zp888 Privacy Policy

1. Introduction

1.1 zp888 ("we", "us", "our") operates the online casino and sports betting platform available at zp888.pro (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use our Platform, particularly our players based in Pakistan.

1.2 This Privacy Policy describes in detail the categories of personal data we collect, the purposes and legal bases for which we process that data, how we keep it secure, how long we retain it, with whom we may share it, and the rights you hold in relation to your personal data.

1.3 This Privacy Policy forms part of, and should be read in conjunction with, the zp888 Terms & Conditions. Defined terms used in the Terms & Conditions carry the same meaning in this Policy unless the context requires otherwise.

1.4 zp888 processes personal data in compliance with the data protection obligations imposed by our international gaming licence and applicable data protection standards. We review this Policy regularly and will notify Players of any material changes.

2. Data We Collect

2.1 zp888 collects personal data across several categories depending on your interaction with the Platform. The table below summarises the main categories of data we collect and why.

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, CNIC number, selfie with CNIC	KYC age & identity verification; fraud prevention
Contact Data	Email address, mobile number (e.g. JazzCash-registered number), city of residence	Account communications, support, transaction notifications
Financial Data	JazzCash / EasyPaisa account reference, HBL / UBL / Meezan Bank account details, deposit and withdrawal history	Payment processing, withdrawal verification, AML compliance
Gaming Activity Data	Bet history, game session logs, win/loss records, bonus usage	Account management, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type, operating system, session timestamps	Platform security, fraud detection, performance optimisation
Communications Data	Live chat transcripts, support ticket content, email correspondence	Customer support, dispute resolution, quality assurance
Marketing Preferences	Opt-in/opt-out status for promotional emails and SMS notifications	Sending promotional offers where consent has been given

2.2 You are not obligated to provide all requested data; however, certain categories — particularly Identity Data and Financial Data — are mandatory for account registration, KYC verification, and processing withdrawals. Failure to provide mandatory data may result in restrictions on your account functionality.

3. How We Collect Your Data

3.1 zp888 collects personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, contacting customer support, or filling in any other form on the Platform;
• Automated technical collection: Data collected automatically as you browse and interact with the Platform, including IP address, session duration, pages visited, and device identifiers via cookies and similar tracking technologies;
• Payment processors: Reference data returned by third-party payment processors such as JazzCash, EasyPaisa, and banking partners confirming transaction status;
• Third-party verification services: Data returned by identity verification and anti-money laundering screening services used to fulfil our KYC obligations under our gaming licence;
• Responsible gaming tools: Data generated when you set deposit limits, activate self-exclusion, or interact with other responsible gaming features on your zp888 account.

4. Legal Basis for Processing

4.1 zp888 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to create and manage your account, process deposits and withdrawals, and provide the gaming services you have requested;
• Legal obligation: Processing required to comply with our international gaming licence obligations, including KYC verification, anti-money laundering checks, and record-keeping requirements;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and the improvement of our services, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, including promotional emails and SMS notifications, where you have provided explicit consent. You may withdraw this consent at any time.

5. How We Use Your Data

5.1 zp888 uses the personal data we collect for the following specific purposes:

• To create, verify, and maintain your zp888 player account;
• To verify your identity and age in compliance with KYC requirements under our gaming licence;
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To monitor your gaming activity for the purposes of responsible gaming intervention where necessary;
• To provide customer support, resolve disputes, and respond to your enquiries;
• To send you transactional communications relating to your account, including deposit confirmations and withdrawal status updates;
• To send you marketing and promotional communications where you have opted in to receive them;
• To analyse Platform usage patterns and improve the performance, security, and user experience of zp888;
• To comply with applicable legal, regulatory, and licensing obligations.

5.2 zp888 will not use your personal data for any purpose that is incompatible with the purposes set out in this Policy without first notifying you and, where required, obtaining your consent.

6. Data Sharing & Disclosure

6.1 zp888 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment processors: We share necessary financial data with JazzCash, EasyPaisa, and our banking partners solely to process your transactions. These parties process your data under their own privacy policies and are not permitted to use it for any other purpose;
• KYC and AML service providers: We share identity documentation with certified third-party verification and anti-money laundering screening services as required by our licensing obligations;
• Game software providers: Technical session data may be shared with game developers to ensure game integrity and resolve technical disputes. No directly identifiable personal data is shared beyond what is technically necessary;
• Regulatory and licensing authorities: We may be required to disclose player data to our gaming licence authority or to relevant law enforcement agencies in response to lawful requests or court orders;
• Fraud prevention networks: Anonymised or flagged account data may be shared with industry fraud prevention consortia to protect the integrity of the gaming ecosystem;
• Professional advisers: Legal, financial, and compliance advisers engaged by zp888 may access personal data under strict confidentiality obligations where necessary for the provision of their services.

6.2 Any third party with whom zp888 shares personal data is required to process that data only for the specified purpose and in accordance with data protection standards consistent with this Policy.

7. Cookies & Tracking Technologies

7.1 zp888 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without rendering the Platform non-functional;
• Functional cookies: Used to remember your preferences, such as your chosen language, last visited game category, and responsible gaming limit settings;
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — such as which pages are visited most frequently and how long sessions typically last — to help us improve the user experience;
• Marketing cookies: Used to deliver promotional content relevant to your gaming preferences, where you have consented to receive marketing communications from zp888.

7.2 You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the zp888 Platform. A cookie consent banner is displayed on your first visit to the Platform, allowing you to accept or customise non-essential cookies.

8. Data Security

8.1 zp888 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and zp888 servers;
• Encryption of sensitive data fields — including CNIC references and financial account identifiers — at rest on our servers;
• Role-based access controls limiting employee access to personal data to those with a demonstrable operational need;
• Regular penetration testing and vulnerability assessments of the Platform and its underlying infrastructure;
• Two-factor authentication requirements for all zp888 staff accessing systems that hold player personal data;
• Incident response procedures enabling rapid detection of and response to any suspected data breach.

8.2 In the event of a data breach that is likely to result in a risk to your rights and freedoms, zp888 will notify affected Players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

8.3 While zp888 takes every reasonable precaution, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the security of your own account credentials.

9. Data Retention

9.1 zp888 retains your personal data for as long as your account is active and for a minimum period following account closure as required by our international gaming licence and applicable financial regulations. Typical retention periods are as follows:

• Identity and KYC documents: Retained for a minimum of 5 years from the date of account closure, as required by our AML obligations;
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Gaming activity logs: Retained for a minimum of 3 years from the date of the activity, or longer if required for an ongoing dispute or investigation;
• Customer support communications: Retained for 2 years from the date of the communication;
• Marketing preference records: Retained until you withdraw consent or close your account, whichever is earlier.

9.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

10. Your Rights

10.1 Subject to applicable law and the terms of our licensing obligations, you hold the following rights in relation to the personal data zp888 holds about you:

• Right of access: You may request a copy of all personal data zp888 holds about you. We will respond within 30 days of a verified request;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. For certain data fields (such as name and date of birth), correction may require submission of supporting documentary evidence;
• Right to erasure: You may request deletion of your personal data, subject to our legal data retention obligations. We cannot delete data we are legally required to retain;
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances, for example while a rectification request is being assessed;
• Right to data portability: You may request a machine-readable copy of the personal data you have directly provided to zp888, where technically feasible;
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10.2 To exercise any of the above rights, please contact the zp888 support team via live chat, or write to us at [email protected]. We will verify your identity before processing any rights request. Please note this address is provided for reference only and is not a clickable link.

11. Children & Minors

11.1 The zp888 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21.

11.2 If zp888 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the collected data to the extent permitted by our legal obligations, and retain only the minimum information necessary to document the incident and prevent re-registration.

11.3 Parents and guardians who believe that a minor has accessed or registered with the zp888 Platform are encouraged to contact our support team immediately via live chat so that appropriate action can be taken without delay.

12. Third-Party Links

12.1 The zp888 Platform may contain references to game software provided by third-party developers. While zp888 carefully selects its software partners, we are not responsible for the privacy practices of third-party operators whose services may be integrated into or linked from the Platform.

12.2 We encourage you to review the privacy policies of any third-party service providers whose games or services you access via the zp888 Platform. zp888's Privacy Policy applies solely to data collected and processed by zp888 itself.

13. Amendments to This Policy

13.1 zp888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, licensing requirements, or applicable legal standards. The date of the most recent revision will always be displayed at the top of this page.

13.2 Where a proposed amendment constitutes a material change to how we process your personal data, we will notify you by posting a prominent notice on the Platform or by sending a notification to your registered email address at least 14 days prior to the change taking effect.

13.3 Continued use of the zp888 Platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must close your account and cease using the Platform.

14. Contact Us

14.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which zp888 handles your personal data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly on the zp888 Platform — the fastest way to reach our team;
• Email: [email protected] — please note this is provided for reference as plain text only and is not a clickable link. Include your registered username and a clear description of your query.

14.2 zp888 aims to acknowledge all privacy-related correspondence within 24 hours and to provide a substantive response within 10 business days.