01 Introduction
Welcome to zz888. We take the privacy of our users seriously and are fully committed to handling your personal data with care, transparency, and accountability. This Privacy Policy ("Policy") describes how zz888 ("Company", "we", "us", "our") collects, processes, stores, and discloses personal information in connection with your use of the zz888 online gaming platform, including the website at https://zz888.pro, all associated sub-pages, account management tools, sportsbook, casino, and any other products or services offered by zz888 (collectively, the "Platform").
This Policy is intended to meet the requirements of applicable international data protection frameworks and is designed to give users — particularly those accessing the Platform from Pakistan — a clear and honest picture of how their data is managed.
By registering an account, depositing funds, or otherwise using the zz888 Platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions that affect how your account and data are managed.
02 Data Controller
For the purposes of applicable data protection law, zz888 is the data controller responsible for the personal data of users who register and use the Platform. As data controller, zz888 determines the purposes for which and the means by which your personal data is processed.
Our Data Protection contact can be reached via email at [email protected]. All data-related enquiries, requests, and complaints should be directed to this address with the subject line "Data Privacy Request – [Your Username]".
03 Personal Data We Collect
zz888 collects and processes the following categories of personal data depending on how you interact with the Platform:
3.1 Registration & Identity Data
- Full legal name as it appears on your government-issued identification
- Date of birth (required to verify you are aged 21 or above)
- Email address and account username
- Mobile phone number
- Residential address, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad)
- CNIC (Computerised National Identity Card) number or passport number, where required for KYC verification
3.2 Financial & Transaction Data
- JazzCash or EasyPaisa mobile wallet identifiers linked to your account
- HBL, UBL, or Meezan Bank account details used for deposits and withdrawals
- Full deposit and withdrawal history in PKR
- Bonus credits received and wagering activity records
3.3 Technical & Usage Data
- IP address and approximate geographic location at time of login
- Device type, operating system, and browser information
- Session timestamps, login history, and Platform navigation patterns
- Betting and gaming activity logs, including game selections, stakes, and outcomes
3.4 Communications Data
- Records of live chat conversations and email correspondence with our support team
- Feedback, complaints, or disputes submitted through any Platform channel
- Responses to optional surveys or promotions
3.5 Responsible Gaming Data
- Deposit limit preferences and session time settings set by the user
- Self-exclusion status, duration, and request history
- Account restriction records linked to responsible gaming requests
We collect only the personal data that is necessary for the purposes described in this Policy. We do not collect sensitive personal data (such as biometric or health data) unless explicitly required for regulatory compliance and with your specific consent.
04 How We Collect Your Data
zz888 collects personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or use any Platform feature that requires you to input personal information.
- Automatically — through cookies, server logs, and similar tracking technologies as you interact with the Platform (see Section 11 on Cookies).
- From payment providers — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank may share transaction confirmation data with zz888 to facilitate and verify payments.
- From identity verification services — zz888 may use third-party KYC service providers to verify the authenticity of identity documents submitted during account verification.
- From fraud prevention and AML tools — third-party services used to detect fraudulent activity or money laundering may provide signals and data to zz888 in relation to specific account activities.
05 How We Use Your Personal Data
zz888 uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Creating and managing your zz888 account | Registration data, identity data, contact details |
| Processing deposits and withdrawals in PKR | Financial data, payment method identifiers |
| Age and identity verification (KYC) | Date of birth, CNIC/passport, name |
| Preventing fraud and money laundering (AML compliance) | Transaction data, IP address, usage patterns |
| Providing 24/7 customer support | Communications data, account history |
| Sending account and transaction notifications | Email address, phone number |
| Administering bonuses and promotional offers | Gaming activity, account registration date |
| Responsible gaming monitoring and intervention | Gaming data, deposit patterns, self-exclusion records |
| Improving Platform performance and user experience | Technical data, usage logs, session data |
| Meeting regulatory and licensing obligations | All categories as required by applicable frameworks |
zz888 does not use your personal data for automated decision-making that produces significant legal effects without human review, except where required for fraud prevention or AML screening, in which case you have the right to request human review of any automated decision affecting your account.
06 Legal Basis for Processing
zz888 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:
- Contractual necessity: Processing required to perform the contract we have with you — namely, providing gaming services, managing your account, and processing transactions.
- Legal obligation: Processing required to comply with applicable KYC, AML, age verification, and regulatory reporting obligations under our international gaming licence framework.
- Legitimate interests: Processing carried out for fraud prevention, security monitoring, Platform improvement, and responsible gaming safeguarding, where these interests are not overridden by your own privacy rights.
- Consent: Where zz888 relies on consent (e.g., for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
07 Data Sharing & Disclosure
zz888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:
- Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the data required to process your specific transaction.
- KYC and identity verification providers: Third-party services used to verify your identity documents receive only the documents and personal data necessary for verification.
- Fraud prevention and AML screening services: Industry-standard tools used to detect suspicious activity may receive account and transaction data for screening purposes.
- Game content providers: Third-party software providers who supply games on the Platform may receive anonymised or pseudonymised gameplay data for technical and fairness auditing purposes.
- Regulatory and legal authorities: Where required by law, by a court order, or by a regulator with lawful authority, zz888 will disclose personal data as required.
- Corporate transactions: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity, subject to equivalent privacy protections.
All third-party service providers who handle your personal data on our behalf are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to zz888.
08 Data Retention
zz888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specific retention periods are as follows:
- Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required under applicable AML and gaming regulatory frameworks.
- Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
- Customer support communications: Retained for three (3) years from the date of the last interaction, unless a longer period is required by an ongoing complaint or legal matter.
- Technical and usage logs: Retained for up to twelve (12) months, after which they are aggregated and anonymised for analytical purposes.
- Self-exclusion records: Retained indefinitely in the case of permanent self-exclusion to prevent re-registration.
Once personal data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original data.
09 Security Measures
zz888 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
- Transport Layer Security (TLS) / 256-bit SSL encryption for all data transmitted between your device and the zz888 Platform.
- Encrypted storage of sensitive account and financial data at rest.
- Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
- Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure.
- Two-factor authentication (2FA) options available to all registered users to protect account access.
- Automated fraud detection systems monitoring transactions and account activity in real time.
While zz888 takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a high risk to your rights, we will notify you and relevant authorities in accordance with applicable legal requirements.
10 Your Data Rights
Subject to applicable law, you have the following rights in relation to your personal data held by zz888. To exercise any of these rights, contact us at [email protected] with the subject line "Data Privacy Request":
Right of Access
Request a copy of all personal data zz888 holds about you and information on how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held on your account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations.
Right to Restrict Processing
Request that we limit processing of your data in certain circumstances while a dispute or verification is ongoing.
Right to Data Portability
Receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
Right to Object
Object to processing of your data carried out on the basis of legitimate interests, including profiling for responsible gaming purposes.
We will respond to all verifiable data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension and the reason for the delay.
11 Cookies & Tracking Technologies
zz888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the zz888 website. They serve several functions on the Platform:
- Essential cookies: Required for core Platform functionality including session management, login authentication, and security token handling. These cannot be disabled without impairing the Platform.
- Functional cookies: Remember your preferences such as language settings, display options, and previously selected game categories.
- Analytics cookies: Collect anonymised data on how users navigate the Platform — such as which pages are visited most and where sessions end — to help us improve the user experience.
- Fraud prevention cookies: Help identify patterns of unusual or potentially fraudulent behaviour across sessions and devices.
zz888 does not use third-party advertising cookies or share cookie data with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling essential cookies may prevent you from logging in or using core Platform features.
12 Protection of Minors
The zz888 Platform is strictly intended for users aged 21 years and above. zz888 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during account registration, and additional documentary verification may be required at any time.
If zz888 discovers that personal data has been collected from a user under the age of 21, the account will be immediately suspended, all data associated with the account will be deleted or anonymised, and any deposits will be returned via the original payment method following verification.
If you believe a minor has registered on the zz888 Platform, please contact us immediately at [email protected]. We take underage gambling prevention extremely seriously and will act on all credible reports without delay.
13 International Data Transfers
As an internationally operated platform serving users in Pakistan, zz888 may transfer your personal data to servers or processors located in jurisdictions outside Pakistan. Such transfers are conducted only where appropriate safeguards are in place to ensure your data receives a level of protection consistent with applicable international data protection standards.
These safeguards may include: standard contractual clauses approved under applicable data protection frameworks; binding corporate rules; or transfers to jurisdictions that have been assessed as providing an adequate level of data protection. By using the Platform, you acknowledge that your data may be transferred and processed outside Pakistan as described.
14 Changes to This Privacy Policy
zz888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, or applicable legal requirements. When material changes are made, we will notify registered users by email and/or by posting a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how zz888 handles your personal information.
Continued use of the zz888 Platform following notification of changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated Policy, you must cease using the Platform and contact support to close your account.
15 Contact & Data Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or the personal data zz888 holds about you, please contact our Data Protection team through the following channels:
- Email: [email protected] — Subject line: "Data Privacy Request – [Your Username]"
- Live Chat: Available 24/7 directly on the zz888 Platform. Average response time under 3 minutes.
We aim to acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 calendar days. Where a request is complex or we receive a high volume of requests, we will notify you of any extension to this timeframe.
If you are not satisfied with our response to a data privacy complaint, you may have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction, depending on applicable data protection law.