Who This Policy Covers. This Privacy Policy applies to all users of ZH88 — whether you are a registered player, a visitor browsing the website or someone interacting with ZH88's customer support. "ZH88", "we", "us" and "our" refer to the operator of zh88.world. "You" means any individual whose personal data is processed under this policy. By using ZH88, you confirm that you have read and understood how your data is handled as described here.
1. About This Privacy Policy
At ZH88, we understand that for Pakistani players handing over personal information to an online platform, trust is everything. You're sharing your name, your CNIC details, your mobile number and your financial data — the kind of information you'd normally only share with your bank or a government office. We don't take that trust lightly.
This Privacy Policy is designed to be the clearest, most honest description of how ZH88 handles your personal data. We've deliberately avoided dense legal language because we believe that if you can't understand a privacy policy easily, it isn't really serving its purpose. If anything in this document is unclear, please contact our support team and we'll explain it to you personally.
This policy applies to all data processing activities carried out by ZH88 in connection with the zh88.world platform, including account registration, payments, gameplay, customer support interactions and marketing communications. It should be read alongside our Terms and Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to how ZH88 operates.
ZH88 is used primarily by players in Pakistan. Where this policy refers to applicable law or regulatory requirements, these include relevant international data protection standards that ZH88 voluntarily applies to protect Pakistani players, regardless of where our servers are located.
2. What Personal Data ZH88 Collects
ZH88 collects only the personal data that is genuinely necessary to provide you with a safe, functional and enjoyable gaming experience. We don't collect data for the sake of it. Here is a transparent breakdown of the categories of data ZH88 may hold about you:
ZH88 does not collect sensitive personal data beyond what is listed above. We do not collect biometric data, health information or politically sensitive data.
3. How ZH88 Collects Your Data
ZH88 collects your personal data through several channels, all of which you either initiate or consent to as part of using the platform:
- Direct Collection: When you register a ZH88 account, you provide your name, mobile number, date of birth and email address directly. When you make a deposit or request a withdrawal, you provide financial details. When you contact ZH88 support, the conversation is recorded.
- Automated Technical Collection: When you visit zh88.world, our servers automatically collect technical data including your IP address, browser type, device model and session duration. This happens whether or not you are logged in to ZH88.
- Cookies and Similar Technologies: ZH88 uses cookies and similar tracking technologies to maintain your logged-in session, remember your preferences and understand how players navigate the platform. See Section 7 for full details on ZH88's cookie practices.
- Third-Party Sources: In some cases, ZH88 may receive information about you from third-party payment processors (such as Easypaisa or JazzCash) to verify payment details, or from fraud detection services that help ZH88 identify suspicious account activity.
- Identity Verification Partners: When you complete KYC verification, ZH88 may work with licensed identity verification providers who independently confirm the authenticity of the documents you submit.
ZH88 never purchases personal data lists from third-party data brokers, and we never collect data about you from social media platforms without your explicit consent.
4. How ZH88 Uses Your Personal Data
ZH88 uses your data to deliver, improve and protect our services. Every data use at ZH88 is tied to a specific, legitimate purpose. Here is a complete list of how ZH88 uses personal data collected from Pakistani players:
- Account Management: Verifying your identity, maintaining your ZH88 account, processing login and session management, and enabling you to use all ZH88 platform features.
- Payment Processing: Handling your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank transfers and Visa/Mastercard, and maintaining the transaction records required for regulatory compliance.
- KYC and Age Verification: Confirming that you meet the 18+ age requirement and verifying your identity as required by our operating licence obligations. ZH88 takes its responsibility to prevent underage gaming seriously.
- Customer Support: Responding to your queries, processing complaints and disputes, and using conversation records to improve the quality of ZH88's support services.
- Fraud Prevention and Security: Monitoring for account takeovers, unusual betting patterns, money laundering indicators and other suspicious activities that could harm you or other ZH88 players.
- Responsible Gaming: Monitoring your gameplay patterns to identify indicators of problematic gaming behaviour, enabling ZH88 to proactively reach out with support information or apply account restrictions where necessary.
- Marketing Communications: Sending you information about ZH88 promotions, bonuses and new games — but only if you have opted in to receive such communications. You can unsubscribe at any time.
- Platform Improvement: Analysing aggregated, anonymised data about how Pakistani players use ZH88 to identify improvements to the user interface, game selection and payment flows.
- Legal and Regulatory Compliance: Maintaining records required by our gaming licence, responding to lawful requests from regulatory or law enforcement authorities and defending ZH88's legal position when required.
5. Legal Basis for Processing
ZH88 processes your personal data based on one or more of the following recognised legal grounds for each activity:
- Performance of a Contract: Most data processing at ZH88 is necessary to fulfil our contractual obligations to you as a ZH88 player — delivering the service you registered for. This includes processing your bets, handling your payments and managing your account.
- Legal Obligation: Some processing — particularly KYC identity verification, anti-money-laundering checks and record retention — is required by the regulations under which ZH88 operates. ZH88 cannot provide services without meeting these obligations.
- Legitimate Interests: ZH88 uses certain data — such as technical device data for fraud prevention, or aggregated gameplay data for platform improvement — based on legitimate business interests. In each case, ZH88 has assessed that these interests do not override your privacy rights.
- Consent: For marketing communications and non-essential cookies, ZH88 relies on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
If you want to know the specific legal basis for any particular data processing activity at ZH88, you can contact our support team and we will provide a clear explanation within a reasonable timeframe.
6. Who ZH88 Shares Your Data With
ZH88 does not sell your personal data to anyone. Full stop. However, to operate the platform effectively and legally, ZH88 shares data with a limited number of carefully selected third parties under strict contractual data protection obligations. Here is a complete picture of who those parties are and why data is shared with them:
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the financial data necessary to process your specific deposit or withdrawal. Each payment partner operates under their own privacy policy and regulatory obligations.
- Identity Verification Providers: Licensed KYC partners receive copies of identity documents you submit to ZH88 for verification purposes. These partners are contractually prohibited from using your documents for any purpose other than completing the ZH88 verification check.
- Game Providers: When you play a game from a ZH88 provider such as Pragmatic Play or Spribe, certain session data is processed by that provider's servers to run the game. Game providers do not receive your financial data, CNIC details or contact information.
- Fraud Prevention and Security Services: ZH88 uses specialist security partners who receive technical device and behavioural data to help identify potential fraud, account takeovers and money laundering activity.
- Regulatory and Law Enforcement Authorities: ZH88 will disclose personal data to regulatory bodies or law enforcement agencies when lawfully required to do so — for example, in response to a valid court order or regulatory investigation. ZH88 cannot and will not resist lawful disclosure requests.
- Professional Advisors: ZH88's lawyers, auditors and accountants may access certain data as necessary to provide professional services. All professional advisors operate under strict confidentiality obligations.
ZH88 requires all third-party processors to maintain data security standards equivalent to or exceeding those applied by ZH88 itself. Contracts with all processors include binding data protection clauses. ZH88 reviews third-party compliance on a regular basis.
7. Cookies & Tracking Technologies
ZH88 uses cookies and similar tracking technologies on zh88.world. A cookie is a small text file stored on your device when you visit a website. ZH88's cookies fall into the following categories:
Most browsers allow you to control cookies through their settings. You can delete existing cookies and configure your browser to reject future cookies. However, disabling strictly necessary cookies may prevent ZH88 from functioning correctly. ZH88's cookie settings can also be managed through the cookie preference centre accessible via the link in our website footer.
8. How ZH88 Keeps Your Data Secure
Data security at ZH88 is not an afterthought — it is a core design requirement of the platform. ZH88 has implemented the following technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or disclosure:
- Transport Layer Security (TLS): All data transmitted between your device and ZH88's servers is encrypted using TLS 1.3. The padlock icon in your browser address bar confirms this encryption is active.
- AES-256 Data Encryption at Rest: Personal data stored in ZH88's databases — including your identity documents and financial records — is encrypted using AES-256, the same standard used by banks and government agencies worldwide.
- Access Controls: Only authorised ZH88 staff with a genuine operational need can access personal player data. Access is logged, monitored and reviewed regularly. No employee has blanket access to all player data.
- Multi-Factor Authentication: Internal ZH88 systems that store personal data require multi-factor authentication for staff access. This prevents unauthorised access even if login credentials are compromised.
- Penetration Testing: ZH88 commissions independent security experts to conduct regular penetration testing of our platform, identifying and fixing vulnerabilities before they can be exploited.
- Incident Response Plan: ZH88 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, ZH88 will notify affected players promptly and take immediate remedial action.
No online system can guarantee absolute security. However, ZH88's security infrastructure is designed to meet and exceed the standards expected of a licensed gaming operator. Your security is one of our most important operational priorities.
9. How Long ZH88 Keeps Your Data
ZH88 does not hold your personal data indefinitely. Retention periods are determined by the purpose for which the data was collected and by applicable legal or regulatory requirements:
- Account and Identity Data: Retained for the duration of your active ZH88 account plus a minimum of 5 years following account closure, as required by anti-money-laundering regulations applicable to licensed gaming operators.
- Financial Transaction Records: Deposits, withdrawals and bonus transaction records are retained for a minimum of 7 years to meet financial record-keeping obligations under ZH88's operating licence.
- Gameplay Records: Bet history and game session logs are retained for a minimum of 3 years for dispute resolution, responsible gaming monitoring and regulatory audit purposes.
- Support Communication Records: Customer support chat logs and email correspondence are retained for 2 years from the date of the last interaction, unless related to an unresolved dispute.
- Technical and Device Data: IP logs and device access records are retained for 12 months for security and fraud prevention purposes.
- Marketing Preferences: Records of your marketing consent or opt-out are retained indefinitely to ensure ZH88 continues to honour your choices, even if you later delete your account.
When data is no longer required, ZH88 securely destroys or permanently anonymises it. Secure destruction for digital data involves overwriting procedures that prevent recovery. ZH88 conducts regular data audits to ensure unnecessary data is deleted on schedule.
10. Your Data Rights at ZH88
You have a range of rights over the personal data ZH88 holds about you. These are not theoretical — you can exercise any of these rights by contacting ZH88 support directly, and we will respond within a reasonable timeframe, typically 30 days or fewer:
You can request a copy of all personal data ZH88 holds about you. ZH88 will provide this in a clear, readable format. This is sometimes called a "Subject Access Request" (SAR).
If any personal data ZH88 holds about you is inaccurate or incomplete, you have the right to have it corrected. For account details you can update yourself, log in to your ZH88 account — for identity data, contact support.
In certain circumstances, you have the right to request that ZH88 deletes your personal data. Note that ZH88 cannot delete data it is legally required to retain (such as financial records). ZH88 will explain specifically what can and cannot be deleted when you make a request.
You can ask ZH88 to pause processing of your data in certain circumstances — for example, while you contest the accuracy of the data or while a legitimate interests assessment is under review.
For data you have provided to ZH88 directly and which is processed based on your consent or contract, you can request that ZH88 provides it in a machine-readable format (such as CSV) that you can transfer to another service.
Where ZH88 processes your data based on consent — such as for marketing emails — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal date.
You have the right to object to ZH88 processing your data based on legitimate interests. ZH88 will stop processing unless it can demonstrate compelling legitimate grounds that override your interests.
11. Children's Privacy
ZH88 is strictly an 18+ platform. We do not knowingly collect, process or retain personal data from individuals under the age of 18. Age verification is a mandatory step in the ZH88 registration process, and we conduct additional KYC checks that confirm players meet the minimum age requirement.
If ZH88 discovers — through KYC review, complaint or any other means — that a registered account belongs to a person under 18, we will immediately close the account, return any deposited funds and permanently delete all personal data associated with that account. Where required by law, ZH88 may report the attempted access by a minor to the relevant authorities.
Parents and guardians who believe a minor may have accessed ZH88 should contact our support team immediately at support@zh88.world. We treat all such reports as urgent and will respond within 24 hours.
12. Updates to This Privacy Policy
ZH88 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable regulations or improvements in how we explain our processes. When we make material changes to this policy, we will:
- Update the "Effective" date at the top of the page.
- Display a notice on the ZH88 platform informing logged-in players of the update.
- For significant changes that affect your data rights, send a direct notification to your registered email address.
We encourage you to visit this page periodically even without a prompt, so you are always familiar with how ZH88 handles your data. Your continued use of ZH88 following a policy update constitutes your acceptance of the revised terms. If you do not agree with an update, you should close your ZH88 account before the update takes effect.
The version of this Privacy Policy published at zh88.world/privacy-policy is always the current version. Previous versions are available upon written request to ZH88 support.
13. Contact ZH88 About Your Privacy
Your privacy matters to us. If you have any questions about this Privacy Policy, want to exercise any of your data rights, have a concern about how ZH88 has handled your personal data, or want to report a potential data breach or underage access, please get in touch with our team directly.
Data Privacy Contact: support@zh88.world
When contacting ZH88 about a privacy matter, please include your registered username or email address and a clear description of your request or concern. ZH88 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days. Where a request is complex or involves extensive data retrieval, we may require up to 90 days and will notify you accordingly.
ZH88 takes all privacy complaints seriously. If you are not satisfied with ZH88's response to a privacy concern, you may escalate the matter to the data protection authority relevant to ZH88's operating jurisdiction. Contact details for such authorities are available on request.