zp888 Privacy Policy

This Privacy Policy ("Policy") describes how zp888 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the zp888 online gaming platform available at zp888.ws, including all associated subdomains, mobile interfaces, and related services (collectively, the "Platform").

zp888 is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. As a platform handling real-money transactions in PKR and sensitive player identity data, we recognise our obligations under applicable data protection principles and are fully committed to handling your information responsibly, transparently, and with the highest standards of security.

By registering an account on the zp888 Platform, depositing funds, or using any feature of the Platform in any capacity, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy forms an integral part of the zp888 Terms & Conditions and should be read alongside that document.

If you have any objection to any part of this Policy, you must immediately cease using the Platform and may request account closure by contacting our support team at the details provided in Section 14 of this Policy.

zp888 collects the following categories of personal data from users of the Platform. We collect only what is necessary for the specific purpose described — we do not engage in speculative or disproportionate data collection.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where a Player voluntarily discloses such information in the context of a responsible gaming self-assessment or support interaction, in which case it is handled with the highest level of confidentiality.

zp888 collects personal data through the following channels:

• Direct provision: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, filling out responsible gaming forms, or contacting our support team;
• Automated collection: Technical and usage data collected automatically by our platform infrastructure when you log in, navigate the site, place bets, or play games — including via session cookies, server logs, and analytics tools operated by zp888;
• Payment processors: Transaction reference data shared with us by approved payment partners including JazzCash, EasyPaisa, HBL, UBL, and SadaPay in connection with deposit and withdrawal processing;
• Identity verification providers: Confirmation signals from licensed third-party KYC and AML screening services used to verify the authenticity of identity documents and cross-reference against sanctions and watchlists;
• Fraud detection systems: Behavioural and technical data signals generated by our fraud detection infrastructure to identify unusual account activity or multiple-account patterns.

zp888 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your zp888 account, including authentication and access control;
• Transaction processing: Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 channels;
• KYC and AML compliance: Verifying your identity, confirming your age (21+ requirement), and conducting anti-money laundering due diligence as required by applicable compliance obligations;
• Responsible gaming: Monitoring player activity patterns to identify signs of problem gambling and administering self-exclusion, deposit limits, and other player protection tools;
• Platform improvement: Analysing usage data to improve game performance, fix technical issues, and enhance the overall player experience on the zp888 Platform;
• Security and fraud prevention: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, and other fraudulent or prohibited activities;
• Communications: Sending you account-related notifications, security alerts, support responses, and — where you have opted in — promotional communications about zp888 offers;
• Legal compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.

zp888 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except where strictly required for real-time fraud or AML screening, in which case you retain the right to request human review of any adverse outcome.

zp888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contractual obligations to you under the zp888 Terms & Conditions — including account creation, transaction processing, and game delivery;
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and age verification obligations;
• Legitimate interests: Processing carried out for zp888's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and service improvement;
• Consent: Processing based on your explicit consent, including where you opt in to receive promotional emails or SMS communications from zp888. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

zp888 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT gateway providers, solely to the extent required to process your transactions;
• Game content providers: Licensed casino game studios and sportsbook data providers who power the games and markets available on the zp888 Platform — these providers receive only anonymised or pseudonymised data required for game integrity and RNG certification;
• Identity verification and AML screening providers: Licensed third-party KYC and compliance service providers engaged to verify player identities and conduct sanctions screening;
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or lawful request from a competent authority, zp888 will disclose the minimum personal data required to comply;
• Professional advisers: Legal counsel, auditors, and accountants where necessary for the conduct of zp888's business, subject to professional confidentiality obligations.

All third parties with whom zp888 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific service they provide to zp888.

zp888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active accounts: Personal data associated with an active zp888 account is retained for the full duration of the account's existence plus a minimum period of five (5) years following account closure, to meet AML and regulatory record-keeping obligations;
• Transaction records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five (5) years from the date of the transaction;
• KYC documents: Identity verification documents are retained for the period required by applicable anti-money laundering regulations, typically five (5) years from the date of verification or account closure, whichever is later;
• Support communications: Customer support records are retained for three (3) years from the date of the last interaction;
• Technical logs: Server access logs and security logs are retained for twelve (12) months before being securely purged.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not technically feasible, data is securely destroyed.

zp888 implements a multi-layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security (TLS 1.3) encrypting all data transmitted between your browser or app and our servers;
• AES-256 encryption for all sensitive data stored in our databases, including identity documents and financial records;
• Role-based access controls (RBAC) ensuring that only authorised zp888 personnel with a legitimate operational need can access specific categories of personal data;
• Continuous intrusion detection and prevention systems (IDS/IPS) monitoring for anomalous access patterns or attempted breaches;
• Regular independent security audits and penetration testing of our infrastructure;
• Multi-factor authentication requirements for zp888 administrative systems and for player accounts where enabled.

While zp888 employs industry best-practice security measures, no system connected to the internet can be guaranteed to be entirely free from risk. You are responsible for maintaining the security of your own device and zp888 account credentials. If you suspect any unauthorised access to your account, please contact our support team immediately.

zp888 uses cookies and similar technologies on the Platform. Cookies are small text files placed on your device that allow us to recognise your browser across sessions and personalise your experience. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without preventing access to the Platform;
• Functional cookies: Remember your preferences such as language settings and display preferences to improve your experience;
• Analytics cookies: Collect anonymised data about how players navigate the Platform — including pages visited and time on site — to help us improve performance. zp888 uses only first-party analytics tools; we do not deploy third-party advertising or cross-site tracking cookies;
• Security cookies: Detect and prevent fraudulent activity, bot traffic, and multiple simultaneous sessions from the same account.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your zp888 account. Disabling functional or analytics cookies will not affect your ability to play but may reduce the quality of your experience on the Platform.

Subject to applicable law and certain limited exceptions, you hold the following rights in respect of your personal data held by zp888:

• Right of Access: You may request a copy of all personal data zp888 holds about you. We will respond to verified requests within thirty (30) calendar days;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your account. Minor corrections can be made directly through your account settings;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to zp888's legal retention obligations under applicable AML and regulatory requirements;
• Right to Restriction: You may request that zp888 restricts processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved;
• Right to Data Portability: You may request your personal data in a structured, machine-readable format where technically feasible;
• Right to Object: You may object to processing carried out on the basis of zp888's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time by updating your notification preferences in account settings or by contacting support.

To exercise any of these rights, please contact our Data Protection team at the email address listed in Section 14. We may require you to verify your identity before processing a rights request to prevent unauthorised disclosure.

zp888 applies strict age verification controls during the registration process. All players are required to confirm their date of birth at registration, and KYC verification — which includes documentary proof of age — is required before any withdrawal can be processed.

If zp888 determines that a player account has been registered by or is being used by an individual under 21 years of age, the account will be immediately suspended, all balances will be frozen pending investigation, and any deposits made will be returned to the originating payment method after verification. The matter may also be referred to the appropriate regulatory authority.

If you are a parent or guardian and believe that a minor under your care has registered on the zp888 Platform, please contact our support team immediately at the contact details in Section 14 so that we can take prompt action.

zp888 operates infrastructure and engages service providers that may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than the country in which you are located.

Where such international transfers occur, zp888 ensures that appropriate safeguards are in place to protect your personal data at a standard equivalent to or greater than the protections applied within Pakistan. These safeguards may include:

• Contractual data protection clauses binding the recipient to applicable data protection standards;
• Transfers to jurisdictions recognised as providing adequate data protection under applicable frameworks;
• Binding corporate rules where data is transferred within a group of companies.

By using the zp888 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan where necessary to provide the Platform services, subject always to the protections described in this Policy.

zp888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify registered players by posting a prominent notice on the Platform and, where possible, by sending a notification to the email address associated with your account.

The "Last Updated" date at the top of this page will be revised whenever changes are made. Your continued use of the zp888 Platform following the posting of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and may request account closure by contacting our support team.

We recommend bookmarking this page and reviewing the Policy periodically, particularly before making large transactions or disclosing additional personal information to the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zp888 handles your personal data, please contact our Data Protection team using the details below. We aim to respond to all privacy enquiries within five (5) business days.

When contacting us regarding a data rights request, please include your registered account email address and a clear description of your request. We may ask you to provide additional identity verification to protect against unauthorised data disclosure.