Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how z88h ("z88h", "we", "us", "our") collects, uses, stores, shares and protects personal data obtained from users ("you", "your") who access or use the z88h online betting and casino platform at z88h.cam.

z88h is committed to handling your personal data responsibly, transparently and in accordance with applicable data protection laws in the operator's license jurisdiction. This Policy applies to all users of the Platform, including registered account holders, visitors browsing without an account, and any person who contacts our support team.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which form part of your agreement with z88h.

2 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could identify a natural person, directly or indirectly, including name, email address, date of birth, financial details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the licensed operator of z88h.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a written agreement.
• "KYC" means Know Your Customer — the identity and address verification process required by our license obligations.
• "AML" means Anti-Money Laundering — the regulatory framework requiring financial service operators to monitor and report suspicious activity.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics and session management.
• "Platform" means the z88h website, mobile-optimised site and any associated applications operated at z88h.cam.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

3 Data We Collect

3.1 Registration & Account Data

When you create an account on z88h, we collect the information you provide directly, which includes:

• Full legal name as it appears on your identity document
• Date of birth (to verify minimum age eligibility)
• Email address and chosen username
• Residential address (including city — for example, Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — and country)
• Mobile phone number
• Preferred currency and account settings

3.2 Identity Verification (KYC) Documents

To comply with our license obligations and applicable AML regulations, we collect copies of identity documents, which may include:

• Government-issued photo identification (CNIC, passport or driving licence)
• Proof of address documents (utility bills, bank statements dated within three months)
• Proof of payment method ownership (screenshots or statements)
• Source of funds documentation where required by our compliance team

3.3 Financial Transaction Data

We record all financial transactions processed through your account, including deposit amounts, withdrawal requests, payment method details (masked card numbers, mobile wallet identifiers), transaction timestamps and associated reference numbers. Payment method names referenced on the Platform — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are used for user familiarity. Named providers do not endorse z88h and are not affiliated with us.

3.4 Technical & Device Data

We automatically collect certain technical information when you access the Platform:

• IP address and approximate geolocation derived from it
• Device type, operating system and browser version
• Unique device identifiers
• Session start and end timestamps
• Pages visited, features used and click-path data

3.5 Communications Data

If you contact our support team by email or live chat, we retain records of those communications, including the content of messages, timestamps and the support agent's responses. This helps us resolve disputes, improve service quality and maintain a record of commitments made.

3.6 Responsible Gambling Data

Where you voluntarily use responsible gambling tools — such as setting deposit limits, requesting a cooling-off period or initiating self-exclusion — we record those elections and the corresponding dates. This data is processed to fulfil our duty of care and is treated with heightened sensitivity.

4 Legal Basis for Processing

z88h processes your Personal Data on the following legal bases, as recognised under applicable data protection law in the operator's license jurisdiction:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, bet settlement, deposit and withdrawal processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and our license conditions — including KYC identity verification, AML transaction monitoring and regulatory reporting.
• Legitimate Interests: Processing necessary for z88h's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, service analytics and responsible gambling monitoring.
• Consent: Processing based on your freely given, specific and informed consent — primarily for direct marketing communications, non-essential cookies and optional platform personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 How We Use Your Data

z88h uses your Personal Data strictly for the purposes described in this Policy. Specifically, we use your data to:

• Create and manage your account, verify your identity and maintain account security.
• Process deposits, bets, withdrawals and any other financial transactions on the Platform.
• Fulfil our KYC and AML obligations under applicable law and our license conditions.
• Detect, investigate and prevent fraudulent activity, cheating, multi-accounting and other prohibited conduct.
• Personalise your Platform experience, including displaying relevant sports markets (such as Pakistan cricket, PSL/T20 and ICC tournament markets) and promotions based on your activity.
• Send transactional communications — such as deposit confirmations, withdrawal notifications and security alerts — which are necessary for platform operation.
• Send marketing communications (only where you have provided consent and have not subsequently opted out).
• Enforce our Terms & Conditions and resolve disputes.
• Comply with self-exclusion and responsible gambling obligations.
• Conduct internal analytics to improve Platform performance, UI/UX and product offering.
• Meet any reporting obligations to regulatory or law enforcement authorities as legally required.

6 Data Sharing & Disclosure

6.1 Third-Party Service Providers

We share Personal Data with carefully selected third-party Data Processors who assist us in operating the Platform. These include:

• Payment processors — to facilitate deposit and withdrawal transactions.
• KYC and identity verification providers — to verify your identity and age in compliance with our license obligations.
• Fraud prevention and AML screening services — to detect and prevent financial crime.
• Cloud infrastructure and hosting providers — to store and serve Platform data securely.
• Customer support platform providers — to manage live chat and email communications.
• Analytics providers — to analyse Platform usage patterns in aggregated and anonymised form.

All third-party Data Processors are bound by written data processing agreements and are contractually prohibited from using your data for their own independent purposes.

6.2 Regulatory & Legal Disclosure

We may be required to disclose Personal Data to regulatory authorities, licensing bodies, law enforcement agencies or courts where legally compelled to do so. We will notify you of such disclosures where we are legally permitted.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets or corporate restructuring, Personal Data held by z88h may be transferred to a successor entity. We will notify affected users via the Platform or registered email address before any such transfer takes effect, and the successor will be bound by the terms of this Policy or an equivalent.

6.4 What We Do Not Do

7 International Data Transfers

The z88h Platform is operated by an entity licensed outside Pakistan. As a result, your Personal Data may be transferred to and processed in countries other than your country of residence, including the operator's license jurisdiction and the jurisdictions in which our third-party service providers operate.

Where we transfer Personal Data internationally, we ensure appropriate safeguards are in place, which may include:

• Transfers to countries recognised as providing an adequate level of data protection under applicable law;
• Standard contractual clauses approved by the relevant data protection authority in the operator's license jurisdiction;
• Binding corporate rules where transfers are within a corporate group.

8 Data Retention

z88h retains your Personal Data for as long as necessary to fulfil the purposes described in this Policy and to meet our legal and regulatory obligations. The following retention periods apply as a minimum:

After the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for aggregate analytics purposes.

9 Security Measures

z88h implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, destruction or alteration. These include:

• Encryption in transit: All data exchanged between your browser or device and our servers is encrypted using TLS (Transport Layer Security) protocol.
• Encryption at rest: Sensitive data stored on our servers is encrypted using AES-256 encryption standards.
• Access controls: Access to Personal Data is restricted to z88h personnel and processors who have a legitimate operational need. All access is logged and auditable.
• Multi-factor authentication: Administrative access to systems containing Personal Data requires multi-factor authentication.
• Regular security audits: We conduct periodic penetration testing and security reviews of our Platform infrastructure.
• Incident response: We maintain a data breach response procedure. Where a breach poses a risk to your rights and freedoms, we will notify you and the relevant authority within the timeframe required by applicable law.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the Platform. They allow us to recognise your browser, maintain your login session, remember your preferences and gather usage analytics.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled. They manage your login session, maintain your bet slip state and enable security features.
• Analytical / Performance Cookies: Help us understand how users interact with the Platform — which pages are most visited, where errors occur, and how performance can be improved. Data is collected in aggregated form where possible.
• Functional Cookies: Remember your preferences such as language settings, currency display and notification preferences to improve your experience.
• Marketing Cookies: Used only where you have provided consent to receive personalised promotions. These track your browsing within the Platform to serve relevant offers. They are not used to track your activity on third-party websites.

10.3 Managing Cookies

You can manage cookie preferences through the cookie consent banner displayed on your first visit to the Platform. You can also control cookies through your browser settings. Note that disabling strictly necessary cookies will impair core Platform functionality, including the ability to log in and place bets.

10.4 Do Not Track

Some browsers transmit "Do Not Track" signals. The Platform does not currently alter its data collection practices in response to such signals, as there is no universally accepted technical standard for doing so. We rely on the cookie consent mechanism described above for user preference management.

11 Your Rights

Depending on applicable data protection law in the operator's license jurisdiction and, separately, any applicable rights under Pakistani law as it develops, you may be entitled to exercise the following rights in relation to your Personal Data:

• Right of Access: Request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete Personal Data. You can update basic account details directly from your Account Settings page.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we cannot delete data we are legally required to retain (e.g., AML records).
• Right to Restriction: Request that we restrict processing of your data while a correction or objection request is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, request a copy of your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, including profiling for direct marketing purposes. We will stop that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the operator's license jurisdiction.

12 Minors & Age Policy

z88h is strictly an adults-only platform. We do not knowingly collect Personal Data from any individual under the age of 18, or the higher minimum age required by the operator's license jurisdiction. Age verification is a mandatory step in our KYC process.

If we discover that Personal Data has been collected from a minor, we will:

• Immediately close the account;
• Securely delete the minor's Personal Data to the extent permitted by law;
• Return any deposited funds to the source payment method.

13 Pakistan-Specific Notice

z88h serves users located in Pakistan through an English-language platform. Pakistani users should be aware of the following specific points regarding their privacy and legal position:

• z88h does not hold a gambling license issued by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any provincial authority.
• Pakistani data protection law is still developing. The Personal Data Protection Bill (PDPB), if enacted, would establish rights for Pakistani data subjects. z88h will review its practices in light of any enacted legislation.
• Your Personal Data is processed primarily in the operator's license jurisdiction outside Pakistan. By registering, you acknowledge this cross-border transfer.
• Payment method names referenced in connection with your account — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are used for familiarity only. These institutions do not endorse z88h and are not responsible for any data processing conducted by z88h.
• z88h does not share user data with Pakistani governmental authorities except where compelled by a valid legal order.

14 Policy Amendments

z88h reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices or the structure of our business. The most current version of this Policy will always be accessible at z88h.cam/privacy-policy.

Where amendments are material — meaning they significantly affect how your data is processed or your rights in relation to it — we will notify you via the Platform notification system or by email to your registered address at least fourteen (14) days before the changes take effect.

Continued use of the Platform after the stated effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the amended Policy, you must close your account before the effective date of the changes.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact z88h using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available directly on the Platform during operational hours
• Response Time: We aim to acknowledge all privacy-related enquiries within 72 hours and provide a full response within 30 calendar days
• Language: English-language support; Urdu-language assistance may be available on request

For urgent matters — such as suspected unauthorised account access or a potential data breach — please mark your message "Urgent — Security" for prioritised handling.