Privacy Policy – zs88

1 Introduction

1.1 This Privacy Policy ("Policy") describes how zs88 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data provided by or collected from users ("you", "your") of the zs88 platform accessible at zs88.win.

1.2 zs88 operates as an online casino and sports betting platform serving Pakistani English-speaking users. All personal data processing activities are conducted in accordance with applicable data protection laws and international best practices for the online gaming industry.

1.3 By registering an account on zs88, making a deposit, or otherwise using any feature of the platform, you confirm that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree with this Policy, you must not use the zs88 platform.

1.4 This Policy should be read in conjunction with the zs88 Terms & Conditions, which govern the broader contractual relationship between you and the Platform. In the event of conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

2 Personal Data We Collect

zs88 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third parties engaged in identity verification and payment processing. The categories of data we collect include:

2.1 We do not collect sensitive personal data such as biometric information, religious beliefs, or political opinions. We do not collect data from users below 18 years of age – any such data discovered to have been inadvertently collected will be deleted immediately.

3 How We Use Your Personal Data

zs88 uses personal data only for legitimate, specified purposes. We do not use your data in ways you would not reasonably expect. The primary purposes for which we process personal data include:

• Account management: Creating, maintaining, and securing your zs88 account; processing login authentication and two-factor verification.
• Identity verification (KYC): Verifying your age (18+ requirement), identity, and residential status in compliance with our AML/KYC obligations.
• Payment processing: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, and partner banks; maintaining transaction records for reconciliation and dispute resolution.
• Platform personalisation: Tailoring game recommendations, promotional offers, and content to your preferences and playing history on zs88.
• Responsible gaming: Monitoring account activity for patterns that may indicate problem gambling and applying protective measures where appropriate.
• Fraud prevention & security: Detecting and preventing fraudulent activity, money laundering, duplicate accounts, and other prohibited conduct.
• Legal compliance: Fulfilling obligations under applicable laws, including anti-money laundering regulations, data protection laws, and gaming licensing requirements.
• Marketing communications: Sending promotional emails, SMS notifications, and in-platform messages about offers, PSL betting specials, and platform updates – only where you have provided explicit consent or where permitted under applicable law.
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance.

4 Legal Basis for Processing

4.1 Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and game provision.

4.2 Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations, tax reporting requirements, and regulatory compliance mandated by zs88's operating licence.

4.3 Legitimate interests: Processing conducted for zs88's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement – provided these interests are not overridden by your fundamental rights.

4.4 Consent: Processing based on your explicit, freely given consent, particularly in relation to optional marketing communications and the use of non-essential cookies. You may withdraw consent at any time without detriment to your account standing.

5 Data Sharing & Third Parties

5.1 zs88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only where strictly necessary for the operation of the platform, as follows:

• Payment processors: JazzCash, Easypaisa, and partner banks receive the minimum financial data necessary to process your PKR transactions. These partners are contractually bound to process data solely for payment purposes.
• Identity verification providers: Third-party KYC service providers receive identity documents and CNIC data solely for the purpose of age and identity verification. Verification results are shared with zs88; raw document data is handled per the provider's own security protocols.
• Game content providers: Studios such as JILI, PG Soft, Pragmatic Play, and Evolution Gaming receive anonymised session and technical data necessary to operate their games within the zs88 platform. No identifiable personal data is shared with game studios beyond what is technically required.
• Regulatory and law enforcement authorities: zs88 will disclose personal data to competent authorities where required by law, court order, or valid regulatory request. We will notify you of such disclosures where legally permitted to do so.
• Fraud prevention networks: Where fraud is detected or suspected, relevant data may be shared with industry fraud prevention organisations and, where appropriate, law enforcement agencies.

5.2 All third parties with whom zs88 shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they provide to zs88.

6 Cookies & Tracking Technologies

6.1 zs88 uses cookies and similar tracking technologies on its platform to ensure proper functionality, improve user experience, and support security and fraud prevention measures. Cookies are small text files stored on your device.

6.2 Essential cookies are required for the platform to operate and cannot be disabled. These include session management cookies, authentication tokens, and security cookies that protect your account during login.

6.3 Functional cookies remember your preferences, such as language settings and game history, to provide a personalised experience on zs88. These may be disabled via your account settings without affecting core platform functionality.

6.4 Analytics cookies collect anonymised data about how users interact with the zs88 platform, which pages are most visited, and how users navigate between sections. This data is used to improve platform design and performance. These cookies require your consent.

6.5 You may manage cookie preferences through your browser settings or the cookie preference centre available on the zs88 platform. Disabling certain cookies may affect the functionality or performance of specific platform features.

7 Data Retention

7.1 zs88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Retention periods vary by data category:

• Account and identity data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, to meet AML and regulatory record-keeping requirements.
• Financial transaction data: Retained for a minimum of seven (7) years following the date of each transaction, in accordance with applicable financial record-keeping obligations.
• Gaming activity logs: Retained for three (3) years following the relevant activity, or longer where required for the resolution of a dispute.
• Support and communications data: Retained for two (2) years following the resolution of the relevant enquiry or complaint.
• Marketing consent records: Retained for as long as you remain subscribed, plus one (1) year following unsubscription as evidence of the consent history.

7.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

8 Your Data Rights

As a user of zs88, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data zs88 holds about you at any time.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your zs88 account profile.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: You may request that zs88 limits its use of your personal data in certain circumstances, such as while a complaint is under investigation.
• Right to data portability: Where processing is based on consent or contract, you may request that your personal data be provided to you in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our support team at [email protected]. We will respond to verified requests within thirty (30) days. Identity verification may be required before processing rights requests.

9 Data Security

9.1 zs88 implements robust technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zs88 platform.
• Bcrypt hashing for stored passwords – your password is never stored in plain text and is not accessible to zs88 staff.
• Two-factor authentication (2FA) available as an additional layer of account access security.
• Role-based access controls ensuring that staff access to personal data is limited to what is strictly required for their function.
• Regular third-party security audits and penetration testing of the zs88 platform infrastructure.
• Automated monitoring systems for unusual access patterns or potential security incidents.

9.2 In the event of a personal data breach that poses a risk to your rights and freedoms, zs88 will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach.

9.3 While zs88 applies industry-standard security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for using secure network connections when accessing zs88.

10 Children & Minors

10.1 If we become aware that personal data belonging to a person under 18 has been collected through the zs88 platform – whether as a result of a falsified registration or any other means – we will delete that data immediately, close the associated account, and void any transactions conducted through it.

10.2 Parents and guardians who believe a minor may have accessed zs88 should contact our support team immediately. We will investigate and act promptly on all such reports.

11 Updates to This Policy

11.1 zs88 reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, legal requirements, or platform functionality. The "Last Updated" date at the top of this page will be revised accordingly.

11.2 For material changes that significantly affect how we use your personal data, we will notify registered users via email at least fourteen (14) days prior to the changes taking effect. Continued use of the zs88 platform after the effective date of any update constitutes acceptance of the revised Policy.

11.3 We encourage you to review this Privacy Policy periodically to stay informed about how zs88 handles your personal data.

12 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by zs88, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the in-platform support interface
• Response Time: Written privacy requests handled within 30 days; urgent security concerns addressed within 24 hours

All formal data protection requests must be submitted in writing via email to ensure a documented record is maintained. We may request proof of identity before processing access, rectification, or erasure requests.