecting the personal data of its players and operates in accordance with internationally recognised data protection principles. This Privacy Policy applies to all individuals who visit, register on, or use the zz88 Platform, including players based in Pakistan and other jurisdictions where the Platform is accessible.

zz88 collects the following categories of personal data. The specific data collected at any given time depends on the nature of your interaction with the Platform:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you meet the 21+ age requirement);
• Pakistani mobile number registered in your own name;
• Email address;
• Residential address;
• Government-issued identification number (CNIC or equivalent) where required for KYC verification.

2.2 Financial & Transaction Data

• JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or USDT wallet identifiers used for deposits and withdrawals;
• Transaction history including deposit amounts, withdrawal requests, and their processing status;
• Account balance information;
• KYC documentation submitted to verify payment method ownership.

2.3 Gaming & Betting Activity Data

• Wagering history including game titles, bet amounts, outcomes, and timestamps;
• Sports betting selections, markets, and stakes;
• Bonus and promotion usage history;
• Session duration and frequency data.

2.4 Technical & Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser information;
• Mobile network provider (e.g. Jazz, Zong, Telenor, Ufone, Warid);
• Session identifiers and authentication tokens;
• Cookie and similar tracking technology data (see Section 7).

2.5 Communications Data

• Records of your interactions with the zz88 support team via live chat and email;
• Feedback, complaints, and dispute correspondence;
• Records of consent given or withdrawn in relation to marketing communications.

zz88 collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documentation, make a deposit or withdrawal, contact support, or respond to a survey or promotion;
• Automatically — through cookies, server logs, and similar technologies when you browse or use the Platform (see Section 7 for full details);
• From payment providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT processors may share transaction confirmation data and wallet verification information with zz88 as part of the payment processing flow;
• From identity verification services — where zz88 uses a third-party KYC provider to verify your identity documents, that provider may return verification results and associated data to zz88;
• From fraud prevention services — zz88 may receive risk signals and flagged device or IP data from third-party fraud detection services used to protect the Platform and its players.

zz88 uses your personal data for the following purposes:

zz88 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity — processing required to provide the services you have contracted for, including account registration, payment processing, and delivery of gaming services;
• Legal obligation — processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and record-keeping mandated by our licensing framework;
• Legitimate interests — processing carried out in pursuance of zz88's legitimate business interests, including fraud prevention, network security, responsible gaming monitoring, and Platform analytics, where these interests are not overridden by your rights and interests;
• Consent — processing based on your freely given and informed consent, primarily in relation to optional marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

zz88 does not sell, rent, or trade your personal data to unaffiliated third parties for commercial purposes. Your data may however be shared in the following limited circumstances:

6.1 Payment Processors

zz88 shares necessary transaction data with your chosen payment provider — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or USDT processing partners — for the sole purpose of completing your deposit or withdrawal. Each payment provider operates under its own privacy policy and data protection obligations.

6.2 Identity Verification Providers

Where zz88 uses a third-party KYC provider, your identity documents and personal details may be transmitted to that provider for the sole purpose of verifying your identity and age. Results are returned to zz88 and the underlying data is not retained by zz88 beyond what is required for its compliance obligations.

6.3 Regulatory & Law Enforcement Authorities

zz88 may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of zz88, its players, or the public.

6.4 Fraud Prevention & Security Services

Device data, IP addresses, and transaction patterns may be shared with third-party fraud detection and security services for the purpose of identifying and preventing fraudulent activity, money laundering, and other prohibited conduct on the Platform.

6.5 Game Providers

Minimum necessary account identifiers may be shared with live casino and RNG game providers (including Evolution Gaming, Pragmatic Play, Ezugi, and others) to facilitate delivery of their games within the zz88 Platform environment. These providers do not receive your full personal profile.

zz88 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and where you have consented, to deliver relevant content and measure performance. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences such as preferred language, display settings, and responsible gaming limit configurations. Disabling these will not prevent Platform access but may degrade your experience.
• Analytics Cookies: Used to collect anonymised data about how players interact with the Platform, including pages visited, time spent, and navigation paths. This data is used to improve Platform design and content. These cookies require your consent.
• Security Cookies: Used to detect fraudulent activity, bot traffic, and suspicious login behaviour. These are treated as strictly necessary due to their role in Platform security.

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. For most Pakistani players accessing zz88 on mobile via Jazz, Zong, Telenor, Ufone, or Warid networks, the Platform's cookie footprint is designed to be minimal to preserve mobile data efficiency.

zz88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing obligations. The following general retention periods apply:

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with zz88's data destruction procedures. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for analytical purposes as it no longer constitutes personal data.

zz88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the zz88 servers;
• Encryption at rest for sensitive personal data stored on zz88 infrastructure;
• OTP (one-time password) verification required for logins from new or unrecognised devices;
• Role-based access controls limiting internal staff access to personal data strictly to those who need it to perform their job function;
• Regular security audits and penetration testing of Platform infrastructure;
• Automated fraud and anomaly detection systems monitoring for unusual account activity in real time;
• Secure development practices applied to all Platform code and infrastructure updates.

Notwithstanding these measures, no internet-based system can guarantee absolute security. You play an important role in keeping your account secure by maintaining a strong, unique password, protecting your OTP codes, and notifying zz88 immediately if you suspect unauthorised access to your Account.

Subject to applicable law and any overriding legal obligations on zz88 (including regulatory record-keeping requirements), you have the following rights in respect of your personal data:

To exercise any of the above rights, contact the zz88 Data Protection team via live chat on the Platform or at [email protected]. Please include sufficient information to identify your account. zz88 will respond within 30 days of receiving a valid request.

The zz88 Platform is strictly for adults aged 21 and over. zz88 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process and may be repeated at any time during the account lifecycle.

If zz88 becomes aware that personal data has been collected from an individual under the age of 21, the associated account will be immediately suspended, all data will be securely deleted to the extent not required for legal reporting purposes, and any funds in the account will be handled in accordance with our Terms and Conditions and applicable legal requirements.

If you believe that a person under the age of 21 has registered an account on zz88, please report this immediately via live chat or at [email protected].

zz88 operates on infrastructure hosted in data centres that may be located outside Pakistan. Where personal data is transferred outside Pakistan for processing (for example, to cloud infrastructure providers, KYC verification services, or game provider APIs), zz88 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses in data processing agreements requiring the receiving party to maintain data protection standards equivalent to those applied within our Platform;
• Use of service providers that operate under internationally recognised data protection frameworks;
• Transfer impact assessments where required to evaluate the level of data protection in the destination country.

The zz88 Platform may contain links to third-party services, including payment providers, responsible gaming support organisations, and external game providers. This Privacy Policy applies exclusively to personal data collected and processed by zz88.

When you follow a link to a third-party website or interact with a third-party service embedded within the Platform, that party's own privacy policy will govern how your personal data is collected and used. zz88 is not responsible for the privacy practices of third parties and strongly encourages you to read the privacy policies of any external service you interact with.

Hyperlinks to external sites are provided for convenience and information purposes only. Their inclusion does not imply endorsement by zz88 of the content or operators of those sites.

zz88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or Platform features. Where changes are material and affect your rights, zz88 will provide reasonable notice through a prominent announcement on the Platform and by email to the address registered on your account.

The version date displayed at the top of this document indicates when this Privacy Policy was last updated. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

It is your responsibility to review this Privacy Policy periodically to remain informed of how zz88 processes your personal data. Material amendments will not be applied retroactively without your explicit consent where consent is the legal basis for processing.

If you have any questions, concerns, or complaints relating to this Privacy Policy or how zz88 handles your personal data, you may contact us through the following channels:

• Live Chat: Available 24/7 directly on the zz88 Platform — fastest response time for general data queries.
• Email: [email protected] — for data subject access requests, rectification, erasure, or other formal data rights requests. Allow up to 30 days for a full response.

For formal data protection complaints or concerns that cannot be resolved through direct contact with zz88, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. zz88 commits to working cooperatively with data protection authorities to resolve any concerns raised.

When contacting zz88 regarding your personal data, please provide sufficient detail to allow us to identify your account securely, including your registered name, mobile number, and email address. We may request additional verification before fulfilling data access or deletion requests to protect your privacy.