Privacy Policy – How z88h Handles Your Personal Data

This Privacy Policy ("Policy") is published by z88h ("the Platform", "we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to users ("you", "User") who access or use the z88h platform at z88h.net, including all subdomains, mobile-optimised interfaces, and associated services.

This Policy applies to all z88h users, including registered account holders, visitors who browse without registering, and individuals who communicate with z88h through customer support channels. By accessing the z88h platform or creating an account, you acknowledge that you have read and understood this Privacy Policy.

z88h is committed to handling your personal information in a manner that is lawful, fair, and transparent. This Policy is written in plain English so that users across Pakistan — whether in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else — can clearly understand how their data is managed.

For the purposes of applicable data protection legislation, z88h acts as the data controller in respect of personal data collected from users of the platform. As data controller, z88h determines the purposes and means by which your personal data is processed.

All enquiries relating to data protection, privacy rights, or this Policy should be directed to z88h's designated support team using the contact information provided in Section 15 of this Policy. z88h will respond to all written data-related requests within 30 calendar days of receipt.

z88h collects personal data in the following categories, depending on your level of interaction with the platform:

z88h collects personal data through the following channels and mechanisms:

• Direct Collection: Information you provide when creating a z88h account, completing identity verification, submitting a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Collection: Technical data collected automatically as you navigate the z88h platform, including via server logs, session management systems, and analytics tools that record device and browser information.
• Payment Providers: Confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors when a transaction is initiated or completed.
• Identity Verification Partners: Verification outcomes and identity confirmation data received from third-party KYC service providers engaged by z88h to fulfil its regulatory compliance obligations.
• Cookies and Tracking Technologies: Data collected through cookies and similar technologies as described in Section 8 of this Policy.

z88h processes your personal data only where a lawful basis exists for doing so. The following table summarises the principal purposes for which z88h processes personal data and the corresponding legal basis for each:

Where z88h relies on your consent as the legal basis for processing — for example, for marketing communications — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting customer support.

z88h does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, z88h may share your personal data with the following categories of third parties where necessary to operate the platform and fulfil its legal obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency network providers receive the minimum personal and financial data required to process your transactions. These providers operate under their own privacy policies and applicable financial regulations.
• Identity Verification Providers: KYC and age verification service providers receive identity documents and personal information solely for the purpose of verifying account holder eligibility and meeting regulatory requirements.
• Game Studios: Licensed game providers such as Pragmatic Play, PG Soft, and Evolution Gaming may receive anonymised session and gameplay data to deliver their game services. No personally identifiable information is shared with game studios beyond what is technically necessary for game session management.
• IT and Infrastructure Providers: Hosting, cloud infrastructure, and security service providers who process data on z88h's behalf under data processing agreements that require them to maintain confidentiality and security.
• Regulatory and Law Enforcement Authorities: z88h will disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, regulation, or judicial order.
• Fraud Prevention Services: Specialist fraud detection and prevention providers who assist z88h in identifying and responding to suspicious account activity, money laundering risks, and platform abuse.

z88h takes particular care in handling financial information. Given that the platform serves Pakistani users through local payment channels including JazzCash, EasyPaisa, and bank transfers via HBL, UBL, and Meezan Bank, the following specific provisions apply to financial data:

• Full payment account credentials (mobile wallet PINs, internet banking passwords, card CVVs) are never transmitted to or stored by z88h. All payment authentication occurs within the secure environment of the respective payment provider.
• z88h retains a record of transaction amounts, dates, transaction reference numbers, and the payment method type for audit, fraud prevention, and responsible gaming monitoring purposes.
• Cryptocurrency transactions (BTC, USDT) are recorded with wallet addresses and transaction hash values for verification and compliance purposes. These are treated as financial data under this Policy.
• Financial data used for withdrawal processing is verified against the identity information held on your account to prevent unauthorised third-party withdrawals.

In the event that z88h is required to report suspicious financial transactions to relevant anti-money laundering authorities, z88h will do so in accordance with its legal obligations without being required to notify the account holder in advance.

z88h uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit z88h. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly and cannot be disabled. They manage user sessions, maintain login state, and enable core security features. No personal data is processed by these cookies for purposes other than session management.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming limits you have configured — to provide a more personalised experience.
• Analytical Cookies: z88h uses anonymised analytics to understand how users navigate the platform, which pages are visited most frequently, and where technical issues occur. This data is used solely to improve platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and account compromise attempts. These cookies are essential for maintaining platform integrity.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the z88h platform.

z88h implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption in Transit: All data transmitted between your device and z88h servers is encrypted using 256-bit SSL/TLS encryption. This applies to all platform interactions including login, deposits, withdrawals, and customer support sessions.
• Encryption at Rest: Sensitive stored data including passwords, payment account references, and identity documents are encrypted using industry-standard algorithms at the storage level.
• Password Security: User passwords are hashed using a strong one-way hashing algorithm with individual salt values. z88h staff cannot view your password and will never ask you to provide it through any channel.
• Access Controls: Access to systems holding personal data is restricted to authorised z88h personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Infrastructure Security: z88h's platform infrastructure is hosted in secure data centres with physical access controls, environmental protections, and 24/7 monitoring.
• Incident Response: z88h maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, z88h will notify affected users in accordance with applicable legal requirements.

z88h retains personal data for the period necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following retention guidelines apply:

• Active Account Data: Personal and account data is retained for the duration of your registered account with z88h and for a period of five (5) years following account closure, to meet anti-money laundering and regulatory record-keeping obligations.
• Transaction Records: Financial transaction records including deposit and withdrawal history are retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
• KYC and Identity Documents: Identity verification documents are retained for the period required by applicable regulations and for as long as z88h is obligated to demonstrate compliance with age and identity verification requirements.
• Customer Support Records: Communications with customer support are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Anonymised Analytics Data: Anonymised, aggregated usage data from which individual users cannot be identified may be retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous in accordance with z88h's data destruction procedures.

Subject to applicable law, z88h users have the following rights in relation to their personal data. These rights may be exercised by contacting z88h using the details in Section 15:

• Right of Access: You have the right to request a copy of the personal data z88h holds about you and to receive information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by z88h be corrected or completed without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to z88h's legal retention obligations.
• Right to Restriction of Processing: You may request that z88h restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where z88h relies on legitimate interest as the legal basis, including for marketing communications you have previously opted into.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The z88h platform is strictly intended for users who are 21 years of age or older. z88h does not knowingly collect personal data from persons under the age of 21 and does not permit minors to register or use the platform in any capacity.

z88h employs age verification procedures during the registration process and may require documentary proof of age at any time. If z88h becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated personal data will be securely deleted to the extent permitted by applicable law, and any funds held in the account will be returned to the source payment method.

If you are a parent or guardian and believe that your child has created a z88h account or provided personal information to z88h, please contact us immediately at the details provided in Section 15.

z88h operates as an international platform and your personal data may be processed by z88h systems or third-party service providers located outside of Pakistan. Where personal data is transferred to a country that may not provide the same level of data protection as Pakistan's legal framework, z88h implements appropriate safeguards to protect your information, including:

• Entering into data processing agreements with third-party processors that incorporate internationally recognised contractual data protection clauses;
• Conducting due diligence on the data security practices and certifications held by recipients of personal data;
• Limiting the scope of data transferred internationally to the minimum necessary for the processing purpose.

By using the z88h platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan for the purposes described in this Policy.

z88h reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent update is displayed at the top of this page.

Where changes to this Policy are material — meaning they significantly affect how your personal data is processed or your rights in relation to that data — z88h will provide notice to registered users via email or an in-platform notification prior to the updated Policy taking effect. For non-material changes, the updated Policy will simply be published on this page with a revised effective date.

We encourage you to review this Privacy Policy periodically to remain informed about how z88h manages your personal information. Continued use of the z88h platform following the publication of an updated Policy constitutes your acknowledgement of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data z88h holds about you, or the exercise of any of your data protection rights, please contact us through the following channels:

Email: [email protected] (plain text — not a clickable link)

Live Chat: Available 24/7 through the chat widget in your logged-in z88h account. Our support team operates in both English and Urdu and can assist with privacy-related queries, data access requests, and account security concerns.

z88h is committed to resolving all privacy-related communications professionally, fairly, and within the timescales stated in this Policy. For urgent matters relating to account security or suspected data breaches, live chat is the recommended contact method.