Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out the basis on which zs888 ("zs888", "we", "us", "our"), operating the online gaming and sports betting platform at https://zs888.co, collects, processes, stores, and protects personal information provided by or collected from users ("you", "User", "Player") in connection with their use of the zs888 platform and associated services.

zs888 recognises the importance of privacy, particularly in the context of financial transactions and the sensitive personal data associated with online gaming accounts. This Policy is intended to be transparent and comprehensive in describing our data practices. We encourage you to read it fully and to contact us if you have any questions about how your data is handled.

2. Data Controller

zs888 acts as the data controller in respect of the personal data collected through the zs888 platform. As data controller, zs888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection queries, requests to exercise data subject rights, and privacy-related complaints should be directed to the zs888 Data Protection team via the contact details set out in Section 14 of this Policy.

3. Information We Collect

zs888 collects personal information in several ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and in some circumstances from third-party service providers. The categories of personal data we may collect include:

• Identity Data: Full name, date of birth, gender, and copies of identity documents such as your Computerised National Identity Card (CNIC) provided during KYC verification.
• Contact Data: Pakistani mobile number, email address (where provided), and postal address (where provided).
• Financial Data: Payment method details (JazzCash account number, Easypaisa account number, bank account details, card details masked in accordance with PCI-DSS standards), transaction history, deposit and withdrawal records.
• Account Data: Username, password (stored in encrypted form), account preferences, responsible gaming settings, self-exclusion elections, and account activity logs.
• Technical Data: IP address, device type and identifier, operating system, browser type and version, time zone, geographic location data derived from IP address, and platform access logs.
• Usage Data: Details of games played, bets placed, wager amounts, gaming session durations, bonus usage, and interaction with platform features.
• Communications Data: Records of your communications with zs888 customer support, including live chat transcripts and any written correspondence.

zs888 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information except where strictly required for responsible gaming compliance purposes and with your explicit consent.

4. How We Use Your Data

zs888 uses your personal data for the following purposes:

• To create, manage, and maintain your zs888 account and to authenticate your identity upon login.
• To process deposits and withdrawals and to verify the legitimacy of financial transactions in compliance with anti-money laundering ("AML") obligations.
• To conduct Know Your Customer ("KYC") and age verification checks as required by applicable regulatory standards and our own responsible gaming commitments.
• To provide, personalise, and improve the zs888 platform, including optimising game recommendations and promotional offers based on your usage history.
• To communicate with you regarding your account, including transactional notifications, security alerts, and responses to support queries.
• To send promotional communications where you have consented to receiving such communications. You may withdraw consent to marketing communications at any time through your account notification settings.
• To comply with legal and regulatory obligations, including responding to lawful requests from law enforcement or regulatory authorities.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other forms of prohibited conduct on the platform.
• To administer responsible gaming programmes, including enforcing deposit limits, session time controls, and self-exclusion requests.

5. Legal Basis for Processing

zs888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — namely, to operate your account, process payments, and deliver gaming services.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, and other applicable laws.
• Legitimate interests: Processing conducted in pursuit of zs888's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications and certain responsible gaming data processing activities.

6. Data Sharing & Disclosure

zs888 does not sell your personal data to any third party. We may share your personal data with third parties only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and card scheme operators, to process your financial transactions. These parties act as independent data controllers in respect of transaction data.
• Identity verification providers: Third-party KYC and age verification service providers engaged by zs888 to perform identity checks required for regulatory compliance.
• Technology and infrastructure providers: Cloud hosting providers, content delivery networks, cybersecurity vendors, and game content licensors who support the operation of the zs888 platform. Such providers operate under contractual data processing agreements obligating them to protect your data.
• Regulatory and law enforcement authorities: Where zs888 is required by law, court order, or regulatory direction to disclose personal data. zs888 will notify affected users of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of zs888's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that may result.

7. Cookies & Tracking Technologies

The zs888 platform uses cookies and similar tracking technologies to enhance your experience, maintain session integrity, and gather analytical data about platform usage. The types of cookies used by zs888 include:

• Essential cookies: Required for the operation of the platform, including session management and authentication. These cannot be disabled without impacting core functionality.
• Analytical cookies: Used to collect aggregate usage statistics that help zs888 understand how users interact with the platform and to identify areas for improvement.
• Preference cookies: Used to remember your account settings and display preferences across sessions.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of some features of the zs888 platform.

8. Data Retention

zs888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. In practice, this means:

• Account data and gaming records are retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for a minimum of two (2) years.
• KYC and identity verification documents are retained for a minimum of five (5) years following the end of the business relationship.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual user.

9. Data Security

zs888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Security measures deployed by zs888 include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zs888 platform.
• Encrypted storage of passwords using industry-standard hashing algorithms — zs888 does not store passwords in plaintext under any circumstances.
• SMS-based two-factor authentication for account login and sensitive account changes.
• Role-based access controls limiting zs888 staff access to personal data on a strict need-to-know basis.
• Regular penetration testing and security audits conducted by qualified third-party security professionals.
• Real-time fraud detection and account monitoring systems designed to detect and respond to suspicious activity promptly.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, zs888 will notify affected users without undue delay.

10. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by zs888:

• Right of access: You may request a copy of the personal data zs888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to zs888's legal retention obligations.
• Right to restriction of processing: You may request that zs888 restrict processing of your data in certain circumstances.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a machine-readable copy of your personal data.
• Right to object: You may object to processing of your personal data where such processing is based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the zs888 Data Protection team using the details in Section 14. zs888 will respond to all valid requests within thirty (30) days.

11. Children's Privacy

The zs888 platform is strictly intended for adults aged 18 years and above. zs888 does not knowingly collect or process personal data from any individual under the age of 18. If zs888 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account closed. Parents or guardians who believe a child may have registered on the zs888 platform should contact us immediately using the details in Section 14.

12. Third-Party Services

The zs888 platform integrates third-party services, including payment gateways (JazzCash, Easypaisa, banking partners) and game content providers. These third-party services operate under their own privacy policies and data processing terms. zs888 is not responsible for the privacy practices of third-party service providers, though we do require, through contractual obligations, that all processors maintain appropriate data protection standards compatible with our own obligations under this Policy.

13. Changes to This Privacy Policy

zs888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Material changes will be communicated to registered users via the registered mobile number or through a prominent notice on the zs888 platform. The date of the most recent revision is displayed at the top of this Policy. Continued use of the zs888 platform following publication of a revised Privacy Policy constitutes your acceptance of the revised terms.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or zs888's data processing practices, please contact our Data Protection team via the live chat function available 24/7 within the zs888 platform, or by writing to us at: [email protected] (plain text — not a clickable link). zs888 aims to acknowledge all data protection correspondence within 5 business days and to provide a substantive response within 30 calendar days.