At zh88, we understand that your personal information is yours. This Privacy Policy explains precisely what data zh88 collects from Pakistani players, how it is used, how long it is retained, and what rights you hold over your information under applicable data protection principles.
zh88 collects only the personal data strictly necessary to operate your account, process PKR transactions via EasyPaisa and JazzCash, verify your identity under KYC obligations, and deliver the platform experience. We do not collect data for its own sake.
Your zh88 account data is never sold to third parties. We share data only where legally required, with our licensed payment providers (EasyPaisa, JazzCash, Pakistani banks), our game software providers, or our fraud prevention partners — all under strict data processing agreements.
All data transmitted between your device and zh88 servers is encrypted using 256-bit TLS protocol. Account passwords are stored using industry-standard one-way cryptographic hashing — zh88 staff cannot view your password in plain text under any circumstances.
Every zh88 account holder has the right to request a full copy of their personal data held by zh88. We process verified data access requests within 30 days of receipt. You can also request correction of inaccurate data or deletion where legally permissible.
zh88 does not retain personal data indefinitely. Retention periods are tied to the purpose for which data was collected — transaction records are retained for the period mandated by anti-money laundering regulations; marketing data is held only while you remain an active player or until you opt out.
zh88 operates on security-hardened server infrastructure with access controls, activity logging, intrusion detection, and regular independent security audits. Access to player personal data is restricted to authorised personnel on a strict need-to-know basis with full audit trails.
This Privacy Policy ("Policy") is issued by zh88 ("zh88", "we", "us", "our") and applies to all personal data processed in connection with your use of the zh88 online gaming platform, accessible at zh88.lol and any associated mobile interfaces (the "Platform"). zh88 is committed to protecting the privacy and security of personal information belonging to all users, including Pakistani players in Karachi, Lahore, Islamabad, Faisalabad, and elsewhere.
This Policy sets out the categories of personal data zh88 collects, the lawful basis on which zh88 processes that data, how the data is used, with whom it may be shared, how long it is retained, what security measures are in place to protect it, and what rights you have in relation to your personal data.
By registering for a zh88 account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should not register for or use the zh88 Platform.
Our Commitment: zh88 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your information exists to serve your account — not to generate advertising revenue for zh88 or any third party.
zh88 acts as the data controller in respect of personal data collected and processed through the zh88 Platform. As data controller, zh88 determines the purposes for which personal data is processed and the means by which such processing is carried out.
zh88 operates under an international gaming license that imposes data protection obligations on licensed operators, including requirements regarding data security, lawful processing, and retention limits. Compliance with these licensing requirements forms a core element of zh88's data governance framework.
Where zh88 engages third-party service providers who process personal data on zh88's behalf (for example, payment processors such as EasyPaisa and JazzCash, fraud detection providers, or software suppliers), such parties act as data processors under written data processing agreements that restrict their use of your data strictly to the contracted service functions.
zh88 collects the following categories of personal data from users of the Platform:
| Data Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number (for KYC), nationality, gender | Registration & KYC |
| Contact Data | Email address, Pakistani mobile number, residential address | Registration & KYC |
| Financial Data | Deposit and withdrawal history, payment method identifiers (EasyPaisa/JazzCash account references, bank account details), PKR transaction records | Payment Processing |
| Gaming Data | Bet history, game session logs, win/loss records, bonus activity, sport betting selections | Platform Usage |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, login history | Automatic (Continuous) |
| Communications Data | Support chat transcripts, email correspondence with zh88 support, complaint records | Customer Interactions |
| KYC Documents | Copies of government-issued CNIC, passport, utility bills, or bank statements submitted for identity and address verification | KYC Verification |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, session alert configurations, cooling-off period records | Account Settings |
zh88 does not knowingly collect sensitive personal data beyond what is strictly necessary for KYC, age verification, and anti-money laundering compliance. We do not collect biometric data, genetic data, health data, or political opinion data.
zh88 collects personal data through the following means:
zh88 uses the personal data it collects for the following specific purposes:
Marketing communications: zh88 may send you promotional emails or SMS notifications about bonuses, new game launches, and PSL or cricket betting promotions where you have opted in to receive such communications. You can withdraw your marketing consent at any time by updating your account notification settings or contacting support.
zh88 processes your personal data on the following lawful bases, depending on the purpose of processing:
zh88 does not sell or rent your personal data. zh88 may share your personal data with the following categories of recipients, strictly within the bounds of their contracted function:
All third-party recipients who process data on zh88's behalf are subject to written data processing agreements that restrict their use of your information to the specific contracted purpose and prohibit onward sharing without zh88's written authorisation.
zh88 integrates directly with EasyPaisa and JazzCash mobile wallet infrastructure to provide instant PKR deposit and withdrawal services. The following data handling applies to payment transactions:
zh88 is not a financial institution and is not subject to the State Bank of Pakistan's data regulations in that capacity. However, zh88 voluntarily applies security and data handling standards consistent with best practice for the Pakistani fintech and digital payments environment.
zh88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | AML/KYC regulatory obligation |
| Financial transaction records | 5 years after transaction date | AML regulatory obligation |
| Gaming and bet history | 3 years after last activity | Licensing requirement & dispute resolution |
| Technical logs (IP, device) | 12 months rolling | Fraud prevention & security |
| Support communications | 2 years after closure of case | Complaint management & legal |
| Marketing consent records | Duration of consent + 1 year | Legal compliance (consent audit) |
| Responsible gaming records | 5 years after account closure | Licensing & player protection |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised, aggregated data (from which individual users cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.
zh88 implements the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, zh88 will notify affected players without undue delay through their registered email address, and will take all reasonable steps to contain and remediate the breach.
zh88 uses cookies and similar tracking technologies on the Platform for the following purposes:
You can manage cookie preferences through your browser settings. Blocking all cookies may affect your ability to use certain Platform features, including the zh88 login and game functionality. zh88 does not use third-party advertising network cookies — cookie-based tracking on zh88 is confined to the zh88.lol domain and its essential service providers.
As a zh88 user, you hold the following rights in relation to your personal data. These rights can be exercised by contacting zh88 customer support at the details provided in Section 16 of this Policy:
Request a copy of all personal data zh88 holds about you, processed within 30 days.
Request correction of inaccurate personal data held on your zh88 account.
Request deletion of your data where it is no longer necessary for the purpose collected, subject to legal retention obligations.
Request that zh88 pauses processing of your data in specific circumstances while a request is resolved.
Request your personal data in a structured, machine-readable format for transfer to another controller.
Object to processing carried out on the basis of legitimate interests, including direct marketing.
zh88 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be informed of the extension and the reason for it. Requests may be subject to identity verification to ensure the data is not disclosed to an unauthorised party.
The zh88 Platform is strictly restricted to persons aged 21 years and above. zh88 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as a mandatory component of the zh88 KYC process for all accounts.
If zh88 becomes aware that personal data has been collected from an individual under the age of 21, the following actions will be taken immediately:
If you are a parent or guardian and believe a person under 21 has registered on the zh88 Platform, please contact zh88 support immediately at the contact details in Section 16 below.
zh88 operates server infrastructure and may engage service providers located in multiple jurisdictions. Where personal data is transferred outside the jurisdiction in which it was collected, zh88 ensures that appropriate safeguards are in place, including:
Pakistani player data processed by zh88 is subject to the same protection standards regardless of where it is physically processed — the safeguards described in this Policy apply globally to zh88's data operations.
zh88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, zh88 will notify registered users via the email address associated with their account at least 14 days before the changes take effect, and will display a prominent notice on the Platform.
The "Effective Date" at the top of this Policy indicates when the current version came into force. It is your responsibility to review this Policy periodically. Continued use of the zh88 Platform following notification of policy changes constitutes your acceptance of the updated Policy. If you object to any changes, you should cease using the Platform and request account closure before the effective date of the change.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data zh88 holds about you, please contact zh88 customer support. All privacy-related enquiries receive a response within 30 calendar days.
zh88 customer support is available from 9:00 AM to 2:00 AM Pakistan Standard Time (PKT), seven days a week. The support email address is provided below as plain text only — it is not a clickable link:
Privacy Enquiries Contact: [email protected]
Please include "Privacy Request" and your registered zh88 account email address in the subject line of your enquiry.
If you are dissatisfied with zh88's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction or to the dispute resolution body designated by zh88's gaming license authority. zh88 will cooperate fully with any such investigation.
zh88 treats all privacy requests seriously and with discretion. Your enquiry will be handled by authorised privacy personnel only. No details of your request will be shared with general customer support staff without your consent.